yashsingh1/xdaforums huggingface dataset:
[One (M7) General] zaphodbeeb:
An observation with regards S-OFF 1,54 bootloader

Hi,

just got a repaired HTC One, with new motherboard back from HTC repair. Its still stock, no ota, stock rom and recovery and the bootloader looks thus:

***LOCKED***

M7_UL PVT SHIP S-ON RH

HBOOT-1.54.0000

RADIO-4A.17.250.14

OpenDSP-v31.120.274.0617

OS-2.24.61.1

eMMC-boot 2048MB

Jun 21 201,23:33:16. 18831

Red highlights the differences.

Looking at the shop s-off version from the pics shown on the site, the format and content shown is different, as follows (please excuse but the data below is not exactly the same as the pic on the site, a/ its difficult to read and b/there are differences due to different radios etc.)

***LOCKED***

M7_UL PVT SHIP S-OFF RH

CID 11111111

HBOOT-1.54.0000

RADIO-4A.17.250.14

OpenDSP-v31.120.274.0617

eMMC-boot

Jun 21 201,23:33:16. 18831

I spoke to the engineer at the store and he advised that their method of s-off is different from revone, moonshine. I asked how you could s-on after their s-off, and he advised he didnt know of one, but then qualified his statement by saying that there will be a way to achieve this. Also, there are other differences highlighted above (red). Some of these differences could be because the device I looked at is repaired, not completely new.

These will be easily spotted by HTC repair. I know they often exercise an element of pragmatism.

This makes no odds to me and I have just sent my device off to the shop for the s-off treatment (too inconvenient not to have it), but for some this may be a cause of concern.

Has anyone had this JCard s-off method applied and then tried to revert to S-On? If so what method did you use (revone). Also it may be useful if someone could post the bootloader for a brand new stock device to compare it to the above.
[One (M7) General] Prema:
Brand new stock bootloader:

***LOCKED***

M7_UL PVT SHIP S-ON RH

HBOOT-1.54.0000

RADIO-4A.17.3250.14

OpenDSP-v31.120.274.0617

OS-2.24.401.1

eMMC-boot 2048MB

Jun 22 2013,00:54:00.0

(Above is a week 38 device)

BTW: All devices manufactured in/after week 36 (SN starts with FA36) are likely to come with h-boot 1.54...

(A device I checked with FA35 still had h-boot 1.44)
[One (M7) General] Spartn:
not sure if someone had this method and went for s on, but i would simply flash ruu with lower hboot and then, just apply revone, so no problem to go s on after that in case it's necessary to apply for warranty
[One (M7) General] zaphodbeeb:
other than OS it exactly the same as the one I got from repair. Stupidly I didn't make a note of the one I just sent to the shop for s-offing. Its a brand new factory sim free 801n, CID is HTC001. boot 1.54 (this much I can recall). When I get it back I'll report on the resulting bootloader screen, but from the pics on the site it seems it is changed by the s-off process. Anyone been brave enough to try and suceeded to s-on a shop s-offed One? (not sure if I will try).
[One (M7) General] zaphodbeeb:
fonefunshop s-off and supercid

Just got my One back from the shop. S-off and supercid done. I was expecting it to come back as reset stock rom and recovery but it wasnt. Rom exactly as I sent it, including apps installed and TWRP recovery. The bootloader showing as locked, tampered (my next mission is to remove Tampered, whilst hopefully preserving s-off). Blinding service, very quick no messing, even lets you see:

- when its received

- when it goes onto the bench

- when its been done

- when its picked up for return.

The bootloader is currently

*** TAMPERED ***

*** LOCKED ***

M7_UL PVT SHIP S-OFF RH

CID-11111111

HBOOT-1.54.0000

RADIO-4A.17.3250.14

OpenDSP-v31.120.274.0617

OS-2.24.401.8

eMMC-boot 2048MB

Aug 9 2013, 16:15:36.22931

UPDATE

Apparently there must have been a problem after the funfoneshop guys did their s-off, cid magic. They flash an old RUU after they do their stuff. I did this no problem and 5 OTA's later I now have...

