[knox tripped on stock] question - Samsung Galaxy A3, A5, A7 (2017) Questions & Answe

So I recently got a new A5 2017 (SW-A520W Canadian Varient) and I managed to successfully install TWRP recovery and Super SU. (Without tripping KNOX). Then I realized there were a ton of apps that refused to allow certain functions like my banking etc. due to (Unauthorized Tampering). So I decided to remove SuperSU and change to Magisk. Everything was fine. I even passed Safetynet (via Magisk). But then I did something VERY VERY stupid I went back into Developer Options and unchecked allow Custom Boot loader OEM UNLOCK ) and Wamo! All of a sudden I noticed I no longer passed Saftey Net and when I rebooted I got the Red Text of Death (Blocked By FRP Lock!). SH**. So right now I am dling the Stock firmware for my phone (A520WVLS5CRI1_A520WOYA5CRI1_VMC.zip) for ODIN. KNOX is now tripped and the phone was no more than 3 weeks old! THIS IS NON SENSE. We are the owners, we paid (or we will pay via a contract the full amount of the phone). We should have the right to do what thou wilt with our devices! So obviously my question is KNOX is software right? at some point in the future someone should have an exploit to remove this ridiculous obtrusive unnecessary hindrance.
BTW: I just want to reiterate that at no time did I change the ROM it was always stock just rooted

Related

SG3 Update - Battery Killer & Knox

i updated to 4.3 today and i got 2 questions:
1) it drains my battery big time! has anyone noticed this too?
2) i didnt agree to nor did i install knox. so, does that mean i'm able to root my phone without tripping knox?
Installing official firmware installs Knox work it. Rooting your phone will trip it
TW 4.3 WITH A TOUCH OF KITT KATT
calexchelse said:
Installing official firmware installs Knox work it. Rooting your phone will trip it
TW 4.3 WITH A TOUCH OF KITT KATT
Click to expand...
Click to collapse
There is a lot of misinformation flying around about Knox and 4.3 in general. Knox files are present, but it does not appear to be activated (because there is an option to do so).
seLinux (shield icon in notification bar) is creating huge problems with root on 4.3. I think you need a insecure kernel to force it into permissive mode instead of the default enforcing mode, but I didn't do any research on that.
This warranty bit thing looks like another flash counter (aka "Knox counter"). Not sure of it's relevance. It does not appear to have any.
The one way MJC upgrade, I don't think is related to any of these. When I Odin'd MJC, it rebooted itself into recovery and updated something then rebooted again, when normally that extra reboot would not be required. Changing of partition layouts to make room for more bloatware, I don't know. But it did something it's never done before. And I've used Odin dozens of times.

Knox?

