yashsingh1/xdaforums huggingface dataset:
[HTC One X] angusc:
So here is the feedback, i sent and to the Beijing guy who was advertising on Taobao to S-Off the One-X. Initial he replied and said he could "unlock it". Concerned about this answer i asked him if that was using HTCdev.com but he did not reply. This norming i re sent request to him asking what he can do for me.....he replied only "HTCdev.com" nothing else in his message. So i guess it's a con or he is being cautious not knowing who he is dealing with.....

Sent witH desire from OneX
[HTC One X] mickfitz:
Best get a native speaker call the number on the business card from the x5phone link a few pages back.

Edit. http://www.x5phone.com/?product-5.html
[HTC One X] KFlash32:
I work with to find a solution here now, and have come so far that HTC's main office and legal department has made ​​some concessions. I am not satisfied with any of the answers, so I will now take legal action against HTC, it will come back to this later. Here's what HTC says now:

HTC does not mean you can not turn off the security available on the phone, but we can not tell you how this will be done or give you information related to this. Security is there to protect users from deleting / overwriting / destroying phone by accident, etc.

HTC also has licensing agreements with Google and other partners to be able to use the software on the phone. We can not give out information when removing this software.

It should be possible for you as a customer to turn the S-off on their own, but in the same way as if you decide to smash the phone is not something we recommend, support or can help you with.
[HTC One X] zozor:
In your link seems the guy explain the method to get S-OFF .

But still use a special card to do it :confused:
[HTC One X] mickfitz:
Zooming in I can see its an endeavor ship s off.

Someone who can speak Chinese just needs to call him and settle this once and for all.

We can move on either way.
[HTC One X] angusc:
I sent him an sms to see if he can do it in Beijing or knows anyone here in Beijing that can do it for me.
[HTC One X] tids2k:
The Xtc clip from raskal will never get updated !
[HTC One X] xmoo:
Just check page source and there you see direct link to the .jpg ;)

Here as attachment.
[HTC One X] angusc:
lol :rolleyes: .......there's hope for us to S-off this yet!
[HTC One X] Nubzori:
With S-OFF can we hack bootloader to show **LOCKED** and not **RELOCKED**?
[HTC One X] mickfitz:
I tried that but didn't work on the tab.

There has to one Chinese guy here who can make a call.

Come on Chinese guys.
[HTC One X] Supaiku:
虽然我不是中国人，中文又不是我母语，我百分之百会沟通。 I talked to the guy on Taobao, via his Taobao Chat client, and it's hard to say if it's legit. If it is legit, you either have to send your phone to them, or go in person.

I will go in person when I get a chance, to the taobao store from which I bought my phone (see link, the VERY LAST PICTURE in the add says they can provide S-OFF), which is located here in Beijing. However, they recently moved their store, and I only have time on the weekends, plus have a lot going on. Maybe this weekend, maybe not.

PS.

Anyhow, I just called the store x5phone.com and they are not willing to explain the process. Same with the guy on Taobao - both are unwilling to give more details other than ship it there, and pay 200 yuan.

Unless someone lives in Shanghai and wants to go there in person, where they can see them actually do it... they aren't really very helpful to talk to. Obviously they want to protect their trade secrets :p
[HTC One X] f4flake:
buys ticket to Shanghai...
[HTC One X] Appsdroid:
How can this be made a legal matter

Hi Mate

I caught this post and got quiet intrested on this how would you go about making this a legal matter as the device was purchased this way???
[HTC One X] BeciMester:
Even if you go there in person, they probably just take the phone to the back room and do it there. Still, it would be nice to have it done... :)

I have a suspicion that, unfortunately, HTC really upped their game here, and it will involve some sort of hardware hack to get in. Pogo pins, headphone jack?

I'm on my 1X...
[HTC One X] mickfitz:
I'm a 4 hour 15 minute direct flight away.

I've flown further for less in the past.
[HTC One X] xmoo:
Why don't they have stores like this in europe :(
[HTC One X] f4flake:
hahahahaha. Me too! :D
[HTC One X] Evil-Dragon:
Because the company is based in that part of the world and most of the employees can probably pitch white cards, copy them and return the original. Unless we can get a white card and copy it then we'll never have the power they have. I even looked on p2p sites for any htc diag or sim card images but could find nothing at all.
[HTC One X] Supaiku:
That, and also, because legal action matters in Europe, whereas China is full of dodgy stuff. The same store illegally imports their phones avoiding taxes. Why don't you have stores like that in Europe? Because it's illegal... ;P

