yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S8 Guides, News, & Discussion] bricky23:
Right, I understand what your saying. I am just saying that if you do a factory reset, it may go back to VZW/VZW/VZW. Also when you flashed from XAC to XAA/VZW/VZW you only flashed ap and home csc from verizon firmware?
[Samsung Galaxy S8 Guides, News, & Discussion] gqukyo:
From what some are saying, doesn't work that way. I don't care either way as long as we can continue flashing back and forth. And yes just the Verizon AP and Home CSC files per what others are saying.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Here is another one for Qualcomm secure execution environment that root can be obtained with

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0613
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
Looks like that only works on kernel 3.10 and 3.18 :(

My kernel version is 4.4.16-11131491
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Go into developer options and uncheck "auto update system"
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
http://www.cvedetails.com/vulnerabi...997/version_id-201744/Google-Android-7.0.html this looks interesting
[Samsung Galaxy S8 Guides, News, & Discussion] raduque:
OK, so, read all 25 pages and there is WAY WAY WAY too much irrelevant root information to sift through, so I'm just going to come right out and say it:

Is there a full firmware to flash that will turn my Verizon device in a US Unlocked device with zero Verizon customizations and all Samsung software and features intact, like the S7?
[Samsung Galaxy S8 Guides, News, & Discussion] the_OZONE:
If you actually read the posts you would realize they are not "irrelevant". We need root in order to do full cross carrier flashing.
[Samsung Galaxy S8 Guides, News, & Discussion] Skyrocket2Paradise:
Not true if you just read the past 5 pages...
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
this is carrier switching AND root discussion thread, not just carrier switching..

and yes, you need special hardware/software and/or root to fully switch...
[Samsung Galaxy S8 Guides, News, & Discussion] Skyrocket2Paradise:
I'm not sure where I said this thread wasn't both carrier switching and root?

That's exactly what I just pointed out.. root may not be mandatory for carrier switching if you have the appropriate cable..
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
i stand corrected lol.. was just implying root is relevant because it can also achieve carrier switching.. but yes, only way is with root or uart.. u can flash firmware but it wont completely switch everything and will still read xaa/xaa/vzw
[Samsung Galaxy S8 Guides, News, & Discussion] b3@n:
You ALL need to be checking into this one. Catface douche guy responded to the other one while ignoring this one which is more pertinent and is currently a vulnerability from 4.4 all the way to 7.1.1, all kernel versions.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
We also have the ability to go all the way down to the February 1st security patch
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
theres multiple priv+ vulns that say work on 7.0 including mediaserver and telephony and others lol

we just need devs who actually know how to impldment them
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
I feel the NFC exploit may be simpler than the others however, and I am reaching out to a Feb friend of mine that has worked with NFC before so we will see what happens but yes we need to get devs or people who know how to execute the exploit that is something I am at a lack of knowledge for.....
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Well, Then I realized there is no way to pull my system folder without at least an unlocked bootloader...... Which is exactly what we are trying to do in the first place..... Even went ahead and tried it with adb just for the hell of it. Def a no go
[Samsung Galaxy S8 Guides, News, & Discussion] raduque:
Well, I'm not interested in root at all, so I suppose this Verizon device is going back and I'll be ordering a US Unlocked next month instead. All I want is Samsung Cloud and the rest of the feature intact, like on my unlocked S7e.

Thanks.
[Samsung Galaxy S8 Guides, News, & Discussion] pma7779:
I am 98% sure I am going to flash to a different carrier to get rid of the bloatware but I have a few questions still.

Will this disable wifi calling? I really need wifi calling, the signal in my apt is terrible.

Any other none Samsung features I will lose?

Just want to make sure this is right for me.
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
I can do a dump of the system file. Thats what I was doing before.

---------- Post added at 07:50 AM ---------- Previous post was at 07:49 AM ----------

you cant do that yet. The XAC way is going to do something, but you can never go back.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Wait. How are you dumping the system file without root?
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
From the AP file that we use in Odin.

https://mega.nz/#!5VU1RaCJ!XcPD8TDjOKpEwPstBRGnRrMhm-mtVfIQXvUmzRvdt3g
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
That's not your current system file. That's the file from that firmware
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
and it is the latest version.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
but its not a system dump lol a system dump is pulled from your device
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
ok then. pull everything. ADB pull was working on EngBoot.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
how did u manage that without root

