yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 Development and Hacking] GoodDayToDie:
I think I can manage the XAP install, but there's a lot of weird stuff that keeps getting in the way.

For example, I'm having a hell of a time getting a homebrew app to register as a file handler for an extension. I can easily add a new filetype that opens in an existing app (such as Adobe Reader, which should make this easy... right?), and I know how to get the parameters out of an all after it's launched, but for a homebrew app, the file asssociation fails to launch. It does the animation, but then immediatley goes back (kind of like what happens if you try to launch an INTEROP app while interop-locked, for example). I found some old threads on the subject, but nothing recent.

I still haven't managed to break down the policy database. The LVMOD source isn't available at all, and PolicyLoader fails any time I hand it any actual policies to merge, even if I elevate it first (I can't even tell if it's able to read the current database and just failing to write, or if it can't even read the data to merge). Decompiling lvmod might yield something of interest... maybe.

Let me know how the unlock hack works, and if you need a hand with it. Somebody else just recently reported their phone spontaneously re-locking, so it's not a moment too soon.
[Windows Phone 7 Development and Hacking] alex117117:
Hi,

Have the same version on my Omnia W, but when I browse on the link mentionned, (my IE is configured as mobile viewer) I have no Window Break Me button, like if my Samnsung is not detected as a mobile against site ?

Something I missed ? I just have to browse to the website, I'm right ?

Thank you,

Alex

---------- Post added at 01:34 PM ---------- Previous post was at 01:25 PM ----------

Pfff .... When I unplug my USB cable it's better over 3G :)
[Windows Phone 7 Development and Hacking] Jaxbot:
It has to be in the mobile browser, e.g., not desktop mode =P
[Windows Phone 7 Development and Hacking] Briefcase:
Hi Jaxbox,

Look at this: http://wmpoweruser.com/only-48-apps-using-native-code-in-marketplace/ You can click through to the Japanse site to get a list of all applications in the marketplace that require Interop Unlock permissions. Maybe one of them contains an exploit we could use. Most of the apps have already been analysed by xda members, but you never know what interesting stuff you discover in this list. I think this will be a temporarely solution as MS could simply update/patch the affected apps but something is better than nothing I guess ;-).
[Windows Phone 7 Development and Hacking] GoodDayToDie:
@Briefcase: Unfortunately, apps using native code typically come in only two flavors:

Ones that need ID_CAP_INTEROPSERVICES (and therefore require interop-unlock if you want to sideload them, abviously it's not needed when installing from the marketplace). These apps are almost always device-specific, calling into drivers that are included with OEM firmware customizations but are not part of the base OS. They typically do certain high-privilege operations, such as accessing the filesystem or the registy (beyond what can be reached from the sandbox). However, the only ones that we've managed to use for useful hacks are the LG and Samsung MFG apps, and HTC's Connection Setup. Nokia's equivalent to Connection Setup could also have been used, but the driver it called into for high-privilege stuff is very restrictive of what operations it will allow (just like HTC's is now).

Ones that don't need ID_CAP_INTEROPSERVICES, and just use native code without any privilege elevation at all. We at XDA-Devs already use a number of apps like that - the DllImport project does so, the Webserver, Screen Capture, and even Orientation Lock apps are examples of what this type of app can be used for, etc. However, there's no point looking for an exploit in apps like that, becuase it wouldn't actually gain us any new permissions at all.
[Windows Phone 7 Development and Hacking] donpromillo:
I've just a curious idea. Correct me, if I'm wrong: When Zune makes a backup before an update, it stores the data and makes a hash of that stored data.

Is this hash the only security restriction that ensures, that data are unchanged and correct before restoring them? Or is there a second check on restore-level too?

If so, could it be possible to investigate this hash-algorythm to be able to change the content of the backup and set policies in that backup files, which then in a restore process are executed?

Just a thought

Regards and thanks for all your hard work
[Windows Phone 7 Development and Hacking] GoodDayToDie:
The data is encrypted. That not only makes it very difficult to know where to modify at all, many encryption algorithms also have some diffusion built in (meaning that modifying a single location in the plaintext will cause a different ciphertext in a number of areas, possibly in the entire remainder of the stream, and similarly modifying the ciphertext will screw up the plaintet from there on out).

