yashsingh1/xdaforums huggingface dataset:
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Dude, am I on your ignore list? :p

Here's the differences only (attached):

The first is Locked on the left, Unlocked on the right.

The second is unlocked on the left, relocked on the right.

The third is locked on the left, relocked on the right.

Billy

EDIT: Oh, wow, it resized those pics quite small. Here:

http://i.imgur.com/hCkaj.png

http://i.imgur.com/13efb.png

http://i.imgur.com/9Hn3y.png

(They may be in a different order... check the path at the top.)
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Ah yes, forgot about the sdcard. Well the only fastboot command i can find that writes is the fastboot flash <partition> [ <filename> ] command but we wouldn't want to do that because that would mess up the unlock right?
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
We could flash an image of mmcblk0p3 that is toggled for s-off AND an unlocked bootloader. It's with a try IMO, but I gotta get to bed. Back at it in ~5 hrs...

Thanks,

Billy
[AT&T, Rogers HTC One X, Telstra One XL] Enigma_cpl03:
If you guys need a tester I'm willing to throw my hox out there, I have warranty on it ans I want to help with the s-OFF process.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
I was implying to do a diff command in shell on ALL partitions. Any partitions that come back with the result being differs, has been affected from the unlocking. Not trying to question you, sorry if I came off that way:)

I did some digging on the errors received when doing writesecureflag 0. Only for an hour or so but here's some areas we might REALLY want to compare!!! The errors we get are the

SDHW_7XXX

SD_HW_ERR

S Off device - partition mmcblk0p12

SDHW_7XXX found at address

000BAAB0 & 000BAAC0

Now keep working thru and there is

SECURITY RECORD

radiover.cfg

mdm9kver.cfg

opendspver.cfg. at address 000D2380 - 000D23B0

Then address 000D2480 -

Keycard exists, reboot and unprotect emmc

Right after at 000D24C0 - 000D2530 there is-

Supercid upgrade

Bl unlock

Bl relock

Bl lock

Simunlock magic

Address 000D56B0 - development

Address D5FD0 starts the beginning of the SD_HW_ERR references. It is many lines but talks about SD_HW_ERR/SDHW, write protection, write errors, sd clock freq.(19MHz) it goes into Emmc and chipset protection also

There is a ton there and remember this is off the s off device. There is way more there than I can compare side by side so I thought I'd see if it seemed leading at all to the community so we can all pitch in where we can. I'm done for the night, I have a POUNDING hexache, I mean headache:p
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
No worries, just giving you a hard time, but I

did

compare them all.

I dumped all my partitions while locked.

I unlocked and dumped them all again.

I re-locked and dumped them all a third time.

Then I hashed everything and compared the hashes.

The ones that didn't match were examined more closely.

Don't forget that the unlock performs a sort of factory reset (I didn't realize it did that. And yes, I should have known.), so, unfortunately there will be some differences because of that.

Billy

Here's the results from the hash compare:

billy@htpc:~/android/1x/partitions$ ./hash.sh locked ../unlocked

loop0.img: OK

loop1.img: OK

loop2.img: OK

loop3.img: OK

loop4.img: OK

loop5.img: OK

loop6.img: OK

loop7.img: OK

mmcblk0p10.img: OK

mmcblk0p11.img: OK

mmcblk0p12.img: OK

mmcblk0p13.img: OK

mmcblk0p14.img: OK

mmcblk0p15.img: OK

mmcblk0p16.img: OK

mmcblk0p17.img: OK

mmcblk0p18.img: OK

mmcblk0p19.img: OK

mmcblk0p1.img: OK

mmcblk0p20.img: OK

mmcblk0p21.img: OK

mmcblk0p22.img: OK

mmcblk0p23.img: FAILED

mmcblk0p24.img: FAILED

mmcblk0p25.img: FAILED

mmcblk0p26img: FAILED

mmcblk0p27.img: OK

mmcblk0p28.img: OK

mmcblk0p29.img: OK

mmcblk0p2.img: OK

mmcblk0p30.img: OK

mmcblk0p31.img: OK

mmcblk0p32.img: OK

mmcblk0p3.img: FAILED

mmcblk0p4.img: OK

mmcblk0p5.img: OK

mmcblk0p6.img: OK

mmcblk0p7.img: OK

mmcblk0p8.img: OK

mmcblk0p9.img: OK

platform.img: OK

ram0.img: OK

ram10.img: OK

ram11.img: OK

ram12.img: OK

ram13.img: OK

ram14.img: OK

ram15.img: OK

ram1.img: OK

ram2.img: OK

ram3.img: OK

ram4.img: OK

ram5.img: OK

ram6.img: OK

ram7.img: OK

ram8.img: OK

ram9.img: OK

vold.img: OK

md5sum: WARNING: 5 computed checksums did NOT match

---------- Post added at 01:54 PM ---------- Previous post was at 01:47 PM ----------

Thanks man! I see you're on AT&T, tell us more about your device...

ROM version?

B/L unlocked?

Rooted?

SuperCID?

And are you on Windows for your computer? ADB/SDK installed & working? How comfortable are you with the command line?

Thanks!

Billy

---------- Post added at 02:07 PM ---------- Previous post was at 01:54 PM ----------

Does anybody know what the PID is?

"fastboot oem readpid"

Mine is 161... just wondering if that may be the key to niceppl getting s-off when unlocking.

I also want to compare a few more unlock_code.bin files if anybody could be so kind as to send me theirs.

bm {at} slicky {dot} net

Thanks!

Billy
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I suggested that yesterday.

We believe block3 is pg1fs right?

I am on locked BL right now.

I simply dd's block 3 to pg1fs.img and then tried to write it back with:

fastboot flash pg1fs pg1fs.img

File gets sent and then got signature error. This was with NO edits to the image.

Curious if BL unlock disables signature check on that partition, but I'm too busy to lose all my data right now via BL unlock. If it does work.....
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Well, when/if you or somebody else does try it, try the flash command at the point in the unlock process where you're accepting the terms and conditions on the phone, and then again immediately after you accept them. We might get a little window there to work with.

I may be able to give this a shot later today.

Thanks,

Billy
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
I gave that a whirl just for the hay last night andfastboot recognizes the device but no commands work, it just leaves the command sitting
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
I think I just had a breakthrough in qpst, but I need help if anyone know the answer.

I'm getting "qpst cannot determine the boot method for this device. Please select a valid boot system type".

My choices are

Multi img 1.0

Or

Sec boot 2.0

Anybody?
[AT&T, Rogers HTC One X, Telstra One XL] niceppl:
i read somewhere our chip uses sb 3.0.....
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Thank you niceppl. I confirmed your info and qpst at this time has no automation support for sec. Boot 3.0

DANG
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Maybe if we had a version of qpst that wasn't 3 years old....
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
check your PM's
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
If anybody has a qpst build newer I would LOVE a link pls!!!!!
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
/me whistles innocently
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Not familiar with roap but here's a wiki link.

http://en.m.wikipedia.org/wiki/Rights_Object_Acquisition_Protocol

Looks like we can edit the roap triggers

Possibly to give rights acess even if verification fails. Maybe by changing event name "EVENT_DRM_ROAP_ERROR" to "EVENT_DRM_ROAP_RSP_VALIDATION"and leaving the event description as

"event is generated when an error occurs during a ROAP protocol"

See pic, it's under digital rights management:-)

Could be way out in left field but another possibility??
[AT&T, Rogers HTC One X, Telstra One XL] SoberGuy:
Little bit of documentation about the protocols and permissions: http://www.openmobilealliance.org/technical/release_program/drm_v2_0.aspx
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Thank you for saving me hours of my life:D

DRM disregarded, sorry for leftfield post
[AT&T, Rogers HTC One X, Telstra One XL] SoberGuy:
Just doing what little I can to help ;-)

Seems to me the DRM issue in the bootloader is related to DRM rights, how it's managed by Google, and the ability to purchase/rent movies in the Play Store. Having essentially free reign on a device has apparently caused some uproar with the content providers (movie companies and such), and mobile manufacturers have implemented an ability to prohibit some DRM content based upon the device status. I've seen this with root, bootloader unlock, and S-Off.

