yashsingh1/xdaforums huggingface dataset:
[Verizon HTC One (M7)] nrfitchett4:
Can't he send it to sonic as well?
[Verizon HTC One (M7)] scotty1223:
from above:

i.e yes,thats an option if sonic has the card and is still doing the s offs. i cannot speak for him.
[Verizon HTC One (M7)] abadasstanker69:
Hi! Thanks for the write up! So I just followed the instruction however when it gets to writing 'zip' it says "FAILED (remote: 12 signature verify fail) finished..." blah blah blah

I repeated this with each recovery. Same end result. Did I miss something? Or is there a newer version that's not reflected in the OP?

I'm using the "keep bootloader locked" option per your instruction here http://xdaforums.com/showthread.php?t=2540004
[Verizon HTC One (M7)] scotty1223:
sounds like you are still s-on.

neither the adb command for lock/unlock or installing recovery as a zip file will work while s-on.

assuming you have a verizon phone,youll need to run rum runner,wich will leave you with root access,s-off and unlocked. at that point you can install a recovery via the fastboot flash command,or as a zip file as described here.
[Verizon HTC One (M7)] abadasstanker69:
Got it worked out. Thanks bro.
[Verizon HTC One (M7)] brholt6:
Anyone know if this is still an option to achieve S-Off with the latest update? Had my phones camera repaired and they update the software...
[Verizon HTC One (M7)] thiagopanda:
Have you considered Firewater? Method 2 did it for me.

http://xdaforums.com/showthread.php?t=2632351

S-Off & unlocked my One with this ^^^

HTC6500LVW

M7_WLV CID-VZW__001

HBOOT 1.55.0000

Radio 1.12.41.1112_2

Software OS 2.10.605.1

Android 4.3

Sense 5.0

Happy as π
[Verizon HTC One (M7)] brholt6:
Ya I jumped on that the day it was released. Very thankful. When I got my camera back there still wasn't any word on 4.3 being cracked.
[Verizon HTC One (M7)] tomglass:
KitKat 4.4.2?

Anyone know if Sonic's java card for S-OFF is still an option for a phone that has the latest 4.4.2 KitKat update? Thanks for any help or advice...
[Verizon HTC One (M7)] Frankie1588:
Wondering the same thing
[Verizon HTC One (M7)] coachcrey:
https://twitter.com/TeamAndIRC/status/443850349678321664

I'll just leave this here!
[Verizon HTC One (M7)] Frankie1588:
Awesome!!! I wonder if this means S-OFF can also be achieved.
[Verizon HTC One (M7)] scotty1223:
as long as the exploits used by firewater are still working,then yes. i think 4.4.2 just broke the current temp root method.
[Verizon HTC One (M7)] coachcrey:
From my understanding you are correct sir
[Verizon HTC One (M7)] cartisdm:
Looking at Sonic's post history, he hasn't been active since November. Does anyone know if he is still offering this service? Someone in another thread mentioned some guys were offering javacard s-offs for $75 but that's too rich for my blood. I'll gladly pay the $25 though if anyone has something available...
[Verizon HTC One (M7)] cartisdm:
Sonic is active again. He is promising news soon. I'm assuming that means he'll be ready to start taking on M7s and M8s with his javacard service again. We'll all be waiting with our fingers crossed :D
[Verizon HTC One (M7)] isdnmatt:
I believe tampered goes away once you have S-OFF simply because the phone no longer checks for such things. In the case that it doesn't go away, I'm sure there will be hex edited HBOOTS that will make it say whatever you want. I will probably make one that says Locked (even though its unlocked) and S-ON even though its S-OFF. There is danger in that though if you forget that your phone is S-OFF. It will take a little longer though because if you brick your phone you can't just get another and software S-OFF, so there is zero tolerance for error in editing HBOOTs at this point.
[Verizon HTC One (M7)] droidrev71:
Apparently it hasn't gone away after s-off. I figure at some point something will be available to get rid of it. I know there are a couple different terminal commands with other s-off devices..just not sure about this one. If you can get something together that would help that'd be great. I think I might be the only one with the tampered badge and s-off. I'm thrilled to have s-off! Just a little concerned when I keep seeing I shouldn't have tampered still after s-off. As long as I can flash and I don't have to send the phone in for warranty issues I'm good.
[Verizon HTC One (M7)] isdnmatt:
You can always flash the stock recovery before you send it in and "Tampered" will go away anyway.
[Verizon HTC One (M7)] droidrev71:
I already sent it in. It was s-offed yesterday.
[Verizon HTC One (M7)] isdnmatt:
Before you send it in for warranty issues.
[Verizon HTC One (M7)] oletheos:
the fastboot oem writecd VZW__001 i have a question about.

i've been away from android for 2 years, had a droid incredible before my iphone and now im back with a ONE, and thinking about sending in for the s-off and getting my feet wet again in all this rooting stuff, its changed a lot since the incredible. so back to my question, where or how do you input the above fastboot command?

also, is there a step by step yet for wwhen we get our phones back? say?

