yashsingh1/xdaforums huggingface dataset:
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
And I'm really going to aggravate people by saying I actually like sense on this phone. It's not without it's flaws, but the sense apps are quite good. Love the email app.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Well I do too so you're fine by my standards. Figure out why goldcard isn't working and you'd be awesome!

About that, is the goldcard idea entirely dead or can it be figured out??

Really, the more I think about it I have a hard time believing that all stock 1.85 can downgrade from 1.88 to 1.72 if we can't even upgrade to 1.88. But you've tried it and it works, it'd be nice if someone else does. People in #wildfires are chancing bricks left and right for S-OFF so you'd think someone would be willing to try this.

The fact that the chinese got it working makes me think it has to be possible. Still would like to see that thread. I would like to know what in the world they are doing differently.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
My plan of action is this:

Install stock ICS browser

Install stock ICS gallery

Install Nova Launcher Prime

Wait for root

29 days later return the phone to AT&T. Wait a week. Buy another one. Rinse and repeat. AT&T wants to waste my time? I'll waste theirs. And restocking fees can be overcome if you are persistent enough.
[AT&T, Rogers HTC One X, Telstra One XL] StrykerGT:
That's right to certain level, but the majority of people that had bricked their phones is because they are trying to root/unlock the phones. If the phones are open this will be reduced to a very small amount of phones returned.
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
Count me in with this. I have no issues with Sense at all. This phone's appearance is better than any other on the market. Just my opinion.
[AT&T, Rogers HTC One X, Telstra One XL] _MetalHead_:
Hey, I love the way Sense 4 looks on this phone, I just hate the way it performs.
[AT&T, Rogers HTC One X, Telstra One XL] Raadius:
What the hell is going on in here? It's been 2 days and thread jumped 50+ pages? Can I get some cliff notes, lol.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
some stuff was tried it didn't work

looking at how to get goldcard working to allow downgrade to 1.73
[AT&T, Rogers HTC One X, Telstra One XL] _MetalHead_:
[CLIFF NOTE]We still don't have root.[/CLIFF NOTE]
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
THIS THIS THIS THIS THIS.

and this!

It doesn't matter, no progress has been made towards root so.... :(
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Almost nothing. There was a wonderful idea (thanks to beaups) about making an external gold card, but that didn't work because these newer HTC phones don't seem to like our goldcard. It's not doing what it should be doing. If we cannot upgrade to 1.88 then downgrade to 1.72 then that method is dead in the water. There still might be a chance but it looks slim.

Jcase is confident his root exploit will work but it's probably going to be a week or two if not much longer before be finishes it.
[AT&T, Rogers HTC One X, Telstra One XL] Pumpiron579:
This is great news
[AT&T, Rogers HTC One X, Telstra One XL] attn1:
Without the goldcard algorithm (if one even exists for these) that's an impossible task.

Exactly. I think temp root is far more plausible. In fact, I am sure of it.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Also we have made some progress. We eliminated variables. If you read the 73 paves you'll find a lot that doesn't work. Don't repeat it, I guess.

So, correct me if I'm wrong but the only way to get root is:

1. Figure out why the goldcard isnt working, flash 1.88 then downgrade to 1.73. Then root.

2. Wait for jcase to finish his exploit.

3. Find some way of hacking into the bootloader. Unless HTC unlocks the bootloader for us, this is probably almost impossible without root.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
All correct unless some other random root exploit is found. I don't think it would be impossible, "the dev team" has cracked into every single one of the iPhone firmwares since the beginning of time. Some took longer than others, but they were always able to do it.

Maybe we should PM them LOL
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Another thing, and probably this is going nowhere...

