yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] kellyrx8:
@agrabren Kevin Bruckert

@MrViZZiATO It shouldn't make *any* difference if you have the update. Now I'm trying to exploit it.
[HTC EVO 3D] agrabren:
Ok, to clarify... We've definitely found a hole. We're working to make an exploit that can take advantage of the hole. It'll take us a day or so to sift through the wreckage (as it were). By time the first attack at the hole was done, my device would only boot with /data mounted as ro and the screen wouldn't turn on. So a factory reset later, and we're sifting through the results. But this is definitely promising.
[HTC EVO 3D] desairs:
Is this hole still there after the OTA? I didn't take it but I'm curious. Keep up the great work! :)
[HTC EVO 3D] agrabren:
We're trying to keep everyone posted but it's a balance in case we're wrong. The difficulty is, the exploit destabilizes the phone so badly that it's hard to pull the important bits from the wreckage before it all burns to the ground. I'll have more updates in the morning, I'm sure.

Oh, and man, I wish I had Titanium Backup... It's my day-to-day phone that I just royally horked. :-D I'm gonna be feeling that one in the morning. :)
[HTC EVO 3D] agrabren:
Oh, and I don't know about the Sensation. It's very device-specific, but I believe the sensation has the same vulnerability. We'll be checking on that as soon as we figure out a bit more "delicate" way to rip the kernel a new one...

[EDIT] And we don't believe HTC has any idea about this hole, so they can't close it in an OTA update. ;) We're going for root right now, not the HBOOT. But I'd still be careful of HBOOT updates, since HTC now knows we're getting a little closer to breaking down the doors.
[HTC EVO 3D] agrabren:
I'll answer a few more questions...

1. OTA updates: The reason not to accept an OTA now is for the next stage, getting s-off. Now that HTC is aware that we have a very likely exploit to their latest generation of devices, they may push an OTA that makes getting s-off.harder.

2. Sensation: I'm pretty sure it will work on the sensation, although it may need a few minor tweaks.

3. Secrecy: The reason we're not releasing the details of the exploit yet is to prevent a forced or even optional OTA from closing the hole before we can use it for root. Without root, we can't do much to prevent OTAs.

4. Timeline: Let's be fair. It does take time to go from a hole in the kernel to root. We're working blind here. Because we have no source tree in hand, and no root, we are punching holes in the kernel in the dark. We have some tools to help, but it's still a challenge. I wouldn't expect anything released before the weekend.
[HTC EVO 3D] Product F(RED):
I'm from the OG Evo forums since last August. Lemme simplify it for you guys.

S-ON/S-OFF - aka "Security ON/Security OFF". When it's on, enforces signature checks on the bootloader before letting you flash anything. It's basically just a flag in memory. If you go into the bootloader right now and go into RECOVERY, you get the HTC bootloader that relies on a signed RUU to do anything (a program you run from your computer that flashes to the phone back to stock). When you flash a custom recovery, you're overwriting the recovery partition with one that lets you flash things from the phone itself.

In order to be able to overwrite that area of memory, or rather to flash anything not signed by HTC, you need to be S-OFF. For those from other Android phones, it's like how Clockwork Recovery gives you the option to toggle Signature Checks on or off before flashing a zip. Same exact thing.

Further dumbing it down, S-ON is like a bouncer at a club. If the zip file isn't on HTC's list, it's not getting into the "club" (flashed into memory). When you're S-OFF, it's like an open-to-the-public club, where anyone and everyone's allowed in. After that you can flash a custom recovery, which in turn allows you to flash custom ROMs/Kernels/whatever.

Get it?
[HTC EVO 3D] xdviper:
Thank you. This is what I've saying. You need s-off before you do anything. But no obviously there's hard headed people that think they know everything.

If you got root and flashed the recovery, that would defeat the purpose of the having s-off. And the hero was completely different. When we have root and modify the system partition, it gets turned back to default when you reboot.
[HTC EVO 3D] MikeC84:
Doesn't look like you need s-off first.... Strait from the horses (shiznul = part of teamwin) mouth..
[HTC EVO 3D] Product F(RED):
You're right. What I was saying was that, to flash anything not from HTC through the bootloader, you need S-OFF. Certain Android exploits might let you get around that block.
[HTC EVO 3D] wrxtc714:
This is a basic sketch of how it will work but there is some in between stuff I'm sure.

I'm not them so don't quote me but it will probably be something more like

Root shell

Flash eng hboot

Fastboot

Writesecureflag 0

Then flash recovery

From recovery flash a rooted rom.