---------- Post added at 07:09 PM ---------- Previous post was at 07:07 PM ----------

to add, you can pull a read only system you just cant push..so anything with read access should be able to be pulled without root
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
yep. that should mean you can do a basic, not full, system dump
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
yes, but the AP file you pulled from isnt a system dump still lol
[Samsung Galaxy S8 Guides, News, & Discussion] foeshigity:
anyone figure out how to fix Xaa/Xaa/Vzw?
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
not yet. We need to get root it seems like. Or if someone else gives us his engboot we can fix it.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
we already have multiple eng boots.. so how is it used to fix it?
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
https://xdaforums.com/galaxy-s8/how-to/switch-to-carrier-firmware-100-t3609487
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
if u read the comments no one has got it to work as well as the op only had a few posts and provided 0 files so no one knows if its even legit but i feel he is a troll
[Samsung Galaxy S8 Guides, News, & Discussion] Tigerhoods:
I know we more on the root thing at the moment. I'm just curious to the people with apn or connection problems on xxa have they played around in here I feel like these would work if I had the right Sim or flashed something different. go to that mode set to manual then global will try to force it's self... it gives you an option to turn off auto global... then go back in and find your operator maybe that would help I don't know I was surprised to see that there though
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
when my last s8+ was stuck on xaa i didnt have aglobal option and no way to select cdma as it didnt exist in the settings
[Samsung Galaxy S8 Guides, News, & Discussion] Tigerhoods:
so if you look at the first pic that mode doesn't have cdma but if I go into that mode It will shut off my verizon data service..then magically connect to something, then show me a list of options of to connect to different services all without data. You can see that menu in the second pic
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
i got that menu.. i played around with it literally for 2 days with no luck lol.. keep in mind everything worked except sending sms no matter what i did
[Samsung Galaxy S8 Guides, News, & Discussion] Tigerhoods:
Thats all I was wondering thanks
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
It involves repetitive read and writing to NFC tags that causes a memory overflow because there's some code that does memcpy without checking the maximum length of the destination

https://android.googlesource.com/pl...ci/+/c67cc6ad2addddcb7185a33b08d27290ce54e350

---------- Post added at 06:00 AM ---------- Previous post was at 05:34 AM ----------

Also I think we're all getting confused about the difference between a vulnerability and a full on exploit for that vulnerability. Obviously all these CVEs we're finding online weren't publically exploited otherwise security would be total chaos.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
yes, they are possible vulns/attack vectors but we need some real devs that know how to actually implement them lol

they must not be useful or easy if theres no exploits.. we need another zero day like dirty cow lol
[Samsung Galaxy S8 Guides, News, & Discussion] Interceptor777:
Do you think it's possible to find some factory firmware with older security patch for dirty cow to work?

I believe it was patched in December 2016 patch.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Given our phones came out after the patch, that would be a no go
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
dirtyc ow will NOT WORK.. ive seen it brought up in 2 threads.. our phone was released well after dirty cow and earliest firm ive seen was dated march 1st so id say looking at dirty cow is a huge dead end
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
So back to trying to elevate privileges through an exploit in NFC. anyone here capable of developing an app that just spams the NFC vulnerability until an overflow happens?

Or someone on here start working for Samsung so you can just make a custom rom signed to be flashed to these ha ha

I'm just confused as to why we aren't even able to flash the engineering build. Like what the hell did Samsung do...

I just started reading that book - android security internals, an in depth guide to Android security architecture, because I'm like overly dedicated to making this root happen.

I'm going to talk to a friend that works for Samsung. She's a low level employee so she won't know much, but hoping she can put me in contact with someone that does know something
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
we can flash eng files but the eng files do not have root access
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Someone told me yesterday they had an eng file with root, but when they tried to flash it, the system told them that they were on a consumer edition and could not flash it. Swear i saw that. I'm wondering if there's a debug build with root floating around....
[Samsung Galaxy S8 Guides, News, & Discussion] explorer-10:
Is it possible to do systemless root on the Galaxy S8?
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
that person i dont believe even had the file.. i think he said someone else supposedly did and that is what they said but since ive never seen it i dont believe it even exists

---------- Post added at 08:18 PM ---------- Previous post was at 08:17 PM ----------

lol... if it was possible we'd have root already dont ya think?
[Samsung Galaxy S8 Guides, News, & Discussion] explorer-10:
Geez, well I didn't know... Sorry for being used to staying with a Nexus.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
I'm gonna message my friend with Samsung about now to see what I can find out. I'll post back as soon as I find out more
[Samsung Galaxy S8 Guides, News, & Discussion] jellomonster54994:
i attempted the 100% carrier switch but i couldnt even get past odin to flash engboot so i didnt even get to flash firmware
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
if u are getting SHA256 or w.e error you need to use prince comsey then with stock firmware you need to use regular odin i believe.. its wierd but it will flash both ways..

