save your update.zip - Motorola Droid 3

since I can't post in the dev forums yet I might as well post it here.
Since a bunch of people are looking for root, I'm sure we've often noticed most bugs or exploits come in the form of updates to our phones. An update is when security is at its lowest. Its similar to how security is at its lowest while a person is in the process of entering their home.
I saw a thread that someone had an update. So if you get it, save it, put it up because the developers can most likely use it!
if you have more than 10 posts, can you post this in the dev threads? thanks!

It's going to be hard/impossible to save as it stores to a location that needs root to access...
Updates are pushed to /cache which users do not have any access unless using root.
The only way to get it is to manually pull it from the update servers and not your device.

Related

How do we get a work around for Sprint Nfl App G1??

Havent been able to find anything related to the G1 for this and am wondering if some one has or has any work around ideas. This app was one of the working apks that we were able to use off the sprint hero dump from last month but now they have put out an upgrade file to download, once u download this upgrade from the prompt in the app it will install then telll u this is for sprint customers only
So u can uninstall then reinstall the original apk and still have the widget work but anytime u try to launch the Nfl mobile it will require the "updgrade".
Really stinks, was a great app to use, hoping some one has some skills to figure this one out!
i had the same problem before cause i had the sprint updater app installed but, without the updater installed it gave the the update speech again... it was good while it lasted...
you might be able to edit the build.prop so that the phone recognizes as a sprint device.... I am not really too sure though.
This should be moved to the applications forum....Also, the sprint apps, I believe are considered warez, and therefore you probably won't be able to find them on these forums.
Try editing the build.prop and faking the carrier (getprop & setprop)
awesome maxisma thanks for the suggestion! Im going to do some research on how to execute that and give it a try. ill let yea know how it goes Reg442
I didnt get any prompt for that upgrade?
...it works on g1/dream. I am not sure it is 100% functional but it does what i need it for, i use it every sunday...
if its still working for you it wont for much longer. The new version doesnt work and the old version forces you to upgrade. The original apk needs to be edited to not force the update. I dont believe this belongs in the app section since it requires development to get this app working again
nicdub said:
Havent been able to find anything related to the G1 for this and am wondering if some one has or has any work around ideas. This app was one of the working apks that we were able to use off the sprint hero dump from last month but now they have put out an upgrade file to download, once u download this upgrade from the prompt in the app it will install then telll u this is for sprint customers only
So u can uninstall then reinstall the original apk and still have the widget work but anytime u try to launch the Nfl mobile it will require the "updgrade".
Really stinks, was a great app to use, hoping some one has some skills to figure this one out!
Click to expand...
Click to collapse
I did this, then went back tot he original apk and every weekend it works for me or when a game is on. At least getting all the scores of the game works that's all I really used it for anyways.
Ya I used this app for awhile. I know that it was fully working on rogers roms, but the nfl network live stream and vids dissappered when using a hero rom (well sense hero by cc). I used the build.prop from eno rogers w/cc's sense hero and nfl network part started working again. Then I got the dreaded update. I assumed something can be edited in the build.prop, but haven't tried yet.
Might want to start by replacing ur current build.prop with the one from sprint hero dump, but be ready for fc's. Also going to have to have wifi as it is cdma and u won't have a radio signal, but its a good starting point...
Anyone have any luck on this? ** BUMP **
I figured this one out long ago: edit the build.prop. This worked for the videos and everything else before the update, but the update checks for something else outside of the build.prop now. I suppose it wouldn't be that difficult to disable the updating part; I'll try to take a look at it again this weekend (possibly tomorrow) but no promises on how quickly I'll solve the problem as I have exams next week.
I already have it dissected, so it'd just a matter of finding what either:
A) the new app is checking for to validate that you're a sprint customer
or
B) disabling the updating part in the older app (but this might not be part of the app, as it could easily be part of the webpage, making this option a lot less viable)
