yashsingh1/xdaforums huggingface dataset:
[AT&T, Rogers HTC One X, Telstra One XL] sproutd:
I was talking about the whole XDA community. I've only had this thing for a day. I thought I'd be OK with a gimmped bootloader. The more I thought about the I came to the realization that I wasn't. I'm coming from a rooted inspire. My sole purpose for rooting at first was to be able to back up apps and app data. Then I got the stones to flash a rom and it was all

Downhill from there. So here I am now with a 32 Gb SD card with all my TB info on it and no way to put it on this phone. There goes countless hours and dollars.

Sorry for the rant.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
We feel your pain sproutd. The enthusiasts community is such a small percentage of the user base that AT&T doesn't care. Several of us filed better business Bureau complaints and got nowhere. V
[AT&T, Rogers HTC One X, Telstra One XL] rohan32:
Can someone get me the permissions of /data/local/tmp?

Are they rw-rw-rw?
[AT&T, Rogers HTC One X, Telstra One XL] Skizzy034:
Mine says rwx, rwx, - - x, but that's on cm10. I don't know if it's the same on Sense.

---------- Post added at 11:06 AM ---------- Previous post was at 11:05 AM ----------

You haven't lost your money. You can still download all the apps.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Doesn't matter, owned by shell so of course we can write there.
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
This script is specificially for ICS 4.04 and it is for the Xperia S thought I'd post it here to see if the smart folks ™ could tell me if it would work or not

@echo Sony ICS Update Root Enabler 5.0
@echo (Works with locked Boot Loaders too)
@echo -----------------------------------------------------------
@echo I did not write this program. Just translated it in English
@echo in order to make it simplier for everybody to use.
@echo -----------------------------------------------------------
@echo Plug your phone via USB Cable, turn on the phone, allow
@echo unsigned programs, enable USB debugging and press any key.
@echo -----------------------------------------------------------
@echo canerpense
@pause
echo off
cls
files\adb shell mv /data/local/tmp /data/local/tmp.bak
files\adb shell ln -s /data /data/local/tmp
files\adb reboot
echo Wait until reboot is fully complete and when phone asks for sim lock
echo password, press any key. (2 more left)
pause
files\adb shell rm /data/local.prop > nul
files\adb shell "echo \"ro.kernel.qemu=1\" > /data/local.prop"
files\adb reboot
echo Wait until reboot is fully complete and when phone asks for sim lock
echo password, press any key. (1 more left)
pause
files\adb shell id
echo Wait until reboot is fully complete and when phone asks for sim lock
echo password, press any key.
pause
files\adb remount
files\adb push files\su /system/xbin/su
files\adb shell chown 0.0 /system/xbin/su
files\adb shell chmod 06755 /system/xbin/su
echo Removing changes except ROOT
files\adb shell rm /data/local.prop
files\adb shell rm /data/local/tmp
files\adb shell mv /data/local/tmp.bak /data/local/tmp
files\adb push files\superuser.apk /system/app/superuser.apk
files\adb reboot
echo Press any key to exit and have fun with your rooted phone.
pause
echo on
[AT&T, Rogers HTC One X, Telstra One XL] Root-Maniac:
I mentioned this to beaups a few days ago. I don't think it works though...
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Deadend for us.
[AT&T, Rogers HTC One X, Telstra One XL] XNine:
Hmmm. Is there a way into tricking the Software update into thinking there's a new update, then loading a new, modified HBoot that allows for rooting/unlock? I assume there's some kind of software/firmware signature that has to match up. Just a thought.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
No.
[AT&T, Rogers HTC One X, Telstra One XL] niceppl:
i think we should ask.htc to.give.us some vip.offers like.free.soff..

since we found many secure.holes.for.them....for free..now they can add the i letter infront of the hox...
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
I know it's only been out for a couple of weeks, but I feel so hopeless about this release. This is easily the nicest phone I've ever owned and as soon as something goes wrong with it, and I need a new one, I'm screwed. No more root.
[AT&T, Rogers HTC One X, Telstra One XL] niceppl:
im actually running stock firmwares....

not bad.....4.0.4 sense 4.1 bugsfree....
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
If I wanted a locked down phone I would have an iphone. :(
[AT&T, Rogers HTC One X, Telstra One XL] jburkco:
Except that you can jailbreak an iPhone these days easier then you can keep root on the HOX.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Fortunately 2.20 stock is pretty damn good.

