yashsingh1/xdaforums huggingface dataset:
[Nokia Lumia 800] Heathcliff74:
Guys, I hate to break it to ya, but this is not going to work.

The vulnerability you discuss here is related to the "Flame" malware. Flame exploits the fact the the OS still accepts certs with an MD5 hash. Though the MD5 hash algorithm has been compromised years ago, finding a real hash-collision is still extremely hard. Only the best crypto-analists with the best computers can do this. The vulnerability in the MD5 algorithm was actually more a theory and it was published back then.

The hash-collision that was made in the Flame malware was a new type op hash-collision, that has not been seem before. It was not based on the theory that had already been published. So that means that some pretty smart crypto-analysts must have worked on this in secret and with criminal intentions. An d they succeeded. Nothing about this is public knowledge.

So the infected system do not contain this information either. An infected system only has the PUBLIC key, on it. And it is a legit MSFT key. The point is that the malware was signed with a PRIVATE key, which has the collisioned hash. And the private key is only in the hands of those criminals. Just as the legit Private Keys are only in the hands of Microsoft.

WP7 is also affected by this, in theory, because WP7 also accepts binaries, that are signed by certificates from this certificate-chain. But to run binaries in WP7 you also need to get past the whole policy-engine too. So, in practice, WP7 is not vulnerable.

You won't find that private key on the internet. So, I guess that ends it here.

For more info, look here: https://www.google.com/search?sclient=psy-ab&q="flame"+"certificate"+"collision"&oq="flame"+"certificate"+"collision"

Ciao,

Heathcliff74
[Nokia Lumia 800] Jaxbot:
But the point isn't to run a fake EXE, the point is to create a CAB update that the OS recognizes as it's own. Of course, considering the defaultcerts file, I doubt this is even possible in the first place, but it's the idea that counts.
[Nokia Lumia 800] Heathcliff74:
DefaultCerts dont even have such cert-chains. The issuer is for example "Microsoft Windows Mobile Firmware Installation PCA", without path to a CA. So default-certs mechanism isn't even vulnerable to this at all.
[Nokia Lumia 800] donpromillo:
Hi Heathcliff;

I think, that the common on both certchains is MS Root authority, which signed the "Microsoft Windows Mobile Firmware Installation PCA" and the Licensing CA from a TS-Server too. (see attached Picture taken from "Default Certs" in OSBuilder ). So the 1. task is to get the TS-Activation Cert, the second, how to implement the different "intermediate Authority " not included in WP 7 (if that would neccessary.)

Regards

EDIT: Sorry, I just was to fast, only the "Microsoft Mobile Device Unpriviledged PCA" has the MS ROOT CA as Root. The important 2 certs "Microsoft Mobile Firmware Installation PCA" have no known root.

It seems a dead end, what a pity
[Nokia Lumia 800] donpromillo:
Hi Heathcliff74,

if you read this and this, you'll see, that the collision isn't neccessary in our case. The thing that we need is the Activation Cert of a Term Server, cause this is also a "code signing Cert" and allows to sign every code (in unpatched environments) as it was done by MSFT

Regards
[Nokia Lumia 800] trenbeth:
You use the term 'Activation Cert' (probably Activation Certificate) which is not known to Google.

A certificate file most commonly contains a public key, which is not usable for signing files.

You would need a private key to sign a code file.

If the private key of some intermediate certificate was known (even recently revoked), it would have tremendous value in the malware market. It would be in the news before we hear it here.
[Nokia Lumia 800] donpromillo:
Hi,

Yes, I use appreviations, and most people understand the term cert in this way

And Yes, Google sometime fails (to much advertising???)

You read the wrong news http://xdaforums.com/images/smilies/smile.gif

Even if I stated above, that we are at a dead end: if you've read the links I gave, you could know: By activating a Terminal Server you create a private/public-key pair which is signed by a SubCA of MSFT and at the end of the chain by MSFT-Root-CA. Through a huge mistake of MSFT engineers this certificate you get and you as consumer hold the private key, isn't restricted in the key-usage, so code signing with this certificate and your private key is possible, and the code is signed by MSFT too, caused they signed your cert.

