yashsingh1/xdaforums huggingface dataset:
[HTC Vivid, Raider, Velocity] 8125Omnimax:
Its a simple question I asked him, there is no need to hold his hand to cross the street. I simply question his ability to contribute if he in fact does not own a HTC Vivid. As for trolling check out the last couple of pages in this thread please, how often has root been discussed in contrast to everything off topic.

The command everyone is looking for is:

fastboot oem writesecureflag 0

This rejects of course because the phone is looking for the smart_io.crd file. Which has been deemed a useless file but if you do find it like i did and place it in the root of your sd card, your phone will not power up unless you remove the file from the sd card. Also on both gold carded sd cards and non gold carded ones.

The security on this phone is frustrating!, but not everything is patched 100%

now if you boot the phone into :

fastboot oem rebootRUU, youll get the black HTC screen but ADB commands can still be executed. the phone is prepared to receive and install a signed flash. We can definitely find a way to spoof the phones expectation if we can put our heads together. Im still waiting for one of you good nerds to say "buffer overflow" or "flaw" that has been discovered on the hardware of the device.

We do have root in the form of zergroot, but to keep the root permanent of course as im repeating what hundreds of others have already said...we need s-off

So far:

The gold card does work with a signed ruu flash, but nothing else as one user here has already discovered.

But I ask you this...all this talk about root yet not one person has dissected their phone with macro pics of the internals and posted them to see what components are used on the phone. Im willing to disassemble mine and take pics to save everyone else the trouble as a gesture of kindness to those who are serious about getting the vivid up to par with its foreign clones, and expose what may appear to be possible workarounds based within the hardware.
[HTC Vivid, Raider, Velocity] gmanfuzing:
anyone tried [UTIL][12/07] HTC Super Tool v2 yet?
[HTC Vivid, Raider, Velocity] JEANRIVERA:
have you tried?
[HTC Vivid, Raider, Velocity] ebaul:
Didn't work on mine :-(
[HTC Vivid, Raider, Velocity] pside15:
I think the only thing that works is the ZergRush which only gives us temp root.
[HTC Vivid, Raider, Velocity] kxhawkins:
Prep and root work with the HTC Super Tool, but no benefits over other methods (still no sd mount, still lose after reboot)
[HTC Vivid, Raider, Velocity] gmanfuzing:
i don't have a vivid :[ i would like one but im not going to buy unless it gets rooted and has a strong userbase.
[HTC Vivid, Raider, Velocity] ebaul:
Ok, this is funny and frustrating...not to mention confusing. I tried using that tool, the HTC v2 tool thing to get root and s-off and whatnot. It failed each time, however now I have superuser icon on the drawer. So I touched and it FC each time. I ran the tool again, with no luck, yet I can't uninstall superuser apk. I remembered when I had the captivate I used super one click thing and it had an Unroot, so I ran that the latest version, clicked unroot and it did its thing and my phone rebooted. back on the desktop i went to the app drawer and the superuser icon was there still...persistent little guy. Soooo, I ran the super one click again and this time I chose root...it went through and i could see it failing but kept going. I ran it again at this time thinking screw it, if it bricks it bricks...( my main phone is a SGSII). The super one click failed, but guess what..??? No frills CPU works now. Each time I reboot my phone I can see the little message for about a second that states "NoFrills has been granted superuser..." (it goes away too fast). Then when I open NoFrills I have the settings I set before. I tried lower settings, and when I click apply it shows that little message about been granted superuser...HOWEVER...it is the ONLY thing that works right now...I can't get "su" on terminal, I can access system but r/o. Sooo, be that as it may, I am no android dev. Is there anything else I can try on this thing to see what broke? Sys dumb, something that can help someone? If this bricks...it bricks, I have an SGSII that rocks. I bought this Vivid just to see it and have it, I'm not in love with it so feel free to suggest.
[HTC Vivid, Raider, Velocity] JEANRIVERA:
so you are saying that nofrill is getting SU permisions after every reboot with no problem even that you are supposed to lose root when you reboot, but you are not able to have SU permission on any other app?

if I did understand right it is a good start for permanent root
[HTC Vivid, Raider, Velocity] Aus_Azn:
Temproot does that sometimes; just rerun the temproot or do a fixsu on it.
[HTC Vivid, Raider, Velocity] ebaul:
Yes, just finished my last reboot and nofrills message keep coming up as been granted something, I can't read it as it does it very fast and goes away. When I check nofrills it keeps the settings I set. I set it for 800mhz max and when I rebooted it was still on 800mhz max with apply at boot. I can't do anything else that requires root. I tried the lcd app and it complained about root. I can't open superuser it FC every single time.

