yashsingh1/xdaforums huggingface dataset:
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
Forgive me if this isn't the best place for this discussion, but I'm taking a look at the "impossible" unlocking of the bootloader. I'm attracted to the impossible :) I'm new to this though (so don't hold your breathe), but have written numerous apps for Android. I'll post anything I can find here, unless someone indicates there's a better forum/place for this. I have the Tmobile S7 (not edge), but it's very similar and this is the most relevant thread I can find.

Taking a look at the code for CROM Service 1.0.4 APK by Samsung (mentioned here: https://xdaforums.com/verizon-s7-edge/help/crom-service-modify-t3558872 ), they're looking at the phone;s /system/csc/customer.xml file, the values "GeneralInfo.Region" & "GeneralInfo.SalesCode". My values are NA for region and TMB for salescode. Has anyone tried setting these to the International(?) values once they got the app working? I assume more will be involved, but a start?

I also had another thought (again I'm still trying to come up to speed on this) - If the hurdle is an MD5 checksum and cert check, else ODIN never writes the new image from memory to disk - can't we write a force an expected MD5 checksum and fake cert that Samsung expects, based on comparing stock image that works? (not sure if a method exists about MD5 checksum, but I'd think you could continue writing bogus bits to a bogus file in the zip until the MD5 matches)

Regarding the cert check, I'm not sure how the entire 'chain of trust' could be 'solid' if the ODIN->phone downloader setup we're using doesn't have Internet to verify who the signer really is. We can just say it's from Samsung (again based on comparing a working stock image) and they'll have no way to check.

I'm sure I'm missing quite a bit, but wanted to reignite this. Any interest still exist (besides me?) :)

---------- Post added at 01:38 PM ---------- Previous post was at 12:55 PM ----------

Anyone know how to view mbn files? Was trying to get some info from the stock Nougat image, specifically BL_G930TUVU4BQB1_CL10376601_QB12449107_REV02_user_low_ship_MULTI_CERT\devcfg.mbn & keymaster.mbn Googling it isn't much help.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] F9zSlavik:
I'll contribute 50. Work or no work.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Root-Maniac:
Bump!
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] dogredwing1:
If any can I unlock the bootloader or a has a root method without the eng boot, I'd gladly throw down 50 buck or so
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] cn2661:
What about thinking in the reverse, altering the CROM apk to look for the USA Variant's Sales Code and Region?

Recently I tried to tap the CSC of my AT&T S7E with the CSC extracted from G9350 (HongKong & China Variant) and broke my phone's modem (It was no way recoverable by ODIN, IMEI and Baseband was messed up)

And it took me US$50 to get it fixed by a Chinese repairer.

So, we better try to hammer the apk, rather than messing with the CSC

PS: actually, what is the mechanism behind the CROM Apk? Any clues from the source code what they are touching?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] qwewqa:
The mechanism of the crom service is to add a KIWIBIRD flag to the STEADY partition. The US bootloader.doesnt appear to look for the STEADY partition. The only way would somehow to get the Chinese rom onto the US version, which Odin doesn't allow you to do since currently, bootloader are different versions.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] cn2661:
My wild guess, it is a little bit further than the BL version.

I remember long ago when we were still on PD*/PE* Rom while the BL was still V2, it was already not possible to flash a Chinese BL/PIT etc into the US Variant, as prompted as stopped by Qualcomm Secure Boot when Odin tried to flash that in.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
How does one look or find that the us bootloader doesnt look for the steady partition? (Just trying to learn more about this) Out of curiosity, has anyone ever tried to set this flag (whatever way) and see what happens on us model?

Modifying crom apk to look for us info shouldnt be hard (i dont think), but im just assuming theres much more involved than just that 1 check.

For one, it appears it contacts samsung via internet to get some type of key.

---------- Post added at 09:05 AM ---------- Previous post was at 09:04 AM ----------

& if we created this steady partition, with this flag, how would us model behave?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
This possible on our device? Im wondering if we can get a Chinese rom on our device then we can hack to unlock the bootloader, or use the crom app to unlock it. (I'm not sure if the previous issues will still limit us from putting on a Chinese bootloader; ie, will the Chinese modified rom be able to get pushed to the phone via ODIN? Will the newer root ability possibility change our previous fate of "end of the road" with the locked bootloader? (Get root, then push modified chinese rom, unlock bootloader via modified CROM? ...)

https://xdaforums.com/android/general/guide-how-to-convert-chinese-roms-based-t3577469
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] DOMF:
Link goes to a 404 for me?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
Fixed link above; writing on phone sucks!

