Samsung knox and root? - Galaxy S 4 Q&A, Help & Troubleshooting

After reading about the new knox security features do you all think it will be harder to obtain root? It sounds like this feature locks the bootloader. Any insight on this?
Sent from my SPH-L900 using xda premium

I am also curious about this..
Sent from my Desire HD using xda premium

musclehead84 said:
After reading about the new knox security features do you all think it will be harder to obtain root? It sounds like this feature locks the bootloader. Any insight on this?
Click to expand...
Click to collapse
Knox is B2B only which means it only applies to devices companies purchase and provide to their employees. And there's a remote companion component necessary for it to be implemented. I'd expect it to be locked down tighter than Fort Knox (get it? ) with little or nothing an end user can do to a Knox device except play with their partition. I know for sure they can't add/modify/delete any apps or settings on the Knox side. It's probably overkill for most of the Fortune 500, and there are other less rigid ways of controlling remote devices, but it will have great appeal for government use and for companies that require security clearances and handle sensitive data.

Exactly! Knox for B2B only.
Sent from my GT-N7100

Samsung trying to snatch the BlackBerry crown and win lots of government contracts I reckon

Thanks for the explanation on it. Just had me kinda worried about that feature.
Sent from my SPH-L900 using xda premium

BarryH_GEG said:
Knox is B2B only which means it only applies to devices companies purchase and provide to their employees. And there's a remote companion component necessary for it to be implemented. I'd expect it to be locked down tighter than Fort Knox (get it? ) with little or nothing an end user can do to a Knox device except play with their partition. I know for sure they can't add/modify/delete any apps or settings on the Knox side. It's probably overkill for most of the Fortune 500, and there are other less rigid ways of controlling remote devices, but it will have great appeal for government use and for companies that require security clearances and handle sensitive data.
Click to expand...
Click to collapse
I don't think so its necessarily B2B My AT&T Galaxy S4 has a Knox apk on it and according to the Knox web page the chain of trust can be changed after a device is bought. So Someone can Buy their own device then place on the business network and due to corporate rules get their device locked down.
Since My Bootloader is locked and Knox can lock the bootloader I can only assume until I know otherwise that AT&T is using the same Knox methods to lock my consumer device.

Samsung has Rollout Firmware Updates to the S4 I9505 where KNOX is fully activated, Bootloader changed and SEAndoird is enforced.
So this is a mess for rooting.
But it seems that chainfire has hacked this again in CF-AutoRoot and SuperSU (1.60)
Regards

Related

[Q] What effect does Knox have for rooting the Galaxy Note 3?

What effect does Knox have for rooting the Galaxy Note 3?
It will permanently disable KNOX.
Is that a bad thing?? I know next to nothing about Knox, but my N3 will be here tomorrow and I'm wanting to root it.
i have similar questions.
So much threads just for questions, #Neo3d how bout trying to ask other questions in one thread instead of making heaps of threads cause to me it seems there just attention threads just to build up replys
Sent from my SM-N9005 using XDA Premium 4 mobile app
Knox is a secure container that is supposed to be hack proof... It is generally NOT used by the stand alone consumer and is targeted more at businesses... Remember, if you use it and something happens to your phone you are pretty much NOT gonna be able to retrieve anythng in the Knox container.
However, once you root your phone, Knox can't be run as there is a security hole if you give root(system) privileges to any non Samsung approved app...
Unfortunately Samsung forced this POS down our throat and are using it as a way to deny warranty claims - Knox warranty void...
It also tries to police what can or can't be used, there were problems with messaging apps at the beginning because of application rights.
These seem to be getting fixed but it another step on the road to us being dictated how we use our devices and not allowing us the freedom to use them as we want...