A hash is not, by itself, any kind of security. Microsoft appears to have used a device-specific key for their encryption. Now, if we were able to dig that key out, it should be possible relatively quickly to identify the algorithms (cipher and hash) that were used... but that first step would be tricky.
[Windows Phone 7 Development and Hacking] Jaxbot:
Wish I were more of a byte expert at a time like this.

Does the backup key remain constant, even after things such as flashing a custom ROM? If so, it's probably derived from the device's serial number, or another unique ID
[Windows Phone 7 Development and Hacking] GoodDayToDie:
It is consistent through a hard-reset, and I believe through a custom ROM as well, so I suspect it is in fact hardware-derived. One possibility would be to try sniffing on the USB traffic between the phone and Zune when you check for the ability to restore a backup, though there's always a risk the data there is encrypted too.

Those sources are good guesses, but without knowing what the key actually is it would be very difficult to verify.
[Windows Phone 7 Development and Hacking] donpromillo:
Cause I'm not willing to restore and sniff the USB traffic, I was willing to do it while backup my lumia with WP7 Easy Backup Tool. I used the trial version of USBLyzer. When syncing in normal mode, the raw usb-traffic is human readable ( I can recognize my music titles and so on. But when in backup mode, only binary data flow through USB, I guess, that these data are already ciphered, not only packed, it seems a continous data stream (just like the .dat files in the zune backup folder, which also seems a data stream segmented to 4GB blocks). So could it be, that all the interesting tasks of crypting the backup data are done by the phone and not by Zune. So it seems that the approach to use this way failed.

Regards

DonPromillo
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Good info! I wasn't talking about the actual backup/restore process though, just the check for "does this restore point apply to this phone?" Of course, that may be based on a non-cryptographic identifier (there are a few identifier strings used surrounding backups) and the phone itself verifies and then accepts or rejects the backed-up data... so yeah, you might be right.
[Windows Phone 7 Development and Hacking] donpromillo:
I checked it again just to be sure. The first data packages (or bytes) in usb-stream are identical to the bytes in data.1.dat in the backup files, so it seems proven, that the crypting is done by phone.

Does it make sense to identify the backup process on the phone, and perhaps to explore the mechanism to create the backupstream or is it wasted time?

regards
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Oh, hacks like that are almost never wasted time. Even if you don't achieve your goal, you almost inevitably learn other useful things, some of which can end up enabling things you didn't even know were possible (the OEM Marketplaces hack was discovered while I was searching for new interop-unlock hacks).

Mind you, while the phone is in backup/flashing mode, it's not running the normal OS. I don't know where the binaries for that are stored - possibly on a separate partition? - but don't assume they're in \Windows like the normal system files.
[Windows Phone 7 Development and Hacking] donpromillo:
I searched information about the boot process of wp7, but all I found exceeds either my knowledge or my device base to play with ( just one lumia, and yes, I need it for nonexperimental things too, so everything with a possible brick I cannot do).

Regards
[Windows Phone 7 Development and Hacking] ChrisKringel:
I'm just curious:

a) Can we use the WindowsBreak approach to copy a dll file into the folder of the Diagnostics app?

b) Does

Assembly assembly = Assembly.Load(assemblyPart.Source.Replace(".dll", string.Empty));

check wether the specified DLL is signed with a valid certificate?

c) Is every dll in the Application Directory contained in

Deployment.Current.Parts

?
[Windows Phone 7 Development and Hacking] Bjd223:
I was having some serious data issues (after windowbreaking) until I did the ICS hack from here.

http://xdaforums.com/showthread.php?t=1334248

Then

Diagnosis > *#32489# > Back > Back (to Phone Control) > [7] Network Control > [1] GFC > [3] Setting Cancellation

And all was well again.
[Windows Phone 7 Development and Hacking] Jaxbot:
Where is that code from?