Unfortunatly, that isn't as helpful as I thought, cause WP 7 does not use certificates with MSFT root CA as a part of the cert chain. They learned by theire mistakes and set up WP7 certifcates using a standalone root ca.

Regards
[Nokia Lumia 800] djtonka:
As far I know we can copy .dat and .xml files into Windows folder even after developed unlock what I did with KeepAlife mod and modified file to increase limit of MBs for downloading using network. Maybe you should focus on simplicities? :D
[Nokia Lumia 800] zinoubinabil:
i have same problem; phone powres on after vibrate

are you solve your problem??

---------- Post added at 10:51 AM ---------- Previous post was at 10:39 AM ----------

with NSS i have this log

----------------------------------------------------

Looking for phone...Done.

IMEI:	359289046290504

---------------------------------------

Please follow these steps:

1. Power off the phone

2. Remove the USB cable

3. Press and hold the Vol+ button

4. Plug the USB cable, wait for the buzz

5. Release the Vol+ button

---------------------------------------

Waiting for 30 seconds...Done.

----------------------------------------------------------------------------

Looking for NAND disk...Not found.

Things to check:

1. Is the phone connected?(Plug to the USB)

2. Is it in the correct mode?(Try to switch to OSBL mode)

3. Have you installed the Qcom loader ?(Use the Install button)

when Press and hold the Vol+ button and plug the USB cable phone turned on

already update to last firmware with zune

pls any help!!
[Nokia Lumia 800] lumpaywk:
This may be really stupid but if you dont ask you never know. As the bootloader gets updated when you used Nokia care suite cant we maybe take the old bootloader and trick the caresuite into thinking its a newer update?
[Nokia Lumia 800] donpromillo:
MSFT announces trouble with some certs and stops publishing marketplace apps

Hi,

has somebody of you the here named apps in a version before MSFT stops publishing? Could we investigate the certs they used in that app to see, what's meant by

Regards

Donpromillo
[Nokia Lumia 800] cdbase:
what about IRC where we all could share ideas on lumia 800 ?? also we can try donate Jaxbot maybe when he recieves some fee he could make things happen faster ,someone should ask him :)
[Nokia Lumia 800] bayrak55@live.nl:
I got another problem here,

Yesterday I was able to enter Qualcomm mode by pushing vol+ and power.. But today I cant do it anymore..

When I push vol+ and power it vibrate long and after then it does nothing?

What can be the problem, the Phone doesnt get detected by anything (not DLOAD or Qualcomm)

its the v2.3 and I am sure its qualcomm but I cant enter that mode anymore?/
[Nokia Lumia 800] Reflexdarky:
why are you posting this in the thread, this is a dev thread not questions answers :confused::confused::confused::confused::confused:
[Nokia Lumia 800] dy_domyoung:
Is everyone giving up on this?

I dont see anyone even trying.

I am currently teaching myself programing just so i can start to look at the locked bootloader. If no one is bothered are is even going to try you might as well close the threads and just start a lumia 700 thread which also lists a couple of lumia 800 roms for those who can flash.

I am annoyed at having to check the forum everyday (literally, for the last 6-7months) for an update, there is not going to be one, i will pursuit with my learning and try finding a solution, i doubt ill share it though as it seems pointless.
[Nokia Lumia 800] inket:
1. You will not find a solution. Dev & Security experts didn't find a thing and you're just learning.

2. A lot of people would like to unlock their Lumia 800 but have no choice.

3. You could subscribe to the thread and only come here when there's something interesting.
[Nokia Lumia 800] NielDK:
4. Just because you ***** aint gonna make it happen, keep this thread for DEVS and not QA.
[Nokia Lumia 800] surya467:
Ofcourse.u cant teach urself programming and then come up with a bootloader unlock :P

i mean , think of the many ppl in front of u...dont give up programming, u can still create a homebrew though, if possible :P

but let go on the unlock as i have too.

