yashsingh1/xdaforums huggingface dataset:
[HTC One X] wph:
Since this topic is already a mess I will reply to this.

What devices have the most active developers area? The ones with the closed bootloaders and strict security or the devices that are more open and where it's easier to flash stuff? For users and also for developers it is still a phone and for most of us it's an expensive gadget. Not everyone is willing to void their warranty just for the fun of flashing roms. For me it would be a reason to sell my phone if something nice comes where I do have those freedoms. For other people (normal users and devs) who check out these topics it might be reason not to buy this device.
[HTC One X] Rekoil:
To elaborate: once you change a file the old signature is no longer valid, you need a new one which you cannot generate because you do not have HTCs private key.
[HTC One X] Zulake:
No ****, that's why I said 'I wish we could...' :)
[HTC One X] Erik Lieders:
this is walking in a circle
[HTC One X] Zulake:
Every circle has an exit, so does this circle.

It's just that we have to find that exit now. And we're pretty close too.
[HTC One X] backfromthestorm:
Try removing everything from the rom.zip, just leave the hboot.img and android-info.txt?

You'll at least know if it's worked 74 seconds sooner if nothing else.
[HTC One X] xmoo:
Pfff it's been a long day. Time to get some sleep. I'll be back on friday. Will be visiting some friends and family.

For now you guys have my story and a ENG HBOOT (first one ever made for the One X) to play with.

Will try to release some higher version ENG/MFG HBOOT when I get my hands on them.

Goodnight

Ps. Anyone knows what RAM Dump does or how it works. Was a option on there Engineering device, see the first pic of there device. I'm in the RAM Dump option
[HTC One X] miHah:
What about trying to get that similar spoof to unlock our HTC ONE X with modified HTCdev.com method like they did with att and rogers?

link for Rogers/att One X unlock method: http://www.xda-developers.com/android/unlock-att-and-rogers-one-x-without-htcdev/

EDIT:

IM SORRY, THIS HAS ACTUALY NOTHING TO DO WITH S-OFF, IT ONLY GIVES YOU CHANCE TO UNLOCK YOUR DEVICE WITHOUT TELLING HTC YOUR IMEI AND S/N SO YOUR WARRANTY WOULD NOT VOID!
[HTC One X] mattman83:
I haven't looked that hard at it, but the S4 HOX has alot more unlocked partitions (even when stock) so they can play with stuff where we can't in alot of cases. Changing CID for HTCDev was done in a similar manner but also not available for our phones.

M.
[HTC One X] ewok666:
At this point you device would still say re-locked...
[HTC One X] mattman83:
Yes. Until we can get S-OFF that won't change.

M.
[HTC One X] keroro430:
When I was flashing RUU to Incredible S with revolutionary s-off, the banner was still shown "relocked". I don't think we can change the status after we gainned s-off

Sorry about my bad English.
[HTC One X] ste1164:
Really? When I had the Incredible S it was pretty easy to change the status after you S-Offed the device.
[HTC One X] miniudavid:
So what if we dd the eng hboot to right location of memory?
[HTC One X] Rekoil:
dd isn't a magic key that unlocks the flash memory, we are still restricted by what the existing HBOOT allows us to do, our best bet was that the ENG HBOOT was signed, and that the signature would be enough to flash it. Turns out the existing HBOOT doesn't want to be made into an engineering device, even if the image is signed.
[HTC One X] audioslim:
Perhaps the person that appeared to have the semi bricked onex in apx mode would be able to flash it then we would just need to workout how his mate bricked it in the first place

Slim
[HTC One X] miniudavid:
I would try to go for that brick. Got to make a exchange with the device. Never unlocked or something. So they won't know what happened:P
[HTC One X] miniudavid:
Just had a look at the eng hboot and there where some parts wich pointed on the pins and right voltage I think. I'm not that good in that stuff, just went for informatics for only one year. So maybe its useless.. plus I tried to rename the IMG pj46.IMG put it on root of the memory and went to hboot via vol- and power during the device was running. It erased the file. But in that way hboot is searchin for a file.
[HTC One X] miniudavid:
Tried it again. With the hboot called pj46.IMG and jumping to hboot with both vol keys holded. The device kept hangin on checking sd card update. After 2 minutes or so I rebooted. Because nothing happened.. just tried it because I thought the hboot is signed. And on my other devices, desire and sensation we could flash radio and firmware that way. Please don't flame my. I'm just tryin out some things
[HTC One X] Thunder07:
was your phone connected to power plug???

plus that file has to be on an sd-card connected to the phone through Y-Cable
[HTC One X] miniudavid:
Yes I had it connected to the ac. And I had the file on root of phone memory. Ain't got no y cable. Maybe I can build one? How-to?

