yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy Note 4 General] DrPhant0m:
I've got a Note 4 Developer Edition on Verizon, as well as a blacklisted US Cellular Note 4 (that's a long story, but I turned the tables on a con man and got it for free after filing a complaint on Amazon).

I've got my aboot file on my Google Drive. I'm very interested in getting perm root / bootloader unlock on the retail Note 4 so that I can pick one up for my wife to replace her Note 3.

So, this will only help to unlock devices that have/had a developer edition? What about phones that have an unlocked variant? (Like on T-Mobile or US Cellular?)

PM me for info, and I'll give you hangouts info to discuss. Good luck, and I'm happy to help!
[Verizon Galaxy Note 4 General] EdrickMG:
I belive he needs two things aboot image and your CID but don't publish it away, thanks you are helping all of us who has a retail one...
[Verizon Galaxy Note 4 General] DrPhant0m:
I'm currently flashing a new install of CM13 on my dev edition, but I can generate the CID soon with some instructions. I sent [MENTION=5848265]npjohnson[/MENTION] a hangouts message asking how I can help, and he may send me some info tonight to test.

I'm anxious to contribute!
[Verizon Galaxy Note 4 General] gersrt:
This sounds promising. I was going to sell my Verizon this week on fleebay at get an international version. If this works we could all have dev devices. Best of luck
[Verizon Galaxy Note 4 General] elliwigy:
to my knowledge they need info from a dev device which att doesnt have so seems youre out of luck atm
[Verizon Galaxy Note 4 General] jocarog:
Yeah but worth a shot testing, I read the paper, like I said nothing to lose if I brick it permanently...
[Verizon Galaxy Note 4 General] freduser:
Huge thanks for working on this... unfortunately I have the retail edition so I am anxiously waiting to see what happens.
[Verizon Galaxy Note 4 General] hsbadr:
Important Notes

I've checked SamsungCID source code and it looks good to me as far as

it actually changes the device CID

to match a Developer Edition. This should allow flashing a Developer Bootloader via Odin, which is unlocked :good:

However, there may be some unknown consequences if Samsung or Android uses the device CID for other security or identification checks. Though, you should be able to restore your original CID if needed. So, the

1st step

here is to backup your original CID.

Assuming that the process is safe for this specific device, I hope the attached binary will actually change the CID. The

2nd step

is to check that the CID has been successfuly changed after a reboot. For the Note 4, would dm-verity, write protection, or SELinux block this function?!

Finally

, time comes to use a CID from a Developer device and flash its bootloader

via Odin

. This is another critical step, especially if you have an incremented bootloader. So, you should flash a bootloader combatible with your current critical partitions (TrustZone, RPM, SBL, ... etc). This isn't a problem for those who were using the Safe Upgrade. Flashing incorrect bootloader version may brick your device or just cause a flashing failure in Odin (version check failure).

From the published PDF document:

I've been warned and want to test it anyway:

Root your device

Download the attched file (samsung_cid.zip) in /sdcard

extract samsung_cid binary in /data/local/tmp

su
cd /data/local/tmp/
unzip /sdcard/samsung_cid.zip

Set executable permissions

chmod 0755 samsung_cid

Test the command and copy your original CID

./samsung_cid

This will print your old CID and complain about missing argument (new CID)

[+] CID at boot time is/was: [B][COLOR="Red"]15[/COLOR][/B]01xxxxxxxxxxxxxxxxxxxxxxxxx00
[-] RTFC!! ./samsung_cid [NEW_CID]

Note that the CID of Samsung eMMC starts with 15.

Now, change your CID

./samsung_cid [NEW_CID]

You need to replace [NEW_CID] with actual Developer Edition CID. However, this only makes sense if you confirmed that the CID was successfuly changed after a reboot.

I expect this will work fine for S5 and Note 3, but I'm afraid Note 4 has some

security measures

(dm-verity, write protection, SELinux, ... etc) that may block it. If anyone took the risk and confirmed that it works (CID changed), I could easily modify the code and make it a simple command (e.g., just ./samsung_cid) that changes all devices to a valid Developer CID + providing firmware packages that include different boorloaders specific to each version (here we've two incremented versions: KK up to OAF and after OAF).

