yashsingh1/xdaforums huggingface dataset:
[Verizon HTC Droid Incredible 4G LTE] superdave:
The latest update enables backing up of the system settings now. This enables the exploit using the following link http://xdaforums.com/showthread.php?t=1894717. The exploit gives shell root access with local.prop emulator setting.

Since the RUU is out there now, there should be no harm in this being public before everyone receives the update.

Edit:

It has been reported that this method is causing devices to change their HBOOT status to "*** TAMPERED ***". That can potentially void your warranty. Once an S-OFF exploit is released that can be corrected.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
if this is true im gonna freak!
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
This is the best news I've had all day!

Please keep us posted on the progress

Sent from my Fireball using Xparent Blue Tapatalk 2
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i am testing now, but i am getting confused at step 6..

click restore on your device

i am assuming that something pops up on the nexus? Or am i totally wrong..
[Verizon HTC Droid Incredible 4G LTE] superdave:
Sorry, had to run to an appt so didn't have time to write anything up.

When you run adb restore you should get a prompt on your phone to restore.
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Where is the RUU besides the pay link?

Yes, you will get a pop up when trying to restore. You'll have to turn the screen back on before you can accept it if the screen is off.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
nvm i have the restore screen now
[Verizon HTC Droid Incredible 4G LTE] dbrits:
Best. News. Ever.

Good luck to those giving this a shot. Please keep us updated on the progress. I'd give it a try now but I won't have time to try until this weekend.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i successfully get to step 8, but i cannot get a root shell... If anyone else has success, please share :) Cant wait to see progress on this
[Verizon HTC Droid Incredible 4G LTE] j13smiley:
i'm almost afraid to be excited yet...
[Verizon HTC Droid Incredible 4G LTE] mdmower:
Have you guys tried the automated scripts in Bin4ary's thread? (I still haven't downloaded the new RUU, so obviously I haven't)
[Verizon HTC Droid Incredible 4G LTE] Skidoo03:
I'm already rooted and I'm praying this is true! Good luck!
[Verizon HTC Droid Incredible 4G LTE] DavDoc:
I will give this a try when I get home tonight, Keeping my fingers crossed.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i was only attempting without the new RUU. Hopefully the OTA arrives soon, and the exploit works. fingers crossed

EDIT:

I just received OTA.. downloading now
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
i recieved my notification for the update about 10 mins ago. but i don't know what to do. i rejected it for now.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i dont mind trying the update and attempting the exploit. I'll keep you guys updated
[Verizon HTC Droid Incredible 4G LTE] andybones:
nice find OP!
[Verizon HTC Droid Incredible 4G LTE] JaggedEdge:
Can't wait to see if this works!!
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i am attempting the exploit now from

http://xdaforums.com/showpost.php?p=31545627&postcount=1

it completed successfully, but i do not see Superuser. Has anyone else attempted?
[Verizon HTC Droid Incredible 4G LTE] superdave:
It will appear to complete successfully, but, the changes to system are always reverted. Same thing happens doing it manually. You can get emulator mode root, just cant change system yet without it reverting.
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
you guys lost me in this??
[Verizon HTC Droid Incredible 4G LTE] PhillyCheez:
So we should accept the OTA? It's downloading now...
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
i see that now, bummer. it is a small success! hopefully one of our devs can build upon this..
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
Has anyone with the new OTA tried HTCDev bootloader unlock?
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
System on our device is at mmcblk0p33
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
retrying with this edit

EDIT:

no success
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
My update was forced... Still downloading but if you guys are able to get even temp root then we should be able to get s-off I'm hoping.
[Verizon HTC Droid Incredible 4G LTE] superdave:
Yeah, im using mmcblk0p33. It will remount fine and let you modify it, but, always reverts back after a restart.
[Verizon HTC Droid Incredible 4G LTE] nitsuj17:
So you have temproot then?
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
We can get shell root, but nothing sticks after reboot, and the steps say we should reboot after. I'm about to try loading the OS without rebooting.
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
i rejected the download and it downloaded anyway about an hour later, pissed me off, but i was able to defer the install
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
And I just had a pretty big scare. The phone froze and didn't want to turn back on even after a battery pull. After about a minute of pressing on it, it finally turned on. That was no good.
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
yowzer!

ice you have the new firmware installed, right?
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Yes. It just did it to me again. Scared the **** out of me. I can't afford to be breaking this phone right now. lol.