Now just waiting for the WP7.8 update :D
[Nokia Lumia 800] lumpaywk:
so it would seem that it is impossible. Have to say well done to Nokia on that one but does this mean that future nokia phones will be un-breakable? This could be a real problem I mean we have been beat :(
[Nokia Lumia 800] surya467:
Correct...as u know the WP8 devices will have secure boot, so nokia with upcoming WP8 wil be unbreakable for sure.

And they did a good job on the Lumia too, but somehow devs managed unlock and 710 was lucky.

So we have to live with this fact...or like android OS is giving away rooting tools and apps and games Free to use, move on to that OS, which i will never do!!
[Nokia Lumia 800] trenbeth:
There are techniques to build up a community and in this thread we fail miserably.

We all know that this is a DEV community, however those obnoxious replies do not help.

You can still convey the message that this is a DEV thread but still be polite about it.

I have a Lumia 800 with old firmware (but DLOAD) just in case something comes up and I can unlock it.

However I do not have the full picture on what to do.

If experienced members in this thread do not help, then the project is stuck.

I floated the idea for a IRC DEV discussion for the Lumia 800. If only an experienced member can offer themselves on IRC, I do not see something good happening.
[Nokia Lumia 800] dy_domyoung:
This is the response i wanted, thank you for this.

I understand its a 'DEV' Thread but i don't see much 'Developing' going on. I didn't mean to annoy any one but it is frustrating to see people giving up. By the looks of things it is going to be impossible but your negative comments will not change this, for some one who is learning any information is information.

I am currently working on a piece of software which is used to flash images to devices. Using this i am hoping to use one or more of the old standard roms, to compile a suitable image worth flashing, and begin trying to unlock the bootloader.

If any one has any input for me or could p/m the information they have that would be very helpful, i am not going to give up, i love my Lumia.
[Nokia Lumia 800] Shabo09:
Hey, a small question... I haven't found an answer in this thread, what is I get "Qualcomm CDMA Technologies MSM" but I don't get the usb mass storage? Does this mean I don't have the right qualcomm bootloader?

Thanks for your answer!!
[Nokia Lumia 800] Reflexdarky:
why are you posting this here it is not dev related make a new thread or use the seach function your question has been answered many times before

rob:good:
[Nokia Lumia 800] Shabo09:
Why not? And why can't I find an answer on this whole forum?

You could've answered the question if it is answered many times before..

Thanks anyway,
[Nokia Lumia 800] trenbeth:
It is what we call 'being obnoxious'. Causing the demise of this thread and part of XDA-developers.
[Nokia Lumia 800] surya467:
ok jsut stop it..

and if u cant search the forum..you should create a thread in general

http://xdaforums.com/showthread.php?t=1669498
[Nokia Lumia 800] Bph&co:
Hi guys,

In case you missed it, Lumia's have been completely hacked by an old friend, Phillipines hacker (X-Shadow). It will need to get your hands dirty(soldering needed,removing of metal shields), also no free software available yet. But is a good start, could be used for rooting, boot repair, simunlock, etc.

Regards
[Nokia Lumia 800] heishanxiaoyao:
It's a good news,Thanks!

I have the Advance Box.i am waiting...:o
[Nokia Lumia 800] ikinkyxd:
Looks nice, well, if we get the box, what can we do for now ? QCom bootloader or ??
[Nokia Lumia 800] djtonka:
Bph&co we are counting on you to provide it into NSS Pro:p
[Nokia Lumia 800] heishanxiaoyao:
The ATF 9.11 suport flash QUALCOMM OSBL!

