yashsingh1/xdaforums huggingface dataset:
[MDA, XDA, 1010 Software Upgrading] ben x:
hey guys this is my 1st post to this forum, but for the last year or so I've found it very helpful.

I was experiencing this same issue it would just boot up and hang on the welcome screen for what seemed like an eternity. I gave up and just left it booting up and finally the today screen came up. This is what I tried and it worked. All of this was after a hard reset when I tried to upgrade the radio stack and it fell into this infinite loop of 1% and fail and reboot. I had read a couple of the procedures for doing a radio stack upgrade but here is some of what I did.

In one of the procedures it says to copy the files to ur ppc windows directory and to copy the exe file to ur windows startup directory. I figured I would bypass that in some way. After I finally got to the today screen and used my pc to copy the files to the sd card, I copied all the files to the windows directory on the device and ran the exe file from the windows directory. It worked like a charm and my ppc was back to life. It no longer took for ever to get passed the welcome screen. I hope this helps some of you that have this issue
[One (M7) General] smartanks:
Hi Guys just saw this on youtube, i guy was able to s-off his ONE using a "JAVA CARD". Dont know how to contact that person , but i guess we can finally have s-off on 1.54 hboot :D:D:D:D:D:D:D

Please check the below link:

http://www.youtube.com/watch?v=AVSGqXn4wX0

UPDATE: Well this is a hardware service that some sites provide , you would have to pay them and send your phone for them to s-off, so no real reason for us to cheer up , just have to keep praying for a new exploit

UPDATE 2: as notified by people , i changed the subject line of the thread to reflect the actual process of S-Off
[One (M7) General] monkeypaws:
Crappy video. Posted s comment asking for a step by step. Unclear what exactly he was doing.
[One (M7) General] smartanks:
well maybe the method is not very reliable right now thats why the video is like that. but still its a MAJOR progress and such a relief for guys like me who are stuck with s-on. you can clearly see at the end of the vid that the phone is indeed s-off :D
[One (M7) General] graffixnyc:
It's not going to be an easy task, not like a revone or moonshie. You'll need a programmed java card to do it. I only know of what I just read but it seems it's like a smart card of some kind. There is probably a program on the card that runs to get s-off. So not only would you need the pre programmed card, but you would need everything required to hook the card up to the phone. It looks like he is using some kinda of special usb cable. Maybe on the other end of that the card is hooked up to.

http://en.wikipedia.org/wiki/Java_Card
[One (M7) General] monkeypaws:
And I dont think the pre programmed card will be free. I saw another thread about about a different HTC variant phone where java cards were going for 1000$ ++.

Here it is http://mobility.forumsee.com/a/m/s/...hings-about-new-world-first-htc-off-card.html........

And a similar video but of a different HTC phone. https://www.youtube.com/watch?v=7EueLGDqIpo&feature=youtube_gdata_player
[One (M7) General] Sentinel196:
This looks a lot like the old HOX S-Off thread already. I hope we can find a way that doesn't require a java card. thankfully I S-OFF'd my phone before updating to 1.54
[One (M7) General] I Am Marino:
They can always S-OFF like the Rezound and Amaze had to do, we had to use a paper clip to somehow short out the security, something like that haha.
[One (M7) General] smartanks:
wow , never knew it was that tricky. well anyways still hopeful that someone can find a way someday , for us to s-off our phones without paying upto $100. :(
[One (M7) General] smartanks:
would it be possible to get smething like the misctool from below to work for our phones?

http://xdaforums.com/showthread.php?t=1526316

this would allow changing mainver and allow flashing older RUUs
[One (M7) General] oliv59:
Already done it with "Revone" !! Simple method...

Newbee here, so impossible to show screenshot or post link :(
[One (M7) General] Deleted member 3252403:
Revone doesn't work with the 1.54 HBOOT.
[One (M7) General] oliv59:
Have a look in mailbox.... Screenshot send....
[One (M7) General] donmarkoni:
Please share your method. Many are interested. Excluding me, I'm already S-OFF. ;)

Thank you!
[One (M7) General] CrazyTrond:
I'm guessing he S-OFF'ed before flashing 1.54 because revone doesn't work on 1.54 yet.
[One (M7) General] zaphodbeeb:
I do hope for htcs sake this is correct, else there will be many who will not buy the phone if they are stuck with 1.54 s-on.

