True it's for another chipset so the S-OFF portion won't work, but (and I may be wrong) I don't see a reason the SuperCID thing won't work for us, provided we find the right partition to edit.
http://xdaforums.com/showthread.php?p=26516911#post26516911
This is for the One X, and it's also confirmed to work on the One S, and they're editing /dev/block/mmcblk0p4 with root permissions. I'm ASSUMING that means that S-ON is only partially enforced. If we could get SuperCID, that's be a huge step in the right direction, would it not? Does anyone know what that partition actually is, and what the analogous partition on the One X+ is?
__________
Upon further investigation, /dev/block/mmcblk0p1 through /dev/block/mmcblk0p11 are all -something- though none of them contains strings for my CID or IMEI. HOWEVER, /dev/block/mmcblk0p9 DOES contain the string value for the last RUU flashed, which in my case is 1.17.401.1, with the entire rest of the file being padding.
There are more partitions, beyond 11. They actually go up to 20, as per ls -la /dev/block/, but everything beyond 11 seems to be excessively large.
-------
Sorry for the continuous posting, but I'm investigating. Anyway, the command "ls -la /dev/block/platform/sdhci-tegra.3/by-name/" yields a partition map with names.
lrwxrwxrwx root root 2013-02-19 11:08 APP -> /dev/block/mmcblk0p12
lrwxrwxrwx root root 2013-02-19 11:08 CAC -> /dev/block/mmcblk0p13
lrwxrwxrwx root root 2013-02-19 11:08 DLG -> /dev/block/mmcblk0p18
lrwxrwxrwx root root 2013-02-19 11:08 DUM -> /dev/block/mmcblk0p15
lrwxrwxrwx root root 2013-02-19 11:08 LKM -> /dev/block/mmcblk0p20
lrwxrwxrwx root root 2013-02-19 11:08 LNX -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 2013-02-19 11:08 MSC -> /dev/block/mmcblk0p16
lrwxrwxrwx root root 2013-02-19 11:08 PDT -> /dev/block/mmcblk0p19
lrwxrwxrwx root root 2013-02-19 11:08 PG1 -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 2013-02-19 11:08 PG2 -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 2013-02-19 11:08 PG3 -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 2013-02-19 11:08 RCA -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 2013-02-19 11:08 RFS -> /dev/block/mmcblk0p17
lrwxrwxrwx root root 2013-02-19 11:08 RV1 -> /dev/block/mmcblk0p11
lrwxrwxrwx root root 2013-02-19 11:08 SIF -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 2013-02-19 11:08 SOS -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 2013-02-19 11:08 SP1 -> /dev/block/mmcblk0p10
lrwxrwxrwx root root 2013-02-19 11:08 UDA -> /dev/block/mmcblk0p14
lrwxrwxrwx root root 2013-02-19 11:08 WDM -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 2013-02-19 11:08 WLN -> /dev/block/mmcblk0p1
This is from CM10.1, with the latest BLADE kernel, radio 3.1204.167.31 and HBOOT 1.35. Does anyone know what's what here?