Good luck!
[Verizon Galaxy Note 4 General] howellcp:
If we have a simple way to try, I'll go for it. I'm just not to skilled at what you stated needed to be done to find out.
[Verizon Galaxy Note 4 General] rrjskj:
Would it be possible if we had said root from team Yemen ??? Just asking out of curiosity..
[Verizon Galaxy Note 4 General] Rom-Addict:
,.............................................................
[Verizon Galaxy Note 4 General] jolly_roger_hook:
Not sure what I'm allowed to tell but I will say we got half done working on the other half so keep up hope the dev is busy today so no more information till tomorrow if time permits
[Verizon Galaxy Note 4 General] npjohnson:
No offence to all of you (truly, I mean no offence, just stating my opinion).

[MENTION=5868929]hsbadr[/MENTION] I didn't post these instructions because of posts like this, and the potential the uneducated reader has to brick :/
[Verizon Galaxy Note 4 General] elliwigy:
PM sent.. dont bother if you dont have time but your previous comments around a supercid got me thinking along the lines of using my device as a test dummy lol
[Verizon Galaxy Note 4 General] hsbadr:
FIrst of all, I wish you the best of luck!

Have you removed the zeros from the aboot dump?

If you could load unsigned kernel modules, you'll easily alter the device software and root it. The point is that this isn't a trivial task as you say ("shouldn't be too hard, we've done it on the S4 many times"), especially for the Note 4. The 1st obstacle would be the lack of devmem!

Not true! I own the Developer Edition of this device. Some users mistakenly took OTA update with incremented bootloader and they had to send their device to Samsung to restore re-unlock the bootloader. Note that their device is a Developer Edition with the original CID for their older bootloader, but version check failed in Odin!!! They did the same for the 1st LP OTA and it worked (restored unlcoked aboot backup via Odin) because the OAF bootloader isn't incremented

The author of SamsungCID has documented that he didn't do any research on the consequences. For example, is it OK for two devices to similtaneously report the same CID?! Since no one did this research before (the CID changer has just been released), we do not know. However, I agree that it may not harm the device.

My post is mainly warnings as its title is "Important Notes". The instructions and the binary are floating around in other threads at XDA without warnings! Moreover, looking at the code, the binary will check for Samsung eMMC, the correct command usage, and if the new CID is a valid one.
[Verizon Galaxy Note 4 General] jpcalhoun:
I don't know if you still need it, but I can provide an aboot dump. PM me and we can coordinate how to get that done.
[Verizon Galaxy Note 4 General] npjohnson:
Yes. The padded 0's are truncated, and the TAR is correctly made, and flashes on the actual developer addition associated with the CID.

My previous post was large, and maybe this got missed, but mass identical CID reporting HAS been tested quite thouroughly by the HTC community, who often use a superCID (111111) to change variants. I know that when HTC came out with GPE devices, there was a massive influx of people who converted to GPE, and all used the same CID to do so.

Sorry about the comment about not posting the instructions, I had just finished reading through my PM's about why we hadn't used that method yet. And other people doing stupid things like changing the CID to a TMO version and dd'ing their aboot (that guy perma-bricked, as he was on an LP FW with no SD Card unvrick ability).

As for the increment. Unless my S5 tester lied, he was able to downgrade out of increment on a developer edition S5. So, I apologize if that doesn't apply to the Note 4/I was I'll informed.

As for unsigned kernel modules... Samsung uses the same style of lkmauth address on all modern Samsung phones. The lkmauth address would take a nominal amount of time in IDA to find.

Your comment about devmem concerns me... Do you mean that the /dev/mem channel is closed and protected by some higher security measure, or...? If you just are referring to the devmem binary, that's easily built, and can be executed on partitions other than /system.

Even if /dev/mem is inaccessible, we can still use a kernel level exploit (like futex, or the recent one disclosed by KingRoot) to write to the memory as the kernel. As done by bypasslksm by Jeboo.
[Verizon Galaxy Note 4 General] hsbadr:
No problem at all! Just wanted help. It'd be great if owners of Note 4 Retail Edition get some love with customizing their devices. So, please let me know if you need any help!

Now, could you confirm that your testers have a compatible firmware before flashing the Developer Bootloader via Odin? Most Developer Devices come with KitKat bootloader. So, they won't flash on the latest Lollipop firmwares (after N910VVRU1BOAF).