I am not saying this is right but there has to be more to it. But simply yes you flash boot recovery reboot now s-off
[HTC EVO 3D] DigitalPioneer:
Answering the question, moving the crapstorm, getting on with life (and root)

What root is, what S-OFF is, what they can do; all answered here: http://xdaforums.com/showthread.php?p=15233640

Any further discussion on this matter should take place in that thread, not here, thank you.
[HTC EVO 3D] hhisc383:
Root Acquired: http://twitter.com/#!/agrabren
[HTC EVO 3D] TMartin:
Working on it now!! :D

EDIT: And working on a Amon_RA recovery too. It's a first time recovery mission for me.

EDIT #2: Hmmm....Not sure if I'll be able to pull off an Amon_RA style recovery. I can't find a newer device with emmc (ie Shift, DHD, Desire S, etc) to compare. Might try to pull off a CWM recovery instead.
[HTC EVO 3D] housry23:
@xHausx are you going to port AmonRA over to the Evo 3d? I remember you trying to do it for the NS4G but this may be easier.
[HTC EVO 3D] kellyrx8:
look like OTA is rooted too!!! team win you are DONS!

#teamwin Oh, and I've rooted my *SECOND* #evo3d, which has the latest OTA.
[HTC EVO 3D] ViViDboarder:
TeamWin is working on our own recovery already. So that should be good. It's already just about up to par with the others out there but we plan on adding a bunch of other totally #Winning features too.

Just because that's how we roll...
[HTC EVO 3D] housry23:
Sounds cool to me! I would rather use Teamwin's anyway because AmonRA refused to make a Nexus S recovery.
[HTC EVO 3D] alammori:
Did you get this also:

#teamwin Oh, and I've rooted my *SECOND* #evo3d, which has the latest OTA.

That means with OTA or without your getting root guys.
[HTC EVO 3D] Leoisright:
T, can you pm chubbz and me a to do list. I talked to him and he has it deodexed and hotspot hack already

Sent from my 3VO..
[HTC EVO 3D] Thaxx:
Give them time to get a program ready or atleast write up the how to... jeeze it was only ten minutes ago!

And from what i understand they did some pretty VIOLENT stuff to achieve this root? is it safe for the public yet?
[HTC EVO 3D] Koroz:
Great work everyone involved! Can't wait to see the fruits of your labor.

as for the other thing

People still arguing over Security off?

Think of it this way:

Your phone is a window.

S-off is a sliding window lock on that window. There are two ways to go through the lock.

The "key" which would be the unlock codes for the boot loader work great. With these keys you can open and close the window when you want, open or close at your discretion.

When the key is "locked" (S-on) you can only open the window how far the company who made the lock wants it to slide. They control the distance the window can open or close before hitting the lock.

Think of Root as the glass in the window (Its much more important to the "window" then just being a glass but this analogy root is just the glass). You can "break" root and stick your hand in and unlock the lock yourself.

Once that window glass has been broken, and you enter into the house you can then remove the window lock all together and decide for yourself how you want to open or close it.

So to answer the question, You don't need S-off for root, nor do you NEED root for S-off. You can obtain root with or with out s-off, and you can obtain S-off with or without root.
[HTC EVO 3D] bsims85:
So for the people who accepted OTA (not me of course) , will they able to root with the current exploit?
[HTC EVO 3D] SolsticeZero:
Seems that way
[HTC EVO 3D] Stericson:
Ya'll make my job hard :\

I'm the only one moderating the forum at this time and this thread shot from 120 pages yesterday to 182 pages today.

I know we are all excited about root being achieved, but let me remind you that NOONE has offered any proof of any kind. Furthermore, even if root has been achieved I am not going to tolerate trash being dumped into this thread. So, after I clean up all the junk in the last 30 pages and re-open the thread. Do not start posting congratulations, I wanna have your baby comments, or any of that other junk.

If this gets out of hand I will take whatever steps I have to get things under control even if that means temp banning people for a day.

Regards,

Stephen
[HTC EVO 3D] Stericson:
The thread is re-opened...I swear I've never deleted that much stuff from a thread before...NEARLY 30 PAGES OF CRAP!

I will start issuing 1 day bans for anyone that posts anymore "CRAP" into this thread. If you do not have a contribution to make to the development work going on in this thread then DO NOT POST IT HERE!

That is the LAST warning I'm giving.

Regards,

Stephen
[HTC EVO 3D] Shinzul:
Got root?!

