yashsingh1/xdaforums huggingface dataset:
[HTC Rezound] scotty1223:
the thunderbolt was cracked by taking advantage of an exploit in a pre-release radio that allowed wpthis to unlock the emmc.

since the TB is not doing anywhere near the sophisticated checks,all that was needed was to rewrite the misc image and downgrade to exploitable firmware,where the emmc was unlocked and the new eng/debug signed hboot written.

early TB rooters(especially those that came from an inc,evo,or similar) did not understand that their s-off was thru an overwriteable,unproteced enineering hboot,and not a secure flag turned off.as as such a few were accidently reS-ONed by running RUUs.

in order for anything unsigned to work,wed need to unlock the emmc,somehow,and replace the radio,hboot,and whatever else is checking for signitures :eek: and then everything we replaced from that period on would need to be modded to not check for htc sigintures .

what we really need is a way to turn off the radio secure flag. at that point it doesnt matter if files are properly signed by htc or not.

anyone try flashing unrevokeds "forever" patch in s-on unlocked recovery :eek::D :p
[HTC Rezound] scotty1223:
no time at all. root and eng s-off were achieved pre-release. on release day jcase/team andirc/android ploice released the downgrade/root method.
[HTC Rezound] mighty_markus12:
I see, was just excited to see you and jcase replying to this thread. Still not giving up hope.
[HTC Rezound] angryPirate12:
I tried it a few days ago, after I found it while cleaning out my system, so I downloaded the latest to give it a go.

It gets to "Verifying system type..." and doesn't move

using Amon_Ra 3.13
[HTC Rezound] con247:
probably because it is seeing you have ro.product=vigor and is trying to keep from bricking your ****.
[HTC Rezound] Kilch:
Yes, I am sorry. Didn't mean to create a flurry of responses like that. Sorry. Should have never borught up CM.

My bad. I do like the ROMS here. :(
[HTC Rezound] werdna87:
Would this work to get people who took the OTA and want to downgrade just their H-boot again? Cause if so, it would make obtaining root MUCH easier for both those unlocked and those not unlocked
[HTC Rezound] con247:
How is root hard? You go into recovery and root it. If you don't want to unlock, I think there is more risk with this than just unlocking.
[HTC Rezound] werdna87:
i mean 1 click would work again
[HTC Rezound] con247:
Are you unlocked on the stock rom? I am developing a 1 click root. (After unlocking it is one click)
[HTC Rezound] werdna87:
actually im not unlocked yet due to the fact i have been able to play with ICS on my S-off device :D
[HTC Rezound] scotty1223:
theoretically,it would. but there is not really anything(that i know of at least) to make it worth the risk since hboot 2.10 is not s-offable either.

also,youll need to find a new temp root exploit if you want to try it without htcdev unlock. :eek:
[HTC Rezound] werdna87:
oh i thought the unlock wouldnt matter because you werent flashing it the actual way anyways. So the only point would be to make the 1 click tools work again.

also im still H-boot 2.10 anyways :cool: because i want temp root in case i ever need it, but would like the radio and system updates
[HTC Rezound] scotty1223:
im not sure i understand you... you said you have an s-off device. you can do whatever the eff you want. you can run the new radio with the old hboot and old software or whatever.

you can install the eng hboot and fastboot boot a custom recovery into pone memory on any software to flash root files.

wtf do you need one click tools for? :confused:

id put on your flame suit,my good sir,as you may be in for it with your commnets about being s-off and needing 1 click tools ;)
[HTC Rezound] sabindaman:
I believe you are jumping to the conclusion that the that the s-off device and rezound are one and the same.
[HTC Rezound] con247:
Yeah he has 2 rezounds.
[HTC Rezound] werdna87:
this is correct. i just PM'd scotty about it
[HTC Rezound] phillybizzle:
Ill sacrifice my handset for the sake of science lol...just want.someone to walk me through the process on gtalk
[HTC Rezound] AtLemacks:
(Facepalm) I just sent mine in yesterday....
[HTC Rezound] phillybizzle:
I dunno if this is of any help...but i see you guys reference having HBOOT 2.10 and I have it...dunno if this is relevant or not.
[HTC Rezound] scotty1223:
that is indeed the assumption i made. ;) no harm meant or intended :)
[HTC Rezound] scotty1223:
not alot of relevance at this point,unless someone comes up with a potential exploit that we needed to check out. if someone figured out a way to s-off hboot 2.10 then phones like yours would be invaluable :)
[HTC Rezound] con247:
I also have hboot 2.10. That was the shipping hboot version. So we can downgrade 2.11 to 2.10 with the Evo Exploit assuming it actually works with the device.
[HTC Rezound] phillybizzle:
I have gone though 3 replacements, and the two previous ones always had 2.11 and changing the mainver was a *****. This most recent one I got was already at 2.10 and i didn't have to mod the mainver no matter if i flashed a GB kernel or ICS i never have to worry about it.
[HTC Rezound] mighty_markus12:
i know alot of people will be happy if we can get s-off. id do some testing but i cannot afford to brick my phone.
[HTC Rezound] mighty_markus12:
So really our chances for s-off arent lost then totally, right?
[HTC Rezound] con247:
Not fully lost.
[HTC Rezound] mighty_markus12:
Will the new ics hboot help or make things more complicated?
[HTC Rezound] scotty1223:
Knowing HTC,prolly more complicated ;)
[HTC Rezound] scotty1223:
Oops,double post :o
[HTC Rezound] con247:
Atleast we can downgrade it probably with the evo 3d exploit
[HTC Rezound] sabindaman:
Isnt there a temp root method for ics?
[HTC Rezound] scotty1223:
Yes... I'm sure we can. If I had a Linux computer and was comfortable with it,I'd roll back to 2.10 for S&Gs. Ive been following that thread.. they seem to be getting the bugs worked out nicely. I'm looking fwd to watching his video.
[HTC Rezound] con247:
Use a live CD
[HTC Rezound] werdna87:
What exactly will the e3d exploit let you push? Would it let you push a radio?
[HTC Rezound] scotty1223:
Most of em didnt seem to think that was the best idea. I think a few were gonna try it,so well see how it works out. I've got an old desktop I think I may put Ubuntu on and play with
[HTC Rezound] scotty1223:
To my basic understanding,the tool will let you access about everything,but I haven't read that thread very in depth
[HTC Rezound] con247:
It should. But the emmc recovery mode might not last long enough to reflash hboot and the radio.
[HTC Rezound] werdna87:
What about pulling the radio from an s-off phone and pushing that o.O
[HTC Rezound] scotty1223:
good idea,but its a little more complex than that. the radio secureflag is not actually part of the radio itself,but is stored in the radio nvram. i do not know if this is a partition the tool can access.

as you know,you can flash different radios or hboots on a radio s-offed device,aND s-off remains... its not attached to a particular radio or hboot image.
[HTC Rezound] SOGJC:
I'm dying to get home to try it. Can someone tell me if I need a different file for the Resound or I just use the one's in the thread?
[HTC Rezound] werdna87:
Would it be possible to pull it somehow?
[HTC Rezound] scotty1223:
the ONLY universal file is the brick recovery tool. the rest of the files need to be rezound specific. the general consensus is that the eng singniture

will

brick your phone,so id prolly not reccomend trying that. if youre just wanting to try and roll back to old hboot,let us know how it goes. contact con247 for some additional advice :)

im guessing not,but i dont know that for sure. unfortunately,this is why patched hboots exist,and why revolutionary installs them on most phones its able to root,rather than permanent nand unlock. the radio secureflag is extremely difficult(at best) to access on these locked down,newer phones. :(
[HTC Rezound] angryPirate12:
IF i had a backup phone, i would happily do the proof of concept. The procedure isn't all that difficult to do, just highly risky.

But fortunately I'm in talks to score me either gently used Gnex or Transformer Prime around $400 or less for each, so if talks go well and I have the Gnex, i'll give it a go, just don't hold your breath.
[HTC Rezound] scotty1223:
ive got a very lightly used gnex(bout a week) id be happy to sell you for $400 if it falls thru :)
[HTC Rezound] angryPirate12:
lol I appreciate it. My buddy wanted to keep the Prime and sell the Gnex, so I made a little wager on a game of beer pong yesterday (i'm god awful at it) I was able to score it for $325 and I have to install some sort of linux on his Prime. I told him I'll have something ready Wednesday or Thursday, that's when I'll be able to test this theory for the Rezound.
[HTC Rezound] con247:
If you want to test the hboot downgrade ill help you out... but I will not take part in attempting to flash that ENG hboot because we 99% know for a fact it will brick even if it gets successfully flashed
[HTC Rezound] mighty_markus12:
will anything they are doing with the evo3d help us rezound users at all?
[HTC Rezound] con247:
It might help us to force flash an hboot but if it isn't signed it will brick. So basically a Release signed ENG hboot needs to be leaked.
[HTC Rezound] mighty_markus12:
so all we need is a sneaky htc employee! ;)
[HTC Rezound] :
Hi everyone, I am a MOD over at MDW, some of you may know me......