Definitely, I mean /dev/mem. The same devs who did it before for S4 noticed this problem on the Note 4. I agree that kernel-level exploit may do the trick, but again it isn't a trivial task.
[Verizon Galaxy Note 4 General] happy2472:
Im so confused at this point ... i follow many threads on here for im the "geek" of alot of friends whose phones i root and mod with roms ... now with the retail verizon note 4 ... what point are we all at? I see so many descriptions and ideas cnd chatter ... are we close? We need testers? Devs? Im so ancy right now. This would be AMAZING to finally get root ... would make my day that much better because in a few hours i have my child custody hearing. Please let the sammy gods and all the devs and testers and everyone who has worked on this come through!!!! Id love to stick it to verizon for all their BS to lock us out of our phones.
[Verizon Galaxy Note 4 General] jolly_roger_hook:
All we can tell you is is being worked on we have a good shot but nothing is guaranteed just wait you will know as soon as we do we have some great devs working on it
[Verizon Galaxy Note 4 General] SirLaughsalot:
This thread right here is what I love about communities that are founded by the people; for the people. I can't thank the devs enough to be taking their precious time and resources out in order to make us all happy. Y'all have all the emotional support we can give, so stick it to them big companies' faces!

EDIT: I have an unlocked SM-910A, so if I'm ever needed, do not hesitate to ask. Thanks!
[Verizon Galaxy Note 4 General] nemopsp:
You mean SIM unlocked.. not Bootloader unlocked these are completely different things... all N910A models have locked bootloaders...

I wish the team Goodluck on N910V models and hopefully they can figure something out for N910A models.
[Verizon Galaxy Note 4 General] Ricovita:
I love you all.

Currently on AT&T's Samsung Galaxy Note 4 (901A), recently experiencing infrequent system crashes and severe lag.

Warranty expired, Contracts suck, I'm stuck with a dying phone and it's all Touchwiz's fault. When I saw that XDA had given up hope, my heart sank.

I'm a noob 18yr old with little coding experience, but I just spent 3 hours to fully understand every comment on this thread (love the Internet and Google Search).

Even if this leads to a dead end, even if this comment is cluttering or unnecessary, even if I'll have to live teenage years with a dying phone or $500 for a new one - I just NEED to say:

Thank you npjohnson, hsbadr and all you Devs. Though it may be terminal, this hope is bliss.

Good luck!
[Verizon Galaxy Note 4 General] howellcp:
If you haven't seen Fire Waters latest tweet, it looks like they have released a full unlock tool last night. Thanks to all of you working on this!
[Verizon Galaxy Note 4 General] kerfex:
Anybody tried?

Has aonyone tried this?
[Verizon Galaxy Note 4 General] happy2472:
I downloaded the zip file ... id test it if i knew how!!!!
[Verizon Galaxy Note 4 General] dracozny:
It's the same link that was posted in the thread earlier. they made updates to it within the last 30 minutes.

Edit: I just looked at the code. this has only been tested on the S5. this is the disclaimer directly from the unlock app
[Verizon Galaxy Note 4 General] howellcp:
To be clear I was not saying anyone should try it. I was just excited. Leave it to the guys that know what they are doing to come with a tool for our phones.
[Verizon Galaxy Note 4 General] dracozny:
I would hold off doing anything until one of the Devs in this thread tells you otherwise.
[Verizon Galaxy Note 4 General] happy2472:
True ... but damn im ancy to get root FINALLY!!!
[Verizon Galaxy Note 4 General] EdrickMG:
I'm not a developer but I belive it's the same that hsbadr already published, one thing is change CID other completely made a TAR file with a CID to match a dev to unlock bootloader, I will not rush to anything yet, I know we all are impatient but do something wrong will could result in a hard brick... We all have waited long time I want root.... Like right away but hey... I don't know the answer, They do so we could gamble with it or promise in bounty to donate once the method has been take it to a poke Yoke way that makes almost impossible to end up with a hard brick it's my two cents..
[Verizon Galaxy Note 4 General] kerfex:
It's a Race

I agree. So it looks like its a race for the bounty between these DEVS and the CDMA-Yemen guys. I really hope this works. I wish there was more I could do to help but alas, I am not a programmer. Good luck DEVS, we all appreciate your hard work!
[Verizon Galaxy Note 4 General] gersrt:
CDMA-Yemen had their chance, they could have received bounty but looks like they choose to keep it to themselves. If this works then they get nothing and cant even charge for their root method. Besides screw root lol!!!!! We could be on the verge of unlocked bootloader.
[Verizon Galaxy Note 4 General] happy2472:
Maybe I don't understand and I'd prefer comments that aren't so negative and insulting but what is the point of an unlocked bootloader if you don't have root?
[Verizon Galaxy Note 4 General] EdrickMG:
Technically you can't have a unlock bootloader without root, one write in kernel other just gain admin privileges but kernel remain intact, and it's nobody fault anyone whoever who is able to help with root exploit or unlock bootloader are great for me... One give you xposed modules other give you possibility to write in kernel to have customs roms both are great and truly can't be thankful enough for those who break Verizon and AT&T chains... Few people can break what money can't buy... Imagination and creativity
[Verizon Galaxy Note 4 General] gersrt:
[MENTION=5615069]happy2472[/MENTION] explain where you see the negative or insult in my comment. Very curious.......
[Verizon Galaxy Note 4 General] kerfex:
Indeed

