Develop Bugs

[Q] "Knox" firmware and the m919 version?

I have read (<here> and <here>)
about new firmware versions that will not allow resetting the counter (warranty flag) to initial conditions when restoring to stock after after unlocking or rooting.
If the phone developed a hardware problem, warranty repair could be denied.
The firmware version "MGG" and beyond are reported to have this problem.
Questions:
Does this also apply to the m919 T-Mobile version?
Has anybody seen it on an m919?
Is it going out with an OTA update?
Or is MGG specific to the i9505?
I am shopping for a GS4 m919, and I want confirm that it has the "pre-MGG" firmware version before purchase.
Questions:
Is the ID contained in the "Baseband" ID string in the phone information?
Are there different identifier strings used on the M919?

The T-Mobile S4 has not received the KNOX Bootloader, it will most likely come with the 4.3 update. If anyone is on stock, I would recommend you guys disable OTA updates as you may get automatically updated to 4.3 with the KNOX bootloader.

for once...im dreading an update from tmobile

If I've already rooted and installed a custom recovery (Clockwork Mod), and nothing else, does anyone know if the 4.3 update with KNOX will still be usuable? In other words, will the phone still get an automatic OTA update and will that update install correctly?
Sent from my SGH-M919 using XDA Premium 4 mobile app

DigitalHeretic said:
If I've already rooted and installed a custom recovery (Clockwork Mod), and nothing else, does anyone know if the 4.3 update with KNOX will still be usuable? In other words, will the phone still get an automatic OTA update and will that update install correctly?
Sent from my SGH-M919 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
It wont let you get the update it will pop a box up saying unable to uodate your device has been modified. . Try to check for an uodate youll see what im talking about... I went back to stock just to see if there was anything for updates which there wasnt andbwent to reroot and installed su abd it didn't flash correctly thru odin said to heck with it till the am checked for an update for giggles in the am and wouldn't even check
Sent from my SGH-M919 using Tapatalk

i'm glad I read this thread. i was going to wait until i tried the stock 4.3 update before deciding to root and install custom ROMs. With KNOX coming, I'm just going to root ASAP. I like PA on my Nexus4, so I'll probably go with that for my S4.

So you guys are saying the new update with "knox" won't allow you to reset the counter and only that or will it stop you from completely rooting and installing custom roms?
Sent from my SGH-M919 using Tapatalk

futty said:
So you guys are saying the new update with "knox" won't allow you to reset the counter and only that or will it stop you from completely rooting and installing custom roms?
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse
Let me clarify some things. The KNOX processes and functions are already on the stock ROM, most devs remove them, though. So many of you with custom ROMs haven't seen anything related to KNOX.
What the new T-Mobile update (when it gets pushed out) is most likely to come with is a "KNOX Bootloader" which will introduce a thing called "KNOX Flag" which is similar to the old counter we're all used to. This is the counter that @Chainfire was successful in resetting with his app, Triangle Away.
Unfortunately, @Chainfire or anyone else for that matter, has not been able to reset the KNOX flag.
The KNOX flags is this:
0x0 = You have not tripped the KNOX flag.
0x1 = You have tripped the KNOX flag.
Again, once you trip that flag, rooting, flashing a custom recovery, etc.. there is NO way to reset it as of now. And any KNOX functionality on your phone will not work. But the worst part is Samsung will refuse warranty on your device if they see a 0x1 in your bootloader.
Another thing.. on the new bootloader, if you try to downgrade, even with an official Samsung firmware, it will fail and you will trip the KNOX flag.
So once you're on the new bootloader, there's no going back.
There's been speculation that there's an eFuse at play here.
Anyway, this is the reason why I am suggesting you all disable OTA updates and wait until a ROM is built without the new bootloader and all the functions (Wifi, MMS, etc.) are working.

