yashsingh1/xdaforums huggingface dataset:
[HTC One S] Reevine:
Sorry about that I should have just used my dropbox. I forget Google Drive shares files weirdly but looks like you got it. The gold card is for One series. Should work on HOV, HOS, and HOX. Though as I haven't been able to fully test it because you need signed Javacard to execute properly. I will take some time to eng a HTC signature card, but can be done. I would love to try your Ubrick. I'm assuming that's with the Jig correct?

EDIT: If you click on file under the File name up top left there should be a download option. Or ctrl+s as a shortcut.
[HTC One S] Reevine:
Technically yes
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

I unbrick with jig and if possible with software

So now we are making process on s-off. PS: could be that i can give you s-diag file from a htc one s by devs.

I also have drivers for qhusb on windows. And other little things.
[HTC One S] Reevine:
The Diag file I got is from Dev as well but a specific s-diag for HOS would be even better cause then we know auth method is legit.

Does any one know if SB 3.0 cookie stores any cert info while storing OS destination and such? I'm checking to see if HTC uses same cert for Jcard as they do other security. I know they use same cert sig for all One series HBOOT. If I can get the excract sig from HBOOT I might be able to use for Authentication partition in security card for s-diag method.
[HTC One S] russellhoff:
Thank you for your effort and time...
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

No, sorry I don't know. Possible some one knows.
[HTC One S] Reevine:
I found out that as of dmss protocol v5 SB 3.0 does store a signed certificate for OS management. Currently I'm working on comparing all the HTC signed certs to make sure signature process can be dupped and to do a mock sig for Jcard development. I'm still working on setting up security measures of the Jcard currently. This will take a while but it will take more time to eng the signed certificate for the security authentication.

Despite the amount of time that has already lapsed since HOS was released the diag method will be something that anyone can use so I'm hoping the invested time is worth it lol.

I was able to get some feed back from some peeps in the HOX soff thread so thanks to them for some clarification and thanks E.V.A for the Qualcomm documentation thread which was useful.
[HTC One S] Reevine:
Was the initial s-off you go a radio s-off or another exploit?
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Radio
[HTC One S] mugetsu666:
Thanks for all ur and everyone else involved for working on this still. I wished I could help out, but I'm not that skilled Yet! But as soon as u do I'll be one of the first to buy a couple of beers for ur. I'll just need it for my Hox+ too. Lol
[HTC One S] slainbybeats:
AW: [Discussion]HTC One S [S-OFF]

Big big thanks to everyone who is involved into s-off! I am so happy to see it finally coming! :D
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

So if I understand correctly, you're about to find a way to sign a standard MicroSd to work as a Javacard? If yes, would the javacard work on any HTC One series device? Because there are some people who sell the javacard WITH the diag files for about 1300 - 1800 USD depending on using cycles.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

We don't have sdcard ;)

And I won't buy it for that money. That's not right. And do you really want it so hard?

:)

Reevine: could you make a new thread which progress updates or should i do that? Or does anyone of you want?

:)
[HTC One S] mugetsu666:
There's no way I'd give that kinda money, that's just stupid.
[HTC One S] Reevine:
If you want to post a new thread in the Dev section with your radio S-off info I'll just tack in some of the progress for the eng file info once I progress further. I don't have any physical files as of yet besides HBOOT and partitions which I'm using to examine for certificates.
[HTC One S] Reevine:
Supposedly you can't use a standard microSD cards as Javacards because of an extra security partition/layer on an actual Javacard that stores the cert information. I would like to get around that but currently I'm not using a standard microSD card.

As far as I know the diag file is universal to the One series but the Javacard is not because of certificates for each phone are different.

As far as paying for a file that we already have I'm not a big fan. I an really not supportive of people who try and sell info or services that should be free and public to those who understand and can use that info. That's the whole reason I started android dev was because of that open source community.
[HTC One S] Rampage:
AW: [Discussion]HTC One S [S-OFF]

Go go tecardo go go :D:D

Gesendet von meinem Nexus 7 mit Tapatalk 2
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

You know that the javacard is checked for cid, mid and don't know last one...

:)

Don't know where i have that...