Paying to repair a knox 0x1 device

Since it is pretty clear that Samsung is not going to honor warranty service on knox tripped devices, I'm wondering of they will still fix them for a fee.
Why am I wondering? I'm curious if they can reset knox at the factory. If so, it means we can reset knox ourselves. I'm an electrical engineer and am looking into a hardware modification that would render knox useless.
In non technical terms, it would be similar to bypassing a blown fuse in your car with a piece of metal in place of the burnt fuse.
It is extremely possible, depending on the efuse they use. It's hard for me to imagine they would install the efuse in such a way that even they would be unable to reverse it.
Efuses are not new technology, and their main purpose is to act in a very simiar way to standard circuit breaker. And just like a tripped breaker, they can be reset. Its simply a matter of what type they used, and how it was implemented
Sent from my SM-P600 using Tapatalk
Serinety said:
Since it is pretty clear that Samsung is not going to honor warranty service on knox tripped devices, I'm wondering of they will still fix them for a fee.
Why am I wondering? I'm curious if they can reset knox at the factory. If so, it means we can reset knox ourselves. I'm an electrical engineer and am looking into a hardware modification that would render knox useless.
In non technical terms, it would be similar to bypassing a blown fuse in your car with a piece of metal in place of the burnt fuse.
It is extremely possible, depending on the efuse they use. It's hard for me to imagine they would install the efuse in such a way that even they would be unable to reverse it.
Efuses are not new technology, and their main purpose is to act in a very simiar way to standard circuit breaker. And just like a tripped breaker, they can be reset. Its simply a matter of what type they used, and how it was implemented
Yea its possible with a unlocked boot loader cause removing knox itself from the system is not hard but that counter is in the bootloader.
Click to expand...
Click to collapse
jparasita said:
Yea its possible with a unlocked boot loader cause removing knox itself from the system is not hard but that counter is in the bootloader.
Click to expand...
Click to collapse
If it truly is an efuse, they are physically blown transistors due to intentional electromigration , inhibiting electron flow through the channel, basically, preventing the gate from allowing electron flow through the channel.
however, if the efuse is an external chip (most of them are, it would be added to the motherboard, just like ram, wifi chip, wacom digitizer.. etc) then that chip will either have a reset (by applying voltage to the latch) or can be bypassed physically (pulled up to Vcc).
In this case, an unlocked boot loader would not be able to bypass the blown fuse link. It may, however, be able to forgo checking the status of the efuse, but I really don't know know how its all assembled, since getting a datasheet on the board from samsung would be impossible. The only hope I have as an engineer is to examine the board and attempt to find the location of the fuse.
Here is some efuse Education:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
You may want to read this
http://forum.xda-developers.com/showthread.php?t=2561658
So it seems as if there is some misinformation running around on all ends. Seems logical to me to go with the Samsung knox website, where they say that hardware warranty is separate from knox warranty.
I'm going to email samsung and try to get a straight answer. I'll setup a claim for my device. I'll say it has a bad home button or something silly, then mention the knox bit is tripped. The 2 are totally unrelated, so seems like a good test.
Sent from my SM-P600 using Tapatalk
Serinety said:
So it seems as if there is some misinformation running around on all ends. Seems logical to me to go with the Samsung knox website, where they say that hardware warranty is separate from knox warranty.
I'm going to email samsung and try to get a straight answer. I'll setup a claim for my device. I'll say it has a bad home button or something silly, then mention the knox bit is tripped. The 2 are totally unrelated, so seems like a good test.
Sent from my SM-P600 using Tapatalk
Click to expand...
Click to collapse
Should be intesting to follow. Looking forward to see what happens.
An efuse is not like a standard circuit breaker at all. It is like a regular fuse. Circuit breakers are designed to be reset. They are not permanently physically modified in any way when tripped. Efuses and fuses, on the other hand, are physically burned when they are tripped, and cannot be reverted.
