yashsingh1/xdaforums huggingface dataset:
[One (M7) Original Android Development] designgears:
Why are people angry it doesn't work with hboot 1.54? All you have to do is grab the older RUU and downgrade.
[One (M7) Original Android Development] OllieD:
AFAIK Downgrading is not possible with S-On.
[One (M7) Original Android Development] runganwt:
Yeah, the "the grab the older RUU" is the angry part. It's hard to find the match Mid and Cid since you s-on. You can't get yourself SuperCID until you S-off....
[One (M7) Original Android Development] tiho5:
Downgrade will not be possible with S-On even if your CID matches. :)
[One (M7) Original Android Development] aramis73:
hi guys!

is it possible to downgrade hboot 1.54 to old 1.44 as they did at this link for the Evo 3D?

I think it was done with s-on!!!

http://htcevohacks.com/htc-evo-3d-hacks/how-to-downgrade-hboot-1-50-to-1-40-on-htc-evo-3d/

thanks!
[One (M7) Original Android Development] Theshawty:
Maybe, if someone coded something like "zergRush" for the m7.
[One (M7) Original Android Development] daleski75:
I think the amount of time and effort needed to get zergrush ported the dev would be better off devoting that time to finding a new exploit for hboot 1.54
[One (M7) Original Android Development] Theshawty:
Hopefully, there's still exploits to use to gain S-OFF, otherwise I'm in deep shizzle..
[One (M7) Original Android Development] horsetastic:
lol me too....

Just had a go at flashing a revone.zip that runs busybox then revone commands within but no luck....Didn't seem to do anything in-fact but this could be to do with the actual script....Might keep trying it though. If it's something to do with the su permissions being blocked rather than the revone being blocked as it where then I think there's more hope of getting past it somehow!

I wonder if there would be any way to drop revone and it's s-off commands in to a nandroid backup somehow....I dunno really just pondering....

Or could it be possible to edit a nandroid to include an unsecure boot.img maybe? moonshine it as it restores so to speak?
[One (M7) Original Android Development] Theshawty:
To do what? To gain S-OFF?
[One (M7) Original Android Development] horsetastic:
Either gain s-off or maybe even just to set up for s-off.....if an unsecure boot.img could be loaded with a backup it might be possible to hack it then?

Just thinking out loud more than anything lol, I don't actually have a clue if this could work or even be possible to be honest!
[One (M7) Original Android Development] Theshawty:
IIRC, the security flag ON/OFF is stored in the mmcblk0p3 partition, and I don't think it's easily overwritten as that would require S-OFF which we can't achieve. Quite a pickle.
[One (M7) Original Android Development] crushalot:
Boot.img is just the kernel. Nothing really there we are trying to hack. We need to hack the hboot bootloader to allow us to write a change to the mmcblk0p3 partition which is locked down with s-on.
[One (M7) Original Android Development] horsetastic:
Yes I thought as much....

Just wondered if it was possible to run something like revone on install....If that makes sense?
[One (M7) Original Android Development] Theshawty:
We could write to the bootloader if we had HTC's private signing keys but I'm guessing they're more locked away than fort Knox. :silly:

---------- Post added at 02:16 PM ---------- Previous post was at 02:15 PM ----------

Still not possible. That security flag prevents us from touching anything but the system, boot, recovery and modem. The hboot and it's belonging partitions are a no-go.
[One (M7) Original Android Development] iElvis:
No adb.
[One (M7) Original Android Development] pauley:
See this thread, post #2...
[One (M7) Original Android Development] Matt:
Thanks guys, got S-OFF (locked/not tampered) on my HTC_001 international device. Worked first time.

Definately wouldn't recommend this to the unexperienced simply due to the risks incurred, like flashing a corrupt HBOOT as previously mentioned.
[One (M7) Original Android Development] gunnyman:
I just did ./revone -l the -s 1 flag is already set that's S-off
[One (M7) Original Android Development] emanon:
Thanks for the workz. It worked the first time on tmobile one. I'm finally s-offed and super cid.:good:

\Regatrds
[One (M7) Original Android Development] jureca:
With S-OFF and Super-Cid, if one RUU flash removes the S-OFF?, Thanks
[One (M7) Original Android Development] gunnyman:
Don't do that

the Dev RUU has no CDMA radio

just don't.
[One (M7) Original Android Development] YoungAceAtlanta:
Thanks for the more detail steps.. worked like a charm
[One (M7) Original Android Development] Android The Greek:
i keep getting error code 1 :(
[One (M7) Original Android Development] Riyal:
Write a corrupt HBoot -> boot up to Android OS -> do a "dd" correct hboot back to hboot partition -> fixed hboot.