I've been "out of the loop" for quite some time and much has happened to Samsung devices since my last one (Samsung i9000). Basically it is the terror stories about this Knox security thing that mostly concern me and brought me here...
I mean I like this tablet, I trully do, but if I'm robbed by android's main advantage (modifying the thing to suit your needs) then I have absolutely no reason to choose this.
I have already read a a couple of stuff but they are all concerned about s4 and note 3. What about this tablet (the WiFi version), is it ... secured too? Also I'm a bit unclear of what this Knox thing achieves, at first it voids your warranty, second does not let you to flash certain ROMs, but I'm unclear from/on which ROMs this is enabled or even if merely rooting your device would enable this. I mean someone may not be interested in aosp ROMs but still love some "optimized stock + custom kernel" will this Knox thing prevent him even from that?
If this is proved an unmodifiable device I'd think twice for it's usefulness, android's only edge is its "modifiability" remove it and you buy sth 2nd or 3rd tier...
Stevethegreat said:
I've been "out of the loop" for quite some time and much has happened to Samsung devices since my last one (Samsung i9000). Basically it is the terror stories about this Knox security thing that mostly concern me and brought me here...
I mean I like this tablet, I trully do, but if I'm robbed by android's main advantage (modifying the thing to suit your needs) then I have absolutely no reason to choose this.
I have already read a a couple of stuff but they are all concerned about s4 and note 3. What about this tablet (the WiFi version), is it ... secured too? Also I'm a bit unclear of what this Knox thing achieves, at first it voids your warranty, second does not let you to flash certain ROMs, but I'm unclear from/on which ROMs this is enabled or even if merely rooting your device would enable this. I mean someone may not be interested in aosp ROMs but still love some "optimized stock + custom kernel" will this Knox thing prevent him even from that?
If this is proved an unmodifiable device I'd think twice for it's usefulness, android's only edge is its "modifiability" remove it and you buy sth 2nd or 3rd tier...
Click to expand...
Click to collapse
You can still root and modify things, however, Samsung has taken the stance that since Knox has been tripped you must've been running Custom firmware/apps that can "potentially" damage the hardware so all warranties (at least from Samsung) are void....
The other issue is Samsung are updating bootloaders when you install firmware updates. If you happen to get a new bootloader then you CAN'T go back to a lower version of firmware, period... Doing so generally results in bootloops or stuck on Samsung logo until you update to the newer firmware again...
The downside to this is the nandroid backup you took just before updating in case of a problem is rendered useless, and in the case of the Note 3, Kies no longer recognises the new bootloaders so emergency firmware restore doesn't work...
Knox also tries to deny any app root access, some messenger programs were denied access as their permissions required root access. SuperSu has been updated now to work with no problems, until Samsung decide to interfere again....
Knox is also a secure container for your data, it was meant for security agencies and such to have a secure passworded partition in the software that doesn't allow anyone but the person with the passcode to access it. This is disabled after rooting as the system has been modified and can no longer be deemed secure....
ultramag69 said:
You can still root and modify things, however, Samsung has taken the stance that since Knox has been tripped you must've been running Custom firmware/apps that can "potentially" damage the hardware so all warranties (at least from Samsung) are void....
The other issue is Samsung are updating bootloaders when you install firmware updates. If you happen to get a new bootloader then you CAN'T go back to a lower version of firmware, period... Doing so generally results in bootloops or stuck on Samsung logo until you update to the newer firmware again...
The downside to this is the nandroid backup you took just before updating in case of a problem is rendered useless, and in the case of the Note 3, Kies no longer recognises the new bootloaders so emergency firmware restore doesn't work...
Knox also tries to deny any app root access, some messenger programs were denied access as their permissions required root access. SuperSu has been updated now to work with no problems, until Samsung decide to interfere again....
Knox is also a secure container for your data, it was meant for security agencies and such to have a secure passworded partition in the software that doesn't allow anyone but the person with the passcode to access it. This is disabled after rooting as the system has been modified and can no longer be deemed secure....
Click to expand...
Click to collapse
So Knox is more about controlling your device than security as it is not optional (you cannot turn it off , right). Also about losing the warranty, well I was hoping to buy it from a reputable store in my country, even if Samsung voids my warranty can't the store itself honor it?
If not, if in fact merely rooting your device voids my warranty whatsoever than I'm most certain that this is not a device for me and I'm not sure for whom it is, I don't think android is a good os when decoupled from rooted apps (no xposed framework, no adblock, no virtual buttons, no gestures, no greenify), the experience is basically killed...
Even jail breaking your iPad doesn't kill the warranty as long as you install non jail broken iOS version on top... Bad Samsung, bad
OK, since I actually want to give this tablet a go I came up with a new idea. What if I trip up the Knox counter but then get back to stock firmware and *then* my tablet gets damaged? Would then my warranty be honored? The Knox counter can only tell you that it was tripped *once* but not what is/was happening at the time you got a defect.
Maybe my battery died, or more than a handful pixels died on me, all having nothing to do with me rooting my device at some point. Can my rooting still be grounds for samsung to dismiss my warranty? Because if so that is quite a scheme that Samsung runs.
Do any people had their warranty honored even though the Knox counter was tripped?
If you have a squaretrade warranty you should be fine with that excuse. However, Samsung will say that they cannot tell if the damaged occurred before or after the rooting occurred, thus denying you your warranty. Once the counter is tripped, from that point on the warranty is gone. My recommendation, get a squaretrade for 100 with a 2 year warranty and you will be fine.
Sent from my SM-P600 using Tapatalk