1 pay for s-0ff

2 send

3 recieve back

4 change cid to unlock

5 unlock

6 change cid back

7 recovery of choice

8 play time?

thanks all, and big thanks to sonic for making all this discussion and fun possible
[Verizon HTC One (M7)] droidrev71:
Ok. Ty
[Verizon HTC One (M7)] PapaSmurf6768:
To preface this, you need to have ADB installed, which I'm not going to get into right now.

To do a fastboot command, you power the phone all the way off, then turn it back on while holding volume down. This will get you into the bootloader menu, where you enter fastboot by selecting that option with the power button. Then plug your phone in to your computer, open the window where you have ADB installed and Shift-Right Click it to open a command window there. Then you enter the appropriate command.

The steps you have listed there look good to me.
[Verizon HTC One (M7)] scotty1223:
you dont need number 4,the phone comes back supercid.

i promise im going to give a more detailed how to,but ive been sitting at the puter and messing with my phone for about 2 hours trying to figure out this tampered business,and my eyes are going crossed :p

anyway,you have 2 basic options.

option 1)unlock

basically what you said,but without step 4:

1 pay for s-0ff

2 send

3 recieve back

5 unlock

6 change cid to stock vzw

7 recovery of choice via fastboot flash recovery recoveryname.img

8 play time

option 2)dont unlock :p

1 pay for s-0ff

2 send

3 recieve back

6 change cid to stock vzw

7 recovery of choice via fastboot flash zip recoveryname.zip (using special recovery packaged zip file)

8 play time

*note that in either case playtime can mean installing a custom rom,or simply installing superuser

sorry i wasnt real clear on that,the xxxxxxxx is indeed just any carrier/regional cid. it can be supercid(11111111,22222222,etc),it can be HTC__001,VZW__001,CWS__001,etc

has sonic confirmed that that your phone still reads tampered? my one x was unlocked and tampered and from the pic it is now neither. one thing i did,was install the factory recovery,and do a factory reset. i honestly am not sure if the tampered badge went away then,or was still there when it got to sonic. i wish i had thot to mention it,you prolly should not have sent the phone in with a custom recovery,as the diag file does do a factory reset,wich the custom recovery cannot do. if the diag process left your tampered it may have been becasue the stock recovery was not in place.

having said that,i s-offed my t mo one with revone. ive always been tampered and not cared. i decided to see what i could do to get rid of it. i was running a mix of firmware and a custom rom based on leaked eurpean 4.3.

-first installed stock recovery(from most recent t mobile OTA). no go,still tampered

-factory reset in hboot. no go,still tampered

-then installed stock boot image(from most recent t mobile OTA). still no go,still tampered

-installed entire firmware package from most recent t mobile OTA, you guessed it,still tampered :mad:

finally i ran t mobiles only available ruu,wich is for the most recent build. finally! no more tampered. revones tool would have removed it,but that woudlnt have helped you,as the tool does not work with 1.54+ hboots.

at any rate,fear not,if your phone is indeed still tampered,as long as an ruu is released,youre good to go to get rid of it. its also possible we will learn the location of the tampered flag,so that spot can be changed with a hex editor,or an adb command. obviously the revone team knows it,since their tool can turn it off :eek:

hope that eases your mind some. rest assured,once youre s off and untampered,it wont come back :)
[Verizon HTC One (M7)] droidrev71:
Yes it's still saying tampered. Thanks for sharing what you've experienced. .I'm sure at some point, like you said, something will pop up to get rid of it. Well, if someone else that has an unlocked bootloader and recovery and sends their phone to sonic they can go back to stock recovery and learn from my phones experience. I appreciate your time and sharing your knowledge. I'm good with it all. I'm so glad to have s-off.
[Verizon HTC One (M7)] dottat:
Tampered only means non-stock recovery is loaded. At some point someone will make an edited hboot that will remove that.
[Verizon HTC One (M7)] scotty1223:
A hex edited hboot is not stock,and not signed. Just because the tampered badge can be visusally removed,does not change the flag. If you try and s on with this modified hboot ,you will have a brick on your hands.

