hellozes,
if turned ON, can "secure startup" be switched back to its original state or back to OFF?
no root no firmware upgrade..... just a test.
thanks.
diehard2013 said:
hellozes,
if turned ON, can "secure startup" be switched back to its original state or back to OFF?
no root no firmware upgrade..... just a test.
thanks.
Click to expand...
Click to collapse
Take 2 seconds to try it and find out
wrong answer.
hi ya.
you can turn it on and off at will, it will just ask for a pin number to turn it on, then the same pin you chose at startup, once back in the phone, you can go back to secure startup and turn it off if you dont want to use it. takes a while to startup using secure startup but its extra protection.
cheers.
DANIELWHITT said:
hi ya.
you can turn it on and off at will, it will just ask for a pin number to turn it on, then the same pin you chose at startup, once back in the phone, you can go back to secure startup and turn it off if you dont want to use it. takes a while to startup using secure startup but its extra protection.
cheers.
Click to expand...
Click to collapse
my fear is with any potential irreversibility of the secure startup once initiated. I'd like to be able to fall back to default. IIRC, the LG G5 was one such case. Once encrypted, decryption was a NO.
thanks for your feedback!
diehard2013 said:
my fear is with any potential irreversibility of the secure startup once initiated. I'd like to be able to fall back to default. IIRC, the LG G5 was one such case. Once encrypted, decryption was a NO.
thanks for your feedback!
Click to expand...
Click to collapse
not to sound rude but, you clearly knew that answer before asking the question. So, why ask it then?
MrSteelX said:
not to sound rude but, you clearly knew that answer before asking the question. So, why ask it then?
Click to expand...
Click to collapse
you’re not sounding rude.
nothing is clear and, even if it is (unlike this case) then I like to double check once in a while, the “abundance of caution” thing.
diehard2013 said:
my fear is with any potential irreversibility of the secure startup once initiated. I'd like to be able to fall back to default. IIRC, the LG G5 was one such case. Once encrypted, decryption was a NO.
thanks for your feedback!
Click to expand...
Click to collapse
Your s8 is already encrypted, most phones on stock rom are.
If you format /Data/ in twrp, on the next boot there is a kernel flag that force the phone encryption.
nikexv2 said:
Your s8 is already encrypted, most phones on stock rom are.
If you format /Data/ in twrp, on the next boot there is a kernel flag that force the phone encryption.
Click to expand...
Click to collapse
So the "sec start" option does not encrypt anything or it encrypts encrypted data?
I
diehard2013 said:
So the "sec start" option does not encrypt anything or it encrypts encrypted data?
I
Click to expand...
Click to collapse
The phone is encrypted regardless of the option.
tommyg562000 said:
The phone is encrypted regardless of the option.
Click to expand...
Click to collapse
ok, things are clearer now.
if a phone has “sec startup” enabled and you decide to root it, simply disable the option first and proceeed.
Related
I ask this because the qfuse controversy and having the biometric sensor, maybe rooting this device is not safe as it is in the previous nexus, what do you think?
Quetzalcoalt_Lp said:
I ask this because the qfuse controversy and having the biometric sensor, maybe rooting this device is not safe as it is in the previous nexus, what do you think?
Click to expand...
Click to collapse
I'm rooted, q-fuse is still intact, fingerprint scanner still works, I haven't tried to use android pay yet.
Quetzalcoalt_Lp said:
I ask this because the qfuse controversy and having the biometric sensor, maybe rooting this device is not safe as it is in the previous nexus, what do you think?
Click to expand...
Click to collapse
I'm rooted and have no problems. I've heard Android pay will work on stock rom with systemless root, but have not tested it yet. I get my us bank card soon and will sign up then.
then i guess ill root today, thank you!
Quetzalcoalt_Lp said:
then i guess ill root today, thank you!
Click to expand...
Click to collapse
Just follow heisenbergs guide in the general stickies as some stuff is new on the 6p like the fastboot commands and the updated tools from the sdk. You will also want to have a stock copy of the vendor partition and the ems partition or whatever it's called. It's covered in the guide. Happy Flashing!
http://forum.xda-developers.com/showthread.php?p=62924043
You will not lose Nexus Imprint (fingerprint) functionality by rooting. The Qfuse will not blow when you unlock or root. Android Pay probably won't work if you root, but some people claim it does work. Any modifications to /system will cause it to fail.
fury683 said:
You will not lose Nexus Imprint (fingerprint) functionality by rooting. The Qfuse will not blow when you unlock or root. Android Pay probably won't work if you root, but some people claim it does work. Any modifications to /system will cause it to fail.