Rooting D855/ Unlocking bootloader, without kingroot

Hi all, I'm new to android rooting, and have been consuming knowledge over the last few days like a large sponge.
I discovered that McAfee had set itself if with admin rights on my phone, and had been sending texts to international numbers without alerting me, took me a good while to find out where the extra charges from my carrier were coming from. Anyway, I cant delete it as its in the ROM, so i rooted the phone (on lollipop) and deleted it, along with some other bloatware that LG and my carrier decided I would want, and then updated the phone to marshmallow (I didn't actually realise marshmallow had been released, I don't keep in the android loop, and my phone always said the latest OS was installed - had to update it through LGs PC suite).
To my abject horror McAfee was back, I can only assume this was due to the update to marshmallow, and not because it somehow survived deletion somewhere on the phone. So now, i need to root the phone, and delete McAfee again, however I really dont want to use Kingroot to do it. Its very shifty, looking at various info on the web, what with it sending information to IPs in China and running services in the background. The other alternative, using Supersu's systemless root, requires the bootloader to be unlocked, but to unlock the bootloader, a root is required (please correct me if any of this information is incorrect, I am pretty new to the android side of things - ive only ever jailbroken iDevices before now). I think im right in saying I could unlock the boot loader if I could access fastboot, but the command 'adb reboot-bootloader' only reboots the phone, rather than booting into the bootloader.
Is there anything I can do to get around this ? Once its rooted and the bloatware deleted, Ill unroot it (I use banking apps and they wont run if the phone is rooted) so I dont want to flash any custom ROMS or anything - just get access to files on the root.

Down side of rooting ?

