Security problem in Resco photo viewer - General Topics

I think this might be of interest to some people, and since I haven't seen anything about it on the site I figured it should be posted.
There was a security vulnerability found in Resco photo viewer that may allow remote access and data theft from Windows Mobile based phones when opening corrupt PNG files.
Read here and here.
Being a bit surprised that a simple image file could cause such serious problem I looked it up and ran in to this old page giving some more details on the subject (this is for PC version of the PNG library though)

Related

Database with a difference

Hi Folks
What I'm after, and I'll pay if necessary, is a bit of database software for my PPC.
I'm hoping to create a database that would have a variety of information plus at least one image attached, possible more.
This database would consist of technical information and the image would be a pictoral representation of this (such as a picture showing the size of a machine in respect to its capabilities).
As an addition I'd like to be able to list the facts of each of these records in tabular format.
Once I've got a PPC piece of software I can then write up the database in it's PC equvilent.
On the PC I'd probably use MS Access as I have that installed.
Is this too complicated or would you like more information?
TIA
Elwyn
What about the WindowsCE version of SQLServer?
Edit: http://www.microsoft.com/sql/editions/sqlmobile/default.mspx
Thanks, installing it now Will let you know how it goes...
i work with alot of really big databases (24 million rows in the biggest) in my day job, tired a few PPC versions theres nothing decent that will work with 65k+ rows.
if you do a google on it there is articles and posts on various forums that talk about it.
only thing ill carry on the ppc is summarys of the stuff in the databases incase i need it in meetings and what not.
St3v3
Thanks for your information. The database would not have more than, ooh, at most, erm, 500 records.
Each record would probably be at most 20 fields per record with at least 1 image with possible more. I am glad in a way that I do not deal with such large databases though My job involves me being outdoors and outside and away from computers

Possible to use "Save" method in a local .htm file to save XML updates?

I am researching the possibility of using MSXML to update XML records on Windows CE devices using only pocket internet explorer. I was able to open and edit XML files using a local web page, but could not successfully save the results of an update. I tried the "save" method of a ActiveXObject("Microsoft.XMLDom") object. This works fine on a PC as long as I save the webpage with the .hta extension, but results in a Permission Denied error when I save the web page with the .htm/.html extension. Win CE doesn't seem to support the .hta extension.
The two biggest restrictions for my project are:
1) Cannot "install" software (.cab,.exe) on the devices due to security policy and
2) There is no data connectivity on the devices.
So my questions are, "Is it possible to save a file using javascript inside a local web page on a Win CE/Windows Mobile device? If so, how?" The file happens to be XML, but the solution need not involve only XML objects as I can readily access the content as plain text.
My best guess is that it is not possible without some sort of windows CE equivalent of the pc .hta file. Anyone? I appreciate any hints/comments that can help.
Thanks,
Dan

[Q] Nikon S800c, do the name "mick" strike a familiar note?

Being severely disappointed that the Nikon S800c android camera doesn't actually allow you to take 16 MP size pictures via the standard Camera API, I started applying tools like apktool and baksmali to the .apk and .odex files of the nikon camera app to see if I could see any clues about how it manages to access all the features of the camera. I found the manifest asking for the permission com.nikon.permission.MICKCAMAPPEXT, I found lots of names with "mick" in them in the half million lines of disassembly, and I found lots of device files, shared libs, and system binaries with "mick" in the name.
So, naturally, I wonder if "mick" means anything, or if maybe "mick" was just the code name for the android camera project at Nikon and it managed to creep into all the names of things? Anyone have any clues? All my discoveries can be found on my web page I probably can't post a link to, but I'll try .
Yep, can't post it. Here are the pieces you can maybe reassembly manually:
home comcast net ~tomhorsley hardware nikon reverse-engineer html

[Q] android postscript viewer?

I've looked around and couldn't find a viewer for postscript files. Is there anything around?
ghostscript is available under GPL, so I figure it should be possible to create something. Is there some legal/licensing obstacle I'm not aware of? Is there a technological obstacle?
This was asked time ago in the asus transformer forum, with no conclusion: http://forum.xda-developers.com/showthread.php?t=1483244 . As noted there, there is at least one service that sends the file to a server for conversion to pdf. Apart from the inefficiency and requirement for network connectivity, this also results in a pixellated version of the files (If there had been an option to setvery high resolution, the cost would be huge files). Normally, postscript images allow arbitrary scaling.
nobody?

Continuum (budget) & a simple c# webserver (w/desktop remoting)

Just found this site and got root on surface rt so thanks to all the effort put into this.
I rebuilt Continuum to target .net 40 (anycpu) and works great... no problems from zedgraph component. Its kind of a budget simulator with a lot of charts. You can download this here : https://continuum.codeplex.com/releases/view/107743 (or click on home from that link to see screenshot) and description.
I was looking for a webserver and haven't had much luck with mono xsp yet, but I did find a simple webserver that has an odd additional capability of a built in desktop remoting (view only display of the windows rt screen from browser so you could view it from other computers in your house). You can download it here here or view info on it here here.
Both those files have readme.txt files.
I have noticed any files downloaded from the web get flagged by IE SmartScreen that says the file was downloaded by and unsigned source and cannot be validated... I had to click more info to allow the program to run when I tested it this way. Earlier when I copied over usb, I got no such warning.

Categories

Resources