[Q] Unlocked sim. Is tunring Perso SHA256 OFF a security risk? - AT&T, Rogers, Bell, Telus Samsung Galaxy S III

I recently read a thread about unlocking your phone for any sim for free, and it seems great!
Just wondering if turning the SHA256 off is a bad idea for security reasons, since doesnt that encrypt your passwords?
Im not fully informed about all of this, just know some stuff about the SHA256 one way hashing to encrypt passwords
Id love to unlock my phone for free, but wondering if there is a risk
Any info would be great.
Cheers

Subscribed!
I've been asking myself the same question ever since I did unlock my phone using that same method.
The "how to" doesn't say to re-enable SHA256, so I didn't do it.
Should we?

HiKsFiles said:
Subscribed!
I've been asking myself the same question ever since I did unlock my phone using that same method.
The "how to" doesn't say to re-enable SHA256, so I didn't do it.
Should we?
Click to expand...
Click to collapse
I think if we re-enable it, the whole process will be defunct. But I dont know
I just switched carriers and love that I can unlock for free, but if there is a major security risk. Then whats the cost?
I'm going to unlock anyhow haha .... but I won't be installing any 3rd party apps until I know for sure

Update
So I did it. Followed instructions and turned off SHA256, and then inserted a sim from different carrier. It worked, but only sort of. I kept getting "Emergency Calls Only" Then it would switch back to the carrier and everything would work, then back to not working
I went in to the settings again and turned SHA256 back 'ON'
Did a full factory reset of the device. When it booted back up and I set up all my accounts again, the phone works perfectly. Connects flawlessly to the new carrier, AND, this is the weird part, it says my SHA256 is still turned 'ON'
Straaange

ok, but why did you factory reset your phone for ?

HiKsFiles said:
ok, but why did you factory reset your phone for ?
Click to expand...
Click to collapse
Because I panicked haha. The new carrier was working, then not working, then working then not. So I tried to reset all the settings, especially the SHA256, thinking a factory reset would do all that, then try it all again. And for some reason after I set all my accounts back up after the restore, the new carrier worked.

If you ever decide to want to revert this changes read this post:
http://forum.xda-developers.com/showpost.php?p=36819261&postcount=4

so i did this and now note had circle bar , cannot get any signal is not asking me for ecode wont work for att my note is i317 anyone know what i neeed to do

For me, turning SHA256 OFF didn't give me the unlock option. But I had seen a Youtube tutorial where they hit SHA256 ON instead of off, and they got the option. So, OFF (then wait 30 seconds, then go back) didn't work for me, I hit SHA256 ON (waited, back) & got the NV INITIALIZ option. My SGS3 is currently working on a T-Mobile MVNO. Never even inserted the AT&T SIM they gave me.

Is it safe or not
Hello
I would like to unlock my Samsung Galaxy S3 and I saw many articles which include a "Perso SHA256 Off".
Does it remove password encryption or does it have any other consequences?

