Just a thought Re:Certification (Programmers read in)

[Guest Croccy22]

If orange are going to 'fix' the security issue with the phone. would it not be possible to write an application that either re-removes the need for certification or even an application that will 'boot' uncertified applications by giving the phone a valid security certificate and then loading the program in the same way bootdisks and stuff work for the ps2. If such an application could be written then we could get this ceritfied by baltimore or someone and put it on the net for download.

Any comments?

Matt

[Guest Monolithix [MVP]]

It may be possible to write an application on the PC side, that can edit the appropriates files and induce a hard reset using the cradle, although i'm not sure how it would get on when controlling the boot menu.

As for giving the applications a valid certificate, i'm not sure what you mean here. Do you mean a custom certificate when the hard reset is done? Or mabye a certificate-free emulator within the SmartPhone OS?

I spoke to OCS about the de-cert mod not long after it was descovered and was told the update will "make it harder to de-certify the SPV's". Having said that, Orange are now forced to say they will close this hole. We don't yet know what the update will do, it may not have a huge effect and still allow us to run decertified software, for the sake of calming the press down...

[Guest Croccy22]

what i mean is like on the playstation2 a copied game cannot boot because you cannot copy the security information off an original disc. but you can use a bootdisk or a modchip which load up the security information and then you put your backup in and it will load.

Could a program not be written that did a similar thing for the spv. the applicaion (boot disk) loads on the spv phone (This application will need to be certifed to run) then you can tell the application which file to run and it will load it but using the fact that the phone still thinks the app is certified.

I hope that makes sense. if not can someone translate it for me!!! he he. i know what i mean

Matt

[Guest MBoden]

I know i'm gonna wait at least week or so before updating, i want to be able to develop

unless....someone said you could do a backup of the firmware on SD, how many MB does it need ?

[Guest DJHope]

Very easy ;) apprently the XDA which is VERY similar to smartphone can be made to talk to the pc in boot mode (you know holding down record button whilst turning on) using a serial cable, and a term connection, i imagine the process would work on the SPV but im not willing to try it due to risk on screwing up smartphone however the theortical process would be:

1) Create the XDA serial cable as advised at http://xda-developers.com.

2) start phone in bootloader mode (turn off, hold record button whilst turning back on LEAVE the phone here)

3) Plug in serial cable to phone and PC

4) use term program to connect to smartphone on com1

5) Now you have a command line like screen

Aprently their are utilities on this command line screen that allow you to:

1) Modifiy the rom

2) Change the IMEI number

3) Find out the operator lock code

4) I supose you could modifiy the rom to keep the provxml files in perminantely in the rom

5) You could screw up you phone royaly, and i dont see your warantee covering you for the above misuse!

Ive not tried this, im not going to try this and i have absolutly no idea if any of it works, its all complete theory and conjecture based upon the http://xda-developers.com website, be aware though that XDA and Smartphone are VERY similar! Good luck :lol:

DJ Hope

[Guest Firaas]

I know i'm gonna wait at least week or so before updating, i want to be able to develop  

unless....someone said you could do a backup of the firmware on SD, how many MB does it need ?

32 should be enough.

[Guest Firaas]

i imagine the process would work on the SPV but im not willing to try it due to risk on screwing up smartphone

I wouldn't mind trying, just haven't got the cash to buy a serial cable.

[Guest Dade]

Well all that would be irrelevant if someone wanted to get a registry editor certified. You can unlock a phone with a Reg Editor.

[Guest DJHope]

yeh dade, but thats why the PHM registry editor was never signed!

Although if the donation thing works out theirs nothing to stop us getting it signed ;)

DJ Hope

[Guest Paul [MVP]]

I've ordered one, I'll have a play!

P

[Guest DJHope]

Chris from microsoft.developer.smartphone suddenly worked out the possible procedure almost exactly after me ;)

"If you look at the picture of the small board in the USB docking station

(http://membres.lycos.fr/smarphone/usb.htm "thank you to the provider of this picture - look at earlier post today) and remove the small plug that

connects the board to the USB cable, you will find some small copper

contacts under the place where the cable was. They are in place to take a

connector for the SERIAL PORT!!! With them you can do the following: Solder tiny cables to them and connect them to a COM Port cable.

The COM Port has all Connectors beside the DSR signal. Thus I would bridge DTR-DSR and end up with a double mode Serial/USB craddle.

With access to the COM port you should be able to do fancy things by opening it and sending AT commands in engeneering mode. I expect to have the same situation as with the XDA device. Perhaps the AT commands are slightly different.

As soon as I have an appropriate soldering tool, I will execute this

procedure and report what I could do with it. (Of course it would be less risky and much easier to buy a serial cradle, if it would be available.)

Has anybody done this yet - or is willing to volunteer the procedure?"

DJ Hope