yashsingh1/xdaforums huggingface dataset:
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
has anyone managed to get QHUSB on an unrooted HOX? could try this method if its possible without the requirement of root first http://xdaforums.com/showthread.php?t=1932914
[AT&T, Rogers HTC One X, Telstra One XL] :
I know you guys have been talking about backing up a rooted phone and restoring to ours. But were you guys talking about adb backup and restore, or something else? And if it was something else would adb backup and restore work?
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Thank you for taking the risk though, you did well! At least we know that method won't work.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Also, (won't root) but if your otg works, when you boot bootloader it will perform a search for a bunch of diff files, it means nothing atm, but it is confirmation that otg works, if it doesn't auto search, select fastboot, then bootloader again.....if you don't see the auto search, otg is not working.........make sure update.zip is on root of external storage

---------- Post added at 01:09 AM ---------- Previous post was at 01:06 AM ----------

Only way found so far on stock 2.20 to get dload mode is severe battery drain, and even with that method it doesn't give us the 5 second emmc window they're using.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
how long does it give us?
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
It's using the adb backup restore function as an exploit, not backing up a rooted phone. But no, atm the exploit is not usable on our phone....it is being looked at closely tho
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Are you saying that it performs 1 search selecting bootloader, and a separate search after selecting recovery? I could tell OTG was working in recovery because the activity light on the thumb-drive started blinking.
[AT&T, Rogers HTC One X, Telstra One XL] :
Thanks
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
I am seeing if you entered into recovery by pressing volume up and power, and then selecting the update from external storage option.
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
Though this post isn't completely on topic it is somewhat relevant, so (mods) I beg you to not delete it.

When the subject of the OTG cable came up as a possible method I remembered a post a while ago (here) about one for sale on amazon for under $1. Turns out it is still that price with free shipping (link) so if anyone wants/needs to order one for if this method works I figured I should inform you all of this.
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Volume up + power does nothing for me... Just reboots the phone as soon as I let go. I just did volume down + power to enter fastboot, selected bootloader, then selected recovery and it started searching the drive.
[AT&T, Rogers HTC One X, Telstra One XL] 10ndavis:
That one isn't powered. It needs to get power to work.
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
but wouldn't it work if you used a powered hub?
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
You still need one. I plug my powered usb hub into it and plug devices into the hub.
[AT&T, Rogers HTC One X, Telstra One XL] 10ndavis:
That could do it. Lol
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
so than the one i linked too would work if you also used a powered usb hub on the other end.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Once you select recovery from bootloader, and you see the green recovery icon, then press and hold vol. Up then press power and release both, that will get you into the actual recovery. I'm not saying results are going to be different, but that's the method to actually boot into recovery. There will be a selection menu with factory reset, update from cache, update from internal storage, external storage...if you let it sit at after selecting recovery it never actually fully enters into it.
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Ok I will try that. I didn't have to let it sit per say, it just started searching the drive. this time I wont plug the drive in until after I get to the menu.
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
It said "---Invalid Operation--- Success oem- *gibberish*" So no go. But oh man! I didn't know this thing had the <3e> recovery. What a throw-back. Back when the 2.2 update came out for the Captivate, the new system had <3e> recovery and none of our update.zip's worked anymore because they had to be signed. But, I thought we found a way around it... I'll have to go digging thorough old threads.
[AT&T, Rogers HTC One X, Telstra One XL] Shryvone21:
Not sure I'm where you at with this but I looked it up too and the infuse also had it...the way they solved it was that they imported a custom kernel through Odin.. they changed it to the cwm recovery

Sent from unrooted and plain HTC one x 2.20:/
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
if we can get into QHSUSB mode (corrupt bootloader should do it <obvious hint for people to try it>) then we could in theory push an earlier hboot across and be able to flash 1.85 and use the old method for root
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
What tool will you use to push files in qhusb mode? Nobody has managed to get anything done in that mode....nothing at all.
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
I know I could google it (and I will if need be), but I figure someone here can give me a better synopsis. What is QHSUSB?
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Well, I've found a signed root zip. Problem is, and I think this is what 18th was getting at, you cant mount any drives to select a zip file. If you have nothing connected, it will say "failed to mount /sdcard" connecting a drive gets rid of that error but still gives "--Invalid Operation--- Success rebooting by reason: oem-00.." There must be a certain way to format a drive so that it allows you to mount it.
[AT&T, Rogers HTC One X, Telstra One XL] rey_lazo:
http://www.youtube.com/watch?v=_Pcxt6nKI10
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
following this for the evo-4g, however if we try this with multiple phones and multiple variants we could achieve it in some way

