Radio S-OFF and SuperCID coming to a Desire HD near you

---

Just like the G2 (vision) we can now get radio s-off and superCID on our devices . there is also the chance of a sim unlock this way (i cant verify this working on the ace as mine is unlocked)

LOOK AT THE CID

#
INFOversion: 0.5
#
INFOversion-bootloader: 0.85.2007
#
INFOversion-baseband: 26.03.02.26_M
#
INFOversion-cpld: None
#
INFOversion-microp: 0438
#
INFOversion-main: 1.32.405.6
#
INFOserialno: HT0AXXXXXXXX
#
INFOimei: XXXXXXXXXXXX
#
INFOproduct: ace
#
INFOplatform: HBOOT-7230
#
INFOmodelid: PD9810000
#
INFOcidnum: 11111111
#
INFObattery-status: good
#
INFObattery-voltage: 3803mV
#
INFOpartition-layout: Generic
#
INFOsecurity: off
#
INFObuild-mode: ENG
#
INFOboot-mode: FASTBOOT
#
INFOcommitno-bootloader: 7eafc656
#
INFOhbootpreupdate: 11
#
INFOgencheckpt: 0

Although the steps are almost identical to the Visions method I would not recommend it yet. there are some simpler / safer tools on there way

[What Is Radio S-OFF ?]
Basically what we have at the moment is an ENG hboot that is ignoring the securflag value .... which means if you update an official RUU or just to a shipping hboot you will lose S-OFF. But with this you will always be s-off and therefore no matter what you wont have write protected eMMC even on a shipping hboot

[What Is SuperCID ?]
The CID (Carrier ID) is a string that the hboot looks at to see what RUU's you can flash i.e HTC__001 can flash WWE roms and VODA only Vodafone roms. With SuperCID (11111111) we can flash any rom from anyone

[Credits]
All the devs in #g2root that contributed I helped in no way to this hack it was all other devs im just relaying the info to the DesireHD users many many thanks .... although i was the first person to do the radio S-OFF on the DesireHD (ace)

[One More Warning]
Just to repeat i advise against trying to radio s-off with the g2 guide at this time as the method is messy and has a real chance of really messing things up .... if u try this now u are on your own ..... really

MODs ill replace this with a full guide when the method is safer

thanks apache the procedure is simliar to the "original" permroot/S-off process I see the only difference is probably the kernel, where I assume you used your own kernel mod/modified the vision CM kernel alongside a modified WPTHIS to match your kernel adaptation to make it work?!

As far as I understood it, this method patches radio to achieve S-OFF, SuperCID and unlock.

So, flashing a RUU or applying an OTA would revert this procedure?

Hi,

nevertheless could be the SuperCID independent from kernel,
as in older devices (HTC Hermes).

with friendly greet

starbase64

Closed for now so Dev can work his magic and we don't get 1000+ posts saying "thank you..this will be epic"

Apache...contact me when you are ready for me to re-open

Cheers,

M_T_M
Your friendly Mod