Too bad...
This NFL app was very good. I was disappointed when the upgrade came but figured something would be done eventually to take that away from us. There are some other great apps out there and I would imagine they will only get better. This Monday night I was in the car for four hours on a business trip and used SportsTap to keep tabs on my Patriots and it was a fairly good experience. Also, the NBA has started putting out some of its own apps that are pretty good, so I can't imagine it taking much longer to get an NFL app in the market that will be as good if not better on all Android devices.
Hey rockdevourer, got an update on this at all?
id like to know too cause i dont have a login for superfan
JediMasterASD said:
Hey rockdevourer, got an update on this at all?
Click to expand...
Click to collapse
Sorry, didn't recheck this thread. But as of now, I DO have an update
So here's been my work from the past few weeks (al beit, not much lol):
I figured out several different possible methods to either disable the update check in the original APK and also a different method to disable the check for the sprint customer check. For some reason, the NFL_prod (newest version of it as far as I know) is looking for some Sprint file that doesn't exist on the G1 (obviously) and it seems that it uses a boolean to check it so that's a cake walk.
Here was my problem of not being able to do anything about it: I couldn't install either of the APKs due to not having the original key. But a few minutes ago, I found the stupid key. They left it in the APKs for my viewing pleasure apparently
Soooo, long story short, I pretty much figured it out. I haven't recompiled the APKs with the new keys yet because I probably have to redo all of my modifications on both of the APKs and test which ones work. Sorry about not updating, life has been hectic. Expect another update here soon (probably not tonight because I'm going to go watch the Colts game at a local restaurant)
Feel free to follow me on Twitter as well, that way it's easier to give updates and let you know when my work is completed.
http://www.twitter.com/rockdevourer
Edit: it appears the Sprint TV app thing has the key in it as well, but I haven't touched that one yet and dunno if I will. Maybe if there's a lot of people wanting it I suppose I could take a look at it. The security measures in these programs are God-awful.
rockdevourer said:
Sorry, didn't recheck this thread. But as of now, I DO have an update
So here's been my work from the past few weeks (al beit, not much lol):
I figured out several different possible methods to either disable the update check in the original APK and also a different method to disable the check for the sprint customer check. For some reason, the NFL_prod (newest version of it as far as I know) is looking for some Sprint file that doesn't exist on the G1 (obviously) and it seems that it uses a boolean to check it so that's a cake walk.
Here was my problem of not being able to do anything about it: I couldn't install either of the APKs due to not having the original key. But a few minutes ago, I found the stupid key. They left it in the APKs for my viewing pleasure apparently
Soooo, long story short, I pretty much figured it out. I haven't recompiled the APKs with the new keys yet because I probably have to redo all of my modifications on both of the APKs and test which ones work. Sorry about not updating, life has been hectic. Expect another update here soon (probably not tonight because I'm going to go watch the Colts game at a local restaurant)
Feel free to follow me on Twitter as well, that way it's easier to give updates and let you know when my work is completed.
http://www.twitter.com/rockdevourer
Edit: it appears the Sprint TV app thing has the key in it as well, but I haven't touched that one yet and dunno if I will. Maybe if there's a lot of people wanting it I suppose I could take a look at it. The security measures in these programs are God-awful.
Click to expand...
Click to collapse
u 'da man
Going to need a ginnea pig here soon, hit me up on google chat: rockdevourer AT gmail DOT com
Sweet success! Working out a few last bugs then it shall be ready
The only two bugs that I'm aware of at the moment include:
A) Widget doesn't work at the moment (this is definitely not a high priority on my list)
and
B) NFL Network doesn't show the video part yet, but audio is functional. The featured videos, etc, all work properly with the video and audio; it's just the NFL Network Live part isn't fully functional yet. This should be fairly easy to fix, as I have done this before.
Just wanted to post an update real quick Back to squashing B first and then A if it's not too time consuming. This project has been a real nightmare, but oh-so worth it!
Edit: Forgot to add, the NFL Network is fully functional on the Droid according to a tester, many thanks to aimbriano!