also if anyone has tried a hex editor they should (in theory) be able to edit the hex values to match that of the hboot from 1.85
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
Thank you, for the link. Now my question is how are we sure this is even possible on our phones considering the back isn't removable. Atleast via conventional means.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
essentially it is caused by means of shorting a few points, I am guessing the pogo pins have some use in this
[AT&T, Rogers HTC One X, Telstra One XL] rey_lazo:
http://www.youtube.com/watch?v=db5f3If-2Jw
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
perhaps, but what would happen if we picked the wrong pin? Would it be nothing? would it wipe our device? would we get a new paper-weight? I remember someone in the thread had their HOX busted open, perhaps he could inform us which pogo pin we would need? Or if that thing still boots and will connect to a pc, perhaps he could preform the trick and get us a recovery file we could just flash.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
worst case scenario = device is f****ed

best case = we achieve what we are after

probable case = device reboot

highly unlikely = device wipe
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
I've posted this a few times in the s off thread. Me, beaups, rpomponio and niceppl spent countless hours/days/weeks exploring qhsusb mode. HTC patched this exploit fairly well, and in the jedec standards publication you can see that it is also no longer present. The mode is there, but writing to it takes a partition, typically hboot to broken. That's why on the 2.20 update hboot had wp added to it. Without root, you CAN'T Bork any partition, rooted, you still can't Bork 12 because it's wp. If you want to get your hox into download mode here's a couple vids I made 4 months ago or so. You can see for yourselves it is not going to help

Disassembly

http://db.tt/SEyYD60W

Hox wire trick

http://db.tt/mzdBmaIu

---------- Post added at 05:30 AM ---------- Previous post was at 05:27 AM ----------

If we could get the device to a writable state like we can on pre 2.2x we would have had root quite some time ago:rolleyes:
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
I'm tempted to get 3 more HOXs just to put them towards this... if only temptation didnt cost so much.

has anyone tried breaking the partition scheme?
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
get some with busted screens, you only need them to run, not be a daily phone.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
whats the average price on devices with FUBARed screens these days? considering I can pick up a new HOX for about $300 outright (thats the 32gb variant if you were wondering)
[AT&T, Rogers HTC One X, Telstra One XL] usaff22:
Sensation had a method to rescue devices in QHSUSB_DLOAD, and it involved flashing HBOOT when bricked.

Sent from my locked, tampered ville
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
this is what we are hoping to achieve, however replacing Hboot with an earlier version then applying root and unlocked bootloader
[AT&T, Rogers HTC One X, Telstra One XL] superchilpil:
Isn't the hboot write protected before you can even get to this mode? Making this useless

And I'm sure it checks both the signature and hboot # so it would just brick
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
write protection would only go so far in protection (ie stopping you from formatting or writing over) however if the whole partition scheme is rebuilt (much like that of NVflashing) we might end up with a more successful attempt, worst that could happen is a warranty claim
[AT&T, Rogers HTC One X, Telstra One XL] grayfoxmg1:
THIS seems about average.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
pity it only ships to the states, I'm currently in australia.... anyway, attempt to 1 of who knows to dload this thing without f***ing the whole thing up
[AT&T, Rogers HTC One X, Telstra One XL] sandys1:
Just saying - I'd be more than happy to chip in some cash if the devs want to buy a busted HOX for some dev work.
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Me and Beaups are trying to get this taken care of as I speak :) keep your fingers crossed folks :)
[AT&T, Rogers HTC One X, Telstra One XL] dalewest:
F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5

...is this still the thread to watch?

F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
I really wish you'd stop making grandstanding posts like this.

/just sayin
[AT&T, Rogers HTC One X, Telstra One XL] dalewest:
Loving the crosstalk at the S-Off Campaign thread. The knowledge possessed by some of those people is scary impressive. :cool:
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
Tell me about it!! Its all Beaups now cause the chat has gone over my head. The only good part is I understand how there NEW exploit works and the whole idea around it. Keep your fingers crossed it will work for emmc based devices etc! :)

For the record and gunny. I am not saying today is the day so don't think this is one of those "grand stand" posts. :) happy that's clarified as well!
[AT&T, Rogers HTC One X, Telstra One XL] omario8484:
noob question

HHi guys I just got my at&t one x and of course it came with all their bloatware and the 2.2 update...I have a nooby question is the progress at the woldfire s off campaign helping us gget to be l tp acquire root?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Nope, it likely won't help users without root, if it helps HOX users at all.
[AT&T, Rogers HTC One X, Telstra One XL] joelgsmst:
Wait, so why was the s-off thread at the Wildfire S section mentioned in this HOX thread? o-o Do you mean that it's only useful to already-rooted HOX users to obtain S-OFF?
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
If anything, it's that.

