yashsingh1/xdaforums huggingface dataset:
[HTC One X] doublecheese:
I am fed up with stupid people and their stupid posts without reading.

After xmoo announced that he can S-Off the One X with this new method, Erik was showing off to him that he already has a S-Off method and he found a much simpler way to S-Off the HOX 5 weeks ago. Which didn't even need a Java and a diag58 file.

Now that we understand it involves opening up your HOX , tell me where is the

Simple method to xmoo's method.

Before Erik guy said he wasn't sharing his method, I was behind him and supporting him because I because I work with Germans and their words are 99% trustable.

How could I know the remaining 1% was here :)
[HTC One X] GOLDFiSH92:
That picture is of an AT&T HTC One XL.

That might be a genuine mistake, please just don't attempt this yet as that detailed schematic may prove false and do nothing.

P.S Don't feed the trolls ;-)

Meanwhile I am still looking for a temp root. The first price of our eventual S-Off puzzle allowing us to hopefully avoid HTC-Dev.
[HTC One X] boe323:
Listen guys, do not try this, it sounds to me like porkies, and now, to top it all off, after you naff up your phone, hes making sure you unlock the bootloader so you void your warranty. Ive had some experience in electronics(self taught) sice i was little, fixing hifis etc, it doesnt make sense.
[HTC One X] skygear:
you realize Rascal & Manole on the XTC clip project were "Emulatiing" a gold card.. Chances are they had access to one.
[HTC One X] boe323:
I hope someone comes up with genuine way to s-off soon, i want the original unbranded rom. Keep up the good work guys.
[HTC One X] Laurentius26:
Yes and that's why the whole mess started.

Dev should work together, not showing off and brag, trying to bring someone else down.

Sorry, end.
[HTC One X] coxy47:
My turn to weigh in on this.

Everyone should stop damn well flaming xmoo and football as they have been working on this from the beginning and are going to continue working on a software solution which is ideal for the masses. Yes they can do it know and won't share what they have but as far as I'm concerned they damn well shouldn't share the files if it's going to screw people over. Job losses affect lives greatly. As for that I appreciate the work that xmoo and football are both doing and hope they continue to do so

As for Eriks hardware method I for one probably won't be doing that. My apologies to Erik but whether or not what you have shown is true is yet to proved and until then I will remain skeptical. I do have a question for you though. I'm interested to know the logic behind why you chose that particular soldering method and why you believed it would yield a security glitch?
[HTC One X] Goku80:
not been following much due to my new work and basically taking over my life now:( but here is my take..

either people get behind Xmoo and Football and help out with getting this s-off done or just troll along...simple as that..we are all wanting the same thing..s-off to take our phones to the next level....if someone has a way then share it...stop being a ass and show if you have a way and if you are wanting a reputation then you will get it for being the one who cracked the code...

i just do not understand all the **** going on here....close the thread and only update when there is something worth opening the thread again..cause it is filled nothing but trolls and people that do not have anything better than look and put people down for doing something good for the community.

sorry for the rant i just hide bk in the shadows
[HTC One X] ShyamSasi:
This thread is miles away for the actual topic ...
[HTC One X] Laurentius26:
@Goku80,

To my opinion that's said a bit to simple mate.

You have friends and friends and friends that can hurt other friends if you know what I mean? ;)

We all doing our best but it's not nice to flame at people who are spending there free time to give us S-Off.

People who do that should appreciate or better stay away but I ques this will never happen, I see this happen all over the board.

It's human nature I ques. :cowboy:
[HTC One X] Goku80:
you could not have said it anymore better mate... anyways let us not get off topic here....stupid question and probs already been asked before by why the Revolutionary team not worked on the One X yet? was there a reason behind not bringing there exploit to the One X..

Sorry if this sounds silly but like i said not really been following lately
[HTC One X] theDroidfanatic:
Obviously Xmoo shouldnt reveal how they get S-OFF, since a promise is a promise, and people could lose jobs.