YES!

https://twitter.com/#!/Shinzul/status/86530240389718016
[HTC EVO 3D] djwhitey:
picture "proof" - http://twitpic.com/5j7a03

Edit: simultaneous post w/ Shiznul. you can delete mine
[HTC EVO 3D] clark44:
Nice job. Did you guys use a current exploit or find a new one?
[HTC EVO 3D] :
They found the exploit through the EVO's kernel.
[HTC EVO 3D] SolsticeZero:
Shinzul, since I'm assuming you have root, maybe you can answer this. Is this a dangerous method? As in, is there any risk? I know any root procedure has a small risk, but is this super-safe?
[HTC EVO 3D] :
If you have knowledge of adb, there should be no worries.
[HTC EVO 3D] CrippleB:
I am going to risk a ban to save the rest of you. If you read back he said no more congrats and non dev related posts. I know this is non dev and I am not a mod but just trying to be a nice guy..
[HTC EVO 3D] Stericson:
6 people banned, I'm dead serious. Keep this to DEV related conversations. Stop all of the congratulations and funny off topic comments they have no place here.
[HTC EVO 3D] Shinzul:
For starters, let me just say that I literally read every reply on every page of this thread.

You never know what off-the-wall idea may spur devs into finding an exploit. Creativity is to be encouraged - so thanks to everyone who contributed in some way.

SECOND, the root method is a BRAND NEW EXPLOIT that we are not going to share any details on how it works.

The next step is to work on getting s-off. The hboot is definitely nand-locked, so I can't just push the eng hboot and win.

Will keep looking.
[HTC EVO 3D] Leoisright:
Bump please

Sent from my 3VO..
[HTC EVO 3D] Meanee:
So, out of curiosity, are you going to wrap the rooting method in some sort of EXE/DLL file to prevent people from checking inner workings of the process? I am sure it won't take long for HTC to see what's modified, however...
[HTC EVO 3D] Stephanie95:
OTA YES-NO?

If we can get root and s-off after the OTA update, should we do the OTA now to "fix" whatever it fixes, before we root, so that those things aren't broken after we root?:o

Awesome work everyone!:p
[HTC EVO 3D] smw6180:
I would hold off on the OTA.

Assuming everything works out with this root exploit, and we get s-off and start flashing roms the ROMs you flash will quite likely incorporate any fixes from the OTA's. No harm in waiting.
[HTC EVO 3D] DigitalPioneer:
They'd better not. That would be a fine "screw you" to everyone who's not on windows. It'd be more trouble than it's worth, anyways, imho. They would have to make at least 3 versions (win, mac, lin) and as you said, it wouldn't be very hard for HTC to see what's really going on. I see little purpose in delaying the release of the root method for days to get this ready, in order to slow down HTC in patching it for a day. Besides, given how long it's taking HTC to unlock the bootloader (exceedingly trivial update), it'll probably take them months to patch a root exploit. That will require developing a patch and then massive amounts of testing to make sure it didn't break anything. By then, they should long have shipped the bootloader unlock OTA.
[HTC EVO 3D] jrun:
Will this root method only work for non OTA updated 3D's?

My sw version is : 1.13.651.7 (am i updated?) I had trouble getting mine activated and i think the sprint store might of done the OTA update on mine when they were trying to get it to work.. if so.. looks like people who did the OTA update will have to wait a little longer than the rest :(
[HTC EVO 3D] Sortilege:
Just wondering.....does it really matter if HTC know what the exploit was and tries to fix it? I mean if we dont take any OTAs from them what good is it? Let me know if im wrong.
[HTC EVO 3D] smw6180:
because they don't necessarily have to ASK before they install an OTA. They COULD force an OTA to your phone.

And as far as I've read, yes the people with OTAs should be ok with the current method, but as has been stated, it's not a good idea to accept any FURTHER OTAs.
[HTC EVO 3D] housry23:
I'm really scared to post here, but the root method has been confirmed to work on the OTA & an updated phone has been rooted.

Swyped from my GTab Honeycomb style.
[HTC EVO 3D] eyeballer:
OTA doesn't matter at this point. If you want to take it then go for it. Exploit works fine.
[HTC EVO 3D] mastibeta:
hey #Teamwin do yall have a sensation to work with, if not i would love to test as well as offer my aid if useful.
[HTC EVO 3D] DigitalPioneer:
Seems not: http://twitter.com/#!/agrabren/status/86537614492049408
[HTC EVO 3D] Stericson:
I'm getting tired of banning people, those last two posts are not related to the EVO 3D, go to the Sensation forum and ask SENSATION questions.

Only warning. Thanks.
[HTC EVO 3D] modplan:
Is this a joke? Not sure if the root method works or not but that image proves NOTHING (unless I am missing something obvious in it)

Just because you see a screenshot with the word root in it, does NOT mean it was rooted.