---------- Post added at 11:40 PM ---------- Previous post was at 11:36 PM ----------

(wrong one)

---------- Post added at 11:41 PM ---------- Previous post was at 11:40 PM ----------

wont fixsu
[HTC Vivid, Raider, Velocity] sbryan12144:
Hey guys. You know football released a Telstra Holiday Ruu. Now, correct me if I'm wrong, but couldn't you guys update your rom and hboot with the ruu and then unlock via htcdev? From my understanding is AT&T's version is locked and the Korean isn't. But then again I don't own the device and I'm not exactly knowledged in this field. Just seeing if this will help. Thanks
[HTC Vivid, Raider, Velocity] 8125Omnimax:
The thought passed my mind but ive heard a lot of people not being able to successfully flash the vivid with other carrier roms ( minor hardware differences, radios, etc. )

It makes total sense, hell ill give it a shot, but ill check to see if others attempted already.
[HTC Vivid, Raider, Velocity] jaxboater:
I tried and got an error of wrong ROM ID or some such.

This was as the Signature was updating on the phone.
[HTC Vivid, Raider, Velocity] 8125Omnimax:
Has anyone pulled the bootloaders out of every ruu ( rom.zip )and run a crc check on all of them, just to see if they are in fact all different?
[HTC Vivid, Raider, Velocity] Aus_Azn:
Well, this thread is half-moot now, with the bootloader unlocked.

What's the best permarooting method around as of yet?
[HTC Vivid, Raider, Velocity] 8125Omnimax:
Just got a call this morning from a fellow dev who has been joking about my Vivid, I have already unlocked mine on my bedside slow as snails netbook.

ZergRoot is permanent, 3 battery pulls and 3 reboots later, all is well
[HTC Vivid, Raider, Velocity] shogunmark:
i havent followed this thread...

yes HTCdev unlock works, and from what i can tell, the previous temp roots are now permanent, i did not use those methods though, i used the HTC Supertool for perm root and i have rebooted many times as well as several battery pulls.

So considering that we have root now am i safe to unstick this thread?
[HTC Vivid, Raider, Velocity] kxhawkins:
I'd say so.
[HTC Vivid, Raider, Velocity] dbaser:
Unstick away...
[HTC Vivid, Raider, Velocity] shogunmark:
consider it done..
[HTC Vivid, Raider, Velocity] doktor buknasty:
Here ya go:

http://xdaforums.com/showthread.php?t=952352
[HTC Vivid, Raider, Velocity] pside15:
Here is the link for the hack kit that attn1 made for the Inspire when it came out. It is just for the Inspire/Desire HD. Not sure if the some concept could possibly work for the Vivid or not.

http://xdaforums.com/showthread.php?t=952352
[HTC Vivid, Raider, Velocity] mohsinkhan47:
okay so i looked into his program and i think some of his code might work like this part:

:setupHack
adb kill-server
adb devices >nul
adb install tools/afr/app/stericson.busybox-1.apk
adb push tools/bin/goldcard /data/local/tmp
adb push tools/bin/1recovery.img /data/local/tmp
adb push tools/bin/2recovery.img /data/local/tmp
adb push tools/bin/psneuter /data/local/tmp
adb push tools/bin/fre3vo /data/local/tmp
adb push tools/bin/misc_version /data/local/tmp
adb push tools/bin/gfree /data/local/tmp
adb push tools/bin/flash_image /data/local/tmp

adb shell chmod 777 /data/local/tmp/goldcard
adb shell chmod 777 /data/local/tmp/flash_image
adb shell chmod 777 /data/local/tmp/gfree
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version

adb shell cat /system/build.prop |find "ro.build.version.release=2.3"
if "%errorlevel%"=="0" (call :andver23) else (call :andver22)

adb shell id -u | find "uid=0"
if "%errorlevel%"=="0" goto :skiproot

adb shell cat /proc/version | find "2.6.35"
if "%errorlevel%"=="0" (call :kerver23) else (call :kerver22)

Don't try to use his mod on your phone though cause it'll probably lock your phone.

this install superuser and golden card into a device... but I'm wondering whether or not the golden card works on any device or only for the inspire.

sleep 3
adb kill-server
adb devices >nul
adb shell cat /sys/class/mmc_host/mmc2/mmc2:*/cid > tcid
set/p cid= < tcid
del tcid
adb shell /data/local/tmp/goldcard -c %cid% -o /data/local/tmp/goldcard.img
adb shell dd if=/data/local/tmp/goldcard.img of=/dev/block/mmcblk1

adb shell /data/local/tmp/misc_version -s 1.31.405.6
goto :EOF
[HTC Vivid, Raider, Velocity] pside15:
I know it worked on many other devices previously but it seems like it hasn't been needed or couldn't be used on some newer devices.
[HTC Vivid, Raider, Velocity] Pirateghost:
i made a gold card last night for my phone
[HTC Vivid, Raider, Velocity] mohsinkhan47:
What is gold card?

