S-off is Official!!! With Instructions...

Search This thread

NAU420

Senior Member
Apr 8, 2012
242
29
I used a rather long wire tie... you also have to be very accurate at getting pin 1 holding it and doing the 2 GRND shorts pretty much consecutively....

Also make sure you have a solid USB cable connection... I thought I had ruined my Micro-USB port on the phone but it turned out I just had a crappy cable...

Did you count for the 2nd grnd or use the flashing "do the wire-trick now!!" to tap the grnd?
 

fenguepay

Senior Member
May 21, 2011
264
60
Hey, hwo is the new hboot different and how do i get it. I did the whole process and then i stopped it once i got s-off. Do i ahve to rerunn the whole process then wait a long time after for it to give it to me. Im running on ICS. Is the hboot better?
 

m3Jorge

Senior Member
Nov 29, 2007
216
19
Tampa, FL
Did you count for the 2nd grnd or use the flashing "do the wire-trick now!!" to tap the grnd?

I just did the first tap separated only the GRND and did the 2nd tap right away no counting or anything...

If you think about it they ask to wait about 1.7 seconds that's about how long it'll take you it you do the 2nd one consecutively, but carefully...

I tried it like 10 times at the end was just tired of counting or trying to time it...
 

red3razor

Senior Member
Jan 27, 2012
429
375
I think i get the wire to work, but everytime i get:

Found device.... Please wait
error: device not found

SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alchohol level......
Let's take one more......
S-OFF Failed
Errorcode: 66732337
ErrorMsg: Still sober
 

fenguepay

Senior Member
May 21, 2011
264
60
I think i get the wire to work, but everytime i get:

Found device.... Please wait
error: device not found

SUCCESS - Taking a sip.
SUCCESS - Beer is tasty.
SUCCESS - Buddies and Beer
Checking alchohol level......
Let's take one more......
S-OFF Failed
Errorcode: 66732337
ErrorMsg: Still sober
u did wire trick wrong, retry
 

red3razor

Senior Member
Jan 27, 2012
429
375
i don't know if my timing is off the many times i've tried..... or it's something else?
 

andrix10

Senior Member
Feb 11, 2011
257
15
31
California
Here is a question I was asked.



You will need to reformat your SDcard between each attempt, as it wipes the card of all formating. It is basically empty memory with no usable file system.

Part of the process formats the card and then installs some files, then the "wire trick" (I am speculating) causes the phone to reboot and read the card. The second tap of the wire trick allows the files to run but interrupts at just the right moment to prevent s=on checks from kicking in and stopping the exploit from working.

Therefore timing between the two taps is critical... use a watch or other device that counts seconds to help get your mental counting at the right pace. The wire trick taps should be quick (I.E do not hold the wire to the contacts just touch briefly) and about 1.5 seconds apart.

At some point this corrupts the card's file system or wipes the partition table of the memory card, forcing a reformat. Without a format, the app can not install the needed files to the card.

"Still sober" means you mis-timed between the two taps of the "wire trick"

So even if u fail the wire trick it doesn't brick ur phone or anything right

Sent from my ADR6425LVW using xda premium
 
Last edited:
M

mr2324jgf

Guest
Alright, it took me like an hour, but I got me some s-off goodness :)

my take-a-ways...

1) If you see "no beer for bear tonight"... don't freak the hell out... think about how our phones work when you flash a bad boot image... pop a good boot image (one that came with your rom) onto your sdcard, load bootloader and flash....
2) You'll probably have to reinstall recovery, use the tools provided in dev to reinstall your recovery
3) wipe your cache, dalvik, factory reset/wipe....
4) try again
5) the "wire trick" isn't a mystery... once the phone says "waiting for device" pop that first contact wire in, press firm (i used a paper clip). Then tap... lift... tap... on GND. You'll know you did it right because the phone will say "waiting for device" after, then immediately (almost) show you the rest of your status messages. You'll know you're done when it tells you you're done, and you see S-Off in hboot...

good luck!
 