But yeah, we still want root. I'm still looking...
[AT&T, Rogers HTC One X, Telstra One XL] pololance:
You da man
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
The usb port is also a "direct connection to the board itself".

As are the volume and power buttons ;)
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
that being said it would then be possible to have a secondary device used for injecting root while using an RUU, it would be a plausible attempt at root
[AT&T, Rogers HTC One X, Telstra One XL] gunnyman:
Now THAT'S HACKING! :p
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
No, it wouldn't be.

All the flashing is done on the device itself. This has been covered over and over.

RUU merely sends the signed zip to the device.

All of the authentication and flashing is handled on the phone itself. There is no tampering with that process.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
has jtaging been covered/attempted yet?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Of course the phone could be rooted with jtag.

That method is only useful in order to have a rooted "donor" device in order to find software exploits.

We already have rooted 2.20 devices (myself included) so jtag is not necessary.
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
lol no one's going to take apart their phone
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
looks like the RUU might be the only way, I know I will cop a lot of crap for saying it but surely there must be someway to bypass HTC's key
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Build up a giant XDA supercomputing network to crack the key?

I would contribute.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
somehow I doubt a world wide x-grid computing array would be efficient for cracking the key, it'd be easier to breach their network and just steal the key (normally I wouldn't recommend that option either, but its really a robin hood scenario)
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
I'm still thinking about the recovery mode, seems like the only solution that doesn't need a couple of super computers.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
include SU & busybox in the factory reset image maybe? (please dont be RO or signed) other wise we would probably have to spoof an ota (which would require a lot of work, probably require root anyway and be an extremely illegal way of using HTC's network)
[AT&T, Rogers HTC One X, Telstra One XL] qwertyaas:
Yep..... Email back from an HTC email someone posted earlier.

Hello,

I understand that you are upset about not being able to unlock the bootloader on your device.

As is stated on the developer website:

“HTC is committed to assisting customers in unlocking bootloaders for HTC devices. However, certain models may not be unlockable due to operator (carrier) restrictions. We continue to work with our partners on this, check back often for ongoing updates about unlockable devices.”

I’m sorry, but this is outside of our control.
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
A few dozen swear words came to my mind after reading this. What the heck is AT&T's problem? It's as though they want us mad.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
There is no "factory reset image". And everything done from recovery is also sig checked.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
seems like a PITA really... so either break the sig check or get the key from HTC.... some how I think getting the key from HTC will have more luck
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Or find root via a misbehaving system app like usual.
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
And this is why signed modded ROMs wont work ;)

I think the best thing we have is eMMC recovery mode, which will skip authentication. Someone did it on another device by power cycling the chip, but HTC patched that. I believe we were discussing cutting power to the chip while loading hboot or something along those lines.
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
So, are there any button combos that simulate a battery pull? I thought I remember reading that Power plus a Volume key did.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Nah pushing and holding power for 10ish seconds does. But it would impossible to time.
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Ok, can anyone write a script to detect when /system is written to or mounted rw, and then mess around in stock apps and sense settings/features to see if it ever triggers?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Its never mounted rw. We need to decompile all of the system apps and find one that makes a mistake relating to wr files, directories, etc.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
write a spoofed update for an app like SDcardWizard that would allow you to push SU and busybox to their required fields... how ever that will probably be a signing issue as well
[AT&T, Rogers HTC One X, Telstra One XL] 18th.abn:
Lots a good stuff floating around here, I don't want to lose the idea of soft bricking.... if we can find ANY way to soft brick chances are we can get root and unlocked.....I mean, of all things I cannot believe we can't get a phone soft bricked lol, anyways, just bumping that idea. Its a fairly certain method once we get it bricked.......