[Q] Keeping NC from calling home and/or updating

I'm guessing there's a utility, or utilities, running on the Nook that does things like auto updating the firmware, seeing what books are in your library, what page you're reading, other usage stats, etc.. Has there been any work to disable these spies?
Although I mainly wanted the Nook as a tablet, I'd like to buy a few books, and use it to view a few (Legally owned) PDF files. But if B&N is going to mess with my rooting, or decide something isn't legal, or otherwise decide to remove things off my Nook (Remember the Kindle and 1984?), or spam me based on what I'm reading, I'd rather wipe all B&N software from the device, and just have an Android tablet.
BTW, if the above sounds like a complaint, it's aimed at B&N, not the developers here, for which I am most thankful for all their awesome work!
Since there hasn't been an update yet, nobody is sure if the methods used by other devices will work or not. I believe there are a few threads in the development forum that talk about possible ways of preventing it from auto updating, but they haven't been tested yet to see if they work.
Do some looking in the dev forum or do a search and I"m sure you'll find what I'm talking about. It's a standard method of preventing Android from updating, but no telling if it will work.
Edit:
Here is the thread I was referring to:
http://forum.xda-developers.com/showthread.php?t=860480&highlight=update
Thanks for the response. I checked the link, and was surprised Android has the auto-update functionality built in. Do you know anything about possible spy applications? Has anyone checked it's internet activity? Any strange processes?
What do you mean it hasn't updated. The day you first powered it on and connected to the internet you got an update, at least mine did.
I imagine you could use wireshark and then turn on your radio and see where the nook goes first. It could have a schedule so maybe completely restore the device and then see the first addresses or urls it goes too on it's own. Once you get that then it's just a matter of entering those urls in the host file with an unresolvable address.
I probably will use Wireshark, when I get my nook (Christmas present). I just didn't want to reinvent the wheel, and be all prepared when I finally get it. I'm surprised there isn't more interest in privacy with the nook.
Mine didn't update when I got it. It's version 1.0.0, and until you set up wifi there is no way for it to get an update. Also, there isn't a way to check for updates. The original Nook had an option to check for updates, not with the NC.

