yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Note 9 Guides, News, & Discussion] unh1nged:
...thank you for Lincs comment, and thank you bober. I think that proves itself.

Anyways, back to the thread..

I upgraded to SE3, and had the update trying to push itself because I checked the update setting in case there was anything in there to shut off the updates other than the one in the Dev Options. So I Factory Reset it, and shut off the Dev settings right away, and it STILL started trying to push it. Then at 2am this morning it scheduled an update time to install the updates! Like since when is that happening?

Its forcing the update to bootloader 2. I set the time back to as late as I could, so I could go back to sleep and i'll have to Factory Reset it again to avoid that until I have time to comb the forums for a way to ACTUALLY disable the updates. If anyone has similar issues, or knows how to drop the hammer on this, apologies if its easily found, but my day is too busy until later to look. Thanks for any help offered.
[Samsung Galaxy Note 9 Guides, News, & Discussion] KOLIOSIS:
1) Remove SIM Card

2) Factory reset, do not set up WI-FI & leave the SIM Card out.

3) Use ADB command to disable the software update apk. (com.wssyncmldm)

https://www.xda-developers.com/disable-system-app-bloatware-android/

3) Just for added measure, toggle off Auto Update in Developer Options.

4) Now, you can re-install your SIM Card, set up WiFi & go about your business as usual.
[Samsung Galaxy Note 9 Guides, News, & Discussion] unh1nged:
Stellar! Thanks so much. Didn't realize there was a generic android fix that would work considering the Sasmsung ballast on the Note 9 and the changes over the years to the bootloader. Sorry though, that should have been easily found, but I think I was being too specific with my search variables. Either way, thanks again bro.
[Samsung Galaxy Note 9 Guides, News, & Discussion] gruuvin:
Your constant filth is a stain on these forums. You both need to be banned.
[Samsung Galaxy Note 9 Guides, News, & Discussion] DarkMidnight:
So I saw an article about a Android AOSP bug that has been known since about since March, why couldn't a "malware" application be written to exploit this but to get root access and place a SU binary where it needs to go? Or is it simply just a matter of *anything* happening to those protected partitions that would cause the OS to not boot?

Source: https://www.zdnet.com/article/zero-day-disclosed-in-android-os/
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
dont think so.. pretty sure the bootloader loads first then starts to execute cmdline and verify the next in line such as boot.img or recovery.img etc..

if u did manage to execute code before the bootloader then ud have a secure boot bypass n could essentially load whatever u want..

however, any tests ive done thus far with bootloaders ended in a brick.. if device cant load and verify the bootloader it terminates the boot process and goes into EDL mode..

EDL mode i am learning has great opportunities.. if u have a signed programmer you could do some damage if u kno what ur doing (im still learning at this point..) But EDL mode isnt necessarily a bl bypass but with the programmers u can flash just about anything.. however since bl is locked secureboot will attempt to verify what u flashed and terminate the boot process typically with a secure check fail.. even on combo firmware custom boot/kernels are still blocked.. also, currently cannot write to protected partitions still on lun0 which include system vendor and odm.. i am working on some stuff to get around this but not there.. EDL can also b dangerous for noobs as u can really kill ur device.. Ive had MANY replacements recently.. if i didnt kill device entirely i killed my efs/imei or somethin n lost all network functions lol
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
im keepin an eye out for any pocs for this.. if u see any please share..

with that being said to my understanding the exploit eventually gets elevated privs and can execute code as kernel.. this is one of the ways i implemented sampwnd root back on the s8 lineup.. the kernel (as well as any context/user) has certain capabilities that others dont.. i havent looked too much into it but last i checked the kernel has mount capabilities so it might b able to mount system without a crash..

think about it this way, even tho we have root uid we typically are running in shell or untrusted app etc etc.. kernel is up there with init when it comes to security.. if we can hijack the kernel and mount the system, the security will think its the kernel and could allow it vs. coming from say shell user or system app user etc its not allowed..

if that makes sense lol.. the kernel also has certain jobs/functions it completes early on such as ramdisk or loading memory etc etc so if we can exploit something that early as kernel then we could potentially write to system or wherever before security has a chance to kick in.. this is why typically your magisk root n others historically patched the kernel/ramdisk and had it execute root for us..