mgbotoe said:
for once...im dreading an update from tmobile
Click to expand...
Click to collapse
Hey, its sammy we have to blame for this one :/ Not T-Mobile lol.
PSSSST! Don't let them know you are dreading it, or they might put it off longer xD
As to the OP.
The KNOX Warranty counter is rumored to be what is called an eFUSE. If this is true, then resetting the KNOX warranty counter will be impossible without taking apart your phone and replacing that specific eFUSE.
However, there are rumors that some root methods DO NOT trip this new counter. Is that good? Yes, is that bad? Yes. For those users who like stock kernels and just wanna root, this is okay for them. But for 99.999999 percent of us who love to flash new kernels and get more from our devices, then it trips the counter.
I personally congratulate Samsung as well as hate them at the same time for this. I congratulate them because what seems to be happening a lot is users flash a million and 2 things to their device having not one single clue what they are doing, thus bricking their 500+ dollar smartphone then claiming it as a warranty claim and getting another one. I also feel they are trying to flex their ego muscles too -.-
I also believe that if you have insurance, this does not apply. It is only for warranty claims. Which like you stated OP, it only means Samsung can choose to deny to repair or replace it. I have read a lot of thread before where users tripped the older binary flash counter, and still were given a new device. I honestly don't know how this is going to play out for the lot of us. For me, my warranty is over in a few months anyhow so i don't really care. But its still kind of a dickish thing Samsung is doing.
I am also hoping that we can extract the contents of the new update and keep our older bootloaders and create a flashable zip with the new update stuff and have it still work. I know there were some issues with the international S4 4.3 update but im not sure if it was entirely caused by the bootloader.

Exel said:
Anyway, this is the reason why I am suggesting you all disable OTA updates and wait until a ROM is built without the new bootloader and all the functions (Wifi, MMS, etc.) are working.
Click to expand...
Click to collapse
Where do you disable OTA updates on a stock S4?
Hitting "Software Update" takes me to a Boolean"Update Now" popup with no other option than choosing Yes, No or Wifi. No option to defeat future updates is offered.
Going into developer mode doesn't seem to add any pertinent options either (correct me if I'm wrong).
Clearly, Samsung doesn't want us to be able to disable updates unless or until we root, which I'm doing this weekend on the basis of this thread.

Reignogleph MMXI said:
Where do you disable OTA updates on a stock S4?
Hitting "Software Update" takes me to a Boolean"Update Now" popup with no other option than choosing Yes, No or Wifi. No option to defeat future updates is offered.
Going into developer mode doesn't seem to add any pertinent options either (correct me if I'm wrong).
Clearly, Samsung doesn't want us to be able to disable updates unless or until we root, which I'm doing this weekend on the basis of this thread.
Click to expand...
Click to collapse
You indeed have to root to disable OTA updates.

Once the update hits im going to extract the system.img to get all the files.
Then explore where all of the Knox crap is and get rid of it.
I know I want be alone in doing this...all who develop for the S4 will be on top of it.
Someone will figure out a way to get around this Knox BS...
Sent from a Insane S4
SICK MADE DEVELOPMENT

alloycowboy said:
Once the update hits im going to extract the system.img to get all the files.
Then explore where all of the Knox crap is and get rid of it.
I know I want be alone in doing this...all who develop for the S4 will be on top of it.
Someone will figure out a way to get around this Knox BS...
Sent from a Insane S4
SICK MADE DEVELOPMENT
Click to expand...
Click to collapse
thats fine and dandy for us with existing phones.. I already removed all the knox crap from my phone, and will update but not kernel and do the same..
But what about all future phones.. If indeed the kernel is locked with knox and there is no way to remove it we are screwed for new phones coming out.

lgkahn said:
thats fine and dandy for us with existing phones.. I already removed all the know crap from my phone, and will update but not kernel and do the same..
But what about all future phones.. If indeed the kernel is locked with knox and there is no way to remove it we are screwed for new phones coming out.
Click to expand...
Click to collapse
I agree. If thats the case....then alot of people will ditch Samsung.
But I have a feeling we will figure out Knox. Its man made so it can be hacked. Who when and how is the question.
Sent from a Insane S4
SICK MADE DEVELOPMENT

that's also why I paid 400 bucks for a T-Mobile sgs 4 and I am using it on at&t... I refuse to pay or support a phone with a locked bootloader.. matter of principle...i would ditch att if T-Mobile had decent service in my area.
Sent from my SGH-M919 using Tapatalk 2

