yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] Shadowmite:
Well than back on track... Give it a try and see what you think. I really want feedback from folks outside the USA as I believe it will not properly catch your phone number of the "thief's sim" however if the sms works it should still get the phone number to you obviously.

The GPS coord. request feature is a nice one and will have to go on the todo list.
[Windows Mobile Development and Hacking General] shantzg001:
well, well, fights apart, what drew me to this app over the other apps was the opensource nature as mentioned by Shadowmite because I, like shadowmite, was not happy with the other apps doing things properly or just because I wanted somethings to be done differently..

@shadowmite:

1. I have a few ideas of getting "coordinates" and sending to the original owner even on non-GPS devices :)..Maybe we can discuss some things later on once the basic structure of the app is ok.

2. Couldn't find the source code of the app on ur site..(May be am just one dim-witted dim-sighted git ;) ) Please point me to it..
[Windows Mobile Development and Hacking General] Shadowmite:
You'll need svn to get it, windows users: http://superb-west.dl.sourceforge.n...vn/TortoiseSVN-1.4.4.9706-win32-svn-1.4.4.msi

svn://www.shadowmite.com/shadowmite is my master repository for all projects.
[Windows Mobile Development and Hacking General] shantzg001:
cool, I do have TortoiseSVN installed at home..Will check it when I go back..
[Windows Mobile Development and Hacking General] shaileshashar:
Will it sustain a hard re-set ? Dont think so.
[Windows Mobile Development and Hacking General] shantzg001:
@shailesh, for sustaining hard resets, it has to be cooked into the rom, pointed out by shadow on post 1..

I don't know if something else can be done for this (writing into ext rom is one option but that is not possible for most devices now)
[Windows Mobile Development and Hacking General] naboleo:
Sounds like a great piece of software. And open source is a great idea too.

I did tried several others like this one (Eye on the thef, Ultimately Theft Alert ...) some features were still missing :

First an autoconfig method :

As already said, whatever your storage methode is (file or registry), you 'll everytime lose the configuration when a hard-reset is done on the device. The only one possibility i can imagine is to store your "installer" program on extended rom with the ability to add an external config (encrypted) file as a parameter.

Installation will be handled by the autoconfig process, using this external file. Config will probably needs to be stored on extended rom too. It's not peace of cake to create an extended rom, but easier that cook a rom.

This feature won't be very helpfull if there is no way to generate a config file automaticaly base on settings done by user : kind of export process.

On standart start/soft-reset, your program will run as it does actually, but when a hard-reset, is proceed, programm will reinstall unattented and will still be running after boot... No way to easily remove it. Bad effect is that it will also be difficult to update programm/config.

Secondly, i'd like to have the a way to "format"(or encrypt) a memory card remotely.

Do you thinks those could be part of your TODO list ?

Will try it on few next days and i'm ready to help you translating it in french
[Windows Mobile Development and Hacking General] shaileshashar:
hi shantzg001,

thanks for replying,

My mistake, did not read the whole text.
[Windows Mobile Development and Hacking General] lastnikita:
To avoid any de-activation by a HR, it has to be cooked into the ROM, already configured for that particuar user, or it won't be active. So, I guess only a easy-step-by-step cooking method can succeed in such a task....

Anyway it would still be avoided by flashing another ROM..
[Windows Mobile Development and Hacking General] walshieau:
thats what the "Remote Control" part is for... ive got the API's to format the SD Card on command done...

yeah the whole hard reset part is stuffed... and there are three ways around it..

1. Cook the program into the ROM

2. Extended ROM customisation

i. Cannot be done unless the device is SuperCID or the fatfs dll has been patched...

3. Autorun installation from SD Card, which still needs the user to take the card out and put it back in...
[Windows Mobile Development and Hacking General] c0rnholio:
There seems to be a way to do it via extended rom. There is a german company that has PDA security software (Utimaco). Their software (SafeGuard PDA) has a hard-reset survive feature, an uninstall protection AND an active-sync protection. I don't excatly know how they do it, but maybe you want to take a look: http://www.utimaco.de/C12570CF0030C00A/vwContentByKey/W26K9K3H200OBELUK
[Windows Mobile Development and Hacking General] naboleo:
Sure, but it is mostly exact that many people have an CIDunlocked PDA. At least those who came in here, i guess.

