yashsingh1/xdaforums huggingface dataset:
[HTC One X] starbase64:
Hi,

with a powered usb hub, the hboot freeze always.

cheers

starbase64
[HTC One X] Supaiku:
Any way of providing power via something other than a hub. A hub is a device itself, maybe it's mucking thing's up.

Check out how this guy provided power for USB host capability: http://sven.killig.de/android/N1/2.2/usb_host/

I doubt the youtube video is a fake... but who knows....

---------- Post added at 08:22 AM ---------- Previous post was at 08:16 AM ----------

If anyone would like to update the S-OFF section with more information about how we are going to succeed with hacking the One X to achieve S-OFF that would be great.

http://xdaforums.com/wiki/HTC_One_X#S-OFF_.5BIN_PROGRESS.5D
[HTC One X] abc27:
That NvsCpl.apk file actually ended up being completely useless. From what I heard, it's no longer even present in the newest builds.
[HTC One X] ytwytw:
Just make sure its a goldcard sdcard

Because I have tried with Y cable, I can restore my HOX by...

Run ruu, get the rom.zip

Rename it

Put it on sdcard

Use OTG to get into hboot, the phone start to flash

normal OTG cable won't work because there is no power... The phone doesn't supply any power to the USB

I don't have a xtc clip with me and next several days, so need someone to test it out (not sure if we can create goldcard on USB memory stick or not...)

It works with right cid ruu, just wanna see if the goldcard still able to skip cid check or not
[HTC One X] Rekoil:
Please remember that ytwytw does not have an HTC One X and that what works on his device might not apply to our devices.
[HTC One X] Polarfuchs:
So theoretically he's in the wrong thread?!

And/or some one else with the same equipment (OTG cable etc.) should try what ytwytw says on his one X?
[HTC One X] Rekoil:
His One XL (Evita board), and yes, someone should try it on an Endeavour.
[HTC One X] Sentinel196:
Does unlocking your bootloader with this have exactly the same result as with HTCdev?

No additional changes such as S-OFF and CID: 111111111 I assume?

Wishful thinking.
[HTC One X] tids2k:
You just dont get it .. do you.
[HTC One X] Evil-Dragon:
Goldcard's just aren't going to work anymore, HTC moved to some kind of Javacard now to S-OFF phones I believe. Think the chip on your bank card, it's a javacard of sorts. The javacard needed to S-OFF is possibly a special sim card but who knows for sure, except HTC.
[HTC One X] bozza1001:
Well been looking on chinese xda found something that my interest you all a tutorial on how to s-off your one x but I can't see it as you need a account to access it n goggle crome dosnt translate pictures so couldent get it
[HTC One X] mattman83:
A link would be nice :rolleyes:
[HTC One X] bozza1001:
Just tried site down for migration al look into it and try get one
[HTC One X] mattman83:
Just dig into browser history and grab the url. Don't really care about whether the site is up or down right now.

M.
[HTC One X] schriss:
I wonder why they connect to their servers first, before connecting to htcdev. Maybe it gets details for some generic htcdev account the program is going to use (since it doesnt ask for our login/password) and the same goes for email, because htcdev sends code by email.

Do you think its possible they somehow obstruct the data before sending to htcdev? For example changing serial number of whatever, to make the unlock untracable, thus keeping us warranty?
[HTC One X] rogersnm:
The unlock codes look serial key specific, it's unlikely that it obfuscates the device id in any way.
[HTC One X] bozza1001:
As I said been looking in turn chinese xda alot of urls all in chinese n am english I would have to open them one by one to fined out the right one sorry I will try again tonight or tomorrow al keep up to it n when I get it I will let you no
[HTC One X] dansharpy:
Has anyone seen this yet? http://unlimited.io/ Not sure how it will (if at all) help us but maybe worth a look. Uses a 'wire trick' which i think bridges some connections on the sd card to sim card. We obviously cants do that but might help somehow :)
[HTC One X] starbase64:
Hi,

use htcdev.com also:

with friendly greet

starbase64
[HTC One X] Evil-Dragon:
We have no access to these pins in the One X, unless they are inside and the whole screen needs to be removed to gain access. It can be done, however it voids warranty and potentially damaging the phone if you don't know how to do it correctly.