Hey there,
I've owned the Note 10+ (Exynos) since release and i haven't rooted it once. I remember the last phone is the note 8 and i did root it, but i remember when i wanted to return to stock to sell that phone i ran into some trouble.
For example the Samsung Pass, Samsung Health Apps etc... don't work anymore after your root your phone, is this still a thing ? Because i'm considering rooting the note 10+ now and i need to know if i can successfully get everything back the way it was before rooting ?
Any help or advice would be appreciated, thanks
Warnahly said:
Hey there,
I've owned the Note 10+ (Exynos) since release and i haven't rooted it once. I remember the last phone is the note 8 and i did root it, but i remember when i wanted to return to stock to sell that phone i ran into some trouble.
For example the Samsung Pass, Samsung Health Apps etc... don't work anymore after your root your phone, is this still a thing ? Because i'm considering rooting the note 10+ now and i need to know if i can successfully get everything back the way it was before rooting ?
Any help or advice would be appreciated, thanks
Click to expand...
Click to collapse
hello. yes rooting is a bit of a problem nowadays. Samsung REALLY does not want you to root their Androids for whatever reason. Here are the disadvantages:
1) When you power up the device, a FILTHY boot-up screen pops up and takes 8 seconds and a button press to fully boot the device [see the full details and EXYNOS ONLY bypass here: Boot Pop up remove
2) The KNOX counter [hardware fuse] trips and goes 0x1 [Some devices get OTA updates after locking the bootloader and flashing full ODIN stock, but didn't happen for me. Also it voids the warranty]
3) All the KNOX secured apps [Secure Folder, Samsung Health, Pay etc.] will NOT work [there are bypasses for Samsung Health, Samsung Music and Secure Folder but say goodbye to Samsung Pay]
4) Samsung will refuse to repair your phone and you have to look at 3rd Party options to repair if anything goes wrong. [no bypass to that]
5) Once you unlock the bootloader, you can never lock it again [ idk much about this one, some people say you can lock it again. Gotta look it up ]
Also rooting with TWRP in of itself is a gigantic hassle nowadays [I really miss the days when we could just flash TWRP with ODIN and call it a day].
NullCode said:
hello. yes rooting is a bit of a problem nowadays. Samsung REALLY does not want you to root their Androids for whatever reason. Here are the disadvantages:
1) When you power up the device, a FILTHY boot-up screen pops up and takes 8 seconds and a button press to fully boot the device [see the full details and EXYNOS ONLY bypass here: Boot Pop up remove
2) The KNOX counter trips and goes 0x1 [This will prevent you from ever getting OTA updates and it voids the warranty]
3) All the KNOX secured apps [Secure Folder, Samsung Health, Pay etc.] will NOT work [there are bypasses for Samsung Health, Samsung Music and Secure Folder but say goodbye to Samsung Pay]
4) Samsung will refuse to repair your phone and you have to look at 3rd Party options to repair if anything goes wrong. [no bypass to that]
Click to expand...
Click to collapse
I mean as far as the boot up issue its fixed so that's fine, in terms of the counter, even if i restored the stock rom and removed root i won't ever get OTA updates ?
Ahhh i seriously hate samsung now ! let me mess up my phone the way i want
Well, that is the price to pay to really ensure a safe device, specially when using banking apps, and corporative enviroments, knox is really good in this regard, the e-fuse is a total warranty for knowing if a device is compromised at deep levels, so, that is how things are these days…
The e-fuse status (0x1) on the bootloader screen can be spoofed to look like it hasn't. Just checking the bootloader before purchasing a 2nd hand device is no longer a guarantee that you have a "secure" device...
This means that if you do get a device that looks secure you might actually get a few nasty surprises when certain apps just won't work or if you try to flash OTA updates yourself through ODIN...
Buyer beware...
Warnahly said:
I mean as far as the boot up issue its fixed so that's fine, in terms of the counter, even if i restored the stock rom and removed root i won't ever get OTA updates ?
Ahhh i seriously hate samsung now ! let me mess up my phone the way i want
Click to expand...
Click to collapse
yup. even after you full flash stock, it's still gonna be 0x1 and no more OTA updates. But you still can do firmware updates with ODIN (remember it wipes everything including the Internal Storage). Tons of guides on Google, find one.
Just a tiny correction to this thread: it's not true that you can "never" get ota updates ever again. If you flash stock again, you will receive OTAs.
Source: my previously rooted note10+.
As for samsung pay, my country doesn't support it, so no loss there, s-health you get working with a build.prop line, and secure folder is more or less a gimmick for me. As for getting your phone warrantied, i had my friend get his rooted s6e+ replaced for dead camera pixels with no issues. And from what i read european countries have laws separating hardware warranties from software. But i could be wrong on this.
With that being said, unless you have a specialised application for it, rooting isn't worth it anymore imo. It was back when touchwiz was a bloated pos and flashing cyanogenmod gave you a really noticeable advantage, but samsung caught up software wise.
Rooting and installing a custom rom takes me back to good old htc hd2 days.... I've rooted all my phones up to the original pixel. After further looking into rooting and how it can affect security I decided to opt out of rooting for the next 4-5 years. I feel like back then, the OS weren't this customizable as todays phones are. I do miss Xposed Frameworks though