Related

[Q] Phone not activated after activating

Hi! I just rooted and installed CM7 (stable) onto the Incredible. I tried activating the phone via the onscreen activate button and also by dialing #228, but after it says its been "activated" and to wait for at least 15 minutes to go into effect, it still isn't activated. then when i try to use the phone it tells me something BS about connecting to an operator to make a collect call.
i THINK i need to manually program and activate the phone, but i'm not getting an clear instructions on how to do it properly. can anyone here help me with this please? thanks for your time. cheers...
I would go back to the stock Rom to activate.
Sent from my ADR6300 using XDA App
nick2k said:
Hi! I just rooted and installed CM7 (stable) onto the Incredible. I tried activating the phone via the onscreen activate button and also by dialing #228, but after it says its been "activated" and to wait for at least 15 minutes to go into effect, it still isn't activated. then when i try to use the phone it tells me something BS about connecting to an operator to make a collect call.
i THINK i need to manually program and activate the phone, but i'm not getting an clear instructions on how to do it properly. can anyone here help me with this please? thanks for your time. cheers...
Click to expand...
Click to collapse
Reboot the phone and try again. Press *228 on the dial pad, then option 1 to reprogram and enable 3G. Although it says it takes 15 minutes, it should work instantaneously. At least, this method worked for me. Good luck.
Certain that you are entering the right credentials for the google account tied to the device?
Sent from my ADR6300 using XDA Premium App
ithrewitontheground said:
I would go back to the stock Rom to activate.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
if i go back to the stock rom and activate it (assuming it worked), what happens when i flash CM7 back onto the phone? does it still retain its activation? or will the "activated status" go away because i wiped the data/dalvik/cache?
Activation shouldn't go away unless you deactivate the phone through verizon. I've flashed different ROMs and I don't have to reactivate my phone.
cool. i'll figure out how to revert back to stock tonight. i hope there's a "how to". thanks.
Download this:
http://dougpiston.com/files/RUU/bui...and-2.15.00.07.28-hboot-0.92.0000_PB31IMG.zip
Rename it so it's just "PB31IMG.zip" (make sure your file extensions are un-hidden, so you don't inadvertently name it to "PB31IMG.zip.zip"), and make sure your SD card is FAT32.
Now boot into HBoot, and it should detect the file automatically after a few seconds and ask if you would like to apply the update. Press Vol-Up for Yes. Let it flash.
awesome. thanks! i'll give it shot tonight when i leave work.
still no dice
well... tonight i installed the stock image. i'm still getting the "please hold while we transfer your call to an external operator" after activating (whether it be via online or *228). i noticed that there wasn't even an option to activate via on-screen after installing the stock software, with the CM7 ROM it would show an activate button after rebooting.
a few minutes ago i just reflashed S-ON and reflashed the stock image. it's still doing the same thing. something is up with the phone i guess. beyond my know-how and capabilities. the main reason i put S-ON back is so the phone can be sent back to Verizon. i'm thinking its gotta be a hardware issue if i've done everything you guys have suggested.
thanks anyways, guys. its not my phone, but a friend that i was trying to do this for. makes me glad i'm with another carrier where instead of activating, i just need my SIM card. hopefully i'll have better luck with the replacement they send.
Has he talked to Verizon about the problem? A similar thing happened to me with a phone that's ESN wasn't clear (ebay - ended up getting refunded). The phone wasn't reported lost/stolen or anything?
the hasn't been reported lost/stolen. and the phone has been with the original owner.

