yashsingh1/xdaforums huggingface dataset:
[HTC One S] jriv:
You can flash roms and stuff u have to flash kernels as boot.img it just makes everything harder with s on.

sent from a guy living in a van down by the river
[HTC One S] Reevine:
Well you can flash with S-ON but it usually has to be done through ADB/fastboot on your computer. S-OFF gives you read right access to the devices NAND flash memory. It allows you to mount all partitions including /system in write mode while the OS is running. You can flash unsigned boots, HBoot images, permanently root your device, ect. You essentially have more control over your device. Gives you almost complete access to everything at any time.
[HTC One S] raikesy:
You could have a chat with the Revolutionary guys on Freenode IRC (#revolutionary)
[HTC One S] Reevine:
Yah I might just have to do that.
[HTC One S] dajones123:
Stupid question,

What does S-off actually provide us?
[HTC One S] Opentang:
Read the previous posts ^^

Sent from my HTC One S
[HTC One S] snowwhite007:
Right guys the ball is about to begin rolling so here's hoping
[HTC One S] Reevine:
Oh sweet. So does that mean you are starting on S-OFF? If so you should jump on the #revolutionary IRC channel and maybe you can get some starting pointers from the JuoPunutBear team.
[HTC One S] Reevine:
So this quote is going to be my answer lol
[HTC One S] snowwhite007:
yeah dude sent u PM
[HTC One S] azzledazzle:
what !?!?! you are starting to work on getting S-OFF ??
[HTC One S] Reevine:
sorry abou that. I hadn't checked my PM yet today. :p
[HTC One S] Reevine:
I've been trying to get some devs who know how HBoot firmware works on getting S-OFF. snowwhite007 was one of the first volunteers :D

If snowwhite007 and Untouchable can get some help from the JuoPunutBear/Revolutionary team then things will hopefully progress even faster considering that S-OFF has already been achieved for a decent amount of HTC devices.
[HTC One S] azzledazzle:
This is awesome news..

I think i might have jizzed in my pants
[HTC One S] Reevine:
haha ;)
[HTC One S] invasion2:
On the One X's thread, the first post links to an S-OFF tool. It says it works for the X, S, and V. It looks expensive..

http://xdaforums.com/showthread.php?p=24963596

Sent from my HTC VLE_U using Xparent Blue Tapatalk 2
[HTC One S] gemarcano:
I think this was debunked...

Also, earlier in this thread there was some discussion about it. Supposedly the site would only take Chinese banks or something. In the end, do we know of anyone that actually tried this? The One X rebuttal of this link wasn't very convincing, or at least it was rather vague.

Sent from my HTC VLE_U
[HTC One S] invasion2:
Sorry I didn't know any better! Got my hopes up for a little bit :p. Thanks for the clarification.
[HTC One S] gemarcano:
That's alright. I just hope we can figure out S-Off sometime. From what I gathered in the One X S-Off thread, the only thing that seems to work is a "javacard". I don't know much about it, but it seems to be some kind of micro sd card, which won't help us...

Anyone heard anything from any dev recently?

Sent from my HTC VLE_U
[HTC One S] Snake_skw:
i think that these 2 "testpoints" could help you with S-OFF like they did on numerous HTC devices(juopunutbear method)...

image -> http://clip2net.com/s/2ctBT

sry if this has already been posted,i just stumbled upon this and thought i should share...
[HTC One S] mteezey:
That method still requires a battery pull which in our case is not possible. Its good to see someone throwing out ideas though. Also im not sure if its been confirmed whether or not those two test points serve the same purpose on our phone. Its been talked about somewhere ill try to find a link for you.
[HTC One S] frdd:
Check this video at 3:30, battery pull seems easy enough. Need a T5 torx, PH screwdriver and a plektrum/case opener tool. Battery is not glued in and has a simple connector. While this is a bit harder than on say a Desire I guess for someone willing to experiment with S-off its a walk in the park;)

Edit: forgot the video link lol: http://www.youtube.com/watch?v=b0jGY2N2h1U&feature=youtube_gdata_player
[HTC One S] mteezey:
Video is interesting to see the inside of phone and all. Since I haven't pulled mine apart yet. I think having to go as far as taking the phone apart to achieve s-off kind of defeats the purpose. And usually a method that the average user can accomplish is the goal for s-off methods. The reason I say it defeats the purpose is cause by removing those screws on the phone its puncturing the warranty seal on them so there is no getting around the fact that you had it apart. Especially since once we get s-off we can do whatever we want ie; turn s-on and remove any evidence of root for warranty purposes. I am curious what is on the bottom half of.phone now though gonna go look(not sure why I never pulled that off). If anyone finds the actual schematics for this phone please post I have been searching but nothing in full.
[HTC One S] Taco991:
Lazypanda cracked the evo 4G lte recently so that's a bit of hope ;)

Sent from my MIUI powered one s

If I helped you in any way please hit thanks!

