yashsingh1/xdaforums huggingface dataset:
[T-Mobile Note 7  Guides, News, & Discussion] RaymondPJR:
Someone else suggested I do it through the email that T-Mobile sent out. I'll just show them this screenshot if I get any more trouble.
[T-Mobile Note 7  Guides, News, & Discussion] louforgiveno:
Well just as I guessed.......this was b.s nearly 20 days ago in fact.....this would have been the perfect moment to have said file with the recall and all.....so much more progress could have been made, although it is COMPLETELY AWESOME the obstacles that have been overcome ! Blows my mind the level some of you guys operate at in the Android System......Applause all around and a big THANKS!
[T-Mobile Note 7  Guides, News, & Discussion] digitalart:
So that's the end of this thread?!
[T-Mobile Note 7  Guides, News, & Discussion] CB620:
Yeah we pretty much have stable root and roms now.
[T-Mobile Note 7  Guides, News, & Discussion] pdaddy:
Hope no one gives up on the bootloader. Long shot I know...
[T-Mobile Note 7  Guides, News, & Discussion] digitalart:
Only option is to get exynos version of the phone case they all unlocked and work good with tmobile network. e.g 930F
[T-Mobile Note 7  Guides, News, & Discussion] cfox88:
Fyi was just posted that the N930T bootloader has been unlocked. Will be posted when is completely ready. Just hold tight.
[T-Mobile Note 7  Guides, News, & Discussion] digitalart:
This sound too good to be true.

Maybe because of the battery problem. unlocking BT will attract more buyers. That would be best news ever =)

But for now chill
[T-Mobile Note 7  Guides, News, & Discussion] bajasur:
Link ?
[T-Mobile Note 7  Guides, News, & Discussion] digitalart:
No info about unlocked BT jusy a way to install mod pack of some sorts. No way of unlocking BT
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
I didn't say it was UNLOCKED, I said I'd made good progress and was soon ready for some testing at which point I'd start a thread - there's still hurdles to overcome, make no mistake, I don't want folks thinking this is imminent, it's not exactly an easy task and crazy dangerous - you start playing with bootloaders and partitions and you can brick QUICK- even quicker when you're flashing modified stock recovery and using heimdall... even when this thing works 100% it's not going to be for the faint of heart or the inexperienced, it's going to require a strong working knowledge of Linux, adb, and allot of other things along with a few tools, like the modified heimdall it uses - the breaking process will require a guide be written in depth which will also take time. You don't rush these things or lots of people (and inevitably some will not follow the guide exactly and brick and cry) will break their devices. I don't even think a total device only exploit exists, at least not yet- maybe on the fully rooted device but without a modified recovery (which btw requires the unlocked bootloader we want to flash) there's no way to get it on the device - Odin still won't flash it - enter adb dd and push the bootloader to the mount point........ that's what I'm saying, root has advanced allot in the past few weeks - I have a prototype modified bootloader I've compiled with the majority of the security disabled - it's just a matter of getting it in there.... either way, I'm working on it this week, but my time is real thin because I have a 40+hr/wk job and a 3 week old infant so we're talking weeks here for me to write the guide and get the stuff tested without breaking anything more than I've broken - and I've broken a few now... don't ask, long story, rma devices returned on the way back to Sammy, so they're getting refurbished and wiped clean and flashed anyway... but point is I believe I'm close but I believe I have real limited time, so again I don't want folks thinking this is a done deal because it's not...
[T-Mobile Note 7  Guides, News, & Discussion] Morningstar:
I'm not sure if you think you're being funny, or if you actually believe the tripe you're posting, but please stop. Every real developer here knows that what you're talking about is both ridiculous and impossible. You might fool a few people who don't know any better, but this is a developers' site, and you're not fooling any of us.
[T-Mobile Note 7  Guides, News, & Discussion] twe90kid:
shots fired! :good::good:
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
Mmhmmmmm... Just like cm on exynos was impossible, right? Nothing is impossible and the suggestion that because it hasn't been done it can't be done is exactly why nothing has BEEN done in regards... Any "real" dev also knows that once you have stable root there is nothing stopping you from pushing the bootloader.... I suggest you Google some things on reverse engineering Samsung''s crap and you'll find it CAN be done and on other devices HAS been done... Now that we have full root on T variants there is nothing stopping anyone from building the bootloader and switching off all the known protections... Have you ever built ANYTHING? Because I have, and so have my closer friends like freebo (who just happened to have been the one to provide the userdebug bootloader to begin with smh) for quite a few years now... I don't share much of anything here for particularly this reason- bunch of negative nimrods with bad attitudes... When I open the thread don't download it, since it's impossible and all... Smh...
[T-Mobile Note 7  Guides, News, & Discussion] Morningstar:
Yes, I do various builds on a daily basis, and unlike some, I DO know what I'm talking about. If you had spent any amount of time on XDA, you would know that.