While the hex edit is fine to elimnate the badge so you don't see it,its NOT the correct way to return to stock,and sending a phone in for warranty in this manner can cause issues for future users,and is plain and simple fraud.
[Verizon HTC One (M7)] deli pastrami:
Thanks for this informative thread. I went ahead and purchased a credit :D

I am very confused about how I can go about flashing updates (not OTA). In the past for my rezound, RUU's included radios/hboots/etc. I have no idea what the "latest" hboot/radio is for Verizon that I can safely flash without losing S-off or if i'd even lose s-off.

Also just to be clear, its

1- get java s-off

2- htc dev unlock

3- change cid back to VZW__001

4- do the usual recoveries/roms goodness

Also can I use the roms that are in the standard HTC One xda channel? Or only from here because there are only a handful of roms....

http://xdaforums.com/forumdisplay.php?f=2471

Thanks
[Verizon HTC One (M7)] dottat:
Yep yep and yep. I was only adding that to address the cosmetic problems some people have with that.
[Verizon HTC One (M7)] elgordo123:
Possibly stupid question

Just sent mine in to Sonic, one question I think I know the answer to but just to make sure: On the HTCDev site dropdown "Select Your Device" we want to select the "All Other Supported Models" right?

Thanks - :o
[Verizon HTC One (M7)] one4thewings:
Yep. You got it.
[Verizon HTC One (M7)] deli pastrami:
do you change the cid before or after htc dev unlock
[Verizon HTC One (M7)] one4thewings:
Your stock VZW HTC One has a CID of VZW__001. This identifies you to HTC DEV as a Verizon user which means you won't be able to unlock your device. You need to be able to change your CID before you can unlock.

And that's where Sonic comes in.

When he performs the S-OFF your CID is changed to 11111111. Which is the SuperCID. I don't know if that just happens as a result of the S-OFF or if that is something nice that Sonic does for us. In any case, once you have your CID set to 11111111, you can go to HTC DEV and request the key to unlock your bootloader.

Once you perform the unlock per the instructions on HTC DEV's site and your bootloader is unlocked, you'll want to run the command to change your CID back to the original Verizon CID of VZW__001. That command is present in the first post of this thread.
[Verizon HTC One (M7)] andybones:
mis-read post.

please ignore
[Verizon HTC One (M7)] one4thewings:
I went ahead and edited my response for clarity. If you misread it than someone else could too. Honestly after rereading it I could see how there might be some confusion. I think I fixed it.
[Verizon HTC One (M7)] deli pastrami:
Thanks for the clarification. Makes sense now.

So I assume that with s-off, you can basically change the CID at will in the future?
[Verizon HTC One (M7)] one4thewings:
You got it. The command is in the first post. My understanding though is aside from changing it to 11111111 to unlock the bootloader, you probably want to keep it stock VZW__001.
[Verizon HTC One (M7)] CNexus:
No, you cannot flash roms from the other variants. There are different forums for a reason. Those roms are set up for different partitions and could potentially brick your device if you flash.
[Verizon HTC One (M7)] andybones:
+100000000
[Verizon HTC One (M7)] Derick60:
A thousand thank-yous for this thread. Got my phone back from Sonic today, got it unlocked without a problem, and changed the CID back. Outstanding work.
[Verizon HTC One (M7)] crazyg0od33:
does the CID change automatically when the phone gets S-Off?

And can someone explain exactly how that being changed lets us unlock the device? Does the CID change the big long string we paste onto HTCDev?
[Verizon HTC One (M7)] CNexus:
I'm guessing that it's embedded in there somewhere, because htc is able to block phones from using the tool by blocking certain CID's (in this case VZW__001)

And yes, getting S-OFF using the javacard gives you supercid
[Verizon HTC One (M7)] andybones:
I'd like to know this too, great question

it really is SUPER!
[Verizon HTC One (M7)] scotty1223:
supercid is not a "normal" result of s off. it is a normal result of using the diag file and java card to s off. radio secureflag,simlock,and carrier id are all part of the security data that the diag file wipes.

basically,you can think verizon for requesting HTC to keep the vzw one off the official unlock list. per this request,the idientifier token is checked for the model id and/or carrier id to make sure that the particular device is allowed to have an unlock_code.bin. using supercid simply fools htcdev into thinking the phone is not verizon. i believe that supercid is required,in order to forgoe the model ID check. i.e.,changing only the cid to say,HTC__001,wich is allowed to have a token,the device will still fail the check,due to the vzw mid.

