Guys, did anyone had a success doing that?
I've tried playing with
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"="en"
"Home"="http://www.google.com/palm?q="
but I had no success so far.
Anyone tried it?
I believe you have to hex edit the WebSearchPlugin.dll in \windows directory someone has already made a nice one with commands and stuff at pdaphonehome
http://pdaphonehome.com/forums/treo-700w-700wx/80152-new-advanced-700w-today-search-commands.html
rkhomenko said:
Guys, did anyone had a success doing that?
I've tried playing with
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"="en"
"Home"="http://www.google.com/palm?q="
but I had no success so far.
Anyone tried it?
Click to expand...
Click to collapse
Simply changing the URL works for me?
Heh..
Changing the url does not work for me. May be it is because I use the plugin on Wizard. All I want to change is to have web pages from search results to be displayed in xhtml...
Is there a way? Which hex editor should I use?
Which install file did you use?
I
I've usede the original dll dumped from Treo. I've just copied the dll to /Windows and did the nessesary registry record in .../Software/Microsoft/Today/...
I've tried to modify the library myself using 3rd party hex editor, but I could not fine any reference to google search string in the file.
I would like to have a search string like http://www.google.com/xhtml/search?mrestrict=
Can you post the DLL?
rkhomenko said:
I've usede the original dll dumped from Treo. I've just copied the dll to /Windows and did the nessesary registry record in .../Software/Microsoft/Today/...
I've tried to modify the library myself using 3rd party hex editor, but I could not fine any reference to google search string in the file.
I would like to have a search string like http://www.google.com/xhtml/search?mrestrict=
Click to expand...
Click to collapse
Try try this:
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"="xhtml"
"Home"="http://www.google.com/xhtml/search?mrestrict="
So if i searched for tree it would then read
http://www.google.com/xhtml/search?mrestrict=xhtml&q=tree
The search URL is as follows: "home"+"lang"+"&q="+search
Is there a reference in the DLL to &q=?
Some handy search URLS
Google - xhtml
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"="xhtml"
"Home"="http://www.google.com/xhtml/search?mrestrict="
AltaVista
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"=""
"Home"="http://www.altavista.com/web/results?itag=ody"
Live.com
[HKEY_LOCAL_MACHINE\SOFTWARE\Palm\Today\SearchPage]
"Lang"=""
"Home"="http://mobile.live.com/search/results.aspx?__redir=1"
Nope, changing registry does not help
I have attached the dll and reg files that I've used to instal the plugin. I've created the url search string registry manually after installing the files attached.
I am still testing but... well another user gave us the info to the update file... and it gives us the radio.img, the boot.img, and an editable system folder... I wonder if it will let you update it if you change the files... Wonder if you can sign it yourself.
Well please do let us know!
It is too late to do it tonight (for me anyways) I will be deleting files and seeing if it keeps it signed status tomorrow (you know how HTC likes every signed a certain way LOL) will keep you informed. BTW there is another thread with the file.
You get hat Structure from the Following File
https://android.clients.google.com/updates/signed-kila-ota-115247-prereq.TC4-RC19+RC28.zip
Making the Customised Image is not an Issue though but how can we signed it to Possible load it on Device.
We must get Cracked Boot loader to flash Unsigned Object and file like we have done it so far to Windows Based HTC Devices.
Yeah, I think that the signature of those files (found in the MANIFEST.MF) is crucial to get it to flash.
If, however, you can get it to flash with those things changed - that'd be pretty awesome.
The easiest way to test it, I think, would be to leave the files intact but to alter one of the signatures in the MANIFEST.MF file so that you are effectively breaking the signing (which is the same thing changing one of those files would do) - once you have done that - if the device will still flash then you KNOW you are in business.
Just don't want to waste a lot of time building some sweet image only to find out you can't do anything with it.
Just my 2 cents.
The other question is - once you've run an update from the SD card with the RC29 update can you re-run the update?
RyeBrye said:
The easiest way to test it, I think, would be to leave the files intact but to alter one of the signatures in the MANIFEST.MF file so that you are effectively breaking the signing (which is the same thing changing one of those files would do) - once you have done that - if the device will still flash then you KNOW you are in business.
{...}
The other question is - once you've run an update from the SD card with the RC29 update can you re-run the update?
Click to expand...
Click to collapse
I can test it out for you. Just change any value in the file?