---------- Post added at 08:06 PM ---------- Previous post was at 08:04 PM ----------

I've always wondered if the internal memory is actually an sdcard that we can switch out ^_^

Sent from my MIUI powered one s

If I helped you in any way please hit thanks!
[HTC One S] invasion2:
If someone can donate a one s to the lazypanda guys, I bet we'll get S-OfFF in no time. Development of it seems non-existent.

Sent from my HTC One S using Xparent Blue Tapatalk 2
[HTC One S] mteezey:
Yea im pretty sure it is. At least that's how it seems. I've thought about losing my phone(wink wink) so I could play around a little more freely or do something like donating to the cause. If we at least had a s-off hboot somewhere that we could try to play around with that would be great but I haven't even seen that. People claim that there were hos's shipped with s-off but we don't even have the partitions off of one of them to work with. I think once the atat one x gets s-off we migt be a little closer since its a little more similiar. But who knows if it will since the partitioning on that phone is totally different than ours. At this point ill be happy when vts is fully functional so we can edit m10 images and really theme our phones. At least that will hold me over until development on this phone really picks up.
[HTC One S] Taco991:
Donation fund, anyone?

Sent from my MIUI powered one s

If I helped you in any way please hit thanks!
[HTC One S] mugetsu666:
How about someone just get me the 130 for insurance and I'll donate my present phone!

Sent from my One S
[HTC One S] Taco991:
Isn't it just 99?

Sent from my MIUI powered one s

If I helped you in any way please hit thanks!
[HTC One S] mugetsu666:
Only on contract. If u buy one without a contract it's 599.

Sent from my One S
[HTC One S] usaff22:
You can buy 40 HTC warranty stickers for a mere 5 bucks on ebay! Lol
[HTC One S] Super_Dork_42:
If you go through the insurance company like he said, they charge 130.
[HTC One S] usaff22:
Anyone have insurance for theft/losing the phone? You can send it off to a dev and claim it is lost...
[HTC One S] mugetsu666:
I'm will to do that but it'll still cost me 130 for insurance, but being on a single income & taking care of my special needs son, 130 isn't something I have handy atm. That's y I have a backup phone. Lol.

Sent from my One S
[HTC One S] usaff22:
What if someone donates a One V and the process is similar to the One S? Long shot, I know, but way cheaper than giving a One S to someone unknown on the interwebs.

Or if a dev is willing to send the phone back - but no one will take the risk of course.
[HTC One S] Pheroh:
The One V has a different SoC so it's unlikely to be similar to the One S
[HTC One S] n1noob13:
What about something like the unbrickable mod that is made for Samsung devices but if someone could get a hack like that for the one s then it could bebs-offed because that mod starts before bootloade or fast boot or os
[HTC One S] n1noob13:
I wonder if with this you needbti download the qualcomm sdk to interact with it
[HTC One S] touch of jobo:
(Quoted from different thread...)

You can get into download mode (QHSUSB_DLOAD). See post #360 by JDenson77.

fastboot->reboot bootloader->vol-up

I don't know what that does tho. Does a RUU use this mode to flash certain parts of the system? I thought RUU does everything in hboot/recovery.

Does anyone have intimate knowledge of what a RUU does, and what allows it to write to hboot? Would it be possible (and useful ;) ) to intercept and log the USB traffic when flashing a RUU, and use that to convince the device to let us write to hboot (effectively making our own RUU minus version checks, signature checks, cid checks, ...)?

A nice first breakthrough would be to flash an older (but signed and unmodified) hboot. Probably safer than flashing anything patched.
[HTC One S] Harrysoon:
People mentioned this for the One X S-Off battle, but it wouldn't work. All that's passed over USB is the stuff to be flashed. All the flashing takes place on the phone, not from the computer, so even though the RUU does turn off security to flash everything, we wouldn't be able to capture it via USB, unfortunately.
[HTC One S] usaff22:
As far as I know, an RUU boots into a GUI, with a grey HTC logo. What happens behind the scenes I don't exactly know in detail. But you can boot into this mode by typing into a terminal/cmd

fastboot oem rebootRUU

and from there I think it flashes the rom using

fastboot flash zip rom.zip

Not sure how it flashes the radio though. Must be factory signed or something?

As the flashing takes place on the phone, it is not possible to intercept the USB connection, as the poster above said.