Everything's good now, but nothing will stick after reboot. Shell root works, you can move stuff and it's really there, but somehow the system is replacing it on reboot. We need an exploit that will give us S-OFF or let us write a new recovery from shell root.

And, for future reference, HTCDev does not currently work on this.
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
i defered mine til tomorrow night 1030, i'm wondering if it will allow to defer again, til i see whats going to happen.
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Here's the EMMC partition map for our phone:

dev: size erasesize name
mmcblk0p23: 000ffa00 00000200 "misc"
mmcblk0p22: 00fffe00 00000200 "recovery"
mmcblk0p21: 01000000 00000200 "boot"
mmcblk0p33: 47fffc00 00000200 "system"
mmcblk0p30: 00140200 00000200 "local"
mmcblk0p34: 13fffe00 00000200 "cache"
mmcblk0p35: 49fffe00 00000200 "userdata"
mmcblk0p26: 01400000 00000200 "devlog"
mmcblk0p28: 00040000 00000200 "pdata"
mmcblk0p36: 109c00000 00000200 "fat"
mmcblk0p31: 00010000 00000200 "extra"
mmcblk0p17: 02d00000 00000200 "radio"
mmcblk0p18: 00a00000 00000200 "adsp"
mmcblk0p16: 00100000 00000200 "dsps"
mmcblk0p19: 00500000 00000200 "wcnss"
mmcblk0p20: 007ffa00 00000200 "radio_config"
mmcblk0p24: 00400000 00000200 "modem_st1"
mmcblk0p25: 00400000 00000200 "modem_st2"
[Verizon HTC Droid Incredible 4G LTE] xdadevelopers-user:
I just tried this and found that, yes, it DOES give you root. However, for me, it made the phone unusable. Logcat was showing lots of errors and the phone never finished loading to the lockscreen. What's worse is that the system partition is still effectively read-only. You can remount it as RW but none of the changes will persist across a reboot.

So, the bottom line, for me, is that having root using this method is practically useless.

Unless you are a dev this root method is probably not worth your time.

-xdadevelopers-user
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
agreed.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
Rumor is that all we needed was temproot, and to get s-off would be very soon after. Even if the unit is unusable while temprooted, if we can write to the bootloader partition that might be all we need. Fingers crossed.
[Verizon HTC Droid Incredible 4G LTE] superdave:
The phone is in emulator mode so it is definitely not usable for a full root. Normally we could just remount system, copy over su, and then disable emulator mode. But the system partition is reverting changes so its not working. There is no point in doing this unless you want to try and figure out why the system partition wont take changes.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
I'm waiting for Andybones to chime back in... He has a tester phone and knows the right ppl. Maybe this new temproot method will yield positive s-off results. If so pushing unsigned su will be possible.

Also... Superdave, can u do the symlink trick after you have temproot? Maybe combining 2 methods might get perm... If it's reverting changes to /system then maybe changes to /data/local stick. Sorry but I'm remote and can't help this time.
[Verizon HTC Droid Incredible 4G LTE] andybones:
I can't go into much detail, but I can say that I passed this info onto the right ppl, thanks superdave!, I have the RUU of the OTA, so I installed it on the test phone and we did achieve temp-root like mentioned before, but then we ran outta time, so tmw more time will be spent on this. as soon as I have info I'll be letting you guys know :)
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
Thanks andybones, just to confirm: This means it is OK to accept the OTA, as the root development will be done on a phone using this OTA.
[Verizon HTC Droid Incredible 4G LTE] andybones:
I would say go ahead and get the update since the exploit they are using is in the new update, (of corse there's no gurrentees that they will crack it, but nothing was being found on the old software, so the fact that we got temp -root i think is a great thing)

so, yea, If it were me, I would take the OTA.

sorry if it seems like I'm being vague about things sometimes, but for the respect of the members working on the exploit they ask me not to give any detail, so I say what I "think" is ok and they won't get mad about :)
[Verizon HTC Droid Incredible 4G LTE] OldNut5:
My bootloader now says Tampered as well as locked after trying this, is that a problem, or is that supposed to happen?
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
*** TAMPERED ***

