[HTC EVO 3D] hockeyfamily737:
Unchanged....Fre3vo2 ran into snags and Teamwin shifted their focus to permanent root / S-Off.

Copy Pasted below:

1.15:19:55 <+pinPoint> before you do something screwey?

2.15:20:00 -!- mode/#sensation-devs [+v agrabren] by Sensation-Devs

3.15:20:04 <@W4lth3r> indeed pinPoint

4.15:20:16 <@giorgis> agrabren!

5.15:21:00 <@giorgis> agrabren, how's fre3vo^2 going?

6.15:21:13 <+pinPoint> ??

7.15:21:14 <+agrabren> I've been focusing on Fre3Dom today...

8.15:21:22 <@giorgis> ah, even better

9.15:21:24 <@giorgis> :D

10.15:21:29 <+pinPoint> instead of having some beer and steak agrabren ??!!!

11.15:21:36 <@W4lth3r> agrabren: !

12.15:21:42 <+agrabren> We ran into a few snags with fre3vo^2 and most of us think getting S-OFF is more important

13.15:21:53 <@giorgis> is there a confirmed way for fre3dom to work?

14.15:22:16 -!- mode/#sensation-devs [+v grantland] by Sensation-Devs

15.15:22:19 <@giorgis> agrabren, definitely

16.15:22:28 <+agrabren> Not yet. We've discovered some of their protections, though.

17.15:22:54 <@giorgis> good to hear

18.15:23:10 <+pinPoint> protections that guarded s-on?

19.15:23:29 <+agrabren> Protections that guard against flashing a signed eng bootloader.

20.15:23:49 <+pinPoint> do we even have a signed eng boot?

21.15:24:03 <+agrabren> We do for the EVO 3D, but it doesn't matter. It won't help either team.

22.15:24:17 <+pinPoint> how so?

23.15:24:26 <+pinPoint> because we cannot flash it?

24.15:24:29 <@giorgis> pinPoint, we only have an unsigned one...

25.15:25:00 <@W4lth3r> agrabren: you cant even flash a signed eng hboot ?

26.15:25:06 <@W4lth3r> neighter if its signed by htc?

27.15:25:21 <+agrabren> If you flash an eng signed hboot, it apparently still rejects because the radio reports S-ON

28.15:25:37 <+pinPoint> dang, all types of protections

29.15:25:43 <@giorgis> oh, correct..

30.15:26:27 <+pinPoint> agrabren: are you able to discuss what approach your team is taking or is it hush hush for now?

31.15:26:47 <+agrabren> I'm personally looking to attack the radio itself.

32.15:27:10 <+pinPoint> attack?

33.15:27:15 <@giorgis> agrabren, is there any hope that this will succeed?

34.15:27:25 <+agrabren> There's always hope, or I wouldn't be wasting my time.

35.15:27:31 <@giorgis> true

36.15:27:34 <@W4lth3r> giorgis: ofc everything can be passed by

37.15:27:56 <+pinPoint> agrabren: is emmc proving to be more problematic vs evo4g's?

38.15:28:00 <@W4lth3r> like real life, shoot down the soldier and walk trough.

39.15:28:24 <@giorgis> indeed :P

40.15:28:28 <+agrabren> It's not eMMC that's a problem. It's the boot rom with the radio.

41.15:29:49 <+pinPoint> hmm...

42.15:30:11 <+pinPoint> so what is the difference between hboot, s-on, bootloader

43.15:30:21 <+pinPoint> I must be missing something

44.15:30:26 <+agrabren> Ok, so the radio controls S-ON/S-OFF, called @secuflag

45.15:30:34 <+agrabren> HBOOT asks the radio if it should be S-ON or S-OFF.

46.15:31:03 <+agrabren> The problem is, there is a boot ROM with the radio which checks for S-ON, and if so, verifies the HBOOT is production.

47.15:31:09 <+agrabren> (That's what it appears to be)

48.15:31:30 <+agrabren> Most of the recent hacks attack HBOOT, and make it ignore whatever the Radio reports for @secuflag

49.15:32:09 <@giorgis> so we can't put an s-off hboot that will ignore radio because the boot rom will detect it right?

50.15:32:16 <+agrabren> Yup

51.15:33:02 <@giorgis> and when does this boot rom runs, is it the boot.img of a rom (i know i may be talking bs now :P)

52.15:33:39 <+agrabren> It's in the radio, it runs before the bootloader (HBOOT)

53.15:33:42 <@W4lth3r> i bet agrabren fixed s-off before i got my sensation anyway

54.15:33:54 <@giorgis> ah ok

55.15:34:16 <@giorgis> got it now

56.15:35:51 <+agrabren> Ok, gotta run. I'm actually trying to get some hacking in before dinner. ;)

57.15:35:56 <+agrabren> Got family coming over

58.15:36:07 <@giorgis> nice :)

59.15:36:43 <@W4lth3r> agrabren: don't brick ur evo ;)

60.15:36:52 <@W4lth3r> and have a good time :>

61.15:37:19 <+agrabren> Thanks. Later. :)