Also, hobbyism is big in the West, whereas opulence is a new thing in China. the Chinese xda and other android forums are full of spam posts (they're mostly used to get non-market apps, since paid apps are blocked in china, and not always Chinese language friendly - forums give them Chinese apps for free (and indeed, without complicated hacks to boot), and they've got nowhere near the community here. You don't NEED stores like that in Europe, because people take responsibility to do their hacking and modding hobbies on their own... and tech support would be hell - they just don't offer any real support:p
[HTC One X] KFlash32:
I can do this because of the documentation I have got, and still collecting. HTC headquarters tell us customers that we can do what we want with our devices, and sure we can. But they - HTC - try to protect decide on us and our rights even if we own the phone. We own the phone, and, we have full right to do what we want with the phone. HTC goes on saying that everything is legal, but they discourage it, because I as a consumer can delete my own files, etc.

Further more HTC headquarters write this in one email:

It should be possible for you as a customer to turn the S-off on their own, but in the same way as if you decide to smash the phone is not something we recommend, support or can help you.

Well, HTC tell its okey that I can do it myself, and ofc, then its legal. But again, they refuse to help, because I can destroy my phone.

Strange!! So I took the case a few step further, because HTC wrote that I could set it to S-OFF myself. Well, I then have som contacts working in HTC workshop and is classified to the job. Natural for me to ask how they would put the S-OFF. They know the answer I thought. Translated, that the answer from one of my contacts:

Customer can touch their phone as much as he wants, but the matter is that HTC can not guarantee that third-party software running smoothly on the device. I can not give him an explanation of how to do this, since we do not do this job here sometime.

You see?? Not even the persons in HTC workshop know the answer, still HTC claim its legal, and I can do it myself.

The case go on, but I've also been in contact with the Consumer Council and the Competition Authority, and they say I have a win-win case

I have purchased a product that I do not have full control over. Here is the battle. Its the same way that you buy a PC with Windows, and Microsof say NO you cant install Linux on your PC because it can be destroyed and it can go beyond the warranty and be extra expensive for you at the workshop. BUT this is my choice, not HTC's.

Last email I got from HTC:

We stand behind what we have said before and beyond this we have no comments.

As mentioned, we are awaiting further contact from your lawyers.

Have a nice day.
[HTC One X] sacredabyss:
Because this is not a viable business model in EU.

There is no need to ask them how to get the S-off as they will NOT tell you. this is how they make money out of it and the technique to achieve s-off is highly likely NOT developed by them.

Even if they developed that s-off method what they really interested in is make profit. there is an average margin of US$20 per phone unlocked or flashed. this means the market size for unlock/flashing business would be around US1500 million (There are about 5000 million devices owned and is still rapidly increasing, and this is old data). ;)
[HTC One X] KingOfNV:
If one looks at White Card can be found Sogut nothing.

If you're looking at a whole lot MegaSIM find.

MegaSIM another term for white card.

Searched with Google

Edit:

HTC Factory Megasim.
[HTC One X] TeniusGG:
The smartcard

this is how is looks like

and this is how it works

v.youku.com/v_show/id_XMjIwMTI1MDc2.html

but i dont think it will help
[HTC One X] Supaiku:
How is the CID currently set? I know it turns into "None" when you flash the fancy firmware and all...

Currently, is it possible to change the CID via some method that does not require S-OFF?
[HTC One X] wtfhax:
In this case i kinda support HTC on this. I am sure they are selling their products as it is and if you wan't to mod it like adding antennas to make the signal stronger you are free to do so but they will not help you with bricking your device by supplying you information on how to disassemble the device in order to do so same goes to s-off to protect their company's image and also protecting them from people who will bite them back in their tush.

In my humble opinion it is pointless to proceed getting anything out from them except if you're arguing about the warranty. Yes we do own the device 100% but it is our own responsibility if we choose to mod it besides if they really help us getting s-off, people might set it back to the original as if it wasn't unlocked before to take advantage of their warranty as stated in their unlock policy that your warranty may be voided if you continue to do so. So yeah, they are not gonna help us to cheat their own system.
[HTC One X] mickfitz:
Exactly.

HTC won't give in so please, take your legal fight to them if you feel wronged but please keep it out of this thread.

We are close to S OFF and don't need HTC legally :p
[HTC One X] Electronic Punk:
We are?
[HTC One X] pdagenius:
Are we really getting close?
[HTC One X] ytwytw:
This is the same one on taobao.com,

They will invite to their store to do s-off
[HTC One X] Appsdroid:
ah OK i wasnt aware we were getting any closer to actually getting s-off on the device. Ive seen a number of posts from people saying about the white card and things. Id be willing to help on this guys if you need anymore people working on it.
[HTC One X] ytwytw:
Same wonder here...