so long story short, if running as root/kernel then it could absolutely help.. i havent seen any available pocs or good write ups for it yet tho...
[Samsung Galaxy Note 9 Guides, News, & Discussion] Heathmcdonald:
Look into the qualcomm exploit, you can hijack the kernel thru the modem on Lan its not easy lookin but it is on the internet with pictures lol just Google it and you gotta be on July or earlier or it's already patched, I tried to provide the pdf but wasn't allowed for whatever reason

---------- Post added at 03:21 AM ---------- Previous post was at 03:17 AM ----------

When you have your phone hooked up as a modem is when you can exploit it in that way, they're really pushing that patch hard it's annoying so it must be a gapping hole in security
[Samsung Galaxy Note 9 Guides, News, & Discussion] Matty1973:
not sure if that sarcastic **** stain was dor me. if so here. no **** nitt what i meant no matter what i did the moment the phone came on agead of the bootloader my phone was hacked over and over sprint claimed bull**** and igas managers un 5 storeateywhat theywanted to stop it they all dmdailed. sewms rom if tuo pause the bootloader startup y xant you ger in first then your not locked out you have xinteol. not technical root but qhatever theres a bine i.n there simeone will run with it. ih yeah i still have that xarrupt ass phone. told the dude who hacked itill need itone day. so i killed it and put it uo as for u mfers ill tell tou what ya sound like 7th grade *****es someone should ***** slap the noth of you. no one jonestly gives a f÷/k we just wNt rooted ****.my god you all think we dont do the rounds check everywhere reg like. god damn stfu and figure out that or date
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
i think i understood a few words lol
[Samsung Galaxy Note 9 Guides, News, & Discussion] Limeybastard:
English is obviously not his Google's text to speech first language.
[Samsung Galaxy Note 9 Guides, News, & Discussion] bober10113:
and i thought duplicate accounts weren't permitted on xda.

oh well.
[Samsung Galaxy Note 9 Guides, News, & Discussion] Limeybastard:
I don't have a duplicate account. Although once in the past Tapatalk logged me under limeybastard01.
[Samsung Galaxy Note 9 Guides, News, & Discussion] JOSHSKORN:
"Can you repeat the part of the stuff where you said all about the things?" - Homer Simpson
[Samsung Galaxy Note 9 Guides, News, & Discussion] TWiiTCH:
Hello everyone. Just to be blunt, I'm nowhere near your knowledge when it comes to rooting but I was dilly-dallying on my phone before I had to leave for work and I found I could access files through xgimp, the app that is like Microsoft Paint. Anyway if you load the app and then click on open files and then click on file system I see that I can view all the system files that you cannot View or at least I cannot View with any other file managing application or similar like my files on Samsung. I can only see the files they allow me which is the non root or the user files. When you go into the file system in Gimp it gives you a view of all the system files including root but I had no more time to mess around before I had to leave. I don't know if this is of any interest to anyone trying to root but if somebody wants to take a look here's a screenshot to prove what I'm seeing. As for moving files around or what the permissions are, or what can be done I'm not sure but let me know if I'm wasting time or if maybe in some way I found something useful. I am dying for this phone to be rooted so that is the only reason I am adding this. Like I said I'm not experienced but I do know when I can view system files that you cannot from any other app there must be something special going on and I thought maybe it might be useful. Cheers on your work and all the hours you put in have been much appreciated and I wish you all the luck in the world. Thanks a million. I am quite familiar with routing but have only rooted the S3 and Nexus 5 and S7 and that's all. I do know system files when I see them and these appear to be system files and not user files.
[Samsung Galaxy Note 9 Guides, News, & Discussion] DAGr8:
Just saw this is for sept. N960FXXU3CSI3

Another bl update ? Could it mean a security flaw in the second one? Fingers crossed.
[Samsung Galaxy Note 9 Guides, News, & Discussion] dbennett428:
That is standard, any advanced file manager app for the phone itself can also view those files (except some that are in directories which have file masks preventing directory traversal... although you could probably see them externally if you mounted the devices external storage directly)... they're just hidden from the default "my files" app, as well as some less advanced file managers. You can even download a shell app and execute many of the commands you can see in one of the "bin" directories... nothing useful, just like `pwd' , `whoami' , etc... Unfortunately, nothing too crazy...

