yashsingh1/xdaforums huggingface dataset:
[Samsung Gear S3] rileyjseal:
Samsung support

Gentleman,

I loaded this onto my device; however, it turned it into a bootlooping paperweight. I sent it in to Samsung for repair and just got it back today with a letter stating they want me to disable the activation lock on the device. The issue I face is activation lock I can disable on my phone, yet it does not push to the gear s3 since it constantly bootloops back to the original screen. Samsung reps disregarded this issue entirely so I now hold a paperweight again.

Good news/bad news

They'll repair it for me if I can send them a copy of the physical receipt. So now, onto the dilemma I currently face with the Samsung reps. Lacking the physical receipt I sent them a few screenshots of the gear app with the S3 Frontier. That has been denied. On a last attempt, I sent them my Bank statement with the purchase date letting the representative know the card I used 5 months ago is no longer active and I've been sent a new one (fraud, don't stay in cheap motels when you travel). Once again, rejected and I write this hoping someone will help me in this situation as bestbuy is also wanting the entire card number to pull my receipt, even though my capitalone statement shows the purchase!

I'm almost hopeless at this point, my only solution is to come and ask for your help. I need what I should have never tossed away. You would think registering the device on samsung.com and such would equate to this but that is not how they see things.

I'm in need of a receipt, a photo of one. If you can email me one that would be great, Rileyjseal@gmail.com, or messaging one.

I wouldn't have wrote this entry here yet this is what turned it into a paperweight to begin with, a corrupt file perhaps. I do not know, but moral of this dilemma is SAVE YOUR RECEIPTS OR SAMSUNG WILL NOT HELP!

If you've read this far, thank you for your time.

If you can help, God bless you.
[Samsung Gear S3] tids2k:
Anyone who is still on APK Firmware can do this for me to test.

1. INSTALL Packet Capture from Android Playstore.

2. Run Samsung Gear software.

3. Start capturing the Packets by pressing the ◇ sign.

4. Then run the update software option on the samsung gear app.

5. If there is an update available it will display the uri and the link to that file.

---------- Post added at 11:14 AM ---------- Previous post was at 11:04 AM ----------

Mods at bestbuy forums are really helpful. Register on theier forums and add your product details they can email you a proof of purchase. The only way to get the watch working is through either Samsung original jig or home made jig look at max's example posted previously. You should not attempt anything unless you are ready to face the consequences. The only way to get out of the bootloop is through jig. Try this :

1. Press power button for 10 sec. The watch will keep bootlooping.

2. Press the upper right key and keep it pressed for 5 sec.

So 10 sec + 5 Sec. If you are able to go to download mode quickly connect to wifi ap get Netodin and reinstall the previous firmware.

Good luck !
[Samsung Gear S3] stippLe:
Guess I'm not haha cause this didn't show a UrL for the file. Can I downgrade for you haha. Tell me what to DO!! I'll do it
[Samsung Gear S3] tids2k:
Well I don't know what you meant by that but if you check the gear S2 threads, you can see the Delta upgrade package from the gear S3 watch software. My assumption is that when going through the log of the app you can see three apps being downloaded in the background namely gear plugin .. etc and also in the log you can see the direct link to the app files(apk) being downloaded. I am not sure if you understand and I can't understand you either so that makes on the same page ;) link I'm referring to is here : xdaforums.com/showpost.php?p=72252087&postcount=141 which [MENTION=1030585]adfree[/MENTION] mentioned here. Also with the development we are actively working behind the scenes ;)
[Samsung Gear S3] kstephens98:
Just a quick thanks to those working behind the scenes. I would love to assist but I do not have a jig and cannot afford to buy one and my soldering skills are subpar. Too risky for me to end up with a $300 paperweight. I check here from time to time and appreciate all of the efforts!
[Samsung Gear S3] speedme:
First of all I want to thank everyone who are involved in trying to port Android Wear to our S3 !