The others avantage of using extended rom it that you do not need to reinstall fully your pda and just need to flash extended rom.

Make me think that you can remove by hand the startup shortcut (service or whatever) as it is not part of rom :( !

Rom cooked shortcut for startup and storage (software and profile) on extended rom seems a bit too difficult for the average user ,isn't it ?

Would be very nice to have those !
[Windows Mobile Development and Hacking General] Shadowmite:
In order to survive a hard reset I really intend this app to be cooked into the rom. Granted there may be other methods, but all will be just as complex as the user has to make their own settings file regardless. Installing this in a cooked rom is simplistic and is the main reason I wrote this, simple copy the 3 files to the dump folder, and edit initflashfiles to put the shortcut in startup... That's it.

I could most likely write a pc portion to automate this if needed, just point it to the dump folder and click go...
[Windows Mobile Development and Hacking General] shantzg001:
@naboleo: SuperCid\Cidunlocked doesnt mean u have "write access" to the ext rom, i think in later akus u get only read access on ext rom..

@shadowmite: i just mapped ur repository and saw that ur code is in .net..i wont be able to contribute to it much as am a native developer..but will surely be tracking this thread eagerly...
[Windows Mobile Development and Hacking General] naboleo:
You can't always have direct write access to the extended rom,but there is a way (using winimage and other tools, link was on the forum somewhere) to be able to extract/edit/flash back your own extended from a real computer

Look at http://xdaforums.com/showthread.php?t=299723, let's hope it will help you a little
[Windows Mobile Development and Hacking General] Shadowmite:
Thanks, I'll have to take a look at that... Just a note the version out of SVN will of course be far more up to date, the problem with locked SIM's throwing an exception is now fixed... Next up, activesync lockouts I think... I'm gonna let walsh tackle the sms handling portion.
[Windows Mobile Development and Hacking General] Shadowmite:
Updated the zip file here to the latest as of now, fixing quite a few early bugs that would prevent various sims from working ranging from simlock being set to no sim being present.
[Windows Mobile Development and Hacking General] naboleo:
Ok, did try it few minutes ago :

My remarks :

After completing the form, i can't enable security because of registry writing error : see screen capture.

I finally came up with soft-reset my pda and was able to enable it

I also had troubles with text imput, having square instead of text show in form, but probably not related directly to your program as I was using "MyMobiler" to remote control it.Soft reset solved the problem and I can't reproduce it yet

Number is show as NOTSUPPORTED, don't know if functionnlity is not available yet or if program have troubles with identifying my card.

Finally I think it would be better to have a different screen for entering configuration first time and for entering after security is enabled.

Just asking for password would be enough I think.

I don't know how it works in others countries but phone number is part of the identification process for providers in France (when you have to call them at least). So having my email address and/or phone number in clear text will potentialy permit identify any user as me... Same problem with storage in clear in settings file/registry

Was not able to switch sim card yet, but will do it in a few days

Should say that i can't wait to have this tool fully working :-P Great job !
[Windows Mobile Development and Hacking General] ww2250:
Good work, man!

I think the Activesync must be locked down - since via Activesync you can do many nasty things like stealing your whole addressbook, copying files, removing the program config file.

Even if you hide the config in the registry, there's still Activesync API available to modify the registry.

Next I guess, would be good to disable the memory card autorun as well. I am not sure how, but autorun may drop a program to remove the lock by simply inserting a card into the slot.

I am a trinity owner too - would be nice that it could use its gps capability for something useful. However, it's slow to get a fix. I tried to put it in my pocket and walk around and didn't get a fix at all...

On the other hand, I believe this program must be cooked into the rom. Just too many knows the fact that extended rom customization could be skipped by just resetting at the right time, in time.

God knows if there's a way to prevent flashing the device at all. I believe it's possible since the I believe SPL could be hacked to accept some sort of password such that everyone must know the password before flashing. That way, we can really lock down our phones.

