yashsingh1/xdaforums huggingface dataset:
[Windows Phone 8 General] tfBullet:
You might take a look at these: http://174.120.45.27/tmp/920_AFP_V2/

since qfuses are kinda 'rocket science' - MAYBE, and thats a big maybe!

blowing a qfuse isn't like cutting a wire, as you might think first.. when you 'blow' a qfuse, the resistance of it changes..

it might be possible by underpowering, so that a exact measurement isn't possible... but that's just theory..

it mainly depends on the implementation of the qfuse-check.. you can checkout this fore a better idea how it could work: http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html

actually thats a huge fail in the implementation, and i don't think Nokia has been so careless with theirs,

especially as they're cooperateing so closely with MS..
[Windows Phone 8 General] reksden:
htc 8x update firmware

based on it can be soft for disassembly of the firmware? :confused:
[Windows Phone 8 General] rumblpak:
Microsoft isn't exactly known for perfect e-fuse implementation. Just look at the xbox 360 as an example. You could intentionally burn all of the efuses before microsoft did to prevent any future restrictions being added to the system. People did just this for a long time until they found the current timing attack method.
[Windows Phone 8 General] TheIronMaiden:
[MENTION=5736292]myst02[/MENTION] probably bricked his phone.
[Windows Phone 8 General] myst02:
What? No, I didn't brick my phone. How do you figure?
[Windows Phone 8 General] TheIronMaiden:
haven't heard from you lately, you usually keep up with the discussion lol I was only kidding
[Windows Phone 8 General] jordanmills:
Has anyone considered just replacing the SOC? Sure there would be moderate cost (what does an MSM9860 run, like $10 now?) and some basic skill required to solder a BGA component but that's not especially hard. Assuming you have a decent supplier (anyone got connections in shenzen?) you would get a factory new msm8960 with qfuses unblown.

Or, if you're lucky, you could stumble across a hash collision with keys in the KEK and PK.

At that point you could create your own bootloaders (or just own the PK).

The real questions are what level of checking and enforcement are performed by windows. Does windows verify the UEFI/bootloader file(s)? I wouldn't think so, since there's little guarantee that they would be consistent across platforms and versions. When windows performs signature enforcement on executables, does it check to the internal certificate store, or does it have a hash hard-coded somewhere in the file doing the checking (or is it done at the kernel level)?

The way I understand it, there's a one way handoff as the system transitions from UEFI code to windows code. The last part of the UEFI bootloader verifies the signature of the first windows boot file, then loads and executes. From there, windows does its own loading and executing. Current exploits are based on oversights much farther down the line.
[Windows Phone 8 General] GoodDayToDie:
Rgarding hash collisions: People tend to just Not Get modern cryptography. Do you have any idea how unlikely a collision even in SHA1 (160 bits) is? Here, let me illustrate for you... there are about* as many possible outputs of SHA1 (the *weakest* of the secure hash functions still in common use) as there are atoms in the moon. If you created one SHA1 input (in this case, a bootloader) input value for every single atom (not molecule, atom) in the moon, the odds are that *ONE* of them would have the desired (colliding) value.

You'd probably be better off trying to factor the public key used to verify the signature, so you could reverse the private key and sign your own binaries. Depending on the type and length of that public key, that *might* only several years of continuous work.

*probably "slightly" more, but it's within an order of magnitude. At the size of numbers we're talking here, a mere factor of 10 doesn't mean much.
[Windows Phone 8 General] tfBullet:
check this out:

Windows Phone 8 Flashing Started
Loading Flash Files Please Wait...

================================================== ====
Windows Phone 8 Lumia Flasher
================================================== ====

If the Phone is ALIVE
1. Power On the Phone and Connect it to the USB Port

If the Phone is DEAD
1. Connect Phone to the USB Port
2. Press and Hold the VOLUME DOWN and POWER Buttons
3. Wait until the Phone Vibrates Shortly...
4. Stop Pressing the Buttons...
================================================== ====

Version: 1.1.1.2
Module Code: 0205138

Boot Flash Mode Successful...

Phone Info Query Start...
Blocks Returned: 0x07 Blocks
Block ID 0x01 : 00241000
Block ID 0x02 : 00240000
Block ID 0x03 : 03A3E000
Block ID 0x05 : Nokia.MSM8960.P4301_ATT.3.2.1
Block ID 0x0D : 0001
Block ID 0x0F : 0301000100000001FF
Block ID 0x10 : 0100030000
Checking SD Card Size...
Card Size: 0x00000000
Checking Platform Security Status...
Platform Secure Boot Status: Active
[U][B]Secure FFU EFUSE Status: Not Active[/B][/U]
Debug Status: Active
RDC Status: Not Active
Authentication Status: Not Active
UEFI Secure Boot Status: Not Active
Checking Secure FFU Mode...
Secure FFU Mode : SYNC + ASYNC
Query Flash App Information...
Flash App Information: 020107010C00
UEFI App: FLASH APP
Flash App Protocol Version: 1.7
Flash App Implementation Version: 1.12
Query ROOT KEY HASH...
ROOT_KEY_HASH: 00E9427DF118D9E27D098D13BECB6C6C89CE59F4ECCF5549C4 9BC0DB952A6BB4

Sending Image Signatures...
ERROR: Flash Signature Block REJECTED!
This Flash File is NOT COMPATIBLE with this Phone.
ERROR: Flashing Failed!

================================================== ====
Flash File Checksum Verification
================================================== ====
RM822_1232.5957.1308.1004_RETAIL_apac_prc_204_04_1 45826_prd_signed.ffu: CHECKSUM PASSED
================================================== ====
Verification Done...

source: http://forum.gsmhosting.com/vbb/f609/lumia-920-jtag-halt-problems-solution-inside-1705844/
[Windows Phone 8 General] tfBullet:
I'm not shure... depends on how the developers of ATF-Box (?!) meant "Not Active"...

I'm waiting for my paycheck, to get my hands on proper hardware atm...
[Windows Phone 8 General] jordanmills:
Actually, I get it pretty well. I work with a part of applied cryptography for a living. You don't seem to get what I'm saying. I'm not talking about finding a key that matches the hash that's in the PK or KEK. I'm talking about finding a hash that can match the mask of the burned hash.

Unless I completely misunderstand the way the qfuses work, they're just a kind of EPROM with a brand name. When burned, they're 1 and can never change. When unburned, they're zero, but can be burned to 1. As long as you find a hash that does not have low bits where the burned hash has high bits, you can burn the new hash in (via jtag, escalation exploit, etc - another complicated bit, but the first big hurdle would be passed). The difficulty of finding a collision basically depends on how many burned bits are in the key you're trying to compromise. While not trivial, it's orders of magnitude less complicated than you seem to think.
[Windows Phone 8 General] GoodDayToDie:
It is possible I misunderstood how the efuses (with regard to code verification) works, but I don't think so. The method you're describing is fraught with all kinds of issues. For example, (legitimate) updating becomes a real problem. Also, for masks with a low number of bits, it becomes entirely too easy to find a usable mask. Each unburned bit becomes a don't-care, effectively knocking one bit off the digest size. The search space is reduced drastically even at 50% of the bits being burned. I really doubt that's how it works.

That said, bootloaders and firmware are not my strong point. I certainly could be wrong.
[Windows Phone 8 General] jordanmills:
That's exactly why it's such an easy vector to use. The only real catch is that with normal operations, you need to have any updates to the list of hashes authorized with a key with a hash that's already in there. That has to be circumvented (as you're well aware, finding another key with a matching hash is practically impossible).
[Windows Phone 8 General] reksden:
huawei w1

huawei w1-u00 files that are not removed when the firmware.

files
[Windows Phone 8 General] reksden:
new xap

http://www.silenstd.com/silenall/silentech/highxap/
[Windows Phone 8 General] patraaas:
there is no jailbreak on windows phone #IMO
[Windows Phone 8 General] GoodDayToDie:
Well, aside from capability-unlock for Samsung and Huawei phones, you mean? OK, it's not a "full" jailbreak (no arbitrary code execution as SYSTEM yet) but it's pretty good.
[Windows Phone 8 General] TheIronMaiden:
This thread is full of crap. Bunch of misguided guesswork. Thats what bothers me the most. Empty promises. Appreciate the effort but still.

Sent from my Nokia Lumia 920. Yep I'm a winblows fan. What of it?
[Windows Phone 8 General] tfBullet:
if you really appreciate the effort, why do you say stuff like that?

if you can, do it better - go for it.

i'm working on my 920 right now, i'm about to buy some (not too cheap) jtag equipment,

i spend a ****load of time in research, trying stuff out and risk my phone.. this takes time.

nokia (in cooperatin with ms) did a decent job, implementing the security...

i'm shure everyone that participates does the best he can to get this done,

but that kind of comments won't get us nowhere, rather they kill my motivation..
[HTC One Max] htct6:
Hi People,

I have to admit life with my finger print scanner has been great :D

But I want to put my HTC One max completely back to stock. Rom, Kernal, recovery, the lot.

Just one problem i can not find the original RUU for the phone. I must have deleted it or something :crying:

The details of my device are attached.

As far as i am aware i am still using the original ROM that came with phone.

All i have done was unlocked the bootloader, flashed a custom recovery (CWM) and then managed to lock my boot loader using firewater.

I am now S-off but like i said i want it back to stock completely.

Can someone please help me out again by letting me know how to do a back to stock and where i can find a stock RUU

Thanks again
[HTC One Max] thayl0:
Is this the Ruu your looking for

http://xdaforums.com/showthread.php?t=2643973
[HTC One Max] htct6:
[MENTION=2736700]thay[/MENTION]10

thanks for getting back to me.

I'm not sure if this ruu is ok for me to use as its a 708. and the one i have is a 401
[HTC One Max] Wonders_Never_Cease:
I do not believe there is an ruu for 1.54.401.1,just the custom rom that was posted
[HTC One Max] htct6:
Hey,

thanks for that.

I cant believe that the original RUU does not exist.

Oh well that's me screwed then :silly:
[HTC One Max] farazhassankhan:
You can restore a CWM backup of 1.54.401.1 and then flash a stock 1.54.401.1 recovery in fastboot and then factory reset your phone in Stock Recovery. This will take your phone back to stock state and you'll be able to receive OTA for 4.4 also.

All you need a stock nandroid backup of 1.54.401.1 and stock recovery.
[HTC One Max] htct6:
Hey farazhassankhan,

Thanks for the info. I have done everything apart from the factory reset from the stock recovery. I've flashed the stock recovery on the phone. But I have no idea how to do this, as all that shows up while I'm in the stock recovery is a picture of a phone with a red triangle with an exclamation mark though it. Is there a way to access a menu or something?
[HTC One Max] farazhassankhan:
Yes, there is a way. Click on "Recovery" in bootloader and wait untill it passes htc screen. Then press "volume up" and power button couple of times and then keep pressing Volume up.

There will be a message:

mount SD Card failed 1

mount SD Card failed 2

mount SD Card failed 3

mount SD Card failed 4

mount SD Card failed 5

and there must be a Stock Recovery menu (in blue) on your screen and there you can factory rest your One Max.

Please bear in mind that factory reset will wipe all your date (inculding media file such as pictures/songs/downloads etc) from phone and you'll have to set up your pbone again

You should be able to receive 4.4 OTA (if available for your region yet)
[HTC One Max] htct6:
[MENTION=1195664]japodude[/MENTION] & [MENTION=4514094]farazhassankhan[/MENTION]

Just want to say a massive thanks to you both [MENTION=1195664]japodude[/MENTION] for uploading your stock nandroid back up and [MENTION=4514094]farazhassankhan[/MENTION] for helping me get back to complete stock.

Massive :good: thank you
[HTC One Max] japodude:
your very welcome. glad i could help someone.:cool:
[HTC One Max] farazhassankhan:
No Problem bro. XDA Community is all about helping each others. Cheers.
[HTC One Max] Spar1900:
I want go back stock rom, i got installed Unsecure Kernel and SuperSU but my phone just stay on BOOT logo.

I can't do S-OFF cuz said "ERROR: run rumrunner again and READ (no adb connection to device. Debugging on

Drivers?)

Press ENTER to exit"

I just want go back to stock and use my phone :crying:

Details:

-Htc one max international version.

-OS-2.61.708.1

-Radio-4T.24.3218.09

-T6UL PVT SHIP S-ON RH

I am new on this, please if u can. HELP ME!
[HTC One Max] htct6:
Oh mate i feel for you i know that feeling very well.

I used Firewater to s-off.

I then flashed a stock nandroid backup kindly provided in this thread. Then flashed stock recovery.

Chances are its the unsecure kernal causing this boot loop. I'm not an expert though. there is a 708 stock rom on somewhere on these forums

so you could try flashing that to the phone.

I'm sure you will get it sorted with the help of the kind people on here.
[HTC One Max] japodude:
try flashing the boot.imgvfrom the nandroid backup i shared.

or is it because you did have kitkat as your bootloader shows os 2.61.708.1. is the stock 1.54.401 conflicting with what hboot says stopping it?

install twrp recovery and install virtuous one max 2.0.2. least your phone will come back on hopefully.
[HTC One Max] Spar1900:
I can install Virtuos with no S-OFF? I am S-ON i i cant S-OFF i dont know why.

--------EDIT--------

Dude, i flash this boot.img "dont let me upload the link haha" (i can send u too PM) and work perfect, now i do S-OFF with Firewater and works too.

Boot loop, atm solved. Now i will go recover Fingerprint Scanner.

Thanks for all [MENTION=1195664]japodude[/MENTION], i will comment in a few minutes, and i will upload my backups!
[HTC One Max] japodude:
my Hboot is 2.47.0000.

i think thats you problem, the hboot is too new for the stock 1.54.401. i used firewater on hboot 2.47 to gain s-off. dont know if firewater works on hboot 2.49

unless you get s-off, i don't think you can downgrade the hboot. fingers crossed the virtuous rom should work for you my friend. as virtuous is based on the ota, in theory it should be fine with your hboot.

your best bet might be to get the boot.img from the ota for your region.
[HTC One Max] Spar1900:
SOLVED, i am so happy now and i can say that I love u hahahahaha! I flash the Boot.img from Virtous and work fine. Thanks for all dude.

In a few minutes i will upload my backups!
[HTC One Max] japodude:
glad you got it working. be interesting to see if firewater works with your hboot. ps, i used firewater on stock kernel just rooted
[HTC One Max] Spar1900:
S-OFF work perfectly on my HBOOT 2.49 using Firewater.
[HTC One Max] japodude:
sweet! now you can do whatever you want :good:
[HTC One Max] Spar1900:
Thank to you [MENTION=1195664]japodude[/MENTION] really nice support!
[HTC One Max] japodude:
your very welcome. i've been in same situation.

xda is the best place for help.
[HTC One Max] cescomanto:
Hi all ! I have a one max 8060 dual sim unicom china version and i have cwm recovery, rooted and s-off. I am not able to install ota from 4.3 to 4.4 and i would like to return to stoxk recovery to install it. I tried by fastboot writing in cmd fastboot flash recovery recoverynamestockxxxx.img but it say sending ok and writing to phone error...
[HTC One Max] matthewtech770:
Hello I'm trying to S-off what are the commands step by step I'm on windows 8 I have adb and all driver's installed but not working for me. Thanks.
[HTC One Max] mohamad zarin:
help me

hi guys

please help me to flash stock rom

--------------------------------------

*** TAMPERED ***

*** UNLOCKED ***

T6UL PVT SHIP S-OFF RH

CID-T-MoB101

HBOOT-2.49.0000

RADIP-4T.25.3218.07B

OpenDSP-v33.120.274_T6.0829

QSC-

OS-2.62.111.2

eMMC-boot 2048MB

Apr 2 2014,17:09:15.0

-------------------------------------

my recovery TWRP v2.7.1.0

supersu installed

-------------------------------------

(((help))):

im needed update system my htc one max to new stock rom and orginal phone

soory im not speak english veery nice.

im in phone downloaded ota update this name:

OTA_T6_UL_K44_SENSE60_MR_TMO_DE_3.18.111.3-2.62.111.2_R_release_383825.zip

im click to update and click okey

my phone restarted and show me bootloader

----------------------

*** TAMPERED ***

*** security warning ***

----------------------

???

What i do?:crying::crying::confused:

....................................................................................................

im going to recovery and install this rom zip file but faild install
[HTC One Max] melina123:
Sorry for bothering you , I have a problem i bought htc max second hand

I have a quastion:

I have a htc max:

Locked

T6ul pvt ship s-off rh

Cid:11111111

Hboot-2.49.0000

Radio-4t.24.3218.09

Os-2.61.401.3

I just wanna to have sense 6 on my device and I have allready flashed my softwear version and now i have a wifi problem on some wifi it will connect on some not it just sayes disabled I dont know why I have flashed the original ruu file, and i cant find the ruu file 3.23.401.1 to flash it normaly from my sd card.

If you can help me please solve my problem with wifi or how to update my device that would be great and I didint root my phone , thx.
[HTC One Max] prince537:
Please help me

hello

(bootloader) version: 0.5

(bootloader) version-bootloader: 2.49.0000

(bootloader) version-baseband: 4T.27.3218.14

(bootloader) version-cpld: None

(bootloader) version-microp: None

(bootloader) version-main: 3.15.707.101

(bootloader) version-misc: PVT SHIP S-ON

(bootloader) meid: 00000000000000

(bootloader) product: t6u

(bootloader) platform: HBOOT-8064

(bootloader) modelid: 0P3P60000

(bootloader) cidnum: HTC__038

(bootloader) battery-status: good

(bootloader) battery-voltage: 4256mV

(bootloader) partition-layout: Generic

(bootloader) security: on

(bootloader) build-mode: SHIP

(bootloader) boot-mode: FASTBOOT

(bootloader) commitno-bootloader: dirty-1f512bb6

(bootloader) hbootpreupdate: 11

(bootloader) gencheckpt: 0

all: Done!

finished. total time: 0.041s

I have this HTC one max and i need a ruu for it to flash . please help me. thnx
[HTC One Max] Nickw1978:
I need help

I have an HTC one t6ul from taiwan and I s-offed with rumrunner with no issues or problems. I had hboot 1.47 everything was good I updated to 4.4.2 and hboot 2.49 and now I am on lollypop and so forth the problemis now my gps is weak ever since i upgraded to 5.0 and i kind of wish i stayed on 4.3 and I cannot find any original roms for this device anywhere and I dont get it I mean I see 101 things for the m7 out there but nothing for my phone is there someone on this site that you know of that has original roms otas etc for the HTC one max for taiwan?
[Android Stick & Console Computers General] Vicolodo:
Hello,

i know there is a way to unbrick a device that is hard bricked,

when there is no way to access it by the pc

It is called 'Google Mask Rom Mode'

To put the device in this mode, must be located the NAND module on the device, and shortened two pins

Someone knows how to locate the NAND module in an android tv box?

For example, this is the board of my tv box (T-R42):

https://www.dropbox.com/sh/fnz01w8ylpxuzxi/sOhYmxt4Lf/Foto%2025-02-14%2021%2053%2050.jpg

Where is located the NAND module?

Thanks!!
[Android Stick & Console Computers General] fakotibor:
Is not T-R42 but it can help you:

http://www.freaktab.com/showthread.php?10136-How-I-unbricked-TV01-CS968-V3
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mischief4l:
Hello All,

My S4 constantly shuts off after 3 seconds. Lets say the phone is off, and I just plug the usb cable into, the battery icon comes on, but then it shuts off after 3 seconds. If I try to go into download mode, its get there, but then shuts off.

I had the MDL Firmware on it with Loki and it was working fine. Now I just want to flash back to stock, but the phone wont stay on long enough. I also tried different batteries.

Any idea on whats wrong or how I can successfully flash back to stock
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] dmc2359:
First thing I would check is to see if your power button is stuck......
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mischief4l:
Doesn't seem like it is.i can press the power button and I can feel it push back
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] DeadlySin9:
Are you using the cable and wall plug that came with the phone?
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] ardonie:
paying it forward !!!!!!

i had the same problem last week all week forum after forum seems like i keep ending up in virision forums .... any way my s4 I337 at&t was going to a battery symbol with no charge ....... could only boot into odin but like you said 3 secs .....after hours f trying to figure it out i gave up tossed my s4 on the living room floor and some how my USB cord was laying just right and it stayed on ....after playing with the connection that goes into my phone (origanl cord from at&t /samsung i relized i had a bad connection........ i used my teeth to clamp the middle tighter ...... secure connection phone stayed on threw out the flash process about ten mins .............. hope it helps this is what i flashed ...... http://xdaforums.com/showthread.php?t=2621279 if im long winded i apoligize but this is the first ive had a response to help some one :)
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mischief4l:
I actually charge my batteries in a standalone charger and I my gf has an S4, so the batteries are confirmed to be at 100%.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mischief4l:
Thanks I will try this out
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mess18:
Have you found a solution? I experience something similar: phone shuts down after the Galaxy S4 logo, or 3 sec after it enters download mode using a jig connector.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] mess18:
A way to repair

I suppose I have found what the problem is: after I have slightly hit the phone over my hand palm, I've realized it returned to function normally. But after a couple of hours the problem has return. So I tried to do that again and suddenly the vibrator stopped working. I make it short: several more attempts gave me a combination of improper functioning with or w/o the vibrator. So I had removed it completely and the phone started working OK. I have put it back and now the phone works OK. I believe the problem was in a bad contact with the vibrator. I'll keep playing with the phone for several days, and if it's OK I declare repair is 100% succeed.
[One (M7) Q&A, Help & Troubleshooting] mblacki:
I flashed an elementalx and bulletproof kernel but each time I do and reboot the screen just turns black and I have to go into recovery and recover a backup.

I'm rooted, unlocked, and s-on. I've flashed kernels before but this never happened.
[One (M7) Q&A, Help & Troubleshooting] nkk71:
Well which kernel (version) for which ROM?
[One (M7) Q&A, Help & Troubleshooting] mblacki:
I've tried bulletproof 8.1 and elementalx 8.4 both on Insertcoin for sense 5.5 and android 4.3.