Technically, it can, but not with the extension .dll, since that's not a MIME type the zipview application accepts.
[Windows Phone 7 Development and Hacking] ChrisKringel:
I just sent you a PM with the details.
[Windows Phone 7 Development and Hacking] EnderPsp:
Heathcliff, I know I'm late to the party, but 2 quick questions:

1. How can someone on 8107 tell if the have installed KK2?

2. I updated my Focus through the LG hack, I seem to have "skipped" this KK2 update?

Thanks!
[Windows Phone 7 Development and Hacking] stalonn:
Hey all, i made the windowsphonehacker website unlock yesterday and i downloaded theme maker app on the website but the tiles made by theme maker r laggy , i mean when i tap to settings on a tile that i made by theme maker, settings r flowing so laggy, is there anyone who can tell how to solve this problem.. thx.
[Windows Phone 7 Development and Hacking] Jaxbot:
What the heck does this have to do with WindowBreak?
[Windows Phone 7 Development and Hacking] edangel:
any news about the proccedure of this project?what about htc 2nd generation devices?is there someone working for it?i dont want ETA's just i wanna know if still is someone who is working to find a method to interop-unlock an htc 2nd gen device!

i already interop unlocked my samsung omnia W and now i got htc titan which is great BUT not so much without interop unlock :D
[Windows Phone 7 Development and Hacking] slysy:
To answer question 1, type *#1234# in diag
[Windows Phone 7 Development and Hacking] GoodDayToDie:
@edangel: Heathcliff74 and I have both tried, several times and in a few different ways, to interop-unlock gen2 HTC phones (and gen1 phones with the "v2" HTC drivers, that is firmware version *.*.5XXXX.* and up, and the HTC Arrive which can't use Connection Setup, and Nokia phones, and Dell phones, and... you get the idea). So far, we haven't succeeded yet. That doesn't mean it can't be done, though - for a few months there was no known way to interop-unlock a gen1 HTC phone without rolling back to pre-Mango, and WindowBreak for Samsung phones is also a relatively new thing, etc.

Basically what I'm saying is, don't give up hope, we are still trying. New hacks come out all the time. Some are ways to dev-unlock. Some are ways to interop-unlock. Some are ways to install custom ROMs. All such things came in time. Although I'm not actively hunting interop-unlocks at this exact moment, I always have my eye out for anything that *could* be used to IU a phone. Maybe when I've finished my current projects, I'll turn back to actively hunting IU hacks. Maybe, by that time (probably a month or two, no promises though), I or somebody else will already have found one.
[Windows Phone 7 Development and Hacking] Jaxbot:
I have some interop unlock ideas, but I would really like Chevron Labs to find a way back. They made the process so much easier, and helped limit the collateral damage by keeping only genuinely interested users attempting the interop unlocks.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Agreed on Chevron Labs coming back, even if they're only offering dev-unlock again. Ideally they'd offer interop-unlock, but then ideally Microsoft wouldn't have added interop-lock in the first place...

@Jaxbot, feel free to PM me if you want to bounce ideas off me / need something tried on an unlocked stock HTC ROM / want help with anything. I know you tried getting WindowBreak to work with HTC, and I don't see a way to do that either, but there might be possibilities.

It's too bad that the Nokia interop-unlock hack was already blocked at the driver level; I believe it could have been made to work using WindowBreak too.
[Windows Phone 7 Development and Hacking] pieryx:
i all,

My Samsung Omnia 7 has lost the Bluetooth functionality after unlock using the suggested method.

Anyone could help me out?

Thanks
[Windows Phone 7 Development and Hacking] EnderPsp:
I need to stop reading (and posting) when drinking :)

1. was (obviously) answered earlier

2. KI4 with the LG hack
[Windows Phone 7 Development and Hacking] xcen_xda:
Hey thanks! I have an international version of Omnia7, Malaysia, went through the official 8107 update and found out that I'm still at KI2!
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Hey Jaxbot, I've got a new idea for a possible avenue to WindowBreak; like XAP files, Office Open XML files (.DOCX, etc.) are also ZIP archives. In a fairly simple trial, I was unable to unpack files from a document onto the phone, but it might be possible with more experimentation. It would largely depend on whether the document file gets unpacked on the filesystem, if so where, and with what permissions.

There's a chance this could work for HTC phones.
[Windows Phone 7 Development and Hacking] dragonide:
As always, my Titan is available for testing, if Jaxbot ever needed it.

Thx GoodDayToDie, just keep on bring new ideas ...
[Windows Phone 7 Development and Hacking] Jaxbot:
I've already looked into this; the files are renamed and I don't think you can move them anywhere with our favorite trick. I might try again sometime, but it's more complicated than previously hoped for.
[Windows Phone 7 Development and Hacking] serzhkov:
Hello :)

i have HTC trophy (not Verizon) OS version 7.10.8107.79

So i can jailbreak my devise?