I'd say do this instead for a complete brick.

S-Off-> boot to recovery -> fdisk mmcblk0 -> delete all partitions -> reboot :D
[One (M7) Original Android Development] pauley:
No, s-off stays
[One (M7) Original Android Development] Theshawty:
Well, I want to lock the b/l AND have S-ON.
[One (M7) Original Android Development] gunnyman:
look at post 2 on this thread.
[One (M7) Original Android Development] YoungAceAtlanta:
So does this mean that my Att version HTC one can flash international ruus? Now that it is s-off
[One (M7) Original Android Development] Guich:
Read post #2...
[One (M7) Original Android Development] jureca:
Thanks,And to install rom, no matter who is blocked to unblocked.
[One (M7) Original Android Development] dronepro:
any idea why my phone won't make/receive calls? tells me to wipe my data...did.... no phone
[One (M7) Original Android Development] stevedebi:
The posts indicated root is not required.
[One (M7) Original Android Development] emanon:
I'm on tmobile usa and everything worked on first try. if your device is rooted then try to run the commands as superuser. type su and hit enter and then try ./revone -s 0 -u

\Regards
[One (M7) Original Android Development] CheesyNutz:
hows this have ANYTHING to do with this topic ?
[One (M7) Original Android Development] horsetastic:
ah nips....never mind. Wish I knew more about these things really so I could dabble more myself to be honest. Or even understand code to read it myself. It's all interesting but way over my head lol....Give me a boat to design and it's done, give me a phone to hack and it's more then likely doomed lol!
[One (M7) Original Android Development] zounduser:
U can gain super cid with root.

Im pretty sure. We had super cid on other devices without s-off. Just not 100% how it worked.
[One (M7) Original Android Development] jokrak:
Too bad I didn't follow this thread a couple of days ago. I am on Tmobile and purchased the gpe version, but because of lack of support for the 2100 frequency, I was having lousy reception and data speeds. I returned it and bought the tmobile version and the new units already come with the patch and don't accept revone or moonshine. I think I'll return it, pay the restocking fee and purchase the S4 gpe. Can't stand nonstock anymore. I tried giving sense a go, but honestly, I really can't stand it. I know I could root and flash a ROM, but it's not the same, considering kernel issues, etc., which can't be resolved without s-off. I really like the hardware, though. Unfortunately, I don't want to hang on to the phone relying on the possibility that this will be resolved soon.

Thanks for the devs, though. They work incredibly hard just for the love of it.
[One (M7) Original Android Development] horsetastic:
I don't think it's possible to get supercid without s-off on the 'one'.....You can't goldcard it like older phones either
[One (M7) Original Android Development] zounduser:
U may b right sir. I just know on other devices, we used super cid to gain unlocked bootloader. Without having s-off, hence the reason for unlocking the bootloader. :)
[One (M7) Original Android Development] Theshawty:
I'm pretty sure that wouldn't work with the One anyway.
[One (M7) Original Android Development] daleski75:
I think which ever way you slice and dice it we all need to wait for the revolutionary team to find a new exploit (if one exists) but at least we all have working phones so it's not a huge deal if we cannot gain s-off.
[One (M7) Original Android Development] Theshawty:
for me it kinda is right now. I need a way to unlock my bootloader WITHOUT touching HTCdev. But I'm certain there's a way to achieve S-OFF sooner or later though.
[One (M7) Original Android Development] ms30250:
help

Hello all. New to the One and I took the OTA radio update. I cannot get past "error = -6" to save my life when try to use revolutionary to s off. I have verified via get var that im on hboot 1.44 and FW 1.29 just cannot get s-off. Think i screwed myself with the radio OTA?
[One (M7) Original Android Development] mrrogers1:
Yes
[One (M7) Original Android Development] dmmarck:
I assume you mean the AT&T OTA, correct?
[One (M7) Original Android Development] drizzit03:
If you are on AT&T then you can downgrade your hboot version to 1.39 by following the s-off workaround. I was having the same error over and over and I used that method and then ran the revone s-off and it worked first try. I believe that work around is in the general section.
[One (M7) Original Android Development] dmmarck:
It is. Quite a lot of steps. Lol