Perhaps, I dream too much :-)
[Windows Mobile Development and Hacking General] aatreya:
If there's a way to programmatically lock the device using the built-in password lock, you might want to consider that, since that will lock the person out of activesync as well.
[Windows Mobile Development and Hacking General] Shadowmite:
There is, the problem with that is I want to have a message up about why the device is locked and who to contact to return it. The solution I'm using is pretty effective, I just need to explore the registry keys to break the activesync connection (which should be all there is to it).
[Windows Mobile Development and Hacking General] ww2250:
Hmm... no offend - but the method to break activesync connection might not be universal or portable across different machine models. Just my 2cents.
[Windows Mobile Development and Hacking General] ww2250:
Just have a new idea. How about to add a function to take a photo when someone is trying to enter a password (after the SIM has changed), and then send that photo out if the user enters wrong password too many times.

Trinity has 2 cameras - one in front, so it's bound to be extremely effective counter theft measures. Incidentally, I came across a free camera library that may be useful.

http://teksoftco.com/forum/viewtopic.php?t=52
[Windows Mobile Development and Hacking General] princeasi:
ok just to let you know, i cooked the app into my rom, i tested it this morning and found out that when the password screen pops up from a different sim card insertion, i was able to bypass inputting the passsword by holding down the x button for a sec and releasing. it seems that it was closed by the x-button app!
[Windows Mobile Development and Hacking General] shantzg001:
I had smthing "similar" in mind. The thing that u r suggesting is not possible (unless u get some help from HTC itself) because the front camera of any HTC device is not exposed to external developers, so u cant control it..

What I had in mind was, that if the app detects a wrong sim, it starts clicking pics at some interval and uploads the onto a preset server(or mails them or mms's them), but this can be quite a PITA because of so many variables like if the user doesnt have a gprs connection, and how to do this (making a data connection) while not letting him know etc..But if those things can be figured out (or we agree to live with them) then its quite a good feature because the cam is bound to click snaps of places arnd the thief, of ppl arnd him, or maybe even himself (when he is checking out the back of the phone :P )...(plus he also runs a bill on his data usage :) )...

Another idea that I had was, that whenever the app detects the phone as idle, it makes a "background" call (i.e. no visual indication to the thief) to ur preset number and u can listen in on the sounds around the thief, maybe u can catch names of ppl, or names of places where they work\study etc, which is easier to implement, easier to hide, and mide get u clues abt where to look for him
[Windows Mobile Development and Hacking General] Shadowmite:
Yea, if you put this into a rom or on your phone having x-button set to close on click and hold is not a good idea... I'd recommend turning that off, that's a process kill and not much a running program can do to stop that, though I guess I could launch a second program which runs in the background and will re-run the first if it's closed... But that is a lot of extra memory overhead for something as simple as not having x-button set this way.

I'm sorry I haven't worked on the app lately, I was hoping walshy was gonna help out with the sms portion but I think he's been busy, so I will soon pick it up and start running with it as well. I'm coming up to speed in native c++ programming which will be needed for the sms intercept handler...

The cam pictures idea is a great one and will go into the todo list...
[Windows Mobile Development and Hacking General] shantzg001:
abt the x-button thing, I think there is indeed an option, which is to:

1)Keep thepswd input box maximised, create extra taskbar and softkeybars to cover the rest of the pocket pc apps,buttons so that the user cant reach them.

2)trap all the hw buttons so that the user cant use smthing like alt-tab or smartskey to bypass the pswed screen..

BTW, a few months ago when I was thinking abt creating a anti-theft prog, I had created a kind of spec listing most of the things that I wanted the app to do. I'll paste that list here in a short while (as soon as I'm able to find it in my cluttered lappy ;) ), maybe u can find smthing useful there...
[Windows Mobile Development and Hacking General] princeasi:
hey no worries, I like this program. It has alot Of potentials, and I'll try cancelling the x- button to see how it works! Thanx
[Windows Mobile Development and Hacking General] ww2250:
It's quite a piece of old code floating around. It should be able to access the camera via the HTC api. But whether the 2nd camera would work is an unknown.

http://blog.opennetcf.org/ncowburn/content/binary/HTCCameraAPI.zip

There is also an app that can use the HTC front cam:

http://www.ateksoft.com/webcamplus.html
[Windows Mobile Development and Hacking General] shantzg001:
If the HTCCameraAPI really allows access to front camera, then WOW man..

