yashsingh1/xdaforums huggingface dataset:
[HTC One V] bayusuputra:
Hi all,

I have HTC One V with S-Off, but I have yet to unlock the boot loader (just got it a few hours ago).

I assume that with S-Off, I don't have to flash boot.img using cmd, just like what I do with my S-Off'ed Desire S?

I am giving the phone to my mom, but I can still have access to it.
[HTC One V] simonsickle:
I'm going to investigate this. I am busy till tomorrow afternoom
[HTC One V] -Duir-:
I just saw your reference post which says 0p7 is where the CID is stored, is there any reason the instructions in this thread wouldn't work using this file on our device? If I new I wouldn't brick my device I'd try it, but like i said, need my phone.
[HTC One V] simonsickle:
Can't write to that partition
[HTC One V] simonsickle:
took a quick look, 27 is SWAP 30 is Devlog neither would be helpful, i believe, to changing cid

on a secondary note, i been looking through hexrays and found some interesting information
[HTC One V] -Duir-:
The first one looks like it's saying an error would be generated if SuperCID existed, the second is what your phone says during startup when the bootloader is unlocked.
[HTC One V] simonsickle:
Well the first means #facepalm is indeed in our hboot. Yay! Lol. The second means that I found the call to that line if its unlocked. Therefore I think I can remove it. I also found that hboot started from qcom code, and, it is in the aosp repo (old version of course) from g2/1 days. On a second note, I do have all the asm for the hboot in hexrays. I have to start deciding it tonight. Have to go through radio too
[HTC One V] jaredl45600:
"if i only knew what you are talking about" you guys are great!! thanks for all your support!
[HTC One V] beaups:
You can't "remove" anything from hboot unless you are already s-off. It is signature checked at every boot, so even if you managed to find a way to write it, hboot wouldn't even be loaded and you'd only succeed in bricking.
[HTC One V] simonsickle:
I know. Its write protected anyways. But once we get cid changed, it won't be hard at all to remove the annoying popup at boot
[HTC One V] Tehwafflez:
Can we customize it if we wanted? Great finds man i really appreciate all the work you and everyone else has put into this project

Sent from my HTC One V+ (Because the X+ isn't as bamf as my V+)

If I helped you don't say thanks, click it!!
[HTC One V] simonsickle:
When we get soff (or a little project I'm working on now manages to allow cid changes) I'll be trying to get uboot for us. What I've seen is the code hboot uses is mostly uboot
[HTC One V] #define:
Whats the progress with the exploit simon?? Any luck with that??

Sent from my Nexus 7
[HTC One V] whoshotjr2006:
All good things come in time. Simon is a busy guy, and I'm sure when he knows more we will too.
[HTC One V] simonsickle:
Not far. The one we've been talking about would probably take a really long time.

Don't worry, I've been talking to him concerning an idea
[HTC One V] #define:
Try that dual-chainloading thing i mentioned..

Sent from my Nexus 7
[HTC One V] sohamssd:
OK, since you guys are so active in trying to achieve s-off i think you may already have read this, but still chances may be that you haven't.

This guy from the One S forums tried the method used to get SuperCid for the One x, and it worked perfectly for him (maybe because both the phones One x and One S store the CID in mmcblk0p4, but since someone mentioned here that ours is located in the mmcblk0p7, it may be a little bit different for us (can anyone give it a try by changing the names and trying the method :p))

This is the post right here

http://xdaforums.com/showthread.php?t=1671643&highlight=supercid
[HTC One V] jmz:
It won't work as the s-off flag and cid is on the same partition which is write protected
[HTC One V] worldindo1:
I'm excited to see this finally become a reality. kalaker (and the other members of "Dream Team S-Off Supreme"), how has progress been on converting those primou files for our phone? Anything looking hopeful so far?