How do you make one?

And what does it do?

Sorry if I sound like a noob.
[HTC Vivid, Raider, Velocity] Pirateghost:
http://android.modaco.com/topic/305672-creating-a-goldcard/

i will risk my phone to flash canadian rogers RUU on it tonight. ;)

see if i can goldcard, flash RUU, unlock bootloader at HTCDev.com

if it doesnt work, i call my att rep and get a replacement. LOL
[HTC Vivid, Raider, Velocity] arunp44:
Please forgive me if im wrong here, but just having a goldcard doesnt really do the trick right?

If im reading the aahk script correctly, its still using gfree to do the whole s-off scid thing assuming that the radio exploit still exists. for the inspire, there was a specific radio that had this exploit, but i can only assume that its patched in the radio that we have. i am assuming that the radio used for this [inspire] exploit, probably wont work on the vivid, right?

but hey, i guess its worth a try...

let us know how it goes pirate...good luck!

Edit: sorry i think i miss read ur post and jumping to conclusions... lets hope trying to change the cid to different carrier might work
[HTC Vivid, Raider, Velocity] mohsinkhan47:
I think ur right. Pirate let's hold out on it for a bit. Can you compare the radio files and see if we have the files needed to make it happen?
[HTC Vivid, Raider, Velocity] Wiingy:
Looking at http://htcdev.com/bootloader/ , it doesn't show the Vivid on it? What one are you going to use?
[HTC Vivid, Raider, Velocity] Pirateghost:
i dont think the AAHK used a radio exploit. the original way to unlock was create Goldcard, flash the PD98IMG to get generic desireHD RUU on, and use gfree to s-off

this was all i did on my inspire, i didnt use the hack kit.

im not sure, but i dont mind risking it at this point. i have already wiped the device and am willing to throw caution to the wind.

will let you guys know in a few hours. ;)
[HTC Vivid, Raider, Velocity] mohsinkhan47:
Pirateghost is taking one for the team lol.

You should get half of the price money lol
[HTC Vivid, Raider, Velocity] arunp44:
yep, i believe its just that the PD98IMG file had an older radio from DHD that gfree could exploit to get s-off (still have my inspire, and will prolly have ICS on there before my vivd lol).

but, yea if ur still under the 30 day return (and most of us are), why not, right :D
[HTC Vivid, Raider, Velocity] Pirateghost:
it doesnt show the raider either, but you can unlock the raider on there. you dont actually select the device, you input your identifier and it creates a bin you flash
[HTC Vivid, Raider, Velocity] GSLEON3:
I worked with Jockey on the Kaiser & TP windows Mobile "FrankenKaiser" Project. I am going contact him about this, but back in the day we modified a SPL to work as an engineering SPL on the Kaiser using WINMO Builder & Hex edits.

We also had some radio love using existing radios from compatible devices & changing the CID manually, signing it as HTC & pusing it to the device as an OEM diagnostic. I am still really new to Android, so I haven't played or decompiled much yet, but I'd imagine there is a way to push FOTA identified Engineering HBoot to device if it is correctly signed and identified.

I haven't talked to Jockey in awhile, but we worked well together, me with some off the wall ideas & his insight into firmware & how to make those OTW ideas work.

The file system for HTC still resembles what they were doing on WM, CWS_001, so maybe correct CID, with correct bit type identifier will allow flash as WM did.

Can anyone that has decompiled the HTCDEV unlock bin for any device upload it & give a brief of what they ssaw going on in there? What is it checking, where is it polling? Polling fvrom NAND? Or possibly from somewhere we can access and even temporarily write to using adb? If we can even temporarily change the identifier values, we may be able to then unlock via the same method as HTCDEV.

BTW, HTCDEV opens many doors, but is not true unlocked bootloader. It is a start though.

I know this is risky, but is there a way to force erease the HBoot? In some older HTC devices, you could use a terminal Emulator to force a wipe of the SPL memory points, which would then allow you into both DIAG & DLOAD modes, which in turn allowed you to flash an unlocked bootloader as long as you didn't reset. Of course if you did you were in big trouble.
[HTC Vivid, Raider, Velocity] pstevep:
Just jumping in to try and help a bit.