but so u kno there isnt a 100% carrier switch without root
[Samsung Galaxy S8 Guides, News, & Discussion] jellomonster54994:
I got SHA256 so maybe I'll retry just because I'm trying not to lose hope
[Samsung Galaxy S8 Guides, News, & Discussion] nickman529:
Sprint s8+ user here. Just picked up the phone last week. Gotta skim this whole thread but Anyone who makes any progress/makes anything flashable I'll volunteer my device.
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
we are waiting for the new Engboot with root access from JUSMEJOSE, he told me he would release 3 of them later this week.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
lol like last time prolly means 3 weeks.. he said the last ones had root but yhey didnt so i hope it doesnt take as long this time and they actually have root..

its all we have to go off of anyways atm lol
[Samsung Galaxy S8 Guides, News, & Discussion] jellomonster54994:
well youre right it puts a hold on all of us but atleast hes trying
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
agreed.. i sure dont have access to any special files.. would be nice if we knew how to get em
[Samsung Galaxy S8 Guides, News, & Discussion] b3@n:
Not trying to be hyperbolic or dramatic here but we're heading into a semi-cyberpunk future where "hacking" the big corporation's devices (just so we can actually use them fully with no ill intent) is something they want to see criminalized. As their security gets more advanced, it would probably take a concerted effort of actual greyhat activity to access samsung's infrastructure and copy things like their unsecured eng boot files, or probably better, just their encryption keys for things like their bootloaders.

Doubt it will happen unless every manufacturer begins behaving in this way and gives power users/hacker types no viable alternative hardware. More likely we'll just see advanced users migrate away from Samsung, and they won't care because that's a very small slice of their customer base.
[Samsung Galaxy S8 Guides, News, & Discussion] nickman529:
Yeah but still there's always security holes. Nothing is made perfect. And as they get more advanced so do we.
[Samsung Galaxy S8 Guides, News, & Discussion] happy2472:
can anyone explain the benefit to flash any of this firmware for carrier switch ... I have Verizon ... so why would anyone do this?
[Samsung Galaxy S8 Guides, News, & Discussion] unitz0mbie:
no bloat, better performance, cleaner device, better battery
[Samsung Galaxy S8 Guides, News, & Discussion] happy2472:
So im on verizon ... to make this better ... what would you recommend? [MENTION=6568062]unitz0mbie[/MENTION]
[Samsung Galaxy S8 Guides, News, & Discussion] thatotherguy..:
You will get this
[Samsung Galaxy S8 Guides, News, & Discussion] chonfx:
carrier switch

i will help to carrier switch whoever help me to unlock sprint s8+ using z3x box
[Samsung Galaxy S8 Guides, News, & Discussion] Rushstrike:
did you try using the AT command as suggested in : https://xdaforums.com/showpost.php?p=72394336&postcount=221 with your z3x box?

I have tried using 630k ohm I can only get some of the AT command working and get error on other .
[Samsung Galaxy S8 Guides, News, & Discussion] chonfx:
i don't have a z3x box. once eng file is flashed, unlock is easy for sprint models.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Do you have the file if not where did you get the screenshot??
[Samsung Galaxy S8 Guides, News, & Discussion] hazmad:
https://dl.xda-developers.com/4/1/5....jpg?key=ip3DQ8WCAYzKYzZ0x86b3w&ts=1495555862
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
That's what I was talking about [MENTION=1613431]elli[/MENTION]wigi
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
says gone
[Samsung Galaxy S8 Guides, News, & Discussion] aybarchu:
Hey, can someone give me the link for the XAC firmware. Also a little guide to get the XAA/XAA/TMB on my device?

EDIT: i've found it.

But, i want to know. When new updates comes out, it will update normally? Also there are improvements between this and the stock TMB firmware? My TMB device is already unlocked and Im using it outside of the US, so I dont want any of the tmb apps and splash screen anymore
[Samsung Galaxy S8 Guides, News, & Discussion] nickman529:
Yeah link is dead. Anyone heard anything more Bout engboot?
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
But that's in general what I was talking about with a full root eng boot.

