yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
i am pretty sure you can flash astock vzw U firmware onto your U1.. if u want root read the root thread but most likely youll need to root then use the system.img for the rom u want for the second part.. u might even look at jrkruse roms in the vzw s8+ development section.. he has a u1 aqh3 rom for verizon users that should have all the verizon features enabled but still be on u1 firmware
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
right.. we are just super lucky that the combo firm boots have dm verity disabled or else we wouldnt even have custom stock based roms lol
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
All hail the combo firmware! That was the hack of the year man :)
[Samsung Galaxy S8+ Guides, News, & Discussion] BlackHoleOS Dev:
Check root junkys video on YouTube I'm on vzw and just fully rooted my phone I'll be making a three about it
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
lol
[Samsung Galaxy S8+ Guides, News, & Discussion] BlackHoleOS Dev:
What's funny
[Samsung Galaxy S8+ Guides, News, & Discussion] shaggyskunk:
I'm gonna guess - watch the video ?

From Down the Rabbit Hole by:

My SM-G930W8 ??
[Samsung Galaxy S8+ Guides, News, & Discussion] BlackHoleOS Dev:
I put that in my three check it out
[Samsung Galaxy S8+ Guides, News, & Discussion] shaggyskunk:
?

From Down the Rabbit Hole by:

My SM-G930W8 ??
[Samsung Galaxy S8+ Guides, News, & Discussion] BlackHoleOS Dev:
I made a root post on hear for the s8 and s8+ and linked that video on it and with screen shots of my root

---------- Post added at 02:16 PM ---------- Previous post was at 02:16 PM ----------

On my phone
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
ANYWAY...

I'm just gonna leave this here:

https://www.sstic.org/media/SSTIC20...ticle-attacking_samsung_secure_boot-basse.pdf
[Samsung Galaxy S8+ Guides, News, & Discussion] meathammer386:
Doe this mean your going to get our bootloaders unlocked for us

---------- Post added at 01:13 AM ---------- Previous post was at 01:04 AM ----------

Awe to bad samsung was notified and it was patched in December of 2016 from what this says that suxs
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
I wish lol.

I was bummed out about the ending too especially because that paper popped up today and is now at the top of all my queries on this subject so it must have just got indexed.

Going after tflash is brilliant though, odin is so full of weird edgecases that surely there have to be more of them.
[Samsung Galaxy S8+ Guides, News, & Discussion] meathammer386:
You should try it anyways
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
so ur postin in my bounty thread about making your own root thread and are excited? lmao

hope u at least give creds
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
thats old lol we couldnt get tflash to work so weassumed it was patched
[Samsung Galaxy S8+ Guides, News, & Discussion] jmotyka:
What about those special SDcards devs used about 4 or 5 years back to unlock bootloaders? Anyone look into that? I wish I could remember what they were called and what phone I was using that required it.
[Samsung Galaxy S8+ Guides, News, & Discussion] shaggyskunk:
PM sent.
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
I have reported the thread in question
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Does anyone know what the ddr partition is for? Mine has very bizarre data in it..

All bytes less that 0x06 and many many nulls in odd patterns that repeat and count up to 06 and back down
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
nothing useful i think.. u can see indications of it in last_kmsg log file.. the ones i am looking into are sdb, sdd1, param, misc and steady currently..
[Samsung Galaxy S8+ Guides, News, & Discussion] StacyCarrasco:
Honestly I just hurting to be practiced to skip media tracks as soon as a long-press of the volume buttons though the screen is off. I'd pay $20 just for that lol From what I've found, there is no loud, non-root unmodified. It's a cakewalk subsequent to root though. But, I have to imagine pro for elocenter.net this device is going to explode previously long.
[Samsung Galaxy S8+ Guides, News, & Discussion] Cmon meow:
Was going to ask Samsung's all knowing Bixby to unlock it and Bixby sent me that off instead of updating lol
[Samsung Galaxy S8+ Guides, News, & Discussion] TheLastSidekick:
"Hey Bixby unlock my bootloader"

"You got it!"