Damn, I knew I should have done this stuff earlier.
[One (M7) Original Android Development] sathara:
HTC may be blocking. GE may decrease Sense users. Sense 5 is complex for a normal guy

for those who stuck on 1.54 hboot, dont look for S OFF , it will take time

this is what i did

unlocked with htcdev.com and flashed a 4.3 rom ..he he .. still i think custom GE ROM rules over official GE..
[One (M7) Original Android Development] Theshawty:
But that's the thing. I (and I think most others) don't want to unlock using HTCdev. I don't want them keeping a track record on me.
[One (M7) Original Android Development] sathara:
will HTC keep record of our unlocking ?? i might unlocked more than 30 devices (mine and friends) ..oh boy i better change my email...
[One (M7) Original Android Development] Theshawty:
I'm not sure but it seems logical that they would.
[One (M7) Original Android Development] Edubyah:
I'm 99.9999% sure it's the whole reason behind needing a unique per device token directly traceable to the ONLY phone it unlocks. I think if you can get out of using HTCDev your smarter for it.

Also has anyone tried with the new firmware 3.06 1.54 hboot? It's majorly different from the 2.24 1.54 hboot.I'm thinking we could upgrade to the 3.06 1.54hboot then "fastboot oem unlock" just like Nexus.
[One (M7) Original Android Development] evoshift617:
cant download devone

if i cant put devone on my phone is there any other way of getting s-off? im stuck in bootloader and pc wont read my device.
[One (M7) Original Android Development] beakybuzzard:
This process isn't done from the bootloader.
[One (M7) Original Android Development] suprano:
You can ran a RUU if you're able to get into fastboot mode..Mind you, it's gonna take you back to complete stock. If that's what you're looking to do, don't forget to relock device before running the RUU.
[One (M7) Original Android Development] leon sprouse:
I guarantee they have a record. They tell me they will honor warranty if you unlock and don't have a problem associated with what you did after this. Just unlocking does not void their warranty. For instance if you overclocked and have a fried CPU your warranty is void. But since this is not in writing and they keep a record of all the unlocked phones you are at their mercy if your phone stops working. I cannot think of any other reason for keeping a record of which phones are unlocked and have been "tampered" with other than warranty issues. Remember this saying "If you give someone a shotgun and a box of shells don't be shocked if they blow your head off."
[One (M7) Original Android Development] Tabtoub:
If you have S-off you can completely return to stock, even if you unlocked via htcdev, they can NOT know if you used the unlock_code.bin file, s-offed then returned to S-ON,

All I wanted to say, not every unlock_code.bin requested on htcdev.com automatically implies an unlocked phone, that's the good thing with s-off, when you need to use you warranty, you can completely return to stock even if you unlocked with htcdev, and just tell them that you haven't used the unlock_code, and even if they know you are lying, they can not prove it ;)
[One (M7) Original Android Development] Edubyah:
This is true but it's not always possible to relock the bootloader before returning, would they be able to tell if even if you couldn't get to bootloader?

EDIT: Has nobody used the new 3.06 GE update to unlock without HTCdev unlock token?
[One (M7) Original Android Development] zounduser:
Ya, i have. Fastboot oem unlock

---------- Post added at 08:33 PM ---------- Previous post was at 08:30 PM ----------

Im trying this on my HTC BUTTERFLY S right now. I keep getting error code 6. Before anyone says anything......i know this isnt out for this device yet, but im a bit of a risk taker, who wants s-off!!! :) any suggestions guys? Im boot unlocked, with TWRP, custom ROM, and rooted.
[One (M7) Original Android Development] Eye4Tech:
I keep getting error code = 1

I've been searching the forums but can't find anything relevant on it.

I'm already rooted and running Google Edition 4.3

any help?

---------- Post added at 12:59 PM ---------- Previous post was at 12:54 PM ----------

I see I have hboot version 1.54 :(
[One (M7) Original Android Development] Sneakyghost:
dd pull Partition 4, hex edit superCID into it and then dd push it back. Easy. I even automated that with a command-line hex editor for the HTC OneS. But as far as i know, p4 has now been put under security protection with the ONE and probably all other 2013 devices.

So this isn't available anymore for S-ON phones I believe. But anyone with S-ON can of course try. The pull will always be possible, the cid is still at the very same offset it already was on the Ville, so you can check that forum for methods. I just doubt the push back to chip is blocked. Sorry.

Mobile post

---------- Post added at 01:27 PM ---------- Previous post was at 01:23 PM ----------

They don't. At least not for warranty purposes. The service centers determine if your case is eligible for warranty themselves by looking at the phone and following HTC local rules (differ per country). The service centers have no access to the HTCdev database.

Only record that makes sense is for marketing and statistics, and that really doesn't matter for us. It'll just tell them the popularity of unlocking and the IMEI serves as identifier so they can tell if an unlock is done on one device multiple times. Just to correct the figures.

