Pros and cons of rollback protection. Is it tamper proof? - Samsung Galaxy S10 Guides, News, & Discussion

Samsung included the rollback protection, related to the boot. For security reasons, Its impossible to downgrade to an older firmware with and older bootloader. Odin won't pass the boot partition.
If I flash CTF1 firmware, wich has U7 bootloader, and then I decide to downgrade to CTC9 wich has a U4 bootloader, odin won't let me doit. In other word you cannot downgrade any longer.
I ask: Are root privileges now useless?., When I bought my phone, and paid a lot of money; why is that I cannot have the firmware I want? And at last but not less important: If developpers have found a way to by pass the stock recovery auto- restoration, the process authentication, wsm, vaultkeeper, and file based encription, isnt it possible to by pass the rollback protection?

As far as I know, it can't be bypassed. At least not as of now. Root still works on exynos variants though.

Related

SGP621 Root Question

I am a rookie with these things and I would like to get some clarification.
I want to root my tablet, I am very satisfied with it and its system, all I need is to root it without touching my bootloader and drm keys. There are so many threads about it claiming its possible without unlocking the BL and I am not sure which tutorial should I use to root my device.
My device is LTE version, nothing modified and firmware is 23.0.1.A.0.16.
HenrichGrinch said:
I am a rookie with these things and I would like to get some clarification.
I want to root my tablet, I am very satisfied with it and its system, all I need is to root it without touching my bootloader and drm keys. There are so many threads about it claiming its possible without unlocking the BL and I am not sure which tutorial should I use to root my device.
My device is LTE version, nothing modified and firmware is 23.0.1.A.0.16.
Click to expand...
Click to collapse
you can try Towelroot as I see Z3TC is supported but I didnt test it on my tablet
where did you see that z3tc is supported by towel ? i can't find a device list or so.
HenrichGrinch said:
I am a rookie with these things and I would like to get some clarification.
I want to root my tablet, I am very satisfied with it and its system, all I need is to root it without touching my bootloader and drm keys. There are so many threads about it claiming its possible without unlocking the BL and I am not sure which tutorial should I use to root my device.
My device is LTE version, nothing modified and firmware is 23.0.1.A.0.16.
Click to expand...
Click to collapse
There is only one method at this time to get root on this tablet and this method involves unlocking your bootloader after doing a backup of you DRM keys (TA partition). Once you rooted your device with the unlocked bootloader you can reflash the TA partition and the bootloader will be locked again with all DRM keys intact as if you never unlocked it in the first place, but with root. Towelroot is not supported as the kernel exploit that was used is patched since nearly half a year now.

[Q] Root?

