yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] BigRick10:
Did you do any ota's?
[HTC EVO 3D] eck0728:
I didn't take the OTA and tried this, didn't work, its basically using the Rage exploit that was patched in 2.2.3
[HTC EVO 3D] BigRick10:
Yeah I didn't do ota and it didn't work
[HTC EVO 3D] gingson:
One good thing is, I have something to look forward to when root becomes available. The other is, I seem to be enjoying the stock phone as it is the same as the last rom I used in my Evo 4G.:rolleyes:
[HTC EVO 3D] Sortilege:
Same...force closes.
[HTC EVO 3D] Arnezie:
OTA and no work for me
[HTC EVO 3D] Shaquiel Harris:
Check your device to see if you have S-off or something.. Post if you accepted the OTA or not, also post what version/firmwire your running. You shouldn't have been able to achieve that.
[HTC EVO 3D] Rydah:
I also didn't het it working. Was excited to run titanium backup.
[HTC EVO 3D] Shaquiel Harris:
Got it running for a little actually on my sensation. gonna uninstall/reinstall and try again.
[HTC EVO 3D] JJsax:
The link to z4 acts as a virus on my machine... I can't get the download that you posted it keeps cleaning it. Would love to give it a shot, I have done nothing to my shooter as far as OTA or any updates.
[HTC EVO 3D] Shaquiel Harris:
This is strange. NOW it force closes. But before i was able to run it.. it got down to the point where it said acquiring root access, then acquiring root shell then it exited out. i think we can get it if you run it only once or something.. i want to factory reset and try again, but i think it may not work.
[HTC EVO 3D] spalding1028:
I'm still pre ota and haven't tried the z4root yet, if anyone has any suggestions, let me know. Just don't expect me to download anything huge, idk why, but my 3g speeds are horrifying (.06 mbps down, .14 up average)
[HTC EVO 3D] cordell12:
Same here, it ran then went to aquiring root shell, exited now FC even after a reboot and reinstall
[HTC EVO 3D] alchemist316:
Is it Norton anti .. if it Is then it does that with most unknown files and just cleans it I just turn off run then turn on then run scan

Shooter
[HTC EVO 3D] alchemist316:
Same

Shooter
[HTC EVO 3D] cordell12:
That's because it is a type of Trojan, nit a bad one though :)
[HTC EVO 3D] klbjr:
So are any of the heavy hitters working on this yet? Toastcfh, Virus, Myn, Calkulin, Cyanogen, Aamikam, Amon, Flipz...? Supposedly most of them were getting the 3D, surprised we haven't heard anything from any of them yet.
[HTC EVO 3D] drchaosca:
HTC memo

I am trying to find that memo. Link please.
[HTC EVO 3D] gessin64:
I haven't taken the updates... If am going to try this can some one explain the process to me and if I should record any data before or after I try it... Am headed home now so I will have time to set there and do it right... Plus its sounds like a one try process
[HTC EVO 3D] alchemist316:
I'm sure, look back in the thread ull see a few

Shooter
[HTC EVO 3D] Shaquiel Harris:
It SEEMS like Android itself is making it FC. If that guy was able to get temp root, it must've worked and its just something we are doing that isn't making it work now. You guy's think if we factory reset it might work again? If it does, we should be able to temp root, then use something like gingerbreak to maybe help it in the process.. long shot i know, but it seems as if Temp root IS a possibility.
[HTC EVO 3D] JJsax:
Got ya thanks, will try it now
[HTC EVO 3D] Shaquiel Harris:
Cyanogen just makes roms. He does nothing when it comes to actually rooting/ getting s-off. :cool:
[HTC EVO 3D] alchemist316:
System update doesn't clear on notifications?? Just started

Shooter
[HTC EVO 3D] vampirefo:
z4root can't root gingerbread, it uses an old exploit that was patched in gingerbread the person who thought he got root via this app was just mistaken.

Here is logcat showing exactly what the app does, it runs until it can't attach then it dies.