Sent from pixels to more pixels
[HTC One S] frickinjerms:
in the 1.06.0000 hboot all this shows up as fastboot commands

... INFOcommand list
INFOrefurbish
INFOget_identifier_token
INFOcheckKeycardID
INFOget_tamper_flag
INFOcheckSbl1
INFOcheckHWSecurity
INFOkeytest
INFOheap
INFOboot
INFOreset
INFOpowerdown
INFOrebootRUU
INFOheap_test
INFOerase_phone_storage
INFOgotohboot
INFOrtask
INFOtask
INFOenableqxdm
INFOgencheckpt
INFOreadmeid
INFOreadpid
INFOwritepid
INFOreadcid
INFOwritecid
INFOreadimei
INFOwriteimei
INFOreadsecureflag
INFOwritesecureflag
INFOlock
INFOlist_partition_emmc
INFOload_emmc
INFOcheck_emmc
INFOcheck_emmc_mid
INFOread_mmc
INFOload_modem_emmc
INFOget_wp_info_emmc
INFOsend_wp_info_emmc
INFOget_ext_csd_emmc
INFOget_sector_info_emmc
OKAY [ 0.063s]
finished. total time: 0.063s

and this is what happens with readsecureflag

C:\Documents and Settings\Jerms>fastboot oem readsecureflag
... INFOsecure_flag: 3
OKAY [ 0.000s]
finished. total time: 0.016s

on my mt4gs my secureflag is 0 .... soooooooo what would happen if we just did

fastboot oem writesecureflag 0

EDIT: Just tried and got this

C:\Documents and Settings\Jerms>fastboot oem writesecureflag 0
... INFO ville_init_sd, SD card already power on
INFOsdhw_7xxx_open: id=0
INFO[SD_HW_ERR] SD: No device attached
INFO902910 902E20
FAILED (status read failed (Unknown error))
finished. total time: 1.484s
[HTC One S] usaff22:
S-OFF devices have a secureflag of 0. An S-ON bootloader has a secureflag of 3 and so does an HTCDev unlocked bootloader (still S-ON). From what I remember, when returning the Sensation to S-ON from S-OFF you have to type

fastboot oem writesecureflag 3.

While unbricking the Sensation which has been bricked from setting the secureflag you'd have to flash your current HBOOT. For more detailed info, visit the Sensation Unbricking project thread on xda. I am not sure if the phone is S-OFF or S-ON while bricked.

Is it possible to capture the commands being executed on the phone while in "RUU Mode"? It would be great if we found out.

Edit: Would it be possible to flash an older HBOOT or writing the secureflag to 0 through download mode?

Sent from pixels to more pixels
[HTC One S] frickinjerms:
well theres always the fastboot oem rebootRUU command buuut from there ya got me haha
[HTC One S] frickinjerms:
i wonder if the lazy panda exploit could be "ported" over because there are some similar looking holes that could possibly be wire tricked.. the ground could maybe be thst piece of metal holding the headphone jack?
[HTC One S] RussianBear:
Don't even think about that. There is a major difference between the two devices.
[HTC One S] mteezey:
Lazy panda method requires a battery pull at a specific time in order to brick it. No removable battery means u would have to take phone apart to even attempt and also I'm not sure the battery is a quick pull since I believe it may be connected by ribbon. Also I don't believe its been confirmed that those two contacts on the back of our phones have the same power going to them. We need true schematics of the phone to even start to play with those. Or someone that doesn't care of they fry/brick/blow up :D there hos.
[HTC One S] usaff22:
Is there no command which can immediately shut the phone down, like a purpose Windows BSOD?
[HTC One S] mteezey:
I dont think there is one that would do it fast enough. On evo 3d the timing had to be perfect. And with most adb and fastboot commands there is a delay. I've been following s-off progress for all the one series phones. I know another issue with this method is power to the sd card since we dont have a removable sd the exploits used on other phones will not work the same.
[HTC One S] usaff22:
How about calculating the time it takes to reach the phone and sending the command early to account for that time. But I don't think there is a command which will shut the phone down immediately, whatever state it's in.

Sent from pixels to more pixels
[HTC One S] gemarcano:
Just thinking out loud. How does HTC do it for themselves? I mean, does anyone have any idea how HTC might do it internally? Would it be through a specialized RUU? If so, we just need to find what is special, but with no leads, that ought to be interesting.

Correct me if I'm wrong, but is the public key used to check the signed files found in the current hboot or some other place currently on the phone? If so, if we could find a way to edit the public key, we'd be able to make our own pair and flash anything, I think. Or does this do the same thing as just unlocking the phone, not giving us access to the radio and other normally unflashable locations?

