yashsingh1/xdaforums huggingface dataset:
[HTC One X] behtash:
hi

yes now not support s-off tagra3 with micro box but in way

other snapdragon full support

http://forum.gsmhosting.com/vbb/f47...0-2-added-change-security-flag-s-off-1765154/
[HTC One X] keikun007:
what about firewater?

http://firewater-soff.com/
[HTC One X] TouchscreenLover1:
That's what I read either. Should work

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] chrispy_212:
I am really tempted to try firewater... has anyone attempted it yet?
[HTC One X] TouchscreenLover1:
I want to but am a Bit afraid

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] chrispy_212:
Yeah, the lack of documentation means I we have no idea what the binary actually does and whether that could cause permanent damage!
[HTC One X] Sonick87:
firewater

No list of supported devices.. Download is a file with no extension.. I just got a fresh new hox from warranty.. I won't be the lab rat.
[HTC One X] chrispy_212:
It has no extension because it's a binary. But yeah, I'm toying with the idea of trying it. I'm unlocked, and could do with some warranty repairs... if this will let me S-off and get my phone locked, flashed to stock and repaired, I'd be SO happy!
[HTC One X] scotty1223:
Try it. The tools beaups and fuses build usually do device and board check.

If the partition layout and security flag locations are wrong, the binary will just not run. No harm done.

I would try it if I had an s on HOX at my disposal :D

You can also jump on IRC and verified that what I just said is true.
[HTC One X] donkyshot:
This is looking very, very promising. Let's hope for a brave successful test :)
[HTC One X] DeeZZ_NuuZZ:
this thread is old and we will never get s-off with paying for it ;)
[HTC One X] TouchscreenLover1:
Have you read the new info's?:D The new tool says, that it should work with nearly all phones, so T3 One X should work too

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] Killer1desireZ:
tegra 3 is not supported

[23:28] == Killer1 [5ee272ce@gateway/web/freenode/ip.94.226.114.206] has joined #firewater

[23:28] <Killer1> hello

[23:29] <Killer1> Anyone can help me on how to use firewater?

[23:29] <@beaups> what problem are you having

[23:29] <Killer1> it's asking me what i am doing here :)

[23:30] <@beaups> what device?

[23:30] <Killer1> I think i did everything right...

[23:30] <Killer1> one X (tegra3)

[23:32] <@beaups> not supported, this is qcom only

[23:32] <@beaups> I need to update that page, somehow that got deleted

[23:32] <Killer1> aw bummer :(

[23:32] == Flozzo [~Flozzo@125-238-95-23.jetstream.xtra.co.nz] has joined #firewater

[23:32] == Flozzo [~Flozzo@125-238-95-23.jetstream.xtra.co.nz] has quit [Changing host]

[23:32] == Flozzo [~Flozzo@unaffiliated/flozzo] has joined #firewater

[23:32] <Killer1> ok thank you for the information
[HTC One X] TouchscreenLover1:
Oh noo

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] Sonick87:
yeah.. good for us lucky owners of htc one x...
[HTC One X] keikun007:
https://www.youtube.com/watch?feature=player_detailpage&v=iYWzMvlj2RQ
[HTC One X] DeeZZ_NuuZZ:
I tried it myself the firewater isn't doing anything to the phone...the tegra3 is secured by the diag files and HTC special java card...without it it won't work....

Gesendet von meinem HTC One X mit Tapatalk

---------- Post added at 02:37 AM ---------- Previous post was at 02:35 AM ----------

So next time just don't buy a tegra phone :) hope the next HTC one wont be polycarbonat like hox and hox+ :D

Gesendet von meinem HTC One X mit Tapatalk
[HTC One X] myheroduane:
Says Qualcomm devices...
[HTC One X] behtash:
i try supper cid with emmc tools+jtag manager but after super cid 11111111 i cant load orginal diag with otg cable after load mfg diag proces show error insert sd smart

need java card for bypass this error only
[HTC One X] scotty1223:
if you were able to change the cid using jtag,why were you not able to just write the radio flag to 00?

where are the radio flag and cid located with tegra3?
[HTC One X] behtash:
this phone hox jtag disable and u must work on emmc nvidia chip