The pins at the back of the phone are just for the car dock/desktop dock.

Attacking the HBoot/Radio is still the way to go.
[HTC One X] tids2k:
this would work only for hboot and devices with microsd
[HTC One X] dansharpy:
I know we cant use it directly but just thought it might be worth a look!
[HTC One X] JeckyllHavok:
anyone tried this to unlock?(not s_off)

http://xdaforums.com/showthread.php?t=1576844

Guess some files need to be changed to One x ones....??

and has anyone tested this, to relock again:

http://xdaforums.com/showthread.php?t=1530864
[HTC One X] Rudolfje:
[17:02] <Rudolf> Hey simon, about your unlock utility, any chance it'll work on a One X?

[17:03] <simonsimons34> yes

[17:03] <simonsimons34> with some mods

[17:03] <simonsimons34> i need to use dd instead to flash and i need an ics root method
[HTC One X] rogersnm:
Doesn't that lead back to htcdev again? :(
[HTC One X] starbase64:
Hi,

i've tested simonsimons34 unlock, but don't work.

1 Bootloader Unlock and Root (Universal)
2 Custom Recovery (unlocked or S-Off)
3 S-off
4 Install Drivers

Please make a selection or hit ENTER to exit: 1

adb server is out of date. killing...
* daemon started successfully *
I am pushing everything to /data/local/ here we go!
1646 KB/s (660089 bytes in 0.391s)
1788 KB/s (793908 bytes in 0.433s)
1756 KB/s (793908 bytes in 0.441s)
295 KB/s (1478 bytes in 0.004s)
1397 KB/s (22364 bytes in 0.015s)
1776 KB/s (472478 bytes in 0.259s)
Now I am changing the permissions to root.
I modified taco root, follow its directions! Device reboot is normal.
Rebooting into recovery, please press Volume+, Volume- and Power at the same tim
e. Now choose to reboot the system.
Now we are waiting for full boot, I can only guess high
with this, so please wait.
Setting Up taccoroot now. Device will reboot.
Rebooting into recovery, please press Volume+, Volume- and Power at the same tim
e.Now choose to reboot the system.
rm failed for /data/data/recovery/log, Permission denied
link failed File exists
Getting ready to root. Device Will reboot!
Rebooting as root!
/data/local/tacoroot.sh[36]: cannot create /data/local.prop: Permission denied
Removing any chance of misc.img file already there.
rm failed for /data/local/misc.img, No such file or directory
If you just saw an error, don't worry its Okay.
Dumping Misc
Can't open device: "/dev/block/mmcblk0"
Error in reading mbr!
Unlocking Misc
File could not be opened.
Flashing Misc
Can't open device: "/dev/block/mmcblk0"
Error in reading mbr!
failed with error: -1
Let me clean up my mess!
rm failed for /data/local/misc.img, No such file or directory
Before I leave, I am going to try to root. Highly experimental.
/system/bin/sh: cp: not found
/system/bin/sh: cp: not found
Unable to chmod /system/bin/su: No such file or directory
Unable to chmod /system/app/Superuser.apk: No such file or directory
rm failed for /data/data/recovery/log, Permission denied
rm failed for /data/local.prop, No such file or directory
Root removed! Will reboot now!
Your phone should now say UNLOCKED.
1 Bootloader Unlock and Root (Universal)
2 Custom Recovery (unlocked or S-Off)
3 S-off
4 Install Drivers

with friendly greet

starbase64
[HTC One X] Cney:
i am willing to give it a try.

i own a european HOX.

i can even whip up an OTG cable. just have to warm up the old weller soldering iron.

so if someone could give me a link or schematics and a little how to i will give it a try.
[HTC One X] Polarfuchs:
http://lmgtfy.com/?q=make+otg+cable

+

http://xdaforums.com/showthread.php?t=1092493
[HTC One X] Traniz:
Dude, seriously uncool.