It's great!my lumia 800 flash it!:laugh:
[Nokia Lumia 800] djtonka:
I could also flash L800 in Qualcomm using QPST if you know how.
[Nokia Lumia 800] Bph&co:
Hi,

Two problems here:

- some very good soldering skills are required. People who have them, probably already have ATF (mobile phone shops, etc), so maybe waste

of time to re-implement. I don't see regular users doing this by themselves

- some extra hardware is needed, so far looks like custom SD card reader implemented to access the eMMC flash as raw device, again this

needs to be either sold or homebrewed at least with some not easy to solder parts

BR
[Nokia Lumia 800] djtonka:
So maybe easier is dump whole partition after this hard way unlock method and try found any OSBL like for L710 ....osbl.esco?
[Nokia Lumia 800] trenbeth:
A DLOAD Lumia 800 phone has a restricted bootloader that is signed. If there was a signed Qualcomm bootloader, then it would be possible to simply use the Nokia Care Suite and replace the restricted bootloader. But there is no such signed Qualcomm bootloader, and probably will never be found.

Those DLOAD Lumia 800 phones always have the restricted bootloader (the 'DLOAD' strings come from the bootloader).

What is needed is a way to write raw on the Lumia memory, replacing the restricted bootloader with the Qualcomm one.

With the ATF hardware/software that uses the test points of the Lumia 800, it is possible to write raw on the Lumia memory, thus replacing the restricted bootloader with the Qualcomm bootloader, thus unlocking the phone.
[Nokia Lumia 800] lordmaxey:
Hi there,

this is great!!

But i'm not shure which box i have to buy. Can u please tell me?

Should i by the "old" ATF Box or the new "nitro" one?

cheers
[Nokia Lumia 800] trenbeth:
I believe that either are OK, but It would be best to ask at the ATF official forum.

Keep in mind that on top of paying about $120 for the ATF, you might need to buy credits for the flashing to work.

In addition, you need the appropriate screwdrivers to open up the Lumia, a soldering iron and very thin wire to make the test point connections to the device. You have to be very precise when soldering the wires.

If these are difficult, you might want to find some local phone unlocker that already has ATF experience, and have them do this for you, for a fee.
[Nokia Lumia 800] XperianceIT:
for some reason I can not get my NCS to even detect my phone.

but hey i have HW: 2.1 and FW: 12120 Does this mean I can not unlock my phone? I have been trying to flash the rom that has the qualcom BL using NCS, but I can not get anything to work.... NCS gave me an error when installing, but installed anyways, however it wont detect my phone.... can anyone help me figure this out.... thanks guys.
[Nokia Lumia 800] trenbeth:
Does your phone already have the Qualcomm bootloader? Then follow the instructions at the first post of the thread to fully unlock it. That's it.

If your phone says DLOAD (see first post), then you are out of luck (for now there is a way but you need to pay).

NCS can be problematic to install. Search for an NCS thread and ask for help there.
[Nokia Lumia 800] XperianceIT:
When I hold down volume + and power, and get the short buzz, and plug into my PC... i dont get anything. The screen on the phone stays black for a bit then reboots. Im on HW: 2.1 w/ FW: 12120 I will find a NCS thread and ask about the NCS issue over there.
[Nokia Lumia 800] djtonka:
There is no credits needed for TP so if you asking to unlock Lumia610/800/900 you will get unlocked phone and also Qualcomm bootloader in one shot :D
[Nokia Lumia 800] NielDK:
Does anyone Danish know some(place/one) that has this ATF box in Denmark?
[Nokia Lumia 800] trenbeth:
If you use Windows, the 'DLOAD' string should appear in the control panel, in the devices list. If so, then the phone has the restricted bootloader. If you get the message to format your storage device, then it's the Qualcomm bootloader (and do NOT format).

If you use Linux, run 'dmesg' after the connection and it should give you a list of the partitions found if it is unlocked. If it does not give you a list of partitions, then it is locked.