What about permissions on anything and everything within the rom? I know it would be stupid for AT&T to leave a gap but they did it with ready2go. I would think of there's some way where we can at least get access to some system files (temp root), perhaps we can change some things. And maybe some of the encryption problems could be broken with brute force.
[AT&T, Rogers HTC One X, Telstra One XL] mbaran:
hahahaha
[AT&T, Rogers HTC One X, Telstra One XL] attn1:
Only the ones that work @ HTC.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
Lol I just tweeted on the page of one of the main guys on the dev team LOL I told them we have a bounty. Who the hell knows...
[AT&T, Rogers HTC One X, Telstra One XL] nugzo:
Dont put to much in to this 1.88 to 1.73 downgrade just yet. it has only worked on 1 phone. did NOT work on mine so we r 50/50. It may have been a fluke with beaups device. Or it could have been mine. we still need more testing. So please stop telling people we have a fix if they can get gold card to 1.88. It is not confirmed at this time. I tried to get from 1.88 to any other firmware for 6 hours straight. Kept getting wrong mainversion..which means that it IS reading the 1.88 version information on my device.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
attn1, I missed that earlier. How exactly do you think we should go about getting temp root? Also please read my post, I believe 3 below yours about permissions. Does this sound logical or no? I would think there's got to be a loop hole somewhere where something can write to /system. Even if it required several steps.

---------- Post added at 09:07 PM ---------- Previous post was at 09:03 PM ----------

You'll notice I say "and then" "if" and things like that quite often. I'm not a programmer, but sometimes I think like one.

Step 1: upgrade to 1.88

Step 2: downgrade to 1.73

Its a little more complicated than that but what I meant/mean to say is that the gold card method will not work (l.E. we have no fix) if we first can't upgrade to 1.88 and secondly downgrade that to 1.73. You need both or none.
[AT&T, Rogers HTC One X, Telstra One XL] c5satellite2:
Has anyone looked at exploiting network connection?

Sent from my ATT One X
[AT&T, Rogers HTC One X, Telstra One XL] nugzo:
What sucks is there isnt any other devices similar to ours to borrow root exploits from. They are all unlock able so they dont need exploits. :mad:
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
Its been discussed
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
I think the idea of swapping out files or code in the flashing process hasn't been discussed enough.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I've tried this extensively. Even modfied CRC's inside the zip file to match the alterations. Issue is there's a signature inside the zip file itself.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
It has. You can't change the ruu because that will break the signature.

Looking into permissions here. So far it seems this phone is pretty locked down.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
Yes but I thought there was a moment we could switch something out thats left unchecked towards the very end. I don't know how flashing an RUU works, but I was reading about an idea (only and idea) way earlier in the thread. It wasn't modifying the RUU itself, only something it looks at or loads during the process. I wish I knew more sorry.

Alright thats it, somebody call geohot.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
it looks like there's signature checking on the phone as well as within the ruu program itself

'
[AT&T, Rogers HTC One X, Telstra One XL] ChongoDroid:
*puts on serious face*

Picks up red corded phone

"get me geohot.. now"

Hail Cobra!
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
hahahahhaha
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
I think I'm missing something. Who is geohot? It sounds like we need him/her.
[AT&T, Rogers HTC One X, Telstra One XL] mbh87:
First person to ever jailbreak the iPhone
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
http://en.wikipedia.org/wiki/George_Hotz

he unlocked the first iphone
[AT&T, Rogers HTC One X, Telstra One XL] ThaDeanesta:
Geohot will probably not screw with our one x. He's an iPhone ;)
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Oh, well we need him then!
[AT&T, Rogers HTC One X, Telstra One XL] Tiffany84:
The idea was to swap rom.zips during the RUU but the problem is that it does sig checks periodically throughout the RUU flash.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Hmm. Been quiet in here.

I've been looking for software vulnerabilities in 1.85. So far I've not seen anything that I think we can use. It would help a lot if we could access /data but that is blocked. I can't even ls the folder.

Just for giggles I did a port scan on the phone (connected to wifi) and that showed 67 ports, all closed. Jcase is back on #wildfires now, but they're all working on S-Off. Seems thats the important thing now. :confused:
[AT&T, Rogers HTC One X, Telstra One XL] designgears:
well, we can use his exploit from before, it will require another hoop to jump thru tho. Basically we can hijack the request to AT&T and send back whatever we want to the app, which will probably get rid of other hoops in the process, but that is the general idea.

