yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 General] hounsell:
If it relocks, it doesn't delete any sideloaded apps, it just prompts you to uninstall when you attempt to run them (though you can escape from the prompt of course). Also, you can avoid it relocking by putting the phone in Flight Mode before syncing.
[Windows Phone 7 General] fb401:
THAT is very useful. Sharing HTC, LG and Samsung oem apps across platforms should be allowed.
[Windows Phone 7 General] digger1985:
Any chance of sharing the (Free) HTC Youtube app? That's the only I desire desperately.
[Windows Phone 7 General] sensboston:
This "proof of concept" shows only one thing (according to youtube video) - guys intercepted search requests from Zune, parse the responce and make a simple app to duplicate Zune's functionality. Anyone who can spend 30 minutes to WireShark and couple hours for coding can do the same app (actually, I've already posted a direct URL's to the marketplace apps on this forum).

As far as I understand, that's it, nothing more. No DRM crack, no "apps cracked", no "security hole" - just nothing!

As for .NET apps vulnerability: does anybody here have an experience to disassemble and compile back a really complicated and large application, obfuscated by the latest commercial version of Dotfuscator (actually, the wp7 devs can obtain it for free until March 2011)? I've tried once (of course I'm not a "some hat - white or black, just a pro developer)... Results are negative. In theory it's possible but... We saw a lot (no, A LOT!) of commercial native apps for win32, mac etc. successfully cracked and hacked. Just visit any pirate tracker for proof. So, it's not a "big .NET problem".
[Windows Phone 7 General] sensboston:
Without real hack (hacking license verification etc.) it's not possible. Simple downloader described here as "WP7 ultimate crack" can't help. If you want you may search my posts here, I've already posted direct link to HTC's youtube xap...
[Windows Phone 7 General] digger1985:
I think it's real.

Another guy also did the same

http://forums.create.msdn.com/forums/t/70704.aspx

He cracked an app on request and loaded into the emulator.
[Windows Phone 7 General] digger1985:
I believe Hounsell managed to run the HTC stocks app on a Samsung

http://www.neowin.net/news/htc-wp7-app-ported-to-other-wp7-hardware
[Windows Phone 7 General] sensboston:
Real what? Read my post above... If someone "hacked" non-obfuscated small application by removing or blocking IsTrial() requests, it's not a real hack.

Ask this guy to "hack" NeedForSpeed Undercover ;-)
[Windows Phone 7 General] indiekiduk:
You didn't see any source code for commercial native apps because there are no automatic tools that do it, but you can see source code for all WP7 apps, using a free utility called Reflector. You choose the app, and it generates a visual studio project containing the code, simple as that.

In my experience developers don't readily use .NET obfuscators because they generally introduce instability which leads to increased development time.
[Windows Phone 7 General] n0psl3d:
Huh? HexRays has an ARM decompiler which can produce readable C. It is possible to get back to similar to the source equivalent (with a lot of manual tweaking). If MS used a strong packer on the native code then it would make reversing it much harder/time consuming. At the end of the day it still needs to execute.
[Windows Phone 7 General] sensboston:
I've used .NET Reflector for years (and I do have another one, for Java/.NET written by my friend - sorry, can't announce it here).

My question is: have you ever tried to disassemble and re-assemble big, obfuscated application? Or you just theorizing? I did, and it's very complicated/not possible (at least by using Reflector tool only). This method is good for small non-obfuscated application only.

For the topic: here is my "proof of concept"

- use this url to browse Zune market for apps:

http://catalog.zune.net/v3.2/en-US/apps?q=Ebook Reader&clientType=WinMobile 7.0&store=zest

replace Ebook%20Reader to any your search term, don't exactly know about "store" field and en-US. You'll get an XML in response with found apps info.

To get an app full download url, I believe, you'll need some additional requests but I don't have time (and interest!) now to play with Wireshark and track Zune's and WP marketplace requests...
[Windows Phone 7 General] athompson:
Really? You should be able to decompile it and recomplie it with Reflector though, right? Even if the actual meaning of the code is hard to deduce after that point.....The CIL is stack-based, so you should be able to break it up into functions if nothing else.....

Ya, this guy is lame. Let's ignore him and get back to work getting real stuff done.
[Windows Phone 7 General] GuestK00306:
This ^^

Reflector is great, but it's not a one-stop-recompile-shop. It still takes a massive amount of restructuring to get even an un-obfuscated application back together.

Also, WP7 business logic is almost always in the cloud. For 90% of applications, XAPs are basically just UIs - especially with the intense restrictions imposed on development right now.
[Windows Phone 7 General] hounsell:
I've got it running, but it doesn't function at the moment because HTC decided to use their own native functions tied to their driver, rather than the inbuilt .NET classes. All the network requests the app makes fails. Thinking of possible ways round this, but it would probably end up being so much work, it might just be quicker to create a clone.

This. Reverse-engineering, and even modifying an existing app is one thing in Reflector, but copy/pasting code will never work in large quantities, it's just not that accurate in my experience. So sure, your tips and tricks might not be safe, but your app as a whole isn't going to be just duplicated and reuploaded to the marketplace.

Of course, "cracked" for piracy is a whole other matter.
[Windows Phone 7 General] indiekiduk:
reflector has been able to generate visual studio projects for quite a while now. So no need to copy and paste the slow way to recreate any more.
[Windows Phone 7 General] indiekiduk:
That's why I said automatic and why you said "with a lot of manual tweaking" :-p
[Windows Phone 7 General] ~~Tito~~:
Please keep theses discussion threads in WP7 General!

To General!

~~Tito~~
[Windows Phone 7 General] hounsell:
Yeh, but in my experience, it never outputs something that'll build. It'll take a fair bit of tweaking to get to a buildable state.

Just seen this. Hugely disappointed. All he's doing is advocating the amateur response of sticking a crapload of inefficient checks in that do not protect the app in any significant way.

Just awful. It's not the way to go.
[Windows Phone 7 General] kuerbis2:
@Tom: Why do you think that checking for a PlayReady file will not put any additional step of protection to it? Especially as the PlayReady file already does get special handling by the underlying OS. It doesn't protect against disassembling and "real" hacking, for sure. But that will always happen (*).

In my understanding it is more about how widespread a possible hack can be applied. An additional check code, injected at multiple places combined with obfuscation will make any automated attempt of protection removal a lot harder, won't it?

That it is not a good way to go: Agreed. At least as long as there is no automated tool which randomly inserts corresponding code. But I actually want to understand the attack vector on the above scenario (especially for tools which can be easily used by normal users).

@sensboston: Concerning your "proof-of-concept": Can you deploy the downloaded xap to any device? Don't think so. Even for the free ones.

Thanks!

-tobias

(*) Look at you guys, do you really think anything can stop someone like Rafael Rivera? Or the driver/kernel guys of the android ports?
[Windows Phone 7 General] hounsell:
Well, the other half of the complete removal of DRM requires tweaking the DLL itself anyway. While you're there, stripping a few checks is hardly going to be a difficult task.

Even "by hand", going from a downloaded XAP to deploying to a device is a matter of a few minutes at the most. Adding a few checks might extend that a bit, but it's only a matter of time.

As for automated removal, it's somewhat trickier, but still far from impossible. Particularly if the string remains unencrypted. Still a block of repeated code using XML loading classes would be a dead giveaway to an automated tool. It would probably just end up a cat-and-mouse game, with someone devising a subtley different way to express the same code, and the crackers just issuing an update that would enable an automatic tool to remove such DRM.

Most obfuscation isn't much use at all. Most do no control-flow-reordering, or any kind of "encryption" of strings, making sure the relevent code stick out like a sore thumb.

Still, piracy thrives on other applications without such an automated system. The whole setup of alternative marketplaces seems quite functional for other platforms, one person cracks it once, and shares it with the rest of the community.

I don't know what people expect to happen here. I would rather see people focusing on creating optimised, functional apps than adding some pointless check that offers effectively little to no protection. Performance is variable enough as it is, even with stringent MS guidelines. What's the betting there'll be at least a handful of developers who accidentally stick the code some really annoying place, to the point it creates a noticeable slowdown?

The thing here, is that the only apps such protections will halt piracy on is the apps that weren't worth it in the first place. A system like the one proposed, of checks, can always be circumvented, no matter the size or scale, it's only a question of whether your application is worth the effort. Which it probably won't be if you've spent more time devising checks to "protect your investment" than actually investing in your application to make it the best out there. The whole route is a dead end, and I'd hate to see app quality suffer for it.
[Windows Phone 7 General] malatesta:
Daniel Rubino here, poster of that video. I assure you, it cracks any and all apps in the Marketplace. It is not hard at all to strip out the security sig. in an automated fashion. The developer of the app has come forward in addition to discussing things with Justin Angel who can vouch for the crack (http://twitter.com/#!/JustinAngel/status/20573541191647232) . Ultimately, my reputation and our site's is why people are confident this is accurate--I've been around this scene for a long time.

I could show you the "I am Rich" app running on my device as "proof" but honestly, this was more abut putting all the pieces together as opposed to defeating the super weak DRM. I didn't crack a paid app on video by request of Tobias (the developer). He simply does not condone piracy and thought it would be unfair to crack someone's app like that, so I obliged.

Here is our follow up post for developers: http://wpcentral.com/fixing-drm-windows-phone-marketplace-follow-developers
[Windows Phone 7 General] N8ter:
Remember Pirate Bay?

Anyways, Microsoft can update their DRM.

They do the same thing with Windows Media DRM.

If it gets cracked, they simply patch it and it has to be patched again.

It's a perpetual pirating treadmill. Waste of time, IMO. Focus on things that matter, and pay for the apps you find value in.

Good developers use better tools than Dotfuscator, Lol.
[Windows Phone 7 General] kuerbis2:
@Tom: Thanks for taking the time to answer.

If the hole is closed I will share the required code. There you'll see that no manual tampering is currently required (think you already know that). Yes, the binary is changed, but it completely differs from removing code branches or replacing code fragments.

Once again, absolutely correct.

At the end of the day we speak about applications with an retail prices of mainly < $5.99. Personally I would say, if you have a user interface where you can search for the app and just download it for free from the original marketplace (meaning: no trojans, checked by MS, etc.) the allure is there. If you have to check out different sites on the net etc. it's already too complicated for about 80% of users because we are still speaking about this marginal amount of money. In addition, if there are central download sites, there is someone you, e.g. MS, can sue.

Still, injecting simple code fragements/assets (with encrypted strings, as mentioned in the original article) combined with a good obfuscator will more or less stop "Do-It-Yourself piracy" with automated tools. Not the best way, but one the current toolset allows.

Regards,

-tobias
[Windows Phone 7 General] sensboston:
No, I can't now 'cause I don't have much time to play with COM-backdoor for custom app deploy. But it's possible of course...

As far as I understand, the real hack is not a GUI app (it's just a helper) but replacement of "WMAppPRHeader.xml" for debug signature xml, and deploy "hacked" xap to the handset. Correct me if I'm wrong but I think it possible because of "COM-backdoor" found or published on this forum.

But my point is: it's not an "end of world" or "ultimate wp7 platform hack". This hack affects to the weak MS protection scheme only. Yes, I agree - MS made a big mistake. Simple zip password protection for xaps can dramatically increase the protection level, but..

It's just a proof - don't trust MS too much, use your own protection :-)
[Windows Phone 7 General] kuerbis2:
No, there is no com-backdoor involved, no debug signature, nothing in this direction.

Looking for good ways to do it ;)

Regards,

-tobias
[Windows Phone 7 General] sensboston:
Okey-dokey, I've get my words back. Neo, you are the ONE :) Congrats!

BTW, it's not break my point. Your hack have nothing to do with Netflix or my current employer solution. And (probably) with my apps - I'll going to publish 'em on marketplace asap.

If you not going to make your "super-duper" hack app webwide, wp7 developers have nothing to worry (I believe your solution will blocked by MS asap).

So, it's not a "revolution" but just an "evolution". Nothing special but big thanks to you for your work!

P.S. Happy New Year for everybody!

P.P.S. tobias, do u have your own app at the market? Just curious, would like to see..
[Windows Phone 7 General] The Gate Keeper:
well even though the guy who came up with the hack and listed the problem, without letting everyone see how it works, the fact that the community knows means that someone who isn't a white hat hacker will come along and use this information for ill intent. so just because we don't have it readily available, the fact the information is out there means that it's merely a race between MS to patch (if they will) and some black hat hacker to crack it.
[Windows Phone 7 General] kuerbis2:
Would like to, but my marketplace account is still not validated by GeoTrust (waiting & paying since Dec, 4th)

Just to get the facts right, I think Tom did it a few days before me. Getting an htc app running on a samsung device implies, that he circumvented the licensing.

Happy New Year for everybody!

Regards,

-tobias
[Windows Phone 7 General] sensboston:
I'd like to give you an advice (it worked for me): create some simple dummy app and submit with description "Dummy application for account activation" to MS. Your account will came alive in few days.
[Windows Phone 7 General] emigrating:
Not sure how MS would go about patching this hole tbh - at least not asap. That said, this whole thing still depends on your device being unlocked in the first place, and until someone comes up with a more permanent unlock than Chevron I'm not too worried.

Also, in my experience this does not apply to games (or anything developed using XNA) and while I can see people wanting to pirate some of the more expensive games available I just don't see it happening for the majority of apps out there costing, on average, just over a buck a pop - especially when the good ones have trials available.

As a developer I've seen, first hand, that most people are happy to pay for the software they use as long as it works as advertised and is priced "correctly". Of course, those same people will take something for free if it's handed to them on a plate but until there is a permanent unlock available along with a desktop app (like what I've just put together - let's call it another "proof of concept", so this is certainly possible) displaying the same data as Zune allowing you easy download and install access I believe the average Joe will still pay up.
[Windows Phone 7 General] ameel:
Still, one wonders how the security signature was bypassed :/
[Windows Phone 7 General] ajhvdb:
Very easy. Microsoft adds certificates to the dll, and adds a xml file to the XAP file.

The crack is to delete this all. Now the XAP file is the same as when developer compiles it. So you can copy it to your PC and install it on to your development device. It will cost you only 99$ once..

See here:

http://xdaforums.com/showthread.php?t=894502

http://xdaforums.com/showthread.php?p=10262910

I don't get this, why is this allowed by xda...it's looks to me like piracy :( , but Microsoft is allowing it, so i guess it's ok then.
[Windows Phone 7 General] indiekiduk:
It's not a crack its how Microsoft implemented the feature to allow developers to test their apps. Unfortunately it makes the device security so weak it might put them off developing for WP7 over iPhone.
[Windows Phone 7 General] emigrating:
Not quite - it will cost you $99 each year (unless you're a student - and can prove it). Also, once you have paid your $99 you are only allowed to side-load 10 apps, which means you've basically paid 10 times the amount per app you've pirated.

Yes, I know; there are ways around the 10 sideload limit, but really, it's not easy enough for most people to bother with at the moment, so not a big issue.

Why? The iPhone has been cracked fully open for ages and people still make plenty of apps for it. From what I can tell, the fact that we have pirated iOS apps floating around hasn't made a dent in our sales at all.

Thing is, these apps are so cheap that people will not think twice before purchasing. For them to actively go out and pirate them they would have to be so broke they probably couldn't even afford the phone in the first place. If the average app price was $20 I would agree - it's would be a problem, but with average prices being as low as they are, it just isn't.
[Wildfire General] deepakgmd:
i recently installed Android 2.2 Firmware Over The Air (FOTA) update to my htc wildfire now the problem is that i am not able to install live wallpapers and my home screen is not rotating
[Wildfire General] 3xeno:
LWP's are only supported on Custom ROM's. HTC doesnt officially support LWP's on the Wildfire, and, since you already have the FroYo OTA, you are out of luck installing LWP's.

Also, if I remember correctly, the home screen (On the default Sense Interface) doesn't rotate anyway.
[Wildfire General] Dr_Death:
use wildpuzzle V0.6 it support live wallpapers, work fine and smooth :cool:
[Wildfire General] tomazas:
There is app live walpaper picker apk with this app you van run lwp
[Wildfire General] keanustar:
I can't find this app on the market...
[Wildfire General] gogusteliade:
to install lwp picker must have root?
[Galaxy S I9000 General] andrewcpy:
i got problem when i am dialing

it goes to black screen without any reaction

it can only recover when cut the line by the receiver

is it the phone.apk problem or other else ?

my is dark's7.0 2.2.1
[Galaxy S I9000 General] Geryatrix:
Do you have a case on the phone? it sounds as though the proximity sensor is being activated by something.

If you have a case or a screen protector, try taking them off and then using the phone.

Best of luck.
[Galaxy S I9000 General] andrewcpy:
no.. no...

even i place it on the table... it goes to dark screen

maybe if your case is standing, it has dust on the senor...

how to clean it ?
[Galaxy S I9000 Q&A, Help & Troubleshooting] Margaliini:
I use my Galaxy S while running to play music through my KOSS headphones. Every now and then but almost during every run, the music just stops and I have to start the playing manually.

I use PowerAMP and the program's own homescreen widget and every time this stop happens, the widget don't show in the home screen while turning the screen on, like if the headphones were disconnected.

This problem has only occurred while using the phone during running. I always have my phone in my pocket during running and the headphones are tightly plugged in the jack, so I don't understand what would be causing this?

Would this have perhaps something to do with the moisture of air that would be causing this kind of misfunctioning with the headphone jack or what, cause this happens only outside?
[Galaxy S I9000 Q&A, Help & Troubleshooting] alexanderct:
might be the case not letting the headphones plug in snug enough even though it feels secure
[Galaxy S I9000 Q&A, Help & Troubleshooting] Margaliini:
Thanks for the answer, but it's not that. I've confirmed every time the stop has happened, that the headphones have been tightly plugged in the jack. Still, it seems that the phone thinks somehow that the headphones are unplugged.
[Galaxy S I9000 Q&A, Help & Troubleshooting] Margaliini:
BTW, I have a strong feeling that the moisture from my sweatty jacket-pocket and the very cold wintery air have something to do with this oddity.

Anyone else into sports having similar problems?
[Fascinate General] jonagpa:
Can some one please tell me witch gps fix is the latest one and witch one in your opinion actually works. I see that a popular fix is the Dj05 radio fix and there is even a hardware fix out for the vibriant that bends the gps antenna contact. So witch one should I try first? witch actually works and witch are known not to work?

I searched and came up with a lot of different threads and I think we should consolidate all those threads and list all the fixes and make a poll asking witch fix worked better for the users. This is a very common problem and I am surprised there are no stickies threads been update regularly with the latest info. The biggest problem is that there are MANY threads about it and some are very old, not sure if there are better fixes now.

So please help me list and consolidate all those threads, I will update this post showing all your input. I also have 3 fascinates that all are a little different when it comes to gps and would love to try the fixes and post my results on all three.

Edit: I would also like to write the proper way to test your gps, I see some threads have this buried in between the gps fix steps and I would like to make it more obvious so if you know how to properly test the gps, let me know. I know there are some apps like gps test and status that show you lots of info, would be great to see a list results with a working gps and a faulty one.

thanks.
[Fascinate General] bleeeeeeek:
Dj05 solved my GPS woes.. insta-lock now..
[Fascinate General] Dalamar1320:
When I was running stock, and rooted dI01 I laterally could not acquire a signal. I tried leaving it on, outside in the open, for over an hour, and nothing.

Going to dj05 I can lock within 10 seconds or less.

I am so impressed with the difference.
[Fascinate General] jonagpa:
http://xdaforums.com/showthread.php?t=869990&highlight=dj05

I tried following the guide on this link, successfully installed the radio via odin, tried installing the rom and kernel through clockwork but I do not have an option to choose zip file from sd card. the only option i get is to apply sdcard: update.zip. I changed the name of the rom zip file to update.zip and tried to flash it but it told me it failed to verify whole-file signature. What should I do now?

the guide does not explain much so I need some help.
[Fascinate General] jiggaman508:
Did you flash clockworkmod recovery through odin, then flash clockwork from rom manager? If so you should have an update.zip on your sd card that when applied takes you to clockwork then you can choose which zip to flash from there...