*** LOCKED ***

FIREBALL PVT SHIP S-ON RL

HBOOT-1.15.0000

RADIO-1.53.06.0919

OpenDSP-v29.1.0.45.0622

eMMC-boot

Aug 1 2012,12:05:25

Yeah, mine says the same. What the hell?
[Verizon HTC Droid Incredible 4G LTE] nitsuj17:
new hboot most likely, have you tried to fastboot recovery?
[Verizon HTC Droid Incredible 4G LTE] homers1:
Same thing happened with the ATT One X when changing an mmc block to allow HTCdev unlock. Didn't cause any real damage, I think.

http://xdaforums.com/showthread.php?t=1671396
[Verizon HTC Droid Incredible 4G LTE] mdmower:
Likely just so HTC can deny you warranty service now.
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
it wouldn't cause damage.. we couldn't damage the software on our locked phones even if we wanted to. it is probably a warranty void. we probably flagged our bootloader when we tried the new exploit. not a big deal really. We want to void our warranty anyway! WTB Rooooooot
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Since we already voided our warranty, they should let us unlock, dammit!
[Verizon HTC Droid Incredible 4G LTE] homers1:
Still no go on the bootloader unlock:

Error Code: 160.

Error Reason: MID Not Allowed.

:( [waiting impatiently]
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
I know i try everyday, was hoping after this update they'd give in?????????
[Verizon HTC Droid Incredible 4G LTE] homers1:
Me too. :rolleyes:
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
Can you tell if your token changed with the new update?
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Your token changed between every time you attempted HTCDev previously. It's part of their newer security measures to make one-time passcodes.

And I mentioned yesterday that HTCDev Unlock didn't work.
[Verizon HTC Droid Incredible 4G LTE] Method320:
Any updates to this yet?
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
not that i know of
[Verizon HTC Droid Incredible 4G LTE] demid30:
Hopefully s-off in the near future
[Verizon HTC Droid Incredible 4G LTE] DavDoc:
How did you display this? Is it in an adb shell or are you getting it from on your phone?
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
It's from the bootloader screen on his phone.
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
How did I display it on XDA? I changed the font and color.

I obtained the information from my phone's HBOOT, which can be accessed by resetting the phone, and as soon as the capacitive buttons turn off, hold the volume down button and you'll load into HBOOT.
[Verizon HTC Droid Incredible 4G LTE] DavDoc:
OK yes, how you were getting into your HBOOT screen.

Thanks for your reply.
[Verizon HTC Droid Incredible 4G LTE] Method320:
Simply hold down the "volume down" button and the power button when the phone is OFF
[Verizon HTC Droid Incredible 4G LTE] squeezyb:
also, make sure that "quick boot" is turned off in your settings.. i had that problem when i first got the phone
[Verizon HTC Droid Incredible 4G LTE] IceDragon59:
Correct. You have to disable Fast boot to be able to access it when resetting without turning the phone completely off.

Settings -> Power -> Fast boot
[Verizon HTC Droid Incredible 4G LTE] 1deadpixel:
Dave, you should make another edit to let the people who don't go to page 5 know that using this method puts the letters "*** TAMPERED ***" at the top of your HBOOT screen, which most likely voids your warranty and any return/exchange opportunities.

I used this on my new Fireball with the OTA (HBOOT v1.15.0000) and got the tempboot as well with a reversion after reboot.

I'm looking forward to s-off and I'm bummed to be late to the htcdev party, seems too easy when they give it to you tho :D

thanks for a great community!
[Verizon HTC Droid Incredible 4G LTE] DavDoc:
Agreed...... However, with S-off coming, we should be able to remove the TAMPERED label from the HBOOT screen once the tool is released. You should only have to live with this until then.
[Verizon HTC Droid Incredible 4G LTE] andybones:
you will actually be able to have it say whatever you'd like. :)

the tool will include their hboot which is like my screen shot that says "DirtyRacun"

but like I said you technically could hex edit it the same way they did to say whatever you'd like it to say.

you can even have the phone say S-ON, even though it's S-OFF ;)
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
Nice. I thought it was just the pink area we could modify. Oh, the possibilities :D