I want to make an app to do it, if anyone in here can write apps, hit me up! Otherwise we can do a tinyumbrella type redirect of the request.
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
If you need help hit me up, ill be on #wildfires later and we can see if we can get something done
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Yes I've heard that. Jcase sounds confident it will work, and thats good. Not sure when he can get it done though.

There is someone else in the channel who found yet another security flaw. He didn't want to say too much at this point, for fear that AT&T will patch it. He thinks he can create an app for it to hide the exploit. It sounds very promising but at this point he says there's a good chance it'll brick and its going to take some time.
[AT&T, Rogers HTC One X, Telstra One XL] ShotSkydiver:
What's the request to AT&T, though? I thought they removed the app install feature after the original exploit was made public?
[AT&T, Rogers HTC One X, Telstra One XL] Tiffany84:
There u go. That's the kind of post I've been hoping to see. Thanks for trying to help dg.
[AT&T, Rogers HTC One X, Telstra One XL] jayv81:
I'm not sure of how much geohot will be of help. I remember seeing where he got into some trouble for cracking the PS3. But then again I may be wrong.
[AT&T, Rogers HTC One X, Telstra One XL] mbaran:
I think it was a joke...
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
Yes but if we make it send that request to us instead we can still send whatever we want
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
How exactly can we do that? I know we need to do some dns spoofing. But the thing is, we can't write to /data. Obviously we can't write to /system either or else we wouldn't have this problem. I don't see how we can change the app all to get it to talk to our own server, because the permissions seem to deny us from doing so.

Not saying its impossible, I trust you guys. I'm sure ya'll know a lot more than I do. I just don't understand exactly how its gonna be done.
[AT&T, Rogers HTC One X, Telstra One XL] agentdr8:
ready2go (on the phone) can install apps on your behalf, as the system user (I mistakenly said root in the chan last night). That's enough to modify /data. The trick is getting r2g to grab an apk and install it.

I've been going through /system/bin and found 1 binary that is setuid/setgid root:shell and that's run-as. It appears to be an app debugger that can run apps under different privileges assuming the app itself has been marked debuggable in the manifest. If an app can be crafted to exploit this binary to execute other code as root then that could be another way in. I'm trying to get some hello world apps to work in the emulator via this command to see what can be done.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
Seeing this post made by designgears is the single most exciting thing Ive seen in this thead in 24 hours. This is excellent.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
UPDATE: Testing a newly found exploit right this minute. Stay tuned everyone.
[AT&T, Rogers HTC One X, Telstra One XL] mbaran:
you magnificent bastard
[AT&T, Rogers HTC One X, Telstra One XL] venelar:
Ha!
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I refuse to submit another false positive on this site ;)
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Understandable. It was over 50 pages talking about goldcards. Anyways, its sort of quiet in #wildfires on freenode, but theres a lot of people there. If you want to go there, feel free. We can do testing to, or help in any way possible.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I'm testing offline with DG right now. Will pop over and open up a few more testers if we get success.
[AT&T, Rogers HTC One X, Telstra One XL] sbryan12144:
Ok, so we can't downgrade to version 1.73 because there's no root.

We can't upgrade to 1.88 because of CID's being incompatible and can't superCID without root.

We can't mod a ruu because of HTC's signature and md5 check.

What about using an OTA method? HTC signs it like we do with apks, jars, and zips.
[AT&T, Rogers HTC One X, Telstra One XL] agentdr8:
This is speculation on my part, but I'm sure HTC would sign their OTA updates as well.
[AT&T, Rogers HTC One X, Telstra One XL] sbryan12144:
Well of course but like I said, they use the same method of signing as regular zips. By including the original meta-inf from let's say the 1.73 to 1.85 ota.
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
Thats good. I understand you want to be sure its working for now. Let us know when you're ready to present your ideas.