T999 power button and data speed

Hey all so I picked up a T-Mobile T999 the other day phone seems good. But she's got a couple issues.
Issue 1 edge only data, checked the about and imei seems intact, phone is rooted/midified and previous owner claims ignorance.
Issue 2 power button. Seems to be software related, only the first time after booting/unlocking phone does the power button read a keypress, it oddly enough goes straight to shutdown menu, not screen off.
Appears to be on a stock rom. Just rooted at this time. Any idea's out there? Obviously restoring my original NV data won't work in this situation as the previous owner is the one who modified this device and claims complete ignorance.
boystuff said:
Hey all so I picked up a T-Mobile T999 the other day phone seems good. But she's got a couple issues.
Issue 1 edge only data, checked the about and imei seems intact, phone is rooted/midified and previous owner claims ignorance.
Issue 2 power button. Seems to be software related, only the first time after booting/unlocking phone does the power button read a keypress, it oddly enough goes straight to shutdown menu, not screen off.
Appears to be on a stock rom. Just rooted at this time. Any idea's out there? Obviously restoring my original NV data won't work in this situation as the previous owner is the one who modified this device and claims complete ignorance.
Click to expand...
Click to collapse
The best place to start would be to Odin flash the firmware. If you want to remain rooted, use the root66 version. Both can be found in my firmware thread linked in my sig. This way at least you know it is FULL stock with no unknown mods or changes.
boystuff said:
Issue 1 edge only data, checked the about and imei seems intact, phone is rooted/midified and previous owner claims ignorance.
Issue 2 power button. Seems to be software related, only the first time after booting/unlocking phone does the power button read a keypress, it oddly enough goes straight to shutdown menu, not screen off.
Click to expand...
Click to collapse
1. - Can only figure out after your Rom issues are over. Follow Doc's advice.
2. Is your power button stuck or just plain bad ? You may have to take it to a T-Mo shop for repair.
Perseus71 said:
1. - Can only figure out after your Rom issues are over. Follow Doc's advice.
2. Is your power button stuck or just plain bad ? You may have to take it to a T-Mo shop for repair.
Click to expand...
Click to collapse
I'm gonna go out on a limb here and assume hardware wise the power button is fine, judging by it's behavior I'm going to make the hypothesis that it is software related as it only registers key presses the first time after unlocking, and only goes to the power off menu. It boots the phone quickly without issues.
If by perchance the previous owner messed with the dialer code functions, will a stock odin flash restore those codes to factory spec?
boystuff said:
I'm gonna go out on a limb here and assume hardware wise the power button is fine, judging by it's behavior I'm going to make the hypothesis that it is software related as it only registers key presses the first time after unlocking, and only goes to the power off menu. It boots the phone quickly without issues.
If by perchance the previous owner messed with the dialer code functions, will a stock odin flash restore those codes to factory spec?
Click to expand...
Click to collapse
Yes Roms and kernels can potentially re-map the buttons. A re-flashing of Stock may or may not wipe Dialer code Changes. Especially those done in the NV domain.
Perseus71 said:
Yes Roms and kernels can potentially re-map the buttons. A re-flashing of Stock may or may not wipe Dialer code Changes. Especially those done in the NV domain.
Click to expand...
Click to collapse
ok odined back to stock UVDMD5 doesn't seem to have accomplished anything. oddly enough it didn't even wipe the phone.
so whats the next step in my troubleshooting and repair lol
boystuff said:
ok odined back to stock UVDMD5 doesn't seem to have accomplished anything. oddly enough it didn't even wipe the phone.
so whats the next step in my troubleshooting and repair lol
Click to expand...
Click to collapse
Next Step, check your Access Point Network choices. Those typically are under Settings > More. (I forgot where they are on Touchwiz. ) Your APN should be set to FAST.TMOBILE.COM. If it is not set to that one, you need to. Also while there, check on Network Mode as well. That should cover LTE and WCDMA.
Perseus71 said:
Next Step, check your Access Point Network choices. Those typically are under Settings > More. (I forgot where they are on Touchwiz. ) Your APN should be set to FAST.TMOBILE.COM. If it is not set to that one, you need to. Also while there, check on Network Mode as well. That should cover LTE and WCDMA.
Click to expand...
Click to collapse
T999 didn't have lte lol it's set to auto gsm + wcdma
boystuff said:
ok odined back to stock UVDMD5 doesn't seem to have accomplished anything. oddly enough it didn't even wipe the phone.
so whats the next step in my troubleshooting and repair lol
Click to expand...
Click to collapse
Odin doesn't wipe data. If you're still having problems, boot recovery and factory reset. Wipes all user data. Including internal sd.
Sent from my SGH-T999N using Tapatalk
DocHoliday77 said:
Odin doesn't wipe data. If you're still having problems, boot recovery and factory reset. Wipes all user data. Including internal sd.
Sent from my SGH-T999N using Tapatalk
Click to expand...
Click to collapse
still no 3/4g ok so how do I reset NV parameters and fix the imei if it was at one point corrupted and not restored properly?
Is it currently zero? If not, does the imei in Settings match the one under the battery?
Have you checked online or called T-Mobile to see if it's been blacklisted?
Sent from my SGH-T999N using Tapatalk
DocHoliday77 said:
Is it currently zero? If not, does the imei in Settings match the one under the battery?
Have you checked online or called T-Mobile to see if it's been blacklisted?
Sent from my SGH-T999N using Tapatalk
Click to expand...
Click to collapse
phone has a mismatched imei. waiting for T-Mobile to contact me back gonna ask them about the original being blacklisted or not. now is there a way to restore my imei?
edit: just got off the phone with customer service imei isn't blacklisted, so now how do I restore the original imei? doing so "should" fix the data issues I hope.
boystuff said:
phone has a mismatched imei. waiting for T-Mobile to contact me back gonna ask them about the original being blacklisted or not. now is there a way to restore my imei?
edit: just got off the phone with customer service imei isn't blacklisted, so now how do I restore the original imei? doing so "should" fix the data issues I hope.
Click to expand...
Click to collapse
Check your PM's please.
Sent from my SGH-T999N using Tapatalk

[Q] Phone locked due to Fingerprint Swipe. Help!