Just saw in the hboot that if we got a unrecoverable bootloader error the device will enter nv recovery via jtag backdoor.
[HTC One X] Thunder07:
the reason you where stuck at sd because you had AC plugged in,

i guess the phone is expecting the SD to pop-up but it never does.

as for the Y-Cable http://xdaforums.com/showthread.php?t=1676794

scrap that link... you need one that would connect to your device and sdcard reader

as for the back door... the only way i see that happening is unplugging the battery as hboot is updated...
[HTC One X] audioslim:
It also might be possible to change the hboot without breaking the signature but just enough to cause an unrecoverable error thus triggering apx mode. All depends on how its signed. Windows executables don't have header info signed I believe. Perhaps something similar is done by HTc.

S
[HTC One X] miniudavid:
Something else.

Can't HTC be nailed on this?

Legal Issues [Edit]

Proprietary software is often under a EULA that forbids the disassembly and decompilation. However, this is in Germany legally binding only in rare cases. Also, reverse engineering for the production of compatibility with third party software backed expressly permitted by law - and thus not be bound by a license agreement. [1] The work of disassembling is copyrighted programs in some countries, however, regulated by law, because the disassembly opens the possibility to modify the code and then again to assemble in a program. This could, for example, experienced assembly language programmers and crackers for a password removed, an activated function switched off because of license restrictions, or an undetected virus are introduced into the program. Detailed explanations on this aspect of disassemblers and similar tools are found in the reverse engineering products.
[HTC One X] angusc:
I think the east way is to use a USB hub which can be plugged in to your pc for power. Then plug in a sdcard reader to one port of the hub, then using your micro USB to USB cable plug the phone in to the hub as well. Plug your sdcard in to the reader and try reboot in to HBOOT. You might have to modify the micro USB plug by grounding pin 4 to force OTG mode on your phone.

Sent witH desire from OneX
[HTC One X] miniudavid:
Ill try it tomorrow
[HTC One X] xmoo:
My usb y cable is dead, so have to order a new one :(

Someone told me that the One series uses same goldcard method as the Sensation series. Anyone tried that?

Also I found someone with a smartsd card. Anyway to fully copy the sd-card? I believe it was posible... You could copy it to a .img file.
[HTC One X] smallvan:
I found a shop in China that offers s-off service at US$10. However, I did not do as the guy told me all data might be gone and he could not tell me the steps to be done on my HOX. But he mentioned about using a card or something.

At this point, anyone has experience with s-off by white card or else? Anything I should do before doing the s-off?

I am sorry for away from topic.
[HTC One X] Spider24:
Hi

Has anyone noticed that when you run the RUU it not only creates one temp folder with the rom.zip file in

There is another temp table that contains a disk1 folder within that folder there is a data.cab when you open this with winrar it contains htboot????.img and android-info.txt I do however get an error that the file is corupt

I did however try and replace this cab file with hboot0.03 but the the ruu returned with use valid app
[HTC One X] xmoo:
Ok latest info tells me HTC repair center use a global Microsd card which they originally used to DIAG the Sensation series and now also to DIAG the One series. It is a normal microsd card which has a sensation goldcard.

The DIAG automaticly boots in hboot, formats ur phone and removes all types of security etc. I don't have any experince with the goldcard for a sensation. If onyone does try flashing a rom from different CID on your device.
[HTC One X] Beatastic:
Thats what I heard from a chinese guy, too.

This card they use is called Javacard/Smartcard. Moreover the guy told me that it is a s58 file that is on this card, which S-OFFs the phone.

He gave me this picture :
[HTC One X] Thunder07:
that should do the trick,

just choose the SD then choose to save it into a file.

it will also allow you to copy it back

http://hddguru.com/software/HDD-Raw-Copy-Tool/
[HTC One X] miHah:
so the easiest way of obtaining s-off would be to get that smartcard from some repair center or something? What are the odds......
[HTC One X] wph:
Can you tell me what cable you exactly ordered and where you ordered it? I'm going to order the same one, because I think this is the fastest way to S-Off.
[HTC One X] xmoo:
I order this one http://www.ebay.nl/itm/DeLock-USB-Y...bs_Adapter&hash=item5d33cd7fe0#ht_1849wt_1398

And have a USB OTG cable which I used for my Galaxy S2. Will link that one to this one, because the USB OTG is Micro-usb.

EDIT:

So a whitecard/smartcard/javacard/smartsd should do the work. No need for megasim.