*** LOCKED ***

M7_UL PVT SHIP S-OFF RH

CID-11111111

HBOOT-1.54.0000

RADIO-4A.17.3250.14

OpenDSP-v31.120.274.0617

OS-2.24.401.8

eMMC-boot 2048MB

Aug 9 2013, 16:15:36.22931

S-off survived all the OTA's, and the tampered flag has now gone.
[One (M7) General] Spartn:
just created gold(2gb) card by using different HTC mobile and transfered PN07IMG.zip file to the card, connected to the phone by using mirco usb cable and phone booted to bootloader, nothing happend :( no installation, no way to choose a file...nothing :( so gold card not working here unfortunately
[One (M7) General] tizzleh:
I sent my phone to Sonic, I will post back with the results. It was shipped Monday, I received the tracking number last night. Let's hope for the best. I generated hundreds of tokens before the S-off. I plan on running the same loop after supercid, maybe someone can find a difference between them.
[One (M7) General] Jonny:
Of course S-OFF survived the OTA's - HTC's firmware updates don't reset the S-OFF flag, they don't even touch the flag. Once you have S-OFF, you stay like that unless you choose to return S-ON by flashing the oem writesecureflag 3 fastboot command.
[One (M7) General] jirkab:
For flash via external memory card (flashdisk) must be modified cable and external power supply:

If, however, will GoldCard to downgrade HBOOT I do not know. I have a phone S-OFF and I'd rather not try it (S-OFF -> S-ON -> downgrade), because if it was not working I would not be able to get back S-OFF.

Source.
[One (M7) General] zaphodbeeb:
Hi, yes I realise that normally it would, however the tampered flag was showing, and the fonefunshop method is different, so I wasnt sure the OTA would be successful (i.e. get rid of tampered, and preserve s-off).
[One (M7) General] Tigerstown:
I'm just ordered the blue htc one. It says it ships with 4.3. I'm picking it up from best buy today at 11. Don't know what h boot till I see.. I will be bringing the phone not active... I hope someone has good news they can share bout me going s-off? I'm currently s-off dirty style an want s-off always. Best buy selling these blue htc ones to for the lows. I just got 2 for 98 dollars out the door.
[One (M7) General] :
Hello guys I have a source who is selling java card to s-off any HTC device I asked him for HTC one . It's 630$ and can s-off 250 devices . Anyone interested?
[One (M7) General] Theshawty:
Has he got any near-depleted java cards he can sell off cheaply? Like a 4-6 credit one? Or maybe it doesn't work that way?
[One (M7) General] Spartn:
thanks for provviding the picture, it says a lot, but if i may ask, where did u get it, is it yours setup?

I will try to modify the cable according the picture, just to have confirmed, is it enough to cut the micro to usb and connect the sides cable with htc power cord? thanks
[One (M7) General] :
Will email him for the same . But I think if we are able to copy the card it would be great or just remove the limits . Cuz someone is making 600$~ on each sale and he might be copying it from a source . If we can remove the limit or copy it and then we could have a permanent solution for s-off for free .

Me:Hello I am interested in buying a java card to s-off Htc one ..

Seller:Hi.,*

*I have java card for unlock Htc phones. And ofcourse you can unlock HTC one .

Price : 630$ with Y cable and card reader its include 500 credits*

Thx a lot

yes sure it can unlock network and S-Off also
[One (M7) General] RossLH:
I'd be interested, pending location. I want S-Off, but not badly enough to sacrifice my phone for a few days.
[One (M7) General] altimax98:
As much as 4.3 would be awesome I doubt the Best Buy ad is correct... I see many errors on this screen:
[One (M7) General] Tigerstown:
I will let you know if best buy lied it's my turn next to get my phone e

I hope the didn't lie we will see
[One (M7) General] :
I asked the seller for a card which has 50~ credits and got this

Hi .,*

*The minimum qty of credits is 500 . You can unlock or soff 250 phones . Each phones take 2 credits . If old model takes 1 credit .*

Shipping from Hong kong .