[FAQ] KNOX and you

[SIZE=+1]There seems to be a lot of confusion and misunderstanding circling the forums with regards to Knox and the 4.3 OTA.
This is an attempt to clear things up[/SIZE]
UPDATE: It seems that people can find this thread, but are unable to actually READ the information presented. The most important note here is that if you are on 4.3 firmware, you can flash ANY rom you like. No, you are not tied down or locked into stock only or 4.3 roms only. AOSP roms will work fine as well. Now scroll down and READ EVERYTHING IN THIS FIRST POST.
What is Knox? Knox is both a firmware and a software component. The OS has Knox apps, and the MK3 bootloader has a Knox component too. Having Knox apps does not necessarily mean you have the Knox bootloader, or vice-versa.
How does Knox work? Because Knox is both in the OS (apps) and in the firmware (bootloader) it works in two ways. The OS components prevent attempts to obtain root access and make rooting with these Knox apps a pain in the butt. Fortunately they can be removed. In the firmware component (bootloader), Knox works to prevent the flashing of custom kernels and recoveries. If you flash a custom rom or custom recovery WHILE on the Knox bootloader, your Knox flag will be tripped and your Warranty Bit will go from 0x0 to 0x1. The Knox bootloader cannot be downgraded to, say, the MD4 bootloader because of special protections built into it. If you attempt to downgrade it, your phone will instantly brick.
Can I get root on the Knox-enabled update? Yes. For those of us who DID NOT take the official OTA and DO NOT have the Knox bootloader, we can get root on 4.3 by injecting it and removing the Knox apps. For those WITH the Knox bootloader, you will need to wait until a full stock MK3 tar is available, which we can then use to make an Odin-flashable MK3 stock rom with root injected using the de-la-vega root method.
Can I downgrade while on 4.3? You can flash roms no matter what Android version they are. That is perfectly fine. But you cannot downgrade the bootloader if you have the Knox bootloader, or else it will cause your bootloader to become corrupted and give you a fancy paperweight. Again, for those who DO NOT have the Knox bootloader, you needn't worry about this/downgrading firmware since the Knox bootloader is what prevents you from doing this. Downgrading your bootloader includes: attempting to flash full stock tar of software versions < MK3, etc.
How can I tell if I've got the Knox bootloader?
Boot into download mode (through custom reboot menu, or by powering off then holding Power+Home+VolumeDown and then VolUp when prompted). If you see a line that starts with the following, then you've got the Knox bootloader. I will insert a picture showing how it actually looks soon
Warranty Bit:
Click to expand...
Click to collapse
[SIZE=+1]READ THIS TOO: http://forum.xda-developers.com/showthread.php?t=1788313
It's for the Verizon S3, but it applies to all the carrier 4.3 updates[/SIZE]
I will add to this as more questions come up
I hope the above helps to clear up some confusion. Ask questions if you are still concerned and I will do my best to answer them.

is there any way to make this a sticky @kennyglass123

This is great information man!
http://i.imgur.com/qrByUGN.jpg

[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
as of right now none.

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
No way to remove bootloader Knox ATM.

I've seen several posts mention "tripping KNOX" or "voiding KNOX." What does that mean, exactly, regarding rooting a phone? Does it just mean it voids the warranty if you need to get support from Samsung/Sprint? Or are there other adverse effects?

Mostly just a visible warranty void.

Samsung bought crapple disease. So sad, but its my excuse to buy a nexus.
Sent from my SPH-L710 using xda app-developers app

As said above, a voided Knox is mostly just a highly visible warranty void. Your local Sprint store may or may not care, or the specific Samsung rep that you deal with may not care, but it's easier just to not have to deal with it to begin with.

Does this mean there is already a touchwiz 4.3 ROM we can flash or do we still have to wait?
Sent from my SPH-L710 using Tapatalk

The biggest thing here is the fact that there is no full tar file to restore. So even if you do not care about knox or warranty. If something goes wrong with a flash or anything else you can't use an older tar file let's say MD4 or LJ7 or anything because you will end up with a brick. There is nothing to use to ODIN restore your device. Once you go 4.3 with Knox you have to stay 4.3 and even if you wanted to stay 4.3 and wanted to restore that there is no tar file at this time.
Have a great day!

I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.

docnas said:
I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.
Click to expand...
Click to collapse
Late to the party. CNexus already has a update cooking.
Sent from my SPH-L710 using Tapatalk

the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too

You = rock. Or some other awesome thing.
Sent from my SPH-L710 using xda app-developers app

CNexus said:
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too
Click to expand...
Click to collapse
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?

Edge-Case said:
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?
Click to expand...
Click to collapse
This would be a we-can't-update-the-bootloader thing lol. And we can't do that because it has Knox, which is Samsung's doing
This shouldn't affect any AOSP roms because it uses a different kernel and builds its own WiFi libs

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
From what I've read Knox is Samsung's attempt to provide strong security to their phones for the enterprise customers. As you can imagine, allowing system level access to files can be used to get around a lot of security measures that IT people would like to enforce in their client's devices. It makes sense at the enterprise level, but it's a pain for anyone who want's to mod their phone.
So I think the answer to your question is, unless you are using your phone in a locked down corporate environment then there really is no advantage to Knox. Too bad it can't be turned off, at least not officially.

