yashsingh1/xdaforums huggingface dataset:
[HTC One X] xmoo:
The thing is....

If we want to do any of these.... We need to find a temp root, cause without temp root or root we can't flash anything...

Or we need to find a way through HTC Dev unlock or S-OFF how to resign the bootloader to LOCKED instead of RELOCKED.

Or else this whole S-OFF thing is for nothing... Cause the warrenty voids if unlocked...
[HTC One X] miniterror:
Thank god for insurances;)

Nothing is for free in this world.

I voided my warranty and im ok with it.

If smt is wrong ill just smash my device and claim a new one.

Still thumbs up for the work you guys do
[HTC One X] Bin4ry:
Ther was a user who gained the locked state before. So if it is more important to you to get locked again instead S-OFF you need to try it.

Try to relock while not having the original recovery partition on phone etc. etc.

There will be a case when the bootloader will drop you some errors, due it cannot write all values because you not resetet the phone to factory in a good way. Then you will get LOCKED instead RELOCKED.

You can see in HBoot why and when it resets to locked instead relocked.

Regards
[HTC One X] KrisPerry:
In this case we could simply say that we applied for S off via HTC dev but chose not to use it, hence warranty still intact
[HTC One X] mattman83:
IMO s-off is not just about getting unlocked without voiding warranty. Its also about getting free reign over our device. Even if we work out s-off now and find temp root later then everyone can still benefit.

M.
[HTC One X] backfromthestorm:
Not when they find clockworkmod where the stock recovery is supposed to be. A bit of a giveaway.
[HTC One X] cityuk:
bin4ry what needs deleting and how to gain locked state?
[HTC One X] blubbers:
Checked the code real quick, so the module basicaly loads a hboot image into the ram and sets the instruction pointer to said address?
[HTC One X] Drefsab:
that sounds about right for what it supposed to do, the question is once its in ram can it override the existing real hboot and all its security to allow the original to be overwritten with a hacked version.
[HTC One X] Evil-Dragon:
It would be so much easier if we had APX mode available :\
[HTC One X] Drefsab:
true, I've tried every kind of button combination I can think of, various times for the combinations and I even braved opening it (that was worrying but I wanted to try sorted the wifi issues I was having). and removing the battery to try and get APX that way but no joy :(.
[HTC One X] Bin4ry:
Yes that is the idea to go after. But many changes are needed on the existing code, it has to be adapted for this unique phone.

Later then for temproot we can dig , if this attempts seems to workout correctly. Atleast that is what i think.

Regards
[HTC One X] xn1:
I hope I dont sound stupid, however, I cant imagine HTC taking apart every One X that requires some software work, so if it does require a battery pull to access APX, won't holding down the power button effectivly be the same a removing the battery?
[HTC One X] Drefsab:
I only tried the battery pull because I already had the device apart to fix the wireless signal issue.

HTC strictly speaking shouldnt need APX, the can sign any software they want to push to the phone they will have ways of pushing to the nand that we dont. The reason we tried the battery pull is on other tegra 3 devices a battery pull was required to force the device into APX mode. As we don't know how to get it or if its possible at all for us people are trying various possibilities.

When the hboot was dissembled there was suggestions of a backdoor in the hboot code, however at the moment people have been unable to work out what this actually is really referring to or how to activate it.
[HTC One X] glukosio:
what about temp root? can it help? i found this: http://www.androidiani.com/forum/htc-one-x-modding/129783-temproot-root-one-x.html

(it's in italian)
[HTC One X] Drefsab:
I think thats the superboot method that only works on developer devices and not retail shipped units (http://xdaforums.com/showthread.php?t=1577671). I may be wrong but I think its the same thing.
[HTC One X] joll200x:
pretty sure that's Pauls method from Modaco (that's where the file comes from too). This only worked on devices which were already S-OFF
[HTC One X] godutch:
I googled around about apx and on some other devices there are tiny buttons which could be pressed by sticking a toothpick into them, since you opened your phone already you could have a look if you could find some sort off switch, my guess would be to look around the sim tray or the sim tray release button
[HTC One X] glukosio:
or one of two microphones?
[HTC One X] godutch:
I wouldn't poke in there, but maybe the loudspeaker grill, anyway he opened his device so maybe he can open it again and check around; other options for htc of course would be jtag or pogopins to enter apx but that would be much harder...

does anyone have a service manual for the hox?
[HTC One X] glukosio:
i'm trying some button combinations, and when i've got shuffles collegated to the phone, (from switched off phone), and i press vol+ and vol- keys together, my one x vibrate, what is it?