Marine6680

Senior Member
Jul 12, 2009
1,479
201
Kingsport TN
So even if u fail the wire trick it doesn't brick ur phone or anything right

Sent from my ADR6425LVW using xda premium

It is possible... but unlikely. There have been no reported bricks from this method. Only those that needed extra work to fix.

The lower contact is hard to get to and stay on accurately... its a tiny contact far down in the plastic, and the plastic hole does not extend all the way down acting like a guide. This means you can miss the contact or slip off the contact if you are not steady. Use plenty of length wire to help. I used 22ga wire, and stripped the end 3/8 inch, I had no problems and did it first try on two phones.

Those having trouble with the wire trick... I would bet you are missing the lower contact (or slipping off) or being too slow on the second tap. Try *TAP* release *TAP* or maybe *TAP* release with very brief pause *TAP* While ensuring you do not let the wire slip off the lower contact. Hold it steady and only move the upper part of the wire. Do not hold the wire to the upper contact... just a brief tap is needed.

I left my phone laying flat on the table, do not try to hold it while doing this.

I would suggest to inform the OP and the guys who came up with this exploit to say that 22ga wire works best.

I am off to bed guys... good luck.
 
Last edited:

TheRedmonian

Senior Member
Jun 6, 2011
397
565
Pensacola
i don't know if my timing is off the many times i've tried..... or it's something else?

It took me 6 times to get it to work. If you have your computer volume up the first time should make a noise as if you are plugging in your phone via USB. Just because it makes that noise and seems to be moving forward in the process doesn't mean your done, that is only the first wire touch. You have to touch the GND point a second time, almost 2 seconds later. You wont hear a noise on your computer the second time. If you stripped an insulated wire, I found that using the side of the wire on the GND point is more consistent than the point of the wire. Hope this helps. Just keep trying. I was about to pull my hair out and finally it worked.
 
  • Like
Reactions: ydoubleun

RKight

Senior Member
Aug 27, 2010
621
112
Louisville
I meet all the requirements. I tried this multiple times. After about 15 attempts, I started drinking. After 30+ attempts, and seeing my phone fly across the room three or four times, I've decided that S-OFF probably isn't for me. Congrats to those who have it.
 
  • Like
Reactions: michaelbsheldon

ydoubleun

Senior Member
Sep 10, 2007
98
8
i m having problem with this
======== ControlBear version 0.1 for JuopunutBear S-OFF ==========
Starting up......
Connect device...
Press ENTER to exit.....
 

ydoubleun

Senior Member
Sep 10, 2007
98
8
its on. and here is another error.
======== ControlBear version 0.1 for JuopunutBear S-OFF ==========
Starting up......
Program requires root, sorry.
Quit....
Press ENTER to exit.....
 

TheRedmonian

Senior Member
Jun 6, 2011
397
565
Pensacola
sorry, i m newbie here :p
how to unlocked and how to check it is unlocked or custom rom?

Start Here...

For Unlock.....
http://htcdev.com/bootloader

after you are unlocked.....

Root Method listed in this thread
http://xdaforums.com/showthread.php?t=1365654

You will want to read up on how to install a custom rom in the rezound android development section. You'll want to get comfortable with it before attempting this S-OFF method. You can get your self in a bind if you don't understand how to fix it when you break it.

Read carefully before proceeding with anything.
 
Last edited:
  • Like
Reactions: ydoubleun

Top Liked Posts

  • There are no posts matching your filters.
  • 110
    Fixes for Internal Memory and External SD card are at bottom of post!

    May be easier to make a completely new thread instead of people searching through the "s-off discussion" thread.

    I'm going to make a huge SD Card post right at the top because it seems like people still are overlooking it in the "s-off discussion" thread... Not trying to be a ****, just making sure people don't lose crucial information on their SD cards...

    Version 0.4 should not wipe internal memory anymore and should back up your external SD card: but I would still back up both just to be sure!!!!

    Here's the link for Instructions:

    http://unlimited.io/instructions/

    Read the Instructions carefully and thoroughly at least once before attempting. This will temporarily brick your phone. Don't be lazy. Don't forget this will format your SD card so save all your contents or use a spare!!! I used my old 2GB droid incredible sd card for mine...