4.3 Update for T-Mobile M919 ~ DO NOT UPDATE IF...

T-Mobile finally pushed the 4.3 update earlier today but DO NOT UPDATE YOUR PHONE IF YOU WANT TO KEEP YOUR ROOT! It comes with a locked bootloader. Therefore, once you are on 4.3 stock, you can only flash stock firmwares then. If you try to root your phone on 4.3 with the standard method, it will blow your efuse and void your warranty!
AGAIN, DO NOT UPDATE 4.3 VIA OTA OR ODIN IF YOU DON'T WANT TO VOID YOUR WARRANTY. IF YOU HAVE NO PROBLEM WITH THAT, FEEL FREE TO UPDATE
Info on KNOX:
Hawke84 said:
What we know so far (I think!)
1. Upgrading to newer Samsung firmware will upgrade the bootloader to knox bootloader. this will give an additional 2 lines in download mode about knox status.
2. If the Knox warranty void line says 0x1 then you cannot use knox softwareas your device has been flagged as insecure. By this i mean that if your workplace / company supports bring your own device to work for corporate emails etc and they use knox to keep security your device will not allow this. You are still able to use future samsung firmware releases with the knox flag 0x1. hope this makes sense. sorry for any confusion this has caused!
3. If the knox warranty line says 0x0 knox will work.
4. with the new knox bootloader root will work, however rooting with CFautorootwill trip the knox flag. thanks @DjeMBeY for correcting this point you can use the root method (Root de la Vega) described here for rooting a device with knox bootloader.
5. If you try to downgrade to earlier firmware / bootloader it will set the knox flag to 0x1 i.e. void.
6. once the knox flag gets set to 0x1 there is no way to set it back (that anyone has found yet anyway!)
7. some newer 4.2.2 software that's supplied with the knox bootloader has been repacked by devs to not use the new bootloader and it all works fine you can still keep up to date.
8. I've seen people trying the test build of 4.3 touchwiz without the new knox bootloader sound and wifi does not work. This is no longer the case, see point 12.
9. There seems to be a big question mark as to weather Samsung will allow hardware repairs under warranty with the knox 0x1 flag
10. only seems to affect GT-i9505 at the moment!
11. Software affected thanks to @DjeMBeY
12. it is now possible to install custom 4.3 TW roms which have been modified to work without the new knox bootloader, do make sure that they are free from knox bootloader before flashing. Do note also that if you already have knox bootloader flashing anything even these 4.3 custom roms will still trip your 0x1 flag
Click to expand...
Click to collapse
Credit: http://forum.xda-developers.com/showthread.php?t=2470635
Thanks to @Mr Impossible @Jamison904 @jovy23 and everyone else!

DO NOT FLASH MODEMS/BASEBAND EITHER..... does not let u make phone calls on the leaked 4.3 tw version..... or the regular 4.2.2 version and like some1 said 4.4..... not sure if it works on the official 4.3 tw released today since no dev has released a rom of it... so do not flash if u need to make or receive phone calls makes ur phone freeze and wont make the actual call
richardmkovach said:
Same here. Have tried GPE 4.3, stock 4.2.2, and international 4.3 TW. Phone freezes when trying to make a phone call.
Click to expand...
Click to collapse
Mr Impossible said:
Anyone taking the OTA or Odin the new firmware will be sorry they did. Modem is also tied to the bootloader somehow as was the i9505 and won't work without the bootloader. Seems to be more security in this also. More to come...
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse
If you already flashed the new modem and want to get back to MDL to make phone calls lol here it is
bogdi1988 said:
http://forum.xda-developers.com/showthread.php?t=2282342
Click to expand...
Click to collapse

I dont think it comes with a lock bootloader but more of with new knox flash counter.

gypsy214 said:
I dont think it comes with a lock bootloader but more of with new knox flash counter.
Click to expand...
Click to collapse
Is already confirmed that it comes with LOCKED bootloaded

Along w/ no calls, does it include breaking sound?

gypsy214 said:
I dont think it comes with a lock bootloader but more of with new knox flash counter.
Click to expand...
Click to collapse
All Samsung bootloaders have been locked after MH8. This is part of Knox security.
Sent from my SGH-M919 using Tapatalk

gdmlaz said:
DO NOT FLASH MODEMS/BASEBAND EITHER..... does not let u make phone calls on the leaked 4.3 tw version..... or the regular 4.2.2 version and like some1 said 4.4..... not sure if it works on the official 4.3 tw released today since no dev has released a rom of it... so do not flash if u need to make or receive phone calls makes ur phone freeze and wont make the actual call
Click to expand...
Click to collapse
Thats sucks. Thanks for the heads up. I was thinking of flashing the kernel with a 4.3 9505 rom.
How about doing that?
---------- Post added at 03:17 PM ---------- Previous post was at 03:14 PM ----------
Mr Impossible said:
All Samsung bootloaders have been locked after MH8. This is part of Knox security.
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse
So lock bootloader like on Att and verizon? I think samsung will loose a lot of business in the near future