Nook Color 1.1 Confirmed for January

Looks like 1.1 is confirmed for January and will allow you to sideload apps on the NC in development mode. Not certain when Froyo 2.2 will be available, probably when they launch the store front in Q1, maybe it's in 1.1?
connect.nookdeveloper.com/t5/General-Discussion/Nook-Color-Rooting/td-p/901
Also mention of sideloading apps.
connect.nookdeveloper.com/t5/General-Discussion/Can-you-test-your-apps-on-a-real-hardware-now/m-p/47#M18
Good news!
Josh
I guess I'm the grinch who steals the joy from this news...we can already sideload (heck we have a working Market), and based on the original post I seriously doubt Froyo is coming for the ride with the 1.1 update. I think Froyo is much bigger news, and will get it's own announcement.
Not sure what development mode adds, since rooted users already have the goodies. Tell me I missed something...
-Matt
If that is all they added in the update ill be disappointed. Sounds like all they are gonna do is enable adb. Which is easy enough to enable anyways.
Send from my NookColor
Of course it's not big news here!!! You have to consider that it is for those who haven't rooted their unit. You knew it was coming, so why all the negativity?
Cheers,
kev
No negativity here. I probably should have added a few smiles and winks to make it clear that I was (mostly) teasing (i.e,. the grinch comment). I'm a pretty happy owner, and will gobble up whatever news I can find. I think recent developments with Bluetooth and Nookie Froyo are definitely things to celebrate. Maybe 1.1 has something special that we don't see yet.
-Matt
Yeah, apart from froyo, most of the news from B&N will likely not be as exciting as anything from the developers here.
I am curious what this 1.1 update means for the integrity of my currently nootered NC. Should I be concerned when B&N pushes this update my way?
Kev
It's good news to see sideloading for those that do not wish to root..
-CC
Question regarding upcoming Froyo update (packed with v1.1, or otherwise):
If B&N officially updates to 2.2, they open up development mode for app sideloading, and they also allow for the unrestricted use of normal Froyo home screens (and launchers?), will there be any reason remaining to actually "root" the device at that point?
Or, is B&N talking about a severely restricted "development mode" when they say they're going to open it up?
I'm confused...
(I'm new to Android rooting, so please forgive me if this is a dumb question...)
I haven't rooted... yet. Holding out to see what happens w/ 1.1. I'd prefer not to root and just get some basic apps on the device and not lose access to the B&N store. If I can side load a few key apps w/ 1.1, that will hold me off until the B&N Market place is launched Q1. Otherwise I will most likely root.
Am I missing something? I didn't see them say January anywhere in those threads. All I saw was them saying Q1 of 2011.
And this quote makes it sound like the update won't be useful to the average user.
"Within NOOKcolor 1.1 update, we have added "Developer Mode". This enabled approved 3rd party developers to use the Android SDK to test and develop applications on their NOOKcolor devices."
Approved 3rd Party Develepors. Sounds like the only people side loading apps may be those that are approved by B&N.
supersoulfly said:
"Within NOOKcolor 1.1 update, we have added "Developer Mode". This enabled approved 3rd party developers to use the Android SDK to test and develop applications on their NOOKcolor devices."
Approved 3rd Party Develepors. Sounds like the only people side loading apps may be those that are approved by B&N.
Click to expand...
Click to collapse
And us.
12345678
I must have missed it but where in that thread is there any mention or confirmation that 1.1 is this month?
I see nothing of the sort.
In regards to January, it looks like Ted_Patrick went back and edited his original response.
Re: Nook Color Rooting[ Edited ] 01-05-2011 10:24 AM - last edited on 01-05-2011 07:12 PM
It originally read:
"Within NOOKcolor 1.1. update(January), we have added...."
Now other responses on the subject of 1.1 by him have an "official" response of
"We cannot comment on OS update features or framework support at this time. When we have information to share, we will be very clear and set expectations clearly."
Looks like he may of spilled the beans a bit or been more forth coming w/ info than B&N liked.
jwigginton said:
I haven't rooted... yet. Holding out to see what happens w/ 1.1. I'd prefer not to root and just get some basic apps on the device and not lose access to the B&N store. If I can side load a few key apps w/ 1.1, that will hold me off until the B&N Market place is launched Q1. Otherwise I will most likely root.
Click to expand...
Click to collapse
I don't know who's been scaring you with witchcraft and vodoo, but here are a few facts:
(1) Rooting is very easy. If you're the kind of person who is OK with opening a command prompt and doing things like "listing directories" and "renaming/moving files" it's quick and painless. It also takes less than 5 minutes (probably about 2) to take your device back to stock.
(2) Rooting does very little to the device. The key is that it allows the user to change system files, something that B&N would prefer we didn't do. Several users root their NookColor (NC) and then scratch their heads because they see no obvious change.
(3) Package mods like autonooter only make a few system changes (aside from the several nice system apps they add), in particular, they allow you to sideload apps. Once you do that, you can reorganize the way your NC looks and performs, so that it handles like a vanilla Android device.
(4) Most importantly, ROOTING DOES VIRTUALLY NOTHING TO CHANGE THE B&N INTERFACE. All--I repeat--ALL the things your NC does out of the box, it still does after rooting. Same eReader. Same storefront. Same file browser. Same everything. And I'm all but certain the NC doesn't phone home and complain that it's been rooted. And if it did--since the bootloader isn't locked--I seriously doubt B&N would try to deny you a service. (The more likely scenario is that an OTA update would try to remove root.)
EDIT: several rooted users have lost access to 1-hour free reading in-store (http://forum.xda-developers.com/showthread.php?t=860830). So it's not true that nothing is lost. Sorry for overgeneralizing.
I can all but guarantee you that you'll be disappointed by the B&N store. I predict it will have very few developers, and very few "good" free apps. A better way of saying it is this: within 1 or 2 weeks of the B&N app store launching, most users will look at the Android Market, and say "Forget it, I want apps from the Market, not B&N."
-Matt
gadgetrants said:
I don't know who's been scaring you with witchcraft and vodoo, but here are a few facts:
(1) Rooting is very easy. If you're the kind of person who is OK with opening a command prompt and doing things like "listing directories" and "renaming/moving files" it's quick and painless. It also takes less than 5 minutes (probably about 2) to take your device back to stock.