Yes i can accept paypal*

630$ for 250 phones that is approx 2.52$ per phone which is pretty cheap . I can do this myself from UK . Or I can just send the card to anyone who is interested to do this for xda members . I cant afford the card for 630$ .. we can crowd fund to get a card and everyone who participated in funding gets free s-off (shipping charges still are there).

If everyone can even throw 4$ assuming 250 people will do it .. we cam get the card and the shipping charges will be as per the person who sends his/her phone in ..
[One (M7) General] MegaMan X:
Deleted
[One (M7) General] jirkab:
Yes, it is my hand made :D

Yes, but I do not know how you want to connect a card reader. It also has a male connector. Maybe even insert a USB Adapters: female-female.
[One (M7) General] Theshawty:
Ah ok. :good:
[One (M7) General] Sonic2756:
I've had a JavaCard for 3 weeks or so. Been doing unlocks for people in the states.

Thread over here: http://xdaforums.com/showthread.php?t=2427960
[One (M7) General] Theshawty:
Why is no one in Sweden offering this? :p
[One (M7) General] stirkac:
i can try this on my friend's phone, but i'd prefer not to brick it :P Is there a possibilty of brick with flashing PN07IMG.zip 1.44 hboot over 1.54? Is the data lost?
[One (M7) General] Tigerstown:
I just got the blue HTC one Verizon. I took no updates but it was already on h boot 1.54.. is it true I can't root an unlock this? Shoot I gladly pay 20 for full write/erase.
[One (M7) General] Theshawty:
You can S-OFF it with a java card. There's a guy called Sonic doing it for Americans and I believe he's in Denver, CO.

EDIT: This guy: http://xdaforums.com/showthread.php?t=2427960
[One (M7) General] Tigerstown:
Least I got 12 days to return this phone if something don't come up I already know you can't downgrade h-boot wish I was smart enough to know this ****. as my sprint account is still active
[One (M7) General] Theshawty:
Well once you S-OFF with a java card you can downgrade at your desire.. :D
[One (M7) General] speedyjay:
Anyone s-off'ing in the UK at all?? Lol
[One (M7) General] Theshawty:
Yeah [MENTION=428547]fonefun[/MENTION] does. He's got a shop in the UK which does S-OFF

>> Sent from the abyss <<
[One (M7) General] Tigerstown:
I was wanting to downgrade to last h-boot so I could use revone. Nbd I got 2 of the Verizon blue htc one. How to I get info to send these phones. If you would?

Like I use baby racun to downgrade my Evo h-boot. That's what I was asking last night :)
[One (M7) General] Theshawty:
Just PM Sonic and await his reply?
[One (M7) General] karl_azytzeen:
Someone is downgrading with javacard in Spain???

Txs folks
[One (M7) General] Mem Ristor:
chil rtyouua

And what about Germany? Anybody there with a java card?
[One (M7) General] Tigerstown:
Good look!
[One (M7) General] Spartn:
creating y cable and will try to downgrade with gold card ;) there has to be a way how to downgrade without java
[One (M7) General] jirkab:
Yes

No! But this option (brick) is always there, as with all flash - it's only technics.
[One (M7) General] Spartn:
any idea about this? goldcard and y cable used ;)
[One (M7) General] criszz:
no gift file:))
[One (M7) General] Theshawty:
Tried this first? https://play.google.com/store/apps/details?id=name.starnberger.guenther.android.goldcard
[One (M7) General] Spartn:
tried, created img and used for creating goldcard... :)

---------- Post added at 09:47 PM ---------- Previous post was at 09:46 PM ----------

another idea? ;)
[One (M7) General] Sonic2756:
You don't have the required diag files. Having them won't do you well. It kicks you into the diagnostic but asks you for a smart SD (JavaCard) before it.loads anything.
[One (M7) General] Spartn:
possible to get diag file from somewhere? or just copy from someone?
[One (M7) General] Sonic2756:
I have them, but can't post it. Besides, it's only for the VZW One. They're all specific for certain MID/PID's. Like I said before, having them won't serve any purpose without a java card. You can't edit them either because that breaks the siginature on the file, making it not load.
[One (M7) General] ossman:
Anyone know of anyone doing java card s-off it Toronto?
[One (M7) General] DJW6927:
Did someone do a monumental cut and paste from the One X thread then?