S-on...... Why? This is unique to HTC after all.
[One (M7) General] redbull123:
I have s-off on 1.54 also, as do many others, BUT s-off was done on 1.44 then it stays s-off when the hboot is updated to 1.54. People can't be s-on on 1.54 and get s-off.
[One (M7) General] daleski75:
At least it shows by whatever means 1.54 is still exploitable and it's now just a case of waiting for the dev's to find one.
[One (M7) General] EddyOS:
The Java card is used to set S-OFF, it doesn't exploit anything as the official method of attaining S-OFF and is used by HTC service centers to make changes to the system
[One (M7) General] daleski75:
Thanks for the correction.
[One (M7) General] killman2659:
And yet people bought this phone not knowing if they would get s off or not. If HTC doesn't make any changes to what they allow in S on, most people don't really need s off anyway.
[One (M7) General] dh2311:
Yes, should be able to, if not there will be a 4.3 stock rom or nandroid released here which you could install
[One (M7) General] doohdah:
1.54 s off

Just had an email from.the fun fone shop.They have successfully done s-off on 1.54 bootloader with tampered and relocked bootloader.yippee and over the moon :)
[One (M7) General] Theshawty:
Makes me wanna ship my phone to them considering I don't live that far from UK, but I can't be without my phone even for a day without getting shaky. :p
[One (M7) General] dh2311:
Confirmed? Becasue they were adamant that the tampered flag was the issue for me?
[One (M7) General] doohdah:
htc one s off

Confirmed my HTC one boot 1.54 relocked tampered is s-off as of today.check their s off page it's my phone in the pictures.it's.taken them.a.week.they needed to get some extra files for the java card.
[One (M7) General] daleski75:
When you get your phone back do a screenshot my good man so we can all bask in the glory of s-off on hboot 1.54
[One (M7) General] fonefun:
yes !!! today a world first

we at fonefunshop have managed to s-off doohdah's htc one m7 today (thanks for your patience dooda :)

to confirm, we did use our java card (ir-key cannot do this, not yet anyway).

his boot was 1.54

his tamper alert was trigered too

after the s-off his cid was set to 1111111111

we flashed an old'ish genric stock rom

rebooted it, then did an over the air update, this downgraded the boot to 1.44 and updated software version to 1.28.401.7

so all in all a very good result today for any one needing this service.

the only problem is the photos we took :silly:

we took them after the s-off and didn't take one before :(

anyway one happy customer, if you need yours doing search "htc one m7" on our site and you will find the service

( i dont want to post a link to it directly personally as it may be seen as spam by forum admin)

heres an image of doohdah's phone
[One (M7) General] Deltafox79:
I would have 3 questions to ask:

1) If I am not resident in uk I could not send the phone?

2) When the phone returns to S-OFF will be able to install new Hboot (like 1:55, etc.) without losing S-OFF? or Hboot does not update anymore?

3) the phone returns to standby mode LOCKED or UNLOCKED? If I use the binary Unlocked_htc taken from HTCDev I see you again the words RE-LOCKED if I used fastboot OEM Lock?

Thanks
[One (M7) General] neilmcd:
This is great news! Is it something that you can do in the shop while I wait, or do I need to do it via post?
[One (M7) General] AttackManatee:
Verizon HTC One General Thread - U.S.A. Java Card S-OFF Service

As a courtesy to those in this thread looking to find an S-OFF service in the United States, I wish to inform those that are unaware that Sonic2756 in the Verizon HTC One General forums have also attained a Java Card, and can provide the S-OFF service as well. (As I am currently assuming that achieving S-OFF status is not carrier specific.)