W/ActivityManager( 274): Process ProcessRecord{40b9be08 11313:com.z4mod.z4root:remote/10140} failed to attach

W/ActivityManager( 274): Unattached app died before broadcast acknowledged, skipping

I/ActivityManager( 274): Start proc com.z4mod.z4root:remote for broadcast com.z4mod.z4root/.AlarmReceiver: pid=11370 uid=10140 gids={3003}

The OP just go confused, he never got temp root with this app.
[HTC EVO 3D] kthejoker20:
Looks like were not getting root until the source code is released.

ShixNit
[HTC EVO 3D] readingkeeper:
Whoa, did you get an Evo 3D? I loved your kernels on the Transform.
[HTC EVO 3D] jdogg836:
Click on the update in the notification area. When it brings up the update and asks if you want Any network or Wifi / Cable only, cancel out of it. Then when it says "Your phone will check for updates..." hit OK. The notification will go away. Then lastly while you are still in that menu, uncheck the "Scheduled check" setting so it stops searching for the new updates and you're good to go.
[HTC EVO 3D] RVDigital:
From: http://www.androidjavadoc.com/2.3/dalvik/system/BlockGuard.html

Like they threw everything they could at it...
[HTC EVO 3D] jdub01984:
I remember a hack on the original evo using an exploit in flash player. Here is the link to that exploit.

Has anyone tried a method similar to this to see if this exploit might exist on the evo 3d. It apparently is for flash lite, but I think you can set your browser to use flash lite by using about:debug menu.
[HTC EVO 3D] Keithgordon:
Turn off UBS debugging, run the temp root, then turn debugging back on, I did this w/o being connected to the pc. I had to go to settings and clear the app data after the first time as well. Been able to do it twice, but not every time. Haven't figured out the exact combination, but I am trying
[HTC EVO 3D] Shaquiel Harris:
Doesn't let me clear the app data using manage applications.. interesting since you duplicated it. We all need to keep messing with this app then, since we have someone who got Temp root Twice.
[HTC EVO 3D] Childofthehorn:
There was one back in early may (before the 20th), but links I tried have been full of fail.

My experience has mainly been with making my own BlueZ code on the Evo (stronger signaling, updated BlueZ code merge with my own A2DP add-ons for better music quality) and doing my own custom blended roms with Cyanogen and Sense 3.0 hybrids (never posted because I thought it was pretty simple and mostly because the phone app for Sense 3.0 was better)......

I have a JTAG/debug setup so it would be near impossible for me to have a Hard Lock - anything you want me to try just let me know!
[HTC EVO 3D] Shaquiel Harris:
deleted post.
[HTC EVO 3D] Keithgordon:
Ok, z4root said it acquired temp root, so I started android commander which said so too, but when I try to push flash image to /data/temp it says access denied. So i am at a loss. Didn't mean to get anyone's hopes up
[HTC EVO 3D] Shaquiel Harris:
hm.. try permanent root. doubt it will work since you don't have s-off though.. or try running gingerbreak or something. download terminal and try running SU.
[HTC EVO 3D] kkwus74:
Are you able to try taking screenshot after temp root?
[HTC EVO 3D] vaelek:
Try /data/local instead.
[HTC EVO 3D] bsims85:
It would be nice if we could at least get WiFi tether working.

Sent from my HTC Evo
[HTC EVO 3D] unCoRrUpTeD:
This, along with 500 other pointless posts in this thread, has nothing to do with actually coming up with a way to root the phone.

On Topic:

I would be cautious as to flashing any kind of image. We are not sure how the entire system is locked down. There are a couple of people in here that are willing to test anything.
[HTC EVO 3D] housry23:
I don't have any useful info to add, but I traded my Nexus S 4G and Evo 4G for the Evo 3D and now just waiting for root. I'll be donating to all who help. It would be helpful to have everyone that contributed to hacking this bad boy in the OP so that those who wish to donate can. Keep up the hard work and I'll be keeping an eye on the progress. Loving the speed of this phone already and I can't imagine how it will be with AOSP Android, although this version of Sense is by far the best and finally they have put together the hardware to run it.
[HTC EVO 3D] Arnezie:
You can , call Sprint and tell them you would like to add the mobile hotspot for $29.99 ok so now be quiet don't type and be patient.
[HTC EVO 3D] kkwus74:
+ 1..... I'll donate too.....
[HTC EVO 3D] Neotelos_com:
77 pages? I'd just like a thread where a mod deletes all unrelated posts and the first post contains the latest news updates on progress.