Keep up the good work Xmoo and Football :D :Good:

Sent from my HTC One X
[HTC One X] Kickasskev:
Thats because everyone keeps writing stuff like

THIS THREAD IS OFF TOPIC ETC.

Just ignore trolls and usless posts and stop commenting on them.

PLEASE DELET THIS WHEN CLEANING THE THREAD AGAIN
[HTC One X] Whiskey103:
If this doesn't stop i think about closing it till either Erik, football, xmoo or Chuck Norris PMs me with a working safe solution.

Cmon guys, I am somewhat tired of this off topic rubbish and flaming.

Consider it a final warning!

No need for this bul**** ;)

Have a nice day.

Cheers!

Whiskey

Forum Moderator
[HTC One X] Zulake:
To the hard-working guys over here: If you need someone to test something you discovered, feel free to send me a PM and I will happily try it! Anything for S-OFF!

I don't know much about this stuff myself, but I know enough to help testing!
[HTC One X] Htc_One_X:
Exactly what I said earlier on today, we can only benefit from this idea. 110% behind xmoo and football, any financial needs I'm here.
[HTC One X] ali3nfr3ak:
ok so i have fastboot , trying running ruu of test .94 , said battery was less than 30% , so as i have 2 HOX i fully charged my other one, and pulled them both apart , swapped out batteries , put back together, ran the ruu , same thing... your battery is then than 30% , tried a newer ruu same thing ... so i dunno.. , possibly it saved the battery stats somewhere...?? from when i first flashed the eng-boot..

D:\ADB>fastboot devices

HT23HWXXXXXX fastboot

have also tried sending system.img, hboot.img from test .094 rom through fastboot comes up with : remote failed, unknown error

D:\ADB>fastboot flash boot boot.img

sending 'boot' (4144 KB)...

FAILED (command write failed (Unknown error))

finished. total time: 0.640s

I have also noticed that in the hboot menu this line is missing

HW Secure boot: enabled

and looking @ xmoo pics from his testing with an s-off device his is the same... dunno what relevvance it has , but was justing pointing out

EDIT: Is there a way to bypass the battery check? on the ruu
[HTC One X] KLUVJ:
can everyone plz stop after this post, and keep your comments out of this? just leave this for development, and read with you eyes on the updates. I really dont look forward to this being shut down, as i visit this thread often just to read up on the status of soff. Plz, dont reply to this, dont say anything outside of development, no opinions of whether this thread is **** or watsoever. THANK YOU!

sent from my Viper Bitten One X
[HTC One X] nikorette:
The battery stats might be saved from somewhere beyond the bootloader. Recovery and onwards.

I'm guessing you can't boot into rom to charge and since you're flashing an ruu you have the stock recovery so no charging there.

I don't think there is a way to skip battery check.

If it was me I'd try 2 things.

1: Boot into the stock recovery for a second and boot back into hboot. Run the RUU again to see if the battery level has been updated.

2: Unlock flash the newest CWM recovery let it charge overnight flash the stock recovery back and re-lock then try the ruu.

EDIT:

Hmm try this

fastboot getvar battery-status

fastboot getvar battery-voltage
[HTC One X] mattman83:
How would he unlock if he can't flash the unlock key :p

Best bet is have a dig around the forums, someone has put together a batch script that cycles the phone through the stages at which it can charge. It's very slow, but you'll get there eventually. It's in one of the disaster recovery type threads, but I honestly can't remember which right now.

M.
[HTC One X] ali3nfr3ak:
i have basically done everything i can think of, i can charge it by swapping batteries between my 2 HOX, i dont think that is the problem, either the phone has been frozen with the stats from when just b4 i flashed the eng hboot , or .... i dunno...., but i tricked the ruu into getting past the battery check by letting my other phone do all the work until it was ready to flash then i swapped them and i think it wouldve worked to but it came up with the same error as what i get when i try to push .img files through fastboot " FAILED (command write failed (Unknown error)) " , its almost like the phone isnt in hboot at all , even tho it shows me the menu, i think the fact that "HW Secure Boot:enabled" is missing from the hboot menu is a good clue to that.., but then again i dunno what im talking about really... :laugh:

so basically i have come to end of the road, for what i can do, and im almost getting to the point of getting it fixed my htc, porbably lose s-off but at his stage be nice to get the phone working again... :laugh:
[HTC One X] nikorette:
You can unlock. There's no flashing involved when you run fastboot oem unlock.