Your statement that having root allows you to now build and modify the bootloader is preposterous, and only furthers my point that you haven't got the slightest idea what you're talking about. Please feel free to prove me wrong. I'll be waiting, along with numerous other devs who are sitting back shaking their heads at your statements.

And don't worry: IF you ever open a thread, I won't download it. I don't even own a Note 7, so I have no vested interest one way or another. I do, however, take issue with people making ridiculous, baseless claims in an attempt to lead others on and get their 15 minutes of fame.
[T-Mobile Note 7  Guides, News, & Discussion] thegameksk:
So with the replacement phones are we able to root?
[T-Mobile Note 7  Guides, News, & Discussion] bajasur:
CM on exynos was never impossible because their bootloader is unlocked by default allowing custom kernels.

The only true Samsung unlocks I am aware of came from [MENTION=2918486]Ralekdev[/MENTION] on the Verizon Galaxy Note 2 and recently [MENTION=766721]ryanbg[/MENTION] and a few other Devs unlocked the Verizon Note 3.

Other then that, [MENTION=4229979]djrbliss[/MENTION] created "Loki" which was a bootloader bypass method.

Creating a true unlock method for a Samsung device is extremely rare and at this point virtually impossible.

If you have some sort of workaround in progress, I would love to see it.
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
It's not root alone obviously... The userdebug bootloader is the base because it allows root... Which is necessary to push the new bootloader... Which btw hero is aboot, which is based on open source LK (little kernel) which means the aboot.mbn can be compiled again in modified form and pushed into the device... Want me to explain how to get the flags from the Sammy aboot using dprintf() logs? So that when I use IDA Pro to rebase the binary I'll have the flags to turn off protections like tima?

Not my first rodeo bud, just sit back and watch the show... I follow guys like geonosis, who know what they're talking about, and is where I learned myself how to do this stuff... I'm no "expert" but as I said, progress has been made that wouldn't have been had I not had some disposable devices to work with...
[T-Mobile Note 7  Guides, News, & Discussion] Morningstar:
No, I don't want you to explain anything, thank you. The statements you've already made are more than enough.

Please, prove me wrong.
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
Well I'm trying... At work right now, but I'm getting compile errors on the LK aboot that I'm working on fixing because the last one doesn't work... And I don't know everything about this crap, so if somebody has any experience I'm open to suggestions, it's not easy uncovering the flags for switching this stuff off... What I'm not open to is a bunch of negative rhetoric that helps nothing...

I'm trying to beat the signature with a param partition pointing to a different location with a predefined matching data so that the bootloader THINKS it's checking the signature but it's really not... That's one option...

The other is to take the time to find the flags and then recompile with the protections off (this is my current attempt as the previous showed a bunch of compile errors when trying to use the modified parameters partition... I'm doing SOMETHING wrong but I'm not sure what yet, and no one seems to be able to shed any light...
[T-Mobile Note 7  Guides, News, & Discussion] Surge1223:
When you say aboot I suppose you're referring to emmc_appsboot.mbn for the note 7 anyways. You shouldn't have to set any flags in IDA since the mbn file is a 64bit ELF file so the internal ELF loader in ida should load it. Also since any changes you make to the file will cause its signature check to fail, force pushing it will 99% brick your device.
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
Well that's the plan... In all likelihood I'll probably fail at which point you can happily say I told ya so, but until then I could use some help tracing ridiculous amounts of dprintf debug logs for the info I need from a similar bootloader compile... Msm8974 soc ...to tryn find all the flags with bindiff....

I can't "see" any of the contents of the param partitions because they look to be some form of whitebox aes encryption, certainly protecting their signature, likely 256bit... So I won't be reading the contents, i can only point elsewhere...