@crazy: :) go with what?
[HTC One S] gock:
I'm owning a htc one s with s-off. Let me know if you guys will need anything that I could submit
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Where do you live?
[HTC One S] gock:
Czech republic. Prague.
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Ok. I will give you a script tomorrow. This script will make a whole dump of your phone. Only system and data are ignored.
[HTC One S] gock:
As long as it wont turn my Hos into a brick to hit the girl next door. I will happily to run anything you send me. Lol

Just pm me then and hope you guys will come to a solution soon
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Ok. :)

You need unsecured boot image.
[HTC One S] gock:
Just tell me what exactly I need to do via pm then. I don't even mind run a ruu to make it back to original state if it will.help you guys better
[HTC One S] Reevine:
libtommath? As in the open source project library code program for large integer number management? :P
[HTC One S] blackwing182:
now i want s-off -_- lol xD
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Yes. I don't know much about the program. Only that it is used with the other tomlibaries to create the sign keys. Correct me if I'm wrong:)
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

Sorry, knew that but forgot it. If you want further info of a javacard follow the link and look at the second post. But I'm sure you already know that.

http://xdaforums.com/showthread.php?t=2057105

Diag files are locked to supercid. And I don't think they're universal. That's why we can't use it and why the javacard is needed. It was always discussed if we could load it by bypassing CID check. So we wouldn't need a hilariously expensive javacard. Someone said we couldn't use the javacard because there is no sdcard slot. Actually you can: Follow the link I've posted and you'll see how it works.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Nitrous: the javacard is also checked for cid and mid, or?

PS: On which Hboot Version did you created this diag file, reevine?

Will make a dump thread soon. :)

Two reasons: Finding new Radios, and trying to compare some files
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

I haven't created the diag. I grabbed it from a guy on xda.cn. I don't know if it does a check for mid. Afaik only for cid, mainver and radio. Just open the diag and look into the android-info.txt file. Just to clarify; I'm not a dev nor am I experienced in these kind of things. I only gathered informations all over xda, xda.cn and any Chinese forum. Also from HTC employees but I can't share it with you because I had to agree to an NDA to get the info.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] Tecardo:
Thanks, so i need to look for myself.
[HTC One S] Reevine:
You'll need the javacard and the diag file. The diag is what actually s-offs the device. The javacard is to store the diag and act as a verification for the HBOOT security.
[HTC One S] blackwing182:
does 4.1.1 kernel have USB-OTG by default?

if it has it, the using a otg cable and a sdcard slot should have no problems. i think, cuz from what i know, otg can work on bootloader an in ruu mode.
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

Can confirm that. USB OTG in bootloader does work on the HTC One S too. Even on ics stock kernel.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] blackwing182:
it should be no pronlem doing it the way is talked, the problem is the goldcard, or javacard, what ever they are caled, cuz it need to be made correctly and if this guys are correct, s-off will be sucesfull.

only problem, the risk of a brick device lol.
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

We need public key to create a good goldcard.

Isn't the htc one unlock code made out of the public key?
[HTC One S] blackwing182:
how to get that?
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Ask htc :)
[HTC One S] blackwing182:
no lol i will not do that, that is like trying to eat a stone.

---------- Post added at 07:40 PM ---------- Previous post was at 07:39 PM ----------

so wee will get stuck at some point? or where this is going to end?
[HTC One S] Reevine:
The goldcard is already created. It's in the diag zip that I pushed out. I have a few different diag files so if that goldcard doesn't work it means I pushed out the wrong diag zip. :p

Goldcard is only a portion of the Javacard. That's just the main partition. The security layer that holds the HTC signed info is what needs to be worked on. I'm currently working on that when I have time.

P.S. If anyone has a HTC One S they would like to donate or sell cheap it would be greatly appreciated (no longer have a HOS to use for testing). Even if it has a broken screen :D
[HTC One S] blackwing182:
screens are at low price on ebay!
[HTC One S] Reevine:
Yeah I know that's why I said it didn't matter if someone was willing to donate a busted device (screen wise)
[HTC One S] Reevine:
For those who want some more information here is an archive that has been supplied from a few other Devs who have worked on s-off. Compiles files from other HTC devices that have gotten s-off. There is some Qualcom documents for their processors as well. If you want some more info on check these out: S-OFF Archives
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