More info can be found here:

Thread:

Purchased a JavaCard for S-OFF (Link below starting thread on page 19)

http://xdaforums.com/showthread.php?t=2427960&page=19

Website:

http://htc.s26tech.com/

YouTube Video:

https://www.youtube.com/watch?v=sF1CxtbPhV4
[One (M7) General] kuaidao:
that is good!:D
[One (M7) General] dh2311:
I don't mean to sound cheeky here, but is there any deal that could be arranged since mine failed? Just once I've paid postage again it's going to have cost me nearly £30-£35 for s-off?
[One (M7) General] MajikUF:
There is a guy with a verizon HTC One (Sonic2756) that bought a javacard and setup a website to take paypal in which people would ship their phone to him, he would s-off it, and then return it.

http://xdaforums.com/showthread.php?t=2427960

While I personally don't like the idea of shipping my phone to someone I don't know, this is a great option for people that can't use the UK store and would probably work for any HTC phone assuming Sonic can get the correct info for it.

Maj
[One (M7) General] fonefun:
yes we can do it while you wait if you pop into our store in Sheffield UK

---------- Post added at 09:12 PM ---------- Previous post was at 09:08 PM ----------

unfortunately we arent charging much for this service as it is, i undertand the postage costs problem, but there simply isnt any room for discount on the service itself at £12.49 + vat

---------- Post added at 09:18 PM ---------- Previous post was at 09:12 PM ----------

1) no we only do this for uk residents, there are 2 reasons, 1. we dont like or want the resposibility for loss or damage to someones phone in long haul transit, and 2, we had a guy send one from the US and even though he declared it as a repair, we still got stiffed with a £43 customs import duty bill to release the package to us.

2) not 100% sure on this question as not tried it, all we do is s-off, i doubt it will s-on as all phones we have s-off in the past remain s-off

3) again i do not know this one for sure, all we are offering here is s-off, bootloader will be locked. basically its restored and flashed to stock rom, tamper is removed, and so is locked bootloader from the 2 we have done so far
[One (M7) General] neilmcd:
Great, I'll come over on Tuesday or Wednesday next week. Do I need to relock my bootloader or can it be done with it already unlocked?
[One (M7) General] Theshawty:
I get that, and shipping to and fro US is a bit of a PITA, but what about countries like Sweden (or any of the Scandinavian countries)? We're practically neighboring England.
[One (M7) General] jcoops:
great news !
[One (M7) General] Spartn:
"we flashed an old'ish genric stock rom

rebooted it, then did an over the air update, this downgraded the boot to 1.44 and updated software version to 1.28.401.7"

This is a way we could try to achieve without Java card, just to flash oldest rom 1.20.401.x with newer boot, so display will work after flashing the lower version and try to update via OTA, so it could downgrade hboot for us... problem is to get that version as odexed and stock recovery file

i will try to decrypt RUU 1.20 and create odexed rom, just to see if possible to get OTA :)
[One (M7) General] Slim Shady:
its a great news unfortunately services like these are never available in india and once s-off downgrade the hboot and use revone to mess around.Is there any way to downgrade the hboot with s-on ???
[One (M7) General] Theshawty:
Technically, you could downgrade the hboot if you had HTC's private signing keys but they're under Fort Knox-like security.
[One (M7) General] Slim Shady:
time for mission impossible 5 :cowboy:
[One (M7) General] Spartn:
I think it is possible to downgrade if create odexed rom from 1.20.401. ruu and flash it with new boot, so display will still work and then just let OTA does a trick :) have not extracted the necessary files as i had a problem while building up linnux os, but will try to prove it once im bac at home, i wish i could say it works
[One (M7) General] karl_azytzeen:
I hope it works

Good luck!
[One (M7) General] bobatomix:
Once, I unrooted my TF101G with that method:

1. Extract "blob" file from RUU

2. Used ADB to push the blob to my TF or just copy it to my SD card.

3. Connected my TF to my PC and type "adb shell" to start a shell.

And my TF was Stock.

Maybe this method can be applied to downgrade the Hboot?

(sorry for my english)
[One (M7) General] fonefun:
no need

---------- Post added at 08:09 PM ---------- Previous post was at 08:07 PM ----------

as long as you understand we will not be responsible for loss or damage to your phone in overseas transit, i have no problem doing this work for anyone in europe
[One (M7) General] Swanseatom:
I am looking to travel up from swansea to have you guys s-off my htc one.

I have a few question's, I read the post where you said it can be done in store while you wait.

Is there any variables?

Like a certain member of staff or anything?

I can phone ahead the day before to check if so.