(2) Rooting does very little to the device. The key is that it allows the user to change system files, something that B&N would prefer we didn't do. Several users root their NookColor (NC) and then scratch their heads because they see no obvious change.
(3) Package mods like autonooter only make a few system changes (aside from the several nice system apps they add), in particular, they allow you to sideload apps. Once you do that, you can reorganize the way your NC looks and performs, so that it handles like a vanilla Android device.
(4) Most importantly, ROOTING DOES VIRTUALLY NOTHING TO CHANGE THE B&N INTERFACE. All--I repeat--ALL the things your NC does out of the box, it still does after rooting. Same eReader. Same storefront. Same file browser. Same everything. And I'm all but certain the NC doesn't phone home and complain that it's been rooted. And if it did--since the bootloader isn't locked--I seriously doubt B&N would try to deny you a service. (The more likely scenario
is that an OTA update would try to remove root.)
I can all but guarantee you that you'll be disappointed by the B&N store. I predict it will have very few developers, and very few "good" free apps. A better way of saying it is this: within 1 or 2 weeks of the B&N app store launching, most users will look at the Android Market, and say "Forget it, I want apps from the Market, not B&N."
-Matt
Click to expand...
Click to collapse
Still, if you aren't comfortable then don't root. Things can still go wrong. Things can be fixed but you have to have the patience and not freak out when your device goes into a bootloop or just freezes, which I'm not saying it will but there is always that chance.
lopezpm said:
Still, if you aren't comfortable then don't root. Things can still go wrong. Things can be fixed but you have to have the patience and not freak out when your device goes into a bootloop or just freezes.
Click to expand...
Click to collapse
You know, I'm sorry for taking a bull-in-the-china-shop approach. Clearly I would never make it at a technical help desk. You're absolutely right and I should have noted that there's a minimum comfort level...the subtle comment about "OK with command-line editing" probably didn't get the point across.
-Matt
Not everything it does out of the box works after rooting...
gadgetrants said:
I don't know who's been scaring you with witchcraft and vodoo, but here are a few facts:
(1) Rooting is very easy. If you're the kind of person who is OK with opening a command prompt and doing things like "listing directories" and "renaming/moving files" it's quick and painless. It also takes less than 5 minutes (probably about 2) to take your device back to stock.
(2) Rooting does very little to the device. The key is that it allows the user to change system files, something that B&N would prefer we didn't do. Several users root their NookColor (NC) and then scratch their heads because they see no obvious change.
(3) Package mods like autonooter only make a few system changes (aside from the several nice system apps they add), in particular, they allow you to sideload apps. Once you do that, you can reorganize the way your NC looks and performs, so that it handles like a vanilla Android device.
(4) Most importantly, ROOTING DOES VIRTUALLY NOTHING TO CHANGE THE B&N INTERFACE. All--I repeat--ALL the things your NC does out of the box, it still does after rooting. Same eReader. Same storefront. Same file browser. Same everything. And I'm all but certain the NC doesn't phone home and complain that it's been rooted. And if it did--since the bootloader isn't locked--I seriously doubt B&N would try to deny you a service. (The more likely scenario
is that an OTA update would try to remove root.)
I can all but guarantee you that you'll be disappointed by the B&N store. I predict it will have very few developers, and very few "good" free apps. A better way of saying it is this: within 1 or 2 weeks of the B&N app store launching, most users will look at the Android Market, and say "Forget it, I want apps from the Market, not B&N."
-Matt
Click to expand...
Click to collapse
The entire reason I have waited to root at this point is the loss of the 1 hour free reading in store, and the instore promotions. None of these are available after you root.
It also seems as if only a couple of people are actively trying to address this, so I continue to wait to root.
rlkelley said:
The entire reason I have waited to root at this point is the loss of the 1 hour free reading in store, and the instore promotions. None of these are available after you root.
It also seems as if only a couple of people are actively trying to address this, so I continue to wait to root.
Click to expand...
Click to collapse
Thanks for the pointer. Didn't know that (will revise my post). My wife may kill me.
I read the first 4 pages of the thread (http://forum.xda-developers.com/showthread.php?t=860830), then skipped to the last. My naive impression is it affecting about 6 out of 10 owners. There are definitely several who are rooted, and not having a problem. I can totally understand not wanting to take the risk.
-Matt
notinterested said:
I must have missed it but where in that thread is there any mention or confirmation that 1.1 is this month?
I see nothing of the sort.
Click to expand...
Click to collapse
He tweeted about January as well (@__ted__):
"A serious bug in WiFi, a memory leak in browser, and overall tune-ups. 1.1 is coming up later in Jan! "
It was my understanding that you could not buy from the B&N store via your B&N account post-rooting. I'm not sure if I would be authorized to read the books I've purchased due to DRM on them. I've purchased some expensive reference books and don't want to lose access to them, or access to buy more.
I'm also uncertain these things work post-root:
Sharing, Quotes, etc
Lending books.
I'm may root at some point, very comfortable technically. No fear of rooting, just my preference at this point. If I had a microsd and reader, I'd probably done it by now just to experiment.
From reading through the threads, in regards to loading all the "extra stuff" it seems like a lot of... this works, but you need to go an change this or that, change the pixel density to display properly, youtube working, not working, gmail contacts syncing not syncing, this works, but.... you need to use this and then edit this, etc... maybe not everyone's user experience, but defintely some.
So to me, the device is working fine and not having to fiddle with anything to get it working properly. I know myself and if I root, I'll be loading launchers, applications, troubleshooting why this or that doesn't work properly and sounds a bit time consuming and hacking around a bit. I'm not looking for a new "hobby" of figuring out how to get things to run properly and smoothly as I expect from a finished product. I'm using a e-reader and would like some extra social, productivity, and games to pass the time.
Rooting, not rooting... not wrong, just different.