It may be a bit much to ask, but that would be most desirable.

I've kept my mouth shut so far...even anxiously checked IRC last night every so often.
[HTC EVO 3D] :
They stay away from threads that are not going anywhere ;)

Sent from the 3VO
[HTC EVO 3D] BDawgTrap:
I'll Experiment!

I can do whatever experimenting if you guys need... Just let me know :) oh i have installed The OTA's so idk if that changes anything
[HTC EVO 3D] RVDigital:
Dude, its on the front page of this section...

[FAQ/Status] HTC EVO 3D General FAQ's. New to this device? New to DEV? Read here!
[HTC EVO 3D] ridleyj329:
i know its a long shot and almost a definate not to work but what would happen if we to use the evo 4g version of unrevoked if these two are essentially the same phone?
[HTC EVO 3D] pastorbob:
Doesn't Work for 2.3 also already been talked about earlier in thread.
[HTC EVO 3D] AyyRayy:
Yeah even the EVO it self on 2.3 doesn't work

Sent from a dual core beast 3VO. Do this on your iFail 4 :D
[HTC EVO 3D] krunkymonkey:
anyone know what the cwkeys file is in the / (root) folder? i opened it up and i see

{64,0x514f7a2d,{3910343259,2225617198,944538402,4229984983,356634445,50668161,34702

that is only a few lines of it.
[HTC EVO 3D] CrippleB:
I actually did try it but it kept saying waiting for device. Just trying save others the time and frayed nerves trying to decide whether to test it or not.
[HTC EVO 3D] kthejoker20:
Anyone try ttys0 yet?

I'm sure you can wipe the chip.
[HTC EVO 3D] lawsonmh15:
That answers that...
[HTC EVO 3D] RileyGrant:
Anyone good with C should hit up the irc.
[HTC EVO 3D] xHausx:
I've actually been looking at something like that using one the newer adobe exploits. Adobe reader is usually installed as a system file and I believe was vulnerable to it.
[HTC EVO 3D] xHausx:
If you do the OTA and HTC hasn't made the hboot unlockable you are going to be stuck without any kind of root what so ever. Gingerbreak was already patched so there is no way to get root with it.
[HTC EVO 3D] DomSim:
you're saying to ota patches a known potential exploit?
[HTC EVO 3D] Leoisright:
@haus- so which is gonna be best come Friday. No ota and do the gingerbreak method?
[HTC EVO 3D] xHausx:
You never do the OTA lol I thought everyone knew that

It patches the only known exploit for gingerbread. HTC is usually pretty good about keeping their phones secure and it was basically a security hole we used.
[HTC EVO 3D] SolsticeZero:
nevermind...
[HTC EVO 3D] ajs421:
In my case I was hopeful it was the unlocking OTA!
[HTC EVO 3D] RVDigital:
What CAN be said with "certainty" at this point in time???

The point he's trying to make, is if you have the choice and until its confirmed, you NEVER do the OTA if you want a chance of root with an initial release.
[HTC EVO 3D] Leoisright:
For sure. I was just making sure the ota wasn't one that helps. I've never done an ota... Cooking the roms are better than what they can do
[HTC EVO 3D] xHausx:
Better safe than sorry, there will always be plenty of people who take the OTA and can make sure it's unlocked first. The og evo is still waiting on a new way to root after that one we got a few weeks ago.
[HTC EVO 3D] xHausx:
Can anyone whose done the OTA check to see if any new fastboot commands were added? You can use 'fastboot oem ?' (w/ question mark) to check
[HTC EVO 3D] sterlinron:
Not sure I did an OTA or not. I know not to, but when I first turned on the phone it did some sort of update and did not give me the option to accept or decline like a regular OTA. Just assumed it was part of the activation sequence. But like I said, I didn't have a choice in the matter other than to pull the battery, but that scares me more in the middle of an update.
[HTC EVO 3D] NxtGenCowboy:
1 mins I'll do it
[HTC EVO 3D] dagnasty:
Have not done the OTA. Did the fastboot check posted earlier and got this:

HT16CHX00324 fastboot
[HTC EVO 3D] LilPup81:
I was going to do that, but couldn't get the drivers to install on my work pc.
[HTC EVO 3D] NxtGenCowboy:
(bootloader) command list

(bootloader) checkSbl1

(bootloader) checkHWSecurity

(bootloader) keytest

(bootloader) heap

(bootloader) boot

(bootloader) reset

(bootloader) powerdown

(bootloader) rebootRUU

(bootloader) heap_test

(bootloader) rtask

(bootloader) task

(bootloader) enableqxdm

(bootloader) gencheckpt

(bootloader) readpid

(bootloader) writepid

(bootloader) readcid

(bootloader) writecid

(bootloader) readimei

(bootloader) writeimei

(bootloader) readsecureflag

(bootloader) writesecureflag

(bootloader) list_partition_emmc

(bootloader) load_emmc

(bootloader) check_emmc

(bootloader) check_emmc_mid

(bootloader) read_mmc

(bootloader) load_modem_emmc

(bootloader) get_wp_info_emmc

(bootloader) send_wp_info_emmc

(bootloader) get_ext_csd_emmc

(bootloader) get_sector_info_emmc

OKAY [ 0.038s]

finished. total time: 0.039s
[HTC EVO 3D] xHausx:
nope, nothing new. how about:

fastboot oem readsecureflag
fastboot oem writesecureflag ?
[HTC EVO 3D] NxtGenCowboy:
(bootloader) secure_flag: 3

OKAY [ 0.008s]

finished. total time: 0.008s

and

(bootloader) shooter_init_sd, SD card already power on

(bootloader) sdcc_init_memory_device done

(bootloader) [FAT_ERROR] fat_open_file: can not find SMART_IO.CRD

(bootloader) [JAVACARD_ERR] SMART_IO.CRD cann't find

(bootloader) writesecureflag: Permission denied, value 1

OKAY [ 0.169s]
[HTC EVO 3D] xHausx:
yup, still the same. Looks like HTC reneged on their promise to unlock it.

Can you go into your software info and see what the date is on your kernel? That should be an easy way to tell if gingerbreak will work or not

edit: Almost forgot to ask, what version is your hboot?
[HTC EVO 3D] CheesyNutz:
so the OTA screws the bootloader ?
[HTC EVO 3D] mlin:
Is it time to hammer their Facebook page again?
[HTC EVO 3D] Shaquiel Harris:
Which version of it though? I'll try looking up the apk if i know the version number.
[HTC EVO 3D] Rydah:
Sounds interesting. :)
[HTC EVO 3D] lopantz:
Nook Color Root

Sorry if this is redundant, I attempted search the thread for this idea, but didn't find it... has anyone tried making a bootable sd card with a CWM img on it? Similar to the Nook Color.
[HTC EVO 3D] xHausx:
I don't believe so, is there anything to it that could be applied with the E3D?
[HTC EVO 3D] DomSim:
not really. the nook color looks at the sdcard for a rom first and if found boots that rom ON the sdcard leaving the rom on emmc (internal memory) intact. this works even without root which is why you see gingerbread sdcards for sale on ebay for the nook color. it does not actually effect the internal rom at all. you can also create a clockwork mod sdcard allowing you a full recovery without rooting. of course, the e3d would have to be set up to look for the sdcard first which i doubt it does.
[HTC EVO 3D] daneurysm:
The Nook Color is insanely unique in that it boots from the SDCard...or anything else at all for that matter. As far as I know that is not a common feature of any family of devices.

I've often wondered how and why they came to put that in the firmware in the first place.
[HTC EVO 3D] lopantz:
I knew it was a bit of a long shot and that there are plenty of great devs working on this, thought it was worth mentioning just in case. Good luck guys can't wait for root!
[HTC EVO 3D] agrabren:
It's worth a try... EMMC devices are different, and we know they read the sdcard at initialization.
[HTC EVO 3D] Knucklessg1:
If we combine all our brains

Same exact results we got from our Sensation. If you want to help, you should join our dev community to help unlock our phone, because they use the same security. Please come help us out. http://www.sensation-devs.com/
[HTC EVO 3D] dj_L:
Umm, actually, I don't recall exactly how rage worked, but IIRC, GingerBreak worked on vold(). Any chance of an LD_LIBRARY_PATH attack with an old 4G sysdump in /tmp?
[HTC EVO 3D] AyyRayy:
Can we modify the build.prop file from a adb pull /system. In order to acheive adb root?