Regards,
[One (M7) General] Root-Maniac:
Your lost man.....
[One (M7) General] Spartn:
unfortunately, i still haven't decrypted rom.zip which was extracted from 1.20.401. RUU due to problems with libunshield for unruu on linux ubuntu, i wish there is someone who could decrypt rom.zip 1.20.401. for us, so we can build a stock odexed rom and try to flash it if it does a trick

if no one is available to decrypt that zip file by using unruu, i will build up debian on my pc as that's the OS which should work with unruu -advised by a person on #revolutionary channel -but again it will take a time to get it done

---------- Post added at 09:28 AM ---------- Previous post was at 08:55 AM ----------

For UK people, good to see that they have option like this -i think not much for s off at this time ;)

http://www.fonefunshop.co.uk/cable_...e_(Permanent_Root_HTC_Allow_Custom_Roms).html
[One (M7) General] Spartn:
rom.zip encrypted took a lot of time, remaining to build odexed rom :)
[One (M7) General] TheBrilliantMistake:
Wasting your time.

The bootloader (inside the phone) with S-ON will restrict what you can flash, and will not allow itself to be downgraded (unless you can provide an appropriately signed new bootloader (which can be a downgrade if HTC wish).

The protection is built into the bootloader itself, which acts as the 'gate keeper' for which partitions can be flashed, so you can't simply flash a new 'hacked' one over it.

You don't need any special tools to decrypt the zip... RUU does that and leaves the decrypted contents on your drive (whilst it's running)
[One (M7) General] Spartn:
hmm, i think it will downgrade hboot if it takes as OTA, phone will think it's right hboot and will be signed -funshop service in uk did the same thing if i'm not mistaken -no other way to downgrade hboot, but this could work, now i'm facing another issue, 1.20.401 installed but ota says no update for your phone, i think there is need for a help of someone who knows how to build up odexed rom which will get OTA update -just a try
[One (M7) General] Theshawty:
Wait a little. Maybe an OTA will pop up in a few minutes.
[One (M7) General] Spartn:
have tried manually to check soft update, nothing :(, really would help here a delevoper who knows how to build everything properly

just sent pm to mike, hopefully he will help
[One (M7) General] Theshawty:
An update might not come directly.
[One (M7) General] skulldreamz:
A trick to get ota's to come is to manually change the date few days later, reboot, wait , reboot, change back, check, change to another date, you see what I'm saying, just keep changing the date and keep checking...
[One (M7) General] Theshawty:
I want S-OFF so bad :p
[One (M7) General] Spartn:
tried yesterday to play with a date, did not help, but then i tried to load odexed 1.29.401. with boot.img of adhd 12.1 rom and was able to receive and update, but as soon as i loaded boot.img of odexed 2.24.401, then i had no update available on 1.29.401, so for sure update depends on boot.img which is flashed, the only one problem is here that we can't use stock boot.img from 1.20.401 for rom 1.20.401 due to new display driver which is loaded on a phone and that's why older boot.img causes not working touchscreen

will try to play with different boot.img(e.g.: from adhd 12.0 or lower version) for 1.20.401 if update doesn't come up

but i can tell right now that it looks like there is no way to downgrade hboot with loading "odexed rom 1.20.401" and use higher version of boot.img nor stock 1.20.401. boot.img can be used..
[One (M7) General] horsetastic:
Man me to. I've tried so many random things lol......

I'm currently pondering on trying to 'trick' my phone to think it has an external sdcard by writing an sd image to one of the spare/blank partitions. Then writing a goldcard to that partition and see if I wangle anything at all lol.....

Has anyone ever tried usb otg with a dhd or similar with a goldcard and running the RUU that way? I think you could do it on the Sensation?? I may be wrong lol.....

Also within the root files of the phone I found fota_sign and public_key.,.....Anyone know if these can be used for anything? Can you somehow sign packages with these or are they just the phones way to check the signatures etc?