I used to own a Gear 2 (square smartwatch with Tizen OS, but also has an Android Wear port made by [MENTION=803006]biktor_gj[/MENTION])

Biktor stopped development for personal reasons, but he came a long way.

From what I know, he has put all his files/sources and knowhow onto Github for others to pick it up.

Maybe this is a good starting point for our port on the S3 ?

AW port for Gear 2 : https://xdaforums.com/gear-2/development/please-help-kernel-compiling-android-t2992953

Hope this helps
[Samsung Gear S3] adfree:
@ speedme

Thanx for Link.

Main problemS is really... higher Security...

and...

WiFi only... instead easy USB cable

Nearly all attempts to flash custom stuff leads to disabled WiFi...

So in theory priority is to bypass security... prevent disabled WiFi...

To make it more safe for other users...

Best Regards
[Samsung Gear S3] speedme:
you are right [MENTION=1030585]adfree[/MENTION], I didn't think of that.

But I'm sure you will find a way to bypass the security and get wifi to work.

I'm sorry I can't be of any help, as I have zero development skills...
[Samsung Gear S3] tids2k:
Dear [MENTION=313660]speedme[/MENTION] thanks for the commentz. The problem right now with flashing is that we need to downgrade to a lower bootloader and then attack the system kernel. The dm-verity still exists. I have looked at biktor's kernel resources on the git. Creating a kernel would not be a problem but having the old bootloader to tinker with is the issue.

Right now we are looking at disassembly of the sboot. If you seaech on google "bootloader exploits" you can click on the second link that says bits, here :-∆ http://bits-please.blogspot.com.au/?m=1 its a very detailed explanation by laginimaineb about the bootloader.

With the custom rom, we have managed to install vanilla tizen on the gear s3, thanks to [MENTION=1030585]adfree[/MENTION] for his intense research and patches to get the wifi working. I have installed tpk's from samsung and they all work. If we can get the HMAC MD5 keys from TEE Zone, we can flash anything and everything.

I hope that will explain a little.
[Samsung Gear S3] 88Keys444:
Hey guys. I'm a complete noob with all of this and I have zero idea where to start :/ can somebody please help?
[Samsung Gear S3] DinckelMan:
As of right now, nowhere. AW is not available yet and there's nothing you can use an and end-consumer. Guessing from the message you're also not a developer, so all I can suggest is to read the most recent post right before yours
[Samsung Gear S3] tids2k:
can someone please try to run from sdb shell: /usr/bin/change-booting-mode.sh --update and check what bootmode the watch fall backs to ?
[Samsung Gear S3] DinckelMan:
Finally got myself an S3 to tinker with. I'm not too familiar with Odin, which one of the file download modes in Odin do I flash the combination fw with for my Frontier?
[Samsung Gear S3] adfree:
[MENTION=5846680]DinckelMan[/MENTION]

Caution.

I would suggest you to start with easier steps... to prevent "surprices"...

1.

To know the exact Firmware on your device could be ever helpfull...

A.

Check About device infos

B.

Or enter Code:

*#1234#

2.

To learn or be able to use Tool SDB could be not wrong.

--------------------------

NO joke.

Please remember how many user had also trouble with playing with Combination Firmware...

As Download Wireless stopped...

No idea if you plan to solder USB cable (wires) to your Gear S3.

Best Regards
[Samsung Gear S3] DinckelMan:
This gear is on 2.3.2.3.

AP: R760XXU2BQC5.

CP: None

CSC: R760OXA2BQC5

From what I've learned, this should be downgradable to the factory FW. Correct me if I'm wrong
[Samsung Gear S3] adfree:
R760XXU2BQC5 could flash Combination Firmware from here:

https://xdaforums.com/gear-s3/development/rom-samsung-gear-s3-sm-r760-t3588082

But not 100 % clear, if Download Wireless will be still active...

I remember "few" users, where Combination Firmware runs... but Download Mode for Wireless was "offline"... "disabled"... not working...