supercid states(to htcdev,an ruu.exe file,or whatever else might ask) "i am universal,you can flash whatever"

the big long string,or identifier token, is different every time you request it,so changing the cid doesnt have an affect on what the acutal numbers are. the token does contain the new cid instead of vzw,so it does change it in that sense,and this is also why unlock_code.bin will fail once the cid is VZW__001 again. its all based on your phones individual cid,mid,imie,etc. changing any one factor changes the results for the identifier token,and as a result,unlock_code.bin.

hope that makes sense :)
[Verizon HTC One (M7)] andybones:
Hey Scotty will my old HTC dev unlock token from S-ON still work once S-OFF?

will my CID need to be stock for it to work?
[Verizon HTC One (M7)] scotty1223:
yes on both counts. the CID/MID check prevents you from getting an unlock_code.bin. since you have a working one,it should still work. you will have to change back to stock vzw cid.

if it does fail becasue some other unforseen factor has also changed,its no biggie,you can change back to supercid to unlock,or just install recovery as a zip file :)
[Verizon HTC One (M7)] andybones:
perfect, thank you, Sir!
[Verizon HTC One (M7)] RebelShadow:
Does anyone know how to flash a ROM file or zip via adb? I've heard it's possible but I've always just copied zips to the SD card and flashed through recovery.

Also, is it possible to mount internal storage in TWRP so one can read and copy files to there PC?
[Verizon HTC One (M7)] scotty1223:
you can find a bootloader-type file thru fastboot by putting the file into the adb/fastboot directory and putting the phone in ruu mode,snd using the command: fastboot flash zip zipname.zip

these must be properly packed up files with a correct android info text document and correctly named images inside. more detailed "how to" is in the second post.

there is no way to flash a rom with adb commands. you have to flash roms in recovery.

if you find yourself with a non-bootling phone and no rom to flash,you can flash it via the "adb sideload" option in recovery,or you can use adb to push a rom to data/media/0 adb push romname.zip /data/media/0
[Verizon HTC One (M7)] RebelShadow:
That's exactly what I was wondering, just in case I get myself in a bind. Thank you very much for the answer.
[Verizon HTC One (M7)] Derick60:
So, I've flashed the twrp, and superSu. I installed Titanium Backup, but when I opened the app, it told me to disable usb debugging. I can't even find developer options on this phone. Am I stupid or something?
[Verizon HTC One (M7)] andybones:
click the build # about 10 times.

in settings about phone
[Verizon HTC One (M7)] Derick60:
I think that worked, thanks. It just tells me that I'm now a developer. Nothing else I need to do?
[Verizon HTC One (M7)] andybones:
go into the new settings and set what u want..
[Verizon HTC One (M7)] Derick60:
Sweet. Time to uninstall some bloat! Thanks, again.
[Verizon HTC One (M7)] andybones:
Very welcome, Sir!

Time to try and relax and watch some 'Breaking Bad'. :)
[Verizon HTC One (M7)] Derick60:
The waiting is extremely painful.
[Verizon HTC One (M7)] andybones:
I knoww, and mine for their yesterday but needs sig requirement, so won't be picked up until tmw, hopefully tmw anyway, then sent back on tues.

all wroth it!
[Verizon HTC One (M7)] abrego47:
i have a quick question? when i place my order(that is for the s-off and for insurance on the way there or back? and before i ship it out i need to pay for return also right?:confused:
[Verizon HTC One (M7)] andybones:
Click on sonics profile and you'll find the website and you do it all in through there. :)
[Verizon HTC One (M7)] abrego47:
ok i will get it done thursday when i get paid! thanks
[Verizon HTC One (M7)] crazyg0od33:
Alright quick questions.

1) After i send this out and I am S-Off, what exactly do I then need to do to unlock the bootloader myself?

2) Once I unlock the bootloader, can I get back to S-On for that added security? Or is S-Off actually better?

Thanks!
[Verizon HTC One (M7)] scotty1223:
Those questions are answered in the first hand second post. :)
[Verizon HTC One (M7)] deli pastrami:
So is the reason that there aren't many roms atm mainly because of no s-off? or waiting on 4.3 ota? or both?

thanks
[Verizon HTC One (M7)] andybones:
VZW blocked HTC Dev unlock within 24 hour so only those who bought it very early first day got in..

[MENTION=4845298]Sonic2756[/MENTION] has a javacard (credits are going fast!) that will give you S-OFF, it costs $25 (GREAT price)

along with a choice of how you want to ship it which you pay for, either $15 which includes $600 insurance, or $5and change to ship it back without insurance (pay the extra couple dollars for the insurance..), same goes shipping the phone to Sonic, choose how you want to ship but some companies will not deliver to P.O. Boxes so you would need to send to Sonics house.

