yashsingh1/xdaforums huggingface dataset:
[XPERIA X10 Android Development] consolation:
LOL, and you will know a number is a prime how? Think about the algorithm required to test a number for being a prime, then think if it's still quicker?

It'd be faster to study up on crypto vulnerabilities, then look for them. But, if you want to watch the galaxy rotate while you wait, go nuts.
[XPERIA X10 Android Development] xtrmshadow:
testing a number if its prime is easy in c++

after reading the number you just gotta do the algorithm :

scanf("%d",&num);

int b=0;

int res=0;

int i=2;

while(i<num && b==0){

if(num%i==0){

b=1;

res=1;

}else i++;

}

(num = Number to be scanned , res = if this is different from 1, then the number is prime,if res IS 1 , then the number aint prime)

but whats all that gotta do with the key?

For those who want the full algorithm :

#include <stdio.h>

#include <conio.h>

#include <math.h>

int primo(int);

main(){

int num;

float resul;

printf("\n Introduce the number : ");

scanf("%d",&num);

resul=primo(num);

if (resul!=1){printf("\n the number is prime");}

else { printf("\n the number aint prime");}

getche();

}

int primo(int num){

int b=0;

int res=0;

int i=2;

while(i<num && b==0){

if(num%i==0){

b=1;

res=1;

}else i++;

}

return res;

}

PS : Soz it was in spanish hehe,had to do it for univ and since i live in spain,well ...obviously :p
[XPERIA X10 Android Development] wingz85:
So do i :)
[XPERIA X10 Android Development] Vilam:
So I'll start a gui in java (so linux users can help) with some test.

I if I can't port your code in java I'll try it in c++.

Does someone works with visual paradigm ?
[XPERIA X10 Android Development] Phantasm4489:
Its not so easy when you are dealing with numbers of the kind of size we are talking about. You cant just use normal 32 or 64 bit integers when the keys you are checking are 1024 bits in size.
[XPERIA X10 Android Development] pedrocel85:
So how to do it?
[XPERIA X10 Android Development] Vilam:
Well, I asked my mathematic teacher and it seems there are no solution in maths way.

But in the way we generate numbers : we divise 10^1024 by numbers of software runing so each instance generate a part of the 10^1024. All this to be shure of not generate the same key many times.

Sorry if I'm totally wrong^^
[XPERIA X10 Android Development] consolation:
Easy to code is not same as easy to compute (ignoring the fact you will deal with 1024 bit numbers), look at that algorithm and tell me, what's quicker doing your test or multiplying two numbers together. Remember c is a high level language, write it out in assembler and count the clock cycles. :rolleyes:

This is our best tool at the moment

You are getting into a field where phDs are made and broken, and which has multi million prizes for finding shortcuts. Have Fun.

Also This
[XPERIA X10 Android Development] Vilam:
Really nice stuff here, thank you.

To be sure, we have 10^1024 (or 10^(2^10)) solutions, right ?
[XPERIA X10 Android Development] jul644:
.

to be clear with the ps3 what happened is that the key isnt trually random,

forget about brute forcing it theres no way what you need is a leak at sony or some one cleaver looking for holes, if enough devs start working on it it will happen
[XPERIA X10 Android Development] Gergith:
I love these people saying its impossible. But they are not finishing the sentence.

It's not possible "with current computing power". Correct my if I'm wrong, but so far that computing power doubles density within a set amount of time, so far this has always held true.

So given that it's impossible today, it's 1/2 as impossible in 6 months... If we still haven't cracked the bootloader in a year, this project will be that much closer to being possible based on cpu speeds in the market.

Previously these types of things couldn't be cracked at all. Then they started using super computers and distributed computing to do it. Clustered ps3's can do more then super computers of 10 years ago.

I realize that these are still large numbers.

But can you people please start using the word IMPROBABLE and not the word IMPOSSIBLE. They have two distinctly different meanings.

I just firmly believe that this attempts chances DO lie ABOVE 0%.

And so what IF this project is impossible. How do those people stating its impossible stand to benefit? If you think this is a waste of your time, why bother reading the thread and posting? Do you expect everyone else to give up and not bother based on your own authority? :p

Most of us suggesting this REALIZE the improbability of it. But we are weighing that against the probability of a hacker breaking the bootloader or SE opening it up themselves. All three are shots in the dark. Some we have less or more control and some we can contribute more or less.

Sorry to rant, I just wish people would think about this sort of things before nay saying :p
[XPERIA X10 Android Development] consolation:
If something would take on average a few million years, is half that number any better? What about 1000th? Is a project likely to finish in 1000years any more relevant than a project that finishes in a million?

Now, all these computer cycles you are going to throw at this, they are not FREE. We do not live in a world with free unlimited power. All energy has cost; monetary, environmental, plain old wear and tear. So, why waste all that for nothing?

Yes, chances are more than 0, but - for all practical purposes they are 0, treating them otherwise is just a waste of your time and our planet's resources.

There is a better way, invest those resources into learning about finding exploits in cryptography. In c.1/1000000th the time it will take to brute force this, you will become one of the worlds leading hackers, and gained useful skills.

Unless quantum computing becomes readily accessible, in which case all bets are off and cracking the x10 keys is going to be the least of your concerns.
[XPERIA X10 Android Development] morox:
I am very sorry about reading all this. 92 posts and there is not even a little sight of a beginning....

I truly think this is a dead post in life, not because of computer processing power, but for the lack of programmers involved with this project. If I were programmer, I also would be involved.
[XPERIA X10 Android Development] Quasicoto:
Unless the code is 000000...it is going to take a very long time. The code is far too long to be bruteforced.

It would be a serious waste of time. It'd even be faster to learn developing yourself...
[XPERIA X10 Android Development] mcforrest1:
i got no clue on such things but what about the person that said usb sniffing?? What if you used say an att hotspot wifi to update your phone open seus, start the update, and sniffed the packets that were used to update the x10a via wifi? Thats even if the rsa is used in that process. Dunno if thats even logical, lol. But basically the data is transferred from the wifi to the laptop, which can be sniffed, your phone connected to the usb updating. Hrrmz sounds like in theory.
[XPERIA X10 Android Development] consolation:
/facepalm

There are at least three people with sufficient coding skills who replied to this thread. Everyone said the same thing - we don't want to waste our time. We graduated, we are over doing stupid undergrad assignments just for the learning experience.

If anyone can show how to implement this so it will be completed in a max 12~24 month time frame (by then we will have moved on to newer phones, so what's the point), I'm sure we will all contribute.

Let me summarize this thread for you:

OP - I'm gona strap on two cardboard boxes, jump of a building and fly!!!

pA - That's not going to work.

OP - If we all try there's more of a chance.

pB - No, there's not, learn how to build a glider instead.

OP - Wait, I have an idea, what if instead of flying we just "miss the ground!!!"

pA/pB - You can't do that, it won't work.

pC - I love these people saying it's impossible. But they are not finishing the sentence. The chance of flying isn't really 0. Let's all try jumping off the roof and giving it a go.

pB - Maybe not, but it's so close to 0 you will need to be scraped off the concrete.

pD - What we really need is PILOTS, if we had pilots it would work!!!

pA & pB - We ARE pilots and we are not going to jump of a building.

pE - What if we built a really fast car instead?
[XPERIA X10 Android Development] The-Lord:
Nice. Thanks for this summarization. :D
[XPERIA X10 Android Development] skyleth:
i don't have time to read through the whole thread 'cause i'm at work so i don't know if i'm gonna repeat something already sayed, but, have you thought about using BOINC to get the power of all the computers and to sync the work? there are plenty of projects using it.
[XPERIA X10 Android Development] kokbiel:
Lol, you just made my day. Can't stop smiling :)

But, lets face it. Some people will always ignore math/science and jump headless out into the air. They then get scraped of the concrete by people learning from their mistake. Me, on the other hand, will never make that leap. Only chance of me getting off that building would be helicopter or staircas/elevator.

To even consider this we need a helicopter (some vulnerability), a pilot (someone who knows how to use the vulnerability) and fuel (something that makes the vulnerability usable at all). Jumping from the top hoping not to hit the concrete, no matter how many obstacles you calculate to avoid on the way down, will just end up with someone scraping you of the sidewalk.

Oh, and thinking that all you need to do is find a tall enough building so you will learn to fly before you hit the ground will most likely fail aswell.
[XPERIA X10 Android Development] Phantasm4489:
most amusing... and so true
[XPERIA X10 Android Development] meraxis:
to everyone still thinking this is worth trying.

please don't waste your time.

when people say it will take a few million years to do, they are not exaggerating. It's not a figure of speech. It will, literally, take a few million years. That's part of the reason it's considered secure.

It's not about computing power. It was mathematically proven that beyond a certain point (actually lower than 1024 bit), to get the amount of processing power you need to bruteforce a key, you would need more atoms than are estimated available in the known universe.

please do your research, and i dont mean just spending a few hours on google. actually look up the subject and really learn about it.
[XPERIA X10 Android Development] sephirothusi:
Meraxis is right.

RSA is used in many areas that require high security and strong cipher for a reason - currently humanity does not have (and probably won't have for a really long time, unless somebody will create real, working quantum computer) enough computing power and/or some great alghoritms to crack it in reasonable time. Bruteforcing will simply not work.
[XPERIA X10 Android Development] nidalius:
The thread avoir bootloader craking is active maybe we can enjoy classic recovery soon
[XPERIA X10 Android Development] :
well i still thing it is funny, tho..

but i'm uploading some key's found in x10mini sin fileset during my sin header experimenting phase..

from amss.sin, bootloader.sin, kernel.sin, fota0.sin, fota1.sin etc..

maybe they could help too...

there: Link --- http://dl.dropbox.com/u/10158456/SE_x10mini_Keys.zip
[XPERIA X10 Android Development] Ghostshaw:
Math

Let me explain this mathematically to you (and a wee bit computey).

The RSA algorithm works through a set of formulas which you can find on wikipedia, the only difference being is that the algorithm is used in reverse (which is easy, since encryption and decryption are both reversible).

Now what we can rather easily find is the public key, which consists of 2 very large numbers namely e and n. Now the "easiest way" to determine the private key, which consist of the very large number d would be to extra the two prime numbers used to generate it from n. These prime numbers called p and q, which define the public key number n as n = pq. Now for the tricky bit. P and Q are somewhere in the order of 10^100 up to about 10^200. Since the number of prime numbers is infinite this means we have a huge about of numbers to deal with probably somewhere in the order of 10^99 different ones. Which means we have a total amount of combinations of (10^99)^(10^99) to check, which is simply impossible. In reality there are some constraints which bring it down some, but the amount of numbers to check remains mind-bogglingly large. Lets assume we have a quad core computer running at 4.0 Ghz for each core and it can check one number per clock per core (which it can't, we probably need about a 1000 clocks to check for numbers this large if not more), we can check 4.0*10^9*4=16*10^9 numbers per second. That means we would need 6.25 * 10^88 seconds to check one single prime number with all possible other numbers alone. That comes down to about 2*10^81 years. Ergo its impossible.
[XPERIA X10 Android Development] :
o i see...

i know what rsa is..

just posting as stuff that could help... but if doesn't helps... sorry then..

won't do it again...
[XPERIA X10 Android Development] Ghostshaw:
It wasn't meant as negative to anyone trying to help, just explaining why a brute force method along the routes currently suggested is pointless.
[XPERIA X10 Android Development] Lord Takyon:
But this thread is still useful, people are learning things. More importantly, it is still discussing the bootloader, something could still come of it.
[XPERIA X10 Android Development] Gergith:
How about we base all further comments under the ASSUMPTION it is possible, and work from there?

Yes it will take a million years if we don't get it till the LAST possible guess. You people keep stating maximum threshold.

For instance a PS3 I think takes about 12-24 hours to generate 1-12 character passwords for bruteforcing (every combination). Do you think every time it tries it takes the maximum amount of time? or is there a shorter average? Are there MUCH shorter and much longer exceptions?

Instead of just stating it will fail at maximum theoretical length. What if by some fluke, because we decide to test random keys, the program/algorithm gets it in 10 minutes?

Is that within the realm of programming possibility? yes....

People have been struck by lighting MORE then once. One man survived TWO atomic blasts (he was on a business trip then came home after one bomb... between hiroshima and nagasaki)

These are HIGHLY unlikely events. Sooo unlikely people would consider then "pretty much"0 until it actually happens.

If this is simply a grad school proof of concept, then could some please make this super simple proof of concept and wipe your hands clean of something beneath you?

If this task is such a waste of time to all the nay sayers. Why the constant replies ABOUT how time would be better spent elsewhere... Like hacking instead of replying about how this attempt is useless and better spent hacking? :p

EDIT:

I understand RSA was meant not to bruteforce/crack.

BUT CLEARLY SO WAS THE BOOTLOADER :P

So if thats your justification, why bother trying to hack the bootloard? It's impossible! :p So far we haven't done it, so so far we are at 0% success... Same as this RSA concept :p
[XPERIA X10 Android Development] Ghostshaw:
Actually cracking the bootloader is much more likely. The bootloader is a simple set of instructions which are written by a human and thus likely to contain a weakness.

And btw my estimate of 2 *10^81 years was a lower limit. It suggested a far higher rate of testing than actually possible and assumed we picked the first number correctly right away.
[XPERIA X10 Android Development] Skamba:
The odds of getting hit by lightning twice are a lot better than cracking this key. Maybe you could compare it to getting struck by lightning 200 times instead.

Of course, the average time it takes to crack a key is half of the time to generate every key. Let's assume it takes 10 trillion years to check every key. Then it would still take 5 trillion years on average to find this key. The odds of finding it within a year are smaller than the odds of all of us dying within that same year. Or all of us winning the lottery.

If you feel lucky, get a lottery ticket. Because you will need a lot more luck to bruteforce this key.
[XPERIA X10 Android Development] xtrmshadow:
I disagree.

1)We're not at 0% Success of bootloader cracking so shush :p Bin4ry ,cmonex,Olipro are working on it,and still advancing.

We could say we're stuck at around 67% cause we know what we gotta do...we know the results...we know we CAN do it,we also know how to do it,but we have 1 problem in between.

So "0% success"my arse

2)1024bit RSA key...hmm still sounds very hard imo : Yes it is possible but Yes it is also complicated.

We need very good programmers, also we need very good computers (Which most of us got) but 1 is not enought,we need loads of em and i doubt it will go out as "Nice" as people say..i mean how the hell will you get 200 computers from all over the world understand each other and comunicate each other the keys in the exact time in the exact moment so they can work in perfect harmony.

3)Dont compare "impossibleness" ,probabily can be very tricky.

There are LOADS of chances to crack the bootloader ,because we got alot more stuff we know rather than the RSA key...heck we dont even have the algorythm,we dont even know if it will work,we dont even know HOW exactly to do it,we dont even know if its possible...So no its not the same.

As i said,yes its possible but the chances are so low that its not even worth thinking about it.

Anyways goodluck.
[XPERIA X10 Android Development] Findee:
What is the point of the people pointing out how impossible it is? If you don't like it then don't read the thread. If some people would like to try it then it's there choice.
[XPERIA X10 Android Development] consolation:
Because it's a pointless waste of time and resources. It'll waste time you could've spent more productively learning useful skills, even masturbating is a more productive time investment. It'll waste your planet's finite resources on a pointless exercise. And, it'll divert attention from other avenues of opening up our phone, ones that actually have a chance of working.

It's totally, absolutely, stupidly pointless and a waste of energy.

If you want to contribute, there's plenty of ways you can do it. Otherwise, go invest the effort in getting laid. On you're deathbed you'll thank us for it.
[XPERIA X10 Android Development] VMaxxor:
How about using EC2 like the recent wpa crack?

Sent from my X10i
[XPERIA X10 Android Development] consolation:
WTF are you raving about? Linux was based on well established Unix foundations, no one took a one in trillions chance designing it. It was a most conventional os design. If you think Linux was created by a thousand monkeys typing on a thousand typewriters, you are much mistaken.

However, I'm guessing those monkeys are as likely to come up with the key as a brute force attack.

Exploits != brute force, your post is a confused jumble.

Meh, knock yourself out, just buy some carbon offsets for the electricity you waste.
[XPERIA X10 Android Development] MrHassell:
Linux IS based on Minux as a request posted to the newsgroup - comp.os.minix - Linus Torvalds on the 25th August 1991, much like this thread within this forum, which your contributions equate to nothing more than embarrassing yourself. Knock yourself out of xda, do us all a favor! unless you have something to contribute or a valid question..
[XPERIA X10 Android Development] MrHassell:
nand bootloader on YAFFS

-----BEGIN RSA PRIVATE KEY-----

see the attachment / code block in my post before trolling.

does anyone need to Bruteforce the key if it has been provided by an engineering key? This specific engineering key is from Donut. I'm intrigued to know the process of any result from Bruteforce, exploit or otherwise being implemented, anyone have insight here?

Interesting in the post Linus made regarding release of his new operating system, he stated "it probably never will support anything other than AT-harddisks, as that's all I have :-(" - I'm sure he has a few more to play with now but I'm not exact in the details of nand ans the Yaff although I have looked at Tin boot and Yaffs file system, a related project exists at source forge for htc devices - and responding to my previous question - x10 boot loader is firmware specific so the key above for Donut (1.6) is going to be of little use but is at least a starting point of what we can expect to see and KNOW for a fact that they never properly implemented the key as taken from the following found within the engineering key;

issuer=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd :rolleyes:

mtdparts=msm_nand:0x00400000@0x1600000(boot),0x00d80000@0x01900000(root),0x05980000@0x02680000(system),0x08000000@0x08000000(userdata)

translated this command = 4MB on x1600000 for kernel, 13.5M for rootfs on 0x01900000 etc, without implementing the loader correctly, kernel panic from inaccessible root device. We need more input than anything on breaking down the specifics, less trolling and more input - or it actually may be impossible,
[XPERIA X10 Android Development] u-ra:
Wrong.

Also, how come no one has yet written a single line of your ludicrous project?

Could it be that any programmer worth his salt is aware of the impossibility of the task and instead simply laughs at this thread? I know I do.
[XPERIA X10 Android Development] MrHassell:
stop trolling you douchbags

Firstly - it is not "My" project, you are welcome to contribute anytime you like and for the record, do your research before you make unfounded statements - "Wrong" do you contribute anything? Here is the actual original post from Linus for anyone too lazy to look it up.

From: torvalds@klaava.Helsinki.FI (Linus Benedict Torvalds)

Newsgroups: comp.os.minix

Subject: What would you like to see most in minix?

Summary: small poll for my new operating system

Message-ID: <1991Aug25.205708.9541@klaava.Helsinki.FI>

Date: 25 Aug 91 20:57:08 GMT

Organization: University of Helsinki

Hello everybody out there using minix -

I'm doing a (free) operating system (just a hobby, won't be big and

professional like gnu) for 386(486) AT clones. This has been brewing

since april, and is starting to get ready. I'd like any feedback on

things people like/dislike in minix, as my OS resembles it somewhat

(same physical layout of the file-system (due to practical reasons)

among other things).

I've currently ported bash(1.08) and gcc(1.40), and things seem to work.

This implies that I'll get something practical within a few months, and

I'd like to know what features most people would want. Any suggestions

are welcome, but I won't promise I'll implement them :-)

Linus (torvalds@kruuna.helsinki.fi)

PS. Yes - it's free of any minix code, and it has a multi-threaded fs.

It is NOT protable (uses 386 task switching etc), and it probably never

will support anything other than AT-harddisks, as that's all I have :-(.

For the record do you have any idea what the Dalvik core or smali code is, have you ever worked on encrypting anything except common sense?
[XPERIA X10 Android Development] eiabea:
linux, minix omg is that really the right thread for this?!
[XPERIA X10 Android Development] MrHassell:
absolutely not!

I'm spitting chips @ providing the RSA Private Key this thread concerns, in code and attachment, back posed a few & nobody does anything or states anything constructive other than point out this destructive bs! and for this thank you!

everyone is all too busy jerking off over what l33t dipshits they are and fantasizing over knowing how to perform basic research via Wikipedia or even use Google, let alone the built in advanced search in xda - FFS - go back to playing with sms and get some moderated common sense here, please stay on topic and contribute or just shut the f88k up