OK so my mother decides to buy the same phone I have, the Galaxy Note 4. She thought she'd put on the fingerprint lock, which worked fine, then for some reason, stopped working. She claims she did not set up a backup password, so therefore I cannot see a way to get into the phone. I did find a zip to flash that would supposedly remove the fingerprint lock, but upon booting into recovery and into the option to apply an update from an SD card (I forgot the exact text), it gave me a message that dm-verity verification failed and I could not apply an update from the drive. What can I do to fix this? I don't want to have to FDR, but if that's the only options, I might bite the bullet and do that.
JOSHSKORN said:
OK so my mother decides to buy the same phone I have, the Galaxy Note 4. She thought she'd put on the fingerprint lock, which worked fine, then for some reason, stopped working. She claims she did not set up a backup password, so therefore I cannot see a way to get into the phone. I did find a zip to flash that would supposedly remove the fingerprint lock, but upon booting into recovery and into the option to apply an update from an SD card (I forgot the exact text), it gave me a message that dm-verity verification failed and I could not apply an update from the drive. What can I do to fix this? I don't want to have to FDR, but if that's the only options, I might bite the bullet and do that.
Click to expand...
Click to collapse
I'm not sure about this but I don't think an FDR will fix your problem either. I remember someone else having a similar issue with the fingerprint reader and after trial and error we figured out that an FDR doesn't touch the files used to manage the reader.
I don't think Fingerprint lock will allow you to use it unless you enter a backup password. In any case, if a factory reset doesn't work, you might try taking it to you mom's carrier and see if they can unlock it for you. They'll be able to identify that the phone belongs to her account and maybe have the tools to reset it. Try giving the carrier a call. Other than that, I have no idea.
nahoku said:
I don't think Fingerprint lock will allow you to use it unless you enter a backup password. In any case, if a factory reset doesn't work, you might try taking it to you mom's carrier and see if they can unlock it for you. They'll be able to identify that the phone belongs to her account and maybe have the tools to reset it. Try giving the carrier a call. Other than that, I have no idea.
Click to expand...
Click to collapse
Yes, I advised her to take it to the Verizon store where she got it for assistance. She just assumed that I could help her with everything (literally) since she has the same phone...but not that, unfortunately.
You cant use the fingerprint lock without a backup password. it wont let you use it without one, in case the fingerprint doesnt work. If on the lockscreen you see "Enter backup password" that means she entered it. The backup password is 6 character long with a number, it didnt require any caps letter.
fatmaninc said:
You cant use the fingerprint lock without a backup password. it wont let you use it without one, in case the fingerprint doesnt work. If on the lockscreen you see "Enter backup password" that means she entered it. The backup password is 6 character long with a number, it didnt require any caps letter.
Click to expand...
Click to collapse
That's what I thought. Well, she got it fixed at the Verizon store.
Sent from my SM-N910V using Tapatalk

Locked out please help!

Hi
So I changed the PIN on my tablet and forgot it. Now I am trying to get in and I cant, I assumed there would be an option to log in with my Google account, but I do not see that option anywhere. There is no forgot password button like most phones for some reason. Is there no option for this at all on this tablet? I've already entered the incorrect PIN 60 times, hoping it would pop up asking me to enter my Google account info but no luck. Is factory resetting the tablet really the only way to get in now??!
vuga said:
Hi
So I changed the PIN on my tablet and forgot it. Now I am trying to get in and I cant, I assumed there would be an option to log in with my Google account, but I do not see that option anywhere. There is no forgot password button like most phones for some reason. Is there no option for this at all on this tablet? I've already entered the incorrect PIN 60 times, hoping it would pop up asking me to enter my Google account info but no luck. Is factory resetting the tablet really the only way to get in now??!
Click to expand...
Click to collapse
Yep. Factory reset is the only option left.
Sent from my SM-P600 using Tapatalk
Company owned SM-P605, pin forgotten by employee, I've already tried Odin with stock rom that worked fine (just replaced the Samsung Boot logo with the telco's one) but it is still asking for PIN!
It's not rooted, and I wouldn't want to, how do you FDR with Odin?
Thanks,
P.
pnmcosta said:
Company owned SM-P605, pin forgotten by employee, I've already tried Odin with stock rom that worked fine (just replaced the Samsung Boot logo with the telco's one) but it is still asking for PIN!
It's not rooted, and I wouldn't want to, how do you FDR with Odin?
Thanks,
P.
Click to expand...
Click to collapse
Did you find a way to unlock?
Nah, mate did it in the end. It is possible. I didn't ask how tho.