Plus, it's needed to calculate the unlock key, as that is essentially some hash from IMEI and HTC keys.

Mobile post
[One (M7) Original Android Development] BlueMoon2510:
I have the same problem here with my One. HBOOT 1.44 MID: PN0710000 CID: T_MOB101

Running on rooted insertcoin GE.

After "./revone -P" I get "revone failed error code = 1"
[One (M7) Original Android Development] Edubyah:
I had to switch ROM to Venom and follow instructions to do from terminal on phone.
[One (M7) Original Android Development] zFayZz:
Exactly what i thought just because you request a code from them doesn't mean they can prove you used it, clearing it with s-off solves it. Just hope revone gets updated to support hboot 1.54. i wanna make my phone a complete stock google edition :(
[One (M7) Original Android Development] miketamm:
ok.. Nearly 500 pages on this thread so I may have missed it. What does s-off actually do?

Thanks,
[One (M7) Original Android Development] zFayZz:
http://bit.ly/OFE9J0
[One (M7) Original Android Development] horsetastic:
Might it be possible to gain s-off using the same hboot.img then?
[One (M7) Original Android Development] OpTicz:
I'll have to keep an eye on this post. I should have gained S-Off, but I was too impulsive after buying the phone and just ran the OTA before doing my research.

Sigh.
[One (M7) Original Android Development] mugetsu666:
Well at least with the One htc unlock method isn't as bad as it use to be. U can flash full roms in recovery without having to flash kernel separately and u can even flash radios, but beyond that it's usual htc unlock

androidtechy.com/Team-nocturnal/droidnow.com Sign up for [MENTION=310414]Copya[/MENTION]pp with this link, and we'll both get 5 GB of free cloud storage in addition to the usual 15 GB: https://copy.com?r=DrfOMd
[One (M7) Original Android Development] TabascoJoe:
Has anyone received a phone with 1.54 out of the box. What is the estimated time frame to when HTC/att includes 1.54 out of the box?
[One (M7) Original Android Development] zounduser:
I have a butterfly s, which came with 1.54 hboot out of the box.
[One (M7) Original Android Development] angusc:
Here a little procedure that I copied from xda but can't remember where I filled this after I successfully S-Off but it seems to be along the same lines as sneakyghost is referring:

Quote (credits to original poster):

1. Fire up your command prompt and go to the directory that you have ADB installed to. Type "adb shell" and hit enter.

2. Type "su" and hit enter. You now have root privileges.

3. Next type "dd if=/dev/block/mmcblk0p19 of=/sdcard/mmcblk0p19" and hit enter. This will dump the partition to your sdcard.

4. Next type "exit", hit enter, type "exit", and hit enter again. This should take you back to a command prompt for your computer.

5. type "adb pull /sdcard/mmcblk0p19" and hit enter. NOTE THE SIZE OF THE FILE BEFORE THE NEXT STEP!

6. Open the file (mmcblk0p19) with your hex editor.

7. Look for offset 00000000 and you should see your CID (see picture).

8. Change CID to 11111111 and save the file as mmcblk0p19MOD. This will give you SuperCID as well. MAKE SURE AT THIS POINT THAT THE FILE IS THE EXACT SIZE IT WAS BEFORE YOU HEX EDITED IT!

9. Now go back to your command prompt and type "adb push mmcblk0p19MOD /sdcard/mmcblk0p19MOD" and hit enter.

10. Type "adb shell" and hit enter then type "su" and hit enter again. This will put you back into the android shell and give you root privileges.

11. Type "dd if=/sdcard/mmcblk0p19MOD of=/dev/block/mmcblk0p19" and hit enter. To test if it worked restart the phone into fastboot (type "adb reboot bootloader" and hit enter) and once the bootloader screen comes up type "fastboot oem readcid" and hit enter. It should read "11111111".

12. Next type "fastboot reboot" and hit enter. After the phone rebooted open command line and type "adb adb shell getprop ro.cid" and youcan see the supercid

Sent with desire from My One
[One (M7) Original Android Development] soul40k:
So I have read a bunch, and searched a bunch, but I cannot find a solution to my issue.

My issue is that when trying to run the command before /revone -P, I gets failure status one. I've tried redoing it multiple times, all suggestions here,bit nothing. I am rooted, but that's about it. It is a Bell Canada HTC one with boot 1.44.

If you need anymore info from me please lemme know, I really would love to be able to get to 4.3!