Sent from my Fireball using Xparent Blue Tapatalk 2
[Verizon HTC Droid Incredible 4G LTE] andybones:
yea that's what I mean, the back tampered goes away and says locked if u use a stock hboot, or DirtyRacun if u use the one provided by the teamunlimted.io, but I know u can hex edit it to say whatever you'd like rather than dirtracun
[Verizon HTC Droid Incredible 4G LTE] jonno95:
i can't find the post but someone stated that they would make this tool work for us

http://www.xda-developers.com/android/bootloader-customization-now-open-to-more-s-off-htc-devices/
[Verizon HTC Droid Incredible 4G LTE] andybones:
yep, once S-OFF that tool will work for us.
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
Some assembly required... We'll need to make a plug-in for the Dinc4G with the hboot.img and android-info.txt files specific to this phone. Requires Visual Studio 2010, but overall it doesn't look terribly difficult to make the plug-in. The process appears to be well documented.
[Verizon HTC Droid Incredible 4G LTE] andybones:
those files are needed to tell which phone is which, plus it basically just edits the hboot.img instead of manually hex editing it..

those files are in the RUU. or u can find the android-info.txt in any of the PJ53IMG.zip files I or anyone else had posted
[Verizon HTC Droid Incredible 4G LTE] superdave:
Thanks for the tip 1deadpixel. I edited the first post.

,Dave
[Verizon HTC Droid Incredible 4G LTE] andybones:
ahhh I see what you're saying.

someone needs to make us a .dll file plug-in

hopefully someone can do that, I tried :o
[Verizon HTC Droid Incredible 4G LTE] junkmail9:
I'm making a stab at it, but no promises whatsoever.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
So I was out of town when this first dropped and missed out on the initial rush of finding new exploits (well, existing ones that were just introduced on our device). I see in that other thread that here we are doing the symlink trick after achieving the temproot using the while loop exploit... sorry that I didn't notice that when I suggested it in my earlier post, I was remote.

I'm thinking the reason we can't make changes is due to being NAND locked still. What's odd is that we appear to see them get applied but then after reboot they are reverted. This even seems true for writing su binary. That makes me wonder if they are really getting applied in the first place.

Any ideas on getting NAND write on recovery? This might get us somewhere if we can push CM or TWRP recovery. This might get some of us rooted ahead of S-OFF.
[Verizon HTC Droid Incredible 4G LTE] andybones:
The S-OFF tool is "almost ready for release."
[Verizon HTC Droid Incredible 4G LTE] Nyobie:
Lol!! That practically might as well have been written in Chinese! I guess I have some learning to do still. :)

Sent from my HTC Rezound, rooted with S-OFF on Verizon's periodically blazing fast and mostly reliable 4G LTE Network
[Verizon HTC Droid Incredible 4G LTE] brycekerr:
*Does want little dance*

Sent from my ADR6410LVW using Xparent Blue Tapatalk 2
[Verizon HTC Droid Incredible 4G LTE] Linch89:
Nice use of quotes Andy :p
[Verizon HTC Droid Incredible 4G LTE] andybones:
Hehe thanks man. Just tryna pass on the msg w.o them getting mad at me.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
It just basically means that, even while temprooted, we are only shell root on a read-only filesystem. The recovery partition behaves the same way I think, so was feeling out if anyone knew more about getting write permissions on recovery while temprooted. Since /system is mounted in this scenario, but not recovery, I had thought that might be an easier attempt. Obviously s-off is our salvation, but in the meantime I was trying to help us all out in what limited capacity I can.

I plan to s-off either way... It's the only way to change partition sizes and other low-level tasks, but was thinking it might be nice to at least have root for now.
[Verizon HTC Droid Incredible 4G LTE] bberryhill0:
Laptop charging. Next I have to get it to Wi-Fi. Prolly at least three hours for Windoze to update.
[Verizon HTC Droid Incredible 4G LTE] Aldo101t:
get'r'done
[Verizon HTC Droid Incredible 4G LTE] Hunt3r.j2:
Anyone know if it's possible to change the CID with temproot?

If it is, we have our method to bootloader unlock until S-OFF comes out.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
Presumably we can write to the bootloader if s-off was achieved on the dev device (that was later destroyed in the hurricane), so maybe. I could temp-root and try to pull a copy of that partition if I knew which one.