@alienfreak

If you get it repaired by HTC make sure you argue the fact that the device was S-OFF and that's how it should be returned. In the state you received it.
[HTC One X] Alex240188:
Good idea except you can't do fastboot OEM unlock. It's fastboot flash unlocktoken unlock_code.bin
[HTC One X] boe323:
have you tried the same kind of principal as getting s-off, meaning using a y cable and smart card reader etc, try flashing that way, unless, that is what your doing anyway, im new to this thread so dont mock me if im wrong. Would erasing/cleaning the cache help using fastboot?.
[HTC One X] Thunder07:
@ali3nfr3ak

try booting into RUU, i know my phone charges in that mode.

fastboot oem rebootRUU​

and you can bypass ruu.exe battery check... but the phone does another check which cant be bypassed,

on the RUU screen you can check for battery levels,

fastboot oem devpower

or was it

fastboot getvar devpower​

and you can flash a stock rom by

fastboot flash zip rom.zip​

which might be a bit faster skipping all RUU.exe checks
[HTC One X] rik-sik:
Right I dont think anyone else has mentioned this. Please delete if it has.

Looking at the one x overheating and maybe a way to simulate a battery pull.

The one X light flashes Red and Green when overheating

I though nothing of it but when I was swapping a rom on the HTC desire I noticed the red and green flashing light because i forgot to put the battery back after reinserting the microSD with the usb plugged in.

I was thinking if you could trick the phones firmware into believing the battery is overheating it will disconnect it or report it as not available.

It might leave the door open to other things also.

Just a thought!
[HTC One X] mabalito:
Hi all, jumping in here with some of my thoughts after following this thread for some months now.

First, I believe the "red fastboot mode" should be investigated further. Any command/procedure done in normal fastboot should be tried in red fastboot too. Maybe there's some differences.

Second, this post refers to strings found in the hboot.img file. I find it curious to see that it contains strings referring to keyboard/mouse input. Like this: "Checking for RCK.. press <Enter> in 5 sec to enter RCK". Anyone tried hooking up a keyboard while in hboot/fastboot and randomly pressing keys? :P

Third, has anyone looked at the "HTC SSD Test Tool" apk that works on 2.05 roms? Found some possibly interesting tools in there.

https://lh3.googleusercontent.com/-fSomEVSVf_w/T_2txhgADlI/AAAAAAAAA30/7LlOs9AFOe0/s771/1.png

https://lh6.googleusercontent.com/-As8TQnG9dhM/T_2twDarWpI/AAAAAAAAA3g/byUb_6VG0LM/s771/3.png

https://lh6.googleusercontent.com/--jiLHMeGY_E/T_2tw8bs4gI/AAAAAAAAA3s/1fe-g8e3gdU/s771/4.png

https://lh4.googleusercontent.com/-jF4ri6aacIM/T_2twxw-5aI/AAAAAAAAA3o/pAQphUip3UI/s771/5.png

https://lh5.googleusercontent.com/-cjkLzZmSSQI/T_2txiaCCSI/AAAAAAAAA34/X5coenUixps/s771/6.png

https://lh6.googleusercontent.com/-kNi8um68XQI/T_2txydykeI/AAAAAAAAA4A/gavW_hirqkM/s771/7.png

com.htc.android.ssdtest.rar
[HTC One X] Thunder07:
@mabalito how did you get it to run???

its not working here :/
[HTC One X] Htc_One_X:
Me too im running ARD 7.1.0 and my android.phone process dies

---------- Post added at 08:08 PM ---------- Previous post was at 08:03 PM ----------

Just done a VERY quick google on "Checking for RCK . . ." and it appears its linked to " nvflash" "apx mode"

Linky: http://www.google.co.uk/search?sugexp=chrome,mod=1&sourceid=chrome&ie=UTF-8&q=Checking+for+RCK
[HTC One X] Thunder07:
I just updated my tool to allow for RUU Zip Flashing,

it'll make flashing though test zips a bit easier i guess.

and you'll find in my signature.
[HTC One X] xmoo:
I'm running the stock 2.05 test rom. Most tests work for me. But have not seen anyreal usefull thing.
[HTC One X] ali3nfr3ak:
thanks to all that offered suggestions :D

@thunder07

C:\Users\Administrator>d:

D:\>cd adb

D:\ADB>fastboot oem rebootRUU

...