My Samsung person is supposed to get back to me today or tomorrow with some info. So once I get in touch, I'll ask them about this if we can't get ahold of this said file ourselves
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
yes i see now.. but i would like to have the file still so we can test stuff out
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
Yeah it is broken but all he linked either way was just the image.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
so no one has access to the file outside of the person he took an img of lol
[Samsung Galaxy S8 Guides, News, & Discussion] GSM CHEN:
。。。。。。。。。。。。。。。
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
various things.. cant say for sure until i get the file and can flash it and see where i can go with it
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Study the contents and try to figure out what in the coding brings up that error and whether or not it is something that can be changed, etc
[Samsung Galaxy S8 Guides, News, & Discussion] Triforce1001:
In that picture, there are a few things that stand out, "Qualcomm Secureboot", "Secure Download", and the message at the bottom that reads, "This is ENG binary. Please use USER binary! (boot.img)" I am first going to start with "Qualcomm Secureboot" My interpretation of this is that Secureboot may relate to the locked bootloader. Though what intrigues me the most is the fact that since its status reads enable, there is a possibility that we could disable it. Moving on to "Secure Download" My thoughts on this are similar to the Secureboot. I concluded that if there is a possibility of disabling this, then we might be able to do more then we can now while the phone is in download mode. Finally, my conclusion about the bottom message is that because it is saying that the user binary is needed, we either need to acquire it or if we already have it (not sure if we have it and if we do then I completely missed it) use it. If we are unable to do so, then the Secureboot or Secure Download may be the key. I thought I read somewhere on this thread that we can't use boot images so this present I problem. Anyway, I hope this helps in some way.

Also looking at the picture, the part about debug level is also interesting.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
all of that is normal minus the user binary in red..

secure download cannot be disabled unless we find a way to unlock the bl.. if it was disabled we could simply odin twrp or cf auto root..

secure boot is also similar to secure download except if we somehow manage to change any partitions such as kernel with anything other than samsung signed or make any modifications it will fail to boot..

so secure download enabled = only samsung signed firmware can be flashed in odin

and secure boot enabled = cant boot if it detects any modifications.. think of this as like dm verity or something

as far as the binary, typically there are user builds and debug builds and maybe eng builds.. the retail devices ship with user firmware.. therefore it appears to be blocking the eng boot (that one seems like a legitamite eng boot) since we are on a normal user build..

the combo firmware is also a user debug build so still user i believe..

if we can find a full eng firmware then the eng might take but eng boot on user firmware seems it wont boot..

so far the debug level is irrelevant.. flashing the eng boot we have it is set to low.. not sure if its combo firm or simply enabling dev options etc. but ive seen mid and high.. on combo firm it can be changed by holding down home button i believe it is... also, debug typically means the amount of logging to debug firmware so i believe when its low to mid to high means more logging at each level
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
So far its looking like a debug firmware is going to be our main option if in fact an eng file won't boot. I mean when you return a device they 100% positive check into everything about it via root to see if its a system issue or something that has to be fixed. That my friend told me told me the other day. So there is a way, whether it be a leaked debug or an exploit
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
Does anyone know what upload mode is? I just got to it. I don't know how do anything with it.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
It is used for dumping kernel logs as well as debug logs

Been through the log already though
[Samsung Galaxy S8 Guides, News, & Discussion] martylavender:
Is there a specific reason Samsung decided to lock the bootloader for the Snap Dragon version?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
To support cdma carriers
[Samsung Galaxy S8 Guides, News, & Discussion] martylavender:
Meaning so people are forced to stick with the carrier they bought it through?
[Samsung Galaxy S8 Guides, News, & Discussion] force70:
And the non CDMA carriers? Those devices are all locked down as well including here in Canada.

Up until the note 7 no samsung device in Canada was ever BL locked

Sent from my S8 plus, Note 7, S7 Edge or S6

---------- Post added at 10:20 PM ---------- Previous post was at 10:19 PM ----------

With the cdma carriers yes more or less. People on GSM carriers have lots of options to avoid locked devcies across different device manufacturers thank god.

Sent from my S8 plus, Note 7, S7 Edge or S6
[Samsung Galaxy S8 Guides, News, & Discussion] martylavender:
I thought Sprint and Verizon were the only CDMA carriers in the US. Tmobile and ATT are GSM.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Correct but Sprint and Verizon require all their devices to be BL locked so in order for Qualcomm and Samsung to secure a deal in the U.S all Snapdragon models come BL locked. GSM carriers used to have to ability to unlock them idk if they still do, but if so it is unlikely to happen from anyone besides T-Mobile(they have done so in the past)but still very unlikely for them as well....
[Samsung Galaxy S8 Guides, News, & Discussion] martylavender:
So us US Galaxy users are really just pissing in the wind hoping for a BL unlock? More than likely won't happen?
[Samsung Galaxy S8 Guides, News, & Discussion] TechBSwift:
You are correct my friend. You want an unlocked bootloader, by a pixel. This is to be expected for all mobile phones going forward.
[Samsung Galaxy S8 Guides, News, & Discussion] martylavender:
I'm curious to see what the Pixel XL 2 and Note 8 are like. I mean ultimately the S8+ runs great for me. Would be nice to have a generic vanilla Android install but I guess I could go Pixel XL 2. I would miss Samsung Pay.