Click to expand...
Click to collapse
Nothing breaks after root if you use the new systemless root.
Just one more thing, do you guys know how to remove the splash screen when phone boots once rooted? it says something like "Your device software can't be checked for corruption. Please lock the bootloader."
Quetzalcoalt_Lp said:
Just one more thing, do you guys know how to remove the splash screen when phone boots once rooted? it says something like "Your device software can't be checked for corruption. Please lock the bootloader."
Click to expand...
Click to collapse
I am not 100% sure on this because I asked a while back. But I am fairly certain there is currently no way to remove that splash screen with the warning. If I am mistaken, please let me know as I would also like to remove mine.
Quetzalcoalt_Lp said:
Just one more thing, do you guys know how to remove the splash screen when phone boots once rooted? it says something like "Your device software can't be checked for corruption. Please lock the bootloader."
Click to expand...
Click to collapse
. It's something Google is doing now. It just warns of the system state. Here is the page
https://support.google.com/nexus/answer/6185381?hl=en
thesticks00 said:
I am not 100% sure on this because I asked a while back. But I am fairly certain there is currently no way to remove that splash screen with the warning. If I am mistaken, please let me know as I would also like to remove mine.
Click to expand...
Click to collapse
It must be a way, maybe flashing a modified boot.img or something.
Gizmoe said:
. It's something Google is doing now. It just warns of the system state. Here is the page
https://support.google.com/nexus/answer/6185381?hl=en
Click to expand...
Click to collapse
Yes, it's only a notification, it does nothing, but I would want to remove it since is pretty ugly xd.
Quetzalcoalt_Lp said:
It must be a way, maybe flashing a modified boot.img or something.
Yes, it's only a notification, it does nothing, but I would want to remove it since is pretty ugly xd.
Click to expand...
Click to collapse
It's in the bootloader. Don't mess with the bootloader. Just ignore it for the 5 seconds it shows up during the once or twice a week you reboot.
akellar said:
It's in the bootloader. Don't mess with the bootloader. Just ignore it for the 5 seconds it shows up during the once or twice a week you reboot.
Click to expand...
Click to collapse
Maybe with a custom kernel or something you make the BL think you are not rooted or unlocked.
But yes, I wont touch the BL.
I'm pretty sure that I read somewhere that the fuse is actually blown before it the device is even shipped out...
EDIT: I found what I read...
Quote #1
The QFuse is actually an array of different bits that control several different things on the device. In this case, we're talking about the Qualcomm secure boot fuse, which is actually blown at the factory (hence it always being enabled) to prevent an insecure bootloader from being run. It does not track any modifications to the phone other than that, so whatever you decide to do, the bootloader will always read the same thing. I think people are confusing this with Samsung Knox, which is specifically made for tracking modifications and storing them for warranty purposes.
Click to expand...
Click to collapse
Quote #2
Much of Qualcomm's security architecture is implemented using QFuses, which are software-programmable fuses that allow one-time configuration of device settings and cryptographic materials such as hashes or keys. Because of their physical nature, once a QFuse has been blown, it is impossible to "unblow" it to revert its original value.
If the FORCE_TRUSTED_BOOT QFuse is blown, as is the case on all production Motorola devices, each stage of the boot chain is cryptographically verified to ensure only authorized bootloader stages may be run. In particular, the PBL ("Primary Bootloader"), which resides in mask ROM, verifies the integrity of the SBL1 ("Secondary Bootloader") via a SHA1 hash. Each stage of the boot chain verifies the next stage using RSA signatures, until finally Motorola's APPSBL ("Application Secondary Bootloader"), "MBM", is loaded and run.
Click to expand...
Click to collapse
Quote #3
So it would seem the Qfuse has nothing to do with unlocking the bootloader. It's just a way to set cryptographic keys in the hardware for verifying the authenticity of the bootloader, in a manner that makes it impossible to change the keys. In other words, once the fuse is blown the keys can't phyically be changed or overwritten. Presumably Google has the key and can sign new bootloader images correctly, so that when there is an update to the bootloader it will be verified properly by the chipset.
Click to expand...
Click to collapse
Just close your eye's for a few seconds!
People that ask this question should stick to Crapple...
Sent from my Nexus 6P using Tapatalk
I was poking security options within my phone, and I accidentally locked it with a pattern that I cannot recall.
I tried looking for troubleshooting guides, but unfortunately Marshmallow no longer has a "forgot code?" option. Also, I tried Android Device Manager, but it tells me since my phone already has a lockscreen, I no longer need to add a password (which I intended to do, in order to know said password)
I would greatly appreciate any help, since I really don't want to factory reset, since I got lots of pics I don't want to lose.
xdmatt said:
I was poking security options within my phone, and I accidentally locked it with a pattern that I cannot recall.