This seems to be the problem
Mr Impossible said:
Anyone taking the OTA or Odin the new firmware will be sorry they did. Modem is also tied to the bootloader somehow as was the i9505 and won't work without the bootloader. Seems to be more security in this also. More to come...
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse

@jovy23 flashed the OTA and now cannot Odin a custom recovery nor revert to MDL. Odin fails every time. I have a locked Verizon S4 I bought for testing (not much good that did) this is the exact same thing I fought weeks to brake.. Nothing. It is locked.

gdmlaz said:
This seems to be the problem
Click to expand...
Click to collapse
Thats sucks. I hope people on XDA will read before they make a mistake

http://forum.xda-developers.com/showthread.php?t=2324667
There is a Odin tar for T-Mobile MDL modem here. If you didn't take the OTA but Odin the modem you "should" be OK with this. Be sure to thank the OP of that thread!

I just wanted to throw this out there... I had the stock ROM but rooted. Did my update through Kies fine. My data stayed intact. However, as some others have reported, I lost my root. Now I'm not sure how to get it back. I've seen mention of rooting it another method will void my warranty but I can't find info on how that's done.

Jamison904 said:
http://forum.xda-developers.com/showthread.php?t=2324667
There is a Odin tar for T-Mobile MDL modem here. If you didn't take the OTA but Odin the modem you "should" be OK with this. Be sure to thank the OP of that thread!
Click to expand...
Click to collapse
Thanks dude. I was to the point that I didnt cared if my knox counter was stripped but now with lock bootloader plus lock modem it seems useless. Samsung is trying really hard to keep it lock.

gypsy214 said:
Thanks dude. I was to the point that I didnt cared if my knox counter was stripped but now with lock bootloader plus lock modem it seems useless. Samsung is trying really hard to keep it lock.
Click to expand...
Click to collapse
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks

Tunasty said:
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks
Click to expand...
Click to collapse
if that is the case I will not buy any more Samsung.. that is why I bought the tmobile version even though I am on At&t .. total bs.

Tunasty said:
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks
Click to expand...
Click to collapse
Exactly my point. Ive been saying it all along. Trying to become evil apple lol. It sucks for them. I dont know if I will be buying any other samsung device in the future

lgkahn said:
if that is theh case I will not buy any more Samsung.. that is why I bought the tmobile version even though I am on At&t .. total bs.
Click to expand...
Click to collapse
Same here man. Using M919 (T-Mobile) device on AT&T.

Tunasty said:
Same here man. Using M919 (T-Mobile) device on AT&T.
Click to expand...
Click to collapse
htc locks bootloaders too... does LG?

Thanks for the heads up. New to the S4 since some 3 weeks ago, and this is definitely not good news.

lgkahn said:
htc locks bootloaders too... does LG?
Click to expand...
Click to collapse
The only difference is that HTC gives you the option to unlock boooader on htcdev.com
Lg in the other hand they just dont give out any source code

Safestrap Recovery works on N900T!!

I've been using the AT&T Safestrap Recovery on my Tmobile N900T and it works perfectly.
I flashed the AT&T X-Note ROM port (in slot 1) that they have and it works fine on the N900T. It does install the AT&T CSC (Just for this slot, each ROM slot has it's own CSC), but installing the TMO one causes crashing in the dialer (which also happens in the international rom currently out in the TMO forum). So, just keep the ATT CSC like it is. For Wi-Fi calling, I just boot back into the Stock slot and use the stock ROM.
The AT&T Safestrap (I used latest version 3.71)
The AT&T X-Note Port ROM (NO AROMA)
This allows us to keep Knox warranty intact for those of us that want it/use knox and want a recovery to flash customized TouchWiz ROMS..
Just remember:
NO AOSP ROMS
NO NEW KERNELS (which I believe safestrap can't flash anyway)
NO AROMA based ROMS (the install will just hang)
Hopefully more ROM developers on here will release Aroma free ROMS so that we can take advantage of this excellent tool!

Isn't the only reasons this is used with the ATT phones are the locked bootloaders and not changing tripping the counter? The counter doesn't matter with T-Mobile since you can do a exchange with T-Mobile since no one checks the counter. I think there is a Samsung rep which already said that T-Mobile doesn't care about the counter. I am not 100% on what this is used for if not only the 2 things I listed.