As far as being on a separate chip: I highly doubt this to be the case. First, to minimize power consumption no one wants to drive an extra package. Second, virtually all SoC designs incorporate an efuse bank somewhere on their chip. Though I could be wrong on this point, as there could be incentive to include them off-SoC if device remanufacturing (read: refurbishing) is a significant source of revenue for the OEM.
Source: I am a SoC design engineer for an industry outside the mobile personal electronics sector, and they are pretty much commonplace in every SoC made in at least the last 5+ years.
Sent from my Nexus 7 using XDA Premium HD app
flinttownbrown said:
An efuse is not like a standard circuit breaker at all. It is like a regular fuse. Circuit breakers are designed to be reset. They are not permanently physically modified in any way when tripped. Efuses and fuses, on the other hand, are physically burned when they are tripped, and cannot be reverted.
As far as being on a separate chip: I highly doubt this to be the case. First, to minimize power consumption no one wants to drive an extra package. Second, virtually all SoC designs incorporate an efuse bank somewhere on their chip. Though I could be wrong on this point, as there could be incentive to include them off-SoC if device remanufacturing (read: refurbishing) is a significant source of revenue for the OEM.
Source: I am a SoC design engineer for an industry outside the mobile personal electronics sector, and they are pretty much commonplace in every SoC made in at least the last 5+ years.
Sent from my Nexus 7 using XDA Premium HD app
Click to expand...
Click to collapse
Your right, but my assumption is that they are not using SoC efuse's. If this were the case, they would be forced to toss boards with blown fuses. Since their goal with the efuse is not to prevent damage, but to indicate intrusuon, a way to "reset" the fuse would seem preferable.
We use several efuse's that are circuit breaker style, and not fuse.
http://www.onsemi.com/PowerSolutions/content.do?id=17031
Just one several. These can be added to any design for protection, but could also be used in this application. Once tripped they would stay tripped until reset. If the reset pin is left unused, then it can only be reset exrernally, which I suspect is the case.
Sent from my SM-P600 using Tapatalk
I actually contacted Samsung Canada to know if tripping Knox voids hardware warranty. This is the response I got:
Dear XXXXXX,
Thank you for contacting Samsung Customer Care.
After going through the email, we understand that you want to know if rooting voids the warranty.
I sincerely apologize for the inconvenience.
I need to inform you, rooting of device will void standard manufacture's warranty.
Click on the below weblink for details about Samsung products warranty info :
http://bit.ly/1d1MfW4
For details about Knox, please contact our dedicated support for Knox at +1 855 567 5669 for further assistance.
We hope we’ve answered your inquiry. Please let us know if there are any additional questions or concerns.
You can also visit our How To & FAQ >section on the website for more product information.
We deeply value your loyalty to Samsung and are committed to provide you with the highest level of customer
service. If for any reason theinformation we provided did not resolve your issue, we have various
contact channels that are available to assist in resolving your concern
For immediate assistance with a live agent, you can chat with us here
For support by phone, you can reach us at 1-800-SAMSUNG(726-7864)
Samsung’s Social Media Team is available to assist with providing up-to-date information or answering questions.
Visit us on Facebook
Visit us on Twitter
Thank you for being a Samsung Customer!
Kind Regards,
Sandy
Samsung Customer Care
http://www.samsung.com/ca
Our goal is to provide our customers with the best customer service possible. Please complete the following customer service survey based on customer experience with your agent.
Your feedback will enable us to see how we're doing overall and find out how we can improve.
Click to expand...
Click to collapse
Doesn't really seem like they understood the question, but whatever. Guess I'll avoid rooting until someone figures out a 0x0 method, if at all. Its weird because people in the S4 forum asked the same thing about Knox and warranty and Samsung's response was that the phone should still retain hardware warranty.
i just wanted to note that samsung will still cover hardware defects if you use knox.
smac7 said:
i just wanted to note that samsung will still cover hardware defects if you use knox.
Click to expand...
Click to collapse
Source of your sentence?