PIN/Pattern required to enable fingerprint

Why is it when I set a fingerprint, I set a pattern for the mandatory backup security but when I try to unlock with fingerprint it asks for a pattern saying "Pattern required to enable fingerprint"?
As far as I know, as an extra security, a pattern/pin code is necessary when the phone is restarted/ switched on, once you chose to use the fingerprint scanner.
Howling Wolf said:
As far as I know, as an extra security, a pattern/pin code is necessary when the phone is restarted/ switched on, once you chose to use the fingerprint scanner.
Click to expand...
Click to collapse
It's every time I lock it
Sent from my HTC 10 using Tapatalk
Finally figured it out.
It happens when screen is locked by a 3rd party app, in my case I use nova double tap to lock screen.
Was wondering why (and forgot to mention) it seemed random.
Edit: for Nova users looking for a workaround, if you enable screen off by root access method it will use a secure lock and enable the fingerprint to unlock.
Heisenberg420 said:
Finally figured it out.
It happens when screen is locked by a 3rd party app, in my case I use nova double tap to lock screen.
Was wondering why (and forgot to mention) it seemed random.
Edit: for Nova users looking for a workaround, if you enable screen off by root access method it will use a secure lock and enable the fingerprint to unlock.
Click to expand...
Click to collapse
yeah a lot of screenapp does ask.... if you are on elementalx you could use button mapper which gives you the same functionality of double to sleep and more doesn't ask for patter/pin everytime you unlock
This started to happen to me after a bug crashed the phone and had to force restart it holding volume down + power. I only have the default launcher so I guess it's factory reset time for me
Heisenberg420 said:
Why is it when I set a fingerprint, I set a pattern for the mandatory backup security but when I try to unlock with fingerprint it asks for a pattern saying "Pattern required to enable fingerprint"?
Click to expand...
Click to collapse
For what it's worth, I had the same issue (until I found this thread) and it was caused by Action Laucher 3. The launcher was set as a Device Administrator and was granted permission to "Power screen off". Once I removed that permission my troubles were over.
Seems to me that it makes sense once you have a fingerprint setup, to require a pin as well. Why? Because what if the fingerprint reader stops working? You won't be able to login?!?!
Not sure until the poster above mentions a pattern is required. Normally it is a pin if you want. Then the PIN required upon restart option as well that is there.
Of course, if you are rooted, you can delete the system files that control/store that...but if not rooted with TWRP, you would have to try a master reset I would assume?!?!
IDK...guess I never thought of testing that out...haha
Guys, i hope it's ok if i conquer this thread for my question but i got serious issues here.
Got my 10 back from repair today and restored my backup.
But dumb me it seems as if i set a password/patern whatever and i can't remember it.
So after the first restart i can't unlock my phone cause it's asking for the code (and won't let unlock only with fingerprint) and i can't remember.
All combination that i would have used are wrong and now i got a working phone back again (after almost 2 month of repairing) and can't unlock it.
Is there any way of bypassing/ignoring the restart password or is it possible to only unlock it again with the fingerprint that is stored?
As i don't know what i should do if i don't get my phone unlocked
bmwbasti said:
Guys, i hope it's ok if i conquer this thread for my question but i got serious issues here.
Got my 10 back from repair today and restored my backup.
But dumb me it seems as if i set a password/patern whatever and i can't remember it.
So after the first restart i can't unlock my phone cause it's asking for the code (and won't let unlock only with fingerprint) and i can't remember.
All combination that i would have used are wrong and now i got a working phone back again (after almost 2 month of repairing) and can't unlock it.
Is there any way of bypassing/ignoring the restart password or is it possible to only unlock it again with the fingerprint that is stored?
As i don't know what i should do if i don't get my phone unlocked
Click to expand...
Click to collapse
Try a factory reset via Android Device Manager.
I don't know what Android Device Manager is but I could do the reset in TWRP too. It's about not losing all of my data or a possibility to get that device unlocked without the code. It would be no problem as my fingerprint is stored. Damn, I could just hit my head against a wall or alternatively just cry like a baby. I never forgot a password or code in my whole life and by now it happens
bmwbasti said:
I don't know what Android Device Manager is but I could do the reset in TWRP too. It's about not losing all of my data or a possibility to get that device unlocked without the code. It would be no problem as my fingerprint is stored. Damn, I could just hit my head against a wall or alternatively just cry like a baby. I never forgot a password or code in my whole life and by now it happens
Click to expand...
Click to collapse
Log in here https://www.google.com/android/devicemanager
Using the account your phone is used with.
Thx, but there I only have the options of letting the phone ring, lock it down or wiping it. As stated above I could do that easily in recovery, too.
I'm looking for a way of not having to wipe the phone (if there is one....)
bmwbasti said:
Thx, but there I only have the options of letting the phone ring, lock it down or wiping it. As stated above I could do that easily in recovery, too.
I'm looking for a way of not having to wipe the phone (if there is one....)
Click to expand...
Click to collapse
To be honest, I don't think so. There were loopholes before, but they have been closed. :/
So doing a factory reset and restoring /data is the only way of getting back control of my phone again (without losing too much data)?
I think i will get rid of locking my phone with fingerprint again as there seems not ot be a failsafe mechanic for forgetting a (backup) mechanic
OK, so it seems that I have to throw that piece of aluminum against the wall. The code seems to interact with /data, because after restoring only /data I have to put in the forgotten password again.
bmwbasti said:
OK, so it seems that I have to throw that piece of aluminum against the wall. The code seems to interact with /data, because after restoring only /data I have to put in the forgotten password again.
Click to expand...
Click to collapse
I really suggest starting from zero, when you get everything set, then set a password.
Thanks for your advice, but it's not about starting from zero. I've already done this twice today
It's about at least being able to get (some of) the data of /data

Categories

Resources