Java cards, elusive diag files, overseas websites, all well explored dead ends.... I learnt. Just don't buy a handset if there's no s-off for shipping hboots. Sorry to say it.
[One (M7) General] Theshawty:
But S-OFF'ing via java cards is indeed possible..
[One (M7) General] smoley:
I see java cards for dirt cheap on eBay. Besides the software tools...what else would one need?
[One (M7) General] Spartn:
copied from: http://xdaforums.com/showthread.php?t=2273570&page=22 (post 215)

and then post 228

it worked... but it's china device and different story, but IT HAS TO WORK without JAVA CARD! it same like goldcard ;)

maybe someone just could copy PN07DIAG.ZIP for international HTC ONE...
[One (M7) General] Sonic2756:
Card has to be signed by HTC. Those eBay ones more than likely aren't.
[One (M7) General] Theshawty:
Are there only 500 credit ones floating around? I would love it if there was a nearly depleted one with like 20 credits left but I guess it doesn't exactly work like that?
[One (M7) General] Tigerstown:
Sonic please check pm I have 10 days left were I can still return my house full of these HTC one .
[One (M7) General] andybones:
Java Card alone is about $400......

is 20 credits worth over $400 + w.e the credits cost, compared to $1,300 for 500?

just my 2 cents :)
[One (M7) General] MegaMan X:
Did you happen to get the diag files for the MID I sent you? I'm so scared you're going to run out of credits before your guy sends you anything!
[One (M7) General] jirkab:
Where did you created .img file? PSAS site is not working. There is another way?

I would try to downgrade OneX+ through GC. That I have with S-ON.
[One (M7) General] Spartn:
try this:

http://huygens.hoxnet.com/goldcard.html
[One (M7) General] Spartn:
Can someone copy PN07DIAG.ZIP file from java card?

thanks in advance
[One (M7) General] jonny1974:
Are you looking for this?

http://www.androidruu.com/index.php?developer=M7
[One (M7) General] Theshawty:
I'm pretty sure the diag file isn't almost a full gig.

>> Sent from the abyss <<
[One (M7) General] Spartn:
it's very small file, i think it can be created by a tool at least for old models or just copied from somone who has java card which is able to downgrade HTC ONE - but seems nobody wants to share...money :)
[One (M7) General] Theshawty:
what are you gonna do after you have the diag files (provided you do get your hands on them?)
[One (M7) General] Spartn:
i would load it to goldcard and try to downgrade htc one, if it worked, all could use same diag and goldcard, then no more new exploit is necessary
[One (M7) General] Theshawty:
Seems there more to it than that but good luck if you ever get those files! Perseverance is always welcomed!
[One (M7) General] thefriend1122:
I have load it to goldcard but i can't downgrade htc one.Any help?
[One (M7) General] Spartn:
what did you loaded to goldcard? PN07DIAG.ZIP file? if so where did u get it(just curious if it's the right file, or u just renamed something to be it.

if u have the original file, can you please share? would like to help, there mightbe that u don't have created goldcard properly, u could make a mistake while using cid....too many options

---------- Post added at 10:26 AM ---------- Previous post was at 10:23 AM ----------

time to give up on htc one, <> hboot, going to sell it or just send it to repair center (problem with one of reproductors, not visible issue, but one speak while dialing there is strange sound) there is posibility they will replace HW and send one with lower hboot
[One (M7) General] thefriend1122:
I reload file PN07DIAG.ZIP and it working, Thank you.
[One (M7) General] fuqi:
what did work? could you downgrade hboot?