...if only
[Samsung Galaxy S8+ Guides, News, & Discussion] craigschroeder:
Was it the HTC One?
[Samsung Galaxy S8+ Guides, News, & Discussion] coin$:
Is it not the incredible? I remember rooting or something with my incredible and we needed special sd card and had to do a special method to cause a race condition.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
I'm very sure any method from that long ago is well covered by Samsung. Furthermore, the SD card stuff was tried already during the initial root investigation that resulted in sampwnd
[Samsung Galaxy S8+ Guides, News, & Discussion] philweser:
20$ for bootloader
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
to add it was an epic fail
[Samsung Galaxy S8+ Guides, News, & Discussion] BlackHoleOS Dev:
I pm u
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Lol
[Samsung Galaxy S8+ Guides, News, & Discussion] shaggyskunk:
Why on earth would someone quote an entire post in order to type 4 characters...?? And yeah - lol

View attachment 4294015

Sent from my SM-G955W ??
[Samsung Galaxy S8+ Guides, News, & Discussion] jkhan49:
25$ for s8+ Bootloader
[Samsung Galaxy S8+ Guides, News, & Discussion] Hell-Razor:
Any updates on the bl?
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
And?? you didnt finish your sentence lol
[Samsung Galaxy S8+ Guides, News, & Discussion] elliwigy:
have been working on it since root lol.. i have a pretty solid idea of what needs to be done its just way over my expertise lol
[Samsung Galaxy S8+ Guides, News, & Discussion] Hell-Razor:
Very nice. Just wish I could help. Hopefully somebody with the knowledge will chime in or pm you.

I'm curious what needs to be done but I understand if you want to keep it private.
[Samsung Galaxy S8+ Guides, News, & Discussion] Drdra3:
What happened with that guy that was going through the code looking for the specific line to change from a 0 to a 1?
[Samsung Galaxy S8+ Guides, News, & Discussion] DissonantAI:
I'm pretty sure it came out to be irrelevant to the goal.

IE: he had gone ahead and done that and we saw no change in the end case.

If I'm not mistaken he even tried to hex edit a zero instead of just ascii zero and the results were inconclusive still.
[Samsung Galaxy S8+ Guides, News, & Discussion] IJoxer:
Not that it was inconclusive, only that it was irrelevant to unlocking the bootloader entirely, though he was successful in what he was trying to achieve. They had made the assumption the using OEM unlock in developer options was all that was needed to unlock the bootloader (or at least fastboot to help with unlocking the bootloader), when it hasn't been relevant to locked down Samsungs in quite some time. The option has been removed from developer options on the S8/S8+ and he managed to reenable the option, though it had no effect, whether that be to lack of a working module being included to the option, or simply because it wasn't relevant to begin with, I'm not certain.

Regardless, it'll take much more than a simple flip of a switch in an options menu to unlock the bootloader. I'd have to guess some very intuitive command line work, and quite likely some high level unencryption and/or jtagging the phone. I'd be willing to bet we won't see a bootloader unlock for some time, if ever, aside from an exploit in the coming Oreo update (again, highly unlikely, especially with the more intricate partition scheme being used these days).

I'd be quite pleased with hearing the theory [MENTION=3812611]elliwigy[/MENTION] has though, even though coding isn't my strongest trait, problem solving is. Please feel free to message me Elliwigy, unless you'd like to share here. I feel it'd be of great benefit to us all to do so, the more minds we have working on this, the better.

Take care!
[Samsung Galaxy S8+ Guides, News, & Discussion] TheMadScientist:
This is a bounty thread...As such that should be all that is posted here!!!

Such and such pledges such and such amount. Payments made. Or retracts such and such amount. And when achieved that is it......

As such, This thread is currently being cleaned and will stay on topic:good:
[Samsung Galaxy S8+ Guides, News, & Discussion] Kam163:
Any updates
[Samsung Galaxy S8+ Guides, News, & Discussion] sacnotsack:
Updates about the bounty? Updates about new pledges for the bounty? Updates on the total for the bounty?
[Samsung Galaxy S8+ Guides, News, & Discussion] Davilince:
Seriously how much would it cost to buy a s8+ bug exploit that could potentially grant us an unlocked bl?
[Samsung Galaxy S8+ Guides, News, & Discussion] sabresfan:
Sammy has deeper pockets than us.
[Samsung Galaxy S8+ Guides, News, & Discussion] Obamaloominaty:
Hundreds of thousands of dollars, maybe even more than that.
[Samsung Galaxy S8+ Guides, News, & Discussion] Bringmethedead:
Pledge

I'll Pledge 20 for FULL ROOT+BL+TWRP on s8+
[Samsung Galaxy S8+ Guides, News, & Discussion] xdanilva:
Rip your hopes and dreams.