Thanks for helping him, but in the future... Let's not use LMGTFY okay? Okay...
[HTC One X] BenPope:
Why is that not cool? I think it's fine. Let's face it, when you want to find out something specific, the internet is good, specifically, search engines are great at finding pages if information that already exist. And the best thing? It's really quick!
[HTC One X] angusc:
I thought it was quite cool.......i have never seen that before :eek:

Sent witH desire from OneX
[HTC One X] Polarfuchs:
What's the problem? You really just have to google. Guess where I got that 2nd link (xda) from, right google.

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] n1kon:
It was uncool because that person was willin to test something others don't have the balls to in the aid for s-off and asked for a little help.
[HTC One X] BenPope:
Some people are too easily offended.
[HTC One X] jonas2295:
Some people don't get the idea of a forum like xda.
[HTC One X] Neo XL:
Yes, please work together and help the other one to get the best results. If you spend time and efforts for such an answer, you can also post the 2nd link without sarcasm. We all want to reach the target S-Off, so let us work together, everyone as he can.
[HTC One X] angusc:
So which ruu do we need some one to try and extract the rom.zip.......is it any other ruu apart from the original device version? Does the gold card have to be made via the device and if so, how so. For example i have a working gold card from my desire but that was made when the card was inside the desire so doubt it would work with my HOX.......or would it?

Sent witH desire from OneX
[HTC One X] X10@Germany:
any news about S-Off? it's very chaotic here :/
[HTC One X] SB13X:
Thats what I said it would be nice for a public outing of devs who are working on this and even better for them to team up under one banner.

Truth is that most of this thread bar its first few pages has continued to be made up of stab in the dark efforts. Nothing focused.

It would be good for a good clean up and guidelines of whats required from the rest of us who only want or are capable of offering assistance with testing etc.

Anyone got a list of recognised exploiters taking on the challenge for the bounty?
[HTC One X] Neaw:
Creating GoldCard using SanDisk 4GB Micro SD with GoldCardTool program, copy the file on the sdcard PJ46IMG.zip.

OTG cable + Rom (RUU_ENDEAVOR_U_ICS_40_HTC_Europe_1.29.401.7_Radio_1.1204.104.14_release_

259281_signed) extracted and renamed PJ46IMG.zip to sdcard

Phone still in S-ON did not work the method

PJ46IMG.zip only check the file and says USB disconnect power.

Video:

http://youtu.be/QXD7DAYqeUQ
[HTC One X] ytwytw:
looks like OTG method is working in some ways... since the file is LOADING!!!

cannot see the video clearly... is it UNLOCKED or (RELOCKED or LOCKED)?

if its UNLOCKED, it wont work...

and at the end says disconnect usb power, how about unplug the OTG cable and see what it gonna happen?

its a black text so it doesn't seems fail or denied... probably just an instruction?

---------- Post added at 10:55 PM ---------- Previous post was at 10:54 PM ----------

if the goldcard is made for desire, its also working for other HTC phone
[HTC One X] ytwytw:
so what is this?!

I know its a S4 HOX but its still HOX,

I am trying to help/give ideas that if it could help

try doesn't hurt, isn't it? :p

btw, it needs OTG cable to get this kinda screen

I am thinking it might need a special cable? or a samsung-like dongle to get into special download mode? going to try tmr... (my store got a defect Tegra3 HOX with a bad screen with tons of yellowish today, so at least have something to play with)
[HTC One X] xmoo:
Anyone tried it with kholk's kernell with the USB OTG support?
[HTC One X] mattman83:
Wouldn't that only help when booted into android OS?

M.
[HTC One X] :
Theres 2 otg in t3

Sent from my HTC Desire HD
[HTC One X] mattman83:
Yes, but flashing kholk's kernel is only going to affect what a booted android OS can see, nothing to do with bootloader etc AFAIK?

M.
[HTC One X] Rekoil:
There's no such thing as an S4 HTC One X, it is called HTC One XL, and it is a different board, we are thankful for the ideas however, and please let us know how it goes with the HTC One X tomorrow!
[HTC One X] artymarty:
Just wondering if booting in safe mode may have any relevance? I'm assuming that safe mode boot is not a secret?