Hey guys,
I own a stock Xperia Z3 Tablet LET (SGP621) and I have never upgraded it, still running stock 4.4.4.
I want to root it and only root (to Lolipop). I have read topics but there are so many and written in strange language for me I have no idea where to start.
I read I could just flash prerooted ROM without even touching my drm keys, right? But then I was not sure how could I do it.
Any help would be appreciated.
Thanks!
There is no method to root the tablet without unlocking the bootloader. The root exploit which most of the guys mentioning in these strangely written topics (giefroot, easy root tool, geohot, blablabla...) is useless now since Sony surely patched it. So to root, you have to unlock the bootloader. But wait, you would loose the DRM keys.
So, it means that you need to make a backup.
But, without root you can't backup.
But, how should you root if you don't have an unlocked bootloader??? And it goes on and on and on and on....
The "trick" is to flash a firmware from another device (not z3 tablet compact) that can be rooted via the exploit. But nobody wanta to use the "other" firmware to gain root. This "other" firmware is only used to gain root temporary so you can backup the drm keys.
Then you likely have to flash back the stock firmware (and root will be lost again).
Now that you backed up the drm keys, you are ready to unlock the bootloader and let the drm keys disappear for a while.
And then you still have to do some complex steps to achieve root on your stock firmware, then restore drm keys (bootloader locks up itself again...), blablabla
TL;DR forget rooting this device unless you are ready to do all these above steps. If you don't understand the steps and are new to rooting sony devices, I recommend you not to root and enjoy the stock firmware. Next thing is that lollipop will come and you could easily update without problems (via OTA). Until then, wait for some magicians/hackers/crackers find a new exploit which can root 2015 sony devices without unlocking the bootloader.
If you want to know if your device (firmware) can be rooted via exploit, try xdualrecovery. It contains the exploit root method. But if you are unsuccessful flashing xdualrecovery, that is because the exploit doesn't work and your firmware is patched.
Sadly, sony devices are nothing like nexus. And including this "afraid of loosing the drm keys", simply unlocking the bootloader might not be a pleasing thing to do.
just to add maybe we don't need to unlock bootloader to root our tablet
we temporarely flash z3 kitkat system to get a rootable core and we flash again z3 tablet compact system before reboot
or so I understood
ChiDi9901 said:
There is no method to root the tablet without unlocking the bootloader (false, there is a method detailed in this thread). The root exploit which most of the guys mentioning in these strangely written topics (giefroot, easy root tool, geohot, blablabla...) is useless now since Sony surely patched it. So to root, you have to unlock the bootloader. But wait, you would loose the DRM keys.
So, it means that you need to make a backup.
But, without root you can't backup.
But, how should you root if you don't have an unlocked bootloader??? And it goes on and on and on and on....
The "trick" is to flash a firmware from another device (not z3 tablet compact) that can be rooted via the exploit. But nobody wanta to use the "other" firmware to gain root. This "other" firmware is only used to gain root temporary so you can backup the drm keys (false, the other firmware is used to gain root and then install a custom recovery, so you can flash a prerooted and updated lollipop firmware based on official Xperia Z3 Tablet Compact firmware).
Click to expand...
Click to collapse
I would advise not to answer questions about root without understanding the process and/or misguiding people asking for help.
The information you give above is wrong. You don't need to unlock your bootloader provided you downgrade to an explotable firmware.
The thread that details how to root your Xperia Z3 Tablet Compact is this one:
http://forum.xda-developers.com/z3-...to-rooted-lollipop-locked-bootloader-t3083980
1. Obtain root by first flashing SGP621_23.0.1.A.0.167_CE.ftf and the system partition of D6603_23.0.A.2.93_Generic_20GLOBAL.ftf. Then use giefroot to root.
2. Prepare prerooted flashable zip of 23.1.A.0.690 NOBA on your internal storage or external SD.
3. Install XZDualRecovery and now you will have TWRP to install 23.1.A.0.690 NOBA on your SD card.
You may ask any doubts in that thread.
BarajaVLC said:
I would advise not to answer questions about root without understanding the process and/or misguiding people asking for help.
The information you give above is wrong. You don't need to unlock your bootloader provided you downgrade to an explotable firmware.
The thread that details how to root your Xperia Z3 Tablet Compact is this one:
http://forum.xda-developers.com/z3-...to-rooted-lollipop-locked-bootloader-t3083980
1. Obtain root by first flashing SGP621_23.0.1.A.0.167_CE.ftf and the system partition of D6603_23.0.A.2.93_Generic_20GLOBAL.ftf. Then use giefroot to root.
2. Prepare prerooted flashable zip of 23.1.A.0.690 NOBA on your internal storage or external SD.
3. Install XZDualRecovery and now you will have TWRP to install 23.1.A.0.690 NOBA on your SD card.
You may ask any doubts in that thread.
Click to expand...
Click to collapse
Well, the OP (junior member) mentioned "strange languages". So he/she might not understand all this complex steps. That's why I "let it be" to keep the things easy. If he/she understands these steps then it's good for him/she. But you're right, I lied. And thanks for the clarification and pointing out my wrong information.
Personally, I had every Xperia unlocked without backing up the DRM keys. I never had any disadvantage. I was, however, a little reluctant with the XT3C. That's because I use it as both my phone and tablet.
Still, did it now. No adverse effects. Root is SO much more important than the Bravia engine or whatever. And the camera isn't very good anyway so I don't miss the 'better' quality. It's bad either way