I believe he could make it happen, for some unknown reasons he didn't
[HTC One X] ytwytw:
That's too bad... Take the high speed train to shanghai?

The taobao.com one is 15min walk from train station
[HTC One X] hamdir:
now one attempted to find the One X keys for saurik's mempodroid temproot yet?

it will allow us to do some things without unlocking
[HTC One X] ytwytw:
or you can show "damn htc" if you wish :D
[HTC One X] ytwytw:
Simple answer

It's made in china :D
[HTC One X] ytwytw:
Not necessary since it doesn't help s-off

Example : unlimited.io , they require htcdev root to s-off the phone

But again, they are all Qualcomm devices, Tegra3 could have a different case (and I have a S4 HOX which could be easier but never know)
[HTC One X] TeniusGG:
that's reall?can you show me how to do it
[HTC One X] mickfitz:
Sure, a short flight away.

These shops offering s off will sell their method if the money is right. 100%. Just got to go face to face and flash some cash.

They are chipping away getting 200¥ (yen I know) per service and that isn't a roaring trade with people lined up out the door and being from out of town, you aren't stealing his S OFF clients.

Need someone there on the ground. Maybe me if I can squeeze it in.
[HTC One X] TeniusGG:
you mean you are going to buy the method?

but they are 99% to use the white card to s-off

the card worth almost $ 2K
[HTC One X] ytwytw:
Edit the string in the hboot file

Hex edit should help you that

But I won't do it since you are doing hboot and it can brick your phone
[HTC One X] ytwytw:
They probably use xtc clip too...

The diag file or other stuff are the key...

bounty anyone?!
[HTC One X] mickfitz:
I'm sure they have cloned thousands by now but I wasn't prepared to spend 2 grand. 500 maybe.

Last time I was there you could buy boxes of micro sim blanks.
[HTC One X] nikorette:
How about we start a pledge. It's been done before with the wildfire soff.

We XDA members pledge a sum of money to the XDA member (hereafter known as Daniel Son) that obtains the S-OFF method used by the shops in China (by paying them obviously a larger sum than 200 yen). I am certain if afew of us pledged 10-20 USD "Daniel Son" would make back what they paid for obtaining the method and some more for going out of their way.

I will start by pledging $20 payable to Daniel Son's PayPal account if they do infact obtain an S-OFF method.

Now in saying that I know some may criticize the fact that people may pledge money and not pay up. But I believe we are all responsible enough to stay true to our word. If you can't afford $20 or $10, pledge what you can every little bit helps.

Think of it this way. Atm the only way to obtain S-OFF is to pay $20 to some shop in china and for anyone outside of that region its risky just sending your phone out.

So let's get behind this and do some action. Instead of talking.
[HTC One X] TeniusGG:
could it be done by reflash a new hoot?

so far as I know,these shops are using the white card
[HTC One X] angusc:
What is his new address?

Sent witH desire from OneX
[HTC One X] Evil-Dragon:
We are not close to S-OFF at all. Nothing has been accomplished except all the stuff we already knew:

We need a White Card (Megasim) and a DIAG file on the SDCard to get S-OFF, Unlock SimLock, etc..

We have neither. No Hboot exploits have been found, however HBoot partition has been found but no way to access it due to masking, same goes for the Radio.

The White Card + Diag cannot be used by the thousands of users with a One series phone, there's no way to use it in that way. It's too hard to reproduce it so it's usable like Revolutionary did. Even the XTC Clip method was limited due to the fact you had to buy a device to actually do it.

HTC won't give us a method due to legal reasons so it's pointless to keep asking them the same question. You'll get no where.

We so far haven't been able to decompile the HBoot which might have give us some idea about finding exploits/weaknesses. We need an ARM decompiler for that, which is unsupported in IDA. Unless someone has access to an ARM decompiler then it leaves us grounded on that.