The Gold Card you uploaded has an bit length of 1. What seems broken to me :)
[HTC One S] Reevine:
It does?? Hmmm I'll have to double check that
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Will read out one s with JTAG the next days. Shouldn't find something. But why not.
[HTC One S] PJMAN2952:
What does the S-Off do? Currently I can't boot up my phone without doing boot.img from my computer. I am on Panaroid and it happens on any rom I flash from CM9 to CM10. I don't know why. So now I can't turn my phone off because then I would have to use my computer to boot up my phone correctly. If not, it just gets stuck at the Panaroid boot animation screen.
[HTC One S] scotty1223:
There is something wrong with your phone,or you are useing the wrong fastboot command to install the boot image. Once its there,its there. You should not have to install it every time you boot.
[HTC One S] Reevine:
As far as what S-OFF does: it turns off the security flag in the HBOOT. Which lets you flash anything you want directly from the device without the use of adb and fastboot (generally). So you could flash radios, Eng HBOOTs, and anything else you wanted without issue for the most part.

Now concerning you're issue I am glad you asked! However despite this being just a discussion thread I would still like to keep it related to S-OFF, so please to try and post you're issues in the appropriate thread/forum. If you are having issues definitely make sure you read up on how to use adb and fastboot. If you're still having issues with ROMs it's best to ask for help from the thread for the ROM you're having issues with. If it isn't working make sure you're wiping everything before flashing. There are a lot of beginner threads out there so take a look at those as well.

Hope that answered you're questions
[HTC One S] Reevine:
Lots to Do!

Just a quick update on what I'm specifically work on currently.

I am doing some more research on security cert storage for Java Cards and how the Java Card VM handles it. There are plenty of ways to do things in java so I'm trying to narrow down the ways that HTC might have handled their setup, that way I can properly replicate their javacard.

I also need to figure out which symmetric key algorithm HTC used to generate their keys. I'm also needing the RID for the HOS so that I can match that up and with a proper RID. MID and CID I'm not worried about since it hasn't been confirmed that HTC actually uses it for the Jcard (RID is the only necessary ID for Jcard applets).

Needless to say there is lot of research to do!!!!

Sorry that I haven't been able to provide a whole lot of physical testable progress on the diag method yet, but I still wanted to give an update to everyone who wanted to know where I am at. If you have any information or know a lot about Java security and Jcards I would greatly appreciate any help that you're willing to offer.

P.S. If anyone knows anything on how the diag file works with the HBOOT that would help a lot. So I can create a properly constructed applet for the jcard.
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

AFAIK, the Javacard has also modified Hardware, i.e. additional security layers. It's not only a conventional microsd. I'm not sure if it's possible to recreate those partitions. Maybe you can emulate them. But I could be wrong.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] Reevine:
Yes I am aware this :) I have 3 microSD Java Cards
[HTC One S] nitrous²:
AW: [Discussion]HTC One S [S-OFF]

PM me if you want to. I know someone who could possibly give you the correct diag files for money. And by the time you figure out the way the Javacard works, you'd have anything needed to s-off the HOS or any HTC One series device.

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

Reevine: your sure mid is not needed?

Sorry, my english is too bad to understand you right. Can you explain it in other words?
[HTC One S] blackwing182:
what's your native lang?
[HTC One S] Rampage:
AW: [Discussion]HTC One S [S-OFF]

German :3

Gesendet von meinem Nexus 7 mit Tapatalk 2
[HTC One S] blackwing182:
Mine is spanish lol
[HTC One S] Reevine:
And mine is Japanese lol

I am not entirely sure if MID is needed or not. RID is a definite and more than likely CID as well but MID don't know yet
[HTC One S] mugetsu666:
I want to learn Japanese! :D
[HTC One S] n0j0e:
AW: [Discussion]HTC One S [S-OFF]

I want to learn cooking sushi and HTC S-Off!

Thank all l devs here for spend there time to break free the One S! :thumbup:

* Send with much love & Android. *
[HTC One S] afkfurby:
maybe?

hello, I think I saw this link already somewhere in this thread: http://mobiletechvideos.mybigcommerce.com/htc-one-s-s-off-modification-service/

I have three HOS, two with cracked screens, next week the new screens should arrive.

I thought about doing a full dump of each partition of the device before I would send the phone and after the s-off'd it i do a full dump again to check whats exactly was changed.

Afterwards we could maybe just make some hex editing on a partition dump and flash this in QDL mode?

