yashsingh1/xdaforums huggingface dataset:
[HTC One X] BenPope:
What are you on about? Cryptography is mathematically sound. The algorithms are also open. There are open implementations of the algorithms. We use them every day. Ever connect to google or facebook servers? Notice how they redirect to the HTTPS site? Open encryption standard, open implementation. Much of which was derived from research funded by the guys that fund "army research".

Security through obscurity is likely to fail; there is far less peer review (by definition), so a much higher chance of having a mistake somewhere along the line and some clever dude finding an exploit.
[HTC One X] Luk_Sch:
I can't help you guys, but i thinks it's really great how much time you put in getting S-OFF for this little beast. :)
[HTC One X] Erik Lieders:
then read this http://www.elicenser.net/en/home.html - closed non-hackable system
[HTC One X] Evil-Dragon:
May I state that those who say something is 'unhackable' are often the ones that get hacked and shamed. Code & Hardware built by people is flawed and open to exploit regardless of how many levels of security a product is claimed to have.

Sure some products take years to break but they are not 'unbreakable' nothing truly is.
[HTC One X] Erik Lieders:
Sure some products take years to break but they are not 'unbreakable' nothing truly is.[/QUOTE]

Agreed 200%. what HTC phone has most complicated security?
[HTC One X] glukosio:
i remember that leo hd2 at its time had new unhackable security system... in few month it became the most modded smartphone ever
[HTC One X] DarkMio:
Agreed 200%. what HTC phone has most complicated security?[/QUOTE]

Motorola has one of the most complicated security mechanisms.

While the droid-series with the American Motorola phones were free, flashable and stuff, Motorola locked the rest of the world out.

I remember my old Milestone, which had a securitymode inside of the CPU, which got hardcoded a check for the bootloader, this checked the kernel. So, it was a security chain which we couldn't break, since the CPU refused to do anything without a signed bootloader.

You get the idea, right?
[HTC One X] joll200x:
That's nowhere near relevant to anything we're looking at. That's a digital DRM system and DRM is certainly 'hackable'. Can we keep things positive / relevant?
[HTC One X] Dubhaltach:
Leo... Unhackable? O.o HSPL and you're flying!
[HTC One X] iwanrakic:
Ok, I'm not sure if this could help, but some guy at gsmhosting.com claims that he can change CID of S-ON HOX...

Here is the link:

http://forum.gsmhosting.com/vbb/f634/htc-one-x-any-operation-1493650/#post8524366/
[HTC One X] Cristianop:
Interesting
[HTC One X] Thunder07:
nowhere does he talk about CID and IMEI is a TOTALLY different thing
[HTC One X] Rekoil:
Most likely talking about the HTC One XL, but if someone has an account on GSM-hosting forums it couldn't hurt to contact him about it.
[HTC One X] fezza:
he does, read a little lower in the thread. anyway I've asked him for more info, it's probably for the XL though.
[HTC One X] nikorette:
Devs working on soff should take a look at this app pulled from 2.05 test ruu

http://xdaforums.com/showthread.php?t=1728541

com.htc.android.ssdtest

Got some stuff that may be useful.
[HTC One X] KLUVJ:
A 68 mustang?
[HTC One X] LlabTooFeR:
Useless test stuff :)
[HTC One X] nikorette:
Ok fair enough just trying to help. Another user mentioned in that thread that flashing the 2.05 RUU unlocked his bootloader from a locked state. I am sceptical of his statements but havnt asked him further maybe one of you more technical minded guys should. Might be a good starting point
[HTC One X] LlabTooFeR:
Well, you can't flash 2.05 RUU on s-on device, only on s-off. So that user is lying...
[HTC One X] xmoo:
Also the test RUU has a insecure boot.img But I don't know a lot people having the real 2.05 RUU ;)