You guys do know that the HTC method of unlocking isn't really that cool. You can't have achieve s-off with it, and flashing kernels is a giant pain.. I'm in the evo 3D and we have to provide 2 sets of instructions for flashing things because htc didn't do this unlock the best way..

I like the idea above about potentially using htcs stuff against them, decompiling their binaries. But if your goal is s-off you will probably have to find a hole somewhere..

Someone may think about pming team win member agrabren, he was the original guy who found the hole on the 3D.. Or get him on twitter, he seems helpful, and he knows what he is doing..
[HTC Vivid, Raider, Velocity] Tx Redneck:
What, if anything, can I do to help here? I don't have the phone but have some decent pc hardware to "loan" for "number crunching" to find an exploit.
[HTC Vivid, Raider, Velocity] rpendrick:
These are from an Rogers HTC Evo 3D.

Not mine, will take down if anyone has an issue with me posting.
[HTC Vivid, Raider, Velocity] bjg222:
I've PMed quite a few people looking to drum up some interest. Haven't gotten much in the way of dev responses, but a few people who may be able to point me in the right direction.

I think the goldcard idea is worth a shot. I was thinking about that earlier, but I wasn't quite brave enough to try it! ;)
[HTC Vivid, Raider, Velocity] malickie:
Here is a question considering the HTC Raider's are basically exactly the same phone for the most part. Can't we go and find out where the Raider is getting the code from and figure out how to do the same with the Vivid considering everything should more or less be coded the same I would assume. Just a half idea no clue if anything like that would work or not.
[HTC Vivid, Raider, Velocity] arunp44:
well looks like the goldcard route is a no go. I created a gold card yesterday and tried flashing the Rogers RUU. It got to the updating signature portion and bailed saying that the cids dont match. I even tried with my Inspire goldcard, but no luck with that either. as psteve mentioned, we may need to ask some help from the evo 3d folks...
[HTC Vivid, Raider, Velocity] Pirateghost:
yeah, i came up with the same thing.
[HTC Vivid, Raider, Velocity] GSLEON3:
How about hexing the cid in the flash file before gold card?

I'm doing lots of reading, trying to get a handle on Hboot as it relates to older work on spl. Gonna take some take some time, but I believe it is worth it. The Holiday is the hands down best current device.
[HTC Vivid, Raider, Velocity] arunp44:
in the RUU file? dont think that would be possible right as it would change the signature?
[HTC Vivid, Raider, Velocity] doktor buknasty:
I saw someone in the marketplace selling a Riffbox JTAG Box. Here is the link http://xdaforums.com/showthread.php?t=1350134

Maybe this could help us?
[HTC Vivid, Raider, Velocity] mohsinkhan47:
Isn't this used to unbrick phones
[HTC Vivid, Raider, Velocity] Pirateghost:
It will not remain on reboot. This is not a question about method to get root, but to keep it. With the current bootloader method in place, system is reset on every reboot. You cannot bypass that with mere root. We need s-off/unlocked bootloader to bypass this problem.

Sent from my HTC PH39100
[HTC Vivid, Raider, Velocity] Tx Redneck:
If CID(carrier) lock was removed, would the htcdev unlock work? The error it gives is CID related isn't it?
[HTC Vivid, Raider, Velocity] GSLEON3:
Good News?!?!

Okay, the above OneClick DOES NOT WORK. NONE OF THEM DO.

However, I used to be a rockstar with MTTY and I am taking risks like crazy. I am decompiling the HBoot from several devices & scouring the SDK's & I was able to unlock a portion of the eMMC, 24Mb to be precis write to a section of NAND now. Not knowing all the possible commands makes this dicey at the very least, but I think I am on the right track. If anyone else has experience with decompiling bootloaders and understands commands, a second set of eyes would be great.

Please let me know if you identify any other interesting command possibilities. PROBABLY BEST TO PM ME, otherwise we'll have a bunch of bricked devices. Terminal to device can be very risky to those of you that do not understand firmware (lower level) like radio RBL, SPL, etc. So don't try anything unless someone trusted here posts it and at least two long time, knowledgeable XDA users confirm concept and the results.
[HTC Vivid, Raider, Velocity] mohsinkhan47:
So you decompiled the emmc and then what did you do lol
[HTC Vivid, Raider, Velocity] GSLEON3:
http://tjworld.net/wiki/Android/HTC/Vision/HbootAnalysis

This is a great resource for understanding hboot and connecting to device radio so that terminal commands can be issued.