Gesendet von meinem HTC One mit Tapatalk 2
[One (M7) General] Spartn:
Can you please share PN07DIAG.ZIP file???
[One (M7) General] Theshawty:
Could you please share it for us?
[One (M7) General] exocetdj:
more info please, did u downgrade hboot from 1.54????? ;)
[One (M7) General] MrKaon:
Dose anyone knows how much mobile shops are charging for S-off with Java-card?

Edit

Find it here for UK:

http://www.fonefunshop.co.uk/cable_picker/97585_HTC_One_M7_S-OFF_Mail_In_Service_(Permanent_Root_HTC_Allow_Custom_Roms
[One (M7) General] Spartn:
i believe he did, if you have diag and pnimg loaded on goldcard, then it has to work, no more files phone is asking for, but it useless until someone shares diag file :(
[One (M7) General] Swanseatom:
He stated previously that if it works there will be no need for a new exploit.

I'm sure he is going to share it once he has it all sorted.

I have my usb y otg etc ready to go for when the info is up.

:)
[One (M7) General] exocetdj:
ok cheers :) all we need is to downgrade then revone/m,oonshine will work!

PLZ SHARE DIAG FILE LOL!!!!!!

---------- Post added at 12:03 PM ---------- Previous post was at 12:02 PM ----------

where can i get those cables from mate?
[One (M7) General] Swanseatom:
http://www.amazon.co.uk/Micro-Y-Cable-extra-power-supply/dp/B00EJP5XR2
[One (M7) General] Theshawty:
Would that cable be enough or what else do I need? I ordered a few usb drives a few days ago to have when and if I need them.

Edit: I ordered one of those cables. Good thing they have free shipping to Sweden as well. :)

>> Sent from the abyss
[One (M7) General] Swanseatom:
Just the Y cable, USB Card Reader, Power supply(standard micro charger), and the SD card.

May want to wait it out and see if this is actually working before buying stuff,

Whilst he indicated he had done it, It's been a number of hours now and its really a pretty quick process if its working.

I would hang fire for now for some confirmation.
[One (M7) General] Theshawty:
I ordered that cable. Good thing that they have free shipping to Sweden as well. Anyways, why wouldn't a usb flash drive work?

>> Sent from the abyss <<
[One (M7) General] Swanseatom:
no idea i am not an expert on this. you may well be able to. actually that may be the right one and sd wrong.

Someone with more knowledge able to clear that up?

USB FLASH DRIVE or sd card?
[One (M7) General] Theshawty:
I found a 2 GB sd card lol. I usually don't have those things laying around as the HTC One doesn't support any :P

I also found a USB card reader just in case. A very old Sony Ericsson one but it seems to work just fine.
[One (M7) General] MALmen64:
Why do we need an Y cable and not and ordinary OTG cable?
[One (M7) General] Theshawty:
Because we need an external power supply for this. Ordinary OTG cables don't have this

[MENTION=4986079]Swanseatom[/MENTION] It seems a USB drive would suffice as a previously posted picture in this thread stated that a flash disk was required.
[One (M7) General] haenraets:
Let's see if it will work and then I'll order that OTG cable. Finally some progression.

Is this like the same thing?

http://www.ebay.com/itm/P4PM-USB-Type-A-Female-to-Micro-USB-Male-Host-OTG-with-Micro-USB-Female-Y-Cable-/300937017098?pt=US_Cell_Phone_PDA_Cables_Adapters&hash=item46113e770a
[One (M7) General] MALmen64:
Would this OTG card reader work??

Or do we need that extra juice?
[One (M7) General] Theshawty:
We really need that extra juice.

>> Sent from the abyss <<
[One (M7) General] onejay09:
He's obviously fake, his post count is 3!
[One (M7) General] Spartn:
Hello,

About Y cable, i made mine from two shorts usb cables by following this: http://www.youtube.com/watch?v=dCnhb8BfVfg

one end male usb and the other female usb

BUT - seems no one will share DIAG file because of "unknown" reason, so i would not spend a time creating that cable ;)
[One (M7) General] Theshawty:
I just bought one instead :p

>> Sent from the abyss <<
[One (M7) General] jirkab:
Can I check CID card (FlashDrive) for GoldCard by other way than through the android device with internal memory card slot?
[One (M7) General] zaphodbeeb:
fonefunshop method can be s-on'd and revone will s-off again.