Write EMMC_00200000_BIF_11111111_xxxxxxxxxxxxxx.BIN in BIF partition cid &imei change edit with hexditor

but radio, modem cant find on partion
[HTC One X] scotty1223:
now that you are supercid,what happens if you try and flash a signed package in ruu mode? this is the way "facepalm" works... qualcom processors give you a supercid error,and if you then fastboot oem boot you do so without write protections

for reference: http://xdaforums.com/showthread.php?t=2155071

obviously soffbin3.zip or the firmware zip wont work,but maybe tegra 3 will give a similar reaction to encountering supercid?
[HTC One X] kantry123:
https://www.youtube.com/watch?v=JJuUe0Pqr7I

has anybody seen this video

this guy actually did s-off and supercid toooo

any ideas how did he do with just a usb and he cleaned some s58 data

don't know how he did

regards

kantry123
[HTC One X] Thant:
eah talk with them on irc http://chat.andirc.net:8080/?channels=facepalm and see what instruction they will give you it is progress that you gain Super CID

[MENTION=2717972]behtash[/MENTION] now what you see in your bootloader your CID is 11111111 are you tried the method on facepalm. Try run firmware.zip for HOX and after this see what will happend

---------- Post added at 07:37 PM ---------- Previous post was at 07:23 PM ----------

This is with java card the sell this java card but too expensive for only one HOX I asked him can he make card with 20 credit and he say not posible
[HTC One X] rodriciru:
hi.

I buy a HOX from england to fix my other HOX.

The thing is this phone is locked by three carrier, which dont exist in spain.So i want Super CID to change the rom.

The thing is whitout S-OFF is inposible so i ask htc directly, whitout result, saying me that dont offer suport for S-OFF.

i read a lot of things for this phone,but ¿works somthig for S-OFF the device or still nothig?

Thanks and good luck whit the main goal!!!

EDIT: with apx can we s-off??
[HTC One X] Thant:
no and never will have S-OFF for HOX. Only in some service center thay can S-Off the phone
[HTC One X] rodriciru:
Really bad news :(
[HTC One X] sieempi:
Actually s-off is possible via apx, but there's a catch. The only known way to enter apx is by opening the phone and performing a dangerous thing (bypassing the emmc while booting). This is not viable for most users, we still need a software solution..
[HTC One X] Thant:
Try THIS if you want to go in apx mode, the guys from the forum from where I take the archive say it work to go in apx for HOX. It's software for go in apx. And really I dont know how you think will achive S-OFF from apx mode? With nvflash you will flash lower hboot but you will not S-OFF the HOX. I see many picture on HOX resurected from apx but all of them S-ON you need clan S-OFF hboot to put on HOX from APX maybe but no one found clean S-OFF hboot.

If you have any good idea please say!
[HTC One X] rodriciru:
I found a way to s-off if you put your phone whit superCID, but i dont have superCID.

I try to change my cid (h3g_001) to superCID (11111111) by change mmcblk0p19 and mmcblk0p13, but despite it accepts the changes even after a reboot, bootloader shows h3g_001 CID :(
[HTC One X] scotty1223:
if youre refering to facepalm,it does not work on hox,only hoxl. terga 3 is a completely different animal

---------- Post added at 03:23 PM ---------- Previous post was at 03:13 PM ----------

changing cid is not needed to change rom

changing rom is not needed to sim-unlock

if im understanding correctly, you just need to purchase an unlock code from ebay or a reputable phone shop. after that if youd like to change roms,you can do so by unlocking the bootloader via htcdev.

---------- Post added at 03:27 PM ---------- Previous post was at 03:23 PM ----------

in apx mode,you would just need to rewrite the partition that houses the secure flag with one that has the flag turned off. unfortunately,ive no idea where the flag lives.

id love to see a tegra 3 solution,but there is just not the interest from those that are talented enuff to find it,and even at that it may not exist. the current solution for modern qualcom devices is using a processor based exploit that wont work.

anyone interested in this should take the tome to read back thru the thread,most if not all feasible options have been discussed
[HTC One X] rodriciru:
Yes but i want htc ROM. Actualy i have cyanogen rom and i dont change the cid
[HTC One X] scotty1223:
I'm not sure what you're asking, or saying. If you want a different ROM, all you have to do is flash it
[HTC One X] rodriciru:
nothing. Forget it

I ask HTC for an S-OFF method, but the answer me than they dident offer suport for soff method and i can read in online forums, ask informatics or especial developers, oh yeah
[HTC One X] scotty1223:
While they do not offer a solution for s off, they do offer 1 to unlock the bootloader which will allow you install a custom recovery and flash different roms. Go to htcdev..com

Sent from my HTC One max
[HTC One X] rodriciru:
[MENTION=2794693]sieempi[/MENTION] how can s-off if i enter apxmode??
[HTC One X] scotty1223:
as i said above:
[HTC One X] DeeZZ_NuuZZ:
Are you really that ignorant? There is no way except of a few repair centers that do that...either you try that way or you just make sure your phone is still unlocked with a custom recovery and just flash a Rom and its boot.img via fastboot...man really keep reading instead rushing all sh1t...