You may have to try a few times the key combo.
[Nokia Lumia 800] ikinkyxd:
im seeking the same answer
[Nokia Lumia 800] trenbeth:
You should probably ask at the ATF thread at GSMHosting.com,

http://forum.gsmhosting.com/vbb/f60...auto-update-public-discussion-thread-1536323/

There are vendors that sell to Europe, and you may find a local reseller for your country.

You may also find an unlocker that can unlock your phone for you with the ATF for a small fee.

Report back where exactly we should ask for such information, for those who are interested as well.
[Nokia Lumia 800] NielDK:
Ordered the box here (Copenhagen, Denmark) Now just wait for it to arrive :) Will happily help others if needed once I recieved it (and tested on my Lumia 800). Guess I will be good in two weeks time.
[Nokia Lumia 800] vadash:
My windows 7 Detcts: "Qualcomm CDMA Technologies MSM" What is it???

THX
[Nokia Lumia 800] Heathcliff74:
It is good... :)
[Nokia Lumia 800] Reflexdarky:
it is only good if it is detected as a flash disc if it does not then it is not much different then nokia dload

rob:good:
[Nokia Lumia 800] vadash:
Nothing appears as a flash device...
[Nokia Lumia 800] trenbeth:
So you probably installed some special driver that makes the device appear as that instead of showing DLOAD.

Indeed, the device should appear as a USB storage device in order to have the Qualcomm bootloader (you press a Vol- and Power in order to get into the USB storage mode, if you have the Qualcomm bootloader).
[Nokia Lumia 800] NielDK:
box in the house :) only 3 days delivery, super fast #fonefunshop UK
[Nokia Lumia 800] Bph&co:
Be careful when you solder the wires and remove metal shields. On the pullup resistors, replace the ROHS solder with good, leaded solder

first, use flux, then solder the wires. Otherwise you will get connection problems. Also make sure you use short as possible wires, the SPI

speed is bit higher than needed. Expect some errors.

If you have a microscope, inspect the quality of the solder joints before plugging to the box. Also plug the RJ cable to the box just before

pressing the button, and when finished, disconnect immediately. The box is bit buggy, also windows software crashes often, not sure what

states the pins stay in, best to have the phone unplugged most of the time.

Hope it helps.
[Nokia Lumia 800] ikinkyxd:
Thats surely some great information, when using the box !
[Nokia Lumia 800] NielDK:
while we wait, just some fun search with a certain new maps application on an unnamed device :)
[Nokia Lumia 800] lordmaxey:
Hey,

how did u remove these metal shields?
[Nokia Lumia 800] lordmaxey:
Hey,

how did you do this? I put off the metal shield and was like: "Wow, this is really small!!"

Do you have any special tools?

Any tips for not destroying the device?

Edit:

And why are you soldering on different points as desribed in the image from X-Shadow? (i mean the two wires next to the usb-port)
[Nokia Lumia 800] heishanxiaoyao:
Hi~

The more pic is here!

http://wp.it168.com/data/attachment/forum/201210/03/232103wdhkgucc9l1hceec.jpg

http://wp.it168.com/data/attachment/forum/201210/01/1813287c3row8w7wo4oy7q.jpg

it's like this:http://wp.it168.com/data/attachment/forum/201209/15/171354de47rmmhrtwggdcl.jpg

Use the ATF flash it!