Although I did notice that I had somehow installed a bunch of symlinks into the root system bin. It happened when I first got the phone and was trying to put a minimal busybox install on it without root... I was messing around forever... installing tons of different flavors, adding permissions via adb, trying to install through adb. Eventually it worked. Still pretty basic functionality, as I could not access the hardware at a low enough level to run even TCP or ICMP traceroutes, but it had successfully put all the symlinks into the default system bin, like it would have done on a rooted device. I later attempted to manually create a symlink in a protected folder (after a few updates), it failed. However the symlinks added by the busybox install are still there.
[Samsung Galaxy Note 9 Guides, News, & Discussion] TWiiTCH:
Sounds good brother, I'm just trying to help and I had never seen those files through any of the file browsers or apps that I have used on my Note 9. The only time I've ever had access to them in any way shape or form was when my device was rooted, my older devices I mean. I wish you the best of luck and if anything else pops into my mind I will share it but it sounds like you're way ahead of me which is kind of exciting because it makes the chance of root that much more possible then as if I was attempting it myself haha. I thought I was onto something but I guess I will just have to let it go and keep my fingers crossed. I have faith in you though. Later!
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
this thread is for discussion on usa locked SD variants.. not unlockable F exynos variants..

to add, sometimes exploits are chip specific so could b a vuln on exynos or both.. who knows lol
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
lol there many ways to view and modify firmware.. just mount in linux lol.. also for boot/recovery can use tools like magiskboot or sukernel etc
[Samsung Galaxy Note 9 Guides, News, & Discussion] GSM CHEN:
?

N960F U3 exynos ？

Elliwigy can even konx0 root

Exynos device security restrictions are low, konx0 root is easy..

Note10, of course, is not in that category

So, Exynos devices don't need to be discussed, and we're talking about the qualcomm model!
[Samsung Galaxy Note 9 Guides, News, & Discussion] Zaileion:
I sure am glad you genius type dudes are still trying to get root on the 960U. Damn terrible business practices!! Keep fighting the good fight! Maybe some day!!
[Samsung Galaxy Note 9 Guides, News, & Discussion] Aakash Kaushal:
Seems like we won't see root for this device ever :(
[Samsung Galaxy Note 9 Guides, News, & Discussion] bober10113:
are you implying that people should just...dare i say it:just move on?
[Samsung Galaxy Note 9 Guides, News, & Discussion] lowridincrew,:
Actually someone had progressed in root today. Patience young grasshopper.
[Samsung Galaxy Note 9 Guides, News, & Discussion] Jammol:
Really?:D
[Samsung Galaxy Note 9 Guides, News, & Discussion] lowridincrew,:
Yup, hop onto the Telegram
[Samsung Galaxy Note 9 Guides, News, & Discussion] gruuvin:
Share a link
[Samsung Galaxy Note 9 Guides, News, & Discussion] a63548:
Which telegram?
[Samsung Galaxy Note 9 Guides, News, & Discussion] gruuvin:
The trollin telegram
[Samsung Galaxy Note 9 Guides, News, & Discussion] plainbum:
following
[Samsung Galaxy Note 9 Guides, News, & Discussion] lowridincrew,:
I cant even find out how to find the URL
[Samsung Galaxy Note 9 Guides, News, & Discussion] butchieboy:
I couldn't find it.
[Samsung Galaxy Note 9 Guides, News, & Discussion] bober10113:
https://xdaforums.com/showpost.php?p=79464962&postcount=1

way down 1st post...
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
right lol.. xda at its finest! ppl who actually read will be rewarded lol
[Samsung Galaxy Note 9 Guides, News, & Discussion] butchieboy:
And some just don't remember it was there since they have been following the thread since it started[emoji2960][emoji106]
[Samsung Galaxy Note 9 Guides, News, & Discussion] DAGr8:
Lol brain cramp nothing to see here moving along
[Samsung Galaxy Note 9 Guides, News, & Discussion] rbedell:
Is there any way this could be used? New exploit possibly?

https://www.zdnet.com/article/secur...-of-concept-code-for-recent-android-zero-day/
[Samsung Galaxy Note 9 Guides, News, & Discussion] thatkindaguy:
I was wondering the same thing..