It depends on which defects they are... and the proof that the issue is related to factory defects is on your charge...
Inviato dal mio GT-N5100 con Tapatalk 4
francanna said:
Source of your sentence?
It depends on which defects they are... and the proof that the issue is related to factory defects is on your charge...
Inviato dal mio GT-N5100 con Tapatalk 4
Click to expand...
Click to collapse
transcript from my conversation.
General Info
Chat start time Oct 9, 2013 6:59:14 PM EST
Chat end time Oct 9, 2013 7:10:06 PM EST
Duration (actual chatting time) 00:10:51
Operator Vivian C
Chat Transcript
info: Please wait for a Samsung Agent to respond.
info: All Samsung Agents are currently assisting others. Thanks for your patience. A Samsung Agent will be with you shortly.
info: You are now chatting with 'Vivian C'. There will be a brief survey at the end of our chat to share feedback on my performance today.
info: Your Issue ID for this chat is LTK111790932073X
Vivian C: Hi, thank you for reaching out to Samsung technical support. How may I assist you?
shane: Hi.
shane: i have a question in regards to warrenty on the new galaxy note 10.1
Vivian C: Hi, please go ahead with the query?
shane: I understand that rooting will void the warranty for software issues and anything related to rooting, but does it also void it for issues such as a broken power button or a physical problem with the screen.
shane: Basically, are hardware issues unrelated to root still covered?
Vivian C: Yes, they are covered but no physical damages to the unit.
Vivian C: I can understand how important this is to you.
shane: so you mean as long as it doesn't appear to be the consumers fault (drops for example) then its fine?
Vivian C: I could certainly relate to what you are going through as I am a consumer myself.
Vivian C: The hardware issues are covered if it is under warranty.
shane: ok thank you for the info. that's all i wanted to know before i went through with my purchase
Vivian C: I appreciate the patience you displayed while we worked together on this issue.
Vivian C: Thank you for chatting with us. If you have a minute, please click on the blue “X close” button to receive the transcript of your chat and fill out a brief survey to help us serve you better.
Follow Samsung Service on Facebook, Twitter and YouTube.
smac7 said:
transcript from my conversation.
General Info
Chat start time Oct 9, 2013 6:59:14 PM EST
Chat end time Oct 9, 2013 7:10:06 PM EST
Duration (actual chatting time) 00:10:51
Operator Vivian C
Chat Transcript
info: Please wait for a Samsung Agent to respond.
info: All Samsung Agents are currently assisting others. Thanks for your patience. A Samsung Agent will be with you shortly.
info: You are now chatting with 'Vivian C'. There will be a brief survey at the end of our chat to share feedback on my performance today.
info: Your Issue ID for this chat is LTK111790932073X
Vivian C: Hi, thank you for reaching out to Samsung technical support. How may I assist you?
shane: Hi.
shane: i have a question in regards to warrenty on the new galaxy note 10.1
Vivian C: Hi, please go ahead with the query?
shane: I understand that rooting will void the warranty for software issues and anything related to rooting, but does it also void it for issues such as a broken power button or a physical problem with the screen.
shane: Basically, are hardware issues unrelated to root still covered?
Vivian C: Yes, they are covered but no physical damages to the unit.
Vivian C: I can understand how important this is to you.
shane: so you mean as long as it doesn't appear to be the consumers fault (drops for example) then its fine?
Vivian C: I could certainly relate to what you are going through as I am a consumer myself.
Vivian C: The hardware issues are covered if it is under warranty.
shane: ok thank you for the info. that's all i wanted to know before i went through with my purchase
Vivian C: I appreciate the patience you displayed while we worked together on this issue.
Vivian C: Thank you for chatting with us. If you have a minute, please click on the blue “X close” button to receive the transcript of your chat and fill out a brief survey to help us serve you better.
Follow Samsung Service on Facebook, Twitter and YouTube.
Click to expand...
Click to collapse
That's all and nothing. Samsung VP told in knox website that warranty policies may be different country by country. In general it is true what I said before. You are supposed to prove that the defect is non software related. E.G. zif your screen stops working or you experience motherboard issues, Samsung may say it depends on overclock or other root related stuff.
So what remains you is just power button failure...
Inviato dal mio GT-N5100 con Tapatalk 4