Even if you entered apx mode you can't s-off because there is no script or so to do that!!!!!

Gesendet von meinem HTC One mit Tapatalk
[HTC One X] BreakaH_Lndp:
really it is not needed s-off.

all for fastboot :D
[HTC One X] Douglas Longfellow:
Fasrboot
[HTC One X] galaxys2Tav:
Is it this what should be activated?

Smashed with my rock one x from the stone ages
[HTC One X] backfromthestorm:
*#*#4636#*#*
[HTC One X] backXslash:
Close, but no. QXDM will issue commands directly to the modem / radio chipset / what have you, and they're pretty much blindly obeyed, (so far as I know). That should allow you to change the CID or just straight up set S-OFF with the right command.

I've personally messed with QXDM and QSPT to repair and change low-level settings on an HTC Evo, to allow the phone to use the data connection on MetroPCS in the US. It does work. However, you have to put the radio / phone / chipset into "diagnostic" mode, where it enumerates as a service programming port, and can be seen by QXDM.

On the Evo, it's ##3424#, but that's a CDMA phone, not a GSM one. I have YET to see a GSM device where that works. But I do know the chipset does have an equivalent "diagnostic" mode. We've just gotta find the dialer code to turn it on.

---------- Post added at 01:52 AM ---------- Previous post was at 01:39 AM ----------

This may help: http://xdaforums.com/showpost.php?p=29461879&postcount=2

That, and the thread it's from are about getting the GSM SGSIII into a diag mode to work with it in QPST.

I'll try it in the morning.
[HTC One X] galaxys2Tav:
These are the code that people have found there is a lot more if you Google htc dialpad codes

http://xdaforums.com/showthread.php?t=1683634

Smashed with my rock one x from the stone ages
[HTC One X] nitrous²:
Checked that. If you use getvar all on both modes you see a differnce in bootmode. See the red marked lines;

If you use "adb reboot bootloader"

(bootloader) version: 0.5a
(bootloader) version-bootloader: 1.39.0000
(bootloader) version-baseband: 5.1204.162.29
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.14.401.31
(bootloader) serialno: SH26xxxxxxxx
(bootloader) imei: xxxxx60xx1xxxx0
(bootloader) product: endeavoru
(bootloader) platform: HBOOT-T30S
(bootloader) modelid: PJ4610000
(bootloader) cidnum: HTC__102
(bootloader) battery-status: good
(bootloader) battery-voltage: 4112mV
(bootloader) devpower: 100
(bootloader) partition-layout: None
(bootloader) security: on
(bootloader) build-mode: SHIP
[COLOR="Red"](bootloader) boot-mode: FASTBOOT[/COLOR]
(bootloader) commitno-bootloader: None
(bootloader) hbootpreupdate: 2
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.855s

If you use "adb reboot oem-34"

(bootloader) version: 0.5a
(bootloader) version-bootloader: 1.39.0000
(bootloader) version-baseband: 5.1204.162.29
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 3.14.401.31
(bootloader) serialno: SH26xxxxxxxx
(bootloader) imei: xxxxx60xx1xxxx0
(bootloader) product: endeavoru
(bootloader) platform: HBOOT-T30S
(bootloader) modelid: PJ4610000
(bootloader) cidnum: HTC__102
(bootloader) battery-status: good
(bootloader) battery-voltage: 4004mV
(bootloader) devpower: 100
(bootloader) partition-layout: None
(bootloader) security: on
(bootloader) build-mode: SHIP
[COLOR="red"](bootloader) boot-mode: UNKNOWN[/COLOR]
(bootloader) commitno-bootloader: None
(bootloader) hbootpreupdate: 2
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.825s

Oh, and nice if you'd retweet this;

https://twitter.com/Xmoo/status/202386311577993216
[HTC One X] Thunder07:
mine says Thunder07....

i've established a while back, unintentionally that the radio is flashed through the OS & not firmware anymore

one note though.... since the radioversion is probably stored on the same partition as mainver,CID & s-off/on status,

should we be able to hack in through radioversion we'd be able to change all of them...

dont ask me how, im just saying an exploit through radioversion, like crashing the bootloader somehow.... and trust me i tried (with no luck), will be able to either get APX or edit those values, at some stage before update mainver 2.17, i changed my mainver to 1.29000 which freshly screwed me out of updates until 2.17 came out :/

i've even tried to set my mainver as 2147483648 to crash it... still no luck

Edit:

oh i should stat, later on i tried to lower mainver which isn't really possible it can only go higher... and if you go higher than the latest RUU version... you'll not be able to flash it or any lower RUU,