I would greatly appreciate any help, since I really don't want to factory reset, since I got lots of pics I don't want to lose.
Click to expand...
Click to collapse
google is your friend http://www.addictivetips.com/android/how-to-bypass-disable-pattern-unlock-on-android-via-adb-commands/
edit: this does not work on marshmallow[tested]
i think this will help you http://forum.xda-developers.com/note-4/orig-development/bypass-lock-screen-pattern-password-pin-t2948336
bablu048 said:
google is your friend http://www.addictivetips.com/android/how-to-bypass-disable-pattern-unlock-on-android-via-adb-commands/
Click to expand...
Click to collapse
hopefully he enabled the usb debugging option
pijes said:
hopefully he enabled the usb debugging option
Click to expand...
Click to collapse
nope, this does not help. Just now i tried this on my device..if the device is locked adb doesn't recognize the device. this method does not work on marshmallow.
i don't know about lollipop. maybe it works.
pijes said:
hopefully he enabled the usb debugging option
Click to expand...
Click to collapse
bablu048 said:
nope, this does not help. Just now i tried this on my device..if the device is locked adb doesn't recognize the device. this method does not work on marshmallow.
i don't know about lollipop. maybe it works.
Click to expand...
Click to collapse
Unfortunately, my phone is stock and non rooted, but luckily I could guess the pattern.
I still would like to know for future reference, since Android Device Manager did a great job at getting my phone's location and making it ring... just not unlocking it!!
xdmatt said:
Unfortunately, my phone is stock and non rooted, but luckily I could guess the pattern.
I still would like to know for future reference, since Android Device Manager did a great job at getting my phone's location and making it ring... just not unlocking it!!
Click to expand...
Click to collapse
you don't need to be rooted to access recovery and install files.
for future reference see the 2nd link i posted. I haven't tried that yet, i'l report when i try.
bablu048 said:
you don't need to be rooted to access recovery and install files.
for future reference see the 2nd link i posted. I haven't tried that yet, i'l report when i try.
Click to expand...
Click to collapse
He wouldn't have been able to use it because you need a custom recovery to flash that file.
Well... I guess you know the system works? Probably not great for there to be an easy or sure-fire way to unlock a phone if you don't know the security details.
If it's just data you need, recovery mode should allow you to copy it off the device via USB (if you didnt encrypt the device). Getting into a phone you really locked yourself out of is probably not possible.
AtomicStryker said:
If it's just data you need, recovery mode should allow you to copy it off the device via USB (if you didnt encrypt the device). Getting into a phone you really locked yourself out of is probably not possible.
Click to expand...
Click to collapse
i want to know how to copy data from the device through recovery. do you know the process or where to find a guide?
edit: thanks for the idea. i hadn't thought that way.
xdmatt said:
Unfortunately, my phone is stock and non rooted, but luckily I could guess the pattern.
I still would like to know for future reference, since Android Device Manager did a great job at getting my phone's location and making it ring... just not unlocking it!!
Click to expand...
Click to collapse
For preventative measures, Tasker is your friend. Have a "Plan B" microSD with a special .txt file on it, and have Tasker detect SD inserted and scan that file. If the file matches, then Tasker should wipe /data/system/gesture.key and password.key, and sqlite3 into settings.db and "update system set value=0 where name='lock_pattern_autolock' " to unlock your device.
In the case of an aftermath, it is now (as of today) possible to recover files/photos from the lockscreen without root, ADB, or custom recovery. Just an internet connection, linked Google account, and access to the notification drawer. I just published my first app, Locked-out Phone Backup, that is similar to the old Screen Lock Bypass Pro for Gingerbread, but instead recovers files instead of disabling the screen lock, so no root is required!
Hope this answers your question!
Well, try some password remover.
I tried going through all the settings and couldn't find anything about encrypting the phone. Does it do this automatically or something?
Yes, the Axon 7 is automaticly encrypted from what i could gather on the forum.
runderekrun said:
I tried going through all the settings and couldn't find anything about encrypting the phone. Does it do this automatically or something?
Click to expand...
Click to collapse
djona12 said:
Yes, the Axon 7 is automaticly encrypted from what i could gather on the forum.
Click to expand...
Click to collapse
Yup, is Automatically encrypted....
That's one of the reasons why a lot of users having issues when they want to go back to UN-ROOT state.
Ok thanks for clarifying guys.