http://wp.it168.com/data/attachment/forum/201210/01/181257m2qg238viwgojzqm.jpg

http://wp.it168.com/data/attachment/forum/201210/01/1812595yuu5cqbz2d55b5c.jpg

http://wp.it168.com/data/attachment/forum/201210/01/1813027g7gid425y027ksd.jpg

http://wp.it168.com/data/attachment/forum/201210/01/181302fyyey5cc8czzylvu.jpg

http://wp.it168.com/data/attachment/forum/201210/01/1813047o8dk18d72fzzd7z.jpg

http://wp.it168.com/data/attachment/forum/201210/01/181307he76hg7gg6gufy7n.jpg

http://wp.it168.com/data/attachment/forum/201210/01/1813096h1zzahh4mzeders.jpg

http://wp.it168.com/data/attachment/forum/201210/01/181311m6xa038c3z0v5ec0.jpg

The ATF suport lumia800 sim unlock(SP UNLOCK)

flashing custom ROM tool is here:http://xdaforums.com/showthread.php?t=1908029

the lumia800 custom rom is here(8835 wp7.8 24Languages)http://pan.baidu.com/share/link?shareid=68817&uk=3623901945

Good Luck to you!:victory:

Sorry for my bad english!
[Nokia Lumia 800] beka909:
somone give me that and i will unlock and give u back :D
[Nokia Lumia 800] Bph&co:
Hi,

I did only two of my test 710s. On the first i just ripped off the shield with the pliers, but this phone is only for testing,

not going to be used for actual calling, so it is ok. I wouldn't recommend this on your phone.

On the second phone, which was brand new, i just used 8 mm drill to drill partial hole on top of the two pull-up resistors.

Not fully off course, you will drill into the eMMC flash if you use too much force, then just expanded the hole using

SMD scraper tool. Finally i used old testpoint probles(we used those few years ago to unlock BB5 via touching balls on the CPU)

to connect to both resistors, instead of soldering. All require steady hand - holding two test point and operating the mouse ;)

BR
[Nokia Lumia 800] lordmaxey:
I finally managed to flash qualcomm bootloader to my dload lumia 800, with the atf testpoint method.

But it's strange, windows detects my lumia as a qualcomm device, but it doesn't show up as a mass storage?!

Also "fdisk -l" in ubuntu doesn't show me the partitions...

What can i do?
[Nokia Lumia 800] trenbeth:
What are the Linux kernel messages when you connect the phone to Ubuntu?

Did you start the phone with Power + VolumeUp? Did you get the short buzz that verifies you are in disk mode?
[Nokia Lumia 800] lordmaxey:
YESSS!!!! THANK YOU so much!!!

I forgot to put my phone into that mode :D

When i turn it off, and turn it back on using VolumeUp + Power, i get that little vibration and the phone shows up as a mass storage device in windows, and in ubuntu i can see all 9 partitions :)

Maybe the reason, that i forgot it, is because i didn't have to do this with my last lumia. When the phone was switched on, and i connected it to the computer, it showed up as a mass storage device immediatley, without this volup + power combination.

Again, thank you!!!

I am happy now, my dload Lumia 800 is now qualcomm and i can flash custom roms again!! :)

Any recommended Lumia 800 Custom Roms out there?

cheers
[Nokia Lumia 800] beka909:
dload

no one can to make such kind of unclok without hardware ? i think there must be some ways
[Nokia Lumia 800] lordmaxey:
No, there are Not. Not for lumia 800.
[Nokia Lumia 800] NielDK:
You can also get the activation code from MS support, from experience, I recommend using their chat (I called 3 times and was transferred numerous times, without getting someone who knew) https://gethelp.live.com/Pages/MSO.aspx?Locale=en-us&Product=wp7&Topic=Marketplace&ForumID=226241
[Nokia Lumia 800] OzzYGuY:
Dont know if this is any use to you guys, but i had a sim locked RM-801 yesterday. I downloaded Nokia Care Suite and the Data Manager.

From the phone "POWER OFF" state, i was able to get the phone recognised by first holding VOL-UP then plugging the usb cable in.

I was then able to flash the recovery using the Product Support Tool.

I dont have the phone now....took me less than an hour to get in in flash mode and repaired, and has gone back to the owner.

By the way the care suite had all the relevant drivers for it to be detected in windows.

Dont know if thats usefull or not, just thought id post for those that were having trouble getting the phone recognized.

Cheers,

OzzYGuY