You could risk it and try setting your mainver as 99999999 and hopefully it has a safefail that will allow you to flash a lower main ver which i doubt..

the reason i concentrated on mainver is that all OTA/RUU use mainver as a reference,

also so hboot update xmoo/football released which i believe xmoo has confirmed to allow us to s-off are bound by a very low main ver 0.03 or something like that,

should we be able to get pass mainver check, we'd be able to flash those hboot, s-off, supercid and flash a newer hboot keeping those status

Kholk come to the assumption that both mainver & radiover are stored as string/characters instead of integers which makes since,

since im able to set radiover to Thunder07... this also makes it impossible to use integer 32bit max limit of 2147483647 to crash the bootloader
[HTC One X] mariusdroid:
i have the same exact as photo only s on

:good:

i have the same as foto if u like me to test something....execpt s off
[HTC One X] lenthele:
Well, some days ago I think I managed to crash the bootloader. My bootloader was still locked then and I tried the writesecurityflag 0 command. I got an error and the bootloader interface froze. Could do nothing else than reboot the device.

Gesendet von meinem iPad mit Tapatalk HD
[HTC One X] nitrous²:
I've tried also but I didn't entered APX mode
[HTC One X] lenthele:
I think it enters a recovery mode... :
[HTC One X] feraay:
OK sry but i dont belive that this file could do supercid

The question is are we able to change the file cid

Yes ? Then we can change cid maybee change mainvers flash eng hboot and ...

Gesendet von meinem HTC One X mit

someone know what this could be

Tapatalk 2
[HTC One X] XxVcVxX:
So about the adb reboot oem-34 thing, I don't think its only fastboot, since I can still charge my phone, yet I cannot flash any kinds of .img with a command error.

Might be partially booted OS?

Sent from my faster than SGS3 HOX.
[HTC One X] Thunder07:
Everyone the CID you're Getting is not the phones CID (Carrier ID) its the internal storage CID (Card ID, or something like that) which is a totally different thing,

however the goldcard method requires your Card ID and not the phone,

just aswell, don't go around attempting goldcard on your internal storage and say its not working, as the bootloader doesn't read from it,

you'll need a OTG cable with a card reader to make it work, whether it will or not i don't know,

however should it work... it will solve 2 problems, 1) it will mean we can flash another CID's OTA.... which will solve everyone's wait for the carrier to release the new hboot for JB,

i wanted to attempt this but never got arround to getting a OTG cable

2) should some find a hack that's only for a certain CID or superCID, e.g: leaked diag, this will allow it to work for everyone
[HTC One X] nitrous²:
I've tried the goldcard method with an external powered OTG cable. Doesn't work :(
[HTC One X] Thunder07:
what have you tried exactly,

i recommand you test a normal diag file to make sure its working,

then apply goldcard and apply the same diag file...

if that works, look for a firmware.zip of another CID and try to flash that,

needless to say the diag/firmware has be be called PJ46IMG.zip/PJ46DIAG.zip

the result should look something like that

http://xdaforums.com/attachment.php?attachmentid=1194393
[HTC One X] nitrous²:
Well at first I tried to load the diags I have and attached on the 2nd post with a standard sdcard. Didn't worked= security check fail. Then I made a goldcard out of the sdcard and tried to load the diag, with the same result. Though, it's possible that I did something wrong because the otg cable and sdcard reader are built by me.
[HTC One X] feraay:
Maybee stupid but can u try flash eng hboot i unterstand xooms post as eng hboot is not cid variabel

But if u are not able To flash PJ46xxx.ZIP u cant flash the hboot right ? :(

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] nitrous²:
Read this; http://xdaforums.com/showthread.php?t=. After that we can talk again :D veeery risky mate!
[HTC One X] feraay:
Da fehlt a piece

Correct link pls

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] Thunder07:
its not risky...

for one it would just fail, as your mianver is higher of that of the zip

2nd alienfreak was just unlucky, xmoo tried it after him and it worked just fine,

the only thing though, is that you wont be able to boot any rom when you're in that hboot... but why would you,

just s-off and update to a newer hboot.
[HTC One X] nitrous²:
Ok, this is strange. The link doesn't copy correctly. You know what, go to the second post and you'll see a part where Xmoo sais "had the chance to play with a blalalala". At the end of the sentence there's a link. If you use Chrome on pc open the second post >f3 > and type "had the chance" and you should find the link.
[HTC One X] feraay:
Thx sounds good

Ok you are not able Tod Boot but as you say you can install newer hboot for your cid er change cid i dont know

U have a s off device than you can do all i think ^^

Gesendet von meinem HTC One X mit Tapatalk 2

---------- Post added at 10:17 PM ---------- Previous post was at 10:13 PM ----------

tomorrow morning I'm going to buy into a market and electro me a otg cable and the sandisk card reader

I try it FU.. s - off

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] nitrous²:
You need an external powered otg cable. A standard otg cable won't work.
[HTC One X] feraay:
Sure ?