As some posters above say, unless you want very, very badly some app that requires root, it is not worth the hassle and the security issues, I really loved Viper sound, which requires root, but, I decided not to root since the note 7, now samsung one UI gives a very good customization, I do apreciate Knox, and some banking and streaming apps refuse to work on rooted devices, so, I said bye to viper…
Not being rooted, I really miss titanium backup. Every time I get a new phone I end up losing progress or data in some app or other, usually a game. There was one game I had spent a decent bit of money on, years ago now, on my note 4, and it didn't transfer properly to my note 7, and I lost all my progress and the money I had spent on it.
I really feel like consumer protection laws should mandate that the manufacturers can't make rooting impossible like they do. I don't care about losing knox or Samsung apps, heck, part of why I root is to get that crap I don't use off my phone! I miss lineageos. Samsung's android customization isn't to my taste.
I agree with you about root, somebody buys a phone, therefore that person should be able to do anything to it, but, for other part, if rooting is all that important for you, you might very well cosidered getting a rootable device, I rooted my devices in the past, begining with a S3, these days I just miss Viper, but, considering how samsung has progressed with itd UI, I no longer think about root, furthermore, I use a number of apps that do not work when root is detected, so, in the end every one has to think carefully what really needs before getting a device
the only thing i miss on stock, are proper backups as in TWRP or in Titanium Backup, as a lot of things are not restorable with SmartSwitch. also i miss the possibility to completely uninstall bloatware like facebook or netflix and others. i see no reason, why these are part of the OS. CCSWE is quite a big help in that matter, though. for OTA, you can have them, when you re-lock the bootloader and odin stock on the device (at least on the S10+)
blackspy_ said:
the only thing i miss on stock, are proper backups as in TWRP or in Titanium Backup, as a lot of things are not restorable with SmartSwitch. also i miss the possibility to completely uninstall bloatware like facebook or netflix and others. i see no reason, why these are part of the OS. CCSWE is quite a big help in that matter, though. for OTA, you can have them, when you re-lock the bootloader and odin stock on the device (at least on the S10+)
Click to expand...
Click to collapse
as for backup I think I heard about a software called helium, which backs up apps w/o root. Also you can disable/remove bloatware using a PC and ADB w/o root. Here you go: https://www.xda-developers.com/uninstall-carrier-oem-bloatware-without-root-access/
---------- Post added at 07:24 AM ---------- Previous post was at 07:21 AM ----------
Rainbow_Dash said:
Just a tiny correction to this thread: it's not true that you can "never" get ota updates ever again. If you flash stock again, you will receive OTAs.
Source: my previously rooted note10+.
As for samsung pay, my country doesn't support it, so no loss there, s-health you get working with a build.prop line, and secure folder is more or less a gimmick for me. As for getting your phone warrantied, i had my friend get his rooted s6e+ replaced for dead camera pixels with no issues. And from what i read european countries have laws separating hardware warranties from software. But i could be wrong on this.
With that being said, unless you have a specialised application for it, rooting isn't worth it anymore imo. It was back when touchwiz was a bloated pos and flashing cyanogenmod gave you a really noticeable advantage, but samsung caught up software wise.
Click to expand...
Click to collapse
thanks a lot for correcting me. Even after I flashed full stock on my Tab S3, it would not detect OTA updates and some updates totally soft-bricked it. Editing my post for correction
i went fir CCSWE,regarding disabling.

help/info about samsung rooting

hello everyone,
I have and use android phones last 10+ years, always rooted. But I never had samsung phone.
Now I hear only half informations from my buddy, that its dangeous to root samsung because of knox (i dunno what knox even is).
So, now I'm thinking to buy S20 and want to root it, and my question is..:
If I root it, is anything ''broken'' on the phone ? Can phone still recieve official Samsung OTA updates?
What are minuses? what to look for? What about this "knox"?
Please need informaions
Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.
Understood, Thank You alot for informations and help!
ShaDisNX255 said:
Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.
Click to expand...
Click to collapse
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!
victoriam8a said:
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!
Click to expand...
Click to collapse
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....
73sydney said:
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....
Click to expand...
Click to collapse
Ohh okay !!! Thank you for letting us know !! I don't use Samsung Health so I had not tested it myself, but I had heard that Samsung Health doesn't work with root. Thanks for telling us it works fine !!
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
Yeah you can flash updates with something like Odin (never used Kies myself, I don't know if it still works)
maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
ODIN
Flash HOME CSC if you want to keep your data

Categories

Resources