So it still risky without solder skills...

And mimimum 1 user tried to solder wires... but not worked...

I have not seen if he was able to fix it...

With my SM-R732 I was able to activate Wirelss Download Mode with Command over SDB Tool...

But this means not... this work also with Gear S3.

So better think and inform before... otherwise disaster recovery is not so easy and you need big luck... something like this:

https://xdaforums.com/showpost.php?p=72292560&postcount=51

Only as info.

Best Regards
[Samsung Gear S3] DinckelMan:
[MENTION=1030585]adfree[/MENTION]

If the native download mode is as unstable as you describe it, I think I'll wait until we can safely mess with the file system :rolleyes:
[Samsung Gear S3] tomxtc1979:
Hello everyone...

I have been reading alot in this forum, but never decided to participate...

Yesterday I bought an Gear S3 in Germany and now i am willing

to test some of my (old-fashion) coding skills...

[MENTION=1722345]tids2k[/MENTION]: I am interessted in the JIG-Module...

Can you guess the costs for it being shipped to Germany ???

PS: My Tizen is 2.3.2.3, i guess this is the newest release cause of FW R760XXU2BQC5
[Samsung Gear S3] tids2k:
hello tom,

welcome to the forum. the jig costs about 75 AUD plus postage would be somewhere 30-35 AUD. My total cost was $90 something. the jig was purchased from a wholesaler in Australia.

I will ask the seller the total cost. We need someone with good kernel building skills, as I have gone through the biktor_gj's github sources and have realised that we can use his commits and develop out own kernel. Also any kernel developer here ? As I have mentioned before we can use casio koi's sources from https://android.googlesource.com/kernel/exynos/+/android-wear-7.1.1_r0.5 as base and then diff compare with commits by [MENTION=803006]biktor_gj[/MENTION] on his github https://github.com/Biktorgj/Android_b2_Kernel.

We just need to build and code a kernel.
[Samsung Gear S3] tids2k:
update on the jig, the seller will not post the jig outside Australia. So you might have to buy and order locally and then ship it to your address.
[Samsung Gear S3] tomxtc1979:
I meant to buy YOUR Device :D:D:D

Anyway... To compile the kernel doesnt allow us to flash it to the device,

so first step must be to find an exploit in sboot / bootloader...

Otherwise kernel would be rejected due to the fact, that the compiled kernel (a.k.a. ramdisk.fs)

is not properly signed....

Greetings from Germany.....
[Samsung Gear S3] adfree:
[MENTION=7085931]tomxtc1979[/MENTION]

Ich könnte deutsch... :D

Schreib mir ne PN, wenn Du willst...

We have to find few real facts between dreams/theory and reality...

And it would be really very helpfull... if somebody simple compile kernel from Open Source(S)...

http://opensource.samsung.com/reception/receptionSub.do?method=sub&sub=F&searchValue=SM-R760

Only to be sure, all files are in this package... and easy to create valid kernel...

They reason for this... we could discuss in German... via PM...

Maybe then easier to understand.

Mein Englisch is sa.bescheiden...

Best Regards
[Samsung Gear S3] adfree:
I have tried several attempts to fake my SM-R732 as SM-R760... to catch FOTA package...

But failed... :o

With old Firmware AOJ3 I can fake rootfs.img and csc.img... so under Gear info... or under *#1234# all text is from Gear S3...

BUT... Samsung Gear app detect my faked device as Gear... and failed to connect fully... :rolleyes:

Not Gear S2 nor Gear S3... only Gear__

In EPK5 my trick fail fully...

I could try if BOKK Firmware is more helpfull...

Something is inside Firmware, which interact with Samsung Gear app... :eek:

Maybe later I will add text string from rootfs.img...

Only as info.

Best Regards
[Samsung Gear S3] tids2k:
Hello tom,

Thanks for your reply. The reason why i said kernel is possible because we were able to flash tizen vanilla kernel.