For some reason I thought that encrypting your phone locked it out of TWRP (unless you had a code). It doesn't seem to do this so I guess encrypting is kinda useless as long as I have a custom recovery on my device?
Hello everyone,
I ve been thinking that my rooted phone with TRWP is not really protected. You can easily boot intro recovery without any password and steal/wipe all the data and install new rom. Is there a way to protect the rooted phone somehow? Like setting a password for TRWP. Thanks in advance.
Don't think it matters that much. They still can boot into Download mode and flash a new one.
RDDraco said:
Don't think it matters that much. They still can boot into Download mode and flash a new one.
Click to expand...
Click to collapse
So basicly there is no way to protect S8 from that kind of attack? Because I think you can boot into Download mode even on stock firmware.
OEM Protection in developers settings ? I think we can't do anything if it is enabled
Samsung reactivation lock. Even if you wipe all data/cache and flash a new stock it will still ask for the password that was used last. I know this because Im locked out of my s6 because of it ?
callumbr1 said:
Samsung reactivation lock. Even if you wipe all data/cache and flash a new stock it will still ask for the password that was used last. I know this because Im locked out of my s6 because of it
Click to expand...
Click to collapse
Thank you for the info. So it actually asks for pin or password that was used previously to unlock the phone? Or we need to enable it somewhere in the options?
kazzaqov said:
Thank you for the info. So it actually asks for pin or password that was used previously to unlock the phone? Or we need to enable it somewhere in the options?
Click to expand...
Click to collapse
Yeah enable it in Samsung account. Or use secure start-up. With either of these it will always ask for pin or password even after flashing stock Rom
EDIT: I'm pretty sure Google does the same and asks for previous used account password.
Hi,
I've just set up my Axon7 from scratch, after it returns from service, and set up new unlock pattern. I admit, I must've been drunk or something, because can't remember the pattern itself. Currently I unlock the phone with fingerprint sensor.
Is it possible to change/remove the unlock method without factory reset? As I said, the phone reads my fingerpritnts fine.
Thank's for any advice
1. Boot to TWRP
2. In File Manager go to the /data/system folder. Scroll down and find the two files with the .key extension. Delete both of them (by tapping on the file and then tapping the <Delete> button). Then, delete all the files containing the word locksettings:
gatekeeper.password.key
gatekeeper.pattern.key
locksettings.db
locksettings.db-shm
locksettings.db-wal
3. Reboot system.
kinetiq said:
Hi,
I've just set up my Axon7 from scratch, after it returns from service, and set up new unlock pattern. I admit, I must've been drunk or something, because can't remember the pattern itself. Currently I unlock the phone with fingerprint sensor.
Is it possible to change/remove the unlock method without factory reset? As I said, the phone reads my fingerpritnts fine.
Thank's for any advice
Click to expand...
Click to collapse
Is it possible for you to post in the right section (i.e. questions & answers)?
besides from that, the user above is right, you just have to do that
Thank you very much, for your advice.
Unfortunately I haven't rooted my phone yet, and after lecture of few tutorials I'm slightly intimidated, so...
Is it possible to do something with my problem without rooting, instaling custom recovery etc?
I could even accept factory reset, after all, but it asks for unlock pattern as well...
kinetiq said:
Thank you very much, for your advice.
Unfortunately I haven't rooted my phone yet, and after lecture of few tutorials I'm slightly intimidated, so...
Is it possible to do something with my problem without rooting, instaling custom recovery etc?
I could even accept factory reset, after all, but it asks for unlock pattern as well...
Click to expand...
Click to collapse
No man, without your bootloader unlocked there's not much you can do, unlock bootloader then install twrp and you'll be good to go
I made some digging, and found solution: Power on+vol up allowed factory reset, problem is solved.
Thank you all for your help.
kinetiq said:
Hi,
I've just set up my Axon7 from scratch, after it returns from service, and set up new unlock pattern. I admit, I must've been drunk or something, because can't remember the pattern itself. Currently I unlock the phone with fingerprint sensor.
Is it possible to change/remove the unlock method without factory reset? As I said, the phone reads my fingerpritnts fine.
Thank's for any advice
Click to expand...
Click to collapse
kinetiq said:
I made some digging, and found solution: Power on+vol up allowed factory reset, problem is solved.
Thank you all for your help.
Click to expand...
Click to collapse
Hmm... Well you said "without factory reset" in OP... Else everyone could've told you to do that...
Gachmuret said:
Hmm... Well you said "without factory reset" in OP... Else everyone could've told you to do that...
Click to expand...
Click to collapse
i guess he was still a little drunk?