Root questions

Hello,
I am new to this forum and rooting procces, I've read some threads and didn't understand few things.
So, my questions are:
1. Is it possible to root phone without unlocking bootloader and losing DRM keys?
2. If it isn't,is there a way to backup DRM keys and restore them after rooting?
3. If I am able to root without unlocking bootloader will I still get OTA updates and if I do, will OTA update delete my root status?
Sorry if these questions were already asked in other thread, I was searching a bit and couldn't find any of those. Hope you can help me out.
Thank you in advance and have a nice day
1. Yes it is although you do need some time to do it. It's not difficult though.
2. As soon as you root, you can take a ta backup(which requires a few clicks and about 2 minutes of your time).
3. You won't be able to use Ota (even if you are which you most likely won't, it is recommended that you DO NOT use it).
cindra said:
1. Is it possible to root phone without unlocking bootloader and losing DRM keys?
2. If it isn't,is there a way to backup DRM keys and restore them after rooting?
3. If I am able to root without unlocking bootloader will I still get OTA updates and if I do, will OTA update delete my root status?
Sorry if these questions were already asked in other thread, I was searching a bit and couldn't find any of those. Hope you can help me out.
Thank you in advance and have a nice day
Click to expand...
Click to collapse
1.-Yes, the method is called "Downgrading". I go back to 4.4.2 (Build number 314) and use the older XZDR (Xperia Z Dual Recovery). It will temporarily root to install the recovery. When the phone reboots you can install a custom ROM or whatever to get Lollipop with Root and Recovery
2.-After rooting on 4.4.2 you can do a backup of the DRM Keys
3.-Just because you have rooted your phone you will no longer be able to get OTA updates for the Android system itself. OTA will show a random error message and PC Companion will refuse because of the modified software.
Ok, thank you for answers
Is there any 6+ Android build that is pre-rooted or is it better to stick with 5.1.1 rooted?
Alo, I've heard that cam quality could drop after rooting or unlocking bootloader, is it true?
cindra said:
Ok, thank you for answers
Is there any 6+ Android build that is pre-rooted or is it better to stick with 5.1.1 rooted?
Alo, I've heard that cam quality could drop after rooting or unlocking bootloader, is it true?
Click to expand...
Click to collapse
Stick with android 5.1.1 for now.
And yes, cam quality WILL DROP, but only after UNLOCKING YOUR BOOTLOADER. Rooting alone won't hurt your cam quality.
Mokiwipeout said:
Stick with android 5.1.1 for now.
And yes, cam quality WILL DROP, but only after UNLOCKING YOUR BOOTLOADER. Rooting alone won't hurt your cam quality.
Click to expand...
Click to collapse
Ok, so I was thinking a lot if I should root or not. I decided to root. So just to clarify some things. If I use comunity root with downgrading,will it keep my DRM keys? If yes, I backup TA partition when rooted and then I can proceed with BL unlocking. Can I restore DRM keys to a custom ROM? Do you have any good custom ROM suggestion for me and is it better to use odexed or deodexed ROM?
I saw also saw this thread, hope it works so I won't be losing any camera quality.
That should be all.
Thank you in advance.
Have a nice day .
If you do NOT UNLOCK your bootloader, you wont lose your drm keys. (this is why after rooting using this method you can actually backup your drm keys, which you MUST DO no matter what).
When you restore your drm keys, you actually RELOCK your bootloader, so you must be on a stock based custom rom, and not using a custom kernel, otherwise you will simply brick your device.
Odexed or deodexed rom is purely personal preference, the difference being that deodexed ROMs allow for more customization (which is not necessary though). Regarding this, it doesn't really matter whether it is deodexed or not, so keep this in mind.
I cannot suggest a rom and I would advise against asking which rom is the best, because it is against the forum's rules.
Mokiwipeout said:
If you do NOT UNLOCK your bootloader, you wont lose your drm keys. (this is why after rooting using this method you can actually backup your drm keys, which you MUST DO no matter what).
When you restore your drm keys, you actually RELOCK your bootloader, so you must be on a stock based custom rom, and not using a custom kernel, otherwise you will simply brick your device.
Odexed or deodexed rom is purely personal preference, the difference being that deodexed ROMs allow for more customization (which is not necessary though). Regarding this, it doesn't really matter whether it is deodexed or not, so keep this in mind.
I cannot suggest a rom and I would advise against asking which rom is the best, because it is against the forum's rules.
Click to expand...
Click to collapse
Thank you for answer. If i use this method will it keep my bootloader locked (Will DRM keys stay on phone?).
Look.
Your bootloader cannot be "accidentally" unlocked. You have to get the bootloader unlock code by YOURSELF. A program wont do it on its own.
So don't worry, even if the method you chose to root the device requires an unlocked bootloader, it will be stated since you have to do it manually.
Plus, rooting a device with an unlocked bootloader simply requires installing a custom kernel(which has a recovery too) and then flashing a zip file that will root the phone.
Mokiwipeout said:
Look.
Your bootloader cannot be "accidentally" unlocked. You have to get the bootloader unlock code by YOURSELF. A program wont do it on its own.
So don't worry, even if the method you chose to root the device requires an unlocked bootloader, it will be stated since you have to do it manually.
Plus, rooting a device with an unlocked bootloader simply requires installing a custom kernel(which has a recovery too) and then flashing s zip fike that will root the phone.
Click to expand...
Click to collapse
Thank you very much and sorry for so stupid questions, I am new to this and just want to be sure