With finding an exploit, my jig is with a friend, who is actively looking in finding an exploit. he is good and has good dissembler knowledge. Using sources from tizen or samsung sourcse we should be able to compile a working kernel. My reasoning for this is so because if you read [MENTION=803006]biktor_gj[/MENTION] 's port thread he made a custom kernel and then used it to flash the device.

If you meant ETE encryption on the device storage, it doesnt matter as custom recovery has been installed on secure mode mmc's.

If you are good with dissembling and IDA I could send you some dissembled sboot for you to have a look at. Let me know if you want to check it ;)

[MENTION=1030585]adfree[/MENTION] all the best. guten morgan :)
[Samsung Gear S3] tids2k:
Could you explain how to did that ?
[Samsung Gear S3] adfree:
:angel:

https://www.file-upload.net/download-12574421/update.zip.smR760_BQC5_from_APJF.tar.html

Here is FOTA package for SM-R760 BQC5 from:

R760XXU1APJF/R760OXA1APJF

Funny...

In this package I saw first time folders for csc... rootfs... instead Images... Delta...

So here it is easier to find what they changed...

Btw.

Downloaded with my SM-R732... ;)

So I found solution... :angel:

Best Regards
[Samsung Gear S3] adfree:
https://www.file-upload.net/download-12576430/update2.zip.smR760_BQD2_from_APJF.tar.html

FOTA package BQD2 for OXA CSC...

R760XXU1APJF/R760OXA1APJF

Same base Firmware like the other example...

More for study... as for Flashing... ;)

Here few infos visible about this Firmware Version...

http://www.trademe.co.nz/mobile-phones/mobile-phones/samsung/galaxy-gear/auction-1326610242.htm

Tizen 2.3.2.4

Best Regards
[Samsung Gear S3] tids2k:
hello [MENTION=1030585]adfree[/MENTION] this is great i will look into this asap. Please PM me how you got these firmwares on your phone. I want to try something.

Are you changing the CSC in the csa.bin ?
[Samsung Gear S3] SkilletDesire:
I don't know what Samsung think they are doing if they had wear on the S3 it would be no 1 best seller. Tizen is rubbish but rotating bezel is the best and reviews are saying LG Sport Watch is crap hardware and excellent software on wear 2. Only thing S3 needs is nano SIM and wear 2.
[Samsung Gear S3] adfree:
https://xdaforums.com/showpost.php?p=72843657&postcount=187

This is how local FOTA test works on my SM-R732...

Something like this I did long time before with my Tizen Mobile...

SM-Z130H

I will try if I can create custom delta.tar... with only Bootloader inside...

Problem for Gear S3...

We have no ROOT in Retail Firmware... as "Base" Firmware is required for Delta update...

In theory it is possible via Key Code... in MISC menu...

testmode *#6472#

But this Code is locked...

Maybe we find solution...

Best Regards
[Samsung Gear S3] tids2k:
fota can be started with these. but whats the master input here ? any clue [MENTION=1030585]adfree[/MENTION]
[Samsung Gear S3] adfree:
Looks interesting... :good:

Can you give me more details... how and where you found this?

So I could try...

Maybe PM...

Thanx in advance.

Best Regards
[Samsung Gear S3] tids2k:
[MENTION=1030585]adfree[/MENTION] press on serial number in the gear info about device seven times it will take you to secretmenu. download shortcut master lite from playstore and then select all apps from the app, select gear s plugin and select SocketTestActivity for the scrrenshots i posted above.
[Samsung Gear S3] adfree:
[MENTION=1722345]tids2k[/MENTION]

:good: :cool:

Really interesting, thanx for sharing...

My Rooted SM-R732 not allow:

Request Device Info

Result

Fail:Modified device

But the other stuff looks interesting...

I have only no package for Gear S3 to try...

As we have no BQC5 package as Base... to jump to R760XXU2BQD2...

Okidoki...

I will play with my SM-R732...

Delete su from bin folder should be enough...