Indeed. I would love to try out Cyanogen on this bad boy. Again, Good luck DEVS and Thank you, Thank you, Thank you!
[Verizon Galaxy Note 4 General] happy2472:
NONE ... i was saying that towards any replies i might get to beig cofused about root / unlocked bootloader. Some people can be very snide with there replies.
[Verizon Galaxy Note 4 General] gersrt:
Appologies thought you where making out I was being insulting. I hope no one would be snide with their replies to you after all everyone is learning especially me.

As far as I can tell though an unlocked bootloader is better then root.... I may be wrong?
[Verizon Galaxy Note 4 General] dracozny:
For roms absolutely.
[Verizon Galaxy Note 4 General] 666syco:
I really hope we can get as lucky as the S5 and get some unlocked love. I'd be happy to put my rooted v10 down for a bit to trick the hell out of my note 4.
[Verizon Galaxy Note 4 General] elliwigy:
You can absolutely have an unlocked BL without root. For any device that allows unlocking.. that is (for the most part) how users obtain root.. unlock BL, install custom recovery then root the device.

Anyone in their right mind would choose a BL unlock over simple root anyday since theres so much more that could be done.
[Verizon Galaxy Note 4 General] EdrickMG:
Yes on Aosp equipment you are right, but in samsung definitely root has come first, that's the reason of safestrap and flashfire, you can't change kernel they work outside of kernel, this something once lifetime so there are lot of questions that will be answer when it comes out
[Verizon Galaxy Note 4 General] gersrt:
I have a question. Lets say we change our CID's and somewhere down the line we find it cause a problem, will it be possible to revert back to original CID and locked bootloader state. I suppose what I'm trying to say can we reverse what has been done to unlock the bootloader. Thanks
[Verizon Galaxy Note 4 General] EdrickMG:
That's what npjohnson was doing making a back up of the CID testers
[Verizon Galaxy Note 4 General] Paulcook:
Willing To Help If Needed

I don't know if I could still be of any use to the devs, but I'd be thrilled to contribute to the

amazing progress

the devs have already made, in any small way that I can; be it testing, dumps, info, etcetera...

I have:

Retail (production) Verizon Note 4 (SM-N910V)

5.1.1 Lolipop

'BPA1' Baseband

Semi-stable Temp-Root via KingRoot

Solid understanding of, as well as experience with both ADB & fastboot

Strong understanding & experience with Linux environments, specifically CLI

Experience building kernels & modules from source

Willingness to help

A WHOLE LOT of free-time (recently unemployed)!

Please shoot me a PM with any instructions/links/files if I can be of any assistance.

Thanks,

Paul Cook

:highfive:
[Verizon Galaxy Note 4 General] SirLaughsalot:
Oh my bad. Thanks for clearing it up! And yes, I definitely wish we see a breakthrough here.
[Verizon Galaxy Note 4 General] elliwigy:
Again not true.. there are many Samsung variants that allow oem unlocking such as many international variants and or tmo variants which do not require root but is unlocked to obtain root.

I believe you have VZW/ATT devices mixed up with all of Samsung.
[Verizon Galaxy Note 4 General] EdrickMG:
I will not say a word will let the devs continue with the thread if I miss guide someone apologize keep the good job and hopefully they find a way good evening everybody
[Verizon Galaxy Note 4 General] bdlagain:
I have a developer edition N910V, rooted since last year, running 4.4.4. Idk what info you need from it, but will be glad to pm it to you. I was looking to upgrade my os, yet keep my root & found this thread & my phone sounds like what you guys are looking for.....
[Verizon Galaxy Note 4 General] happy2472:
[MENTION=5166167]bdlagain[/MENTION] you my new best friend might be our lnoght in shining in shining whatever color your note 4 is!!!!!
[Verizon Galaxy Note 4 General] PaulPizz:
I'm pretty sure a Lollipop aboot dump from a dev device that came from Samsung with lollipop on it is whats needed at this point.
[Verizon Galaxy Note 4 General] bdlagain:
The DE Note 4's phones didn't come with lollipop. So unless there's a root with lollipop then us rooted DE Note 4's have kit kat. That's why I popped on xda today to see if I could upgrade. Point me there, i'll do it and come back here to give whomever the info they need.
[Verizon Galaxy Note 4 General] DrPhant0m:
I too own a Dev Edition, and was about to donate my aboot and CID when [MENTION=5848265]npjohnson[/MENTION] told me he already had files from my release.