Is there any chance of someone building and testing this for the note 9? https://github.com/grant-h/qu1ckr00t

More info on achieving root: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
i built root poc but its coded for p2xl only.. it doesnt work on s10+ or n10+ but not sure about n9..

at the least to test it needs to be coded for the n9 kernel which im not gonna bother with lol.. join the n9 tgram group as i posted pocs there if u want to test but i believe it wont work as is
[Samsung Galaxy Note 9 Guides, News, & Discussion] plainbum:
n9 tgram group??

Would you link is to this group ease?
[Samsung Galaxy Note 9 Guides, News, & Discussion] gruuvin:
https://t.me/joinchat/DxwvAlhtzHjg4EI9973BGQ
[Samsung Galaxy Note 9 Guides, News, & Discussion] unh1nged:
Still? Like... really? So basically not even phased that being the one suggesting people move on, yet never doing what you were suggesting, means you have zero integrity, are a hypocrite, and have no confidence in your own "counsel".

Apparently the low road meanders for a bit then just meets up with the high road again a few miles up. Too bad it clearly has no positive effect on broken records.

Anywaiiiit a tick.... Whats this?

*cough*So much more than ridiculous*cough*counterproductive*cough*and a waste of everyones time..... *cough*

Not even a chance anything sunk in eh?

No I didn't think so.

Back to thread> I paused my phone in the middle of downloading the second half of the FORCED update in July and its been sitting Paused since then with no upgrades, waiting for something good to come along... It doesn't seem like it's anywhere that can realistically bring me back from bootloader 2 though. So my phone needs a refresh, I'm going to have to finally crush that hope. The situation my phone is in, isn't easily replicated or unlikely to justify any consideration to finding a method to reclaim it from bootloader 2, regardless of the fact its sort of half way installed. It also flagged my phone as having "Custom" tampering, just in the bootload screen, even though I only flashed a stock rom that was my carriers version.
[Samsung Galaxy Note 9 Guides, News, & Discussion] K-alz:
So, should I just give up? :(

I've just paid off the phone and I'm planning on keeping it for a while, but I know samsung won't support it beyond Android 10. I'd love to root it.
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
i actually picked up another n960u on rev3.. i also actually made some headway today.. i managed to use combo root and an old trick to gain write access to system/odm/vendor which i couldnt before..

i then managed to flash a combo system.img and an old system root supersu.zip using flashfire and it worked flawlessly..

my next tests are custom roms.. problem i might have tho is i cant use combo boot/recovery with stock system n other partitions anymore (binary mismatch) so i am thinking ill need to flash atock firmware while on combo as then it will show as a custom system vs. stock binary?
[Samsung Galaxy Note 9 Guides, News, & Discussion] K-alz:
Here is to hope [emoji482]
[Samsung Galaxy Note 9 Guides, News, & Discussion] kenside34:
Keep up the good work . Hoping you find a way. Kinda excited youre still working on it
[Samsung Galaxy Note 9 Guides, News, & Discussion] gruuvin:
When you mentioned rev3, did you mean bootloader version 3? I ask because I am holding updates back while I am still running on bootloader version 1, for the off-chance we get a root method that doesn't work for later bootloaders.
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
lol its really firmware rev.. the bl isnt the only partition that is incremented..

and yes, rev3 is rev3.. latest firmware for n9 is rev3 which is wat im on and combo root still works on rev3 combo
[Samsung Galaxy Note 9 Guides, News, & Discussion] Peezoslug:
I can flash note 8 twrp and magisk using phhusson patch first then they both flash but will not stick...I'm using magisk to flash the files...install BusyBox using termux....and install terminal emulator and play around with toybox a bit...spend time uncoding Samsungs code...fun stuff. Toybox my friends is the key... Galaxy S 9+...hmmm...star2techn...who could've helped with that twrp recovery:)--push.

CCSWE app on play store is fun to play with too.
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
huh lol

i can flash anything includimg twrp but twrp or anything that modifies the boot or recovery images secure check fails when rebootimg since bl is locked
[Samsung Galaxy Note 9 Guides, News, & Discussion] lodk:
Well its been a while so i thought i would ask a question or two. they may have been asked but i dont know and maybe it will get some gears turning if nothing else. So here it goes.