That is why we are not any closer to S-OFF than in the beginning. It sucks but lets be truthful here instead of getting peoples hopes up.
[HTC One X] ytwytw:
Changing the name needs s-off

Such as Revolutionary and unlimited.io

If you are talking about s-off, we need not only white card, but also the diag file to shut the security off

btw, with proper diag file, goldcard is not required... (cuz it is proper signature signed)

I put xtc clip in my Evita (S4 version HOX), nothing happens,

and I find out htc looks like patch the misc partition exploits, so we cannot change the info to flash a ENG HBoot (if exist), then s-off
[HTC One X] ytwytw:
Not exactly, one V and one S already have s-off solution since they got a sd card slot there
[HTC One X] c4b4l3:
it's possible with http://www.hex-rays.com/products/ida/6.1/index.shtml ??
[HTC One X] Evil-Dragon:
Only if you are willing to pay a ton for it. We only need $800+ yikes.
[HTC One X] angusc:
I just pm'd you ;)
[HTC One X] JeckyllHavok:
What if we first try to find a way to get unlocked without HTC, or is that even harder than s-off
[HTC One X] :
I think you guys are way off, s-off will happen, just need patience :)

Sent from my Desire HD
[HTC One X] JeckyllHavok:
You got any infos we don't have?;)
[HTC One X] :
Yes, i know it doesnt require 2 grand, nor sending phone away lol

Sent from my Desire HD
[HTC One X] Appsdroid:
Im speaking with a colleague i work with im sure he has the 6.1 version of IDA. Im can ask him to lend the license to test this or ask him to decompile the hboot for us. Let me know if you want me to speak with him. I may need some assistance getting this done thou.
[HTC One X] :
Ill see if i can get a hold of the phone from one of my mates to check it out

Sent from my Desire HD
[HTC One X] KingOfNV:
http://htc.zol.com.cn/109/33080_1083270.html

No Way to Unlock without HTCdev???
[HTC One X] Evil-Dragon:
Someone with S-OFF, check mmcblk0p3. It's also radio related and might be where the security flag is located, however it's likely it's in the rcdata partition which needs to be found. Ultimately the problem everyone will face is how to bypass the signature check to either force the flag or upload a partition while bypassing HTC signature security.

Since no one knows the method that Revolutionary used for Qualcomm exploiting then it's going to difficult to even have any idea where to start with a Tegra based phone. Ultimately the person you really need is agrabren, who works for Nvidia, but he won't exploit or work against the company he works for.

I would imagine as a good starting point you should focus on the HBoot, it's the starting point in all this. We can all grab as many hboots, rfs and other partitions as we like but ultimately it's not going to get us where we need to go. It's going to need someone extremely skilled and an ability to understand the architecture used to be able to crack this baby.

I'm not against any of your efforts, i just think it's a more difficult road than you think. Still, don't give up :)
[HTC One X] xmoo:
The problem here is that all the other S-OFF projects started with a ENG S-OFF. From there it is a bit easier. But only person I know who had ENG S-OFF had to flash 1.26 ROM so he lost the ENG ROM :(
[HTC One X] Evil-Dragon:
ENG Hboot's are so rare, Sensation only had 1 out of the thousands of devices. Luckily we managed to get that back then.

Also worth noting from Mike's find, in that .fls file it has this:

---------------------------DESCRIPTION OF DEFINES-----------------------------
------------------NOT WHAT THE CODE IS ACTUALLY COMPILED WITH-----------------

DEFAULT_UNLOCKED # Initial state of sec layer is unlocked
FULL_DOWNLOAD_HASH_CHECK # Perform full hash check after download
EEP_DOWNLOAD_HASH_CHECK # Also check hash of static eep
SECURITY_EPOCH_CHECK_ON # Must test security epoch
SEC_ENABLED # Enable the security layer
ALLOW_SKIP_VERSION_CHECK # Allow skip of version check
UPDATE_WITH_SAME_VERSION_ALLOWED # Allow reprogramming of same version
EBL_SEC_VERSION=1	# Define version (epoch) of the security layer
IFX_KEYS # Use Infineon keys
CUST_KEYS # Use Customer keys

#platform related defines

XGOLD618 # Platform
UTA_PLATFORM_XMM6180 # UTA platform
SERIAL_USIF1 # Only compile with USIF support
BOOTCORE #
EBL_RAM # Target is EBL
CRYPTO_SGOLD_SW # Use software crypto
CRYPTO_SGOLD_HW # Use hardware crypto
C_DEFINES += CHIP_REV_ES2 # Used to switch between ES1 and ES2 hw

EBL_MAJOR_VER=10	# Ebl major version
EBL_MINOR_VER=0	# Ebl minor version

-------------------------------------------------------------------------------
-------------------------------------------------------------------------------