Prod1702 said:
Isn't the only reasons this is used with the ATT phones are the locked bootloaders and not changing tripping the counter? The counter doesn't matter with T-Mobile since you can do a exchange with T-Mobile since no one checks the counter. I think there is a Samsung rep which already said that T-Mobile doesn't care about the counter. I am not 100% on what this is used for if not only the 2 things I listed.
Click to expand...
Click to collapse
Knox is not a counter. It's more of a container for another instance of android that is used for secure work purposes. This has nothing to do with a flash counter. If you "trip" the knox warranty, it goes from 0x0 to 0x1 and you can not use Knox anymore. Custom recovery or custom kernel will trip it. It blows an e-fuse on your phone and can not be fixed without a motherboard swap. T-Mobile doesn't always check this, but they won't just exchange the phone for you if you ask. They might let you upgrade through the JUMP program or exchange because of another issue, but not necessarily do an exchange like you put it.
Some of us want to preserve the use of Knox because we can use it for work. Some just do not want to blow that e-fuse because it permanently disables a phone feature and possibly devalues it.
ATT phones have a locked bootloader, that means they can't install a custom recovery the traditional way. The T-Mobile version is unlocked so we can, but we blow our e-fuse if we do. There are benefits and limitations to safestrap recovery as there are to the regular recovery. Even if you have a regular recovery installed, the safestrap can also be installed and allows for "slots" that house different ROMS. You can switch between those ROMS with a simple reboot. This opens up possibilities not possible before.

Great find. I used this on my att note 3 before I made the switch. Would be great to see this adopted here in the tmo note world.
Sent from my Nexus 7 using XDA Premium HD app

People the Knox counter is only for the SAMSUNG WARRANTY! if you have any other type of warranty Knox doesn't matter! Trip that $#'t already!
Sent from my C6916 using Tapatalk

nightfox11 said:
People the Knox counter is only for the SAMSUNG WARRANTY! if you have any other type of warranty Knox doesn't matter! Trip that $#'t already!
Sent from my C6916 using Tapatalk
Click to expand...
Click to collapse
The Knox warranty is not for Samsung warranty. It is the KNOX WARRANTY... like it says. If you don't know what Knox is, do some research, decide if you need/want to use it and then blow your e-fuse if you don't need it. If tripped it's stating your phone is not warrantied by Knox... not Knox safe because Knox will no longer run on your phone.
People who work in a corporate environment can really benefit from Knox, you can replace that extra work phone with one phone that has a personal side and a work side via the Knox secure container. Even people who don't need it for work can benefit from a secure container that Knox offers just try Knox and see what it is or watch a youtube video.
Don't tell people to trip it if you don't even know what it is.

effortless said:
The Knox warranty is not for Samsung warranty. It is the KNOX WARRANTY... like it says. If you don't know what Knox is, do some research, decide if you need/want to use it and then blow your e-fuse if you don't need it. If tripped it's stating your phone is not warrantied by Knox... not Knox safe because Knox will no longer run on your phone.
People who work in a corporate environment can really benefit from Knox, you can replace that extra work phone with one phone that has a personal side and a work side via the Knox secure container. Even people who don't need it for work can benefit from a secure container that Knox offers just try Knox and see what it is or watch a youtube video.
Don't tell people to trip it if you don't even know what it is.
Click to expand...
Click to collapse
Oh my bad I just assume that nobody cares for the corporate blah blah blah since this is xda....but you are right maybe I shouldn't tell people.
sent from my Xperia Z1s

nightfox11 said:
Oh my bad I just assume that nobody cares for the corporate blah blah blah since this is xda....but you are right maybe I shouldn't tell people.
sent from my Xperia Z1s
Click to expand...
Click to collapse
Haha, just like in real life, you're going to find people on xda with different ideas about just about everything. Some people will never need Knox, others will. And, because this is xda, you will also find people who didn't know they wanted/needed Knox until it was too late. And now it's our responsibility to fix it for them (at least in their minds, anyway).

is there any side effect or anything using the ATT safestrap ?, also did you just blindly follow the steps from the ATT page or you did something different, i always wanted to have multiboot.
Thanks for letting us know.

Just blindly followed steps. No side effects. Make sure you're rooted, download the att safestrap apk and install it. Open apk and click install, click reboot to recovery and that's about it.
Sent from my SM-N900T using Tapatalk

Multi boot capability is something many could find very useful, this is great find. As a matter of fact all custom ROM should have this, so you can test them, see what works and what not and while you wait for fixes, all you need to do is reboot to get back that WiFi calling, or whatever else doesn't work and you need it ATM. For example, in my case the main reason I don't even consider other ROM is above mentioned WiFi calling, nobody else has.