^ Nice, I should follow up with Samsung Canada through live chat because at the very least this gives me a bit more confidence to root without having any hardware warranty concerns. However I wonder if they can still refuse warranty "just because" even though it may have been confirmed by their online agents.
I am left wondering how the Magnuson-Moss Warranty Act of 1975, and all the case law that led to it's enactment, would relate to Samsung's apparent unwillingness to honor a warranty claim related to hardware issues on a rooted (modified) device when Samsung is unable to show that the rooting of the device was the direct cause of the hardware failure.
I think it is time that a group of consumers tripped the Knox counter on their devices by rooting, and sent them in to Samsung for a hardware related repair such as a bad home button or a screen failure and then see if Samsung will honor the warranty or deny the claim solely based on said tripped Knox counter.
If Samsung denies the claim without showing just cause, the group could then show harm and either file a complaint with the Federal Trade Commission (here in the US) or they could file a class action law suit against Samsung if they could find an attorney(s) stupid enough to do it.
There is nothing in the Samsung Terms of Service that precludes class actions as AT&T does.
JACK4HIRE said:
I am left wondering how the Magnuson-Moss Warranty Act of 1975, and all the case law that led to it's enactment, would relate to Samsung's apparent unwillingness to honor a warranty claim related to hardware issues on a rooted (modified) device when Samsung is unable to show that the rooting of the device was the direct cause of the hardware failure.
I think it is time that a group of consumers tripped the Knox counter on their devices by rooting, and sent them in to Samsung for a hardware related repair such as a bad home button or a screen failure and then see if Samsung will honor the warranty or deny the claim solely based on said tripped Knox counter.
If Samsung denies the claim without showing just cause, the group could then show harm and either file a complaint with the Federal Trade Commission (here in the US) or they could file a class action law suit against Samsung if they could find an attorney(s) stupid enough to do it.
There is nothing in the Samsung Terms of Service that precludes class actions as AT&T does.
Click to expand...
Click to collapse
People, it will be exactely as it has been so far: do you remember that Samsung has put a modified device counter in its device for years? What happens to you warranty today if you root a Galaxy S2 and do not use CF Triangle Away?
Some hardware issues have been passed under warranty, some others not.
Some display failures may depend on kernel settings; motherboard issues may depend on voltage and frequencies that are kernel related. Be sure this will not covered.
Hardware buttons are not sw related and will be repaired.
But who wants to keep a warranty limited to 3 hw buttons?
francanna said:
People, it will be exactely as it has been so far: do you remember that Samsung has put a modified device counter in its device for years? What happens to you warranty today if you root a Galaxy S2 and do not use CF Triangle Away?
Some hardware issues have been passed under warranty, some others not.
Some display failures may depend on kernel settings; motherboard issues may depend on voltage and frequencies that are kernel related. Be sure this will not covered.
Hardware buttons are not sw related and will be repaired.
But who wants to keep a warranty limited to 3 hw buttons?
Click to expand...
Click to collapse
Given that we do not have custom kernels, all root has given us is apps like titanium, and other root style apps. We can't modify any voltage settings, or anything that could damage the device. Need a kernel for that.
The only thing you could do right now is flash bad firmware, and brick. But that's possible with or with out root. Any time you flash firmware there is a possibility of bricking. Seems illogical that just because I can use titanium backup and xposed, means a failed update from mk1 to ml1 would be the fault of root. They are not even related. That's like saying installing a new stereo in my car caused the engine to blow a headgasket.
Remember, root only affects the running and booted operating system. Once you are in recovery, or download mode.. root has nothing to do with it. just like in windows. When you install a windows program, if you shutdown and boot to bios.. that program doesn't exist as far as the computer is concerned. Only after it has booted the main hard drive and read the proper master boot record, and loads windows does that program exist.
Sent from my SM-P600 using Tapatalk