So has to be BS
[HTC One X] Evil-Dragon:
Football is the only real person i know that has it on here.
[HTC One X] pewpewbangbang:
Some dude in q&a forum had supercid 1111111 or whatever after relocking bootloader and junk. Not sure if he is s-off be he's relocked. He's sending it back in for warranty
[HTC One X] mdeejay:
i can confirm it :cyclops:
[HTC One X] Synoptex:
Hi. Are you back with us on HOX from HD2?
[HTC One X] glukosio:
sorry me, guys for this little off topic but i've got a question: if i unlock bootloader with htcdev, and then i'll relock it, on hboot will be wrote "RELOCKED"... when someone will find a way to s-off our hox, will it be possible to have wrote "LOCKED" again, and with it to have again warranty?
[HTC One X] N3m3515:
yes will be possible but htc will know you unlocked because you have registered your phone to the htcdev website. so your warranty is gone
[HTC One X] KrisPerry:
But how can they prove that you actually used it
[HTC One X] KLUVJ:
lol, they cant, but you had every intention to

Sent from the Best phone in the world. SOON TO BE BETTER
[HTC One X] glukosio:
but can't i cheat htcdev and register a fake or something else?
[HTC One X] Super-Veloce:
but if HTC generates a code at htcdev.com..

maybe someone could make a keygen, like keygens for games/software on pc :P

but S-OFF is better?
[HTC One X] Evil-Dragon:
Yeah, just hack HTC and get at their unlocking generator. Should be simple. Seriously though if it was that simple just to cheat Htcdev then we'd all do it. This is not helping s-off development.
[HTC One X] ingFu:
Nvidia has published the Tegra Driver Package, supporting Tegra 3.

http://developer.nvidia.com/linux-tegra
[HTC One X] EclipseX:
About the warranty. I already send HTC phones unlocked and they never Said no to me. Ive send HTC hd2, HTC diamond and HTC Desire z.
[HTC One X] P1n3apqlExpr3ss:
Just released? If so it's interesting that they made it public just before Google I/O, Nexus tablet with T3 and 3.x kernel here we come
[HTC One X] Dav3y001:
When you use that code to unlock you can't exactly lock it again without HTC noticing, the bootloader will say re-locked. In short we don't need the key but more an exploit using the phone itself. Also its not true s-off
[HTC One X] SvenSSSvensson:
HTC-Dev clearly states that warranty is not removed, but may be limited if the fault is clearly related to the unlocking part. After reading this I will unlock mine.
[HTC One X] lostunsunghero:
Would this contain the driver that allows APX mode? If so we are that little bit closer to S-off. Good find.
[HTC One X] BenPope:
I don't think it will contain anything we don't already have, just newer versions.
[HTC One X] kb0n:
No, released months ago. The latest Update was June11 with just some fixes, no exciting additions.

Drivers etc. should be provided by this package: http://developer.nvidia.com/tegra-android-os-images (download here from list: http://developer.nvidia.com/tegra-resources).
[HTC One X] KrisPerry:
Add this to first post
[HTC One X] xmoo:
How would this help to gain s-off?

Problem is HTC Security not Tegra3...
[HTC One X] xmoo:
Guys, just a quick update.

I'm busy for school till next wednesday. Then i'll be back.

Will share some files, so others can test aswell.

Meanwhile I see the chineese guy even unlocks One X, One S, One V and One XL.

Still don't know how.

http://item.taobao.com/item.htm?id=10824156715
[HTC One X] GabrielSousa:
and he dont share the info ?
[HTC One X] xmoo:
Don't think so, he will loose customers if he does that ;)

Some weird stuff regarding HBOOT.

I've seen some different stuff.