S-OFF is the next step after root/unlock.
[AT&T, Rogers HTC One X, Telstra One XL] joelgsmst:
So as of now, is there no way to root 2.20 HOXs? T.T
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Were in here thinkin about it:beer:
[AT&T, Rogers HTC One X, Telstra One XL] joelgsmst:
I'm fairly new to Android, with the HOX being my first smartphone, so I don't understand much of what goes on in this thread. Have you guys gotten anywhere in regards to rooting 2.20? Or are you still searching for an exploit to use? Because I've noticed that this thread has slowed down in the past couple of days D:
[AT&T, Rogers HTC One X, Telstra One XL] XNine:
The stuff some of these people know absolutely blows my mind.

It's odd, I can understand a lot of programming talk, but I can't program whatsoever. It's like people who can understand a foreign language but can't speak it.

Really intelligent folks around.
[AT&T, Rogers HTC One X, Telstra One XL] Rydah:
Sorry if I missed it, but It's simple to edit an hboots version number. That way I can whip up an older hboot, with an updated number so it doesn't reject. Just a thought. I'm butting in from the Evo LTE threads. :*

Sent From My HTC Evo 4G LTE, On The Now Network From Sprint!
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
I think that would mess up the file signature though.

Sent from my NeoMax Rezound
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
The hboot partition is wp. You can edit all you want, its not Going to be written to the phone.
[AT&T, Rogers HTC One X, Telstra One XL] Rydah:
Ah sorry guys, was just browsing, ans thought I'd throw out some input.

Sent From My HTC Evo 4G LTE, On The Now Network From Sprint!
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
No worries, it's the think tank after all.

Sent from my NeoMax Rezound
[AT&T, Rogers HTC One X, Telstra One XL] wdkingery:
I have kept track of the link provided a few pages ago; the s-off campaign. As It appears they are about to complete s-off on the wildfire s in a similar manner to revolutionary, I have a question :

Considering the chip sets of our one xl and the wildfire s are different, does their work matter to us?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Seems like 2 exploits happening over there. The one that's finishing up now is the less likely of the 2 to posisibly be helpful for us.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Ok, if your going to rebuild all the partitions, how are you going to replace any of the wp ones? Also, how are you going to write to any of them to begin with? The wiretrick method doesn't put the phone in a writable state.

---------- Post added at 12:10 PM ---------- Previous post was at 11:28 AM ----------

What I'm trying to say here guys is your going to find that this is a huge waste of time, and the efforts to spend money on it should be considered a pointless expense. You cannot just rebuild all the partition, you cannot even modify a single byte in the unprotected partitions atm.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
this was essentially ideas to begin with, however I believe any attempt made with this method may actually be useful
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Without root you have no way of achieving the emmc window. The only way is borking a partition, which you cannot do without root.
[AT&T, Rogers HTC One X, Telstra One XL] eortizr:
I too think this will be the best approach at this point, if no HOX Dev has been able to acquire root after 3 months, what make us think they will ever will?

Just find who's the best Dev in XDA at getting root for devices and buy him/her a HOX. if everybody puts $10.00 we can buy him a HOX plus the money on the bounty thread.
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Read the HOXL s-off thread.

If the guys you already have can't figure it out, I doubt anyone else can.

Sent from my HTC Rezound
[AT&T, Rogers HTC One X, Telstra One XL] superchilpil:
He seems set on what he wants to do, so let him learn the hard way that he's wrong
[AT&T, Rogers HTC One X, Telstra One XL] nickeedoo:
Are we thinking the jellybean update will be of any help? Or does anyone have predictions in terms of exploits?

On a sidenote, superchilphil, your name is not indicative of anything I've seen you say.

Sent from my HTC One X
[AT&T, Rogers HTC One X, Telstra One XL] tylerdurdin:
You cant ever rule out an exploit in an app, but from reading it seems that the restore exploit in the latest JB has been patched also so....... We may be getting less chance of an exploit.... Not that that one has helped us at all anyway.
[AT&T, Rogers HTC One X, Telstra One XL] aznrice2k4:
Try to get the older version of the app. ;)

Or we can manually pull every partition.

dd if=/dev/block/mmcblk0px of=<output file> bs=<block size>

For example:

root@android:/ # dd if=/dev/block/mmcblk0p1 of=/data/test1 bs=512

dd if=/dev/block/mmcblk0p1 of=/data/test1 bs=512

131072+0 records in

131072+0 records out

67108864 bytes transferred in 31.977 secs (2098660 bytes/sec)

In the above example, we are dumping partition1 to a file (test1) created inside /data. Block size is 512 Bytes.