Pledging 20 won't do much.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
How much are you paying out now since full root happened months ago
[Samsung Galaxy S8+ Guides, News, & Discussion] xdanilva:
I never payed out anything.

---------- Post added at 07:26 AM ---------- Previous post was at 06:55 AM ----------

I got my phone right after jrkruse's QH3 firmware thread.
[Samsung Galaxy S8+ Guides, News, & Discussion] $droyd$:
Hey all.

I recently picked up a tmo s8 varient after taking a year or so off development. Not sure if anyone around here knows me from the LG or google side but I've been a recognized dev on xda for a while. I created AOSiP and illusion rom, also created the first device tree and blob repo for the initial boot of the lg g3. They recently took away my title for being stagnant on xda while working on iphone stuff haha. I'm very interested in running aosp on my new device so I've began the initial process. If anyone knows of any partially started device trees or any github repos that could be of some help please link em up. It sure would save time. if there's legitimately no device tree out there I guess we can start from scratch it'll just take longer.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
You can't load a new device tree as it's bundled in the boot.img which we can't customize as the bootloader is locked. Unless there is a way I'm not familiar with to load a new device tree outside the boot sequence?
[Samsung Galaxy S8+ Guides, News, & Discussion] $droyd$:
I haven't been around in a while and haven't spent much time working on the device but I'm talking about source building an aosp rom not loading a ported one. The device tree im talking about isnt bundled in anything. There's a way. It's just going to take some time. Do we have twrp yet? Historically T-mobile versions of most devices had unlocked bootloaders. Again I haven't been around in a couple years.
[Samsung Galaxy S8+ Guides, News, & Discussion] xdanilva:
No twrp on G950U/G955U. Samsung has a universal bootloader for g950/g955u
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Again, no. The bootloader is locked, so no twrp. The latest qcom secure boot has not been broken, period. It's not a matter of when it's a matter of at this point a very very incredibly unlikely if. Unless you happen to be yourself or know someone personally at the forefront of the field computer security, I wouldn't bet on that changing either. Which brings me to my previous point: if I'm not mistaken, device tree is only loaded at boot time by the kernel directly from the boot.img. if this is the case then you can not install a separate device tree as you can not modify the boot image in any way shape or form as the bootloader is locked and will refuse to boot anything except for images that have been cryptographically signed by Samsung with their attestation CA. It makes no difference whether the image is modified, compiled from aosp source, or stitched together one bit at a time into a hard drive with a needle and a magnet. If it's not an image made by, or at the very least signed by the same certificate that is at the trusted root of the certificate inside the hardware crypto on device, barring what I would consider an mericle at this point, no north American snapdragon s8/s8+, models g950u/w and g955u/w will boot it.
[Samsung Galaxy S8+ Guides, News, & Discussion] :
though that might be true, i had a custom kernel that i flashed on my previous S8+. to my surprise it actually booted on that phone. it was when i first got my S8+. i had it on there for a while and thought i wouldve ended up bricking it so it reflashed stock back on it. if i can find it, though it was a few months ago, i am more than glad to share it with you. I can say that i had no issues when i was using it,nor did i brick it. i've been through a few bootcamp(windows) installations since then,so, i cant promise that i can find it,but, i will look. only downside to it was that it was for bootloader 1. i mean seeing how it was created should give a similar idea as to what to do with bootloader2. But, obviously by Samsung switching the bootloader, security got a little bit stiffer. I will search tomorrow for it and will contact you when i find it. $droyd$ wow for real, havent seen you on here in a long time. alright guys i will get back to you all.

i hope i find the correct one because i had about 2 or 3 of them somewhere. I know what you guys are thinking.... im full of it,but, honestly i had it and it worked out and i forgot to share it with the public becuse i had a lot going on. But hey, dont believe me, im not asking anyone to. everyone keep your fingers crossed because once i find it, the bootloader 1 people will be super happy.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Just to be make sure I follow: you have(had? hopefully have ?) in your possession a kernel that you, or someone you know, or at the very least someone who is not Samsung, compiled a kernel that not signed by the Samsung attestation CA, but was successfully flashed to a device and subsequently was successfully booted by a stock snapdragon North America Galaxy s8+?