I have been following these threads...

Are we sure that this will brick even if the eng hboot is flashed?....I mean has anyone actually tried this? Yes, I know that they are signed differently but......do we know without a doubt that it will brick?

I would most definitely try this if I had a spare Rezound or other device. Plus we technically have a universal way to unbrick if things go fubar....right?

Thanks....

Sent from my HTC Rezound using TT
[HTC Rezound] con247:
No, there is a chance it would work. Very low chance, but nobody really wants to try it.

About the unbrick, again, somebody has to try it. It might not go into eMMC recover mode again to reflash a signed hboot.
[HTC Rezound] angryPirate12:
i wasn't planning on using the ENG hboot we have, not initially at least. Proof of concept first, experimentation later. I'm going to start getting everything ready later tonight.
[HTC Rezound] graymonkey44:
This may be a stupid question or may have already been posted, but if a dev bought a true s-off Rezound, would it be possible to get all rezounds to get s-off? Through reverse engineering or something?

This guy's selling one.

http://www.youtube.com/watch?v=P060aKs0fZ4
[HTC Rezound] Andro X:
No. We need a specific hboot like con said a few posts up.
[HTC Rezound] scotty1223:
oooh i just offered him my galaxy nexus,i hope he takes it,or at least will still sell it. now dont yall screw this up for me,lol.

on the hboot... i recieved a PM stating that he had some "really old ass firmware" :eek:

what does anyone think about flashing the eng hboot,then restoring the phone with pre-release firmware? pre-release test firmware should not be signed with the release key,right? i tweeted that notion to jcase,and he has not responded with wether he thot it to be a good or bad idea.

after that,it *may* be possible to update the rest of the rom/fimrware to something newer once it is a working,functional device.

angrypirate,if you try this ill definately throw a lil support your way. :) lookin fwd to your findings.

im currently lookin for a cheap laptop i could throw ubuntu on. even if the emmc rescue wont help us s-off the rezounds,i have a dead merge it may help me resurect :eek:

edit

another thot that i had...

what if we flashed the eng hboot,booted it to bootloader,and then were able to turn off the secure flag prior to booting the phone or even flashing any other firmware? as long as the phone isnt booted,you could definately fastboot flash a signed hboot back to the device before turning it on and bricking it. if we actually were able to turn of the secure flag,and possiby superCID and debrand it,then s-off would remain after the signed hboot was reflashed.

i realize that if turning off the secure flag was successful,it should boot fine without brixcking,even with the eng hboot in place,but reflashing the signed one would defaintely eliminate some unknown variables

your thots? :)
[HTC Rezound] con247:
If you flash an HBOOT that it doesn't like the signature of, it won't even boot hboot.

Everything I have said in this thread is what I currently have deduced from reading about android for 1.5 years. It is possible that I am wrong, but I believe I am correct and I would much rather not have people bricking their devices left and right.

We do have a pre-release hboot also.

It is version 2.05 and should be signed with release keys. I attached it and the MD5 of the entire zip file is:

810B6D85465E1966EF4B51CD4718A530

The MD5 of the hboot inside is:

52116E39BA163B5C9EC1C726E7DA7FEF

I have no idea if that hboot is viable or s-off exploitable.

One strange thing I noticed was our ICS leak that came last friday or whatever, has MR2 in the hboot name instead of CRC. IDK... maybe someone on the older firmware still should try flashing it... I am not sure if it will agree with the new leaked firmware since the partitions are different.
[HTC Rezound] AshtonTS:
If I were to try flashing this, what are the odds that I will get a permanent, unfixable brick? And also, what ROM should I be running? (GB or ICS?)
[HTC Rezound] con247:
which one? the 2.05 hboot? Not sure. Probably pretty high.

What really needs to happen is someone who is gonna do an insurance claim for their phone anyway that can still boot it should try it. That way if it bricks it is no loss to anyone.
[HTC Rezound] localceleb:
great idea...
[HTC Rezound] angryPirate12:
Proof of Concept - dry run steps

I am having trouble gathering the required RUU zip files. The "[ROM]Vigor Shipped ROM Collection" thread link only has 2 firmwares. I never paid any attention to our different leaks so i'm not familiar with which leak brought us hboot 2.11 or anything else, I just know 3.11 is the newest, so I need educated on which ones to download (non rooted releases). Thanks in advance.

to be more specific i need:

1.) RUU with hboot 2.10

2.) RUU with hboot 2.11 older than release 3.10/3.11

3.) RUU release 3.10/3.11

after that I just need to extract the 2.10 hboot.nb0 and i'll have all files I need
[HTC Rezound] con247:
What are you gonna try to do? I can upload all known release hboots into a zip tonight for you. I have all the ruus
[HTC Rezound] gramsey1911:
My s-off rezound came with 2.04 hboot
[HTC Rezound] killahrey:
Yours is completely unsigned though ;) No risk of failure anywhere for it.
[HTC Rezound] angryPirate12:
Firstly I need to prep my device, i never bothered to update my hboot, I always waited for the ROMs to come. So first thing is to update my hboot to 2.11. I was initially thinking of just using full RUU.zip's, so that my whole device is set to that firmware. By taking that method, i would need to flash a middle of the road firmware so that I can still attempt the 3.10/3.11 firmware flash. Then obviously through the downgrade process flash 2.10.nb0. After that just flash a firmware that doesn't contain hboot, boot.img, radio's, etc as to not negate the downgrade process.

Obviously that is an over simplification, but if you think we can get away with just using hboot.zip's only then i'm all ears. Only thing that is certain is the 2.10.nb0 is required to make the downgrade happen through emmc_recover.
[HTC Rezound] con247:
Honestly I think you should try to downgrade 2.11 to 2.10 or the 2.05 I posted. If that works, then maybe we should give the eng hboot a shot. It has to be tried before we will know for sure if it works or not. But a device already attempting an insurance claim should be the one to do it.

I have an exam till 7:30 eastern. If you are gonna try tonight I would like to get a play by play on gtalk or something.
[HTC Rezound] angryPirate12:
It won't be happening tonight, I won't be getting my Gnex till middle of the week, most likely Wednesday if my friend doesn't get tied up. When I got my back up device, I will donate my Rezound to dev community's experiments, starting with this downgrade test. Over the next few days it's all about prep work to get my Rezound ready and to go over the procedure steps to make sure it goes as smoothly as possible.

If you think that 2.05 hboot will flash fine then all I need to do is start the brick process with hboot 2.11 then use the 2.05.nb0 to downgrade from my 2.10. Will take half the prep work away. I'll still need to change my mainver though.
[HTC Rezound] con247:
Yeah that should work. There is a flashable zip linked in my sig that will drop your main version when you install it.
[HTC Rezound] Land Master:
Wow! Very excited to watch the development here. Thanks AngryPirate for your contribution and Con for adding additional knowledge.

I'm sure I'm not alone in offering you the utmost amount of encouragement and will certainly follow with some $$$

Really hoping that

WHEN

:) you are successful this will work for the HBOOT in the new firmware.

For clarification, is the first goal simply to insure that we can downgrade and then you will attempt the unsigned Eng HBOOT?

THANKS!
[HTC Rezound] angryPirate12:
Downloaded it, and grabbed the 2.05 hboot. Only thing I need now would be a ph98img.zip with a 2.11 hboot to start the brick process.

---------- Post added at 04:18 PM ---------- Previous post was at 04:07 PM ----------

That's right, this should prove to be an interesting week
[HTC Rezound] con247:
I will upload a ph image of the January ota that will allow you to brick when I get home tonight.
[HTC Rezound] Land Master:
You may have thought about this but have you considered taking out a square trade warranty on the test device?

I'm remaining positive but "just in case" I doubt they would even ask any questions and would probably send you a new device if the "brick" turns out to be too permanent.
[HTC Rezound] con247:
Let me look into that and Ill post the info here. If we can get people to put up enough money to pay for the warranty and deductible, I am sure someone would do it. (Not me, I can't be a day without the phone.)

So it would be $70+$100 for the deductible and the phone has to be <30 days old to purchase it.
[HTC Rezound] Land Master:
WOW $100 deductible. That Sucks. The <30 days thing strikes me as odd. How would they prove it? They offer warrantees on Ebay purchases so I would think if you could somehow prove you purchased it "recently" you could get it through their system.

Either way thanks for the info and I agree that there should be enough $$$ in this endeavor to cover the costs.