I ran ls on my EVO 3d in / and got the same thing:

Am I missing something or do seriously NONE of you guys use linux/unix and know what that print out actually means? I thought this was a place for devs?
[HTC EVO 3D] Stericson:
lol, its the # symbol that signifies root :)

Also, you are right...this doesn't ultimately prove it, but it's highly probable that the screenshot is accurate and not a Photoshop job.
[HTC EVO 3D] SLOSifl:
The # is the point of the image.
[HTC EVO 3D] mlin:
Just want to clarify what today's accomplishment means because I am not entirely sure. This is my understanding:

1) We have temporary root.

2) At this point this will allow us to run apps that require root as well as remove certain apps from the phone but really nothing else, similar to the first iteration of unrEVOked.

3) We will not be able to flash ROMs, kernals, themes, etc. until we have nand-unlock/S-OFF.

Is this correct?
[HTC EVO 3D] modplan:
*Facepalm*

It's been a long day, totally missed the # and of course know what it means, carry on good sirs
[HTC EVO 3D] Shinzul:
If you look a the very bottom of the image, you'll see a little hash sign...

It looks like this:

#

That indicates that it is a root shell. When you do the same command, you see the following icon:

$

That indicates a non-root shell. Just wanted to clear that up.

Yes this is correct.

Unfortunately, the hboot partition is write-locked, so we need to poke some more to figure out how to get s-off. We (teamwin) have some ideas, but again, no promises, and no ETA's, etc etc.
[HTC EVO 3D] vampirefo:
I hope this doesn't turn into another HTC facebook bs, Meaning I hope the team goes ahead and releases the info how to root our phones instead of posting pics of their rooted phones. As most have seen on HTC facebook people's patience are thin.

BANNED (Not DEV related, not a Legitimate question, and ultimately not helpful in any way)
[HTC EVO 3D] mlin:
Team Win is a highly respected group of developers who have contributed immensely to the at least the EVO community in the past (I'm not sure what other phones they have worked with). I agree with you that a photoshop job is HIGHLY unlikely.
[HTC EVO 3D] l33tlinuxh4x0r:
To all of the members of teamwin: can you please post what you have so far (a way to root our phones)? Even if it is only temp root. Then the community could *try* to help unlock the hboot. The more people with root access the better.

Also is every partition write-locked or just the hboot?

Thanks in advance!
[HTC EVO 3D] Knucklessg1:
Can this method be used to Root the HTC Sensation 4G? I've been following this thread to contribute to the Sensation 4G thread. Any possibility guys?

BANNED (Did you get lost?! This is the EVO 3D forums not the Sensation 4G forums)
[HTC EVO 3D] badutahboy:
Careful... This statement isn't accurate. Just because the current OTA's don't break this root method doesn't mean it's suddenly ok to go ahead and take OTA updates (I'm referring to the possibility that HTC could release something new).

The devs here have recommended that you still not take the OTA's. I'd follow their advice.
[HTC EVO 3D] novanosis85:
No!

They must not yet. You need to wait.

Jesus nobody is listening to the mods warning!!!!
[HTC EVO 3D] eyeballer:
I think you'll find i said "at this point." So yes, the statement is true.
[HTC EVO 3D] zonyl:
Yum

HTC is obligated to fix security issues immediately and has a well defined response process to get it out quickly. They are not obligated to unlock a phone and it is seemingly taking a while if ever (haven't seen anyone confirm that it will since release day)

Your phone may be hacked now, but what if it gets lost or you have to get it replaced with a new one.

I fully support waiting until they can obfuscate it. More than likely they will bundle it as a native code apk anyway.
[HTC EVO 3D] clark44:
About the soff. Talk to slimm609. He's cooking something up
[HTC EVO 3D] xHausx:
I'm working on updating the first post with the most common question but please be patient, my time is limited atm.

Thank you to Stericson for taking up the task of cleaning this thread.
[HTC EVO 3D] alammori:
IMO, No. Not every partition is locked. Teamwin gained root through an exploit in the kernel. I am sure we will learn more as soon as we get into process of adding and removing in other words restructuring and cleaning the framework, libs, etc.
[HTC EVO 3D] CrippleB:
He already said they would not share the method because htc might try and block. I'm sure it is not in a nice package just yet ready for everyone.From what he said it was a pretty destructive process. Let them work and in due time we will be rooting.
[HTC EVO 3D] jumaaneface:
maaan, respond to my tweet -______-
[HTC EVO 3D] YACO:
From the OP: "We already have a way to get S-OFF so that is moot, we just need root access to use it."