Serinety said:
Given that we do not have custom kernels, all root has given us is apps like titanium, and other root style apps. We can't modify any voltage settings, or anything that could damage the device. Need a kernel for that.
The only thing you could do right now is flash bad firmware, and brick. But that's possible with or with out root. Any time you flash firmware there is a possibility of bricking. Seems illogical that just because I can use titanium backup and xposed, means a failed update from mk1 to ml1 would be the fault of root. They are not even related. That's like saying installing a new stereo in my car caused the engine to blow a headgasket.
Remember, root only affects the running and booted operating system. Once you are in recovery, or download mode.. root has nothing to do with it. just like in windows. When you install a windows program, if you shutdown and boot to bios.. that program doesn't exist as far as the computer is concerned. Only after it has booted the main hard drive and read the proper master boot record, and loads windows does that program exist.
Sent from my SM-P600 using Tapatalk
Click to expand...
Click to collapse
You are right, BUT...
Today we have no custom kernel on Note 2014, but as soon as Samsung releases the source code we will have. For Note 3 custom kernels do exist.
So, generally speaking, I may root the phone, flash a custom kernel and, in case of disaster, restore stock kernel.
That is why even a simple root is considered non samsung system modification... and Knox activates the efuse in case of any non samsung system modification because it needs the system to be perfectly integer and Samsung certified for business reasons (BYOD strategies).
Finally: no root means no kernel no rom... no problem for Samsung.
I am not justifying Samsung. Only trying to explain their logic.
Inviato dal mio GT-N7100 utilizzando Tapatalk
francanna said:
You are right, BUT...
Today we have no custom kernel on Note 2014, but as soon as Samsung releases the source code we will have. For Note 3 custom kernels do exist.
So, generally speaking, I may root the phone, flash a custom kernel and, in case of disaster, restore stock kernel.
That is why even a simple root is considered non samsung system modification... and Knox activates the efuse in case of any non samsung system modification because it needs the system to be perfectly integer and Samsung certified for business reasons (BYOD strategies).
Finally: no root means no kernel no rom... no problem for Samsung.
I am not justifying Samsung. Only trying to explain their logic.
Inviato dal mio GT-N7100 utilizzando Tapatalk
Click to expand...
Click to collapse
True, although they should make a business version and a consumer version. But......like THAT would ever happen lol. Seems silly to force business solutions onto a consumer, non business customer experience. I assume samsung is going to be pushing knox into all their new devices.. which kinda blows the whole "for business" slogan of knox. I have to think , not many samsung smartphone/tablets are used in a Purley business application.
Ahh...such is life. If they can make it, we can break it....
Sent from my SM-P600 using Tapatalk
Serinety said:
True, although they should make a business version and a consumer version. But......like THAT would ever happen lol. Seems silly to force business solutions onto a consumer, non business customer experience. I assume samsung is going to be pushing knox into all their new devices.. which kinda blows the whole "for business" slogan of knox. I have to think , not many samsung smartphone/tablets are used in a Purley business application.
Ahh...such is life. If they can make it, we can break it....
Sent from my SM-P600 using Tapatalk
Click to expand...
Click to collapse
As you know Blackberry is almost out of the market and Windows Phone has not such a great appeal. That is a huge oppotunity for Samsung, but they have to face Android bad reputation as an "unsecure" system.
That is the main reason for Knox.
"Security" and "data integrity" are marketing messages they decided to spend also in consumer market... although we know that most of people would not need neither use Knox.
Moreover Samsung well knows that modders are only a very small part of the consumer universe. Although Samsung NEEDS modder's community.
My note: IMHO Android security problems are NOT directly related to rooting... on the contrary, rooting (URDLV, for example) would use system exploits... but it is true that having a rooted device increases the possibilities of possible security issues for un-aware people.
People still think that rooting is required for having "cracked applications" and things link that.