Rooting without unlocking bootloader - is it possible?

I've just bought V30 and would like to root it. Preferably with Magisk.
Every guide I found requires to unlock bootloader. This is one step too far for me. Is there a way to root V30 without unlocking it's bootloader?
przemhb said:
I've just bought V30 and would like to root it. Preferably with Magisk.
Every guide I found requires to unlock bootloader. This is one step too far for me. Is there a way to root V30 without unlocking it's bootloader?
Click to expand...
Click to collapse
NO.
Which variant did you buy?
With some, it's simply flashing a simple code via fastboot flash commands. On others you first have to convert to a variant which has fastboot flash commands, so you can flash that code. If you tell us which variant you bought, you will know if you have extra steps or not...
For all V30/V30+/V30S (except T-mobile H932) for bootloader unlock and root, you need to:
have fastboot flash commands
be on specific Oreo firmware
use the "fake" bootloader unlock code
install TWRP and flash Magisk (OK technically there is a way to root without installing TWRP, but it's easier with TWRP)
WTF V30/V30+/V30S Bootloader Unlock and Root
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
I don't want to loose my warranty, DRM protected stuff playback capability, etc.
These warnings from LG bootloader unlock website worry me and make me extra cautious. I have to be 100% sure none of the things will happen:
"When unlocking the bootloader, applications which require a trusted execution environment (TEE) to operate will not work properly because after unlocking the bootloader the device will no longer be trusted.
Unlocking the bootloader will also affect the DRM protection of your device, therefore some applications which require DRM protection may not work anymore or block certain functions due to this untrusted state.
Common examples for affected applications are services which offer download/streaming of paid multimedia content like music and movies or services offering mobile payment."
Is there at least reliable app+data migration utility to move my apps with data from an old (Marshmallow) phone to this new one? LG Mobile Switch didn't manage to migrate apps' data.
przemhb said:
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
I don't want to loose my warranty, DRM protected stuff playback capability, etc.
These warnings from LG bootloader unlock website worry me and make me extra cautious. I have to be 100% sure none of the things will happen:
"When unlocking the bootloader, applications which require a trusted execution environment (TEE) to operate will not work properly because after unlocking the bootloader the device will no longer be trusted.
Unlocking the bootloader will also affect the DRM protection of your device, therefore some applications which require DRM protection may not work anymore or block certain functions due to this untrusted state.
Common examples for affected applications are services which offer download/streaming of paid multimedia content like music and movies or services offering mobile payment."
Is there at least reliable app+data migration utility to move my apps with data from an old (Marshmallow) phone to this new one? LG Mobile Switch didn't manage to migrate apps' data.
Click to expand...
Click to collapse
LG also throws a scary bootloader unlock warning in your face.
LG's "warning" is to keep you from rooting your phone. If you've rooted phones before, its no different.
Magisk hides root, so all apps work.