He did it with a normal otg cabel

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] Thunder07:
It really depends on the sdcard reader

Sent from my HTC One X
[HTC One X] feraay:
I will get the same sandisk micromate think it will work ? Or i need a y USB to flash diag file for cid ?

The say u need it for goldcard flash i buy a micro USB y cabel and the sandisk card reader that must work

Gesendet von meinem HTC One X mit Tapatalk 2
[HTC One X] nitrous²:
Ok, it has to be an OTG Cable in any case! A standard Micro USB Y cable won't work. Now it depends on the sdcard reader if it has to be external powered or not. If it doesn't work, you can build your own powered OTG cable. I'll find the xda link and post it. It's really easy! :D
[HTC One X] tessut:
On jb there is no need of an otg cable with external power
[HTC One X] cjoliver:
Hi guys,

I'm just spit-balling here, but have anybody thought about getting in contact with NVidia. This is there chip-set, surely they have a way to boot it of another form of storage or another way to get it into APX or whatever mode they use to test the hardware.
[HTC One X] nitrous²:
In bootloader moder YOU NEED an external powered one! The OS version and hboot version doesn't matter! Yes, if you're in the OS there's no need for additional power but this is not what we're talking about.
[HTC One X] Thunder07:
People, this is a discussion thread and not a support thread...

someone attempting something doesn't need your good lucks & +1..

by doing that you're just making each useful information posted by someone threadS apart,

thanks.

i've answered that back a page or 2 ago...
[HTC One X] Thunder07:
this is the way RUU.exe works, as the exe is not more than GUI for adb & fastboot

normal RUU flashing requirement apply... locked bootloader

star, be more specific,

did you try flashing your own rom.zip, that of a different CID or flashing a DIAG.zip

with or without goldcard... and so forth...

plus did you have a control, where you attempted a scenario that works before going for one that doesn't??
[HTC One X] feraay:
Yes sure but they Are able to touch ebt partition Directly?

They Are able to Backup unlock token and factory settings

You should also back-up your unlock token and your device’s factory generated configuration by using the following two commands:-

$ nvflash --resume --read 14 factory-config.img

$ nvflash --resume --read 7 unlock-token.img

Gesendet von meinem GT-P7100 mit Tapatalk 2
[HTC One X] xmoo:
Uploading the full 1.23.997.0 DEBUG ROM.

This one is locked to SuperCID and includes 0.31 MFG HBOOT.

Hope this ROM can help you guys.

Ps. Please don't share it with the big public because these DEBUG ROMs are very rare and easy to trace.

Link will be available till sunday night: down
[HTC One X] nitrous²:
What are the chances of bricking ıf I attempt to flash this rom through sdcard? Will it even be flashable?
[HTC One X] pandaball:
I suppose we could pull hboot.img off the zip and look at it in its raw assembled form. Someone with reverse engineering experience (like Ralekdev who reverse engineered the Verizon SGS3 bootloader) could then find an exploit to get around or disable s-on/s-off security by disassembling or decompiling the hboot.
[HTC One X] Thunder07:
if it was that easy someone would have done it.... ages ago..

as all RUUs OTAs contained a hboot image :/

but if you're in touch with him, it wouldn't make things worst if we have someone experience is that field to help.
[HTC One X] Thunder07:
FINALLY SOME DEVELOPMENT,

i found a user with the exact some case as this

http://xdaforums.com/showthread.php?p=27487813#post27487813

i've personally installed the apx drives for him and ran nvflash to receive device unknown (not the error not found)...

anyone with experience contact me NOW and ill put you intouch with him
[HTC One X] xmoo:
HOX came shipped with 1.19 in asia.

It looks like the partitioning changes on every release or some get shown on TEST Roms which on Release Roms the partitions are hidden and renamed.
[HTC One X] xmoo:
I believe the issue here is that you need the APX driver to work with the HTC One X.

Like with the LG O2X, the APX drivers could not be used on other Tegra2 devices. So I think it's the same for HOX. Most Tegra3 APX drivers out is for the Asus Tablet.
[HTC One X] Vcek:
is there a "known" way of getting into any form of APX mode ? i've tried to brick my device in every possible way with no success (software-wise)
[HTC One X] xmoo:
My sources checked HTC server and couldnt find anything regarding APX mode.

When devices enter repair center with APX mode, they just reflash pcb.