Sent from a dual core beast 3VO. Do this on your iFail 4 :D
[HTC EVO 3D] Shaquiel Harris:
I think this is how the E3D works. if it didn't check the SDcard, i would have been able to boot my phone when i had that Smart_io.crd file on it. But i couldn't because of it. It HAS to be reading the SDcard when it boots.
[HTC EVO 3D] Shaquiel Harris:
i think code can be executed from data/local/tmp.. this might work.
[HTC EVO 3D] AyyRayy:
What I was saying about the build.prop file. Can we modify that as far as adb no longer recognizes our EVO as a production model? This would be what i was saying about achieving adb root and then flash the eng bootloader

Sent from a dual core beast 3VO. Do this on your iFail 4 :D
[HTC EVO 3D] vaelek:
You can modify it all you want, but without root you can't push it back.
[HTC EVO 3D] will75:
someone mentioned pushing a services.jar did anything come of that? (for wifi tether)
[HTC EVO 3D] Leoisright:
I mentioned it. Won't work.. can't push to system unless it let's us write to system. The hack is ready once we can write to system.

On other note.. I wrote a very long thought out email to higher ups at HTC asking kindly to unlock my phone. I know its one in a million shot but I tried to hit them on the developers side. Letting them know how much we contribute to their success. Can't hurt.

Gonna start digging thru /data folder on phone to see if there anything in there..
[HTC EVO 3D] dj_L:
Not currently in a position to try it, but I just looked at it briefly, have to kill the logger daemon and start the one from the dump I think with exported LD_LIBRARY_PATH and LD_PRELOAD. Unfortunately, I just don't know the platform well enough to know if the suggestion is even viable...just a total shot in the dark.
[HTC EVO 3D] irishgreen:
Nothing can hurt man..i wrote one too..lol...let me know about the response!!
[HTC EVO 3D] xHausx:
I added the ramdisk to the OP in case anyone wants to take a look at it. It is for the pre-update ROM the phone shipped with.
[HTC EVO 3D] Shaquiel Harris:
Guessing no-go for the Nook color root?
[HTC EVO 3D] xHausx:
nope, I'm not even sure the nook-color starts out with android on it. The closest thing to it would be the smart card file we're looking for
[HTC EVO 3D] Saleenfiend:
It seems the device us atleast checking the SD during boot if Smart card files are conflicting. Might be worth a shot, but I doubt.
[HTC EVO 3D] Sortilege:
Exactly what i was thinking. Is worth looking into.
[HTC EVO 3D] Shaquiel Harris:
Yeah the devices are checking the sd like at the beginning of the boot. I'm just wondering if we read that website to see how the card works, maybe we could i guess tell in the smart card file what to do.. like have the commands there.

something along the lines

boot bootloader

Just to see how it responds to this card i guess?
[HTC EVO 3D] urcboss07:
I don't think it check the SDCard when it boots. I formated the sdcard and factory reset the phone, the phone still works and restore to original factory set.
[HTC EVO 3D] xHausx:
it checks for the smart card file but thats about it afaik
[HTC EVO 3D] xHausx:
if anyone is looking to make a new exploit adobe reader is a possibility, yes. It would have to be done on the stock firmware though, anything newer and it will be fixed. Which means if this is a valid option for getting root those who took the update are SOL
[HTC EVO 3D] cordell12:
look at effected versions of flash, ours is a bit to new. What version is in that RUU that u downgraded to?

http://macdailynews.com/2011/04/12/...it-for-android-desktops-ios-users-unaffected/

AFFECTED SOFTWARE VERSIONS

• Adobe Flash Player 10.2.153.1 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems

• Adobe Flash Player 10.2.154.25 and earlier for Chrome users

• Adobe Flash Player 10.2.156.12 and earlier for Android

• The Authplay.dll component that ships with Adobe Reader and Acrobat X (10.0.2) and earlier 10.x and 9.x versions for Windows and Macintosh operating systems

my evo 3d with NO OTA's has 10.2.157.49 flash :(
[HTC EVO 3D] Saleenfiend:
I'm on 10.0.1
[HTC EVO 3D] xHausx:
ditto, Adobe Reader X ver 10.0.1
[HTC EVO 3D] smw6180:
Interesting. I'm on 10.0.2...I didn't update anything.
[HTC EVO 3D] cordell12:
says that adobe reader is protected from exploit though...