---------- Post added at 12:51 PM ---------- Previous post was at 12:48 PM ----------

So all that being said, if anyone else understands what I'm talking about, feel free to throw ideas my way... I don't know any other ways of accomplishing the goal... And there aren't many folks jumping out there to help. Seems those with the skills aren't inclined to waste them on Samsung smh

---------- Post added at 01:01 PM ---------- Previous post was at 12:51 PM ----------

Correct and yes I'm seeing some bricks... I'm basically trying to spoof the param partition to trick the check...

I'm trying to find a hole in the aboot_init or if I can use set_cc_flag (in going off memory here, my Linux box and files being at home) or it's equivalent, but the last xrefs to so many places it's hard to track it all down...

---------- Post added at 01:05 PM ---------- Previous post was at 01:01 PM ----------

this is why I need the recompiled aboot... With the security disabled otherwise... That signature check is sitting encrypted in a param partition and the aboot used a transform_data function to check it, from the look of it, so there's quite a bit too work around...

---------- Post added at 01:11 PM ---------- Previous post was at 01:05 PM ----------

Well the boss is back so I gotta do some actual work but if anyone who knows about this stuff (surge?) wants to see the mbn I been working on PM me and when I get home we can use TeamViewer and I'll show ya what I've got so far on my Ubuntu box...
[T-Mobile Note 7  Guides, News, & Discussion] r3pwn:
What Surge is saying is that flashing the modified aboot won't work. Well, you will be able to send it, but the signature check on the aboot itself will fail, bricking your device. There are signature checks lower than aboot. There's pbl, sbl, then aboot. Each one checks the one after it. It's physically impossible to gain access to pbl binaries, so that's completely out of the question and there's no way just shoving a modded aboot image onto the device will make it work, in any way.
[T-Mobile Note 7  Guides, News, & Discussion] Root-Maniac:
[MENTION=711482]beaups[/MENTION]
[T-Mobile Note 7  Guides, News, & Discussion] babaroye:
Yes. I received mine today and rooted using Jovy's method.

Device Status: ROOTED

Model: SM-N930T

ROM: JOVY23_STOCK_MODIFIED

KERNEL: STOCK
[T-Mobile Note 7  Guides, News, & Discussion] vibrantliker:
Did you update?
[T-Mobile Note 7  Guides, News, & Discussion] babaroye:
No i did not. Got the notification that the update was available but did not download it. I figured it would not allow me to root if i do. Maybe the DEVS can provide some insight on that.

Device Status: ROOTED

Model: SM-N930T

ROM: JOVY23_STOCK_MODIFIED

KERNEL: STOCK
[T-Mobile Note 7  Guides, News, & Discussion] vibrantliker:
So I can confirm root doesn't work after update. Does anyone know where the files are to restore stock?
[T-Mobile Note 7  Guides, News, & Discussion] bajasur:
I too can confirm the latest OTA breaks this root method. What a bummer, my device was updated in the store today before I got it
[T-Mobile Note 7  Guides, News, & Discussion] twe90kid:
Is there a restocking fee if we get one that's updated with the patch already?
[T-Mobile Note 7  Guides, News, & Discussion] cfox88:
Now I don't feel like trading mine in when it gets in the store
[T-Mobile Note 7  Guides, News, & Discussion] Root-Maniac:
+1
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
Well the new update bootloader (T variant) is blocking the userdebug sprint loader from flashing in Odin... so what now? Our only option is to achieve the "impossible" or just give up...i understand perfectly how chain of custody works, and I also understand if you compile a fresh aboot you can disable the lock...i also understand flashing it is a problem (again)...i also understand until we quit talking about all the things that can't be done we're never gonna crack it... anybody have it documented anywhere what's been tried on our bootloader? Because I'm not finding much, just more of the same everywhere... and Sammy just shot our method to crap and will force the majority of replacement devices onto the new firmware, with no way of going back.... you can't tell me this isn't possible. I refuse to believe it. There's certain programs out there that can spoof encrypted signatures as well...i need more time for it...i just got home, I for one am not going to stop looking for the solution... it CAN be cracked, NOTHING is impenetrable...
[T-Mobile Note 7  Guides, News, & Discussion] twe90kid:
all this talk for "Thanks" i refuse to press that button
[T-Mobile Note 7  Guides, News, & Discussion] r3pwn:
K, have fun bricking your device.
[T-Mobile Note 7  Guides, News, & Discussion] daredevl99:
You can totally compile an aboot with zero protections but it will never flash. It will not be accepted by the phone or Odin. If you modify Odin to allow you to flash it the phone will reject it and brick. Also Samsung uses a specially modified version of LK so even if you compiled LK that would just give you a base to start from and that could only be used in understanding how aboot could work you would be missing functions checks signatures hashes permission etc. Etc. Unlocking a bootloader isn't impossible. Highly improbable. What you are intending to do to achieve that IS impossible. So unless your some kind of super genius and want to fill me in on how your planning to bypass or "spoof" the signature verification from sbl pbl and tz quit posting absolute bull****. We had a person like you in the s4 days. Gigglie. Ended with alot of not very tech savvy people bricking their phones because one person thought they knew anything and made claims when really they didn't know a damn thing.
[T-Mobile Note 7  Guides, News, & Discussion] kcarden:
[MENTION=5663089]Rx8Driver[/MENTION] I think you should do it .. everyone here is just jealous of your skills...
[T-Mobile Note 7  Guides, News, & Discussion] digitalart:
So we just lost root on SD models after update and now we start from zero =/
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
I promise you the guys like surge who won hard fought knowledge (s4 days) by working with IDA Pro for MONTHS almost certainly know more or at minimum have much more experience than myself...