Shadowmite, pls do check it out. I cant do much with it cuz I dont have an iota of knowledge about .net programming and the attached code is in .net..

I know about ateksoft app. I guess they might have signed NDA etc with HTC to get the APIs, its a paid app after all..
[Windows Mobile Development and Hacking General] shantzg001:
Here is a list of some of the things that I thought of putting into my (non-existent) app. Many of the things are already implemented by u, or in ur to-do list..Just take a look if you find smthing interesting:

1. Option to lock down the phone completely.
2. Option to disallow phone calls
3. Option to display owner contact info and message
4. Option to make a hidden\unhidden phone call to owner specified number.
5. Option to take picture regularly and send to owner
6. Option to send sms to owner specified number
7. Option to send contacts info stored in thief's sim to owner specified no.
8. Option to send sms to all called numbers specifying that the phone is stolen
9. Option to send sms to all contacts of thief specifying that the phone was stolen
10. Option to take GPS coordinates of thief and send to owner
11. Option to send Cell Id (or sm other location info) on non-GPS phones to owner
12. Option to remotely send message to thief thru message box.
[Windows Mobile Development and Hacking General] fallenczar:
here is my (unwanted) advice...

1)have the app. incorporated in the rom and make it store the settings file on the phone 2) on ext rom 3) on the memory card and have the app scan these places in this order..if this file is found then the settings in it will be used and it will create copies of itself in the above mentioned places.

you could also provide an option to hide the extended rom and lock it during initial config of the program.

2)this is technically more demanding but you may consider creating a costom dialer which will show the no. pressed but will dial only a predefined no. this will be launched when the thief presses the phone button (you will need to trap all hardware buttons) making him call the owner
[Windows Mobile Development and Hacking General] shantzg001:
fallenczar, you dont need a custom dialer here..one can just trap the outgoing call event, hangup that call and start ur own call with the predefined no.., though the native dialer will show that the dialed no. is disconnected..
[Windows Mobile Development and Hacking General] daxliniere:
Heya Shantz!

Good to see you contributing your vast knowledge to this project (which seems like a GREAT version of a great idea)

Best of luck! I'll be loading this as soon as it's done!

(I might even learn how to cook a ROM because of this!)
[Windows Mobile Development and Hacking General] fallenczar:
i'm pretty sure you can but the reason i proposed a custom dialer was so that it did not have a close button and it did not provide access to the start button, while at it we may also consider making the hangup button ineffective (maybe we can make it hide the phone call and bring down the phone volume to minimum level )
[Windows Mobile Development and Hacking General] faria:
@ Shadowmite

i have cooked the app into my rom...it worked fine for 3 days,then today a decided to test it properlly by using my wife sim card, the device booted and asked for the password, but once i enter the password nothing happens i stays locked....so i put my sim card in and rebbot ,again the same....my device still locked! i have attached a picture...

as for the htc taskmanager i wiil post later the fix for it including the fix for the new upcoming htc task manager.
[Windows Mobile Development and Hacking General] Shadowmite:
Faria, the program sets a flag when it locks out to prevent the thief from putting the original sim card back in to get it working again. Are you sure your password was correct? you can of course get around this at the moment by syncing with activesync and deleting the SecurIt.dat file from \windows, but if your password wasn't wrong this is odd...

Looking at your email, it's a little messed up, is this a character translation issue maybe? If you open the SecurIt.dat file, how many lines are in it? should be 5...
[Windows Mobile Development and Hacking General] faria:
:x???"t?z???&
???[??????g???H
???z&2?{I?
?w
[EMAIL="jaf_30@msn.com"]jaf_30atmsn.com[/EMAIL]
+447911123456

above is my current data in the file.

actually activesync would not let me browse the device,had to hard reset.

also when i run the program the sms number is in the email field and vice versa....it also says my password is incorrect,im guessing that somehow the rom cooking procedure corucpted the file....i gonna try again, im sure is something wrong in this end [since im with the flu an all].... i will keep you posted.

but the funny thing is that when the device boots i get the sound that state that everything is allrigth.
[Windows Mobile Development and Hacking General] faria:
here are the settings to stop current taskmanagers verrsions 1xxxxx closing the app;

add the folowing to your rom or the app

[HKEY_CURRENT_USER\Software\HTC\TaskManager\APPS]
"99"="SecurIt.exe"

for the upcoming htc taskmanager version 2xxxxx add the folowing;

[HKEY_CURRENT_USER\Software\HTC\TaskManager\ExclusiveList\System]
"\\Windows\\SecurIt.exe"=dword:00000000
[Windows Mobile Development and Hacking General] Shadowmite:
Hmm, well I think I know the problem, I can fix it in the next version which I'll try to get out tomorrow. I expected this might happen, but never got it to. Basically I'm writing the binary md5 hash of the imsi and password etc to the dat file, but as their actual ascii values. So you happen to have a linefeed/carriage return in your hash which is screwing it up! So I'll just translate it to hex first and it should all be good.

Should be able to get a new version ready for tomorrow with a few tweaks and fixes.
[Windows Mobile Development and Hacking General] faria:
that explains it.

thanks. i started anew but with the same results.sms still shows in email field and the email all screew up...password still no go.
[Windows Mobile Development and Hacking General] faria:
i forgot:eek:

great work and many thanks for sharing you skills with us.

regards
[Windows Mobile Development and Hacking General] Shadowmite:
No problem, just trying to give back what I can! :)

I haven't tested this version on my phone as I wrote the damn thing too well and it's locking me out since I have the app burned into my rom... I'll have to write a little PC companion to save your .dat file on the pc without the phones help (should make rom building eaiser too). This exe should use the md5 hashes in hex form now thus fixing your issue. Once I get a few more bits done I'll package it all up into a cab again.
[Windows Mobile Development and Hacking General] sigc:
A great idea
[Windows Mobile Development and Hacking General] naboleo:
Any progress ?
[Windows Mobile Development and Hacking General] Underwaterdub:
nice app...
[Windows Mobile Development and Hacking General] geedsen:
HTC S710 /E650 (dutch)

Installed it. Started it from programs.

The 'busy circle icon' shows, but never goes away.

After a few minutes it comes up with an error:

Securit.exe

NotSupportedException

at

Microsoft.AGL.Common.MISC.HandleAr()

....(and more)

this is WM6, it did complain about 'wrong version' during the install.

How do I remove it completly?

Tnx

geeds
[Windows Mobile Development and Hacking General] babarnazmi:
Great Tool

Its very handy application, specially device locking is great for theft protection.

Congrats Shadowmite on developing such a nice application. Thanks a lot

I tried mobile justice,

1)it got gps support (nice but my wizard don't have gps)

2)sending/displaying messages to stealer. (it will be nice to see same in SecurIt)

3)don't have device locking...

Thanks and Warm Regards,
[Windows Mobile Development and Hacking General] captkkk:
Nice little piece of app Shadowmite, I use it along side with HideMyStuff for the documents hiding with a password, also using Eyes on Privacy for locking my SMS list and recent call, so it very safe now, thanks for all the hard work.
[Windows Mobile Development and Hacking General] ChetanPujara:
SecurIt does not work in my T-Mobile Dash (HTCS620)

Hi @Shadowmite,:)

Could you please help me to get the latest version if you have developed... I am using T-Mobile Dash (HTC S620) with Windows Mobile 6 version... I have downloaded your excellent program but it shows error in installing...

The error is....

Securit.exe

NotSupportedException

at

Microsoft.AGL.Common.MISC.HandleAr()

....(and more)

Can you please help.. I need this software...

Regards

Chetz:cool:
[Windows Mobile Development and Hacking General] Yatesy24:
Hey,

I am very interested in getting the source for this one, could you re-post it for me?
[AT&T Samsung Galaxy Note 4] kiusnga:
HELLO MY DEAR FRIEND I NEED N910AUCU2COC5 AND N910AUCU2COC6 STOCK FULL ROM TO UNBRICK MY NOTE 4

I'M WAITING FOR YOUR HELP THANKS.

Kius_nga(wanda)
[AT&T Samsung Galaxy Note 4] dieselbuddeh:
Easiest way is to find a best buy with a samsung experience shop.
[AT&T Samsung Galaxy Note 4] kiusnga:
i do not understand what you mean bro