Anyone who's rooted their V30 can tell you how it is. The threads here are very active!
But it's your decision.
Is it possible to lock back the bootloader at the end of the process?
przemhb said:
Is it possible to lock back the bootloader at the end of the process?
Click to expand...
Click to collapse
At the end of what process? Rooting? You don't seem to understand, you have to unlock the bootloader to install TWRP. You have to install TWRP to flash Magisk. OK, technically there is a way to root without TWRP (by installing a rooted kernel), but you still need bootloader unlock.
You seem hung up on bootloader unlock when it's REALLY root that LG is trying to prevent. They really couldn't care less about bootloader unlock, they are focusing on that to prevent you from rooting your phone. Because once you unlock your bootloader you are one step away from root...
Yeah, you can lock the bootloader back if you no longer want root.
Most phones require bootloader unlock to root -- Motorola, Pixel, LG, ZTE, OnePlus.
---------- Post added at 11:59 PM ---------- Previous post was at 11:51 PM ----------
przemhb said:
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
Click to expand...
Click to collapse
I'm sorry, what is the DATE of the security patch? May, July, September? If pre-July, you are good to go. You just flash a simple code with fastboot. If July or later, you would need to temporarily downloader to pre-July 2018 firmware.
Thank you for your detailed answers! I really appreciate them.
ChazzMatt said:
At the end of what process? Rooting?
Click to expand...
Click to collapse
Yes. I was wondering if it is possible to lock back the bootloader once the phone is rooted, TWRP, Magisk are there. The question behind it is if having unlocked bootloader doesn't unnecessarily increase security risk (of course the main risk is to have rooted phone, and I accept it).
ChazzMatt said:
Yeah, you can lock the bootloader back if you no longer want root.
Click to expand...
Click to collapse
Good news. Suppose I would unroot and lock back the bootloader, then send the phone to warranty service. Is it possible for the service to discover the phone was rooted and reject my warranty claim?
ChazzMatt said:
Most phones require bootloader unlock to root -- Motorola, Pixel, LG, ZTE, OnePlus.
Click to expand...
Click to collapse
So far I've rooted every phone without unlocking bootloader. It was harder, but in some cases possible (Xperia Z2, Xperia V, Motorola Defy).
ChazzMatt said:
I'm sorry, what is the DATE of the security patch? May, July, September? If pre-July, you are good to go. You just flash a simple code with fastboot. If July or later, you would need to temporarily downloader to pre-July 2018 firmware.
Click to expand...
Click to collapse
It's March.
I am not familiar with Magisk. Is it safer from the security point of view than classic roots with SuperSu+BusyBox?
Correct me if I am wrong, but unlocking bootloader means gaining write access to boot partition. TWRP needs to be stored on it. Kernel is also there. And where is Magisk stored?

General PSA: DO NOT install the Beta on a locked bootloader.

If your bootloader is locked, one of the dumbest things you can do is try to install potentially unstable firmware. If something goes wrong, you won't be able to recover your device.
If you did anyway, the only way you should try to return to stock is with the Android Flash Tool, which should work as long as OEM Unlocking is enabled.
If you're on a device that cannot be unlocked, you should wait the Android 13 official release.

Categories

Resources