18 replies to this topic

[pibrahim]

Hi guys,

What with all the disappointment over Orange's certification policy, etc., I thought I'd raise the issue - surely its absolutely *inevitable* that sooner or later some hackers will crack it?  About a year or two back now, there was some big competition where I think the ?RIAA? or some other music organisation was experimenting with some technology they thought uncrackable and as part of a compo, invited people to sign up for a license and attempt to crack it - it was done (if I remember rightly).  The mp3 player I own, the Creative Labs DAP Jukebox initially came preloaded with tracks that the software refused to allow to be transferred onto the PC due to them being copyrighted.  Someone cracked it.  My point is that surely no restrictions are absolutely infallible - surely this Orange certification won't be in place for ever..?

[PaulOBrien]

I guess this is possible, not sure it's that likely.

What's more likely is that someone will get hold of an unlocked SPV, dump the firmware, and provide a method to flash that onto a stock SPV.

That would be cool...

P

[Karucifer]

:roll:

the thing is, how do you propose to run a crack on the phone to crack certification without getting the crack certified so that it will run? heh

[pibrahim]

Don't take too narrow a view of cracking - another possiblity is that perhaps someone might find a way of simulating Orange's certification or find a way of getting their own programs to appear certified.?

[DJHope]

Hell yeh the last two microsoft products were *UNCRACKABLE* erm... now we can play copied games on XBOX and we can copy and use windows xp (because once again activation was *FULL PROOF*) shame about those devils0wn releases even BEFORE microsoft released it to the public! Its an inevitability that SPV will get cracked and hacked earthier they’ll find a way of hacking the rom from ya desktop and removing the root certificate or they’ll find a way of simulating the certificate. Trust in Microsoft hackers will definitely get their teeth into SPV, probably are as we speak.

Actually i seem to remember doing what paul suggested on my SL45. The SL45 never officially had JAVA support it was only on SL45i that JAVA support was brought in even though the SL45 was compatible with SL45i firmware so obviously you could find the SL45i firmware (FW43) on the net and flash in yourself, of course invalidating your warranty however, Siemens would have done it for you but that ment no phone for a week and a cost of 50 quid or something stupid!

[pibrahim]

I'd say its almost a certainty

There's almost certainly people out there with enough time, dedication and knowledge to find a way to bypass the certification.  The only possible drawback is the fact that the SPV isn't available in a lot of countries (e.g. the US) so the number of potential hackers is probably a little more limited by that.

[spacemonkey]

The type of crack will need to be on the phone as in crack the firmware/OS to allow uncertified programs

Faking certification is a no go becuase microsoft will hammer any developers trying to distribute (or even worse sell) programs with a dodgy certification on them.  Where as if the phone is cracked, well the developers are clearly writing unsigned code for educational purposes or for use on Smartphone OS powered devices other than the Orange SPV.

[DJHope]

Maybe, maybe not, what if they distribute unsigned, and their is an app that signs the application for you obviously not distributed by the smartphone devloper!

[florin_m]

About dumping the firmware is easy
Put in the phone one card at least 64 M (i have 128M). Put the phone in debug mode. And press save all. The phone will format ur card and u'll have a "boot" disk for the spv. With that disk u can rewrite the firmware back in the phone!!! (TEST IT MYSELF!!). How ? Easy !
Put the boot disk in the phone. Try to put the phone in debug mode alike normal. Now u'll have this!
C A R D  F O U N D

BOOTLOADER
WINCE
GSM
IPSM

Press Action key to download

Of course u press it and ist's start:
"Start download
download pboot success...

and now u have to wait about 10-20 min till u'll see the next message
Download CE success

then.. the rest
the last message will be

Download IPSM success

and then press any key and u'll see the nomal debug screen


Don't forget to use the power supply just in case the battery will empty

Have fun , and don't blame me cause u killed ur phones

A by the way. to read the card with the PC is a pain in the neck!!!
The card format of course is not fat or ntfs, or something known by windowze

So how to read it? Easy Look on the net for winhex. download it and when run it will ask wich file. u press Open Disk and then choice Physical Disk and choice what is ur card read/writeer. In my case is Hard Disk 3.

To be sure u edit the right one the disk is beginig with :Hilter QFS and then lots of # (0x23)


A nice one from the microsoft or whatever did the software on spv
4900 6E00 6900 7400 2000 4900 6E00 6600 6F00 7200 6D00 6100 7400 6900 6F00 6E00 4300 6500 6E00 7400 6500 7200 0D00 0A00 0000 0000 4500 7200 7200 6F00 7200 2C00 2000 6400 6F00 6E00 2700 7400 2000 6600 7500 6300 6B00 2000 6D00 6500 2000 2000 3C00 2500 5800 3E00 2000 3C00 2500 6300 3E00 A00                                                            

convert it to asci and see what they put in flash


Let's hack this sh.... phone
Toghether we are stronger

[PaulOBrien]

How do you put the phone in Debug Mode is the obvious question!

Next question, who can we find with an unlocked SPV to dump the memory

P

[florin_m]

power on button and voice notes button in the same time when u power on the phone (alike a full cold reset note on this forum)

[PaulOBrien]

For those that can't read hex, it says:

'Init Information Center, don't f**k me'

Riiiiiiiiiiiight!

P

[PaulOBrien]

So I did a complete backup to a 32MB MMC.

I did a complete restore from same 32MB MMC.

Phone still works - cool.

Question is, if I restored a DIFFERENT handset using this MMC, what state would it be in?

I mean, would it have the same setup and IMEI etc. as mine?

Unfortunately I don't have 2 SPVs to try.

Another question, how can I take what the SPV has put on the memory card, store it in a file (zip or whatever), send it to someone, and make sure they can then put it on a card at their end.

I have a USB MMC reader, and it just doesn't like it at all (says unformatted, even WinHex won't read it!)

P

[florin_m]

read carefull the instruction please!!!
Read the card as physical not as logic!!! will work trust me!!!

If u want make a zip of the card and send to me (upload it somewere) and i'm willing to upload on my phone!

Let's have fun

[PaulOBrien]

How can I make a zip of the card?

P

[florin_m]

let's chat online. ii got icq and yahoo messanger.
Yahoo flll_2000
come online and let's talk

[madu]

Florin, who are you addressing that to?

[PaulOBrien]

MSN Messenger: [email protected]

P

[spacemonkey]

This has good potential for customisation not just being dodgy.  If someone can make this file system accessable then you could change around files in the OS.  So stuff that you'd normally put in RAM on the phone like your homescreen tweaks etc you could load back permanently into the ROM.

Additionally if the 32Mb of ROM isn't totally full then you could load apps in there thereby saving RAM and SD card space.

Sounds all good guys...  now I just need a phone and a big SD Card and a Card reader for the PC... dang...