Little info with some quotes from some companies: http://julianyap.com/2012/01/03/loc...vices-are-required-to-support-google-drm.html

Not to derail, but just so people know.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
looks like the qpst I found isn't any newer than what y'all are already using. Sorry about that.
[AT&T, Rogers HTC One X, Telstra One XL] SoberGuy:
I'm only 90 minutes from their office. I need to go down there more and make friends with their employees
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Me too, I'm about 20 mins. I'm gonna put it my resume as soon as I finish up my degree:-)

Undeveloped developing is still developing.
[AT&T, Rogers HTC One X, Telstra One XL] Enigma_cpl03:
ROM version: I am on 1.88 currently using KingCobra Rom

B/L unlocked: Yep

Rooted: Yep

SuperCID: Yep

Basically have everything done. I am currently running windows and the last I used ABD everything was working. Since CWM was released really had no use for ADB but If you guys need something done you can give me a brief rundown and I can do as best as I can.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
I might be able to help with some testing to. I am on king cobra, rooted, unlocked, supercid. but I can relock and flash the stock ruu if that'd be what youd need.
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
What happened to the irc? Is it done?
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Can I get any of you to post the output from "fastboot oem readpid" please? Especially niceppl?

Thanks!

Billy
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
I checked into this a few weeks ago. Mines 161 but I seem to recall someones (niceppl?) was 402.
[AT&T, Rogers HTC One X, Telstra One XL] BIGMOH:
this is what i got: ;)

so what does all this mean? :confused:
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Basically if we can find the variable that identified niceppl's phone differently to HTCdev and gave him S-off when he unlocked then we could do the same. Doubt PID is it though...
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Do we know what PID is? I'm just trying everything I can think of. If niceppl's really is different than everybody else's, it's worth a try.

Billy
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Sorry I was mistaken. I was remembering the MainSKU variable which for ATT is 502 and theirs was 401 which i'm not sure what it corresponds to...
[AT&T, Rogers HTC One X, Telstra One XL] Koizuma:
Running AOKP, BL unlocked, and rooted

my PID is 161
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Well, the PID does appear to be a dead end. Niceppl's is 161 like all of ours :(

Billy
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
ECHO!! echo........echo
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Ugg. It seems qpst, download mode, etc is our only shot

http://www.anyclub.org/2012/05/how-boot-loader-and-modem-images-on.html?m=1
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
When your refer to pg1fs.img, are you talking about the dd img of mmcblk0p3? :confused:

Thanks,

Billy

---------- Post added at 01:47 AM ---------- Previous post was at 01:39 AM ----------

*SIGH* I assume somebody tried "fastboot oem flash pg1fs.img" after doing the wire reset trick? Isn't that supposed to make the power-on-write-protected partition writable?

Billy

---------- Post added at 01:51 AM ---------- Previous post was at 01:47 AM ----------

Also, I'm still wondering what "fastboot oem refurbish" does and if we have permission to run it. It's pure speculation with a generous helping of uncharacteristic optimism, but if it restored mmcblk0p3 to "factory specs" based on a copy kept somewhere else ont he device, at least we would have another (

potential

) point of entry.

Any of you guys that want to test for us wanna try? ;-)

Thanks,

Billy
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I tried the pg1fs. sig check failure. As a matter of fact doing "fastboot flash aksldjflkadsfjdlsk pg1fs.img" causes the same error, so something is in the img that causes sig check or any flash attempt except recovery is sig checked. Fastbook oem refurbish puts out a lot of interesting text, then reboots into recovery and looks for something (doesn't say what).on sd card (I tried copying IMG's to internal and external sd, no luck). Interesting thing about refurb command is it seems particularly "excited" about the fact that we have super CID - run it yourself and see, no harm is done (data, etc.). one recovery boots you can screw around with volume and power keys to see the text.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
In download mode there is no adb and no fastboot. You can even do fastboot flash mmcblk0p3 mmcblk0p3 and it gives you the same signature error that you guys are talking about.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Right.

I think the hope with download mode is we can flash the modified partition with the qualcom tools.
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Exactly what me and 18th.abn have been thinking the whole time since we posted of our discovery... i have a feeling we will be getting our "tools" soon. Its nice having the hook up! Hopefully, lol :)
[AT&T, Rogers HTC One X, Telstra One XL] jklitten:
I pop in this thread every now and then, and while most of it goes over my head, it seems that this sounds promising.
[AT&T, Rogers HTC One X, Telstra One XL] Antagonist42:
What is PID?