Color me skeptical ?, but being publicly proven wrong would in this case be a most welcome development ?
[Samsung Galaxy S8+ Guides, News, & Discussion] $droyd$:
That's odd. Either way I have the device and am giving it a go. With the g3 we used the prebuilt kernel from LG to compile the Rom in aosp form. Boatloader lock could prove to be a bit of a challenge but It's only a matter of time at this point. We'll get it. You guys sound like you already decided it can't happen so I won't update here unless I have something for you. Merry Christmas happy New Year.
[Samsung Galaxy S8+ Guides, News, & Discussion] force70:
Alot has changed since you have been gone my friend and not for the better either. Tmo is now the same as Verizon and AT&T in locking down everything

Would be great if it could be unlocked absolutely but given the S7 never was unlocked (to my knowledge) and it's been how long now it is also unlikely the same will hold true on the S8. I get that this is what guys like you live for (and xda wouldn't exist without you) but there's that whole beating a dead horse thinking as well lol.

On the other hand the exynos doesn't have this issue. It's really the only option for anything development related at this point.

It's never been AOSP friendly like the unlocked snapdragons back in the day either though.

Kinda why I left Sammy and the whole OEM unlock fiasco on the note 8 totally put me off completely. I doubt the S9 will be any better either unfortunately.

At this point it would seem Sammy is a lost cause for us which sucks as I am admittedly a fan boy lol.

sent from my Pixel 2 XL or Note FE
[Samsung Galaxy S8+ Guides, News, & Discussion] $droyd$:
Never hurts to try. I thought I came across some official lineage for the s7. Maybe I was mistaken. Either way we'll see. Have a great new year. I'm off work for a week and we just got a foot of snow so ima hit the pc for a while.
[Samsung Galaxy S8+ Guides, News, & Discussion] force70:
Lol snowed in here also haha.

Happy New year to you also and again thanks for giving it a go. It's talented guys like yourself that have given the rest of us lots to flash over the years.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Oh believe me I haven't given up, in fact im one of a very small few people left who is actually spending any time at all looking at this. The difference i think is that I understand what it would take to make it happen. More specifically, I understand how little we know about what it would take to even make it possible if a vulnerability was found. There is as of yet no evidence that an unlock mechanism even exists, much less a way to subvert millions of dollars of engineering effort put into preventing exactly this from happening. Given there is no unlockable version identical to these phones that is unlockable it is not impossible (or even unlikely) that there simply is no mechanism to accomplish it, essentially "bricking" the unlock method as pushing code to even jmplement an unlock is impossible without access to the private key used to sign Samsung's releases, likely the single most secure data at the entire company.

I guess the point I am trying to make is that there is no predefined amount of work that if someone only just performed it, or was capable of doing it, that unlock would absolutely be achieved. As I said above, it's possible that it's not possible, no matter the effort put into it
[Samsung Galaxy S8+ Guides, News, & Discussion] :
Correct. I only flashed it and ran it. I never said it was an unlocked kernel, actually don't remember what type of kernel it was, I just know it was built from someone, and I flashed it and it worked. But like I said I for worried with bricking issues so I flashed back to stock. I just woke up and now I will search. I hope that I can find it. And honestly I don't know much about Samsung's new b.s. bootloader thing,so, hopefully it is found so you can check it out.
[Samsung Galaxy S8+ Guides, News, & Discussion] ryex:
Potentially stupid question, but what about brute forcing the signing key? Like how difficult would it be to set up a cloud hash service dedicated to finding the key? I understand that's it's probably a stupid huge encryption code being 256bit minimum, but we are in a day in age where people are computing gig-hash constantly (cryptocurrency)

Hell, as far as far-fetched ideas go, you could set up an entire crypto off this basic concept. Instead of mining for coins, by computing transactions, you could start a new coin that just constantly generates potential sign keys. If we have the public key, theoretically we should be able to identify the correct private key.