But this won't be a perm solution as we need to have the card.
[HTC One X] Kickasskev:
But if the card can be copied, all we would need is a y cable and a card and reader right?
[HTC One X] xmoo:
If we can get a image of the whole card. And get it to work on other card cid's. Then all you need indeed is a y-cable and a card reader.
[HTC One X] joll200x:
Be careful using any RAW disk copy tools that run on windows - they don't always copy the whole disk byte for byte. It's unlikely that there would be any FAT partitions on the smartcard but if there and you try to image it you might only get that partition and no later ones on the disk.

I'd go for DD under linux over a windows tool any day, even if you have to boot up from a live CD / USB to do it.
[HTC One X] Rekoil:
Unless it is a really ****ty smart card it will not be possible to copy it since it contains an operating system of its own.
[HTC One X] xmoo:
Clone is made with http://hddguru.com/software/HDD-Raw-Copy-Tool/

and is being uploaded now, so Football can check it.
[HTC One X] sieempi:
A smart sd card is soo different than a simple sd card. It has almost the same circuits & chips as a sim card embeded within, doing a raw copy is useless. You need to look for a different approach.

Via XDA App
[HTC One X] wineds:
Are you saying the smart card may indeed be something like this :

http://www.spyrus.com/products/rosettasd.asp
[HTC One X] sieempi:
Yep, it's the worst case scenario. A smart card with a built java based OS, extremly difficult to tamper:

https://www.sdcard.org/developers/overview/ASSD/smartsd/

I can only see these posible pozitive events:

-acquiring some of those sd cards and sharing within the community

-someone developing a commercial solution emulating the cards (like xtc clip, most likely the payg version)

-the last, but not least, if hboot is the one that manages security: exploitation; that means cracking your head with disassembly, arm (specially tegra 3 platform) and so on. ( requires highly specialized people/teamwork ftw!)

Via XDA App
[HTC One X] Zulake:
It seems to me the method used to S-OFF is described in these pics more or less. We just need someone who speaks Chinese to translate this into English.

If we translate this I think we would at least know how to do this or what is used in the process so we know a bit better what to look for etc.
[HTC One X] xmoo:
Already did this, nothing usefull ;)

For now only way to do it is with a javacard/smartcard.
[HTC One X] Zulake:
Am I right to conclude he does something with the RUU and then somehow bypasses the CID check (the red line which makes the shortcut) to get the desired result?
[HTC One X] Thunder07:
RUU doesnt do ANY cid checks of any sort
[HTC One X] Zulake:
I was quite certain there was some kind of CID/validity check when you try to install a RUU? Or am I now mixing things together by accident?
[HTC One X] Thunder07:
the phone does that not the RUU,

if it was the ruu it would be cracked wide open at this stage.
[HTC One X] Zulake:
Well, I was actually more or less referring to that. :silly:

Bypassing it so you can install your own RUU with an ENG HBOOT included, etc. You get my point now I guess. :)

//Gah, I really hope we find a way to S-OFF and root it very soon. I just can't wait to run a custom ROM on this big bad boy. :)

I can't unlock my device through HTCdev as it rejects my key, that's why. :)
[HTC One X] techmatlock:
@xmoo Do you have any connections with people who owns the smartcard at a repair shop?
[HTC One X] xmoo:
I don't have any connections, a lot of people are willing to help.

I'm just a student and xda is a hobby.
[HTC One X] JEZ69:
hello xmoo

i just ask if i understand well

if i want to flash a stock rom on branded phone (orange fr in my case)

i need an sd card an smartcard reader a good cable copy rom.zip from the ruu i want rename it pj46000.zip put on sd card reboot on hboot and wait for upgrade?????

that s it??

but wath about the cid?? :o
[HTC One X] Kickasskev:
This is about s-off not flashing roms, please read the first page.
[HTC One X] JEZ69:
ok,thank s to reply it s does mean with this way we can have s-off?..
[HTC One X] Kickasskev:
AHAHAHAHA

Read the name of the thread then

read the first page of posts

!!! no we do not have s-off !!!
[HTC One X] Kickasskev:
@Xmoo

How do you connect the y cable to the phone? From what i see in the ebay link you posted two pages back it has a female usb and 2 male usb ends, shouldnt one be a micro usb?
[HTC One X] xmoo:
As I said. I also have USB OTG cable to Microusb which I will link to the Y cable.
[HTC One X] Kickasskev:
Would this be any good on its own?

or would you need the y cable for the extra power?

http://www.ebay.co.uk/itm/170855008457?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649

When I get my phone back i'm gonna have a play around with my goldcard
[HTC One X] xmoo:
Y cable plus this one would do the trick.