ENDEAVORU PVT SHIP S-ON RL

ENDEAVORU PVT SHIP S-OFF RL

ENDEAVORU PVT ENG S-OFF RL

ENDEAVORU XE ENG S-OFF RH

ENDEAVORU PVT MFG RH

ENDEAVORU XE SHIP S-OFF RH

ENDEAVORU UNKNOWN ENG S-OFF RH

What is the difference between PVT or XE

What is the difference between RIL or RH
[HTC One X] vincenzo697:
From my undrstanding it can be like:

RIL / RH, radio related which RIL haves the library to support it but RH doesn't

S-OFF / S-ON, security related (wish to had S-OFF :-) )

SHIP / ENG / MFG, ROM for Carriers and HTC for Testing and develop (Software)

PVT / XE, PVT-ROM for Retail use and XE for Testing and Improving Hardware( probably for HTC and Nvidia)
[HTC One X] WiZARD7:
Would it help, if we pay him, to S-OFF your (or some others) phone?

I think we could collect this 200$...
[HTC One X] nitsuajd:
200.00 CNY	=	31.4284 USD

Chinese Yuan Renminbi	↔	US Dollar

1 CNY = 0.157142 USD	1 USD = 6.36368 CNY

:p
[HTC One X] xmoo:
He needs to have your device. It's not remote s-off.
[HTC One X] WiZARD7:
:(

sorry, google translate wrote $200....
[HTC One X] Erik Lieders:
therefore i can assume that he uses some hardware...
[HTC One X] WiZARD7:
or just want to keep his info...

maybe we can contact him, and try to buy the device/info?
[HTC One X] ChriKn:
Not necessarily, but just sending a how-to to make it at home would end up on the Internet and make him stop his selling activity...

Sent from my potato with xda premium
[HTC One X] xmoo:
Indeed.

This has been discussed before, and did not get us anything. So let's stop talking about this.

This could be true. See the XE here, has HTC Loggin Tool.
[HTC One X] vincenzo697:
i dont think for a person that knows or even made the S-OFF for HTC ONE X, is so stupid to give us info about it...Moneyyyyyyyyyyyyy!!!!!!!!
[HTC One X] glukosio:
i've got ENDEAVORU PVT SHIP S-ON RL, but not RIL, what does it means?
[HTC One X] xmoo:
Should be RL, fixed it.
[HTC One X] GabrielSousa:
We could contact and ask if he could do remote
[HTC One X] johncore:
Please can we stop talking about the Chinese. We've gone over it a dozen times in this thread, unless they have a white card they aren't giving s-off, and if they do, they're not talking.

Most of the Chinese shops are using HTCDev, as we've found every other time that it's been discussed.

Enough.
[HTC One X] cwibel:
Warranty

Hello,

When S-OFF will be possible, can we have a warranty, or unlock with htcdev entirely rule it out?
[HTC One X] GabrielSousa:
Sorry... I'm just saying because I don't see soff here soon
[HTC One X] bigpp85:
We never see s-off without HTC private key. Never ever
[HTC One X] glukosio:
unlocking with htcdev will erase part of warranty, and it will be for ever because the hox will be registered in htcdev and even if you will have wrote LOCKED in hboot, warranty is gone
[HTC One X] Evil-Dragon:
Yeah, it's not like other HTC phones have been made s-off without the private key. I guess we should all give up now *sarcasm*
[HTC One X] cwibel:
Surely will be a possibilty to go back to S-ON and I thought, that maybe will be also a possibilty to delete in some way information about unlocking with htcdev. Thanks and FORZA ITALIA! :)
[HTC One X] xmoo:
Cool but has nothing to do with S-OFF.

But the HBOOTs on the One X and One XL have a barcode menu.

I have seen it on older devices, but the one from the One X/XL also shows the actual barcode.
[HTC One X] gffmac:
I also get the barcodes when you select the barcode entry in hboot on Endeavor.

Edit: Sorry thought you were saying we didnt get the barcode.
[HTC One X] teky:
If S-Off is achieved then there probably would be a way to S-ON the device again.