From my playing around it's the Process ID used via USB, I believe that software is authenticated using CRC of running program and what PID it is using to give/verify you are say Qualcomm or HTC and runs what you're asking, the adb and fastboot uses drivers released with PID etc set already, I tried running an EUU with randomly installed adb USB drivers and couldn't install.

Rooted Xakep E320/C6 EUU Hacked Update
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Some good info on qpst and SB 3.0 here - I'm not certain newer tools are the solution (read the whole article, also note the (recent) date it was written)

http://www.anyclub.org/2012/05/qpst-emergency-download-support.html
[AT&T, Rogers HTC One X, Telstra One XL] nugzo:
Anyone need anything tried with a new hox not yet unlocked? Its stock 1.85 rooted. On my way to htcdev but i'll hold off a few in case i can help.
[AT&T, Rogers HTC One X, Telstra One XL] c5satellite2:
http://www.anyclub.org/2012/05/how-boot-loader-and-modem-images-on.html?m=1

http://www.anyclub.org/2012/05/emmc-partition-tools-usage-for.html?m=1

http://www.anyclub.org/2012/06/qpst-configuration-window-can-not-find.html?m=1

Website has a lot of great info. Hope this helps in some way.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Well, with as far as we've come and as close as we are to s-off ill be throwing in the towel. My last one x is supa bricked and i owe the family some much deserved time. Thx again rpomponio, niceppl, and simonssimon34. Its been a blast, lol, to say the least:-) no phone till i dunno when so pm or email if u guys need anything. Ill keep reading and let you guys kno what i find. CYA LOL
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
check your pm
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Wow, I wondered what happensd to you today.. check your email when you get a chance bro, thanks for everything!!!
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
You mean you bricked your phone trying to get S-OFF? Thats not good!

Definitely understand. No one is obligated to work here. Personally I think we already have everything we need, but not having to go through htcdev would be nice. As always, I do appreciate the work everyone's put into the community here. And by all means, take care of your family first.
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Hey guys I found this chinese program called miflash when you first open it u get what's in first pic. After you click on images folder you get what's in second picture. In the first pic. If u click flash_all it runs a batch folder. It looks very familiar to the nv dump from the s off phonelol
[AT&T, Rogers HTC One X, Telstra One XL] slippers67:
This isn't criticism, but when you post things like this, it really makes me worry about using any s-off method you discover. :)

Perhaps you should do a little research into what this chinese program is and does before you post it on here. To post it, then ask if it will help us, and immediately follow with "wth is it," makes it seem like you're just doing google searches for anything remotely related, posting the link, and hoping someone else will put the time in (or risk, in the case of running random stuff that might brick your phone).

I know you have actually put a significant amount of time into this, so again, it's not criticism. You just might want to rephrase it a bit so it doesn't seem like these are random stabs at gaining s-off without any research behind it. :)
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
I finally got a chance to check this with BL unlocked and it's a no-go :( Sig check failed

I tried this too and no luck. Fastboot does recognize the phone (kinda) while at the BL unlock screen, but no commands work. Even if you open another window.

Wish I had better news, but I'm still tryin!

Billy
[AT&T, Rogers HTC One X, Telstra One XL] PeartFan40:
Just to add to what slippers has stated...

rpomponio, you have been incredibly helpful here on XDA, contributing more than your fair share, and it is greatly appreciated. :thumbup::). With that said, please refrain from sharing obscure, foreign tools, files, or development of any kind, unless you are 100% sure of it's purpose, and it's creator. Sometimes, the best of intentions can cause more harm than good. ;)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

"If you choose not to decide, you still have made a choice"~Rush
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
If a lot of people are wanting s off just to unlock without using htc dev then later today ill post a thread on how to unlock without using htcdev:-) ill have it up tonight. it will only support evita at&t devices tho. No rogers, sorry:/

Heres a quik pre req. To save some time tho, go root and get supercid first, that will save some time:-) dont go register or do anything with htcdev. Just supercid.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Good NEws/Bad news

Well, I'm ready to share a little.

The "unbrickable" mod does work to a degree on our HOX. Meaning - if you brick via a corrupt or signature failed hboot, we can recover using the emmc download mode with a linux machine. I've confirmed this 5 times.