And what i'll can do with my devise after that?

Thank You...

i'm new guy in this, so it is very hard to select something...

i afraid to make mistake...
[Windows Phone 7 Development and Hacking] serzhkov:
So, if I understand carefully, and my HTC Trophy not dev-unlocked yet, i can't use this jailbreak...

My devise is locked, so i can't install .xap files for example from this forum. If I would like to do that, firs off all, I have to dev-unlocke my phone,and then interop-unlock..

If I would like to run another ROM, i have to RSPL or HSPL...

Simply, i wont, to make my Trophy not boring... I would like to costume main screen... instal some usefull apps... i have it more than year..and i think it is time, to make it better...

And thank You for Your time and information! it is very understandably!

P.S. Therefore. i think there are many people like me, who don't know from what to begin, to improve them devise....

We have to start from something....

My devise information:

PC40100

SPL - 5.12.2250.1 (bootloader)
[Windows Phone 7 Development and Hacking] Jaxbot:
My general rule of thumb: If you don't know why you want to "jailbreak", you don't need to.
[Windows Phone 7 Development and Hacking] serzhkov:
how can i'd like to know if i need it, if i don't know what it do?

i know that jailbreak is such as unlock...
[Windows Phone 7 Development and Hacking] Mentycz:
I have got Omnia 7 with latest Mango 8107 and I cant break too. It seems to be broken, but it isnt. I can install unsigned apps, but when I disconnect phone from computer, I see no apps, I have recently installed. So I think, for Omnia is it blocked.
[Windows Phone 7 Development and Hacking] Jaxbot:
That doesn't make sense at all; if you can sideload, even if your device gets relocked, the apps won't be uninstalled. Are they there when your device is still connected to the computer?
[Windows Phone 7 Development and Hacking] addicted2088:
No way this will work on the Omnia W? I'm on the KK7 firmware, and I've heard KK2 and above are not that easily breakable. Damn, left the world of Android to come to WP7, and now I want to unlock! Old habits die hard xD
[Windows Phone 7 Development and Hacking] voluptuary:
Are you sure you are deploying to the phone and not the emulator?
[Windows Phone 7 Development and Hacking] roqstr:
cmon guys, this isn't a support thread, only post ideas here that could help jaxbot & co, if you want to say thanks: there is a function for it built right into the forum ;)

please send questions via PM, so this topic stays clear.

thanks
[Windows Phone 7 Development and Hacking] Jaxbot:
+1

There are other threads for support. This is a development thread. I try to be polite, but you get the point here ;)
[Windows Phone 7 Development and Hacking] Thunder_:
An unlock idea, has this idea been tried?

Create a proxy server and monitor marketplace activity. Pass all verification steps of marketplace as what a normal proxy server will do. But when server is starting to send the actual XAP file, replace it with our XAP.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
I don't think that would work, sadly. The problem is that the protections aren't in the connection at all - they're in the XAP. Unless we can add the Marketplace DRM singature to a homebrew app, there's no point in sending such a XAP to a non-dev-unlocked phone. Even if the phone installed that app, it would refuse to run it because the app wouldn't be signed.

Mind you, I don't know if anybody has tried to add Marketplace DRM to a XP before. However, if it's implemented at all competently, this will be essentially impossible (specifically, it'll require a private key that we don't have).
[Windows Phone 7 Development and Hacking] Chipsaru:
Can we use unit-testing to call functions that need interop rights to run?
[Windows Phone 7 Development and Hacking] Thunder_:
You are right. Look like this is already been tested and failed. http://dennisdel.com/blog/progress-report-on-nokia-lumia-800-interop-unlock-research-part-2.

Another try will be, let's say, create an XAP with desired function which will be activated only after some specific actions. And pass to MS for certification. If we can get through that, we will have an XAP with correct certificate. Even if it is revoked from the marketplace one day.