The issue here is that HTC signs them, and then also as far as I know we cannot update OTA unless 1. AT&T pushes the update through or 2. We have root access to the folder where it should go.
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
I just peed in my pants a lil

LOL
[AT&T, Rogers HTC One X, Telstra One XL] designgears:
Thanks to beaups find we now have root on 1.85!
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Just trying to figure out if I should post now or make everyone sweat for a day or 2 ;)
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
nope you can't unlock your bootloader if you have an At&T phone HTC/AT&T aren't allowing it
[AT&T, Rogers HTC One X, Telstra One XL] smokin1337:
Yea i forgot that part lol, sorry /puts foot in mouth.

I'll look around and see what i can dig up.
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
what would happen if we tried the one click root methods? Would it harm the phone any or just not work? I don't wanna lose ALL functionality with the phone.
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
root is needed to unlock the bootloader. this is where we get stuck at because of ATT
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
you'll get permission denied on the root attempt but nothing will happen to the phone, unless of course the method requires messing around with the partitions on the phone that store stuff like CID and EIME numbers but those partitions are locked up pretty tight without root anyhow
[AT&T, Rogers HTC One X, Telstra One XL] btdt13:
It will just give you and error and permission denied. I have tried it....lol
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
no way to make it think the phone is on something other than 1.85?
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
and im guessing no way to downgrade without root?
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
Correct.
[AT&T, Rogers HTC One X, Telstra One XL] Tiffany84:
It doesn't check what firmware your on to begin with. The problem is the area that files get pushed to are no longer writable on 1.85
[AT&T, Rogers HTC One X, Telstra One XL] jay661972:
I'm confused now. I have 1.85 that I flash using ruu or is this only applies to the one who updated their hox ota? I was in 1.82 and ruu to 1.85 and unlock bl and supercid and root it, flash cleanrom. Is there a way to ruu to 1.85 then do all the steps to get cwm and rooted?.
[AT&T, Rogers HTC One X, Telstra One XL] bobtentpeg:
This applies only to people who were not bootloader unlocked before flashing
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
yes of course. Once you have unlocked your bootloader you can relock it and unlock it at will. If you take a phone out of the box and it has 1.85 on it, there's nothing you can do.
[AT&T, Rogers HTC One X, Telstra One XL] stumpyz9:
that might work to be able to downgrade using an ruu. not sure how wed do that or if it was possible
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
alright I've made up my mind. Tomorrow is my last day for the 30 days and I'm done with this phone and more specifically AT&T. There are two carriers I can move to and either get the evo 4g lte or wait for the sgs3. I know one is rooted already and I'm sure the other will be as well, most likely way before we ever get it in our hands. I've given up on this. Root is root plain and simple. Nothing legal or illegal about it. I can't sit here and think that HTC and AT&T got the best of our awesome developers anymore. I just need to forget about this phone and move on.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
if we had an SD Card slot it would be easy. You make a goldcard, which essentially is the same thing as granting SuperCID and you can install any version of software you like. It's how root was first achieved on the Inspire. We made a gold card, installed a rootable firmware, rooted it and installed recovery etc.
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
I wish there was a way to extract stuff from an ruu. That way maybe we could repackage it without the bootloader stuff in it and it wouldn't get that error at the end.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
Sorry to see you go, but I can't say I blame you. Part of the reason I use android is to flash ROMS etc. You can't even back up your device without Root, Android without root is incomplete IMHO.
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
what happened with the stuff you were working on with jcase?
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
Ball is in his court. I sent him what he requested.
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
beaups you da man!
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
WHAT?!?!?!?! $Right on!!
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
AWESOME!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[AT&T, Rogers HTC One X, Telstra One XL] patstock11:
What ? ! Can we somehow keep it under wraps. Only give instructions via private message ?
[AT&T, Rogers HTC One X, Telstra One XL] mbaran:
this... this is not even funny !
[AT&T, Rogers HTC One X, Telstra One XL] designgears:
lets wait a few days... maybe a week!
[AT&T, Rogers HTC One X, Telstra One XL] idealz:
you definitely have the right to do so. :D
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
I don't think I could take the suspense.
[AT&T, Rogers HTC One X, Telstra One XL] patstock11:
Idea. Ya only get instructions via private message if ya send ur bounty
[AT&T, Rogers HTC One X, Telstra One XL] shgadwa:
But if you tell AT&T about it I'm going to send you hate PMs. Lolz. :D
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
I'm down with that!
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
what about people who didn't have $ to send to the bounty patstock? I would have loved to been able to. =(
[AT&T, Rogers HTC One X, Telstra One XL] loneBoat:
Lol XDA devs ROCK. I've been lucky enough to have root all along, and this even made MY day!!
[AT&T, Rogers HTC One X, Telstra One XL] slojko:
PPR
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
I'll donate for you.
[AT&T, Rogers HTC One X, Telstra One XL] arnelolavides:
Delay it until we got s-off.:D
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
na man I would feel so guilty
[AT&T, Rogers HTC One X, Telstra One XL] patstock11:
How bout this. If this is super easy to do. Or even marginally easy, I'll send $10 on ur behalf plus my bounty. I want this. And I don't want it getting to at&t.
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
Too bad. I will do it anyway!
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
I'm more curious about how it was done than I am actually installing it. Don't get me wrong I can't wait, but damn I'd like to know how it was accomplished. I was in the IRC for 7 hours yesterday LOL
[AT&T, Rogers HTC One X, Telstra One XL] Tiffany84:
Yes!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! CAN U TELL I'M REALLY EXCITED!! THANK U SOOOOO MUCH!!
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
you guys are awesome. I have a new found respect for XDA.
[AT&T, Rogers HTC One X, Telstra One XL] Tiffany84:
Thanks beaups and dg.
[AT&T, Rogers HTC One X, Telstra One XL] MWilt:
Me too...all WAY over my head but interesting to watch.