If your phone is unlocked with htcdev then your phone's serial and info are then on HTC's SERVERS; you copy code from your phone into the htcdev site, the code will be linked to your phones serial number. your phones serial will then be logged (and probably saved for future reference) in their servers as having the bootloader unlock code being requested. This cannot be undone.
[HTC One X] Alex240188:
Yes but with soff you can change to locked not relocked. So even if you have requested a code from htc dev, phone will show as it hasn't been used
[HTC One X] DarkMio:
Soff lock, unlock, relock. Done. :D

Ruu is the key for locking. Then you unlock again. And relock it.
[HTC One X] danlat1415:
I sent my phone back for repairs recently and HTC give you a sheet to include with your return. The 3 exact same barcodes are at the top of the letter (obviously relevant to each phone).

Not really relevant but just wanted to mention it
[HTC One X] rjvrijn:
Warranty is not gone. Stop hoaxing about that too. 'it MAY void warranty, if the problem is related to unlocking'
[HTC One X] ChronoWerX:
Have someone test this?

Root on locked phone can be help us

http://xdaforums.com/showpost.php?p=27899517&postcount=121
[HTC One X] Evil-Dragon:
This thread needs this:
[HTC One X] Whiskey103:
Agreed, stop talking about waranty!!

Its a "how to get s-off" thread!!

Please stay on THAT topic.

Cheers

Whiskey

Forum Moderator
[HTC One X] orb3000:
.

Ok guys/gals, final warning please stay on topic and respect other members.

Ban may come visit you very soon...
[HTC One X] xmoo:
This has been discussed a million times...

Only works with Qualcomm chipset!!

Will do a huge thread update tomorrow, so people who don't read, keep there mouth shut!
[HTC One X] orb3000:
.

Thanks for that!

And please if you have any issues or complaints let us know so we can take action, this thread has been flagged as problematic and we are doing our best to help to keep it clean and on topic.

Users, we really count with you on this!
[HTC One X] Sentinel196:
I suggest that perhaps this thread should be moved to the Development section rather than being labelled as a discussion thread.

At the start it was a brainstorming session where any idea was a useful one, but now we have some clear direction, and a list of potential leads, as well as a list of things we know do not work, so it is less about brainstorming and more about pure development using the leads we have attained.
[HTC One X] xmoo:
Thread updated!

-What has already been done?

-What HBOOT status have we seen so far?

-HBOOT dump

-How does HTC do it?

Change thread from Developement and Discussion to Developement only.

Tell me if I'm missing something here.

EDIT

Visiting someone with a s-off device next wednesday
[HTC One X] godutch:
this guy has supercid but is s-on maybe his phone could be useful? http://xdaforums.com/showthread.php?t=1729377
[HTC One X] xmoo:
I have seen it. But want to try on a s-off device first.

Cause if the files get uploaded here, and they are no good.... it could brick a lot of phones.
[HTC One X] Dubhaltach:
Guy with proper apx mode up a few threads.

http://xdaforums.com/showthread.php?t=1736147
[HTC One X] Evil-Dragon:
It appears that this phone is bricked which is why it's booting into apx mode. It was the same with qualcomm devices when they would get partially bricked they would go into qualcomm dload mode. The good news however is that the apx mode exists from that thread and that is a good thing. I think I know why nvflash won't talk to it, he needs an up to date version that supports Tegra 3, chances are his version is a Tegra 2 version.

EDIT: also there is a chance he needs the sbk to do anything with it.
[HTC One X] KrisPerry:
Is there anyway to force or simulate this bricked state in order to trick the phone into apx mode
[HTC One X] ShyamSasi:
Still we need an updated nvflash that works on T3. :(
[HTC One X] KrisPerry:
I thought we had one
[HTC One X] Evil-Dragon:
The forced method is to stop your phone while trying to flash something like a hboot. Probably perm bricked after. The other way is still trying to be found.
[HTC One X] KrisPerry:
Although if you can enter apx mode then it won't actually be perm brick since we can then flash something else. Assuming nvflash works etc
[HTC One X] Evil-Dragon:
Chances are you'll need the sbk to do anything with nvflash, that includes flashing.
[HTC One X] KrisPerry:
Is that the same key that HTC use to sign their ruu or is this something completely different
[HTC One X] kupijaj:
I did it on my wife's box. It is working i can go into system files
[HTC One X] Rekoil:
SBK is something entirely different, it is seemingly generated from the CPU serial number.
[HTC One X] KrisPerry:
And how crackable is it
[HTC One X] Rekoil:
It is likely to be a simple algorithm using the CPU s/n as seed.
[HTC One X] xmoo:
It also could be because the battery is empty. Just like the old WM phones.