FAILED (command write failed (Unknown error))

finished. total time: 0.606s

D:\ADB>fastboot oem devpower

...

FAILED (command write failed (Unknown error))

finished. total time: 0.598s

D:\ADB>fastboot getvar devpower

getvar:devpower FAILED (command write failed (Unknown error))

finished. total time: 0.621s

D:\ADB>fastboot flash zip rom.zip

sending 'zip' (627773 KB)...

FAILED (command write failed (Unknown error))

finished. total time: 0.638s

D:\ADB>fastboot devices

HT23HWXXXXXX fastboot

D:\ADB>

@boe323 yes i have tried , well with the y cable anyway, do not have access to a smart card, and from what i have read from xmoo i would need the diag file as well, and that is not freely available at this time, which is understandable :)

@nikorette D:\ADB>fastboot getvar battery-voltage

getvar:battery-voltage FAILED (command write failed (Unknown error))

finished. total time: 0.686s

D:\ADB>fastboot getvar battery-status

getvar:battery-status FAILED (command write failed (Unknown error))

finished. total time: 0.669s

even tho i have access to fastboot via adb, i cannot actually get into fastboot on the phone, as the hboot menu will not work
[HTC One X] Thunder07:
@ali3nfr3ak

try fastboot getvar all

if this doesnt work... there is something seriously wrong

if it works it will atleast tell you that fastboot is receiving commands
[HTC One X] Alex240188:
Got this after typing a bad command in ruu mode. After doing abad command all other commands have errors until I rebooted
[HTC One X] ali3nfr3ak:
no go...
[HTC One X] mkrle:
@xmoo

I have obtained a couple of HOX DIAGs, while searching for a way to unlock my HOV. Can you give a hint of what an ASP DIAG contains (some magic string or sth) so I could know if the files I have could be useful for the community?
[HTC One X] nikorette:
Publish the file anyway someone should have a smart card to test it out on.

Has anyone found a seller for a sensation smart/java card I've been looking evey where to no avail
[HTC One X] ali3nfr3ak:
yeah publish the file anyway, :D

i have been searching as well nikorette with no luck

as this might be of use to me...

"Originally Posted by xmoo

The problem is... You have several DIAGs... Then "Clean data s58" is a DIAG which is owned and used by a couple of head HTC repair centers... So if that leaks, it would be easier to trace it back. This DIAG clears security and hard resets the whole device"
[HTC One X] boe323:
:DPlease hurry with getting s-off guys, im getting ichy fingers lol,i want to play with my phone.(Keep up the good work)
[HTC One X] vincenzo697:
gold card creation

i found this on a Chinese website (http://bbs.fengbao.com/thread-1027228-1-2.html ) with the following description:

Last 414,880,613 at 2012-7-9 15:59

the HTC One X / S720e/G23 pre-production first do a backup of the memory card, just in case! ! ! ! ! ! ! ! !

What is Gold

Gold is also known as the encryption card, htc wm systematic approach extended to GPHONE system.

Gold is so that you can get to deceive the official RUU again to downgrade or upgrade of a key. Brush the official system, the brush-made rom (zip format rom) do not need Gold. The principle is achieved by spoofing the CID value of the machine on the SD card.