There is sooooo much running behind the scenes on these devices that it's ridiculous. Most of which, we don't even know what it does or in some cases even what the data stored at the offset even IS... whether it be by encryption or what... for all I know Sammy might still have a blast kernel running under there somewhere too smh

I'm no smarter than anybody else around here - I just live in bumfrack with a buddy who's a tmo store franchise manager who's letting me get my hands on returned devices before going back to Sammy, so for the 1st time I have an opportunity to try things I'd normally be too scared of doing for fear of bricking...

In fact my "spoof" idea is a matter of basically trying to edit the function that calls the first check (signature) by the pbl to return a static value... does anyone know if the chain of custody checking still stops if it comes back passing? My hope is that (much like in olden days) that when the first check is successful the balance of the chain is no longer checked; Samsung (I believe) used a 3 sbl design specifically to cross check, and I don't have jtag either at my disposal, so if we have hardware qfuse and can only get around them by jumping pins on the soc then idk...

But my plan to to attempt to make the procedure that calls for signature check, (I have to look again and see what it is I been reading all night and it's all just starting to blend together) I think it was set_cc_ param or something like that, just always return a "pass" result - likely a 0 not a 1 but might even be other settings idk.... either way there's a way around secure boot... holes exist they always do... if I could find some qc documentation somewhere it would help exponentially...

---------- Post added at 09:30 AM ---------- Previous post was at 09:27 AM ----------

You don't use Odin to flash it at all...adb dd it... if root works...

---------- Post added at 09:31 AM ---------- Previous post was at 09:30 AM ----------

Won't be MY device lol
[T-Mobile Note 7  Guides, News, & Discussion] bajasur:
The only way to keep root right now on the new devices is to get your new device and immediately pause the OTA.

Once you do that you can use the same root method we posted. I did it last night.

I tried to capture the PI4 files from smart switch but was unsuccessful and ended up soft bricking my device and the PI4 firmware has started to be pushed into my device.

Long story short, I'm now screwed on new PI4 firmware and can't go back. I'm sure it would have been possible to get updated to PI4 system using the same method had I not got screwed.

Anyways, good luck guys. I'm gonna stay unrooted until a better unlocked device drops and I'm out
[T-Mobile Note 7  Guides, News, & Discussion] Chr0nicDreamz:
Same here man, I had no choice. It installed on both of my devices before I even knew what happened. Hopefully another root method shows up or a better device.
[T-Mobile Note 7  Guides, News, & Discussion] daredevl99:
Oh you don't use Odin or heimdall like you previously stated you had to? Damn well now it will work for sure!! No it won't. DD is just another way to write data to the phone. It just has no safeguards as to what gets written where and the validity of what your writing. You cannot edit a function to make it return true. You cannot spoof the function because you have no write access to that area and you definitely cannot make pbl point to somewhere you do have write access. Yes of course their are hardware qfuses which jtag cannot be used to leverage.
[T-Mobile Note 7  Guides, News, & Discussion] r3pwn:
So, just a couple things here.