What are you thinks about that?
[HTC One S] antaine:
Good idea but the price is a bit expensive.

And do you know who are they to do that and how they do that.

Envoyé depuis mon HTC One S avec Tapatalk
[HTC One S] blackwing182:
dont know if this helps but, here http://xdaforums.com/showthread.php?t=2037750

is for PrimoC (HTC One V)
[HTC One S] afkfurby:
AW: [Discussion]HTC One S [S-OFF]

Thay jtag fixed one of my sgs2. But i have no idea how they do that.

But in theory it's not important how they do it. They have to modify a partition/write the security flag. So we can check what they changed and modify our partitions througt QHUSB DL mode.

40$ aren't expensive when it brings s-off to all HOS useres..
[HTC One S] RussianBear:
What qhsusb mode are you talking about? If it's the one where you think you can use emmc recover, it will not work... search for users darkspr1te, soul shadow, and e.v.a. they've made some awesome discoveries a few weeks back.
[HTC One S] kant1988:
I have S-OFF ?

P/s : I buy a second - hand One S T-Mobile, and it had S-Off.
[HTC One S] mugetsu666:
Yes u do!
[HTC One S] blackwing182:
how you get that s-off?
[HTC One S] Reevine:
That's awesome but is it a full s-off? I got mine to say S-OFF as well but not all the security measures were actually still disabled. I tried flashing an eng Hboot but bricked my device
[HTC One S] gock:
How do we check if we have full soff or not? Mine is s-off as well
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

You can't with out brick. Or Reevine: sdiag is created by you also on half soff?
[HTC One S] scotty1223:
was the hboot an older version? i brivcked my one x in a similar manner. i do not think the prollem is "full" or "partial" s off,but more an issue of the old eng hboots doing some sort of check that causes them to freek out and put the processor in a do not boot mode.

in my case,old eng hboot flashed fine. booted fine when i rebooted bootloader. flashed back to stock newer hboot,wich flashed fine. rebooted bootloader and it turned off and was done. i think the eng hboot may have been checking for some matching firmware,and i may have been able to get away from it by flashing a full signed ruu,rather than just the unsigned(tho stock) hboot.

the other possibility is that the eng hboot checks for a flag somewhere that this is an eng device,and when it doesnt find it,it freaks out,puts the processor in "do not boot" mode

i just got my one s back from mobile rech videos. it is s off,and does not seem to have any limitations,sans maybe flashing old eng bootloaders.ive learned my lesson there,im not messing with them again. we should be able to run newer,patched hboots just fine,however,with any kind of s off.

i dumped partition mmcblk0p3 before and after the s off process. the main visual difference is at 0x8400 the "03" changes to "00" for s off. i can upload those partitions if you guys want them,but i dont think youll find much of anything useful. the HOXL guys spent alot of time looking at this,and theres really no way to utilize QHUSB_dload mode to write mmcblk0p3, it is still write protected there,and signiture checked by other partitions.

this thread is filled with great info: http://xdaforums.com/showthread.php?t=1639972&highlight=s-off

im sure alot of it will be useful to one s as well. just please search the thread before making it longer with questions they have allready addressed :)

IMHO,a software hack(other than the correct signed java card and diag files) is not likely for any of the no-sd card devices. if youre desperate for s off,send your phone to mobile tech video. theyre professional,quick,had great communication,and the phone came back without a scratch and all my data still intact. no i dont work for them,just extremely happy with my s off one s :D
[HTC One S] eminembdg:
So a reputable android dev on Twitter has just stumbled across s fully software s-off for almost all modern HTC devices. Waiting on more news as to when we'll see a release!

Oh, it's @TeamAndIRC that was tweeting about this. Even posted pics of a droid DNA and HTC one x that was s-off'ed with this mystery software
[HTC One S] mugetsu666:
That would be freaking awesome! I have a OneX+ that needs it!
[HTC One S] eminembdg:
He's saying that you'll need super cid for it to work
[HTC One S] scotty1223:
it figures,lol... glad to be wrong on this one :) i asked jcase if it would work on tegra 3 and he replied not sure. keeping my fingers crossed as well!
[HTC One S] blackwing182:
im talking to the guy, i need a update.zip ( the one they sent to update devices ) no matter what one, long as it is for the HTC One S s4.