http://xdaforums.com/showpost.php?p=27991492&postcount=15
[HTC One X] wineds:
Or maybe it is triggered when the battery drops to a certain voltage like say 2 volts?

Someone would need to crack open their hox and substitute

the Battery with a variable power supply to test this...
[HTC One X] shook187:
Just a note guys, the Evo Lte now has s-off.
[HTC One X] gffmac:
Which is not a tegra 3 phone.... so no use.
[HTC One X] tids2k:
If its about SBK it can be generated here

http://vache-android.com/v1/index.php?site=sbk
[HTC One X] kazgor:
maybe not.. but surely the method of attack could give some idea's. or atleast rule them out. just because it not the same shouldn't mean we can't learn from whats been done.
[HTC One X] Rekoil:
Holy **** that was fast! Correct me if I'm wrong, but the EVO 4G LTE was the last of the One X-like devices to hit the market right?
[HTC One X] Diamondback:
Please stay on topic guys...Do we really need to clean this thread multiple times per day?
[HTC One X] Mr. Clown:
I just cleaned tons of offtopic posts. STAY ON TOPIC.

You have been warned.
[HTC One X] fi3ry_icy:
not a very tech savy person..

but i was wondering...

has anyone tried to datamine or analyse the datastream of the official method to get s-off via htc dev..? (if it is possible at all that is)
[HTC One X] miniudavid:
I thought about it too.. But I was told its useless.. It was told that they got the file that is comming and that it could be replicated. But only for that one specific phone. I thought about taking those cookies plus the imei's of some users maybe calculate the algorithm.that HTC is using.. greetz
[HTC One X] Squirrels:
HTC-Dev != S-Off.
[HTC One X] N3m3515:
I mentioned that in my last post. My hox is also searching for files in hboot
[HTC One X] Polarfuchs:
You can achieve the same if you are in hboot, have your usb cable pluged in.

Then simply select fastboot, reboot and hold down "vol down".

You will get the same.

"Cheking Sd Card update"

"SD checking...

Failed to open usb master mode

loading HTCUpdateZipName image ...

Failed to open usb master mode"

"please plug off usb.
[HTC One X] c4b4l3:
if you plug usb key on phone usb?
[HTC One X] Polarfuchs:
You mean an usb drive? I don't have cables for this.
[HTC One X] c4b4l3:
look at this http://xdaforums.com/showthread.php?t=1607039
[HTC One X] Polarfuchs:
Yes I understand, but I have to order an OTG cable first.
[HTC One X] empyyy:
I'm ALWAYS getting that when booting into bootloader.
[HTC One X] Polarfuchs:
If you select fastboot, it shows "fastboot usb" when the cable is pluged in.

If you select fastboot, it shows "fastboot" when no cable is pluged in.

I only get the sequence shown on my picture, when the usb cable is pluged in and booting into hboot.

If I boot to hboot without usb cable, I dont get the sequence.

.----------------

Pressing and holding vol down while it booted up only got me into protected mode
[HTC One X] c4b4l3:
if you place a file at the top (root) level directory of your USB key and HBOOT will automatically find the file and flash its contents??
[HTC One X] schriss:
What about fastboot boot command? If it works now, doesn't it mean we can boot any piece of code we want? like booting CWM instead of stock recovery for example? If yes, what else could we boot, to possibly exploit it?
[HTC One X] wtfhax:
I'm sorry but that is just a normal hboot sequence we used to create goldcard to downgrade. Back in my dhd days it will search for PJXXIMG.zip in th sdcard but knowing H1X doesn't have external sdcard maybe it cause the hboot not recognizing the sdcard displaying the error mentioned in the picture. I might be wrong about the usb thing.
[HTC One X] Polarfuchs:
Is this in any way useful?