Sent from my HTC One!
[One (M7) Original Android Development] PillowMetal:
I bought a Sprint HTC One last week (hboot 1.44 from May) and am about to attempt revone, but I wanted to clear up a few things I have read in this thread.

1. For years I have S-Offed my devices and kept the bootloader LOCKED. There was never really any reason to unlock through HTCDev or any other means because I could flash from the bootloader, recovery, or fastboot flash zip (or even regular fastboot flash if hboot is modified in the S-Off process). I am assuming/hoping this is still the case.

2. I know everyone says NEVER take an OTA, even if you are S-Off, but I have ALWAYS taken OTAs while S-Off, just because I'd rather get the stock firmware and ROM updates than use custom ROMs or extracted zips containing the updates that usually contain other mods I may or may not want. If anything is wrong or I don't like it, I simply RUU or flash back to an earlier version, including hboot. I do not believe there is much risk of having S-Off turned into S-On during one of these updates for a few reasons:

a) HTC Developers are S-off and I find it strange that they would want this "feature" during their development and testing of updates.

b) Imagine all the warranty repair claims and calls, as thousands (millions?) of people take the OTA in a non-stock hboot (which is possible) and brick their phones!

c) The OTA update does not execute in fastboot mode, so it cannot execute a "fastboot oem writesecureflag 3" to S-On, so it would have to flash mmcblk0p3 with a file named "pg1fs.img", but I'm not sure that even S-Off has access to that partition, let alone the update process. It is actually NV-RAM and would have to use an entirely different process than stock recovery (which is what the OTA is using).

I may be wrong, and I would welcome anyone sharing an instance with me where someone has lost S-Off after an OTA update, but I never have.

3) The only downside I can see to taking an OTA update with S-Off, is that the bootloader which is locked to accept the OTA, may not be able to be unlocked afterwards without having to go through the HTCDev unlock procedure. But as I said in #1, I don't care if I am unlocked or not. Besides, if push came to shove and I had to to use HTCDev to unlock, that would not be the end of the world for me.

4) There is never a situation where you need to purposely and manually go back to S-On, except if you are returning a phone for warranty and want it look stock unmodified. Even then, it should done LAST. This applies to flashing, OTA, or RUU; this all can be done while S-Off. Once you have S-Off on your phone, do NOT turn it back on unless returning it to the store.

Is any of this no longer true with the HTC One?
[One (M7) Original Android Development] Eschmacher:
I am having the same problem, but apparently the latest OTA update from t-mobile kills revone. Perhaps a similar issue on bell? I hope there is a fix soon...
[One (M7) Original Android Development] zounduser:
This shi+ right here is the exact reason i dont take ota's. Never. I learned the hard way too. But, never again. I just hope u guys get it figured out, it took quite awhile for the DNA to get unlocked, "s-off" again.

When updates get rolled out........it doesnt take but a day, or 2 for the devs to take what they need, and integrate it into their roms. Hell, ive seen it the same day!

Anyways, im no longer on my ONE, i sold it, and my DNA, and purchased a HTC BUTTERFLY S. My bootloader version is the 1.54, and im hoping soon too, this device gets off. So, best of luck to those stuck at the moment, and remember....DO NOT TAKE OTA'S, UNLESS YOUR PLANNING ON A RETURN.

Zound
[One (M7) Original Android Development] sokoko:
Htc dev unlock

So can somebody answer ?If i will do the HtcDev unlock and one day i want to do it stock again,if i run a ruu it will be locked like new or it will appear relocked and tampered?Will it be locked?Thanks
[One (M7) Original Android Development] Tetsumi06:
Wait for a few hours. Tweeted by Justin Case:

[MENTION=487576]teaman[/MENTION]dIRC: new LG Root exploit, new adb restore exploit (up to 4.2.2, packed for HTC) coming this afternoon

----------------------o('_')o----------------------

Sent from an HTC One using xda app and Bulletproof TrickDroid ROM 8.0
[One (M7) Original Android Development] daleski75:
What does this have to do with s-off and the HTC as what you have posted is about LG???
[One (M7) Original Android Development] gunnyman:
Not to mention Justin will just sell the info about the exploit back to HTC and LG

:rolleyes:
[One (M7) Original Android Development] reef2009:
thnx everybado and especialy the Revolutionary team.

The first time it did'nt work but after trying many many many times. I sucseeded :laugh:

For all people who want to know:

M7_UL

HBoot 1.44.0000

Radio 4A.14.3250.13

OpnSDP-v26.120.274.0202

eMMC-boot

3 may 2013, 17:22:59:-1