You need external power. The USB port does not do external power, only the POGO pins do.
[HTC One X] Erik Lieders:
I think first you need to find java card. Cable is not a problem. You can buy it.
[HTC One X] scream_clarity:
I'm calling all of the local shady cell phone and computer places in my area to see if anything like this can be purchased or borrowed from somewhere. There has to be somewhere.
[HTC One X] GabrielSousa:
+1
[HTC One X] miHah:
i've been searching the xda china and everyone there is talking about some white cards and how you can't s-off with it anymore - you need a new gold card now? are they refering to what we call smartcard? And also, there are bunch of people in china offering s-off for out htc one x for 6eur (calculated) as you already might know.

I've been thinking about kidnapping one and torture him to tell us the secret ;)
[HTC One X] xmoo:
It is a smartsd. A SD card which has the clean s58 diag file. The sd card has a gold card which works for the sensation and one series.

Run DIAG, clear security and bammmm ur s-off'd, supercid and sim unlocked.
[HTC One X] shootind5nukes:
I'm in contact with a guy that has provided proof of this "gold card" He has 10 from HTC factory and says he wants 4000. apiece. He has provided proof that they do work and he does have them. He can goto hell before I pay 4000$
[HTC One X] wineds:
4000 dollars or 4000 rmb ?
[HTC One X] nikorette:
I'd pay no more than 200 aud for a legit one
[HTC One X] smallvan:
I am not comfortable with the possibility of bricking my HOX by sending to the Chinese shop and do the s-off. If you were me, what will you do? Any view? :confused:
[HTC One X] Ga73:
I'd stop cluttering the thread with pointless posts.
[HTC One X] irharrier:
take a look at this thread
[HTC One X] calvinleeabc:
proofed not working...
[HTC One X] irharrier:
just saying.

I thought maybe something useful can be found anyway:D
[HTC One X] avensakias:
THAT'S EXACTLY WHAT XTC CLIP DOES AND I HAVE IT.

TELL ME WHAT DIAG.NBH YOU NEED ACCORDING TO THE SUPPORTED MODELS OF XTC CLIP TO ATTACH IT FOR YOU.

Sent from my HTC Desire S
[HTC One X] AdamLange:
I got the clip also. The problem is that it comes with sim cable not microsim :) and simply using goldcard will not s-off the phone (it needs the AT commands send to modem)

Adam
[HTC One X] fstluxe:
this sim could be modified in to a micro sim with a bit of tweaking/ soldering It is possible for sure!

btw, Are the AT commands the same for Nvidia tegra as for the Qualcomm?
[HTC One X] rbotz:
When you cut a Sim to Micro-Sim with a Cutter, u can use the Frame to fit Micro-Sims into normal Sim Slots. I used so a MicroSim in my old Desire without any Probs...
[HTC One X] Kickasskev:
there is a bloke who already tried messing about with the clip, he cut the ribbon down to the size of a micro one, dont know what he tried with it though
[HTC One X] angusc:
Check about 100 pages back. Doublecheese already tried his xtc clip for some earlier testing.

Sent witH desire from OneX
[HTC One X] lilvfr400boy:
Sorry if this is a repost but I've come across something but have no pc anymore to try this ,

h t t p://translate.google.com/translate?sl=auto&tl=en&u=http%3A//htc.zol.com.cn/109/33080_1083270.html. ,
[HTC One X] Zulake:
Interesting, but it also speaks about unlocking. Something we want to avoid, as far as I know.
[HTC One X] Dubhaltach:
Translate makes me laugh

..... :D
[HTC One X] Beatastic:
again no s-off. they only made a tool to unlock the bootloader.
[HTC One X] lilvfr400boy:
Ah sorry I just saw them using adb to do something involving a new boot.IMG which amongst another file on that page which is ran while flashing the boot interrupts it causing soff. Please don't flame me for this it just looked promising.
[HTC One X] Kickasskev:
so why do they mention it is not S-Off yet, then explain how to do, then say you have an S-Off device??

I cant download anything from the site, might be because its translated??
[HTC One X] Dubhaltach:
I was laughing at the amount if times casually comes up in the translation!

Look through the posts, you will find no success stories because you need to accrue a certain number of points before downloading. Shame, as an insecure boot.img looked nice. Still smartsd is the way to go.
[HTC One X] Beatastic:
I'm trying to download these files, but on this site there is a point system. You get a point for every post and for the files I need ~ 60-70 points. Actually the points aren't the problem... The problem is that I have to use a chinese proxy to download them, otherwise I get a error message.