I'm thinking that's the only way we'd achieve NAND write. Flashing custom recovery sounds a lot safer and less likely to brick, but probably any changes we try to make to anything other than the bootloader are futile with NAND locked like this.

If we could, we still would need a CID to change it to, and an unlock token. Anyone have those?

EDIT:

I tried the debugfs trick while temprooted with no luck. I'm seeing what others are seeing: changes look to be applied, and in my case even doing an "ls" inside debugfs showed that my new su file was there, but unfortunately when I exit back to the temprooted shell, it's not listed. This tells me that, as others have pointed out, the filesystem is effectively read-only.

Also, when I tried to simply do a "mount -o rw,remount /system" from the temprooted shell, the device immediately rebooted.

There's gotta be another way. Anyone have more suggestions on what to try while in the temproot shell? I'm thinking of starting a new thread with this very question.

Anyone know the partition of the bootloader? I was thinking of at least getting a hexdump and looking through it. I'm completely in the dark on what to pull, and if I got something, what to change there, though, and one wrong move would brick the device. I could really use some help from somebody more knowledgeable about the bootloader, like anyone who's worked with the Unlimited.IO team, or with the unrEVOked guys back in the day.

Thanks.
[Verizon HTC Droid Incredible 4G LTE] CaptainRewind:
Anyone wanting to get this for themselves while temprooted, run: "cat /proc/emmc". (I was trying mmc with no luck)
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] dsmdriver:
i there i have a rogers phone i need rooted and unlocked i have been watching videos and reading the posts but i still think some of the terms use are confusing, i tried to msg some one here in Halifax, N.S. to see if he would be interested in doing it for a fea but im not sure that the msg had got to him,

so im looking for some one to root and unlock my phone preferable if thay have done it a few times so they dont brick the phone

msg me if you are with in hrm or know the guy that i am talking about

thank you in advance

kevin

soon to be former bb user
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] enomi:
hey there

I can help you out. I am new as well but I was at least able to Root my phone.

What you want to do is find the Rogers Root file as well as download Odin.

http://xdaforums.com/showthread.php?t=1739426

go there and download..

Rogers Image

Perm Mirror 1: Rogers I747MVLALH1 Download

Perm Mirror 2: Thanks to zaghy2zy!: Rogers I747MVLALH1 Download

Also download...

Second,

Extract the stock_root67.tar from the .7z file you downloaded.

Use Odin, put phone into download mode [with phone off, hold vol. down + home + power ], connect to computer and open Odin.

once in odin click the PDA field and select the stock_root67.tar you downloaded.

Leave Auto Reboot and F. Reset Time checked.

click start and

when done let phone reboot.

If you have issues flashing with Odin please ensure you are using the microusb cable that came with the phone, users have had issues using other cables.

The word odin sends you a direct link

Follow those steps and your phone is rooted.

cheers,

click thanks!
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] KennyG123:
Please read forum rules before posting

Questions go in Q&A

Thread moved
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] amzi:
go search qbking77 on youtube he shows a vid how to root ever variant of the GS III
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] XyrusX:
Even easier method,

http://xdaforums.com/showthread.php?t=1746665

Download the toolkit and follow the video step by step.

Cheers,
[T-Mobile, Samsung Galaxy SIII] ou814us2:
Is there a way to force my SGS3 to use 3G instead of 4G? At work I cant get 4G but my Vibrant picked up 3G perfectly. Just wondering. Thanks
[T-Mobile, Samsung Galaxy SIII] MisterEdF:
Do you mean "2G/Edge"? There really is no 4G on T-Mo, it's just their marketing name for 3G HSPA+.
[T-Mobile, Samsung Galaxy SIII] ou814us2:
Yes, I know there is not "TRUE" 4G.. But it does pick up a different signal than my Vibrant "3G/H". No i do not mean edge. I want to pick up 3G not 3G+...
[T-Mobile, Samsung Galaxy SIII] joshnichols189:
No, it does not pick up a different signal than your vibrant. They are the same technology.
[T-Mobile, Samsung Galaxy SIII] ou814us2:
Ok, then i guess i need to try a different modem. Thanks
[T-Mobile, Samsung Galaxy SIII] joshnichols189:
That won't make a difference. It is not possible to limit one of them because they are the same technology.

Sent from my SGH-T999