Not sure how deep MS is looking into the submitted code.
[Windows Phone 7 Development and Hacking] Jaxbot:
The automated system looks pretty deep; obviously ID CAP INTEROP is completely blocked, and the interop manifest can't be in the XAP. InteropServices can't be referenced either. It's pretty secure.
[Windows Phone 7 Development and Hacking] ankit360:
i had omnia w and want to try this can anybody tell me what is side effect of this method / unlock

if i want to return to my original ROM state how i do that ?
[Windows Phone 7 Development and Hacking] akshaysn007:
my Diagnosis (ver.1109) on my samsung omnia w how to windowbreak it coz i cant there' no option of windowbreak please help me jaxbot
[Windows Phone 7 Development and Hacking] Thunder_:
Which means we don't have any unlocking method other than connection setup? I know MS is tighting up connection setup.
[Windows Phone 7 Development and Hacking] subraj:
Any update regarding jailbreaking lumia phones?
[Windows Phone 7 Development and Hacking] mat1371:
Is there any hope to find a way to full unlock or jailbreak omnia w in future? or it may be impossible?
[Windows Phone 7 Development and Hacking] GoodDayToDie:
... dude, WindowBreak works on the Omnia W *right now*! Yeah, you'll have to wait for the bootloader to be unlocked to get full-unlock, although Heathcliff74's app-elevation hack will get you part of the way when WP7 Root Tools v0.9 comes out.
[Windows Phone 7 Development and Hacking] akshaysn007:
it doesnt work on my omnia w v.1109 and os version 7.10.7720.68
[Windows Phone 7 Development and Hacking] -l-Z3K3-l-:
Wow I cannot wait for this to work on HTC's

At the moment I have a Radar to test the Mango waters (coming from Android)

I like it so was going to get the Titan as it has a nice big screen

Although I am also trying to find someone selling a Samsung Focus S

(not over here in Ireland at all)

Great work being done.
[Windows Phone 7 Development and Hacking] Seven_PRX:
I bought a Focus S from E-Bay, in the US. I live in Holland myself.

Works fine here, great phone :)

And, WindowBreak does work on it out of the box.
[Windows Phone 7 Development and Hacking] andy123456:
i got an error. windowbreak successfully done, but when i try to deploy the wp7 root tools by toms xap installer, i got the following error:

-Please Make sure your phone was unlocked !

- Please make sure you connected device to PC and Zune launched

Try again ?

Can anyone help me?
[Windows Phone 7 Development and Hacking] roqstr:
1. use the private message function

2. is your phone unlocked? you need at least a developer/chevron-unlocked device to use this.

3. your screen must be unlocked and your phone must be connected to your pc & synced
[Windows Phone 7 Development and Hacking] :
thanks ...
[Windows Phone 7 Development and Hacking] andy123456:
yes, its unlocked with windowbreak. All other steps done, but it wont

work...
[Windows Phone 7 Development and Hacking] lucasryan:
have you tried to use the sdk tools deployer?
[Windows Phone 7 Development and Hacking] Malte1234511:
Sometimes Tom Xap deploy doesnt works orrectly. I would prefer XapInstall V 0.9 (browse forum)
[Windows Phone 7 Development and Hacking] GoodDayToDie:
@lucasryan has the right of it. If an unofficial XAP deployment tool isn't working, the first thing to always try is the official tool. This will probably require installing the WP7 SDK, which is a bit of a pain, but you can be fairly confident that the XAP installation software will work correctly afterward...
[Windows Phone 7 Development and Hacking] andy123456:
tried with the wp7 SDK, toms xap installer and Xapinstall v0.9...no luck. Whats the fault?

everytime the same message, when i try to deploy xap files.
[Windows Phone 7 Development and Hacking] lucasryan:
well not sure what your problem may be as i dont know what device or any other specifics about your device, as you didnt state that, just that you got error. Someone may be able to help you if you give a little more information. It does sound like your not unlocked. One thing you might check based on what info you did give, is to make sure that zune and your device is not on a guest sync relationship.
[Windows Phone 7 Development and Hacking] andy123456:
ok my device is samsung omnia7 with latest update mango.some specs:

system version: 7.10.8107.79

firmware: 2424.10.10.6

radio: 2424.10.11.1

bootloader: 4.11.0.3

diagnosis tool: 0210

windowbreak successfully saved in gprs manager, but no luck after rebooting

the device and trying to deploy with various deployers.

device is synched with zune (not as guest) and screen is unlocked.