Can anyone confirm this statement is true or elaborate on it a bit more?
[HTC EVO 3D] krunkymonkey:
We have a eng hboot that is s-off. Just need root to get it flashed
[HTC EVO 3D] alammori:
Shinzul said:"Unfortunately, the hboot partition is write-locked, so we need to poke some more to figure out how to get s-off."

So guys, share your ideas, any little thing you think off might help.
[HTC EVO 3D] ajs421:
I f*cked up and ran the OTA not thinking too clearly, so I'm almost useless and the RUU doesn't work yet
[HTC EVO 3D] TMartin:
You can click to install later.
[HTC EVO 3D] a2k:
Or just hit cancel when it begins checking for an update.
[HTC EVO 3D] dagnasty:
Volume down + power works for me. I tried Gingerbreak as well and it just sat like it was running for awhile. Eventually gave up and just rebooted it.
[HTC EVO 3D] a2k:
I searched for the Smart_io.crd file on a virgin SD card (one in which the phone had yet to be powered on) and did not find this file.
[HTC EVO 3D] animal7296:
Disable Fastboot
[HTC EVO 3D] edufur:
Wouldn't they pretty much HAVE to unlock now? People made purchase decisions based on that promise. If they renig, they have a class action lawsuit on their hands.
[HTC EVO 3D] xHausx:
Do you have it set to show hidden files? They may have tried to hide it.
[HTC EVO 3D] rugedraw:
Ah, yes.....I remember reading that somewhere, too. Thank you, sir.

Edit: I got the 1.30 hboot, too. I'm not taking any updates until I hear more. I'm still surprised my phone hasn't even prompted me for an update, though.
[HTC EVO 3D] bparvin:
"sore" that sure looks like a Swype typo.

Sorry for off topic...just watching this thread hoping I will be able to use wifi tether with the 3vo I have coming in today. Otherwise my wife gets a new present while I keep my Evo 4g.
[HTC EVO 3D] Philosophy757:
I'm at home and can pitch in if need be. I don't think that I did the OTA update and just the PRL.

Shooter XC Ship S-ON RL

HBoot-1.30.0000

eMMC-boot

May 20, 2011
[HTC EVO 3D] eXplicit815:
This was posted on HTC's Facebook page... Looks like someone's been asking about it already...
[HTC EVO 3D] TMartin:
I posted this like a page or two back.

Posted from my HTC Evo 4G on Tapatalk Pro!
[HTC EVO 3D] eXplicit815:
Well, good. Now it's on here twice.
[HTC EVO 3D] chumba8:
I am soooo pissed i ordered mine at fckin raido shack now grrr cant it just be friday :)
[HTC EVO 3D] unCoRrUpTeD:
You better just hand over the 3vo to her.
[HTC EVO 3D] lowetax:
took out 8 gb class 4 San Disk card

and yes set to show hidden everything

just 4 folders and none contained that

.data sample 2D pictures sample 3D pictures sample music

all dated 05/17/2011 5:10 PM

FWIW

Product F(red) works at Verizon next door to Sprint store

and he is going to go to work at another Sprint store.

he talked to Sprint Rep that came in today:

http://xdaforums.com/showpost.php?p=14980074&postcount=45835
[HTC EVO 3D] readingkeeper:
http://www.androidcentral.com/sprin...pdate-itself?utm_source=ac&utm_medium=twitter

Looks like they might be doing another update... Maybe they'll unlock this one? We can always hope.
[HTC EVO 3D] CrippleB:
So the people reporting that "something" happened that they could not accept or decline. Was that an ota? I should have mine by tomorrow or fri but want to make sure I do this correctly.
[HTC EVO 3D] a2k:
I did, no hidden files.
[HTC EVO 3D] jadoe05:
Corrext me if I'm wrong but root and S-off are two different things and in order to flash another hboot we would need S-off right?
[HTC EVO 3D] erikivy:
At the risk of a one-day ban, we now have S-OFF. :)

http://twitter.com/#!/mobilemods/status/86580793459224576
[HTC EVO 3D] DigitalPioneer:
Sorry, I wasn't very clear. I'm not opposed to obfuscation, as long as it doesn't take weeks to get it working, when everything else is in good order. I'm opposed to making an arbitrarily platform dependent rooter binary. If they can do it in an android package, that would be awesome.

As to HTC, the simple fact is that fixing a root exploit takes time, and testing it to make it OTA-level stable takes more time. Hopefully they'll quit stalling and ship the unlock (trivial) before they ship a patch for the root exploit (very nontrivial).