Sorry totally off-topic for this thread haha!
[One (M7) General] Theshawty:
Please try! :good:
[One (M7) General] horsetastic:
Will give it a bash lol..... I am very very very doubtful/skeptical however lol..... But you never know!
[One (M7) General] Spartn:
not sure how gold card works, but if you create gold card (micro sd) and then mount it on htc one by using sd reader and micro to usb cable, could it help somehow?

just trying to google methods which involve gold card, just curious what trick gold does

EDIT: just found out that gold card allows you to flash RUU files with a different CID to your own device, would this help somehow? if applicable on htc one
[One (M7) General] horsetastic:
Back in my DHD days goldcard was how you stated off to eventually S-Off and SuperCID etc the phone. Of course there's no External SD on this phone. Plus there's the fact that HTC more then likely have patched this route if it is even possible in the first place..... But..... I always feel that anything is worth a shot lol.....

The HD7 didn't have an external SD but you could hack it by running a y cable to another phone with a goldcard and then running RUU..... I have a feeling that this wont be possible here as surely it would have been done already.... But you never know!
[One (M7) General] Spartn:
thanks for the explanation, just for my understanding, let's say that gold card works on htc one by using this tool: micro usb to usb and usb card reader...then i just need to create gold card and put it to phone in our case mount it by using the tool, right? and after that i can try to run RUU if it makes a trick? or do i need to copy "rom.zip" signed to gold card and try to flash it from there?
[One (M7) General] horsetastic:
Well if you have an SD via micro port then you wont be able to run the RUU anyways..... from what I remember you need to have the PN07IMG.zip on the goldcard sdcard.
[One (M7) General] Spartn:
sorry many questions ;)

if i rename extracted rom.zip from RUU to PN07IMG.zip and put it on gold card, then it should do a magic, right? still in theory phase..

don't see what should be done after renaming and placing the zip on gold card...should i put phone to recovery (original one) so it will try to flash PN07IMG.zip or?

EDIT: you think no way to work while using sd via micro port instead of sdcard, right?
[One (M7) General] horsetastic:
In "theory" if you reboot to bootloader it should see the PN07IMG.zip and automatically run it.....Then the goldcard would bypass the security checks and wozzah! But I really dont see it working lol
[One (M7) General] Spartn:
oh, if that worked it would be perfect ;) we could finally forget about hboot 1.54, hmm but you think it will not work as the phone will not see sd in bootloader if sd is attached via micro -sd via micro is not mounted while being in bootloader...makes sense
[One (M7) General] horsetastic:
Yes that's the issue.....And I'm pretty sure you can't goldcard the internal SD.....though if that where possible it would be awesome.....
[One (M7) General] Spartn:
have you already tried to do that? time ago I tried to copy PN....zip file to internal sd by using copy paste in windows, it was not possible, but i think it would work by using adb push
[One (M7) General] horsetastic:
you can easily put PN file on your sdcard..... you can put anything on it :confused:
[One (M7) General] Spartn:
did not work for me -found somewhere that PN...zip could be flashed somehow and that's why i tried to copy&past that file in windows, but all time i had error at the beginning of transfer, so i believe it's somehow secured or blocked to transfer it to sdcard, tried only in windows...first i thought it's because of size...so tried different file with bigger size and no error

EDIT whou, just realized java card method works by using cable micro to usb and card reader while being in bootloader or am i wrong? ;)
[One (M7) General] horsetastic:
Javacard method does work that way but you have to buy a javacard first....

You can flash a PN zip but rebooting to bootloader, then fastboot oem rebootRUU then fastboot flash zip PN07IMG.zip

But It has to be signed....And as you're not running it from sdcard the goldcard wont do its job....

You can easily move any zip to your SD card so I have no idea what you're doing wrong lol
[One (M7) General] Spartn:
i see, while checking hboot, it stopped due to security on...and gold card somehow skip this check, makes sense

will try to copy PN zip to internal sd again, just to see if it's possible ;) but i think it will not work and about java card method, we could use gold card sd attached by micro cable and sd card reader, hm? if java is mounted in bootloader then it should work for gold card attached by cable
[One (M7) General] horsetastic:
java and goldcard are nowhere near the same thing man....
[One (M7) General] Spartn:
sounds goood, i will give it a try ;)
[One (M7) General] fonefun:
any day mon-friday

opening times are on our website, along with directions, just ppress the contact button

mick or mark can do it for you while you wait.
[One (M7) General] shasen1235:
It is always possible if you can get the file and the java card

But the problem is it will cost a lot and not easy to get

I've seem one and how it works