GOOD work guys!
[AT&T, Rogers HTC One X, Telstra One XL] nugzo:
PM root for donations isnt gonna fly around here. :) beaups wouldnt do that anyway. You cant keep this stuff secret. the entire US will use it. If att stops it then thats the name of the game. try again.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Go here:

http://xdaforums.com/showthread.php?t=1709296

Let me know if there's any issues with my instructions asap
[AT&T, Rogers HTC One X, Telstra One XL] seh6183:
Good job beaups! Enjoy your bounty! Now get over in the s-off IRC and get your $2000!!!
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
I've been in all day for two days practically lol. My eyes hurt haha
[AT&T, Rogers HTC One X, Telstra One XL] Fidelio_o:
I am so happy at work. Really didn't want to return this sexy bastid to att for a GS3.
[AT&T, Rogers HTC One X, Telstra One XL] Fidelio_o:
Where do I send my beers to lol
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
No, that wouldn't work, but if for some crazy reason that was what happened I would have paid for a bunch of people. That's just how I am! I will be making a donation SkizzMcNizz.
[AT&T, Rogers HTC One X, Telstra One XL] fadetoblack2104:
Been watching this thread since it's opened. I was rooted already, but it was interesting to watch these guys work! Great work guys!
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
I was rooted before this came out but damn I'm proud to be a member here!

Congratulations to all involved. It's been a rough couple of days but it's done!

:)
[AT&T, Rogers HTC One X, Telstra One XL] mbonus:
I don't even have the phone and I am giddy for you guys (and gals). I lol'd when he beaups suggested holding it for a couple days.
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
Gunny,

I honestly don't think we would've had root as fast as we did if you hadn't made this thread. Thanks for that and all the effort you did in coordinating this thread and the bounty thread!
[AT&T, Rogers HTC One X, Telstra One XL] StrykerGT:
I agree. Thanks!
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
Thanks guys. I'm not a Developer. I can't code. But I am an enthusiast who loves Android and this was the only thing I could think of to give back to the community that I've been a part of for a couple of years now.

I'm so happy for how it went. :)
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
I just realized holy crap it only took 3 days :)
[AT&T, Rogers HTC One X, Telstra One XL] droidiac13:
And remember when that a-hole said it didn't belong in the development section? LOL!!!!
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
Well truth be told I took someone's advice and changed the topic to think tank. :D