Refer to my video. Its a hassle but yeah

[YOUTUBE]BQSQKKTdVVI[/YOUTUBE]

The output file created is a binary file and can be pulled using adb pull. It can be read in a hex editor.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
He's not wrong.
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Yeah, the exploit is patched in the latest jellybean. But what version of jellybean will we get? I'm guessing it takes a while to develop sense on top of JB, and when HTC or whomever started developing the JB update, they might have started with an older version (example, 4.1.0 instead of 4.1.2, etc.)
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
You can't dd to or from the phone without root privileges. There are numerous dumps of all partitions, from both s on and s off evita's. If we could it would be as simple as dd p4, change to super cid, and dd back.......
[AT&T, Rogers HTC One X, Telstra One XL] aznrice2k4:
Hmm sorry I haven't read through the thread. Fill me on a quick synopsis. Lol his about emergency download mode?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Quick synopsis is read the thread :)
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
Well we have a theorized way to achieve s-off, however cannot do sh!t with that method without root... everything is there however its acquiring root permissions which is the issue
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
If you have a theory for s off development, read thru or search the thread then post your ideas. They are always welcome. If it concerns emmc mode thru qshusb_mode, it won't work. The security flag is in a wp partition that remains protected in emmc mode.
[AT&T, Rogers HTC One X, Telstra One XL] ringnutz:
Would we be able to make some kind of key generator to get the unlock code from HTC, since they allow non-at&t variants to be unlocked with the cid. Is there any way to view the unlock code on a s-off at&t one x? I hope that makes sense..
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
Has anyone tried to unlock that partition via terminal/cmd(ie lock-p4: off)? Or tried breaking the partition scheme?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
lock-p4: off????

Define "breaking the partition scheme" please.
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
If not, try

su : please

Who knows right
[AT&T, Rogers HTC One X, Telstra One XL] xPIN34PPL3Sx:
I'm assuming lock-p4 stands for lock partition 4. Just a guess though.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
seeing as formatting that partition alone from an external source probably wont work, what if we tried to edit the value for the GUID/MBR that would break any read/write permissions theoretically making all partition RAW
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
And how would you boot the phone?

Keep in mind when WP is applied at bootup, it is done at the sector level.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
push an earlier version of Hboot then rebuild the partition scheme
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Hboot is not the the start of the boot process. It's closer to the end really. Besides you can't re-engineer a raw chip by pushing partitions to it. It doesn't even know it's a chip at that point. That's why it cost millions and millions to engineer a new device. It's certainly not all done with a few guys at their ubuntu boxes.
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
The boot process is described in the s-off thread.

Sent from my HTC Rezound
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Hboot is the second to last item to load prior to android. There are ~10 other partitions that load first.

Assuming your theory could work (it won't). You realize the phone would freeze and/or shut down the second you wiped out the disk (if you could). How would you even push the new hboot at that point?
[AT&T, Rogers HTC One X, Telstra One XL] ryuken11221:
This sound like a promising idea
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Where did a command

Lock-p4: off even come from? Seriously!

Wiping an entire disk and rebuilding? Again, where is this coming from? You don't even have priveleges to look at an unprotected partition, less fdisk the whole thing and re-engineer the code........sorry if I'm not showing patience today, but you should seriously consider learning a little more before throwing out theories that have no validity, are made up or found on some random google search that provided something that sounded smart.
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Don't even bother hitting the thanks button on him to look good and smart. I hate people who do that.

ON TOPIC:

I don't think we can do much in terms of command since you need to su to do anything of significance. I may be wrong since I'm basing my knowledge on GNU/Linux. If anything, we need to find an exploit not in the boot process, but ICS itself. I may be wrong, but this isn't the S-OFF thread, it's a thinkthank.

I think that AT&T has really covered themselves on this one though, we're probably going to get root on Jellybean.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
ok.
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
I don't think it uses MBR or GPT...

Sent from my HTC Rezound

---------- Post added at 05:07 PM ---------- Previous post was at 05:06 PM ----------

Wow I did not see that.

:(

Sent from my HTC Rezound
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
perhaps an attempt towards it would benefit more than belittling plausible ideas on the basis of "it wont work because it seems like too much effort" any attempt is better than nothing, if you are going to play it safe then run along with your "software level exploits" which are more than likely going to become useless in the near future anyway... sure it may seem over the top for everyday users, but its a step closer to s-off, I know that many of you will probably laugh at me for my ideas on how we may achieve this goal, but honestly this has more of a chance of working than the overflow buffer is counteracted by ASLR so any mention of it is a dead end. TLDR: software exploit attempts wont work

you may as well look at p4 with a hex editor and see what sets the partition to WP, any luck with removing it (by rebuilding the partition scheme possibly) would probably have better luck than just blatantly dismissing any attempt all together
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Wasn't bashing you man, but you seem to be trying things that obviously need privileges we don't have (partitioning, bootloader, etc.). Just a question though, (not sarcasm, an actual question):

Is it possible and/or realistic to actually rebuild a partition scheme on our One X?
[AT&T, Rogers HTC One X, Telstra One XL] ringnutz:
Anyone make progress with the otg dongle? Or is that a dead end also