There is a bounty, and it's very possible that S-OFF has been found on this phone and not letting it out in public because we are getting 4.3 very soon, why give them the exploit?

We will prob see a software exploit after the 4.3 update, but why wait, Sonic is VERY profession, great to work with as well!
[Verizon HTC One (M7)] droidrev71:
storage

i received my phone back from the s-off procedure. i was unlocked, recovery and rooted when sent it off to sonic. everything seems fine except one thing. i have a extra storage showing up used in "other" the others seem normal. apps, music, photos and videos, and downloads all add up. I know i have about 6gb in twrp backups but no clue on the rest of the 15gb showing used in the others storage section. any ideas?
[Verizon HTC One (M7)] andybones:
This is very odd, hopefully someone can help figure this out..
[Verizon HTC One (M7)] droidrev71:
i hope so too. i may figure this out if i had more time.
[Verizon HTC One (M7)] andybones:
are you on a custom ROM?

if so which one?

also did you send your phone to sonic how?

were u already dev unlocked

I sent mine in twrp htc dev unlocked and rooted, he said that it would be fine though, so I trust him, just hope this get fixed :)

I am sure it will.
[Verizon HTC One (M7)] droidrev71:
i sent it to him on the stock rom, unlocked bootloader, twrp, and rooted. i received it back the same way but have the tampered badge, locked, and s-off.

so i restored one of my backups (newts rom) i'm going to unlock and and change cid and see if starting over will correct. i'll have to do it later though
[Verizon HTC One (M7)] one4thewings:
I noticed the same issue prior to sending it off to be S-OFF'd. I assumed it was probably a restore partition (being unfamiliar with the other partitions on the device) .. it seemed to be a fairly substantial chunk too. I'm not saying the S-OFF didn't do something else, but I am pretty confident this is a problem with stock devices too. It's not special to S-OFF.

Additional confirmation would be nice.
[Verizon HTC One (M7)] andybones:
so we can pretty much rule out that S-OFF was not the cause of this.

thank you

what ROM were you on when noticing this? Stock or GPE?
[Verizon HTC One (M7)] m4rk0358:
How large is a typical backup in clockwork or TRWP? Could that be the culprit?
[Verizon HTC One (M7)] andybones:
so basically something is taking up about 10 out of yout 32GB?
[Verizon HTC One (M7)] droidrev71:
about 2.1 to 3.2gb

---------- Post added at 02:07 PM ---------- Previous post was at 02:06 PM ----------

yes i believe it's close to ten. i haven't added up..no time to

---------- Post added at 02:10 PM ---------- Previous post was at 02:07 PM ----------

did you do a factory reset before shipping it? did you check the storage after that if you did a reset? did yours have an unlocked bootloader too?

---------- Post added at 02:14 PM ---------- Previous post was at 02:10 PM ----------

also my phone wasn't completely wiped after s-off. i still had my files in download and pics on the phone.
[Verizon HTC One (M7)] one4thewings:
I don't know if this helps at all, but for some reason 7GB sticks in my head. I think MY "other" folder was 7GB.

Mine was completely stock ROM wise. So VZW's build, I was running AZW EX to change appearance but it was still completely stock.
[Verizon HTC One (M7)] droidrev71:
so here's what i did. as i stated earlier i sent my phone in to sonic with an unlocked bootloader for s-off. i just got it back today and noticed the storage wasn't adding up. so i went ahead and changed the cid to VZW__001 and tried my original unlock code.bin. to my suprise a no go. so i changed the cid back to 11111111 and unlocked with a new unlocktoken code.bin so what normally happens when we unlock has happened and it wiped my phone so i should expect my storage issue to be ok at this point. i will keep an eye on it.
[Verizon HTC One (M7)] crazyg0od33:
when we get the phone back, it's wiped but I can still boot with no custom recovery right? I only ask because atm, I can't seem to access my phone in fastboot, so I wouldnt be able to flash anything. I want to S-Off, and then flash when i have the opportunity - just trying to make sure that's a possibility?
[Verizon HTC One (M7)] slacka-vt:
Sure thing. You can run it as stock with s-off. No problem. What kind of issue are you having with fastboot?

On a side note, what's the consensus with superCID ? Are most people reverting back to VZ CID after unlocking?
[Verizon HTC One (M7)] crazyg0od33:
I can access the phone in ADB when it's powered on but whenever I'm in bootloader (got there via adb reboot bootloader) my computer says 'unrecognized usb device' and I can't do anything to it. It doesnt show up under fastboot devices either