[Q] Can an S-OFF Desire help any dev's? I have one now.

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 5, 2010

• #1

Okay, YES I know this is on the limit for this sub-forum, but give me a minute to explain...

1. I have no Desire experience, hang out in the Nexus forums myself
2. I have an S-OFF Desire at the moment
3. I have no idea if this is commonly available or even useful
4. I SEARCHED (want the list: "s-off", "s-on", "unlocked bootloader", "bootloader", "unlocked H-BOOT", "H-BOOT", "is this worth my time", etc)

...and I only want relevant attention for 12 hours or so...

So, mods and peeps, bear with me... either please politely say "no" and close the thread or say "yes" and pm me.

gracis

 

H

hk5354

Senior Member

Mar 22, 2008

300

1

• Aug 5, 2010

• #2

it must usefull if you can clone the SPL out

 

R

rikgarner

Member

Oct 28, 2007

21

4

/dev/null

• Aug 5, 2010

• #3

If you could dump the hboot, it would definitely be worth a quick prod and a poke to see if its any use!

 

philicibine

Senior Member

Nov 21, 2008

625

230

Norwich

Samsung Galaxy Z Fold3

Google Pixel Fold

• Aug 5, 2010

• #4

We need a dump of this!

Sent from my HTC Desire using XDA App

 

E

Erik97

Member

Feb 6, 2010

36

0

• Aug 5, 2010

• #5

i hope this is useful and maybe a step forward to unlocking nand

 

StrongOneX

Senior Member

Jan 1, 2010

259

9

• Aug 5, 2010

• #6

[SteveJobsMode=ON]
This is fantastic. Its absolutely brilliant, Amazing, Beautiful that we found a device with S-OFF.

[SteveJobsMode=OFF]

How do you dump it??

 

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 5, 2010

• #7

I have fastboot but not adb... tell me how?

Code:

BRAVO UNKNOWN SHIP S-OFF
HBOOT-0.75.0000
MICROP-031d
TOUCH PANEL-SYNT0101
RADIO-(I just upgraded this)
05-Mar-2010

 

StrongOneX

Senior Member

Jan 1, 2010

259

9

• Aug 5, 2010

• #8

djmcnz said:

I have fastboot but not adb... tell me how?

Code:

BRAVO UNKNOWN SHIP S-OFF
HBOOT-0.75.0000
MICROP-031d
TOUCH PANEL-SYNT0101
RADIO-(I just upgraded this)
05-Mar-2010

Click to expand...

Click to collapse

Unfortionally google didnt have the answer

 

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 5, 2010

• #9

StrongOneX said:

Unfortionally google didnt have the answer

Click to expand...

Click to collapse

And you felt we all needed that confirmation?

 

E

Erik97

Member

Feb 6, 2010

36

0

• Aug 5, 2010

• #10

I hope a dev sees this and helps you dump the SPL

 

DesirableHTC

Senior Member

Jul 4, 2010

879

33

Leeds

• Aug 5, 2010

• #11

sorry for my ignorance, but what exactly is this S-Off? can someone give me a run down?

Cheers

 

StrongOneX

Senior Member

Jan 1, 2010

259

9

• Aug 5, 2010

• #12

could this be any help

http://www.gotontheinter.net/content/fastboot-cheat-sheet

 

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 5, 2010

• #13

StrongOneX said:

could this be any help

http://www.gotontheinter.net/content/fastboot-cheat-sheet

Click to expand...

Click to collapse

Yes, thanks although I know all of that (I make a quite popular rom for the Nexus)... I need the spl instructions... I have an offer for assistance on this tomorrow.

 

M

merlin051

Member

Jun 3, 2010

23

1

• Aug 6, 2010

• #14

a simialr thread posted for the n1,

hxxp://android.modaco.com/content/google-nexus-one-nexusone-modaco-com/311351/build-version-erd56c/

there is some adb stuff you might want to try.

ps, whats your boot animation look like?

 

Last edited: Aug 6, 2010

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 6, 2010

• #15

merlin051 said:

a simialr thread posted for the n1,

hxxp://android.modaco.com/content/google-nexus-one-nexusone-modaco-com/311351/build-version-erd56c/

there is some adb stuff you might want to try.

ps, whats your boot animation look like?

Click to expand...

Click to collapse

Just the android text with slight shimmer... nothing too exciting...

Had a look at the post... nothing new I'm afraid...

 

Last edited: Aug 6, 2010

B

bunny0007

Senior Member

Jun 14, 2006

253

58

Randers

Google Pixel 6 Pro

• Aug 6, 2010

• #16

Without know to much about it, i might think you need to use dump_image to dump the address block of the spl.
The nand architecture address layout might already be known.

 

sindrefyrn

Senior Member

Nov 19, 2009

294

78

Oslo

• Aug 6, 2010

• #17

DesirableHTC said:

sorry for my ignorance, but what exactly is this S-Off? can someone give me a run down?

Cheers

Click to expand...

Click to collapse

It's short for security off. A hboot with s-off will allow us to flash and boot custom images trough fastboot. Fastboot can be accessed by booting the phone while holding down the back key. Hboot is the second deepest partition on an Android phone, only beaten by the radio, radio bootloader is almost never used flashing from.

Things it can do for us... the most important command in fastboot is the boot command. It's not really helpful for end users, but developers can use it to boot their custom images before flashing to see if it works with the phone without risking anything. Since it's deeper than recovery it may give us write access to the system partition while normal booted (?). Hboot is also often called SPL (maybe not on desire, but at least on other devices), a hboot with security disabled is often called engineering's SPL.

My knowledge on this is mainly based on other devices. Some may be wrong or misleading. If anyone sees something wrong, please let me know.

 

X

xtcislove

Senior Member

Jan 17, 2010

1,616

431

Gummersbach

Nothing Phone 2

OnePlus 12

• Aug 6, 2010

• #18

I think its not the problem to extract the spl and patch it to s-off the problem is to flash it (it must be signed) or the SPL partition is r/o there some German users that ere very near to System r/w just wait they will post it!

 

I

ieftm

Retired Recognized Developer

Apr 17, 2008

291

1,761

• Aug 6, 2010

• #19

This has nothing to do with hboot. His CID is most likely set to supercid, eg 11111111.

S-off allows non-signature rom flashing, full rw nand access.

@ts: could you come on irc? Irc.freenode.net , ny nick is IEF.
I'm part of a team thats investigating this. Info from your phone
WILL help a lot! Just pm me asap please

 

djmcnz

Retired Recognized Developer

Oct 13, 2009

5,747

1,689

Auckland, NZ

OnePlus 8

Google Pixel 8

• Aug 6, 2010

• #20

Okay, have now slept...

So, it seems this is indeed relevant for this sub-forum so I'll reply here rather than via pm.

Where I am:

• have root
• have new radio
• have fastboot access

• do not have adb access
• can not flash any kernels here in XDA

I'm not a muppet and have adb working fine for my Nexus but for the life of me can not get it working on this Desire. HTC Sync does not recognise the phone as connected in any mode (Win7 & XP). I've used the Google and HTC drivers. I've used driver tools to remove the registry entries and reconnect phone, no joy. Although I do get "HTC Android Phone USB Disk".

I can't flash a kernel via a recovery .zip. In fact, even if I flash a rom from here on XDA the kernel fails to install. Bad block are reported on the boot partition which I realise is common. This does however mean that if I install a custom kernel to get a dump it will have to be VERY small.

I've had a few questions asking if I'm willing to dump it. Well, of course I am, that's why I posted...

I am trying to secure the device for the weekend EDIT: I have the phone for the weekend.

 

Last edited: Aug 6, 2010