---------- Post added at 08:00 AM ---------- Previous post was at 07:57 AM ----------

There's no factory reset image. All a factory reset does is format your /data and /cache folders. If your rooted, use TB to uninstall some system apps. Factory reset and no apps will ever "come back" so to say.
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Maybe the app could write su and busybox to /tmp and then you reboot into the recovery mode and then push thenm into the right places?
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Probably not with stock recovery.

Sent from my ADR6425LVW
[AT&T, Rogers HTC One X, Telstra One XL] slotstik04:
http://xdaforums.com/showthread.php?t=1870652&page=7

I know it won't work but what do you guys think? He claims its a universal HTC root method.
[AT&T, Rogers HTC One X, Telstra One XL] GuyIncognito721:
Nope.

Error: Universal Exploit method has been patched on this firmware!
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Universal? I highly doubt it will work, too many factors. And if it does work, then how come no one has a rooted One X on 2.2? Looks too good to be true, and it probably is.
[AT&T, Rogers HTC One X, Telstra One XL] matt_12tall:
We still need the bootloader unlocked for us to even try this correct?
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Unlocking the bootloader first would allow us to get root. If we got root first, then we could unlock the bootloader.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
That's the catch22....
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Once you have one of them, you can get the other one.

Only problem, neither are obtainable so far.

Sent from my ADR6425LVW
[AT&T, Rogers HTC One X, Telstra One XL] thekalby:
I have no idea what I'm talking about for the most part, but just an idea from my noob self. Is it possible to temp root? This must be easier to achieve then perm root. Couldn't we then unlock the bootloader?
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
We have not found any sort of root, including temp root.
[AT&T, Rogers HTC One X, Telstra One XL] thekalby:
Oh well, it was worth a try.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
I am not sure if anyone has tried this but I figured it was worth a go.

fastboot boot boot.img (pick one from a custom rom)

adb remount system

adb push superuser.apk system/app

adb push su system/bin

adb reboot

if this hasnt been mentioned somewhere then its pretty sad for nobody to have mentioned/tried it
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
You can't boot to an unsigned boot.img with a locked bootloader. Not sad at all.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
what about an earlier one with unpatched exploit?
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
You can't downgrade, it won't work.
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
Actually that's a good question. I believe the fastboot boot command is totally prohibited on a locked device.

Regardless, the root exploits in the past have been in system apps and permissions. Not the kernel itself (at least since I've been playing attention).
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
I was under the impression that flashing an older image was considered downgrading and didn't work?
[AT&T, Rogers HTC One X, Telstra One XL] ChefAnt:
If you already obtained root then why are we still looking for a method. I'm guessing it wasn't a perm root?
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
essentially its just using the boot.img as a temporary boot option which would then possibly open up the system itself to the exploit through means of the old kernel and ramdisk, meaning you would then be able to push SU across with adb while temporarily booted with say a 1.85 or earlier boot.img, once SU has been pushed reboot and it should be there after wards.. the theory behind it supports it but whether it works or not is still to be disccovered
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Only problem is the locked bootloader.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
shouldnt be such a problem with a signed boot.img
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Interesting. Anyone up to try this and risk bricking? lol
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
I dd'd the 2.20 image while having unlocked boot loader and then flashed root. Its how we can look for exploits.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
note fastboot BOOT boot.img not fastboot FLASH boot.img
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
There's no brick risk. But I'm 99.9% sure that command is prohibited on locked bl.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
someone try it and if it works then it works if not then we try something else
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
We need someone on locked bl to try. Pretty sure we've tried this before but its worth a shot.
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
If someone links files and gives directions I can do this as long as I wont brick, or can get help unbricking.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
anything pre 1.89 should be fine for it (I am certain the same exploit was patched in that RUU for the telstra variant) given the cmd works of course
[AT&T, Rogers HTC One X, Telstra One XL] abhipati:
I am on 1.85 can i relock the bl and try this? Does it help in anyway
[AT&T, Rogers HTC One X, Telstra One XL] :
you shouldn't brick. the worst that could happen is your phone rejecting the file.