Samsung throwing the towel on knox

According to the article it appears samsung is throwing the towel on Knox. It does make sense given Google's direction and lack of adoption.
http://www.forbes.com/sites/bobegan...ixs-knox-the-android-security-saga-continues/
pitchdarkice said:
According to the article it appears samsung is throwing the towel on Knox. It does make sense given Google's direction and lack of adoption.
http://www.forbes.com/sites/bobegan...ixs-knox-the-android-security-saga-continues/
Click to expand...
Click to collapse
Getting tech news from Fortune is like getting sports news from Better Homes & Gardens. Samsung and Google's cross-licensing deal probably plays in to the following. Just like the death of Samsung Hub and the neutering of M-UX.
Pichai (Google's Head of Android Development) specifically noted that the future Android 5.0's security layer involves Samsung's "contribution" of Knox, a feature that company unveiled last spring as part of its "SAFE" (Samsung for Enterprise) initiative.
Knox principally erects a "container" or sandbox around corporate apps and data to prevent any unauthorized mingling with a users' private, unsecured email, apps and other personal data.​http://appleinsider.com/articles/14...erprise-with-android-l-featuring-samsung-knox
BarryH_GEG said:
Getting tech news from Fortune is like getting sports news from Better Homes & Gardens. Samsung and Google's cross-licensing deal probably plays in to the following. Just like the death of Samsung Hub and the neutering of M-UX.
Pichai (Google's Head of Android Development) specifically noted that the future Android 5.0's security layer involves Samsung's "contribution" of Knox, a feature that company unveiled last spring as part of its "SAFE" (Samsung for Enterprise) initiative.
Knox principally erects a "container" or sandbox around corporate apps and data to prevent any unauthorized mingling with a users' private, unsecured email, apps and other personal data.​http://appleinsider.com/articles/14...erprise-with-android-l-featuring-samsung-knox
Click to expand...
Click to collapse
Based on the link you provided, it looks like the KNOX-like security feature will come baked in Android OS? That sucks if it is true.. harder for us to root without tripping something else that warrants (no pun intended) manufacturer to deny warranty work.
This will be good, if Google makes some "rules" for this security feature.
For example if KNOX or "Googlebit" is triggered it could be reset if you are back to locked bootloader and doing a factory reset. That way you can tell that your device is secure again.
valexi said:
This will be good, if Google makes some "rules" for this security feature.
For example if KNOX or "Googlebit" is triggered it could be reset if you are back to locked bootloader and doing a factory reset. That way you can tell that your device is secure again.
Click to expand...
Click to collapse
I think you are right. Having the Knox container and security will probably be useful in the future given the rate and sophistication of hacking nowadays.
Knox reset
I feel I should be able to restore stock firmware to subsequently reset Knox to then do a hardware fault warranty claim. Whilst I've taken the risk triggering Knox when installing Cyanogenmod, the tablet had usability problems on stock, which is why I did this in the first place...
ie: On Cyanogenmod my WiFi is stable, video plays smoothly, no weird jitter in Google Chrome address bar and I have an Exchange email client (KitKat) which doesn't hide some of my folders.

[Q] What are the repercussions of having KNOX tripped?

What does it do, other than void warranty?
Knox has secure containers where it keeps your private data separate than corporate. That's useful if you are in BYOD scheme. Once you trip Knox you can not use its features. More info is available on Samsung Knox mini site. I'd suggest you take a look and see if you will need any of the offered features or not.
Sent from my Nexus 10 using Tapatalk
Thanks. I don't think I need any of those features. Personal device. Uni student.

mobile iron on a rooted oneplus 6t

So guys,my company is implementing mobileiron on our company devices giving us the possibility to use my personal devices as well.
I have a j6 samsung device from the company and mine op 6t but which is rooted.
Could i install mobile iron in a rooted devices knowing that my company has a well established security and restrictions certificates etc (i dont know if i'm saying all this right) lol
Can't say for sure. But usually companies that use those types of security, you cannot be rooted as it technically opens ups the phone, making it less secure in their eyes. Not speaking from experience, just from what I've seen of say Blackberry Android phones. Known for security and are incredibly locked down and still have never been rooted.
If I am erroneous in some of thinking on this subject, it's again because I'm only basing it off what I've seen elsewhere
Sent from my ONEPLUS A6013 using XDA-Developers Legacy app
okbakaka said:
So guys,my company is implementing mobileiron on our company devices giving us the possibility to use my personal devices as well.
I have a j6 samsung device from the company and mine op 6t but which is rooted.
Could i install mobile iron in a rooted devices knowing that my company has a well established security and restrictions certificates etc (i dont know if i'm saying all this right) lol
Click to expand...
Click to collapse
I had mobile iron on my 6T with unlocked bootloader and root. It did work with limitations. It will show as a red light and that you do not meet security criteria, but you be able to use say company wifi, but not email. You need to talk to your IT department to see if they can assist. I re locked and un rooted myself recently as the benefits of root are not as great as they used to be.
Keep in mind that if you try to hide root/unlock from mobile iron you could be fired for it. Companies take security seriously in this day and age. Also the company apps are basically granting an administrator access level to your company so they can track your phone, know anything about any use of it, and wipe it at their pleasure. No way I would let a company get a toehold on my phone.
Only thing I can think of would be to try to hide root via Magisk. But yeah, I wouldn't screw around with security on a work device. My company would fire you immediately, not sure about yours.
My company would fire me if they know im trying to install mobile iron on rooted devices, lol.
Finally i used msm tool to back to stock and locked bootloader, i thought twice about root advantages and figured out that there is no great deals with root.
Many thanks for replies and suggestions

Categories

Resources