I'm sure most of you know the previous thread about this topic, but it died pretty fast..
I spent the last few weeks on developing a boinc project to bruteforce the RSA key Motorola uses to sign the boot and recovery partitions on the Motorola Milestone.
The project is located here:
http://poseidon.shacknet.nu:8080/MilestoneRSA/
The front page pretty much describes what this is all about, i won't repeat all of it here, but the basics are:
simple, naive bruteforce implementation (yes i know it's pretty much impossible to bruteforce RSA 1024, but why not give it a try and see if we're lucky)
windows and linux 32 and 64 bit architectures are supported, currently windows 64 bit is much faster than the other 3, i'm working on it.
if anyone has access to a mac, experience in building on it and interest in porting the MilestoneRSA_main app to mac, i would appreciate if you contacted me. The app must be statically linked to either GMP or MPIR.
sooo. what is needed now are lots of participants, every single cpu increases the chance to break the key!
There were so many people in the other thread, willing to participate, i hope all of you stand to your word!
Poseidon Pontomedon
My 3 dual-core PCs will join the fight !
I'm in, of course.
Would it be possible to use the power of GPU along with CPU somehow?
Edit: read the site now, it actually lets us use CUDA capable GPUs. Cool. In theory.
Six core pc. Im not sure wether i did well or not... It look like this
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I`m in.Lets beat this little green alien inside our motorolas.
jackeh070 said:
Would it be possible to use the power of GPU along with CPU somehow?
Click to expand...
Click to collapse
In theory, yes, Boinc supports cuda applications. In practice: Someone would have to port GMP or MPIR or some other Big Integer library to cuda, because we have to deal with really large (1024bit) integers here. If there's someone experienced with cuda please contact me, but i'm not able to do it..
Yriel40k said:
Six core pc. Im not sure wether i did well or not... It look like this
Click to expand...
Click to collapse
The default GUI is really ugly, click on "Advanced view" to get the full one. (apart from that, yes looks like you're calculating )
zviki said:
I`m in.Lets beat this little green alien inside our motorolas.
Click to expand...
Click to collapse
I m always down for a good fight. Even if its a losing one haha.
joined.
cant seem to get it to use my gpu though.... sorta weird.
hefonthefjords said:
joined.
cant seem to get it to use my gpu though.... sorta weird.
Click to expand...
Click to collapse
as i said above, no cuda client so far, probably someone will help me implement one..
As sysadmin at a certain institution, we're giving quite a few cycles to this (almost lost) cause Thank you, keep it up!
http://forum.xda-developers.com/showthread.php?t=779917
"If you subtract the sig_start_addr and sig_end_addr I suppose you get the length of the signature. I checked them all. They are all 2048-bit . Did not find any 512-bit ones."
How did we get to 1024bit?
You are my hero
I hope everybody is willing to donate some cycles for this excellent cause
Uhm don't wanna piss on the parade here, but did anyone check out how long it takes to calculate the key? AFAIK such a key would take millions and millions of processing hours.
This means that just the power it costs to power those CPUs will probably get you a truckload of Nexus ones.
And to add to that, it is probably much better for the environment to buy a new phone instead of running your computer for three million years.
AliceXES said:
http://forum.xda-developers.com/showthread.php?t=779917
"If you subtract the sig_start_addr and sig_end_addr I suppose you get the length of the signature. I checked them all. They are all 2048-bit . Did not find any 512-bit ones."
How did we get to 1024bit?
Click to expand...
Click to collapse
The values in the CDT refer to the whole signature block, including (at least) two certificates and a 1024bit (128 byte) actual signature (as in "encrypted hash") at the end. if i have time a little later i can explane how the signature block is built in detail. but believe me, i have the correct public key, and i have successfully decrypted the encrypted hash with it. what we need is the private key for this public key, because then we can hash our own partition and encrypt the hash with the private key (aka signing). For an overview about digital signatures read http://en.wikipedia.org/wiki/Digital_signature
geekmystique said:
Uhm don't wanna piss on the parade here, but did anyone check out how long it takes to calculate the key? AFAIK such a key would take millions and millions of processing hours.
This means that just the power it costs to power those CPUs will probably get you a truckload of Nexus ones.
And to add to that, it is probably much better for the environment to buy a new phone instead of running your computer for three million years.
Click to expand...
Click to collapse
if you read what i wrote on the front page of the project, you'd know that i'm well aware of that fact that it would take forever (in the worst case). but we might be lucky and find the key today, or in a week, or in a month. Or, of course, we do never find it, and the project will die a slow death. Anyway i wanted to try it, if you do not want to use your computer to help, no one forces you to
You've got my cycles!