---------- Post added at 08:23 PM ---------- Previous post was at 08:23 PM ----------

I think they want someone on 2.20 to do it, since this thread is trying to find root for 2.20.
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
Good. Im on 2,20 with locked bl
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
RUUs -> http://www.filefactory.com/f/4e1ce47f16313c0d/

extract .zip from RUU

extract boot.img from .zip

move boot.img to fastboot & adb location (assuming you have SU here as well and can open fastboot)

fastboot boot boot.img

adb push superuser.apk system/app

adb pus su system/bin

adb reboot
[AT&T, Rogers HTC One X, Telstra One XL] abhipati:
My bad.. Totally forgot about it
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
Are you talking about this?
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
need premium account for 1.85, any other host?
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
unless you know of another fastboot

---------- Post added at 11:34 AM ---------- Previous post was at 11:33 AM ----------

get someone who has 1.85 RUU to upload it to google drive or something
[AT&T, Rogers HTC One X, Telstra One XL] :
http://d-h.st/bS4
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
Thanks

need 10 min to download then I will attempt
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
The suspense is killing me lol
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
I find this entertaining, and the best thing about it is that if it works then there is probably no way that AT&T could possibly patch it

---------- Post added at 11:54 AM ---------- Previous post was at 11:43 AM ----------

also I might modify KennethPenn's 1.85 root method to work with the tempboot option as that might open up a few more doors to ideas if this fails
[AT&T, Rogers HTC One X, Telstra One XL] GuyIncognito721:
Nope.

./fastboot boot boot_signed.img
creating boot image...
creating boot image - 6391808 bytes
downloading 'boot.img'...
OKAY [ 0.981s]
booting...
FAILED (remote: not allowed)
finished. total time: 0.983s
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
FFS!!!! find out if it is the command in general that it has the issue with and try to boot to a 2.20 boot.img
[AT&T, Rogers HTC One X, Telstra One XL] GuyIncognito721:
It's the command...

./fastboot boot boot_signed.img
creating boot image...
creating boot image - 6307840 bytes
downloading 'boot.img'...
OKAY [ 0.977s]
booting...
FAILED (remote: not allowed)
finished. total time: 0.979s
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
Damnit all
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
can anyone else confirm?
[AT&T, Rogers HTC One X, Telstra One XL] inphamous36:
I could help?

Hey guys i am on 2.2 with a locked bootloader and no root. I have a pretty good understanding on all this so if we need more than one person to test one thing or another I could help...
[AT&T, Rogers HTC One X, Telstra One XL] abhipati:
Do the following and post ur results

RUUs -> http://www.filefactory.com/f/4e1ce47f16313c0d/

extract .zip from RUU

extract boot.img from .zip

move boot.img to fastboot & adb location (assuming you have SU here as well and can open fastboot)

fastboot boot boot.img

adb push superuser.apk system/app

adb pus su system/bin

adb reboot
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
I already did, same results :(
[AT&T, Rogers HTC One X, Telstra One XL] :
You need premium for that..

http://www.4shared.com/file/35bbU4_Y/htc_one_x_RUU_2205027_att_us_0.html?refurl=d1url
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
time for me to see what else we can exploit.... bit of a pain they covered their arse with blocking tempbooting
[AT&T, Rogers HTC One X, Telstra One XL] inphamous36:
Maybe I don't understand as much as I thought I did...
[AT&T, Rogers HTC One X, Telstra One XL] Mister J:
It's okay man, at least you tried. I'm guessing trying to find an exploit via a system app is the next thing.
[AT&T, Rogers HTC One X, Telstra One XL] inphamous36:
...