Edit: and BTW I was initially talking about Pirate's phone but maybe someone else want's to offer their lamb to slaughter.. lol
[HTC Rezound] angryPirate12:
No need for donations or compensation, I'm not worried about turning my phone into the worlds most technologically advanced paper weight. I got my Rezound for a penny from amazon on black friday. I have no money at all invested in my phone, therefore when I get my Gnex this week, I have no qualms over using it for progress. Besides, if it hard bricks it'll give me something fun to try; make a JTAG for the Rezound, if possible.
[HTC Rezound] scotty1223:
im fairly confident that you wont brick it. in a worse case,youll use the recovery program to restore the same hboot that you have now,and the downgrade will fail.

i dont think that we need to make it too complicated. if youre on hboot 2.11,just run the RUU for 2.01.605.11,then try and downgrade to shipping fimrware 1.00.605.3 with hboot 2.10

i do not believe you will be able to boot the phone by just flashing hboot 2.05,youll need to flash that matching whole RUU after. the s-on hboot will not let you flash an unsigned .zip file thats missing its hboot to finish recovering the phone.

so the files you should need:

-ruu for 2.01.605.11

-ruu for 1.00.605.3

-hboot 2.10.0000

-hboot 2.11.0000(just in case ;))

-emmc recovery program
[HTC Sensation] sano1:
Hello folks!

First off I hope this problem hasn't been posted previously since I searched and couldn't find it.

I have on my HTC sensation the Android Revolution _HD-Sensation_3.6.11 or 3.6.2 I for some reason have two on my computer and can't remember which one I put in. The phone's HBOOT is 1.17.1111 and I can't remember when I put that update in either. My concern is that I want to update the software as I'm noticing some issues with the phone again and so downloaded the Android Revolution HD 6.5.1 for HTC Sensation from here: http://xdaforums.com/showthread.php?t=1098849

Upon putting said zipped file in SD card and going into bootloader it t says the message above: "Loading...[PG58DIAG.zip] No img" and below that: "Loading...[PG58DIAG.nbh] No img or Wrong img" It repeats like that on the screen. I remember having this issue before as well when I updated the phone last, so I downloaded, as I was instructed to, "PG58IMG" and mounted it on the SD card. It fixed the problem then, so doing it again this time it didn't fix the problem for me. First off, I hope I have the correct ROM as trying to search for the updated version of the ROM I have I was unsuccessful in. So then I decided let's do this since it has ICS. I appreciate any and all help. Thanks in advance.
[HTC Sensation] azzledazzle:
Are you running the latest firmware ? 3.32 is needed for ARHD 6.5.1

Also, you said you where using [PG58DIAG.zip] It should be PG58IMG i think you maybe using the wrong file,

Im still a noob, i only had this sensation 2 days so i maybe wrong.
[HTC Sensation] gol_n_dal:
HBOOT 1.17.1111 will work with GB ROMs but not ICS ROMs.

You need to flash the appropriate firmware and as stated PG58IMG.zip is the correct filename on the SDcard. After flashing pop out the card while it boots up reinsert the SDcard and delete/rename the PG58IMG.zip file.

Look in http://xdaforums.com/showthread.php?t=1459767 for the firmware. I've seen folks posting problems with the most recent firmware but haven't followed them.

I guess Mike's ARHD thread should have firmware in it with some guidance.

+1
[HTC Sensation] Locheed:
Here is an excellent noob friendly guide from joaquinf. It's made for ARHD 6.5.1. It has all the steps to upgrade Your firmware to 3.32 and flashing ARHD 6.5.1 / 6.5.1 xe.

http://xdaforums.com/showthread.php?p=21989107
[HTC Sensation] sano1:
Good sir or madame?, thank you quite very much. I have visited the link and it all seems quite easy. I also understand the mistake I have made. I will be working on the flash possibly tomorrow when I have more time at hand to do it all. I also appreciate your feedback along with the link.
[HTC Sensation] gol_n_dal:
GL

blah blah (10 chars)
[HTC Sensation] sano1:
One last question if I may, I noticed on the threads that there were apps and even built in features which would back up my phone, including my sms text messages. Now I'll follow the advice on the thread and remove sim card for the just in case (but since all contacts are synced to Google account it won't matter), what I really wanna back are all my text message conversations, not even so much the apps themselves as I can always re-download them later on. I want to back up my music playlist as well if it's possible at all. I know I'll have it all on my SD card, but the playlists are all on the phone itself and that is what I really want to back up. I thank you all once again for all the feedback as well as the help provided, wish me luck for I'll be at it tomorrow.
[HTC Sensation] gol_n_dal:
There are two main backup methods:

1 Nandroid Backup/Recovery. You do this via your recovery, e.g. CWM. This is a whole phone backup.

2 An app like Titanium, with this you can backup and recover apps and their data individually. If you go down this route DO NOT restore any system apps if you change ROMs as it'll cause problems. Restoring your downloaded apps and data is fine. You can "probably" restore some system data, like SMS. Before you recover any system data DO A NANDROID BACKUP first so if it screws up anything you can just restore the phone to its previous state.