Another question. Since the RUU runs from within the phone, I know it's hard to find this out, but does anyone have any idea how it can flash newer hboots and radios? We might be able to abuse this mechanism if we can figure it out... Of course, I could be asking dumb questions, but just in case...

Sent from my HTC VLE_U
[HTC One S] raikesy:
I haven't got specific answers but I can say that none of what you suggested would work/is possible unfortunately. If you want to read up on some of the methods attempted/being considered, I suggest you read the S-OFF threads for the One XL and One X. They have gone through pretty much every idea there and also discuss some of the methods that might work
[HTC One S] gemarcano:
Well, it was worth a shot. Thanks though. I've kept tabs on the One X S-Off discussion, and they are practically stuck (they've even locked their thread for now). The only way they've managed to do s-off is via a javacard, which seems to be difficult to obtain legally, anyhow. I'll check the One XL forum, though -- I haven't been there yet.

Still, I wonder how HTC does it both for the RUUs (as in, how does the RUU unlock temporarily, even if it does require a signature), and actual s-off for testing if they actually do that. These two methods might be unattainable for us, but it would be nice to know how the "official" way is supposed to work.

Sent from my HTC VLE_U

Edit: I just looked for a One XL thread with regards to S-Off, but I didn't find one beside the normal One X thread. Is there another thread somewhere? Searching didn't help, either...
[HTC One S] raikesy:
http://xdaforums.com/showthread.php?t=1639972
[HTC One S] usaff22:
Looks like they are having good progress.
[HTC One S] er_fran:
What about the progress of the s-off? I'm waiting for that since I buy this perfect phone...
[HTC One S] scottspa74:
This is part true. Lazy panda does require battery pulls, but it simulates them. Also, lazy panda requires external storage.
[HTC One S] Tyler DeLarge:
Guys...this is my first HTC after Sony Xperia S(AOSP) e now i see that S Off isn't online for the OneS' users... Now, when we can have the S-OFF?
[HTC One S] rafiqzadah:
Lol? You say it as if they have it ready and don't want to release it. Haha. Please read some more. It will help with your knowledge about this phone and the world in general.

Inflicted By Venom
[HTC One S] Tyler DeLarge:
Hey guy, before you speak and tell me to inform me ... I tell you to learn to read and understand ... I wondered why this model still does not have S Off and when it becomes available.

Please avoid talking with higher tones.

Bye
[HTC One S] RussianBear:
Why you no write in English?
[HTC One S] rafiqzadah:
Okay look. The schematics on this phone along with the fact there are no other ways of interviening with the system of the phone such as an EXTERNAL memory card that we can override the system to let us write to it. That's the very basis and very BASIC way of putting it.

Inflicted By Venom
[HTC One S] mteezey:
S-off is not something that is given out by the manufacturer(at least in most cases). It is something that the community puts hours upon hours of time trying to exploit htc's code to get us s-off. So seeing how this is a discussion thread and not a development thread and no one wkrnig on development of this for this phone its not gonna be anytime soon that we receive it. At this point the only way were gonna get it is if the guys in the atat one x forums figure it out and we get lucky and it works for our phone too.
[HTC One S] usaff22:
Instead of trying hard to get S-OFF, why can't we figure a way to re-lock the bootloader so it says ***LOCKED***?

That would have almost the same purpose as S-OFF for me, which is for warranty purposes.
[HTC One S] avataranjie:
you need s-off for that
[HTC One S] Tyler DeLarge:
To get root without losing warranty
[HTC One S] usaff22:
...which I said without. A different method.
[HTC One S] LibertyMonger:
So seeing how this discussion was started way back in May things do not look promising for S- off. Wish I would have checked into this more before I ordered this phone. I haven't received it yet and not sure I want to keep it now. I am used to an unlocked bootloader with my Nexus S and I now have the Galaxy Nexus and my first Android was a Motorola Milestone XT720, that was a big disappointment of a phone. It made a lot of promises and basically tricked us into buying it. "8mp camera" and all and there were petitions and complaints to Motorola from people all over the world to have the bootloader unlocked and it never happened. It really put a damper into development and was an awful experience lol.

So I was wondering how big of a deal is it for the One S to have a locked bootloader? I know I see opinions of people saying this is the best phone and better than the Gnex and all that but I heard the same type opinions with the Milestone and it simply was not true, people just clinged on to their device and wanted to believe it to be so lol. Can anybody shed more light on the future of this phone? If you were to have the chance do you wish you didn't have this phone or do you have no regrets? I guess I would like reassurance that it is a great phone and that I should keep it! Lol. Thank you anybody for your thoughts!
[HTC One S] RussianBear:
I'd keep the gnex. My wife has one s, i have the nex. No comparison. Hardware wise, one s might seem better, but dev wise - nex all the way.