1) You can't "edit" PBL. In fact, you can't even get a dump of it.

2) The only difference between flashing something in Odin and dd'ing it with root is that Odin performs checks to prevent you from anything stupid, like what you're trying to do.

3) K, then have fun bricking other people's devices. Maybe once you get to around 20 or so, you'll realize that what we're telling you is true and that this will not work in any way, shape or form.
[T-Mobile Note 7  Guides, News, & Discussion] Rx8Driver:
I'm done with you guys. Nothing constructive will come from any of this, I'll find my own answers and figure it out myself.... ya know a person would think you people would be happy that someone with at least half a brain, a solid foundation of fundamentals, and some access to test devices so no one has to risk their own was trying to make it happen... instead you all just complain like you take it personal smh instead of even attempting to find solutions. This give up and take it attitude disgusts me, so I'm not going to waste my time posting anything else here. If I find an exploit somehow I'll enjoy it and if I don't it won't be because I gave up when there's still so much we don't know.

And I run a note 5 as my daily driver, I just want to try mostly for the challenge and because I have the opportunity without risk...
[T-Mobile Note 7  Guides, News, & Discussion] kcarden:
I think you should take the advice given. Everything you're attempting to do has already been tried on previous Samsung devices. The guys who are telling you that it will not work, know from experience. The best option would be to dump aboot and see what the code says. Find a loophole in the code that will allow for it to be exploited. [MENTION=4732871]r3pwn[/MENTION], [MENTION=3104111]daredvl[/MENTION]99, many others, and I have been looking at Samsung bootloaders together for quite some time and know what will not work because of what the code says, not by speculation and guesswork.
[T-Mobile Note 7  Guides, News, & Discussion] DVS_Sokar:
Clearly you are not getting the support you're seeking. It would be best to either drop it like you have stated here and "prove" them wrong if not no love lost.
[T-Mobile Note 7  Guides, News, & Discussion] Morningstar:
Nobody is complaining, they're trying to educate you and stop you from spreading false information that others may try to follow and ruin their device. Not their fault you refuse to listen.
[T-Mobile Note 7  Guides, News, & Discussion] daredevl99:
Ding ding ding. Surge r3pwn kcarden Ryanbg joshbg and several others have been in a group chat together with me for what 2, 3 years? The first year and a half was solid research and nothing but. After that it's been messing around and the occasional delve into a device here or there. Combined we have just about the most knowledge in the area as xda has to offer.
[T-Mobile Note 7  Guides, News, & Discussion] Root-Maniac:
[MENTION=711482]beaups[/MENTION] has all of you combined beat. Can you say note 4 bootloader unlock via Emmc commands....
[T-Mobile Note 7  Guides, News, & Discussion] Surge1223:
listen, this isn't a competition and no doubt beaups is a talented individual. We were simply trying to save someone from a brick while providing information to help.
[T-Mobile Note 7  Guides, News, & Discussion] Root-Maniac:
Never said it was a competition. Was thinking maybe you guys could collaborate with him if he has any interest...
[T-Mobile Note 7  Guides, News, & Discussion] elliwigy:
lol u lose if u do and lose if u dont
[T-Mobile Note 7  Guides, News, & Discussion] daredevl99:
Actually that was done by ryanbg all the research and reversing was Ryan. Beaups wrote the code. Beaups is incredibly talented not disagreeing in anyway.
[T-Mobile Note 7  Guides, News, & Discussion] beaups:
That is entirely incorrect.
[T-Mobile Note 7  Guides, News, & Discussion] kcarden:
Is there a leak of emmc commands that no one here is aware of?
[T-Mobile Note 7  Guides, News, & Discussion] jcase:
You can dump PBL.

This isnt an accurate statement at all.
[T-Mobile Note 7  Guides, News, & Discussion] jcase:
Not a leak really, but some were in source released by Samsung, others were reversed out of the controller firmware.
[T-Mobile Note 7  Guides, News, & Discussion] beaups:
Read the samdunk document. I reversed the emmc controller firmware.