https://xdaforums.com/android/general/guide-how-to-convert-chinese-roms-based-t3577469
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] DOMF:
They don't mention anything about modifying the bootloader on this. Won't help.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] r3xx3r:
I wonder if Samsung knows about this and keeps the unlockable Qualcomm variants at a different bootloader than the locked Qualcomm variants. Otherwise why would the Chinese S7 still be at bootloader version 2 despite being updated on 3/19 to the same version of Nougat we have. G9350ZHU2BQC1

https://www.sammobile.com/firmwares/download/125941/G9350ZHU2BQC1_G9350ZZH2BQC1_TGY/
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] KillerClaw321:
So are we attempting to run the Chinese S7 bootloader on these us models to unlock the bootloader...?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
Has anyone tried flashing the Chinese version (unmodified so it gets past 'the checks') to our device? (If not, any volunteers?! Or anyone with a test device or cracked screen that kissed it off already?) (Not sure if it will brick or not - and if it does is that fixable with our stock image - I don't know the answer). If it works, then it may opens doors. It may not boot correctly due to any HW variations, but if it takes, won't that unlock (or make an unlock possible)?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] cn2661:
Tried Months ago, ODIN wont even flash it in, stopped by Qualcomm Secure something like that.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] KillerClaw321:
Qualcomm Secure Boot?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] r3xx3r:
I just tried flashing the latest Chinese nougat firmware. Unfortunately it failed with a Thread Failed: aboot message. Hopefully someone will be able to figure it out. Maybe the next fw will be bootloader version 4 and will work.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
Hi guys, I just did a massive data dump on this subject, trying to get some fresh motivation going, please visit & share EVERYTHING you know!! Thanks! https://xdaforums.com/galaxy-s7/how-to/discussion-unlock-bootloader-rd-t3582800
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] kevin71246:
Was the bootloader from the phone compressed (zip,tar,etc)? And do you know if it was signed? (I read it may be possible for a partition to not actually unzip when it installs, rather unzip each time the phone boots) ie, Im wondering if even the digital signature checking continues everytime the phone boots (if not I don't see why we cant modify it...)

---------- Post added at 10:57 AM ---------- Previous post was at 10:54 AM ----------

How do you identify the bootloader version on your phone?

---------- Post added at 11:04 AM ---------- Previous post was at 10:57 AM ----------

Hi, trying to reignite this topic & gather useful info:

Mind sharing exactly how you acquired sdd10 and how you are reading it (line by line)? Using linux or editor in windows?

Also you mentioned modifying the recovery to see if it still does checks, any status? (This sounds like a good idea)

Thanks!
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] thescorpion420:
The baseband tells you. 5th from last number.

My baseband is G935UUES4AQC1, I am on bootloader v4.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] r3xx3r:
I do not mind bricking my S7. I dont have the technical skills to modify the files or anything like that. but if anyone is working on any test files and need a guinea pig to test I am willing to flash it to my S7.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] HamBone625:
I second that I have both edge and flat versions that can be tested on.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] daleboutandrew:
Att Qualcomm s7e unlocked bootloader

I have a Qualcomm AT&T S7 edge with an unlocked bootloader in the way I did this was to use the prince cosmy version of Odin and try to flash the U software and brick the device and then take the updated repair tool from Verizon latest version and hook it up to that and download mode and it takes about an hour and a half or two hours to download the fix but it turns it into the version of bootloader is unlocked build G935UUES4AQC1
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Root-Maniac:
Have any proof it's unlocked?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] AceDaMack:
Proof pics plz.

---------- Post added at 04:35 PM ---------- Previous post was at 04:35 PM ----------

Proof pics?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Root-Maniac:
Flash twrp

That would be some proof as well
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] vincentanzalone:
Wtf, nice cliffhanger... pictures please. I'm finding it difficult to believe this process would unlock the bootloader. Wouldn't this assume that there are encryption keys stored within the Verizon recovery tool?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] diligent7771:
https://xdaforums.com/galaxy-s8/how-to/rd-carrier-switch-root-snapdragon-t3597473
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] meathammer386:
were is proof
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] KillerClaw321:
Either this is a breakthrough, bull****, or some noob...
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Bmanc42:
I think bs as poster disapeared after posting g and has logged In several times. I would like for it to be true however. I can't take the lag and heat I am about to flash stock
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] nitroevo:
That dude is nothing but a troll
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] EnumC:
No that's not how it works. The phone checks it cryptographically. The repair tool at best just reflash the bootloader, it will never flash the unlocked international version, especially from a tool from Verizon. He's just bs-ing everyone either for likes or just to troll.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Bmanc42:
That's very unfortunate I got somewhat excited even though I kinda figured
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] michel5891:
Any updates on how and who is trying to achieve this?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] rockspin:
apparently not :((
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] :
This guy is a total troll. The bootloader on the phone can't be unlocked, and Odin certainly can't unlock it either. Not to mention, this guys profile only has 1 post, which just so happens to be the one quoted here. In addition to that, based on his post, I highly doubt this guy even knows what a bootloader is, so, In other words, total BS and not worth believing. :mad:
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Could you guys email Samsung and ask to unlock the bootloader

https://contactus.samsung.com/customer/contactus/formmail/mail/MailQuestionProduct.jsp?SITE_ID=1
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] :
I haven't tried, but I don't think It will work. I'd say the only way to own a Samsung phone and have an unlocked bootloader in the process is to buy their international model. Has an unlocked bootloader and works on US cellular networks. Plus those models don't have all the stupid carrier branding and bloatware on them. Just pop your sim card in and Boom!