EDIT: and tiping in cmd "adb reboot apx" the phone normally reboot :/
[HTC One X] Drefsab:
Sadly there was none, I was also looking for contact points on the motherboard to short (used on other devices like a switch) and couldnt find anything useful. Im not the only person to give it a go there was someone that killed their device trying these things so I was being careful.
[HTC One X] godutch:
and the sim tray ejector could it function as a button? maybe simtray eject + other button combo?
[HTC One X] Evil-Dragon:
Unfortunately typing in anything that the phone doesn't recognise will result in a normal reboot, e.g. adb reboot blarg

I was looking at 'fastboot oem boot <variable>' command before but all it would do is put the phone into a weird state where the driver for the phone would come under the CD-ROM drive section. More of the oem commands need looking at to see if they play any part.
[HTC One X] gaiden0000:
I'm sorry for Hijacking this but, figured here is the best place to ask. Does anyone know where the One X would be looking for when it is trying to apply an update from both:

1) External Storage

2) Cache

I'm working on something and can't figure it out. Image of what I'm talking about is attached.
[HTC One X] Spider24:
Hi been awhile, don't know if this could help but here it goes

Got hox 3 weeks ago updated ota and then rooted via htc dev

Installed custom rom charmander_v4.0.0_PkMn with patch update 4.1 also did something prior in fastboot to update the kernel

Did not like some app integration in rom and restored to stock rom via cwm restore ( backup made prior custom rom )

Receved an ota update today and tried to install

And this is where it becomes interesting hox reboots into recovery mode and auto tries to install ota update, but it can't find it on further inspection notice that noting was mounted so mounted sdcard, data, system patitions

Went to install zip from sdcard and choos ota update thats in the downloads folder, it starts download install like follow

Installing: /sdcard/Download/OTA.....zip

Finding update package...

Opening update package...

Verifying update package...

E:failed to verify whole-file signature

E:signature verification failed

Installation aborted.

If i toggle signature verification then this part is in place of the E:

Assert failed: check_cid(getprop("ro.cid), "00000000", "11111111", "22222222", "33333333", "44444444", "55555555", "66666666", "77777777", "88888888", "99999999", "HTC__001", "HTC__E11", "HTC__203", "HTC__Y13", "HTC__102", "HTC__405", "HTC__304", "HTC__032", "HTC__J15", "HTC__A07", "HTC__016", "HTC__M27") == t

Error in file /sdcard/Downloads/.....zip

(status 7)

Does this mean the signature keys lives in the recovery partition or kernel ?

Think if i update via RUU and not OTA that the update will install ?
[HTC One X] ShyamSasi:
That signature check is different than the securtiy flag we have
[HTC One X] gaiden0000:
@Spider24 Sounds just like your device wasn't one of the one's that is update able by the OTA that you where trying to use. Your CID doesn't match any of those mentioned in the section above from "00000000" to "HTC__M27". (Makes you wonder what the "00000000" CID is though since SuperCID is supposed to be the "11111111")
[HTC One X] Evil-Dragon:
The public signature is in the zip file itself, it's a header that verifies that it's not tampered. Any changes to the zip breaks the signature. The private key is, well private. We don't know the private key but both the public and the private key work together to create a trust between the signer (HTC) and the device's public key.

Getting S-OFF is probably easier than breaking the private key.

---------- Post added at 06:48 PM ---------- Previous post was at 06:42 PM ----------

Found this in the Tegra manual:

17.1 APB Miscellaneous Registers

17.1.1 Strap Registers

This register allows the state of the HW straps on the board to be read. These strap values are captured at reset.

17.1.1.1 APB_MISC_PP_STRAPPING_OPT_A_0

Strapping Options Register

Offset: 008h | Read/Write: R/W | Reset: 0bxxxxxxxxxxxxxxxxxxxxx0xxxxxxx0

Bit Reset Description

29:26 X

BOOT_SELECT: read at power-on reset time from gmi_ad[3:0] strap pads.