I've now plucked up enough courage to revert to s-on the device again, and can confirm that the revone method works to s-off again. I had to unlockbootloader, install TWRP and root first as the moto chopper part of revone reported success but didnt enable s-off. Fully reversable process.
[One (M7) General] Theshawty:
Don't ever go S-ON, ever. Even if sending it to HTC, they can't and won't do anything about that.

Does anyone know anyone who has these diag files? :P
[One (M7) General] zaphodbeeb:
The trouble is that if you get your phone s-offed by fonefunshop and need to send your phone back to repair you can only get the bootloader back to locked status (not relocked) by using the revone method. I tried the revone method without actually using it to get s-off (as it was already fonefunshop s-offed) to get locked status, and it didnt work. I did the s-on thing, then used revone to s-off. Then I could get locked status.

I dont need to send the phone back for repair, however I did need to know that it could be done.

Are there other reasons not to s-on. As far as I am aware there is no risk of not getting s-on again, as long as you are on 1.44, or have I missed something in the billions of htc posts? Apologies if I have.
[One (M7) General] xeyesofthousandx:
This thread is hugeeeee

Anyway I found a way to get S-Off, confirmed to work with the modified 1.44 hboot. I can't post it to the xda forums for some reasons, but essentially someone made a modified 1.27.531.8 RUU With the untouched 1.44 hboot. So all you have to do is flash a .7 Rom and update to .8 using the RUU, and revone and moonshine will work. I'm not sure if this method works with the 1.54 hboot, because technically you can't downgrade hboot with S-On, but if anyone wants to try it I'll link them to the RUU via PM
[One (M7) General] zaphodbeeb:
Revone works with 1.44 doesnt it? If your bootloader is 1.44 you dont have a problem. If you have 1.54 you do.
[One (M7) General] Spartn:
many webs about this questions, i checked mine via pc (don'[t remember program name) but it showed different cid than htc desire...then i found a web saying htc is a phone which is able to provide right cid -it could be wrong info, but that was my situation

---------- Post added at 10:07 AM ---------- Previous post was at 09:37 AM ----------

BUT i would not pay attention for creating goldcard if the necessary files are not shared and at this time it looks like they will not share because of money...i think that's the same reason why new exploit is not "found" yet :) and the person who replied "its working"...i think it was just a fake, i asked him where he got a files from and if he can share and his reply was just, it's working..solved by loading to goldcard again? :D yeeee, for sure that solved his problem ;)
[One (M7) General] jirkab:
Yes, I think that I have not the right GoldCard for One. I produced GoldCard in HTC Evo3D (check CID microSD card) and One (S-OFF), which has not Super CID (11111111), flash ROM does not work for another region.

One with Super CID no problem.
[One (M7) General] Maichel:
Wow, did not check here for a few days...but although I do not have a clue about all these therms here it seems that a breakthrough is coming :)
[One (M7) General] MrFEr:
For Desire S there was a downgrade-then-unclock method, I used that for mine... Is it impossible for the One?
[One (M7) General] Theshawty:
For us who have 1.54, yes, seeing as we can't downgrade the hboot and it's related partitions without S-OFF.
[One (M7) General] MrFEr:
Okay, I have 1.54 too...
[One (M7) General] NMarco:
any news for the s-off with hboot 1.54?
[One (M7) General] mitas35:
+1:(
[One (M7) General] Theshawty:
I'm sure we'll get S-OFF sooner or later.
[One (M7) General] jirkab:
Yes, it is final. Generator GoldCard specifically for One is not available. I did not find it.

When will GoldCard for One available we can try this way to downgrade One with S-ON again.

Edit:

or

Indicates that the card (not visible for the device - incompatible reader or card) or the file is not correct.

"Correct" this error: Main Version is older!