Cheers!
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] gurnsey101:
Yeap it's the only way we can have nice things. Haha
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
With the ENG kernel we use for root, could we flash this first and then flash Chinese bootloader through Odin?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] sabresfan:
No. Two completely different versions.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Gotya. And why is their an "OEM Unlock" option in dev options? It's for unlocking bootloaders right? If we aren't supposed to unlock them then why is it there?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] sabresfan:
You got me on that one. Maybe Sammy likes to get everyone's hopes up.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Haha. Probably. Maybe there is a way and it's needed though
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] rlewis312010:
People usually have the goods. Look at system hacking like the Wii U. It took 12 days for some and a few years later it was released. People come out and make excuses but eventually it turns out that it was easy. The person with the eng kernels--you think that's all they have?
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Does anyone have the stock bootloader img? If so could you upload it please.

Edit: Nvm
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
If you still don't mind, could you check out my post here:https://xdaforums.com/tmobile-s7-edge/how-to/heres-how-rooted-nougat-s7-edge-g935t-t3567502/page155

It's not an unlocked bootloader, but i changed the kernel in the ENG boot.img to stock kernel, but still doesn't have signature check so we should be able to root while having stock performance

---------- Post added at 10:30 PM ---------- Previous post was at 10:29 PM ----------

If you still don't mind, could you check out my post here:https://xdaforums.com/tmobile-s7-edge/how-to/heres-how-rooted-nougat-s7-edge-g935t-t3567502/page155

It's not an unlocked bootloader, but i changed kernel in the ENG boot.img to stock kernel, but still doesn't have signature check so we should be able to root while having stock performance
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
What about this: http://glassechidna.com.au/heimdall/

Could we use this to flash instead of Odin?

And sorry for triple post, I feel annoying
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] r3xx3r:
I am working on it now. Will update very soon.

:EDIT: Just checking that this is for the S7 flat?

flashing this in PrinceComsy's Odin fails. SECURE CHECK FAIL: boot
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
This is for edge, I am about to make one for flat though! Give me just a few. Thanks for giving it a shot!!!

---------- Post added at 02:38 AM ---------- Previous post was at 02:15 AM ----------

https://xdaforums.com/s7-edge/samsu...development/testers-performance-root-t3625812

Here you go, good luck :)
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Has anyone tried to flash Chinese firmware through flashfire!?! I feel that would actually work. Might have to add the wipe at the end though.

I made a thread about it here

https://xdaforums.com/s7-edge/samsu...heoretical-variant-bootloader-unlock-t3627286
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Binary100100:
Which was quickly closed... :)

But at least you have discovered a way to bake bricks.
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] Craz Basics:
Well yea, that's what counts
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] miko12312:
Any possibilities of using the stock recovery and rewrite it with flash capabilities,so it can boot normally and not trip on boot, or create update. zips than can modify the system, also have anyone attempted to mess with maintace boot mode as it has the capabilities of turning on developers options ,using volume down and power
[T-Mobile Samsung Galaxy S7 Edge Questions & Answer] abittercoffee73:
Sorry for my little "necromancy", but I have a feeling that anyone with JTAG for S7 may give it a go, as it allows to flash the firmware back. The cons is that I don't see anyone here with JTAG, plus the new hardware will cost around the S8, as it is intended to hardware devs...
[Nexus 5X Q&A, Help & Troubleshooting] Dammer Martins:
Hi, I just bought mine Nexus 5x few weeks ago, and 1 day after I started hear about the hardware bootloop problem. It made me scared.

I started searching about the problem and, until now, the conclusion about the problem is the phone gets heat and melt the solders of processor. That's a "comum" problem in LG phones, LG G4 have the same problem.

"-Ok, but, what causes that?"

My opinion, as lay, it is caused by cheap USB-C Cables and/or wall adapter. Fast charger adapters can also be a big problem. (Source: http://www.makeuseof.com/tag/buy-usb-c-cable-wont-destroy-devices/ and https://forums.oneplus.net/threads/in-response-to-the-type-c-cable-discussions.412344/ ) USB-C transfer a lot of power through it, accelerating the process of charging and, consequently, making phone hot. The poor solder who LG's did on the phone start to get melted with the time.