Im using the guide in international about dualbooting along with ATT safestrap. Running CM11 and TW
Sent from my SM-N900T using Tapatalk

ktetreault14 said:
Im using the guide in international about dualbooting along with ATT safestrap. Running CM11 and TW
Sent from my SM-N900T using Tapatalk
Click to expand...
Click to collapse
About to do the same thing. May I inquire what CM/AOSP kernel you are using as the flashable zip? I haven't located anything that is just the kernel as far as CM goes. Just wondering if you are using one from the International or something...

Im using temaseks latest with IOCP
Sent from my SM-N900T using Tapatalk

Only problem is you will set the Knox flag since CM11 needs a different kernel. of course if you have already set it, no need to worry about it.

effortless said:
Knox is not a counter. It's more of a container for another instance of android that is used for secure work purposes. This has nothing to do with a flash counter. If you "trip" the knox warranty, it goes from 0x0 to 0x1 and you can not use Knox anymore. Custom recovery or custom kernel will trip it. It blows an e-fuse on your phone and can not be fixed without a motherboard swap. T-Mobile doesn't always check this, but they won't just exchange the phone for you if you ask. They might let you upgrade through the JUMP program or exchange because of another issue, but not necessarily do an exchange like you put it.
Some of us want to preserve the use of Knox because we can use it for work. Some just do not want to blow that e-fuse because it permanently disables a phone feature and possibly devalues it.
ATT phones have a locked bootloader, that means they can't install a custom recovery the traditional way. The T-Mobile version is unlocked so we can, but we blow our e-fuse if we do. There are benefits and limitations to safestrap recovery as there are to the regular recovery. Even if you have a regular recovery installed, the safestrap can also be installed and allows for "slots" that house different ROMS. You can switch between those ROMS with a simple reboot. This opens up possibilities not possible before.
Click to expand...
Click to collapse
Ohhh thank you a bunch, I've been wondering if they check for that stuff when swapping back the note 3 for jump.
Sent from my Nexus 4 using Tapatalk

ktetreault14 said:
Im using the guide in international about dualbooting along with ATT safestrap. Running CM11 and TW
Sent from my SM-N900T using Tapatalk
Click to expand...
Click to collapse
I tried this and it didn't work so I figured it couldn't but you said it there is a guide for it. Would you be able to provide me with the link? When I tried to install CM into another slot I just got a black screen.

You have to boot into normal twrp and flash a cm11 kernel. When you wanna boot back into tw fladh a kernel
Sent from my SM-N900T using Tapatalk

can someone recommend a 4.3 ROM that we can flash on the TMobile running the AT&T Safestrap? I looked but can't seem to find anything but 4.4.2 ROMs.
Any help would be appreciated.

effortless said:
I've been using the AT&T Safestrap Recovery on my Tmobile N900T and it works perfectly.
I flashed the AT&T X-Note ROM port (in slot 1) that they have and it works fine on the N900T. It does install the AT&T CSC (Just for this slot, each ROM slot has it's own CSC), but installing the TMO one causes crashing in the dialer (which also happens in the international rom currently out in the TMO forum). So, just keep the ATT CSC like it is. For Wi-Fi calling, I just boot back into the Stock slot and use the stock ROM.
The AT&T Safestrap (I used latest version 3.71)
The AT&T X-Note Port ROM (NO AROMA)
This allows us to keep Knox warranty intact for those of us that want it/use knox and want a recovery to flash customized TouchWiz ROMS..
Just remember:
NO AOSP ROMS
NO NEW KERNELS (which I believe safestrap can't flash anyway)
NO AROMA based ROMS (the install will just hang)
Hopefully more ROM developers on here will release Aroma free ROMS so that we can take advantage of this excellent tool!
Click to expand...
Click to collapse
Uhh, why would you use the ATT CSC files?

New update 11/4

Just got an update on my phone. Anyone else?

unomedmen1 said:
Just got an update on my phone. Anyone else?
Click to expand...
Click to collapse
I'm rooted, but I would love to know if this actually fixes battery life. I would unroot for that.

It's probably one of those security updates.

Update
I received the update as well as an update for Samsung Pay. It includes patches for the 2nd round of Stagefright vulnerabilities.. If you download the stagefright detector app from the Google Play Store and run it, it now informs you that your device is no longer vulnerable to any of the known versions of Stagefright. Before this update only the first round of Stagefright vulnerabilities were patched by the July update. As for the battery life optimization listed in the update's documentation, I guess we won't know until we use our phones for a few days. Hope this answers some of your questions.