Step

1 Connect the phone USB charging mode Click to Get Cid MMC1 not on election MMC0 to see, will produce a string of similar 003FE456DEE9054D303055324B000115 string. 2, click on the link inside the Gold Car Gen enter the website,

fill in the appropriate mailbox and just get the string

, enter you fill your mailbox, download attachments

4, mobile phone tune into the disk drive model, click on the software the MMC TOOLs inside Refresh Select your disk, click on the following load to read the attachment you have just downloaded from the mailbox

, and then click on the Path MMc can be a

very simple,

do not copy and paste, automatic integrated.

I dont know if it will be usefull for our goal but here you go and sorry if it was mentioned again but on the Chinese website is new

thanks
[HTC One X] bobsie41:
I'm afraid this is the same gold card tool that I used on my son's wildfire s which creates a gold card from a micro sd. If you open the zip and read the info text (which is in english) you will see this. ;)
[HTC One X] vincenzo697:
A user named 冰冻冷咖啡2 小时前 (translates to - Frozen cold coffee ) says and its proven to S-OFF HTC One X with Gold Card.

ME: Hello my friend my name is Kostas and i am from Australia and i was wondering if You know, a way to the S-OFF my the HTC One X?

Thank you very much

ME: can you help me?

Frozen cold coffee: i usb goldcard to SOFF it.it 's hardware. so. i can't help u to soff ur device

And another user that Frozen cold coffee S-OFFed his device
[HTC One X] calvinleeabc:
any link?
[HTC One X] vincenzo697:
I was trying to find it but the euro u19 match started so after the game i will give the website
[HTC One X] Polarfuchs:
Nothing special to see from there.

Dmdata0 and dmdata 2-9 contain exactly the same:

And Dmdata1 contains this.

Wait I have to manually enable hex view.

Dmdata 0 and 2-9:

Dmdata 1:
[HTC One X] N3m3515:
maybe just a check if you already have the latest version numbers
[HTC One X] Polarfuchs:
I tried to mount some of the *.img from the rom.zip in ubuntu as loop device. But I always get wrong file system type.

Any clues?

PS: good night
[HTC One X] blubbers:
You need to simg2img them, remove the first 256 bytes, the signature
[HTC One X] Polarfuchs:
Ok, i got simg2img from that xda thread http://xdaforums.com/showthread.php?t=1081239

did "make"

but every img i try gives a 0byte file and the error "bad magic"
[HTC One X] mickfitz:
HTC should just give people the option to have S off. Sign a waver on your warranty and let the owner of the device make the choice.

I mean, manufacturers know about rooting etc so they should just embrace it. I bet if one of the leading manufacturers left the device open it would boost sales.
[HTC One X] ytwytw:
I will be assuming APX mode needs S-OFF to enter on HBoot interface... (too bad mine is S4 Version so I cannot help on this..)

I tried my friends H1X to send

fastboot oem enableqxdm 1

Permission Declined...

Benefits of S4 devices anyone?! :D I would think it would be easier than Tegra3 version

Gonna try with the HD7 S-OFF combo (USB Host Mode) with xtc clip to see if there is any luck

---------- Post added 26th April 2012 at 12:00 AM ---------- Previous post was 25th April 2012 at 11:58 PM ----------

They give you the choice to sign the waiver to get Bootloader Unlocked

S-OFF?! Not possible...

It's not a dev certified by google phone...

---------- Post added at 12:06 AM ---------- Previous post was at 12:00 AM ----------

Can you try this

http://xdaforums.com/showthread.php?t=1058918

But rename it to PJ46100IMG or whatever to see if it works

If you could get into the DIAG mode, its 99% succeed! (1% needs xtc clip)
[HTC One X] xmoo:
The S-OFF Should be in the Radio partition and not in HBOOT.

It's been this way since the first HTC Android phone.

The latest HBOOT would be 1.01, but the person having it on his phone does not know how he got that or with what update.

Maybe if he makes a full back-up and someone else flashes the back-up gets same HBOOT.

Or is only system.img in a back-up?