Prevention you can take:

You can make this test in first of all:

https://xdaforums.com/nexus-5x/help/diagnosing-soon-to-bootlooped-phones-t3543830

1- Use only the original cable and wall adapter who comes with the phone

2- Buy only well constructed USB-C cables (maybe it means expensive one, but you will expend more money buying a new phone than a good cable)

3- Keep control of phone's temperature with some app ( I use Cpu Monitor) and never let it exceed 45°C/50°C. If the phone reach this temperature, turne it off immediately (more recommended) or enable battery saver mode.

If the phone suddenly get heat and turn off:

1- DON'T TRY TO TURN ON! Wait until it gets more cold and than try to boot. If it boot, try to make a backup of you important things.

1.1- If the phone is in warranty, send it back and they will send you a new one.

1.2- If not, go to step 2

2- You can try to fix at home. Here are some links:

https://xdaforums.com/nexus-5x/help/rld-fix-red-led-death-t3541536

https://www.youtube.com/shared?ci=i6eu7OK_4t8

3- If it don't work, you can take the phone to someone who works with this and ask for him to make new solder for the CPU.

If anyone know more tips or even solutions, please, contribute to the thread.

**sorry for eventually grammatical mistakes**
[Nexus 5X Q&A, Help & Troubleshooting] bla_laber:
Bad quality soldering is really a common problems. Most of my mobile devices - especially notebooks - died because of this. I guess everybody had the problem once where a laptop get bluescreens more often with time until he finally refuses to boot up. Usually, damaged solder connections from chips to the mainboard are the cause for such problems. The solder connection degrades due to thermal and mechanical stress. With time, more and more micro-cracks are emerging with the result that the electrical resistance is increasing. Thus, signal transmission is distorted and bluescreens or crashes occur more regularly until the device dies.

In fact, a thermal treatment can help! The idea is to melt the solder to gain a reflow of the solder which repairs the micro cracks. Although there are semi-professional reflow ovens available on the market, you wouldn't buy one just to repair one device. But you can try do this by using your oven in the kitchen, a hot hairdryer or (if available) hot air gun. The best procedure (independing of the used heat source) is to disassemble the device, detach the battery (!) and if possible remove plastic parts. If these parts can not be disassembled, you can protect them by wrapping them with aluminium foil (it will reflect heat radiation and thus prevent fast heating of these parts). The best case would if you just have the small mainboard with the soldered chips on it. The start the thermal treatment: turn your oven to max. temperature possible, wait until its pre-heated and put the device into it for around 2-3 min. This time should be sufficient to remelt the solder connection (and repair them) and short enough to overheat the plastic parts. If it didn't work, try again with about 30 s longer duration. If you use a hot air gun try to apply the hot air stream only the soldered regions. Usually you can see if the solder gets hot enough. If its working with a usual hair dryer? I dont't know..

I used the kitchen-oven procedure many times and sucessfully revived many notebooks...
[Honor 8 Questions & Answers] FreeLineTM:
I just rooted my Honor 8 running B360 and was successfull. But apparently there are some strange things, for example, the settings menu to configure the smart key is gone. Also, I noticed something strange when I went into my build.prop to get the Google Assistant. The line ro.build.tags is set to test-keys, which was in my build number when I ran into some problems while rooting. Is this right or should this be something else? Also ro.build.description includes NRD90M test-keys which was the exact build number when I ran into these problems. This sounds strange as my current build is FRD-L09C432B360..
[Honor 8 Questions & Answers] SolarisSixth:
I ran into that issue when I tried to install nougat for the first time, basically, stuff is missing, and I'm not sure why.

The solution is a long one unfortunately.

You'll have to reflash the update.app from a marshmallow version (the only full one I found for my device was b162. Make sure it's full so you miss nothing.)

Then use the Charles update method, or just wait until the update rolls out and do the normal update, don't root it and install twrp, because it will not install properly.

Then you should be on nougat and good to go.

I have yet to root on nougat, because I'm waiting to see if they'll roll out any patches for small bugs, and waiting to see if a better root method is released.

Good luck either way!
[Honor 8 Questions & Answers] FreeLineTM:
Before you answered here, I tried to reflash update_data_full_hw_eu.zip and then boot, but it was stuck at the Honor logo. Then I rebooted into TWRP and install both update.zip and update_data_full_hw_eu.zip. I was again stuck at the Honor logo, but after booting into the stock recovery and doing a factory reset the phone booted as clean in B360. Then I spent litterally 5 minutes rooting with TWRP and phh's SuperUser. (http://www.theandroidsoul.com/root-honor-8-nougat-twrp-phh-superuser/) I now have root on Nougat, and I have not seen any features missing yet. It still says NRD90M and test-keys all over my build.prop but I guess that is supposed to be there.
[Honor 8 Questions & Answers] JoshSnitz:
I might give this a go - do you know which update.zip and eu you flashed? I have heaps of different versions
[Honor 8 Questions & Answers] FreeLineTM:
This is a very old thread..