Phone is snappier than ever
Sent from my SM-G920P using XDA Free mobile app

waoasis said:
Phone is snappier than ever
Sent from my SM-G920P using XDA Free mobile app
Click to expand...
Click to collapse
I personally don't feel anything different to be honest.

Me either. Battery seemed the same today too
Sent from my SM-G920P using XDA Free mobile app

worth to unroot device?

If my s6 ever snapped at me, i would throw it on the ground, repetitively step on it, and go buy me a nexus 6
Sent from my SM-G920P using Tapatalk

Has anybody confirmed the root methods we already have available will work with this update?

I also would like to know this....
P1_e85 said:
Has anybody confirmed the root methods we already have available will work with this update?
Click to expand...
Click to collapse

Im temped to try and flash unikernal it should work.?

They work
Sent from my SM-G920P using XDA Free mobile app

Forgive my ignorance on the subject but I have a few quick questions if anyone would be so kind as to indulge me with answers:
1. Is KNOX only tripped when a custom ROM is flashed or does the act of simply acquiring root permission trip it as well?
2. If KNOX is tripped does that simply void the warranty or does it hard-brick the phone as well?
I am fine without a custom ROM I just want root access to remove bloatware and customize features using Wanam Xposed. I loved everything I could do with that on my S3 and I am already bored with the look of my S6 even though I have only had it for about 5 hours now.

new update
trips knox stock rom xposed needs odexed rom

OI1 fixed Bluethooth battery drain
bowhunt2005 said:
Me either. Battery seemed the same today too
Sent from my SM-G920P using XDA Free mobile app
Click to expand...
Click to collapse
I had horrible battery life with my Bluetooth enabled.
Tried everything, the only way to return good battery life was to disable Bluetooth (which sucked with my Gear 2). OI1 fixed the Bluetooth battery drain.

Not sure battery is so poor , im kind of sick of this, for a flagship it should be better than this
Sent from my SM-G920P using Tapatalk

edlee said:
Not sure battery is so poor , im kind of sick of this, for a flagship it should be better than this
Sent from my SM-G920P using Tapatalk
Click to expand...
Click to collapse
Dunno bout you guys. Battery is been the best for me on this update. Im semi heavy user.
Sent from my SM-G920P using XDA Free mobile app

Just some security update.

PunkIsDeadAndYouAreNext said:
Forgive my ignorance on the subject but I have a few quick questions if anyone would be so kind as to indulge me with answers:
1. Is KNOX only tripped when a custom ROM is flashed or does the act of simply acquiring root permission trip it as well?
2. If KNOX is tripped does that simply void the warranty or does it hard-brick the phone as well?
I am fine without a custom ROM I just want root access to remove bloatware and customize features using Wanam Xposed. I loved everything I could do with that on my S3 and I am already bored with the look of my S6 even though I have only had it for about 5 hours now.
Click to expand...
Click to collapse
Knox is tripped when you flash a custom kernel or a custom recovery, to gain root access you usaully install a custom kernel with root access and then some people install a custom recovery to have the ability to flash custom roms. Some people have been able to unpack and repack the original stock rom for their device and then flash with Odin and not trip Knox, as long as your leave the boot.img and recovery.img intact and keep all the partitions their original size they were successful, this I am going to attempt soon, I too want to do a few edits to the CSC in the cache.img and try and remove some bloat in the system.img and repack and flash to keep my phone stock and unrooted and without bloat and to NOT trip knox.
if Knox is tripped Samsung can void the 1 year service warranty on your device, the knox counter keeps track if the phone has been altered by flashing custom kernels and recoveries, this makes the phone vurnerable to attacks by malicious apps and or users because having root access gives any user and apps permission to anything in the system files. I have tripped knox on many devices and have returned them bricked and never had a problem with Sprint and they replaced my phone, now sending it to Samsung directly I can not answer that but I have read on here in the forums a few have had their phones repaired after Knox being tripped but never ever heard of tripping knox bricking a phone, to brick a phone you have had to flash the wrong firmware and such things alike.
Tripping knox has a few drawbacks as some apps and features will not work, like Private Mode, or Samsung Pay and many more because Knox can not secure your Data anymore since you rooted your phone. So think of Knox as it looks at root, its like you leaving the front door on your house opened all day while your away at work. Knox has a purpose some people don't care about it and some do like me, I like private mode feature. Some root methods have bypassed the security checks by Knox but they keep fixing the vulnerabilities and making it harder and harder to not trip knox, so either you root and trip it or not to root and try other means to make your phone yours.