Then I can play more...

Best Regards
[Samsung Gear S3] tids2k:
When do you get the modified error ?
[Samsung Gear S3] adfree:
Request Device Info

I have rooted SM-R732...

Gear App detect this...

But to remove/delete su file from SM-R732 is enough...

--------------------------------------------------

This could be the way to downgrade Bootloader sboot.bin on Gear S3...

Now I will try to experiment with FOTA package on SM-R732...

To find way for custom FOTA Delta File... for instance with only sboot.bin inside...

Best Regards

Edit 1.

Dream about Bootloader Downgrade... need to be done...

https://xdaforums.com/showpost.php?p=72857621&postcount=189

I hope this work and I hope this time also possible with SM-R760...
[Samsung Gear S3] tids2k:
Even if we are able to initialise the fota package from the phone it will stop at the signature checks. We cannot install anything with XXUA** to XXUB** the package will fail. There are bootloader checks at the start.
[Samsung Gear S3] adfree:
IMHO for these kind of theory we can NOT test/confirm...

1.

I can not remember other FOTA packages as I have uploaded...

And these 2 require MANDATORY

R760XXU1APJF/R760OXA1APJF

We know... Rollback Prevention not allow to jump back to this Firmware...

2.

The only newer FOTA Package as BQC5... BQD2...

Reuqire FOTA package from BQC5 to BQD2...

And this "Combination" seems not available nor I found it...

I have NO FOTA package from BQC5 to BQD2... :(

I could search harder.... we have enough Sales Code for OXA...

Maybe I could do this...

3.

If newer Firmware is available.. we could check theories... :D

R760XXU2BQF1 seems under Construction/Testing...

So it is only matter of time...

Best Regards

Edit 1.

Sales Code list for OXA... taken from BQC5 CSC...

Maybe somewhere BQC5 to BQD2...

ACR
AFR
ARO
ATO
AUT
BGL
BIT
BNG
BRI
BTC
BTU
BVO
CAC
CAM
CAU
CHC
CHO
COO
DBT
DCM
DEF
DKR
ECT
EGY
EON
EUR
ILO
INS
INU
ITV
KDI
KOO
KSA
KTC
LAO
LUC
LUX
LYS
MID
MWD
MXO
MYM
NEE
NPL
PAK
PEO
PHE
PHN
PRO
ROM
SEB
SEE
SEK
SER
SIO
SKZ
SLK
TGY
THO
THR
TIM
TMC
TPA
TPH
TTT
TUN
TUR
UPO
UYO
WTL
XAC
XAR
XEF
XEH
XEO
XEZ
XFA
XID
XJP
XME
XNZ
XSA
XSE
XSG
XSK
XSP
XTC
XXV
ZTO
[Samsung Gear S3] tids2k:
I have checked all of them, only interesting one's are : KOO.

---------- Post added at 02:31 PM ---------- Previous post was at 02:19 PM ----------

@adfree remember this image.

I found admin master codes

Thank me later :)

This is the admin menu --> access it through shortcut master

1. "gearfotaclear" - Be careful erases fota impormation from gear app :)

2. "gearsa1234" - Hidden menu 1

3. "geardm8736364" - Hidden menu 2

4. "finish" - exits the menu
[Samsung Gear S3] adfree:
https://www.file-upload.net/download-12591974/update3.zip.smR760_BQE1_from_BQC5.tar.html

BQE1 FOTA package for SM-R760... as Base Firmware BQC5 required...

BQC5 is as Odin package available. :good:

So in theory we have something to play with... FOTA local test...

not tested... own risk

Best Regards
[Samsung Gear S3] thiagow:
Wow, that seems like a break thru. Now that you guys went so far any news on changing the Sales Code so Spay could work on international versions? Thanks!
[Samsung Gear S3] adfree:
Sales Code change could be similar to SM-R732...

[B]CSC Preconfig[/B]
testmode *#272*719434266344#

Tested only with my SM-R732...