From page 18

http://www.sourceconference.com/publications/bos12pubs/android-modding-source.pdf

And has anyone yet tried the USB OTG stuff?

---------- Post added at 10:09 PM ---------- Previous post was at 09:55 PM ----------

Look, the tohsiba thrive for example has another hidden micro-button under the back cover. It mussed be pressed together with the power button to boot into APX mode.

http://www.thriveforums.org/forum/toshiba-thrive-development/8076-apx-mode.html

Did any of you find such a small button in those pictures of the OneX?

http://fashion.pconline.com.cn/mobile/1204/2754053.html
[HTC One X] f4flake:
has anyone tried this?

Stock recovery, unlocked bootloader..

boot into hboot (power+V-)

select "recovery"

when in recovery, vol+ +power

start boot looping

---------------------------------

E:failed to open loop device (no such file or directory)

E:failed to open loop device (no such file or directory)

E:failed to open loop device (no such file or directory)

E:failed to open loop device (no such file or directory)

E:failed to mount /sdcard (no such file or directory

--------------

three times and then gives you

Android system recovery <3e>

use volume key to highlight

click power key to select

Reboot system now

Apply update from external storage

wipe date/factory reset

apply update from cache

-------------------

Is that normal?
[HTC One X] Evil-Dragon:
And has anyone yet tried the USB OTG stuff?

I'm not sure if it works in Hboot/Fastboot mode. Defiantly not in the ROM at the moment because there isn't any support in the kernel yet.

One interesting mention however is that NFC can work in Fastboot/Hboot. It's referenced in the hboot.img file.
[HTC One X] schriss:
So having specially encoded tag near it while booting HBOOT might do/trigger something?
[HTC One X] abc27:
That would be a very practical solution for service centres. A special NFC-enabled dock or something that connects to the pins or the USB port.
[HTC One X] Polarfuchs:
I uninstalled the "HTC Bootloader" driver in win7.

And used these drivers.

http://xdaforums.com/showthread.php?t=1426502

But it didn't change anything.

I looked into the Asus TransformerPrime sections of the *.ind file.

It seems Fastboot and APX modes use different USB PIDs if I'm not mistaken

---------- Post added at 10:56 PM ---------- Previous post was at 10:44 PM ----------

Another observation:

While you are connected via usb and are in Hboot:

When you select fastboot and then hboot again, as soon as you select hboot it starts that sequence where it search for a SD card.

While in that sequence the "HTC Bootloader" driver in win7 becomes disconnected. And after the sequence has ended it finds the HTC Bootloader mode again.

So it really doesn't need or can't use USB while in that sequence. So I think OTG USB isn't possible.

Rather, I think it doesn't search for an SD card that is connected via USB OTG. Is it possible that it searches on the internal SD/memory for an PJxxximg.zip??

According to pdadb.net the Model ID is PJ46100 for the tegra oneX.

So it searches for an PJ46100IMG.zip
[HTC One X] Mux89:
Hey everyone i tried USB-OTG Methode. Here is my Video:

http://www.youtube.com/watch?v=zg97l9WXxEg&feature=youtu.be

Hope i can Help :)

edit: i Stored PJ46IMG.zip on my HardDrive Attached to the Phone
[HTC One X] Mischaseb:
Just an observation from someone monitoring this thread with interest; The two most common sayings seem to be somewhat conflicting.

The first one is "that xyz phone is not a tegra 3 phone, therefore its s-off method is of no use to us"

The second one is "That xyz tegra 3 device is not an htc device and therefore of no use to us. It is the HTC Hboot where the security lies, not the tegra 3 chip."

It just seems that one of these statements must be incorrect since they somewhat fly in the face of each other.