EDIT :

Here is the link for the download-base : http://htc.zol.com.cn/down.php?aid=576365

Try your luck ;)
[HTC One X] skygear:
This is redundant. Has been over already a few pages back!
[HTC One X] lilvfr400boy:
Ok null that post goldcard/smartcard is the way forward Chinese proxy + points + one member says even with points download fails half way through everytime makes this method void.
[HTC One X] xmoo:
For now the only way is the HTC/Hardware way.

Needed:

Micro usb Y cable (see picture).

Javacard (The one for the sensation series will work)

HTC One X

Clean S58 Data Program DIAG file

http://www.ebay.nl/itm/Windows-7-Un...aCables_JN&hash=item20c398d8ba#ht_1097wt_1053

Put Javacard in place.

Plugin USB to device.

Start in bootloader.

DIAG file will automatically start.

"Press power the clear security".

Device clears security, reboots.

You are S-OFF, Sim-unlocked and SuperCID.

Basicly like this, but without the need of the SIM Card.

I ordered the Micro USB Y Cable and a HTC Sensation Javacard from China... Fingers crossed!
[HTC One X] Zulake:
Quite awesome!

Do you think this will eventually lead to a way to S-OFF everyone's devices without having to order such things?
[HTC One X] KrisPerry:
I suppose the main problem is the fact that we don't yet have the diag file specific to the one x, and also we need super cid for it to run
[HTC One X] doublecheese:
I cutted my sim card into micro sim on my xtc clip.

You guys can see some pictures from me on this thread about a month ago
[HTC One X] xmoo:
With the Javacard you dont need supercid.
[HTC One X] colin_404:
Where in China did u order the Javacard?

Im bit confused, is javacard same as goldcard?
[HTC One X] KrisPerry:
And what about the diag file
[HTC One X] Cristianop:
That Sounds huge. Hopefully Hardware solution works. If it works what do u think, will there after be in some time a software solution for s-off?
[HTC One X] techmatlock:
I would do the hardware method as long as it's in the $10-20 range. The y cable is easy to find, tried browsing for smart card/javacard on a couple of Chinese sites (aliexpress, Alibaba, taobao), but couldn't find anything.
[HTC One X] mattman83:
Yeah the javacard is where I'm lost too :p if there's a reliable source that's not too expensive then it may be worth people same states/countries pooling to buy a card and then just meet up/post the card around to do the s-off.

I assume the one xmoo has found isn't too expensive or he wouldn't have ordered it so easily ;) We'll just wait for confirmation first of course.

M.
[HTC One X] lilvfr400boy:
What was the total cost of this rig? If its working Il buy one or test for people.
[HTC One X] Rekoil:
If it works, it would technically be possible to rig up an online solution where we are able to access Xmoo's javacard remotely. We could all pay our share for this.
[HTC One X] N3m3515:
thats what i meant... but i dont think that we can flash some unsigned contend with that knowledge.

and even if we can achive the apx/nvflash-mode there is still (i think) some security holding us back from flashing what we want.

there has to be a gifted person finding a security hole or an exploit.
[HTC One X] Polarfuchs:
Concerning the video by mux89:

Did you think this was the max we can do or will it behave otherwise, if the zip is called PJ46100IMG instead of PJ46IMG?

---------- Post added at 11:11 PM ---------- Previous post was at 11:10 PM ----------

In the video i can recognize "failed to open input file/preload content not found"
[HTC One X] Evil-Dragon:
A thing that could do with some investigation is to find out where the hboot is stored. I've gone through all the partitions on my One X and have so far failed to find out where the HBoot is being called from/stored. On the Sensation, Hboot had it's own partition. This time it appears that it doesn't. Perhaps it's stored like a BIOS now in it's own dedicated chip. If that's the case it's going to be an awful problem to attack it and write our own Hboot to ignore @secureflag. Has anyone been able to find it?
[HTC One X] Polarfuchs:
Wait,

so we know that hboot got updated via Firmware update OTA?

So it must be flashable from a running system?

Or is that 1.01 Hboot that was spotted preinstalled?

(1st post of this thread; HBOOT versions

Past: 0.43

Current: 0.94

Spotted: 1.01)

Was hboot 0.94 on firmware 1.26 and 0.94 on firmware 1.28?
[HTC One X] N3m3515:
0.94 came with 1.28.

1.26 was a earlier number of hboot.

1.01 is spottet with s-off
[HTC One X] Polarfuchs:
That means, hboot is contained in a firmware update.

Can't hboot located somewhere, if we had this update file?
[HTC One X] Mux89:
This happens when i rename PJ46IMG to PJ46100IMG