EDIT: I can guinea pig if needed on 1 condition: If my phone gets bricked, we can unbrick it. As of yet, it is unactivated and used as nothing more than a pretty, shiny, overclocked, Android-powered iPod. All I really have on it is games and music so there isn't much at risk for me (aside from a permanently broken device). If you think it's safe enough to test, I would be more than willing to lend a hand in guinea pigging. Email me at worldindo1@gmail.com if you need me to try anything.
[HTC One V] simonsickle:
We have testing down. I'm still working on it but right now I am running out of leads. If anyone finds a way to get into qhusb dload mode with software or reboot codes let me know. Also if anyone can change cid let me know. Once we get soff I'll take care of the boot loader mod to remove red text + I'll talk to a friend on eng commands. So guys, be our eyes and ears. If your good at searching or even firmware decompiling post what you know.

Also Cid is referenced through out the phone. an analysis is at http://simonsickle.com/cidanalysis.txt

The hex strings of p5 follows

http://simonsickle.com/p5strings
[HTC One V] sohamssd:
Vol up +power names the phone into qhsub-download mode, right? Or am I wrong?

Sent from my One V
[HTC One V] simonsickle:
Your wrong ;) it does nothing. Try it
[HTC One V] sohamssd:
I finally built up the courage to try it after 6 hours:p

No, it does nothing... the phone did not even reboot:)

Can you do something to write to write protected partitions? Anything? I guess after dumping it yo SD card and editing you can't push it back via adb?:(

Sent from my One V
[HTC One V] #define:
Nope... That wouldn't work...

I tried that on my Explorer...

Dumped the misc partition on to sd, adb pulled it, edited the cid to supercid, pushed it back, then erased and wrote new misc, and nothing...

And cherry on top, my misc partition is now blank... Filled with only zeroes and F's...

Good thing the phone still works...

Sent from my Nexus 7
[HTC One V] simonsickle:
Actually... If you found where a working offset for super cid was on this phone in misc we could write it. Misc is normally blank minus an FNOC
[HTC One V] 600914:
unlimited.io has a solution to get out of qhusb dload mode for the one v in the event their s-off tools cause it.

maybe you can use their s-off tool to get into it?

http://unlimited.io/qhsusbdload.htm
[HTC One V] simonsickle:
That is the gsm and super old one v. New ones can't get into that mode
[HTC One V] awidawad:
Removed as the mode it was in was not the download mode :(
[HTC One V] jcase:
0x200 in mmcblk0p7 is where the cid should be, not in misc
[HTC One V] simonsickle:
Lsusb in Linux will show the Gobi pop up
[HTC One V] sohamssd:
Just a question in here, what foes fastboot oem boot command do? Is the write protection removed after this(temporarily)?

Sent from my One V
[HTC One V] beaups:
That command just boots your device.
[HTC One V] 600914:
would these commands work for the one v?

fastboot oem writesecureflag 0

fastboot oem writecid 11111111
[HTC One V] beaups:
Yes, of course.

As long as you are s-off that is.
[HTC One V] 600914:
yeah did a little more research and found that without s-off or smart_io.crd the commands are useless.
[HTC One V] awidawad:
Okay just a simple idea: If the RUU.exe can update the radios it gets full write access... right? What if we could exploit the way it gets the phone to the mode it uses to write the images to change our CID to get S-Off? I was just thinking about it as I was updating my One V back to stock...
[HTC One V] kalaker:
Nope. One of two things happens when you use an RUU (and I don't remember which)

1. The bootloader checks the signature of the rom.zip file that is pushed by the RUU.

You can totally bypass an RUU by executing

fastboot oem rebootRUU
fastboot flash zip rom.zip

in fastboot. The RUU pretty much just runs those commands and displays an interface on your desktop.

2. The RUU checks the signature of the rom.zip file, then pushes each *.img, *.nbh, and *.nb0 separately.

The second would be easier to exploit, but still difficult. Also, an RUU isn't really the way to change your CID.
[HTC One V] awidawad:
Ah okay. Darn :P
[HTC One V] fkamcio:
How to s-off for primou?
[HTC One V] awidawad:
Off topic man....
[HTC One V] kalaker:
No.
[HTC One V] XxBriernxX:
is there not a way to mauelly pull the rom.zip file from the ruu...i know you get the recovery from the rom when unbricking the phone...has anyone tried getting it that way?