BUT you need:

rooted Firmware...

or

Combination Firmware (as it is rooted) and CSC file from Firmware...

In Combination Firmware you can simple enter this Code:

*#272*719434266344#

In Retail Firmware it is blocked...

Only as info... own risk.

Best Regards
[Samsung Gear S3] adfree:
memo to me...

sh-3.2$ cd /opt/usr/media/Others
sh-3.2$ ls
delta.tar delta.ua
sh-3.2$ cp *.* /opt/usr/data/fota
cp: accessing `/opt/usr/data/fota': Permission denied
sh-3.2$ reboot fota
sh: reboot: command not found

Reboot was clear...

But I have forgotten about limited access to folders... :D :rolleyes: :o

I have few ideas, how to bypass...

Need some time to test... first on my SM-R732...

Only as info. :cowboy:

Best Regards
[Samsung Gear S3] adfree:
https://xdaforums.com/showpost.php?p=73020377&postcount=195

I am started today test with "custom"... modified FOTA TAR... for update only Bootloader.

First test success... update to newer Bootloader/sboot.bin

Now I will check if downgrade... to older sboot.bin work...

I can only test on SM-R732...

But if this work, I will prepare test package for Gear S3...

Idea is to perform this with Combination Firmware BQC2...

RISK to brick...

Best Regards

Edit 1.

update.cfg for SM-R760 would look then similar to this:

BOOTLOADER	sboot.bin	FULL_IMG	/dev/mmcblk0p80	0	1601808	1601808	[COLOR="Red"]7aa18e05e78a31fc22a7dfb4494c625f74e47e92	768b148ed957c7386b40091d2211ceda92d07bfe[/COLOR]

CM	cm.bin	FULL_IMG	/dev/mmcblk0p7	0	2183440	2183440	[COLOR="Red"]7ae677a46c772ad468a7fb8116bf5df678593c56	7b3efa00cbc7a9c032f075b0dc526f95d311a1e9[/COLOR]

:o :rolleyes:

But first I have to find for what these MD5 Hashes are... :rolleyes:

Damn... at the moment all things which work "easy" on SM-R732... not work or harder protected on SM-R760... :cyclops:

Edit 2.

Sorry, seems I am drunken... need some sleep...

Is not MD5... is SHA1... :rolleyes: :o

Best Regards

Edit 3.

:D

Is easy... SHA1 for old Binary on device... second SHA1 is for new Binary... inside delta.tar

Edit 4.

SM-R760 only! UNTESTED FOTA package... aka delta.tar for Test with Combination Firmware BQC2

https://www.file-upload.net/download-12605604/delta.tar.html

Please be carefully! OWN RISK!

Inside is only CM and SBOOT from APK7...

If luck and this work... then downgrade to APK7 possible...
[Samsung Gear S3] tridantes:
I'm so glad this thread exists!

I was wondering if someone here could give an answer or point me in the right direction regarding this query:

I need to find the duid of a device without being on the same wireless network. I have all the other details of the device including IMEI/ICCID/Machine-id etc. Just missing how the DUID is generated. I can get it using the sdb from the Tizen IDE.

Sorry if this isn't the right place for it... its the only forum I could find with a deep dive into the Gear S3.
[Samsung Gear S3] DinckelMan:
Best of luck adfee, you are our only hope ?

Is there a way to hardmod the NAND chip on the watch?
[Samsung Gear S3] adfree:
[MENTION=8410964]tridantes[/MENTION]

Do you know this Command:

sdb capability

[MENTION=5846680]DinckelMan[/MENTION]

No idea if we mean the same...

But IMHO all new devices use eMMC... this is something like "SD card"... only not removeable... without desolder from PCB...

Best Regards
[Samsung Gear S3] DinckelMan:
Yeah the plan was to solder an adapter to the eMMC chip. Won't be as easy as the NAND chip on a, let's say, Nintendo 3DS, so not sure how worth it it is