Marty.

Sent from the future using tipi-tapa-talk 37
[HTC One X] f4flake:
No, sadly not.

---------- Post added at 10:44 AM ---------- Previous post was at 10:42 AM ----------

However, here's the Nvidia tegra git hub.

http://nv-tegra.nvidia.com/gitweb/

Perhaps we should be concerning ourselves more with "blobs" initially. as it seems to have been the route to unbricking devices and s-off too.

http://xdaforums.com/showthread.php?t=1068548
[HTC One X] M..N:
Not sure if it will be any help, but the A500 has a tool which can put the device into APX mode http://forum.tegraowners.com/viewtopic.php?f=30&t=388. Now I know each device is different but there could be some clues or ideas on how the One X could be put in to APX mode.
[HTC One X] blubbers:
it puts the device into apx using "cmdclient ec_recovery"

this is acer specific and won't work on the one-x
[HTC One X] f4flake:
It may help us understand Secure Boot Key and blobs though...
[HTC One X] tids2k:
on a good note, anyone with a Y cable and an unlocked device from HTCDev, try to add the token signatures to the goldcard .img and then relock the device and try to flash it via hboot .. if it detects sd card, this is an indication that gold card image made is correct.
[HTC One X] forelli:
You shouldn't be allowed to post in this thread for such a comment.

There are 2 HOX on the market: The "tegra 3" HOX called "international version" (quad-core Nvidia) and the S4 HOX called "AT&T version" (Dual-core qualcomm S4 Krait) where S is for Snapdragon. Know your fact right before you post, please.

f.
[HTC One X] tids2k:
damn it ! how is this helpful in development of S-OFF .
[HTC One X] forelli:
In the way that even if people willing to help have a S4 One X, they will feel free to, not being repelled by such a comment as "there is no S4 HTC One X"...

f.
[HTC One X] GabrielSousa:
HTC ONE X AT&T = HTC ONE XL

both are dual core

HTC ONE X AT&T is very different than ONE X.
[HTC One X] Rekoil:
There literally is no such thing as an HTC One X with a Snapdragon processor, you are talking about the HTC One XL which is based on the Evita board and is vastly different from the HTC One X (EndeavorU board). I'm not trying to discourage people, all I'm trying to do is make sure this thread stays on topic... developing an S-OFF for the HTC One X. I understand that HTC One XL users also want an S-OFF, all I'm saying is that this thread is not concerned with the HTC One XL.

Exactly, and

that is why

we don't post about the HTC One XL in this thread.
[HTC One X] Neaw:
Unlocked HOX relocked it, OTG Cable, creating GoldCard with GoldCardTool, I extract the file ROM.zip (RUU_ENDEAVOR_U_ICS_40_HTC_Europe_1.29.401.7_Radio_1.1204.104.14_release_259281_signed.exe) PJ46IMG.zip renamed and copied to the sdcard.

New Video Top Quality.

The method fails in the end.

The Video has better quality

http://youtu.be/y4uVGgwC4LE
[HTC One X] tids2k:
open the goldcard image with hex editor and replace the starting around 256 bytes with the bytes from your unlock_token.bin . That should make you a good goldcard image. I dont have a Y cable right now else would have tested.
[HTC One X] M..N:
Could someone with a Tegra One X do a dmesg for me if possible and upload it?
[HTC One X] f4flake:
tell me exactly what and I'll do it now.
[HTC One X] M..N:
Get terminal emulator from the market and type in dmesg>/sdcard/dmesg.txt

Then upload the dmesg.txt thats on your sdcard.
[HTC One X] maxld:
Here you go.
[HTC One X] f4flake:
here you go
[HTC One X] M..N:
Could you possibly turn the phone off completely then turn it back on, go straight into terminal and run it again and upload please.
[HTC One X] maxld:
Give me a second
[HTC One X] M..N:
Sure no problem.
[HTC One X] blubbers:
you won't get the early kernel output with a stock kernel.

here is a dmesg including the early printk's
[HTC One X] M..N:
Hmm what I was trying to look for was the CPUID, I was looking to see if the method used on the Acer A500 could be used here.
[HTC One X] maxld:
Here is after powering off the device.
[HTC One X] blubbers:
the cpuid used for the sbk on the acer is this variable:

androidboot.serialno

it is the same as

getprop ro.serialno
[HTC One X] M..N:
It can be found in the dmesg where it says androidboot.serialno, however on the dmesg you provided it says censored. So I guess its hidden.