I mean I couldnt extract anything from that... it was a exe file and am i supposed to use adb to do all that
[AT&T, Rogers HTC One X, Telstra One XL] GuyIncognito721:
When you run the ruu it will put a rom.zip into a temp folder (user/appdata/loacal/temp) which you can then extract the boot.img from.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
closest I have found is them writing to external data... seems like it is gonna be a long wait for the next exploit
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
Or figure out how to cut power during boot to enter emmc recovery
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
could probably do something similar with some batch script during rom update, not too sure on how much luck you'd have though

---------- Post added at 01:25 PM ---------- Previous post was at 01:18 PM ----------

ran eMMC check and turns out there is no brick bug for the HOX... emmc may be SOL too
[AT&T, Rogers HTC One X, Telstra One XL] ComposMentis:
I'm new to this and just thinking out loud, but when you update an app that resides in /system/app doesn't that dir have to be writable at some point? Can you push the superuser.apk at just the right time?
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
dependant on the app, however it would normally write to mnt/sdcard/android/data

also when you next boot check to see if you are getting a notification that quickly disappears saying "access permissions changed"

---------- Post added at 03:39 PM ---------- Previous post was at 03:30 PM ----------

also you probably wont be able to read anything in /data
[AT&T, Rogers HTC One X, Telstra One XL] niceppl:
superuser.apk.. does nothing without su in the bin...
[AT&T, Rogers HTC One X, Telstra One XL] ComposMentis:
I'm rooted already on 2.20 since I put in supercid when I got the HOX in May. I'm just trying to brainstorm. I don't know anything about the nuances of getting root, but sometimes it takes someone ignorant of what normally works to throw out an idea that works. My gut tells me htcdev will allow boot loader unlock before we crack 2.20 for root.
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
would have more luck with fastboot/adb commands
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
set up a path to sync which will have su in system/bin and superuser.apk in system/app (probably tried, but after fixing a xenapp server issue I am fresh out of ideas for pushing super user)
[AT&T, Rogers HTC One X, Telstra One XL] superchilpil:
Problem with that, and has been stated many times in response

Fastboot does not work unless you unlock or s off your bootloader
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
may as well spoof an RUU (which will have to be signed by any luck)
[AT&T, Rogers HTC One X, Telstra One XL] superchilpil:
I wish it was easy to do but we aren't going to spoof the signatures anytime soon

Either we have to pray for a s off exploit or HTC to let us unlock this phone

I'm more on the side of an s.off exploit as I got this phone the day before the ota and rooted it
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
if I had 80tb worth ocz vertex3 (the 550mb write speed ones) in a raid0 setup with 14 intel xeon e7 8870s and at least 256gb of ram (per CPU) I think we could crack it in under 3months... if you figure out what I am thinking go treat yourself to a cookie
[AT&T, Rogers HTC One X, Telstra One XL] beaups:
You can't "spoof an ruu" . Didnt we cover that a few pages ago already?
[AT&T, Rogers HTC One X, Telstra One XL] Nocturnal_50:
I believe so... but we didnt cover an attempt at cracking the signature
[AT&T, Rogers HTC One X, Telstra One XL] superchilpil:
If you could then a lot of people would love you... :P
[AT&T, Rogers HTC One X, Telstra One XL] wlmeng11:
Anyone still considering a xda supercomputing network?

Sent from my ADR6425LVW
[AT&T, Rogers HTC One X, Telstra One XL] ThisWasATriumph:
Well theres folding@home... Any way we could disguise the RSA key as a protein? :D
[AT&T, Rogers HTC One X, Telstra One XL] samiam0295:
But you dont. And it still wouldnt even be remotely close to that time frame. Assuming HTC uses a 128 bit key, the IBM Sequoia (1,572,864 processor cores and 1.6 PB of memory, consuming 3,000 square feet of space) is capable of 16(10^15) processes per second, would take 45 thousand years to run through every single possible key, not even counting the processing power to find the right one.

Here is an explanation assuming 1 peta flop, the IMB is capable of 16 something. http://crypto.stackexchange.com/questions/752/how-long-does-it-take-to-crack-des-and-aes]

NOT GONNA HAPPEN