Pictures of HBOOT 1.01 included

The funny thing here is that HBOOT 1.01 has March 27, HBOOT 0.43 has March 17 and the HBOOT 0.94 (which is included in OTA) has 11 April :S
[HTC One X] JeckyllHavok:
if you get the partitions by hand, then you can get all. Nandroid won't fetch all partitions. But by hand should work
[HTC One X] xmoo:
Yes but we havn't located the HBOOT nor the Radio partition yet...
[HTC One X] kholk:
If the partitions are masked by S-ON, you can't dump 'em.. or if you dump a masked partition you'll get only a bunch of useless FFs.

BUT

If that guy has got S-OFF, you can make him to dump the HBOOT partition.

Since we know about some useless partitions to dump, make him dump those using this "script":

su

mkdir /sdcard/dumps

dd if=/dev/block/mmcblk0p1 of=/sdcard/dumps/part1.img
dd if=/dev/block/mmcblk0p2 of=/sdcard/dumps/part2.img
dd if=/dev/block/mmcblk0p4 of=/sdcard/dumps/part4.img
dd if=/dev/block/mmcblk0p5 of=/sdcard/dumps/part5.img
dd if=/dev/block/mmcblk0p6 of=/sdcard/dumps/part6.img
dd if=/dev/block/mmcblk0p7 of=/sdcard/dumps/part7.img
dd if=/dev/block/mmcblk0p8 of=/sdcard/dumps/part8.img
dd if=/dev/block/mmcblk0p9 of=/sdcard/dumps/part9.img
dd if=/dev/block/mmcblk0p10 of=/sdcard/dumps/part10.img
dd if=/dev/block/mmcblk0p11 of=/sdcard/dumps/part11.img
dd if=/dev/block/mmcblk0p16 of=/sdcard/dumps/part16.img
dd if=/dev/block/mmcblk0p17 of=/sdcard/dumps/part17.img
dd if=/dev/block/mmcblk0p20 of=/sdcard/dumps/part20.img

sync

Those are all the possibly interesting partitions of the device and they will be put in a "dumps" folder on the internal memory. The ones not included in those dd commands are mounted and not masked on an S-ON device.

One of those partitions contains surely HBOOT.

The EternityProject Team Manager & Main Developer,

--kholk
[HTC One X] tids2k:
How about someone with a locked bootloader but a Security-Off handset. Can you still dump hboot ? Also what partition do we need to dump ? Any suggestions ? The one @moo recommended isn't the right one. So any suggestions ? I have an unlocked bootloader via htcdev ... Do you want me to dump any partition and try ... I can give it a short ? Please advise. @kholk I have a greater trust on your findings since hd2 times.

Sent from my HTC One X
[HTC One X] tids2k:
Thanks for the reference there. So one of those partitions have hboot so that means one of those partitions should match the unlock_key.bin which we get from htcdev. That's a bit interesting as it should have the same signatures in the beginning of the hboot part :-d

Sent from my HTC One X
[HTC One X] kholk:
One of those partitions should contain only Unlock_key.bin if it has ever been flashed...
[HTC One X] xmoo:
I've sent the people I know with a S-OFF device your msg.

Waiting for them to try the dump.
[HTC One X] tids2k:
Good going there @moo I am on the train right now. Will try if I could do anything about it.

Sent from my HTC One X
[HTC One X] f4flake:
Or it would simply look like it,i.e be of the same size, since it's a .bin being flashed.
[HTC One X] Flashmaniac:
none of these partition is the hboot. it is not located in /dev/block.

you can see that when running

cat /proc/emmc

once IEF told me where the Hboot usually is located but I forgot...
[HTC One X] geek78:
Someone with S-OFF device should try :

fastboot oem saveprt2sd hboot hboot.bin
[HTC One X] Flashmaniac:
or this should dump the hboot:

fastboot oem saveprt2sd hboot -n hbootpart.img -a
[HTC One X] N3m3515:
i think its a failure in translation. they dont mean goldcard. they mean javacard.
[HTC One X] vincenzo697:
http://bbs.fengbao.com/forum.php?mod=viewthread&tid=965387&reltid=947155&pre_pos=10&ext=CB

http://bbs.fengbao.com/forum.php?mo...id=965387&pre_thread_id=947155&pre_pos=2&ext=