If only official firmware with correct signatures can be flashed. So like i stated in previous comments i dont know programming or any thing related to making android work. Logic tells me that for the firmware to be official it needs the correct signature from sammy. Now where is this signature? Is it in the firmware that we download to install when updating? Can this signature be found, if so is it encrypted? If encrypted how? Is it possible to bruteforce?

My thought is if someone can find the signature is that a key that can be used to exploit the bootloader into letting us flash any firmware with the same signature?

The bruteforce idea i know can take a very long time but i also wonder if the workload could be shared somehow.

Yes lots of questions sorry but thought it would jumpstart the thinking again.

Thanks for reading ?
[Samsung Galaxy Note 9 Guides, News, & Discussion] K-alz:
I have moved on and I freaking hate it. I'm keeping this phone for as long as I can. I hate paying tmobile high prices on new phones that won't do anything this phone can't neither can I afford to pay full price out of pocket. Just upgraded to android 10 last month and I'd love to keep getting updates. Battery health is at 88% after almost 2 years of solid use. Maybe android 10 has some new holes in it? Maybe, just maybe. LOL
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
this has been discussed for years now.. its not possibly.. private key is stored in hardware and is never even visible let alone would be able to be brute forced lol.. devices store private key then sign firmware before shipping to devices.

both keys to my understanding are needed to "sign" firmware.

either way its not possible to derive the key from anywhere. Theres nothing to "brute force" either.
[Samsung Galaxy Note 9 Guides, News, & Discussion] unh1nged:
Not detracting or distracting from the thread, as I still have my Note 9 that got tailpiped with BL2. Which has even less than an outside shot at root now thanks to that. BUT it has gotten me to broaden my horizons from dedicated to Samsung for so many years and models. So I thought this was a good general interest for fellow lovers of all things root. The green robot (a(not-so)ka vert-bot) needs to remember where it got its start.. ROOT

For the love of root: https://android.gadgethacks.com/how-to/best-phones-for-rooting-modding-2020-0175988/

ellwigy - if this needs to be posted elsewhere, let me know if its lacking current thread appropriat.. tional... ism.. ish.... ed.. ness. What? It's a word. Go ahead, look it up*.

*Disclaimer: Research of stated word cannot be made using any grammatical or authoritative etymological reference. Because I said so, that's why, not because it doesn't exist. Further disclaimer: sometimes I make things up, and cannot be held legally responsible for the things I say or do under the influence of the internet. It's well established that the internet is full of liars and conspiracy theorists, as well as those inclined to believe their ludicrous claims of Energy being equal to Mass times Velocity to the Second Power. and the lesser each force has an equal and opposite reciprocating force. Ever seen a big man hit a little man? Exactly. Unless the little man is Bruce Lee.
[Samsung Galaxy Note 9 Guides, News, & Discussion] elliwigy:
huh? im not gonna read it but also dont care at this point... not sure where uve been but i released root for s9 s9+ and n9 few months ago now? it also works on latest rev.. the files in my root thread for n9 are rev3
[Samsung Galaxy Note 9 Guides, News, & Discussion] Alraxx:
My N960U

Excuse me I have a note 9 that I bought in the United States and since I bought it relatively new it does not update and I still have the software interface 8.1 and my firmware is N960USQU1ARH2 someone knows if I can put a N960USQS3DTB2 is that I already need the new update and my firmware doesn't have any recent
[Samsung Galaxy Note 9 Guides, News, & Discussion] DanHutchins:
[/QUOTE]

What carrier is the phone originally through? Some carriers like straight talk do not give updates, this could be why you don't receive them.
[Samsung Galaxy Note 9 Guides, News, & Discussion] Alraxx:
[/QUOTE]

Sprint
[Samsung Galaxy Note 9 Guides, News, & Discussion] unh1nged:
I've been away dealing with a layoff, and my father's 10 year battle with cancer moving into his bones in 3 places. So I was still under the impression that bootloader 2 was not downgradeable, and there being no way to root. If that changed, I don't know how I missed it because I get updates sent to my email. I have the Canadian N960W, which in my understanding was the most troubling of all.
[Samsung Galaxy Note 9 Guides, News, & Discussion] DanHutchins:
[/QUOTE]

Sprint[/QUOTE]you should be able to use samfirm to get the update. This will need to be installed on a pc and also gives instructions on how to use it. You may also need Odin3 as well, also installed on pc, in order to flash the firmware from samfirm.