i sended my mmcblk03p to him, i just need the update.zip
[HTC One S] hasoon2000:
OTA WWE 3.16

http://www.androidfiles.org/ruu/sec....27.50.08L_release_301852xf01hejl416oev96.zip
[HTC One S] troby86:
Isn't that a full .zip? It's 617Mb...I think he wants a smaller update file. Maybe I'm wrong.
[HTC One S] hasoon2000:
Update.zip is an OTA. With this OTA, it upgrade ICS to JB. That's why it a huge file. Besides that, you would have to ask someone else. What files does he need? The HBOOT or what?
[HTC One S] troby86:
Idk, you're probably right. I have yet to see a small update.zip file for the One S. I was thinking they needed one of the smaller OTA updates.
[HTC One S] hasoon2000:
Find out what he needs. If he need the hboot, I'll decrypt the RUU and get it.
[HTC One S] troby86:
OK, I'm sending him the T-Mobile US .zip right now
[HTC One S] blackwing182:
got it, i need the one thats made for t mobile version , i found the one that have the same bootloader and all :) i hope this bad little boy got S-OFF soon!
[HTC One S] troby86:
I already sent him the T-Mobile 2.35 update and my mmcblk0p3...now we wait I guess...
[HTC One S] blackwing182:
yup we need to wait
[HTC One S] PeQuEsan:
Glad to see that beatups finally found his way to S-OFF...

Now we must be patient.
[HTC One S] blackwing182:
so now we know that s-off is not hardware related. a software is nedded to s-off , att HTC One XL confirmed that it can be s-off with that software, and since the att HTC One XL is almost the same phone as the HTC One S s4, S-off can be achived too.

i hope we get s-off soon but with patience :)
[HTC One S] eminembdg:
Glad I could at least get you guys in contact with the ones who can assist with this software!

Guess we wait and see!
[HTC One S] Behold_this:
Well, it's actually been confirmed that all modern HTC devices can use this exploit as long as they are running the S4, S3 or S4 pro processors. This even includes the dna and butterfly and likely the upcoming HTC One a.k.a. the M7. The exploit has not been released yet but has been shown to work, so sit tight and relax. If these devs are smart, and I know they are, they will not release the exploit until the One has been released so HTC cannot patch it.
[HTC One S] afkfurby:
could you please upload the dumped partitions?
[HTC One S] :
Me Gusta
[HTC One S] :
Sent him my HTC one s tmous mmcblk0p3 dump he also needs a ota update.zip
[HTC One S] Behold_this:
http://fotadl.htc.com/OTA_Ville_U_I...1.84.531.2_release_2978576yp8mjiw19tsxxey.zip
[HTC One S] :
"(jcase) i need an update and p3 for the s3 version"

Any s3 volunteers here ? Please zip the p3 as its 127 mb and after zipping its only some kbs
[HTC One S] jcase:
S-off is nearly release ready.

I need /dev/block/mmcblk0p3 from a qualcomm s3 variant, and a matching update.zip for each model that support is wanted for.
[HTC One S] Reevine:
Damn looks like I was beat to the punch. I was just getting towards finishing the Jcard applet for the diag method. Well we definitely appreciate your help.
[HTC One S] blackwing182:
as soon this gets out i will make new Cwmr for one s lol xD
[HTC One S] k1llacanon:
If you guys get s off will we have to pay for it? Just asking don't mind paying for your hard work
[HTC One S] mugetsu666:
I can't wait, now I will just need it for the X plus!
[HTC One S] blackwing182:
this just got real!!!! :)

suck it HTCDev!
[HTC One S] D3LTA:
This just got realy interesting...
[HTC One S] jcase:
Anyone have an s3 HTC One S?
[HTC One S] Tecardo:
AW: [Discussion]HTC One S [S-OFF]

I will get you one.

---------- Post added at 10:23 PM ---------- Previous post was at 10:22 PM ----------

Which files do you need
[HTC One S] jcase:
I need an update.zip (OTA) from it it signed, and a copy of /dev/block/mmcblk0p3
[HTC One S] Darknites:
Will be wasting your time if you cant mount the SD as mass storage but if you can fix that then I see a lot of people going back to it.
[HTC One S] blackwing182:
i know how to fix it lol i made one that have it, but since no one is using it then why i should release it?