This would give incentive to people not interested in bootloader unlock, and would generate greater participation. I mean there's seriously a coin for dang near everything, might as well make our own XDA coin and actually use it SETI/folding@home style. We could start at any popular phone, then just move to the next once keys are generated, or realistically constantly scan the keys that are generated against known public keys to see what we can unlock.

If that's a straight up stupid idea or just plain impossible to properly implement, I apologize for wasting time.
[Samsung Galaxy S8+ Guides, News, & Discussion] thedeceivingeye1:
Sounds like an idea, but the area where the key/hash/etc is tested for unlock (not entirely sure about this development category, making guesses) might also be very difficult to get to in the first place.

This is very disappointing that no such mod/hack/whatever is even available for the S8, and attention for it is dropping dramatically. Come on, this is XDA, this community has done a countless number of remarkable things! Now, I'm not trying to blame anyone, but this is something I had just come to expect throughout the years. We should remain resilient.

For all we know, this immense lockdown put on the 835 devices may not even be just for consumer security. Could be for other purposes. Might just be to lock us into a single software/software update path to slow our devices down in a couple years in an attempt to rack up on money. Who knows; we can only speculate.
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Lllloooolllll

Let me put it this way:

A 256bit key has 2^256 possible values.

That's two to the power of two hundred fifty six.

To put that number in perspective, there are approximately 2^128 atoms in the universe.

If we used every computer that has ever been made, we would not finish before the sun goes Nova approximately 5 billion years from now.

Now for the kicker: most everyone, so I'm gonna assume Samsung has as well, use 2048bit keys for encryption. That's 2^2048, or 259 followed by 539 zeros times more.

They choose these numbers for a reason
[Samsung Galaxy S8+ Guides, News, & Discussion] IJoxer:
And another one just to top it all off, after the sun was dead and gone and we're flying through space towards earth 2, stiiiiiill using all the old computers that miraculously held up through the test of time, and the magic number finally flashes across the screen announcing the key has been decrypted, those who are there will gasp as the room grows silent with glances of disbelief spreading throughout the huddled crowd, one person will finally find the words to speak, and those words will be:

Finally got it, who's next?

My unnecessarily long, smart-ass way of saying that each device has a unique key, which was the same thing we ran into on the verge of what we hoped would be our successful unlocking of the S7 bootloader (spoiler alert: it wasn't) So an exploit does get discovered (crossing fingers for v2 bootloader), we can only hope it universally bypasses the signature, key, etc.

If it were not for the phone being held in my very hand, being so tightly locked down, I'd be curious as fuuu to know what they're hiding!
[Samsung Galaxy S8+ Guides, News, & Discussion] TheLastSidekick:
The land of milk and honey, also aliens. ? Samsung, it's aliens.
[Samsung Galaxy S8+ Guides, News, & Discussion] thatsupnow:
There's nothing that could be done hardware wise?? I remember my old Xperia needed one of the prongs on the battery connector grounded out while powering it up and that was how the bootloader was unlocked on that particular phone. But I'm sure Samsung has done a 200% job of keeping it locked up tighter than a prison
[Samsung Galaxy S8+ Guides, News, & Discussion] partcyborg:
Maybe! How about you ground out your battery pins 1 at a time until it works & tell us ?
[Samsung Galaxy S8+ Guides, News, & Discussion] loopytee:
Does this thread over at LG v20 have any implications for us? (Both use snap dragon)

https://xdaforums.com/v20/how-to/laf-download-mode-how-root-t3676011/page29

Or does the info that [MENTION=3167089]runningnak3d[/MENTION] has gained and shared in that thread provide any new info for us? He's a one man army attacking LG and is relentless in his pursuit.

Just checking
[Samsung Galaxy S8+ Guides, News, & Discussion] thatsupnow:
Ahahaha if something like that from the old Xperia phones worked I doubt I'd relay they info here! It would be spam spam spam you wrecked my phone spam spam spam! People have a hard enough time trying to root this phone. :silly::silly: