yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 Development and Hacking] gentry33:
I see Chevron labs unlocker as just another option. You can still flash if you want to. You can still register through app hub. You can still register as a student developer. At this point I don't have an app to submit and $99 a year is nuts if I can't make it back. I am not a student so that's out. I'm also fairly new at this and see a lot of risks and time consumption with flashing. I like to be able to use the phone and not spend all my time tweaking it and possibly bricking it. If the unlocker is priced reasonably the the option to sideload a few apps and customize a few features that are not being addressed by Microsoft then it will be worth it to me.
[Windows Phone 7 Development and Hacking] sinister1:
Thanks gentry, but I don't know which ROM to use and might end up bricking my phone since it's an HTC trophy that came with NoDo pre-installed. If there is such a way to flash it, I'm all ears. Other wise I'll have to get a dev license through the app hub, what a freaking disappointment. I wish I still had my Win Mo 6.5 phone.
[Windows Phone 7 Development and Hacking] gentry33:
I have the same issue with roms for my htc surround. That is why I hope they don't ask an arm and a leg for the tool.
[Windows Phone 7 Development and Hacking] domineus:
uhm

what's to say that with chevron service that you will be able to even flash roms on your device? I think its a sideloading solution and while it can lead to further holes and exploits I think the two are separate things...

I think its a good option for non developers or people trying to develop especially if it offers more options than the student account which is limited to 3 apps to sideload.

Now if the solution has unlimited app sideloading I will definitely use it. Heck even 10-20 xaps is an improvement over 3
[Windows Phone 7 Development and Hacking] gentry33:
Regarding roms, what I meant was in nodo the only way to unlock for free currently is to flash a pre-nodo rom then install wp7 unlocker, then you have to regedit to prevent relock. That's a few hoops to jump through. Until someone here jailbreaks nodo and puts it out there these are our options.
[Windows Phone 7 Development and Hacking] sinister1:
If someone could direct me to where I can find step by step directions on how to flash my HTC Trophy 7 (U.S) phone the I will flash it otherwise I sh#$t out of luck.
[Windows Phone 7 Development and Hacking] colossus_r:
Here you go..

Roms for trophy and Instuctions for flashing

http://xdaforums.com/showthread.php?t=924333
[Windows Phone 7 Development and Hacking] RoboDad:
You do realize, don't you, that Microsoft isn't getting a dime of the "small fee" for this new unlocker. It is going to the Chevron team, to pay them for their hard work in developing it.

I can't believe the ignorance that is so rampant in this thread.
[Windows Phone 7 Development and Hacking] Jaxbot:
I agree with your last statement there. Try and keep this thread on topic, if you may. The Chevron team will bring homebrew to the majority of the population, which will hopefully be enough to give us homebrew developers a crowd to serve.

For those of us who don't want to pay/are unable to, well, we know how to Restore/Unlock. ;)
[Windows Phone 7 Development and Hacking] sinister1:
Before you go off into a rant about how ignorant I am, did you know I was talking about an MS dve (app hub) account, not ChevronWP7. Next time please read before you come at me with your childish insults.
[Windows Phone 7 Development and Hacking] Heathcliff74:
I don't see how this is a reply to my post. Of course you shouldn't spend $100 for a dev account. You should just wait a little longer and then spend a few bucks on ChevronWP7 Labs.

If Android-fans say that MS suck, then think again. A colleague of mine just bought a Samsung Galaxy S II. Brand new version of Android on it. Terrible battery drain, due to bad multi-core support and bad multi-tasking. I'm NOT saying Android is bad. I'm just saying that Android has its own problems. Microsoft is trying to play on the safe side and made the OS very secure. Just to avoid bad-behaving-apps, which could cause battery-drain etc. The majority of people just want to use a stable, smooth phone with secure apps from the marketplace. And not Microsoft is also going to support the homebrew scene. What do you want more?

Uh? Where do you get this info? First, the announcement from ChevronWP7 states that the launch a "service", not a "tool". There might be some sort of tool as part of this server, I don't know. But the main thing is that it's a service. I also don't know who hosts this service. It looks like ChevronWP7 is going to be the portal for this service. You say the Microsoft isn't getting a dime. How do you know? I guess they also get a certain percentage for the "license", whatever it may be. So, I think that both parties will get a small fee for administrative costs (hosting and developing website, etc). Is it really that bad, that they ask a few bucks for that?
[Windows Phone 7 Development and Hacking] RoboDad:
I got the information from Rafael Rivera's comments on the ChevronWP7 blog post about the announcement.

First, when asked what type of App Hub account the service/tool (however you prefer to call it, I really don't care) would create, student or developer, he responded:

Then when asked about the fee, he said

They are the ones charging the fee. And based on this comment, it will be a one-time fee.

So, putting 2+2 together, if the Chevron team is charging the fee, and it is a one-time fee to cover their costs, and whatever the unlocking mechanism is, it is completely separate from the App Hub, I don't see how anyone can read into the story that Microsoft is getting any cut of the fee. They are only involved to extent that they approved what the Chevron team is doing.

If there is an ongoing "service" involved, that actually seems like a better idea to me. It would discourage pirates from trying to exploit the service to distribute illegally copied apps.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Ok. Thanks for elaborating. Anyway, we'll have to wait and see how this is actually done in detail.

BUT... I find it very hard to believe that ChevronWP7 is doing this with only their approval. So they can make money of it and Microsoft just watch them do this? I think there must be some kind of licensing and registering. If this is really only up to ChevronWP7, then what's stopping us from doing the same as ChevronWP7? Or do you think that ChevronWP7 just got the certificates for the registration-servers and reach out licenses as they like? Doubt it ;)

So I think this is some kind of collaboration between Microsoft and ChevronWP7. They will both have some expenses that have to be covered. ChevronWP7 has made a name in the WP7 homebrew scene, so Microsoft may use that as some sort of 'brand name' for homebrew-licenses.

Anyway, it is all just guessing and we'll see how things will go.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] WithinRafael:
We'll be connected to developer services to officially unlock phones.
[Windows Phone 7 Development and Hacking] sinister1:
I just cough up the $99 because I got tired of hearing my self *****. But my phone is still locked; WTF? do I have to wait or something? Help.
[Windows Phone 7 Development and Hacking] WithinRafael:
After your account is validated, you can use the Developer Registration tool to unlock your phone. Try reading the documentation on App Hub.
[Windows Phone 7 Development and Hacking] sinister1:
Thanks WithinRafael; so I guess I just have to wait for validation, bummer. Do you happen to know how long it usually takes? I'm reading the documentation on the hub now but don't see anything about it. Thanks.
[Windows Phone 7 Development and Hacking] sinister1:
Wow, trying to get validated after you pay MS $100 bucks is like pulling teeth. I haven't been able to do anything since I registered like hours ago. The app hub is worthless and no support. I hope this isn't the same for the CheveronWP7 Labs.
[Windows Phone 7 Development and Hacking] lookus:
The app hub is meant for serious developers who want to build and sell apps, hence the validation process.. it was never intended to just quickly unlock phones..
[Windows Phone 7 Development and Hacking] Heathcliff74:
Yeah, that much I figured. That's what I meant with

What I meant with the certificate was that I didn't think Microsoft would give you the server-certificate of developer services, which you so kindly spoofed. If that were true, then Microsoft would indeed get nothing from the deal and you would be supplying their licenses. And that was what I found hard to believe, so Microsoft would be involved somehow, and you just confirmed that.

Thanks
[Windows Phone 7 Development and Hacking] sinister1:
I got it Lookus, thanks. Sorry for being such a nob. I just created a dummy XAP and used it for verification to see if it would speed up the process but it still keeps telling that I have to wait on that Geo thing to contact me, has anyone ever been through this? I just want to know how long this usually takes. Thanks.:)
[Windows Phone 7 Development and Hacking] ROCOAFZ:
Took me 24 hours after submitting dummy app.

Also grab the reg change for making it able to sideload more apps.

Only downside is... the dev unlock is only a year.
[Windows Phone 7 Development and Hacking] sinister1:
Thanks for your response ROCOAFZ; I can't wait; I have like tons of home brews and ringtones, I want to fully root the phone. Do you happen to have the link to the reg file you mentioned to load more apps?
[Windows Phone 7 Development and Hacking] Damionix:
Where did you Get Dummy App?

Where did you get your dummy app please? I want to upload one too. I have a student account and all I have left is to submit an app, but I am still in the learning process to developing but would like to unlock my device all the same.

Thanks
[Windows Phone 7 Development and Hacking] DominikZ:
The app has not to be special. Just create a new project and save the xap and upload it to the App Hub...
[Windows Phone 7 Development and Hacking] ROCOAFZ:
Yeah my dummy app just said dummy app on it and i put some text that said i am submitting this so that i can fully develop windows phone 7 apps.

It will get rejected but then they will accept you as a developer after the geotrust.

I used advance config

http://forum.touchxperience.com/viewtopic.php?p=4160#p4160

Check off allow max unsigned apps.
[Windows Phone 7 Development and Hacking] sinister1:
I'll up load it in a bit; Let me look for it. ;)
[Windows Phone 7 Development and Hacking] sinister1:
Here you go :cool:
[Windows Phone 7 Development and Hacking] sinister1:
Geez, this is B.S. How much long do I have to wait. You'd figure that once you paid and follower the instructions by uploading a dummy app that they would send you the damn certificate; I tried testing some things on the emulator but it completely sucks and is limited. Again I really hope the would be ChervronWP7 Labs buyers don't have to go through this crap.:mad:
[Windows Phone 7 Development and Hacking] sinister1:
Okay I just found out that it's going to be another 2 freakin' days! AGG:mad:. The instructions I read online were wrong; it said all I had to do was upload a dummy app and didn't have to submit it but apparently right after you submit your dummy app (not just save it)the Geo Trust machine contacts you and asks you for personal information, and it tells you that you have to wait 2 business days. Jesus Christ with Microsoft!
[Windows Phone 7 Development and Hacking] DominikZ:
Well I submitted my App about 2 days ago. At around 22:30 PM. GeoTrust almost instantly contacted me. I sent the required documents at about 22:45 back. And at 2 in the morning i received confirmation from MS, that my Identity was verified and my Account unlocked.

(Remember that I live in Austria, so it was probably about noon in the US.)

Anyways: I think we should get back to the Topic - which is about jailbreaking NoDo - and not developer unlocking NoDo.. If you need more help you can PM me, or just open (or search for) a thread in the appropriate section.

HTH
[Windows Phone 7 Development and Hacking] Jaxbot:
Agreed. In other news, I found the specific package that Microsoft updated to block untrusted certs on NoDo. Unfortunately, it's bundled with pretty much every other non-language update in NoDo, so not real helpful there.
[Windows Phone 7 Development and Hacking] sinister1:
Glad to hear that, I also revived mine right away after I answered those personal questions. Thank God!:)
[Windows Phone 7 Development and Hacking] wcaceres:
Guys lets keep the comments on the topic
[Windows Phone 7 Development and Hacking] moonshines:
got this bad news from WMPowerUser yet there is no confirmed reports regarding it,jsut thought of sharing it here
[Windows Phone 7 Development and Hacking] StevieBallz:
So basically the new Unlock works like this:

1.) People register at Chevron and pay their unlock fee

2.) The fee is asociated with some ID (Windows Live)

3.) This enables unlock for that ID on Microsoft's Unlock service

4.) I use some tool like Chevron WP7 to send and unlock request which is answered positively by Microsoft's own server

Otherwise this would not be able to work without another update as the fixed Unlock Server URLs are stored in the registry (the same ones we delete to "fix" the Unlock).

So from the phone's point of view nothing changes - am I right?
[Windows Phone 7 Development and Hacking] Jaxbot:
That's from Rafael Rivera:

http://www.withinwindows.com/2011/06/20/short-windows-phone-mango-blocks-interop-services-apps/

And it's true, which means homebrew will need some other sort of exploit
[Windows Phone 7 Development and Hacking] Jaxbot:
If you read a page or two back, WithinRafael stated that ChevronWP7 Labs integrates with developerservices, which means yes, this works the same way as a regular unlock.
[Windows Phone 7 Development and Hacking] d0ugi3:
heres hoping that the dev team unlock works differently then the 99$ unlock .. so maybe the program used can be copied and such and still unlock the phone without having the phone send a request to w.e .. to verify an account somewhere ..
[Windows Phone 7 Development and Hacking] withinboredom:
Don't know if anyone else has gotten an invitation for 7.1 beta, but I did ... they provide an update that changes the update server and then installs the update.
[Windows Phone 7 Development and Hacking] withinboredom:
I should add - to the phone. As well as a generic build (possibly bootrom that is not customized to that particular hardware)
[Windows Phone 7 Development and Hacking] walshieau:
Haha, it's the exact same unlock method used by the official tool. :rolleyes:
[Windows Phone 7 Development and Hacking] d0ugi3:
are you talking about the dev tools that have been out for a few weeks now ?

or an actuall wp7 OS beta ?
[Windows Phone 7 Development and Hacking] drelisimo:
Presumably you have the $99 unlock right?

Anyway I am thinking of something, but I don't know how to do it yet. As the connection for certificate verification goes over tcp/ip on a certain port would it possible to use the IPoverICMP trick to pump some packets (you devs know what) to the phone without it recognizing them. The issue here is that with this method you have IP connectivity to the router/AP, but you have skipped the encryption handshake. Therefore you are not in the network. However for what I know browsing is possible, so at least port 80 is opened. It is veeeery hard to reach any system in that way and this is why I hope MS did not pay enough attention. So first -- even being hard it may appear easier to access the phone with IPoverICMP and second -- presumably more people around here have good networking knowledge than the ones with good programming skills.
[Windows Phone 7 Development and Hacking] jzyaa:
How to jailbreak mango beta?
[Windows Phone 7 Development and Hacking] Heathcliff74:
I'm also very interested in this. There has already been a thread about this topic: http://xdaforums.com/showthread.php?t=1041188. Your work is consistent with what we found earlier. But we got no solution yet.

The possibilities for the update-process should be looked at. At least they are not downloaded over https, so there is no problem with the server-certificates. But I guess that the cab-files are signed. So we might need to add our own certificates to be able to load the self-signed cab-files to the system.

Another possibility might be push-notifications / push-routing. I have not looked into this in detail and I don't know exactly how a notification should be pushed to a device. But I know it is possible to send syncml messages over push-notification. When such syncml-notifications arrive, they are handled by omadmprc.exe and it is executed with TCB privileges. With TCB access the registry value for unlocking the device can be changed. And with syncml it is possible to change the registry (example). So if we find out how we can send syncml messages over push-notification, we can probably unlock a device.
[Windows Phone 7 Development and Hacking] ChrisKringel:
Yep, IMO this is the way to choose. Another possibility would be to take a look at OTA updates. But since MS didn't push any updates direct to the phone yet, this method is very unlikely to exploit....

But back to the PKU file. Are they already revesre engineered from earlier version from windows? I took a quick look in a hex editor and think the files are compressed... But since i'm not really familiar with compression can't say specific things. I'll take another look at it later.

Edit: Ahh... It's a simple CAB-Archieve xD

Edit2: I tried to create a custom PKU and stored it in a CAB file (see attachment). This should be the rough structure an update has... Do not expect this to work.
[Windows Phone 7 Development and Hacking] d0ugi3:
What about finding a way to open the "Update file" .. its in your local data .. and fixing it in there ?

its like 40 .Dat files .. is there a way to manipulate that to NOT black the certificate ?
[Windows Phone 7 Development and Hacking] voluptuary:
I'm no expert when it comes to hacking and certs and whatnot but I know the xbox community has been hacking and rehashing/resinging stuff for a while now using a well known tool called CONcept perhaps you could use that to sign these files as they are both MS platforms.
[Windows Phone 7 Development and Hacking] Jaxbot:
Wow, I leave for six hours and what do I find!

You guys have covered most of what I figured out in testing. I know how to manually deploy the cab files to the phone with the update library, and I know how to send provxml over to the device.

The only problem is, it wants the CABs signed. I'll make my own cert and see if it works; otherwise, we're gonna need to think of something ;)

Edit: Didn't work with my own cert, not even after installing the certs to the device. Not sure if it needs the cab signed by Microsoft or just signed by any old authority.. the error message hints at the latter, though, which is good.
[Windows Phone 7 Development and Hacking] squadseven:
Don't know if this might help but:

Pretty sure unlock is via registry because all optimus 7 users have a hidden built in registry editor that we use to manually unlock the device. It works on nodo. Maybe you guys can focus on editing the registries to unlock the device.

Here's the link: http://xdaforums.com/showthread.php?t=974874
[Windows Phone 7 Development and Hacking] ChrisKringel:
Hey

this is an interesting hint. But i don't think that CONcept uses an approach that can be easily transferred to the signing of CAB files :-(

So we have to figure out how to trick the WP7 into accepting our own certificate. How are those pushed to the phone? Are they delivered via an update?
[Windows Phone 7 Development and Hacking] galvesribeiro:
You are right, this is just for app signing.
[Windows Phone 7 Development and Hacking] galvesribeiro:
the files CONcept is sign in xbox discs use a diff algo and a diff keychain... I dont really think it will be usefull on WP7 unfortunatelly, but good catch anyway...
[Windows Phone 7 Development and Hacking] ChrisKringel:
So we basically we could also buy a certificate and sign our cabs?
[Windows Phone 7 Development and Hacking] Pixa1:
I don't know if it would help, but i'll share my thoughts.

Certificates work in a way that if we need for a device to trust the certificate, we need to have a valid root certificate.

So if we build fake "microsoft" CA server, and issue a fake certificate for the phone, import fake cert and fake root cert, then the device will trust it :) (sorry for lousy english).
[Windows Phone 7 Development and Hacking] Jaxbot:
That's what I'm thinking, but I don't want to spend $80 - $200 for a certificate, only to find out that it doesn't work.

Anyone got a VeriSign code signing certificate and willing to test-sign something?
[Windows Phone 7 Development and Hacking] Jaxbot:
That's certainly an option, if anyone knows how to do it (somewhat shady, though)
[Windows Phone 7 Development and Hacking] ChrisKringel:
Sorry for asking but i'm not really familiar with certification :-D So the phone connects to a Server that has certification file on it? If this is the case, someone would have to take a look whether there is network activity during the update progress...
[Windows Phone 7 Development and Hacking] Jaxbot:
Well, not exactly, because I can initiate an update process (shhh) without my internet even plugged in.

I'm not really sure how certificates work, either, but I think we basically need a cab file signed by something already added to the Trusted root.
[Windows Phone 7 Development and Hacking] Pixa1:
Let's discus little further.

If you review certificates snap-in on your computer, you'll notice "Trusted Root Certification Authorities" folder, and inside a number of certificates that are globally acknowledged as trusted authorities. If those certs aren't there, every time when you'll try to access HTTPS site (secured with Verisign or any else) you'll get a warning.

If you build your own CA, and inside "Trusted Root Certification Authorities" folder you put your own root cert, your computer will trust all certificates that are issued by the same CA (Certificate Authority) server.

i believe that the principle is the same on mobile devices as is on computers and servers.
[Windows Phone 7 Development and Hacking] Jaxbot:
Yes, that works on my Windows computer, but there's a catch-

Windows Phone 7 doesn't seem to let you view your certificate stores. When I add my own cert, I believe it is added to the Personal folder (or something along those lines), which doesn't do me much good at this point :\
[Windows Phone 7 Development and Hacking] Pixa1:
well that's what's hacking all about :)

sorry, but i don't know nothing about wp7 hacking, editing, etc ...

i came across your post, and i think that you did a great job. so i just wanted to contribute a little.
[Windows Phone 7 Development and Hacking] Jaxbot:
It's a good idea, and it's on the right track, I'm just not sure how to add it to the Trusted Root.

I also need some way to get a test cab signed, just to see if it really needs the Windows Mobile PCA, or just any trusted PCA, eg VeriSign, Comodo, etc.

I've used my own CA, but, naturally, it wasn't recognized as trusted.
[Windows Phone 7 Development and Hacking] ChrisKringel:
So it dosn't help if you create your own CA (like for instance here) and mail the certificate to yourself? Is'nt that a similar way to the chevron unlock?
[Windows Phone 7 Development and Hacking] Useless guy:
Another way will be a custom rom with a built in developer unlock through registry, like hd2. Hope chinese will release hspl.
[Windows Phone 7 Development and Hacking] Hades32:
You really should try another way, than trying to get the certificate thing to work again. If MS is clever, they just hardcoded the certificate to use and then it is impossible to get around that. (And if they didn't they can still easily fix this)

Better try to circumvent the Marketplace or find a security hole in IE mobile. (It's still IE, so there should be plenty ;) )