-D __HWREG_INLINE__="static __inline" --cpu ARM1176JZ-S --apcs /interwork -c -g --bss_threshold=0 --enum_is_int -O0 --unix_depend_format
-D XGOLD626
-D PROJECTNAME=XMM6260
-D UTA_PLATFORM_XMM6260
-D BOOT_INTERFACE_RAM
-D BOOTCORE
-D ALLOW_SKIP_VERSION_CHECK
-D UPDATE_WITH_SAME_VERSION_ALLOWED
-D EBL_SEC_VERSION=1
-D IFX_KEYS
-D EBL_MAJOR_VER=20
-D EBL_MINOR_VER=32
-D EBL_RAM
-D INCLUDE_EBU_SETUP_DATA
-D INCLUDE_CFI_SETUP_DATA
-D USB_RAW_WR_MODE
-D SEC_ENABLED
-D PCL_EBU_MUX_PRESENT
-D SEC_PACK_VALIDATION
-D SERIAL_USIF1
-D SERIAL_USIF2
-D SERIAL_USIF3
-D SERIAL_USB
-D Nymonyx_LPDDR_SDRAM_256
-D RAM_EBU_CLK_195M_ASYNC
-D FEAT_POW_EBU_MAX_FREQ_195

Now i'm wondering if this is HTC's new way of handing radio's from now on that the method used to set the security flag has changed. If the radio that's flashed can affect the flag then it's a good step in the right direction. Before, in past devices it was fastboot oem writesecurityflag <value> however when i tried it today it just freezes the device with <awaiting device> and the phone no longer responds. It doesn't even ask about a javacard anymore. However if it's now handled by this new flashing procedure then we may need to find an exploit to root the phone first to gain control over the procedure.
[HTC One X] torxx:
So has anyone really tried it?
[HTC One X] Electronic Punk:
tried what?
[HTC One X] nikorette:
Without going off topic to much you've posted a couple of times in this thread and they've all been (honestly) **** questions. Not just you're average noob rubbish but beyond that. Into the realm of just ****.

Please before you post sit back and take the 10 seconds to read your posts. If it still makes sense read it one more time. If then and only then you think you need to post please do so.

May god have mercy on your soul if your posts are still complete ****.

Back on topic. Has anyone of our oriental friends followed up on that supposed S-OFF program on xda.cn. The more avenues we try the more successful we will be.
[HTC One X] djluisbento:
How can we s-0ff???
[HTC One X] JeckyllHavok:
Did you read the threat?
[HTC One X] Goku80:
man and i thought the s2 forums were bad with noob questions...me thinks it is time to terminate some noobs:D but seriously guys before you post take time to read first before asking questions. not that hard really...and yes i am even a noob but i still try and ask a question which contains more than five words
[HTC One X] HoboTheLegend:
You sir, are very aptly named :)
[HTC One X] Goku80:
haha thanks:D like your name to;)
[HTC One X] EddyOS:
Not to veer too much off topic but I can see this forum getting bad quickly as the amount of n00bs who jump into rooting without even knowing how to go back if in trouble is astounding...really saddens me that people don't get their head around it all and not just the fun part :(
[HTC One X] torxx:
Don't behave like a big boss man, you are no genius.

I asked exactly two times, one time if they have an ENG S-OFF bootloader dump and if somebody has used the Shipped S-OFF bootloader.

Second one is now solved because it's not possible / wrong file.

So why do you spend so much time for posting here? If you wouldn't be a noob, you would not answer and ignore it.

But this has shown how mature you are.
[HTC One X] JeckyllHavok:
Ladies and Gentleman, back to business please, otherwise the mod will come and destroy your phones :-)
[HTC One X] fastphil:
Yes will be able to unlock the cid with s-off
[HTC One X] geek78:
Maybe we will have to wait recovery with usb/adb support to backup the hboot... I have tried to backup mine and even if there is no errors, the partition is the good one and the backup is more or less empty
[HTC One X] Goku80:
people tend to flash things without doing the research first. hence why you have already few threads regarding "help i have bricked my phone". hence why do you think i am still waiting to see if there will be a program like the revolutionary s-off or whatever it is called to make things easier. i mean i could do the unlocking bit through htc dev and root but it is the whole procedure that i am still trying to get my head around.

like i said before. s2 i can do that with my eyes shut and root and unroot in minutes and flash and tweak it..htc i rather take my time and wait for more development and wait and see an appropriate program comes in place. now as regarding noobs yes we were all noobs one day and still are...but people need to take into consideration that they will need to get to read more and do their research before going ahead and doing something to their handset as it is a top of a range phone..screw it up and then your ****ed..anyways apologies for going off topic wished there was a way to help out. but will be following the thread and hopefully we shall have good news soon