They want files from the newest bootloader available... and most (if not all) Note 4 Developer Editions have the original NI1 bootloader on it. MAYBE the most recent batch they sold before NOT selling them might have something newer... but what they really need is for someone that had sent their phone BACK to Samsung recently to be re-unlocked (after taking an OTA, for instance) to send their aboot and CID. Those people would have a newer bootloader version to donate from.

NOTE

: This is not something that you can simply update, since Samsung has a private key that signs the aboot partition individually for your phone. Hence the reason why people that did an OTA update lost aboot and therefore locked their bootloader.

To check your bootloader, install Phone Info from the Play Store, give it root access, and look at the FIRMWARE tab. If you've got anything other than NI1, then give a holler. (NI1 is the earliest, so anything other than that is better)
[Verizon Galaxy Note 4 General] gersrt:
Just wondering if there is any update on all this. I understand npjohnston is really busy at the moment. But is anyone testing anything at the moment.We haven't heard anything from the people he has testing stuff. I have a faulty verizon note 4 as well as a good one. I don't mind testing even the released exploit from Fire water on the faulty one if someone can guide me. Thanks
[Verizon Galaxy Note 4 General] bobloblaw1:
It looks like the latest update is right above your post. They are looking for a newer version of the bootloader on a dev device.

I'm sure they'll let us know if anything interesting is imminent.
[Verizon Galaxy Note 4 General] bbeelzebub:
With so many people on this forum having had to send their dev ed device to Samsung for reflashing, I imagine that shouldn't be that hard to find. However, maybe the request should be posted elsewhere as people w/ root and unlocked bootloaders may not venture into this thread.
[Verizon Galaxy Note 4 General] FMXP:
I have a DevEd with bootloader version that says N910VOYU1BOAF.

If I can help you, please let me know.
[Verizon Galaxy Note 4 General] npjohnson:
Hangout/Telegram message me please. I will walk you through getting the dumps.

This is good news!
[Verizon Galaxy Note 4 General] happy2472:
I feel like a kid days / hours before christmas day!!!!!! This whole community from devs to testers to the seats theae deva spends hours sitting and farting on ... its just amazing how we all can come together !!!! Cant wait to see this beast of a phone rooted!!!! I miss root sooooo bad.
[Verizon Galaxy Note 4 General] chevyrhoads:
Hope this works for note 4 N910v ...bc I just unlocked my bootloader on my retail s5 G900V and put custom recovery...
[Verizon Galaxy Note 4 General] elliwigy:
makes me wish i kept my s5 lol.. havent had it for over a year though now
[Verizon Galaxy Note 4 General] EdrickMG:
Well now for those who said it doesn't work... You are the proof it works indeed
[Verizon Galaxy Note 4 General] PaulPizz:
I don't think its looking to good due the fact most retail note 4's have the BPA1 aboot. I think there is only a Lollipop version of the aboot file which is BOAF on a dev device. And we can't roll back to that bootloader. [emoji53]
[Verizon Galaxy Note 4 General] howellcp:
Yep, that's my concern as well. I rolled back as far as possible but can't get back that far. Hopefully the aboot file needed can work on any 5.0.1.
[Verizon Galaxy Note 4 General] EdrickMG:
Well I have done it... You can roll back to the first 5.0.1 BOAF bootloader with Odin... What you can't do is NJ5 kitkat 4.4.4

Apps act weird... And stuff but it's regardless Verizon didn't patch roll back between lollipop bootloaders but can't rollback to kitkat ?

Enviado desde mi SM-N910V mediante Tapatalk
[Verizon Galaxy Note 4 General] sixtythreechevy:
I'm on OG5 5.0.1. At least there's a rollback. Hopefully that's enough.

Edit: I have a backup phone I don't mind testing something as long as I don't get bricked (within reason).
[Verizon Galaxy Note 4 General] howellcp:
I tried to get back to BOAF today and couldn't. I downloaded the tar from sammobile. Farthest back could get was BOF1, did you use a different tar?