0 = MPCORE_G

1 = MPCORE_LP

25 X

BOOT_SRC_USB_RECOVERY_MODE: read at power-on reset time from gmi_oe_n strap pad

0 = DISABLED

1 = ENABLED

24 X

BOOT_SRC_NOR_BOOT: read at power-on reset time from gmi_wr_n strap pad

0 = IROM

1 = NOR

23:22 X

ARM_JTAG: read at power-on reset time from {gmi_clk,gmi_adv_n} strap pads 00=Serial_JTAG,

01=CPU_only, 10=COP_only, 11=Serial_JTAG (same as 00 case)

0 = SERIAL

1 = CPU

2 = COP

3 = SERIAL_ALT

I think APB is the same as APX. The good question is how to affect those values at that offset. But the good news is it's Read/Write meaning it can be changed and isn't locked out to changes.
[HTC One X] j.finn:
Or maybe the hole left to the earplugjack/hole
[HTC One X] Evil-Dragon:
That's a mic hole.
[HTC One X] Dave Trouser:
I tried that when I had my One X open. Tried all combinations of Vol, PWR and SIM tray. No results.
[HTC One X] Fightspit:
I found something which can be useful:

fastboot oem klog

This command is the one from the list:

http://xdaforums.com/showpost.php?p=26984890&postcount=2527
[HTC One X] Evil-Dragon:
Does anyone know where it dumps the log to? I tried this and couldn't find the location of the log file.
[HTC One X] h00py:
There's a file in /system/xbin called klog.sh it has the following in it

/system/bin/cat /proc/kmsg >> /data/klog
[HTC One X] Fightspit:
****!

My battery is totally empty, I should charge it :/

A while before, I wrote that:

fastboot oem heap

and

fastboot oem heap_test

It gives a simple output
[HTC One X] wwwalex:
What if there is a reed switch? Pretty simple solution to avoid external pins/holes whatever. Service guy put phone on the stand where megnet applies field to a particular place on the phone bodye, reboot the phone job's done.

Hi-res images of motherboard would shed a light on this...

Hall probe should be also considered...
[HTC One X] Rekoil:
Cool idea, I like it! ...but not so much that I'm opening my precious :P
[HTC One X] miniudavid:
Hi. I dont know it was tried before. But I have hold vol dow, divice switched on, ond hold power off...... and the phone straight jumped to bootloader. I plugged in Usb to my pc and it found an unknown device... The same procedure with usb connected bevore and it jumped too but tried to load something

my device said:

sd checking...

failed to open usb master mode

loading HTCUpdateZipName image...

failed to open usb master mode
[HTC One X] SvenSSSvensson:
"It can turn USB slave from Android cellphone into USB Master mode which can connect external USB devices without connecting to PC"

Would it be possible to use an external drive in this mode and use as goldcard?
[HTC One X] BeciMester:
Would this help?
[HTC One X] stephen21:
Dont think so, It's the AT&T Version dual core

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] bozza1001:
Will I be ok to update if am wanting to unlock and s-off?
[HTC One X] MemAllocatoR:
will this be usefull to us?

http://xdaforums.com/showthread.php?t=1426502
[HTC One X] BeciMester:
It's better not to. You can always upgrade but cannot downgrade, and if a vulnerability is discovered for an earlier version you'll be banging your head against the wall. :)

I'm on my 1X...
[HTC One X] BenPope:
Update what from what to what?

Update your ability to read or reason logically?

Can we get s-off on the version you have?

Can we get s-off on the version you want to upgrade to?

Will we get s-off on either of those versions?

If you answer "don't know" to any of those questions, you have your answer!
[HTC One X] bozza1001:
Update from 1.26 to either 1.28 or 1.29 reason I am asking is isn't it better to s-off one update first seen as your hboot changes nearly everytime you up date dosnt it n yes I am a nuby but am not a child so don't speak to me like one Yeh also I have been following this thread since it started been trying to help were ever I can n I have also READ every post on every page to know that nobody has answered that question that is y I asked n no there isn't s-off for any version as of yet.
[HTC One X] bozza1001:
Thanks :thumbup::)
[HTC One X] cjm1979:
Why be a prick? It's quite obvious what he meant.
[HTC One X] Evil-Dragon:
Probably because we've been down this road before and it's been answered. It gets tiring giving the same answers all the while. We need a wiki for this crap.
[HTC One X] miniterror:
Help youreself then and make one^^
[HTC One X] cjm1979:
I know what your saying but I bet there is as many flames like that as there is crap posts in this thread. It'd be better to ignore and report to mods.
[HTC One X] Kickasskev:
Just a quick question.