As I started, I am new to Android, but not to spl, Ipl, & other low level firmware.

I am going to write an engineering bootloader like I did for many of you that had a bricked HTC Kaiser.

I am also gonna play with writing directly to the nand via terminal.

Once I get going, I am gonna try to brick my device by wiping the hboot. I believe I found an exploit, but it is very risky as it requires you to partially brick your device for a moment by reading unit while connected. It looks like it will then let you serious to nand, so you have to push new hboot to device. But, if it resets, you are totally screwed.

I advise all of you to read the information in the above posted link. Great reading for anyone interested in learning.
[HTC Vivid, Raider, Velocity] arunp44:
Thanks for the link gsleon3....it clears up some of the questions I had about the commands. dont have much experience with hboot, but will dig into this as well.
[HTC Vivid, Raider, Velocity] cyber_pete:
Has anyone seen this method that they are using to root the Nexus S used before? Anyway we can adapt it to suit our devices? Also will this work with a locked bootloader? Just trying to get creative at getting us all perm root:

http://www.xda-developers.com/android/perma-root-achieved-on-galaxy-nexus-thanks-to-superboot/

EDIT:

I PM'd the dev to see if he had anythoughts on helping us out.
[HTC Vivid, Raider, Velocity] ToyGUN:
I was wondering... Has anyone with the AT&T vivid tried unlocking the bootloader using a canadian htcdev acct? Think legal obligation

Or anyone try:-) the long remount script?

A seperate note.. when I ran the cw fix permissions in the cw recovery it prevented me from rooting. The fix permissions in rom manager worked well though.
[HTC Vivid, Raider, Velocity] Pirateghost:
its not about what account you use on HTCDev, its the CID that your phone generates/is tied to with the oem get_identifier_token command. i can unlock other HTC devices on there no problem, but not the Vivid
[HTC Vivid, Raider, Velocity] ToyGUN:
I realize that, I was just hoping because of the ruling against locked devices here would override the AT&T lock request in HTC's db for some reason. I know it doesn't seem like that would work, but I was hoping that it would cause HTC to generate a different code instead.
[HTC Vivid, Raider, Velocity] malickie:
Hmm is there anyway in hell to modify the get_identifier_token to make the Phone Think it is the HTC Raider. If there is then there should be no problem getting the CID I would think. Just an idea, no clue in hell how that would be done or what would be needed.
[HTC Vivid, Raider, Velocity] Pirateghost:
this is the angle i have been working. nothing so far.
[HTC Vivid, Raider, Velocity] jaxboater:
Tokens

Like someone else I copied my Token info to Notepad and I noticed that it was different every time it ran.

I wonder what would happen if someone ran a Raider's Token info while a Vivid was hooked up?
[HTC Vivid, Raider, Velocity] malickie:
Good to know :). I wonder if you are having trouble with it because we can't get anything except a Temp Root. If that is the problem than I assume we need Perm Root than we should be able to modify the identifier easier considering we would have full read/write access and it wouldn't change back on boot. Than again I am no dev, just throwing ideas out. Anyway good luck and hopefully either yall can bypass HTC or HTC unlocks this phone soon. Either way though I am keeping this phone considering it is smooth even without root and custom Roms which I really cannot say about many other phones. Actually can't say that about any of them I have owned (Skyrocket included).
[HTC Vivid, Raider, Velocity] markjo:
That's what I suggested at one point, but no one considered it.
[HTC Vivid, Raider, Velocity] travisxcore:
Nothing because the tokens wouldn't match up. The tokens are algorithms matching back to that device. So basically this token has to match back up to your device exactly before it changes again. If your token isn't accepted by the program then you can't unlock the bootloader or if the tokens don't match, then its denied. If you could some how change the vivid to output a raider token then you could unlock it but simply collecting and using another token won't work.
[HTC Vivid, Raider, Velocity] IanWizard:
I heard a rumor that someone was working on hacking the entire HTC unlock process, but I don't remember who.
[HTC Vivid, Raider, Velocity] GSLEON3:
Has anyone tried hexing a Raider HBoot with the Cingular/AT&T CID & then flashing as a Diagnostic? I'm on the road, so I haven't even looked to see if an OEM Raider Hboot is available yet, but I have done this on older HTC devices.

Yes, I know about signature, but it has been spoofed in WM, so maybe just a matter of modification.
[HTC Vivid, Raider, Velocity] Pirateghost:
the shipped RUUs contain the hboots. i have been digging around and poking, but not really knowing what i am poking at, at this point.