    Prerequisites said:
    Prerequisites

    In order to use JuopunutBear you must meet the following pre-requisites:

    Be unlocked using the HTCdev bootloader unlock
    Be rooted (have superuser and/or an unsecured boot image installed)
    Have a spare microSD card, or to have backed up all contents of your SDcard
    Have fastboot and adb drivers installed and working (windows)
    Have usb debugging enabled
    Have a legth of insulated wire of sufficient length to join the contact points for your device. See images and videos for device specific information.

    Some notes:

    Make sure back cover is off before running program.
    Plug in phone before running program.
    Boot phone into ROM before running program, it will automatically boot into fastboot by itself.
    Don't do wire trick until after you run the program and tells you to do so!!!
    Make sure you have "USB debugging" enabled!
    If in Windows, right click program and make sure you click "Run as Administrator"

    This post sums up everything nicely...

    http://xdaforums.com/showpost.php?p=25154023&postcount=1289

    Instructions said:
    Instructions

    (Optional) Perform a full backup and replace your sdcard with one that you are willing to wipe.
    Ensure that your battery is fully charged.
    Choose the correct download for your device and operating system
    Extract the zip file to a new directory
    Verify the MD5 checksum for your download
    Read and/or watch the video for the device specific information for your device
    Run controlbear as admin(windows) or root or using sudo on linux
    Follow the on-screen instructions from ControlBear
    Do not press any of the buttons on the phone during the process.
    After doing the “wire-trick” yor phone will reboot. The sequence of the reboot may vary somewhat from that you see in the videos as these were taken during various stages of development.
    If you see the following message from ControlBear after doing the wire trick:
    ErrorMsg: Still sober.
    This means that you have been unsuccessful in implementing the wire-trick. Run ControlBear again.
    The usual casue for this is that you failed to perform 2 clean contacts or mistimed the wire trick.

    Your phone will reboot several times during the process, this is normal. ControlBear will tell you when it has finished whether sucessfully or not.

    Here's link for wire trick:

    http://unlimited.io/htc-rezound/

    Wire Tips:

    22ga wire fits almost perfect in the lower hole.

    Use a piece about 8 inches long and stripped the end for the lower contact about 3/8 of an inch and the other end just a small amount. Did this to two phones and it worked the first time both times.

    It was reported that the large coated paper clips work well too.

    Others are using odd objects or other weird improvised wires and having a lot of trouble. It seems to be one of the big sticking points.

    I honestly used a paperclip and it worked just fine. Not even insulated... even though they don't recommend it: you could use it as a last resort.... or wrap it with an insulated material. I didn't know the paper clip had to be because I was one of the beta testers.

    Don't make this mistake either.

    Wire Trick said:
    Wire Trick

    The “wire trick” is an essential part of the JuopunutBear S-OFF procedure.

    When instructed to do so by the program you must perform the “wire trick” which is done as follows.

    Obtain an insulated wire of appropriate length and gauge
    Insert one end of the wire into the hole where pin 1 is indicated in the picture below, ensuring that a firm contact it made with the metal contact at the bottom of the hole
    Briefly touch to other end of the wire to the contact marked GND in the picture below.
    Wait approximately 1.75 seconds and then again touch the wire to the marked GND.
    Allow the program to continue.

    Note: it may take several attempts of running the program in order to obtain the correct timing for the wire trick.

    The contact points for the “wire trick” are shown in the picture below.

    If you're not getting it after wire trick, keep trying! Timing is crucial!!!

    Don't forget this will format your SD card so save all your contents or use a spare!!!

    Picture of Points:

    rezound.jpg


    Video of Wire Trick:


    New ICS hboot should be included in the download now.
    http://xdaforums.com/showpost.php?p=25147001&postcount=1141

    Very nice thread walkthrough thread for fixing external SD right here!
    Fix for external SD is as follows:

    1. Install busybox
    2. adb shell busybox fdisk /dev/block/mmcblk1
    3. type o
    4. type w
    5. adb shell busybox fdisk /dev/block/mmcblk1
    6. type n
    7. select primary, then 1
    8. chose default sizes
    9. type w
    10. adb shell busybox mkfs.vfat /dev/block/mmcblk1p1

    For those of you having problems with internal storage, my apologies. We accidentally included the GB hboot.

    Download this:

    http://dl.dropbox.com/u/14779955/jb_hboot.zip MD5: b05336c08f709bf0a909205bcb95b951

    Put the phone in fastboot mode, then run the follwoing commands:
    Code:
    fastboot oem rebootRUU
    fastboot flash zip jb_hboot.zip
    fastboot reboot

    Ignore the green bar.

    Pretty much copied everything off the site, but it may be easier to use instead of switch tabs/windows... Good Luck...

    Disclaimer: I am not responsible for bricked devices or anything happening to your handset!!!! Just relaying the message


    If you're still having issues... The search button is your friend. :) There's a high chance your problem has already been solved. Either search this thread or the discussion of s-off thread. Don't know how to search? WELL NOW YOU CAN IN THIS SIMPLE TUTORIAL!!!!!

    Some more threads you might want to check out!!!!

    AR recovery and s-off ( fix )

    [FAQ] S-Off

    just got s-off? please read this.


    Oh yeah... ENJOY S-OFF!!!!!

    These guys put in a hell of a lot of effort into doing this process... Any donation would be greatly appreciated!

    Donate to JuopunutBear Team!!!
    9
    There really is a need for a comprehensive set of instructions (but I'm not quite free enough to do it myself). NOTE - THESE INSTRUCTIONS ARE FOR THOSE ALREADY ON THE ICS LEAK WITH HBOOT 2.21 AND AN HBOOT THAT READS "TAMPERED - UNLOCKED." If you are on hboot 2.11 or any other hboot, I can't say for sure whether the following applies to you. If you are on GB, I can't say whether the following applies to you. It was my experience only, and I was successful, and I'm just sharing because after 100+ pages of pretty much the same 10-12 issues, I figure I can at least try to make things easier.

    1. Don't try to get S-OFF if you are unrooted or have a locked bootloader. Read the darn instructions through from beginning to end, and review the OP's in this thread, and search for any issues about which you are curious. In fact, go read them again from beginning to end just to make sure you get it right, then come back here.

    2. BEFORE YOU START, make sure you have available both an *.img file and PH98IMG.ZIP of (1) your recovery; and (2) your boot image.

    3. PULL YOUR SDCARD AND USE A DIFFERENT CARD FIRST. I'm sorry, anyone who has whined about wiping their only card --- you shouldn't play with grown-ups; you didn't read the instructions. If you only have one card BACK IT THE HELL UP, cause it's gonna get wiped.

    4. Back up your "internal" SD card. If you're running 0.2 version of ControlBear, it shouldn't get wiped, but you never know what else is going to happen that could wipe it. (Mine was untouched).

    5. Gee, you could also do a Nandroid and save it to your PC.

    6. All the Juopunut files go in the same file directory on your PC as fastboot.exe and adb.exe.

    7. Kill HTC Sync if you're really still running it.

    8. Open a command line box; navigate to the directory where you have adb and fastboot (and controlbear.exe and the two supporting files, it's own boot image and its hboot.)

    9. Make sure you are admin on your PC.

    10. Make sure your Rezound is fully charged, back cover off, connect to a cable (but not yet connected to PC) and you have your insulated paperclip or whatever tool you're going to use. LOOK AT THE PICTURE to be sure you know where you need to touch the wires. You will have time. Put the phone face down on a table or desk.

    11. Consider having a metronome around or something to beat out 34 bpm so you know the frequency. Here's a 35 second track (in *.aac format) you can loop on your computer while you're doing it so you have a feel for the interval. I used this when I got S-OFF.

    12. Run Controlbear. When it tells you, connect the device.

    13. If it doesn't seem to see the device after a few minutes, kill it and start it over. Leave your phone alone.

    14. Eventually, your phone's going to start rebooting and you'll get a prompt to do the wire trick. You will get that prompt for a few minutes and you'll have repeated chances to do the trick. After that, ControlBear talks about beer and other nonsense, and either tells you that you are still sober (exploit failed) or otherwise just sort of sits there. After a few minutes, if you seem to be nowhere, kill ControlBear (close the DOS box) and restart it. Leave your phone alone. Ignore any prompts from the PC about devices connecting.

    15. Repeat #14 until: (1) ControlBear reports success; or (2) Nothing seems to be happening (and your phone has a green arrow pointing down and Juopunut on the front).

    16. If things are stuck that way for >5 minutes (AND you're seeing no changes in your DOS box, no information scrolling, words such as "mmm, tasty", try to reboot into bootloader on your Phone. You might already have S-OFF (that was what happened to me, even though ControlBear never reported success). Be patient, wait a few minutes. Relax. You aren't going to brick your phone. As long as you can reboot to bootloader, ANY bootloader, you aren't bricked.

    17. If you aren't S-OFF, go back to #14, if you are, go on.

    18. Power off the phone. PULL THE SDCARD. If it isn't your "default" SDCARD, you don't need it anymore, you can put your regular card in. If it is your ONLY card, format the card Fat32 on the PC using a card reader.

    19. Using a cardreader, put Juopunut's BOOTLOADER on my SD card as PH98IMG.ZIP (i.e., rename it, it's the file with hboot in the name), reboot to bootloader and accept the update. From the "new" Juopunut's hboot, power down the phone. Remove the card again.

    20. Using a cardreader, remove the PH98IMG.ZIP of the hboot from the SD card. Put the card back in the phone.

    21. Reboot to bootloader, selected fastboot, connect to your PC, using fastboot USB reflash Amon Ra. (You could also do this as a PH98IMG.ZIP if you choose by putting it on the card).

    22. Power off. Remove card AGAIN, put boot image on card as PH98IMG.ZIP (taking off the old PH98IMG.ZIP if that's how you reflashed Amon Ra).

    23. Reboot to bootloader and flash your boot image, either via fastboot or as an PH98IMG.zip cf. step 21.

    24. Power OFF, boot normally, which should finally get you past the Juopunut splash screen. You might even bootloop once or twice (I did), but you should get a normal boot at that point.

    25. Note, if you boot to bootloader, flash recovery, then go from bootloader directly to recovery you will probably have have issues. Instead, after step 24, Power off or restart into recovery AFTER you've successfully booted your ROM. Amon Ra should behave perfectly normal at that point.

    The preceding was my experience at any rate.

    Yeah, Unrevoked was a lot easier and quick for those of us coming from Incredible, but it really isn't impossible to do this if you remain patient, pay attention, and stay calm.
    6
    for anyone whos done it what kind of wire have u used?

    I used a paperclip that was insulated. So just wrap one up with electrical tape and that will be fine.
    6
    Its actually quite fascinating to me to see so many varied results and peoples' reactions to the process. I'm also starting to realize that most of the people in here will put pretty much anything on their phone (or do pretty much anything to it..) even when they clearly have no idea what they are even doing it for.

    I mean seriously, half the people in here trying to get S-OFF and driving themselves insane probably shouldn't even be worrying about it anyway. But they will do it anyway. And then the next thing they'll do, for no apparent reason and without knowing anything at all about them, is start flashing radios. Then the next thing they will say is they can't make calls anymore and can't figure out why...
    6
    What should I do???
    Give me a hand! Thank you

    LOL really? You mean you did all this stuff to your phone that could potentially destroy it, and you didn't even read all the instructions first??! OK, now go ahead and facepalm for a second....


    ...OK lecture over.
    1) Go to the development section, find the Amon Ra recovery thread, and find somewhere in there the latest version 3.15 and download it (check around page 48)

    2) extract the .img file to a folder somewhere on your computer where you have the fastboot and adb applications located

    3) turn off the phone. Boot it into fastboot by holding volume-down and power, then selecting fastboot at the menu

    4) plug phone into computer - wait for phone to say "fastboot - usb"

    5) type the command "fastboot flash recovery recovery-ra-3.15-gnm.img" to flash the file (make sure the filename matches, that was from memory)

    6) then type "fastboot reboot recovery"

    7) Once Amone Ra boots, go to the developers menu and then select install su from there.

    Yes, I just typed all that out for you, even though its all readily available with a simple SEARCH. You're welcome.