Are we off topic AGAIN???????
[HTC One X] DesmondderMondbär:
Yes, we are. Were at least 300 pages, and sometimes i think the pressure on xmoo and other devs is to hard. So maybe this thread should be cleaned from thing wich have Not to Do anything with s-off.
[HTC One X] DesmondderMondbär:
Ok, something Else: when signing the Rom.ZIP is the Probleme, we should try this:

http://xdaforums.com/showthread.php?t=887014

Edit: this may Too: http://xdaforums.com/showthread.php?t=473580#
[HTC One X] f4flake:
I've tried this driver earlier in the thread without success. Hence my current obsession with pogo pins as the way to apx.
[HTC One X] witm01:
This is not merely about the images being signed, the certificate they're signed with is what matters. So for HBOOT to accept them they'd have to be signed with HTC's private key - which we don't have and won't have... ever! If you'd like to extend your knowledge of the matter a good place to start is here:

http://en.wikipedia.org/wiki/Digital_signature
[HTC One X] kb0n:
The problem is not the signing procedure, but the key. Unless you don't have S-OFF, you can't modify the RUU (to update your radio) because you'd need the private key matching the public one on your phone to resign it -> only HTC has the private key.

and about the off-topic stuff: you don't get it, those posts about being off-topic, are just part of the off-topic themselves.

Guy asks question that has been answered 100 times. Just ignore it. If someone answers, then let it be answered and don't mind about that answer...let it be. If someone does repeat on that answer, just ignore it again.

Stuff like "are we off-topic again?" -> cmon, nobody needs that.

And "thank you"...pure spam, just hit the thank you button...-_-

That being said, please don't reply on my this statement. PM me, set profile message, hit the button, ignore it, whatever...just don't fill up this thread.

(wanted to say this earlier, but I waited till I could add something on-topic to that).

Oh, and as long as this thread is "dev & discussion", you won't be able to separate those 2.
[HTC One X] Synoptex:
Any way I could help you, guys? )))
[HTC One X] DesmondderMondbär:
Yes, how to get s-off or a step would be unofficial bootloader unlock.

Ps: afaik toggles bootloader unlock the signature verification , doesnt it?
[HTC One X] DarkMio:
Why should it? HTC Dev Unlock uses the same keys.

An unofficial Bootloader wouldn't care about signatures anymore. So It's a useless feature in a zip, that is actually there but isn't checked.
[HTC One X] glukosio:
can we use bruteforce to find private key?
[HTC One X] techmatlock:
No, it would take too long.
[HTC One X] glukosio:
Yes, but will it take longer that finding s-off?
[HTC One X] Kickasskev:
Years and years
[HTC One X] theliquid:
Bruteforcing that key is nearly impossible ....

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] glukosio:
And what about asking this key to one friendly htc worker? Or they know it as we?
[HTC One X] Evil-Dragon:
I think you'll find the average HTC worker won't have access to the key, probably the CEO and other senior HTC staff. The key is too important just to give to just anyone.
[HTC One X] steve36:
any one tried asking george hotz he got private keys out of ps3 thought to be impossible?

just asked him might be a big no but worth a try
[HTC One X] Joolee:
Sony was just very stupid to put their private key on the playstation. The private key is best to be kept in a vault and only be outside of it when there is something to be signed. Just look up Diginotar. They had their key on one of their servers, look what happened to them.
[HTC One X] steve36:
well at this stage the more people trying to help the better i would have thought
[HTC One X] Drefsab:
Not everyone is as stupid as sony, George didnt know the key was there he was looking for exploits managed to break the chain of trust and found that they had left the private key there in the firmware of every ps3 at the time. Thats major fail by sony sure they thought it would be safe but its still a retarded move.

Don't be expecting HTC to be as dumb as that, most people weren't but after a few high profile blunders most people who have a clue about security will be making sure private keys not stored on the devices.

As for breaking the private key look for my post earlier in this thread about how likely that is.

Long story short its not going to happen, your more more likely to find an exploit that allows you to run unsigned code or the method to the backdoor that's suggested at by the hboot decompile that's been done.
[HTC One X] MarylandCookie:
Just for the record, there was no PS3 key stored in the console (except the psp key), Sony used the same random number which effectivley allowed anyone to be able to calculate the key.
[HTC One X] Drefsab:
true but I didnt want to get into explaining the actual exploit used, for those that are interested in the actual details I suggest you watch (http://www.youtube.com/watch?v=4loZGYqaZ7I) :)
[HTC One X] jutley:
"------O Did someone ask for the key here ya go.
[HTC One X] steve36:
At the end of the day who gives a **** how or why he did it just thought the guy might be able to help
[HTC One X] ytwytw:
xtc might be dead (I agree, no update for more than half year)

but the sim can be still used as white card, or smartcard to unlock the phone, the key is the file to enter DIAG mode, which is the problem for now...

not sure If its possible to make one or mod other DIAG file to get it work or not, and lots chinese store do that for living

---------- Post added at 12:53 PM ---------- Previous post was at 12:35 PM ----------

im NOT trying to do AD here but the official one is xtc.hk

gsmhosting has more details about it
[HTC One X] ytwytw:
I have the XTC Clip Original too, just waiting for my One X arrives...
[HTC One X] doublecheese:
I have the full version XTC Clip as well as the One X.