EDIT: Maybe it can be seen on a One X that is s-off or bootloader unlocked via HTC
[HTC One X] RevoCold:
Yes i have it unlocked via HTC Dev and i can see my serial number
[HTC One X] blubbers:
i've changed it to censored :p
[HTC One X] M..N:
Oh xD. Okay so basically the value of androidboot.serialno = "CPUID". That CPUID can be generated in to a SBK (Secure Boot Key) using this http://vache-android.com/v1/index.php?site=sbk. The next step is to somehow utilise this, or figure out how to enter APX mode.
[HTC One X] blubbers:
this won't work for the one-x

a) the one-x serial is alpha-numeric, the acer serial is numeric-only

b) the one-x serial is 12 digits, the acer serial is 15 digits

c) the algorithm might be different
[HTC One X] M..N:
a) Well the serial on my acer device seems to be Alpha-Numeric iirc.

b) I believe an sbk would be generated regardless of length.

c) That is probably true :P
[HTC One X] blubbers:
the sbk might not even be bound to the serial. a sbk might not even be required.

but regardless, access to nvflash mode is a prerequisite...
[HTC One X] M..N:
Yup im going to look around how to enter APX mode, and see if there is any way possible of doing this.

The Acer A500 does it by using its reset hole + power button combo.

The Acer Transformer line does it by pressing vol up + power button.
[HTC One X] blubbers:
good luck on that. alot of ppl have already tried alot of combinations
[HTC One X] M..N:
I dont have the device, but im looking into see if another method could be used, instead of button combinations, kinda like how it was done of the Acer.
[HTC One X] nikorette:
How were the apx mode key combination figured out for other tegra devices?. By a user or supplied by the manufacturer? Has anyone asked HTC for the instructions to which apx is activated?
[HTC One X] M..N:
Could someone check if cmdclient is present in /system/bin?
[HTC One X] jonas2295:
Nope at least not at android revolution hd rom.

Or did you mean on stock?
[HTC One X] M..N:
Shouldnt matter, id assume if it was present on a stock rom it would be present on a custom rom.
[HTC One X] f4flake:
it isn't
[HTC One X] M..N:
Yeah thats fine, seems I read something wrong. Ill still keep looking.
[HTC One X] wwwalex:
any luck in hboot disassembling?

it seems heavily obfuscated but I'm still giving chance to IDA+qemu for analysing
[HTC One X] blubbers:
someone could check all 255 oem reboot codes, maybe one is nvflash mode

adb wait-for-device shell reboot oem-00
adb wait-for-device shell reboot oem-01
.
.
.
adb wait-for-device shell reboot oem-0a
.
.
.
adb wait-for-device shell reboot oem-ff

most of the codes just reboot the phone

oem-42 is hboot, oem-74 is off, oem-76 is factory reset, oem-78 is ruu

but be aware, some codes could wipe your phone and/or sdcard!

---------- Post added at 05:49 PM ---------- Previous post was at 05:48 PM ----------

p.s. the two digits are hexadecimal

---------- Post added at 05:50 PM ---------- Previous post was at 05:49 PM ----------

and to check if you've hit nvflash, you can run in another terminal

nvflash -w
[HTC One X] Rekoil:
False assumption, custom roms include only what is selected to be included.

This is a very good idea. How did that kernel for the Transformer Prime work, the one that allowed rebooting into nvflash mode?
[HTC One X] abc27:
That's a cracking idea.