At this time, Adobe is not aware of any attacks via PDF targeting Adobe Reader and Acrobat. Adobe Reader X Protected Mode mitigations would prevent an exploit of this kind from executing.

also says...

NOTE: Adobe Reader 9.x for UNIX, Adobe Reader for Android, and Adobe Reader and Acrobat 8.x are not affected by this issue.

What version of Flash do you have after the RUU?
[HTC EVO 3D] CrippleB:
Edit: my bad was looking at player not reader.

I'm on 10.0.1, no ota.
[HTC EVO 3D] gtkansan:
Did you update it in the market? I'm on 10.0.1 and i took the updates..
[HTC EVO 3D] eck0728:
I'm pretty sure their are earlier versions of flash hanging around, something we can install if we uninstall our old version of flash. could be a way to help those who took the OTA get root.
[HTC EVO 3D] cordell12:
Its in system so we cant. Everyone reading the adobe reader, the exploit is in Flash :)

http://macdailynews.com/2011/04/12/...it-for-android-desktops-ios-users-unaffected/

NOTE: Adobe Reader 9.x for UNIX, Adobe Reader for Android, and Adobe Reader and Acrobat 8.x are not affected by this issue.
[HTC EVO 3D] johncjenc:
Grab it out of one of the older roms. Myns 2.2 or earlier
[HTC EVO 3D] CrippleB:
Would titanium un install? Cause you can't in apps.
[HTC EVO 3D] xHausx:
Here's another...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2110

edit: that's the thing though, I don't remember off top if flash is installed as a system file anymore. If not then it's useless to us

cordell: you're looking at a different one than what I was referring to, I was referring to one for Adobe Reader
[HTC EVO 3D] cordell12:
Flash IS a system app! Your OP says adobe reader rather than flash :)

Good find!!!

edit...heres straight from adobe http://www.adobe.com/support/security/bulletins/apsb11-18.html
[HTC EVO 3D] Leoisright:
How can we find which are system and not? There should be a vulnerable file somewhere
[HTC EVO 3D] xHausx:
well there's been a few of them since May 20th lol Can always count on good old Adobe for vulnerabilities

@leoisright System apps will be installed on the system partition or run as root
[HTC EVO 3D] Leoisright:
Dang, that made me feel dumb...lol that's what i get.

I have root explorer installed... Can go thru them and check stuff if needed
[HTC EVO 3D] cordell12:
this is the patched one, BUT it shows the code and how it was done!

http://blogs.technet.com/b/mmpc/arc...-flash-player-vulnerability-exploitation.aspx
[HTC EVO 3D] xHausx:
Very interesting, I may be able to use this to our advantage
[HTC EVO 3D] Leoisright:
Well that looks Chinese to me but i see where its headed. Crossing fingers
[HTC EVO 3D] xHausx:
We'll need to find out the exploit part of it though, the rest is for windows machines and useless to us. Time to start emailing people to ask I guess, if you decide to ask as well be sure to refer them here so they know what we are using the info for.
[HTC EVO 3D] will75:
Basically if that code does work, we'll need to find someone talented and knowledgeable enough who can decode it, and rewrite it to do what we need it to do... Instead of a virus, it'll be a "crack". There is so many talented people out there, it is just a matter of finding that person who has the knowledge to do it, usually in the underground scene these guys are always up for a challenge.Hell, they bypass dongles 10 years ago on software :P
[HTC EVO 3D] cordell12:
What about this "FotaSign_PubKey.der" anyway to open this. It looks like sprints way of pushing updates, maybe?

this is in system dump, under ETC > Security