But as far as I remember Incredible S was the last phone to be S-Off'd.
[HTC One X] :
Well, I love hardware level things, that and low level software. But hardware requires the phone itself (so i wont be doing it) And the low level stuff can be dangerous. I was thinking that, after reading the goldcard thing about the bin... Lets grab a goldcard.img and try rename it to the proper .bin name, and send it to hboot the same way as an unlock. It could very well work.

just

rename .img to unlock.bin

put phone in hboot

use oem unlock methood for fastboot, but dont go to HTC Dev. Instead just go ahead and use the renamed bin

report if it works
[HTC One X] tids2k:
there is another possibilty, but i dont have the card reader to test. if OTG works on HTC One X, we can try to plug in a card reader, put a microSD card .. use goldcard tool from market and then boot into bootloader, rename the .img to .bin and see if it works ?
[HTC One X] :
I was thinking that you could grab the internals CID and use that for goldcard, but never flash the img. Just rename it and use the htc command they want you to use but use the goldcard img instead. Never know, may unlock it. Or may allow temp unlock
[HTC One X] tids2k:
please elaborate simons !

---------- Post added at 12:45 AM ---------- Previous post was at 12:44 AM ----------

also can i run fastboot oem enableqxdm 1 without S-OFF ?
[HTC One X] :
First you get a goldcard helper app, to get your cid. This is pre reversed. Theres this one site that creates free goldcards. So we go and it lets you download your goldcard right there. after you download this goldcard.img file you will want to go ahead and just rename it unlock.bin and reboot to hboot. Then next we issue the fastboot oem command they use to unlock. But instead of that bianary they use, we use the one we just renamed. Maybe hboot pulls your sd info as part of the token? Just an idea
[HTC One X] tids2k:
wont let me do it

C:\fastboot>fastboot oem writesecureflag 0

...

FAILED (status read failed (Too many links))

finished. total time: 0.118s

( I HAVE ROOT and UNLOCKED BOOTLOADER )
[HTC One X] :
no we need to fake unlock with the golcard img renamed to unlock.bin then try
[HTC One X] tids2k:
i am already unlocked ... and rooted still would not let me use oem commands ! i think we need to be s-off for that !
[HTC One X] :
Your not getting what im saying.
[HTC One X] mattman83:
Rename goldcard.img to unlock_key.bin and use the same command you did to unlock with the htcdev key.

M.
[HTC One X] :
correct
[HTC One X] c4b4l3:
Hi,

I'm testing this method and failed
[HTC One X] mattman83:
0kb file size for the token?

M.
[HTC One X] c4b4l3:
No, 384 octets (384 octets) for token file, created with GoldCard Helper and psas.revskills.de
[HTC One X] mattman83:
Ok just checking ;) shows as 0kb in fastboot cmd in your screengrab.

M.
[HTC One X] tids2k:
simon, i've posted my token and key few pages back, see if u can make anything out of that ?
[HTC One X] dryan433:
Lol what's the ps3 to do with the HTC one x lol where not on a ps3 forum haha still I don't think HTC would be silly enough to leave them on the device now just hoping Yeh s-off solution found soon be so great to have full control back of my phone like I did with my desire :)
[HTC One X] Beatastic:
Dear A........,

Thank you for contacting HTC regarding your HTC One X.

My name is R.... and I am a Technical Support Agent for the HTC Written Team.

I’m sorry to hear that you are querying if one can turn the Security off or unlock the bootloader on the HTC One X.

I apologise for the inconvenience you are experiencing with this issue. At this time there is no official means or steps available to unlock the bootloader, turn off Security measures or similar activities for the HTC One X. The situation may be altered in the future, but please be aware that this will require approval from our retailer/network partners who brand and resell our devises with their software installed as well.

This is what HTC answered me.
[HTC One X] Dubhaltach:
Aye, what I got looks more promising.

This is a quick email to let you know that currently the S-off is not available for our HTC One X.

You will need to register with our HTCdev.com site and wait until this is available on the site.

Currently this is all the information we have at the moment.

If you have any further queries or issues, please do not hesitate to contact us again.

Thank you for contacting HTC Support.

Sincerely,

Xxx