There's a lot of people on this thread, if we could all test out a few codes and post your results here we'd be finished in no time and have organised documentation too.

View results here

Submit your comments here.
[HTC One X] miniudavid:
Gonna give them some tries. When I'm back home..
[HTC One X] mikep1993:
i'm still on a s-on locked HTC One X (bought @ amazon.de). How can i make a backup of my device, and how can i restore this if my phone get wiped by one of the commands?

if i had clockworkmod on my phone i knew what i'll have to do. but it's the first time i'm not s-off so yeah i'm kind of helpless.
[HTC One X] Fightspit:
adb wait-for-device shell reboot oem-13 => Enter in lucky-or-unlucky mode

adb wait-for-device shell reboot oem-42 => Enter in the "answer of all" mode

adb wait-for-device shell reboot oem-69 => Enter in sex mode

:D
[HTC One X] abc27:
@sibbor:

255, 254 aren't possible codes. You need to use the hexadecimal version of 255, 254 e.t.c.

Check the second sheet in my spreadsheet for decimal to hex conversions.
[HTC One X] omar302:
Check this.
[HTC One X] SB13X:
I'm just about sorted getting the kids to bed to give a few a go :D

Just for clarification is there a brick risk? Not gonna put me off just need to decide which device of the two I have to use?
[HTC One X] abc27:
Unlikely to brick but there's a very realistic chance that you'll factory reset your phone.
[HTC One X] mikep1993:
thanks i'm running the backup right now.

i think i've started a larger backup than described because i left out the -nosystem flag.

if it is ready the next 2 hours i'll try some codes. after that my mac book pro runs out of power..
[HTC One X] DeeTee73:
Unless I'm missing something this did exactly what a Gold Card should do - I suppose the question is - did you use the rom.zip that is CID matched with your device i.e. does it work for a ROM.ZIP with a different CID or does it fail on the CID check? (I'm not sure if this would be a dangerous test or not - need to think it through).

It does prove that the OTG cable method works and "IF" we had a DIAG file then we could use it...

I assume it also means that we could flash an ENG HBOOT using this method "IF" we had one...
[HTC One X] SB13X:
Bah no worries about that :D will attack them in a half hour or so.
[HTC One X] abc27:
First interesting discovery made by one of our members:

http://i.imgur.com/pvEKx.jpg

A red fastboot mode.
[HTC One X] :
That looks suspicious though.

You get that when you go into Bootloader and select Fastboot USB. That picture looks like it's been edited.
[HTC One X] co@ch:
There's just the pic? No other infos?
[HTC One X] abc27:
What else do you expect? There are a lot of codes to go through and people are only reporting whichever codes do more than just reboot the phone. Once we've found the codes that actually do something we can investigate them further.

adb wait-for-device shell reboot oem-34

Try it out for yourself.
[HTC One X] Fightspit:
Oh come on !!!!!!!!!!!!! :mad::mad::mad::mad::mad:

I DID take that picture after doing this: adb wait-for-device shell reboot oem-34

Instead of making a ****ty comment, try yourself....
[HTC One X] abc27:
Instead of shouting out "FAKE!!!1111, i've seen a lot of photoshops in my life and I can tell from the pixels" just go on to the spreadsheet, copy the command and reproduce it for yourself on your own phone.
[HTC One X] Rekoil:
For the record I discovered the special mode :D
[HTC One X] Evil-Dragon:
I've been looking at it for the last few weeks and manually converting to code instructions and ascii strings. So far I have about 1700+ subroutines and mostly converted but not sure where to go from here. I don't have much knowledge in Arm and some of my code has problems and red references to invalid areas. I've probably not even done it right but there is definitely a lot of readable code.
[HTC One X] Fightspit:
Yes, you did 1st. And then I took the picture for the proof :)
[HTC One X] abc27:
For the record, anyone who wants to play around with the newly discovered FASTBOOT mode:

adb wait-for-device shell reboot oem-34
[HTC One X] wwwalex:
great job.. have you by any chance identified entry point and memory map used for hboot loading?
[HTC One X] SB13X:
Running through the F codes now :D