Unlocking bootloader does not void the warranty, stop with this nonsense already.
[HTC One S] n0j0e:
Why need s-off? Is not a Question!

I need root.

I need the option to backup apps + data + wlan keys (adb backup, Titanium Backup).

I need a firewall like LBE.

New recovery & custom Rom.

I doesn't need a new bootscreen.

I doesn't need a new partition table.

I doesn't need a new Radio.
[HTC One S] rafiqzadah:
There are a few guides on the Development Forum that explain how to obtain root and install custom recovery.

Inflicted By Venom
[HTC One S] touch of jobo:
On low hboot versions (1.06 or 1.09) we're not missing much. We can flash pretty much anything, except hboot itself, which is no problem.

On newer hboots (1.13 and up) we can only flash radios using RUU or OTA which is quite a pain and it also means the only way is up.

Repartitioning would not make as much sense on this device as it would on devices with external sdcard and ridiculously small app storage, like Desire.
[HTC One S] LibertyMonger:
So does this mean I will be getting a newer Hboot? I have been reading and reading about all this the last few days but it's hard to get a definitive answer, especially since we who are attached or stuck with this phone sometimes give a more glorified answer lol. I did the same thing with my Milestone but at the end of the day I got screwed I feel. Was really missing out on a lot and found out after getting my Nexus S. I think I might be selling my HTC One S before I even open it. Thanks guys for your answers and help.

Oh for the Hboot question, I am from Cincinnati Bell if that helps any. I bet it will be a newer Hboot huh.
[HTC One S] touch of jobo:
The only way to tell is by powering it on.

Mine came with 1.53 (hboot 1.06) out of the box, even tho I believe the 1.78 OTA (hboot 1.13) was already out at the time.
[HTC One S] maek_it_happen:
This is the only device I've had that is not s-off ......but this is definetly not something that is a deal breaker at least for me .

, who knows maybe HTC will realise that there recent slump in sales are due to them not allowing s-off

Sent from me
[HTC One S] LibertyMonger:
Thanks guys you've helped a lot. At least now I know what I'm facing.
[HTC One S] n0j0e:
Without htcdev, nope. ;)
[HTC One S] usaff22:
Seems to be good stuff in One XL S-OFF thread
[HTC One S] touch of jobo:
We (some of us) already use this method to flash radios, kernels, splashes and even some other images.

The problem is that experimenting with the more critical parts is just too dangerous if you don't have the means to revive a brick.
[HTC One S] boardlord:
Even with hboot 1.13 and above? I'd give half my toe to be able to downgrade my radio from 1.06es... :)
[HTC One S] usaff22:
If I had phone insurance I'd be willing to brick my phone, get a new one... but I don't
[HTC One S] mugetsu666:
If I had the money to cover my replacement cost I'd donate mine to the cause!

Sent from my One S
[HTC One S] touch of jobo:
Unfortunately no.
[HTC One S] usaff22:
Let's make a bounty for S-OFF thread, like in the One XL forums, maybe that way if the bounty is high enough a dev will start working on it.
[HTC One S] usaff22:
Anyone know what emmc spec the emmc is at? At least 4.4?

I think we need to disable POWER-ON-WRITE-PROTECT, but that means apparently that a protected partition cannot become a writable one unless the device emmc is reset.

I think this basically means, you have to reset the emmc using a physical switch, it is impossible from a software perspective. I have no idea where this emmc reset switch is.

Not sure if this helps, or not.

Edit: Looked through some previous posts, anyone know in which software versions HBOOT enables WP for itself?

Edit2: Also, anyone know if EHostDL is disabled by qfuse "EHostDL disable"

We need some info from real testers, or S-OFF will get nowhere.

All this was posted by me on the One XL thread, seems more active with devs.
[HTC One S] Dimson75:
The guy bought from us in shop with super cid -11111111 and with s-off

processor S3

4PDA
[HTC One S] usaff22:
On that forum, you seem to have said you "threw a bait on xda" so I'm not falling for it. Probably got a JTAG.

Sent from my locked, tampered ville
[HTC One S] Jackamy:
there are not?
[HTC One S] Tyler DeLarge:
And this?

http://cellphoneforums.net/it/bell-...di-sblocco-utilizzare-con-altre-reti-gsm.html
[HTC One S] usaff22:
That isn't S-OFF!

Sent from my locked, tampered ville