And someone else had stated that you can re-update, but I'll try it again with the file changed.
Okay... so you can run the update again, just confirming.
I removed a ringtone from the /system/media/audio/ringtones but didn't change anything in the MANIFEST.MF file.
"Verification failed
Installation aborted."
Next i'll try to change the value for it in the MANIFEST.MF file and see if it goes thru.
Changin the MANIFES.MF file failed because it checks with CERT.SF
Chaning CERT.SF to be the same.
Now I got the following
E:No signature (414 files)
E: Verification failed
Installation aborted.
Time to tinker away... If someone can guide me just a lil, that would be apreciated. I'm still going to waste my time doing whatever "I beleave" is progress in the mean time
quedijo said:
Now I got the following
E:No signature (414 files)
E: Verification failed
Installation aborted.
Time to tinker away... If someone can guide me just a lil, that would be apreciated. I'm still going to waste my time doing whatever "I beleave" is progress in the mean time
Click to expand...
Click to collapse
I wish i knew anything about linux permission, i would like to help
apatcas said:
I wish i knew anything about linux permission, i would like to help
Click to expand...
Click to collapse
Thoughts count aswell
I got to go do a job right quick... should be back in 4hrs or less, I hope
i'll try to help as much as i can
Ill look into how the manifest works, ill work on it as much as I can
Let's get this baby customized
The cert is referencing a checksum to the manifest. It seems that they are using sha1-digest as stated plainly in the manifest file but i believe it is further encoded by base32 encoding. Does anybody have a base32 encoder handy?
Digests and the Signature File JDK
I believe the second line in CERT.SF is a hash for MANIFEST.MF. You need that hash to match the hash for the actual file MANIFEST.MF. There could be something that also hashes CERT.SF to see if you messed with it, but I don't see that right now.
So, edit CERT.SF so the line:
SHA1-Digest-Manifest: lsGC/wXGYwKahxByTQdTNs2K5oY=
Matches the SHA1-Digest (in base32) of MANIFEST.MF and try again.
Just to clear up some things for those following this thread...
The update image is signed with a private key by either HTC or Google (honestly not sure which, probably google). When your phone receives the image it decrypts the signature with each of the public keys it has installed, if one matches it installs.
The keys are made in pairs, the private key (which only the signer has and we will not obtain) signs and the public key (which is installed on the device as trusted) is used to decrypt.
Of course if someone can manage root access to the phone through one of the processes running as root by using a buffer overflow or something of that nature we can simply add OUR OWN public key to the phone's repository, and sign our images with OUR OWN private key. This would allow a new image to be made that once installed could auto-check for updates and pull off the same kind of update process that we see with rc29...
netcmd said:
I believe the second line in CERT.SF is a hash for MANIFEST.MF. You need that hash to match the hash for the actual file MANIFEST.MF. There could be something that also hashes CERT.SF to see if you messed with it, but I don't see that right now.
So, edit CERT.SF so the line:
SHA1-Digest-Manifest: lsGC/wXGYwKahxByTQdTNs2K5oY=
Matches the SHA1-Digest (in base32) of MANIFEST.MF and try again.
Click to expand...
Click to collapse
It is the hash for MANIFES.MF
I did that and still gives the following:
E:No signature (414 files)
E:Verification failed
syrusfrost said:
Just to clear up some things for those following this thread...
The update image is signed with a private key by either HTC or Google (honestly not sure which, probably google). When your phone receives the image it decrypts the signature with each of the public keys it has installed, if one matches it installs.
The keys are made in pairs, the private key (which only the signer has and we will not obtain) signs and the public key (which is installed on the device as trusted) is used to decrypt.
Of course if someone can manage root access to the phone through one of the processes running as root by using a buffer overflow or something of that nature we can simply add OUR OWN public key to the phone's repository, and sign our images with OUR OWN private key. This would allow a new image to be made that once installed could auto-check for updates and pull off the same kind of update process that we see with rc29...
Click to expand...
Click to collapse
@syrusfrost: It's true that the zip is signed with a private key from HTC, however we can easily resign the package using our own key. The question is will the G1 accept this?
Has anyone tried resigning the application with the jarsigner? The errors people have been listing, and the files located in META-INF corrospond to the same errors you get after patching a dalvik-executable (dex file) and not resign the package.
If the system files are NOT verifying it to the the specific HTC key we should be able to resign and have it accept out own update file...
I'm currently not at my development machine but I'm thinking we might be able to get somewhere using the permissions.xml file located in /system/etc/ - though this is considered a 'read-only' file in both the emulator and in the G1 hardware so changing it has thus far been unable to happen... Possibly a minor change like the following;
Code:
<!-- Test to see if we can gain cache access by assigning permissions and getting new
update -->
<assign-permission name="android.permission.ACCESS_CACHE_FILESYSTEM" uid="shell" />
Then resigning the whole package would let us get access to the /data/dalvik-cache system? Any takers on my... Seemingly stretching assumption?
strazzere said:
Then resigning the whole package would let us get access to the /data/dalvik-cache system? Any takers on my... Seemingly stretching assumption?
Click to expand...
Click to collapse
Okay bare with me. I wan't instructions on how to get the SHA1-digest of a file.
I found some instructions to use PHP and I can boot a LiveUSB Distro of Fedora but i'm sitll a bit lost
I have installed CyoHash for vista and the SHA1 base64 are exactly the same as the ones in the MANIFEST.CF but different for CERT.CF
So are the hashes for MANIFEST.CF SHA1 base64 and SHA1-Digest base32 for CERT.CF?
quedijo said:
Okay bare with me. I wan't instructions on how to get the SHA1-digest of a file.
I found some instructions to use PHP and I can boot a LiveUSB Distro of Fedora but i'm sitll a bit lost
I have installed CyoHash for vista and the SHA1 base64 are exactly the same as the ones in the MANIFEST.CF but different for CERT.CF
So are the hashes for MANIFEST.CF SHA1 base64 and SHA1-Digest base32 for CERT.CF?
Click to expand...
Click to collapse
I think Manifest.cf is just a regular hash checking file to make sure all files are there. While Cert.cf is the one that makes sure they are signed by the RSA
EDIT: CERT.CF is signed with HMAC-SHA1 The RSA is the public Key used to decrypt the hash correctly. I believe this means we can definitely use our own private/public keys to sign the package.
Anyone wanna help me figure out how to sign a HMAC-SHA1?
I have no clue what forum to put this in so I hope this is ok.
I'm trying to flash a theme but am getting a status 6 error? Any ideas why?
I read that it might be that it can't read a file properly ie. if you use notepad to write the updater-script, but I used notepad++ so I don't think that could be it.
Thanks in advance
edit - mod can delete this now.
Turns out it was because I had it set to UNIX EOL and UTF-8 Encoding, when I changed it to UNIX EOL and ANSI it flashed.
My problem isnt to know what i should edit, it's more like when i open this file (attached here) i'm getting random text which most likely indicates that it's unreadable.
I tried using notepad at first, then dreamweaver and at last some XML editor from microsoft. All failed. I dont think it's something wrong with the file since it works fine.
Anyone able to get it right? Thanks in advance.
Hi.
First of all, let me say that half of time took me to look for the right forum in XDA to post this message, and I'm still not sure I'm in the right place..
I think my Q is about modifying my OS, and this is why I post it here.
If the admin think there's better forum to this issue - I'd love to hear it..
Now, to business:
I have a GPS device, brand is X-GPS Navigation, Model GPS-S450B, that I will like to play with.
The OS is Windows® Embedded CE 6.0.
I just found out that at my GPS device, there is a file that resposible to a certain BMP that shown up at the shutdown process.
The filename is "PowerKey.exe", and it reffer to a file named "Notice_en.bmp".
I want to change that Notice-en.bmp file, to show that message in another langueage. I tried to overwrite the file with a similar bmp file, no luck. The file just re-created.
I've tried to edit the PowerKey.exe with a hex editor, and write a new path, to a file in NandFlash directory instead of the Notice_en that lays in Windows folder.
That also didn't go so well. "PowerKey has been preform illegal action and have to be shout down" or something like that, was the message. I could only put the device to sleep, until I recovered the old PowerKey file.
Any solution how to change the BMP file that resposible for the shutdown message?
(I guess the best idea is to write a registry entry to overwrite the BMP file in \Windows directory with the one in the \NandFlash directory every boot, only problem - I donno how to do it. )
Anyone?
There's no solution to my problem?
Recompile the exe.
Thank you.
Any chance to general guidlines in how is that done?