[Q] Is there a way to pull a XAP file off WP8?

Hello - I am doing a pen test for a customer. They are not giving me the xap files like they did last time. Is there a way to pull the xap file off the phone and on to your PC? I have a dev unlocked phone which I can sideload apps using power tools. I have done some research and it doesn't sound like this option is available, but I wanted to ask.
Thanks in advance.
First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.
GoodDayToDie said:
First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.
Click to expand...
Click to collapse
Thanks again for all your help. So my situation is this: I am doing pen testing for a client (and I'm sure we are competitors some what). The have provided me a Nokia Lumia phone running 8.0 and another Lumia running 8.1. The app is installed by their dev team (app is not avail from the store). They are reluctant to provide my the XAP file as they consider it proprietary info. I have done a dev unlock on the phone, but my primary goal is to view the isolated storage/dlls for the app to make sure they are not storing sensitive data. I am using the standard tools for viewing the isolated storage, but for these to work (best of my knowledge) they require you to sideload the application which I cannot due (not XAP file). I am proxying the traffic, but without looking at the file system there is not much I can do. As an aside, they are using MDM with jailbreak detection.
Whoa, somebody actually got around to writing jailbreak detection for WP8? Crazy. I wish I could see that; I'm sure it's trivial to bypass (at least for interop-unlock, the difference between locked and unlocked is changing a registry value and it would be easily possible to re-lock it, launch the app while keeping the editor app open in the background, switch back to the editor, and unlock/jailbreak again) but I'm amused that anybody even bothered trying. Also, the APIs you would need to do the detection aren't even available on 8.0, officially; you're in violation of the store rules if you use them. Then again, maybe this is an internal, "Enterprise" app; those have permissions to do stuff that typical third-party apps do not. Are you sure they don't just mean they have jailbreak detection for iOS? I see something about Office365 MDM offering JB detection, but while I suppose they could have written something for WP8.x as well I feel like I probably would have heard of it?
If the app was sideloaded by the dev team, then you can see its isostore using the official tools or using Windows Phone Power Tools. If it's an enterprise app and the app was installed that way, then things get more difficult (especially if the phone they gave you doesn't have an SD slot). Not giving a pentester access to the binary they're testing is silly on a number of levels; if you succeed in breaking in then you'll get it anyhow, and an attacker will have a lot more than a week or two to poke at it so they're wasting your presumably-paid-by-the-hour time if they want you to see how good their security is without actually examining the app. I bet they used obfuscation, too... Some people just don't get it. "Security" by obscurity... isn't. Sorry, end of mini-rant. Anyhow, there's a guy on the forum who claims to have a non-JTAG unlock for Lumias, but no idea when or if it'll see the light of day.

Who is Kingroot and what are they doing to my system?

Hi,
after much fruitless time wasted pouring over the various methods on this forum only to find out that most of it relies on old, out of date exploits which are no longer valid, I finally gave up and tried Kingroot on my 7" Kindle Fire HD , running 7.5.1 firmware.
It worked very well. Initial attempt did not establish root but rerunning from the KingRoot menu succeeded. Cool.
However, I have no idea who I have let into my device, what they did and what level of control they still have.
The KingRoot web site is very coy about who they are and what they do. This is not really the way I want to go. It's only trash device for me which I'm messing with to find my way around. But my ultimate aim is regain control of my hardware not to forfeit control.
Does anyone know more about who this outfit is and how this all works?
Thanks.
whois:
Registrant Name:Shi Ji Kun Peng
Registrant Organization: Dalian Shiji Kunpeng Technology Compay Limited
Well I guess that is why they are rather coy about who they are, if they put it on the front page no one would download their trojan/spybot software. No uninstall option and if I remove the apk, it breaks su command !
Is my kindle now part of a chinese net bot ?!
The counter argument is that as guys on XDA are open and explain the exploits they also get known to the h/w manufacturers who slam the door closed in a future update and all the hard work is lost . Witness the tons of threads here which are now pretty irrelevant and waste everyone's time.
I have found that I can root using KR, use that state to install something Bin4ary's su build and then factory reset to remove the app.
Doing a factory reset clears the KingRoot application but leaves their su which is a link to ku.sud. So presumably if they install some kind of trojan that does not get removed either.
It does reboot with /system mounted ro, whereas with KR installed it seemed to be mounted rw, which is a pretty crazy state to have a device in.
Found this which seems to be KR's own PR. No mention of security or even a promise that they are not doing anything underhand. Lot's of "questions people ask" , except the ones about turning my device into part of a chinese netbot.
https://meribilli.com/
That silence is about a clear a statement as your are likely to get, I suppose.

Categories

Resources