My goal was to brick the phone, update the blk3 partition using the emmc download mode, and then unbrick the phone. Everything works just fine except the blk3 partition STILL does not update. It's possible the power-on WP is still applied in this eMMC download mode.

However, it is useful to people who've bricked their phones while screwing around with hboot. Basically, it appears our phones are somewhat "unbrickable".

I'm not ready to share the method quite yet, it's quite complicated and there may be a risk of permanent brick (although I don't see how).

Just an FYI to everyone.
[AT&T, Rogers HTC One X, Telstra One XL] random1204:
Yes. Exactly! Haha thank you so much! You guys are all awesome as hell! Haha keep it up!
[AT&T, Rogers HTC One X, Telstra One XL] RussianBear:
those files can be used to resurrect a totally bricked/wiped phone using qpst in qhsusb_dload mode. Once in that mode, the emmc protection is turned off, and qpst can write whatever you want (in theory).

Chinese guys have been doing this for some time now (if my chrome translator doesn't lie). i wouldn't flash them though, seeing how it's for 8660 chips, and no info what phone they came from ( i assume a zte).
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Thank you, that's what I thought it looked like...
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
Too bad I already registered with HTCDEV :( Should have waited.

Also beaups just posted something you may be interested in. He basically knows a way to unbrick your phone. You should PM him.
[AT&T, Rogers HTC One X, Telstra One XL] loneBoat:
Off-topic: What's the big deal with registering with HTC Dev? I've heard people saying they don't want to be in a database of "registered tampered phones", but that database belongs to HTC. Isn't it our CARRIER who we should care knows?

Just curious - maybe I'm totally missing something!

Thanks!
[AT&T, Rogers HTC One X, Telstra One XL] PeQuEsan:
Looking forward to reading you... Do you think this could be "exported" to HTC One S, as you say it's for AT&T Dual core HOX...?
[AT&T, Rogers HTC One X, Telstra One XL] JeepFreak:
Well, that's not encouraging! Stop being so negative! Geeze, you should be grateful for anybody posting anything with the intention of being helpful!

/sarcasm

I think those that have been following this thread from the very beginning (I don't think there are many at this point) see that rpomponio really, REALLY wants to help, but more specifically, he really wants fame and attention, so he posts things that are going to make the average user think he's operating on a level way above their head. (Hell, he still has me guessing sometimes!) He doesn't seem to care if he wastes people's time with red herrings or if noobs brick their phones because they're just trying to help. Maybe he thinks that we all have a friend at the AT&T store that will swap out brick after brick

You have to have watched from the beginning because he edits ignorant remarks out of his posts and wants to take things back-channel, so he's not called out.

I really do appreciate the time he's put into this, but I HATE all the petty games and disregard for others. Plus, the road to hell is paved with good intentions.

Billy
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Couple q's to the experts out there. I've done some digging through the partitions myself.

What do we believe is in block p1? Judging by the strings it looks like it contains some type of bootconfig and even sets PGFS security. Has anyone tried anything with this partition?

P7 and P8 contain quite a bit of differences. Namely, the s-off phone is mostly empty while my s-on dump is full of SBL/SECBOOT etc stuff. Again, it's a PGFS partition and perhaps is somehow protected by what's in P1.

Just looking for thoughts from those that have dug into these dumps.
[AT&T, Rogers HTC One X, Telstra One XL] nugzo:
---------- Post added at 11:15 PM ---------- Previous post was at 11:09 PM ----------

That's a good question. Do we even know of anyone being called out or denied warranty because of HTCdev database? Wouldn't the majority of us be using ATT, Rogers or Aftermarket warranty instead of HTC? Our carriers wont have access to that database.... i dont think.

This is what i was trying to say the other night but it didnt come out so nice. I want to apologize for that, i didnt have to be an ass. I also owe an apology to 18th.abn for thinking he was doing the same. He obviously knows what hes talking about and i pretty much called him out as being reckless and phony.. while the jury is still out on the reckless part ;) jk lol ..the phony part i was 100% mistaken. Sorry dude. I also owe an apology to everyone whos time i wasted reading that garbage. I'm sorry for wasting your time. This will be my last OT post in this thread. I've disturbed it enough. I wont offer any more wisdom unless it includes s-off instructions :cowboy: