App Certification...a new wrinkle?

[Guest nickcornaglia]

I currently have a Samsung i600.

A few users, including myself were trying to load differnet programs without success, including PHMRegEdit and OrnetaNotepad.

Both programs will not install on the device due to the fact that they are not certified to run on the i600.

BUT.....

Using RegEdit as an example...When I opened the CAB files (using WinRAR), extracted the file named 0regedit.001 and renamed it to regedit.exe ........it works on my phone!!!!

Then I tried Orneta NotePad.....same success.

So what I can assume is that programs that only require an executable are able to run on the phone if you bypass the whole installation process. Others that require DLLS or other files would be a bit harder to figure out but is possible if you have an SPV or other unlocked phone and know where all of the files go.

1) This is great for me and other users who want these apps but can not install them unsing conventional methods.

2) Users can bypass the whole certification requirements if they are able to decipher the cab files successfully and place the files on their phones?

3) Developers can bypass the whole certification process if they are able to provide all required files (preferably one exe) for users to install directly on their phones.

4) Freaky hacker deviants who wish to take advantage of this can do so very easily????

Can someone explain what is going on here and the ramifications of this?

[Guest spacemonkey]

The problem is that there's 2 different app signing requirements they can set.

1) Cab's do/do not require signing to install

2) Program do/do not require signing to run

So it sounds like the i600 is unlocked for option 2 but locked for option 1, which to be honest is just plain silly.

Apps that aren't just an exe you could always get someone with a different unlocked MS Smartphone to install them and then copy the files of their phone to yours... (or even install it to your SD in their phone), this won't work for everything because some install cabs do registry things that are required, but it will work for most apps and games.

[Guest Paul [MVP]]

What a crazy security config.

Theoretically, you could write a small application that removed the CAB signing requirement, as it would have access as it was just an EXE?

P

[Guest drblow]

Would that work on the e200?

[Guest nickcornaglia]

I agree with everyone. Strange. Crazy. Unnecessary. :roll:

[Guest nickcornaglia]

Just installed Connected Bits Weather App.

Opened the Cab.

Renamed one file as the weather.exe

Renamed the other file weather.dll

Works like a charm.

And this is a program that connects to the internet for it's info.

You would think it would be more secure.

FYI to those who dont know.

I am not cracking software here.

I'm just installing software that shouldnt be allowed to run on the phone because of security settings.

EDIT: Same with Smart Explorer.

Who needs an unlocked phone...I almost have everything I need (so far)

EDIT#2: SmartphoneNotes requires registry changes and does not work with this method alone.