----edit----

i just pulled all the files that the ruu puts in the %temp% folder. if you would like them (if they'll be of any help that is) send me a pm and i'll email them. i'm having issues getting them loaded on here. i also have the ruu logs if that'll help to o.O i hope this will help i would really like s-off :D
[HTC One V] simonsickle:
The RUU won't get you anywhere I already tried them. I also have tried the ota. Also an easier way to extract is with unruu it outputs a nice shiny rom.zip you can then use ruuveal if needed
[HTC One V] kalaker:
I have a rom.zip for the primoc. Thanks, though. It won't get us to S-OFF. The best it's good for is going back to stock.
[HTC One V] XxBriernxX:
How about the ruu logs I can't make sense out of it but it could help with finding a point to which we could get what is needed
[HTC One V] kalaker:
I have gotten a thousand PMs from users and I am tired of people asking for the files we were talking about in the past. Since people are obviously incapable of reading, I am going to say this one more time:

THE FILES DO NOT GIVE S-OFF

Also if you're going to PM me sound like you're willing to provide useful information instead of sounding like you're gonna S-OFF and run (which you can't; these don't S-OFF).
[HTC One V] awidawad:
I'm going to try to contact HTC about S-OFF. I have a good friend who has connections with people in HTC. Maybe just maybe we can squeeze something out of them. For one, this is MY phone that I PAID FOR and I should do WHATEVER I WANT with something that I PAID for. I hate companies like HTC and Apple that think they still own the phone after you buy it. Just saying...
[HTC One V] kalaker:
Good luck. Attempts have been made for other devices. Nothing ever comes out of talking to them.
[HTC One V] sohamssd:
Its impossible, HTC won't bypass the extremely strong security system which they erected just because one of their employees has a friend who wants it.

Anyways, good luck.
[HTC One V] Aashuk Mehta:
Even i have a friend at HTC its of no use all this info is always not available he said its top secret and against company policy:thumbdown:
[HTC One V] kibitz:
its work? :D
[HTC One V] kalaker:
If you're not kidding, learn to read. THIS DOES NOT WORK.
[HTC One V] worldindo1:
Well we could always hack an HTC repair shop's computer and grab the files we need xD Just kidding. Though hell, sounds like a half decent idea but I know nobody is willing to go black hat for the sake of S-OFF.
[HTC One V] high662:
Great news

HELLO GUYS ! i mangaged to get this file..its the one we been looking for.....i think i will attatch it here!! i also attached another file i dont know what its for??

I THINK WE HAVE STRUCK GOLD!!!

Diagnostic Program for ASP or S58i
[HTC One V] sohamssd:
Did anyone test this? Is it working??
[HTC One V] russellvone:
Where's the file
[HTC One V] sohamssd:
I don't know why the op removed this, but for seeing such a thing might happen i downloaded them, if anyone wants and the op doesn't want to reupload them ill give it to whoever wants.
[HTC One V] high662:
Managed to get these to two file from a polish site..
[HTC One V] high662:
I tried booting them from hboot and i get this MESSAGE "[1] mfg_diag security failed"
[HTC One V] sohamssd:
If I'm not wrong you need a PK7DIAG.ZIP along with PK7DIAG.NBH too...
[HTC One V] Seraz007:
well the nbh is in the rar
[HTC One V] sohamssd:
That's what i said there's no zip but i maybe be wrong and is this for cdma/gsm both
[HTC One V] Seraz007:
maybe only for cdma :confused:
[HTC One V] high662:
i put it in the RAR cause the site wont let me upload NBH files
[HTC One V] kalaker:
Those files are for GSM. If you flash them, it will fail on "Device Check" and give you a "Security Error!"

I did test them. Those are the files we had long ago. I never removed any files. I just never shared many of them because most of them don't work. What we need is someone to "translate" the files to CDMA.
[HTC One V] kalaker:
1. It's PK7

6

DIAG.zip/nbh

2. You're only kinda wrong. You do need both, but not just any PK76DIAG.zip. You need the .zip contents to be only the .nbh and the zip must be signed by HTC. It's intense.
[HTC One V] sohamssd:
That's what it is:(

Any progress with converting? Have you asked anyone?
[HTC One V] Aashuk Mehta:
If they are for gsm then are they any use to primo u users?
[HTC One V] mr_nooby:
We would still need the zip to be signed by HTC, I made some research but it couldn't find anything on how to do that. Some people tried but couldn't do anything
[HTC One V] kalaker:
Yes. Intense.

No. No progress. Yes, I have asked for help. You wanna help? Here's how it goes:

Find every reference to primou and change it to primoc (including things such as "prou" and "PK7610000")

Change anything with partition locations to match primoc

Re-sign with official HTC key that the bl will accept

This was SARCASM. Unless you have the actual HTC signatures and such, your help is not needed.

Not really. You guys still would have to have a special SIM card in your SIM card slot. Lloir did some testing for me.

Very true. Work is still being done. No progress. Now that facepalm has been released, our chances of getting people on board for an intense, deep, hard-core search aren't very likely. People want to S-OFF things fast & easy now.
[HTC One V] beaups:
I actually regret "fast and easy" was the only way to release facepalm. It's just the nature of the exploit.
[HTC One V] junshong:
Please attach it, it will be useful for the devs.
[HTC One V] jaredl45600:
stupid question. may not even go here. but I was reading up on htc dumlock and flashing kernel from flashable zip from the htc one site. I do not know much about it. has anyone ever tried the dumlock on the one v for flashing kernel onboard?
[HTC One V] high662:
read back a page or two...and youll find it
[HTC One V] udhayababu:
Primou GSM

Can primo u GSM have s-off?

because all post are about primoc but is it possible for primou?:D
[HTC One V] Seraz007:
Its not that easy :p;):)
[HTC One V] junshong:
So it have a little possiblity of s off? :o

Sent from my HTC One V using Xparent Purple Tapatalk 2
[HTC One V] lars1216:
So far you have none.
[HTC One V] Seraz007:
possibility = maybe

probability = 0
[HTC One V] junshong:
Is there any development?
[HTC One V] whoshotjr2006:
Doesn't look like it. Were pretty lucky to have what we have right now.
[HTC One V] insink71:
joining

So.. No promises, but I'm gonna join this little square dance for a month or two. ;)

Rob

---------- Post added at 02:25 AM ---------- Previous post was at 01:52 AM ----------

Yes, but different method as the one started with/originally proposed. I will try to make a S-OFF solution by doing the following:

1) S-OFF my device via Riff Box (hopefully). Ref: http://forum.legija.net/showthread.php/68907-RIFF-HTC-via-USB-cable-support-Important-information-!

2) Attempt to Reverse engineer said solution on QPST/QXDM (proprietary software)

3) Attempt to write a perl script that accomplishes same as #2; which, would provide for a fully open source solution. Ref: http://xdaforums.com/showthread.php?t=2086142

Why? Because its the only proven method. Yes, it will require some drastic steps [including partially disassembling your device to short the emmc with test point], but if you wanna play, you gotta pay.

That is all. May take me a bit.

Regards,

Rob
[HTC One V] kalaker:
I just want to let everyone know that @insink71 is a wiz at this stuff. He most of the reason that the HTC Wildfire S (marvelc) got S-OFF'd and he used a fairly similar method. As a team, @insink71, @simonsimons34, and I are all working together and sharing information and trying different things to get this device S-OFF'd.

Let me reiterate a few things:

No promises. At all. We're trying, we're doing our best, we have faith, but we can't be sure that will be enough.

If you truly know what you're doing, we'd love your help. There's a lot of bootloader-level stuff as well as possible JTAGing.

At this time, we do not need any testers. There is nothing to test at this time.

Feel free to ask us questions like "How?" "Why?" "Where?" and "What?" but do NOT ask us a "When?"!

In addition to here, some updates will be posted on our blog.
[HTC One V] sohamssd:
Wow this is really interesting:):thumbup:
[HTC One V] 123386761:
If anyone still needs an HTC One V CDMA for testing, I'm good to go. I don't use it as a phone, just like an iPod. I have TeamViewer, so remote controlling my PC is possible. Of course, only those people who I can trust, like the devs, can control my PC ;)
[HTC One V] 123386761:
You know how it does a signature check? Isn't there an exploit where as long as the signature is valid [by editing hex codes I guess?], that the rest of the code would be accepted. As in, get the signature, replace the code with edited ones [to allow S-Off], then try to run the RUU? Or is the signature generated as it's being sent to the phone?
[HTC One V] kalaker:
[MENTION=4973732]simonsimons34[/MENTION] probably could answer that a little better than I can. My understanding isn't technical enough to answer question about it.
[HTC One V] 123386761:
yeah okay, thanks!
[HTC One V] simonsickle:
The signature is an algorithm of random data. To match the signature you have to match that. Without their key that means doing the same thing the NSA does with your "secure" web browsing
[HTC One V] Gorep1xel:
"Secure browsing", doesn't sound naughty at all!, in all seriousness, I have a question. What benefits would we get if we get the device to S-OFF?
[HTC One V] simonsickle:
Kernel from recovery is my favorite part.
[HTC One V] Gorep1xel:
Awesome! no need to flash! Since you responded so quickly, what is the current status? Are ya'll converting some previously mentioned files to primoc? Or you still need HTC's signature?
[HTC One V] simonsickle:
We would need HTCs signature for that method
[HTC One V] Gorep1xel:
Dammit HTC! why did you have to make this phone so hard to S-OFF! I'm still waiting for the day I can remove the red text in the bootscreen.
[HTC One V] 123386761:
So is it like the equivalent of an MD5 sum / SHA checksum? Or at least the same concept?

Thx for replying simonsimons34! (Love your work :D )
[HTC One V] 123386761:
Haha, HTC sent an email out, with this guy's email address saying "if there's anything we can do better to support you, please feel free to email me at *insert email I won't say here*". For sh*ts and giggles, I emailed him:

Hi, I heard you say to let you know if there's anything we can do better to support you, we can contact you. Can you S-Off my device?

If not, it was worth a shot :)

He replied:

Thanks for taking the time to send this to me. But let me ask an embarrassing question…what is "S-Off my device"?

Hehe, thought I'd try :)
[HTC One V] beaups:
Hmm. You guys still don't have soff?
[HTC One V] MameTozhio:
nope, neither GSM or CDMA do.
[HTC One V] 123386761:
Is kalaker even working on the project anymore? or simonsimons34? Haven't heard any updates in a long time.
[HTC One V] MameTozhio:
I don't think so.
[HTC One V] beaups:
We will do it.
[HTC One V] MameTozhio:
For both GSM and CDMA? o.o
[HTC One V] russellvone:
Wow!

!#quote my post if you want to get my attention more quickly
[HTC One V] 123386761:
No for CDMA... thhis entire discussion has been for CDMA. Unless they find a universal hack, of course:p
[HTC One V] beaups:
We will do both.
[HTC One V] 123386761:
Thanks!
[AT&T Samsung Galaxy S II SGH-I777] mess18:
Does anyone of developers work on incorporating this feature into 4.1.2 or 4.2?

http://www.dailymobile.net/2012/12/07/samsung-galaxy-sii-multi-window-mode-app-arrives/
[AT&T Samsung Galaxy S II SGH-I777] Eternalty:
Um. Shostock3. K thx
[AT&T Samsung Galaxy S II SGH-I777] luarajakson:
As awesome as that is, the combination of a small screen (relatively) and a low resolution make this a bit unusable. Still, doesn't hurt having an awesome feature as true multitasking.
[AT&T Samsung Galaxy S II SGH-I777] j510:
Its not bad for me since it is adjustable. Plus you can play a song on youtube and browse on internet or whatever you do
[AT&T Samsung Galaxy S II SGH-I777] Avatarg:
You can do it with Shostock3 and it can be disabled/enabled from notification toggles.
[AT&T Samsung Galaxy S II SGH-I777] raduque:
Yeah, I can't figure out the appeal of this feature on such a low resolution device.
[XPERIA X10 Themes and Apps] Superman:
Installation:

1.Download

2.Flash it in CWM

CM Transparent Trebuchet Drawer

Restore to NO Transparent

Restore NT

Screenshot:

Credits to

@wesamothman

Superman™
[XPERIA X10 Themes and Apps] harviak:
Transparent Trechuchet drawer works. no problems, works like a charm. ;) see screenshot
[XPERIA X10 Themes and Apps] mijakhany:
Great, I like it. : Good:
[XPERIA X10 Themes and Apps] Ganesh A:
How did you do it?

Can u tell me the files you edited???
[XPERIA X10 Themes and Apps] Superman:
Edited it in system/app/Trebuchet.apk

Superman™
[XPERIA X10 Themes and Apps] Ganesh A:
I of course know it ¥¥¥¥

tell me the lines in decompiled app
[XPERIA X10 Themes and Apps] Superman:
SOrry i cant. The person who figure out is not allowed. WAit the guide.

Superman™
[XPERIA X10 Themes and Apps] Vraj.vup:
WILL IT WORK ON CM10.1 LATEST BUIL:confused:D?
[XPERIA X10 Themes and Apps] Superman:
Take nandroid backup and try it

Superman™
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] Brannon92:
Anyone got NFC screen off mod to work on the I747?
[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] metaldood:
Would like to know as well.
[T-Mobile, Samsung Galaxy SIII] osmosizzz:
I have been having issues with flash. No matter what I do, it just doesn't work. No matter what version I use or browser. Is it my ROM? Freegs3 7.1.1

Sent from my Rooted Gameboy
[T-Mobile, Samsung Galaxy SIII] niteh@wk:
What browsers have you tried? Did you enable plugin or flash plugin in the browser's settings?

S-beamed from my GSIII via xda premium
[T-Mobile, Samsung Galaxy SIII] osmosizzz:
Yeah I've tried everything in my knowhow. I use boat browser. It's worked before. I also downloaded opera and nothing. Firefox and nothing

Sent from my Rooted Gameboy
[T-Mobile, Samsung Galaxy SIII] elesbb:
What happens when you open the flash settings-? (Tap the flash icon in the app drawer.)
[T-Mobile, Samsung Galaxy SIII] shahkam:
If you have just installed the app just reboot and it will work..
[T-Mobile, Samsung Galaxy SIII] osmosizzz:
When I open the flash settings, the browser opens but then the screen just remains gray. I have opened the settings before and there is usually 2 options on screen. Those 2 options are not coming up. Just gray screen

Sent from my Rooted Gameboy
[T-Mobile, Samsung Galaxy SIII] osmosizzz:
One of the first things I tried. Doesn't work. Have installed the latest version and even previous versions and flash just doesn't work. I even moved the app and made it a system app and added more permissions. Went to recovery and wiped dalvik and cache and fixed permissions and nothing. I'm starting to think that it is the Rom

Sent from my Rooted Gameboy
[T-Mobile, Samsung Galaxy SIII] LoGiK915:
I'm having the same issue. Doesn't matter which version of flash I use or which browser. Using dolphin I can switch to iphone (I hate even using that word) user agent and get some Flash videos to play, but not all. Also doesn't matter how i install or whether or not i change permissions. Running Domination now but I don't think its the Rom since no-one else reported it as n issue.
[T-Mobile, Samsung Galaxy SIII] osmosizzz:
I made a nandroid and I'm going to flash another ROM to see what's up. Sucks because I have ask my mods and stuff on this ROM

Sent from my Rooted Gameboy
[T-Mobile, Samsung Galaxy SIII] LoGiK915:
Lemme know what u come up with. I'm gonna try some stuff on my end too.