Yeah ! I'm in too!
and im in, running on my netbook for now until i get home to install it on my desktop and get that bad boy running, lets crack it! even if it will take alot of time and power it is still possible
Does anyone have any documentation on whether Motorola uses the same RSA key for all models of phones?
If not, then pontomedon, would it be possible to set up a different project for searching for the XT720 key?
Sorry guys, but the time to crack a 1024 bit RSA key in brute-force mode i really too long...It's really too optimistic hoping to crack it from now to ten years.. I think it is only a waste of resource...
Lets try to put all power 2gether 4 the 1 project!
Step by Step!
So up and running!
Possible to see any statistics?
Keep on Hacking!!!! Free the Bootloader free the Milestone xiss on Moto!
Related
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Been thinking and now wonder if there is someone able to create an application behaving similar to a Wacom-tablet? There is applications out there that could work (Omnipresence, G-remote), but it's way to laggy to use in Photoshop.
It wouldn't have to have a lot of features (I'm actually not very informed about wacom-tablets and what features they have so I dunno what could be implemented). But it would be best to keep it clean and minimize the lag and optimize for use with stylus.
Am I the only one who thinks this would be awesome or are there more out there like me?
Edit: Thought I could add a list of wanted features for this, so if you'd like any special features implemented in the app, just post it and I'll add it to the list. I should also add that I have no knowledge of developing myself so I don't know what actually can be done.
- Adjustable Sensitivity (Could be a pain using such a small screen otherwise)
- Simulate a right-click on the mouse. (Either a map a hardware-button or make a separate soft key)
- Scrollbar (?)
Will be superb. Very good idea...
Seems like we are the only ones interested in this?
Hmm nice idea.
I think this should be able with .NET Framework.
I still work on 3 other projects till the end of november and then I will give a try to this project.
If somebody wan't to help me, please PN.
Great! If you need I can help out with graphics.
If this app goes well, it would save a lot of money for a lot of people. I mean even the smallest sized Wacom cost quite a lot.
Really nice idea people . Hope it gets developed ..will be qiute a big saving
http://www.entisoft.com/PocketTablet/download.htm
JesperO said:
Great! If you need I can help out with graphics.
If this app goes well, it would save a lot of money for a lot of people. I mean even the smallest sized Wacom cost quite a lot.
Click to expand...
Click to collapse
Ever tried one? Even the smallest wacom(bamboo) is all the money worth. I habe one and i wouldn't miss it.
btw. it isn't possible to rebuild the functionality of a wacom - you don't have to touch the panel. you move the pen a few millimeters across the panel and tap to click
Wacom tablets are combination resistive+capacitive tablets. You can't replicate the functionality with the simple resistive (or capacitive) panel you have available to you on the phone. The stylus is also pressure-sensitive, so pressing harder gives you thicker lines when you're drawing. You can't do that without electronics in the stylus.
lucky3d said:
http://www.entisoft.com/PocketTablet/download.htm
Click to expand...
Click to collapse
Ok now I think we don't need to develop such a software anymore, or?
Philipp__ said:
Ever tried one? Even the smallest wacom(bamboo) is all the money worth. I habe one and i wouldn't miss it.
btw. it isn't possible to rebuild the functionality of a wacom - you don't have to touch the panel. you move the pen a few millimeters across the panel and tap to click
Click to expand...
Click to collapse
I agreee. WACOM's new line of tablets - Bamboo - are actually very inexpensive (I picked up a 4x6 model for $60 at Fry's Electronics) compared to some of their higher end tablets, and for most functions you would use a tablet for, they work great (wouldn't try to do autocad or anything like that with it, but it's great for photoshop and web design - which is what I do).
Granted, for something like basic handwriting recognition, using our touchscreen phones would certainly be a good alternative. The PocketTablet software mentioned earlier seems like it would meet those needs, but of course if someone wanted to develop a free alternative, I'm sure no one would complain
H4s1 said:
Ok now I think we don't need to develop such a software anymore, or?
Click to expand...
Click to collapse
Depends if you want to? If you think you can make it better, go ahead! Also, that software had to be purchased (yes I know, I'm cheap, but I'm short of money at the moment).
Also, my intentions with this wasn't to make an exact copy of a Wacoms functionality, I realize that can't be done. But something close that could work without lagg to use while saving for the real thing.
Moved as not software release or development.
Please take your time to read the rules.. http://forum.xda-developers.com/showthread.php?t=447646
I think we can make it better.
But which functions we should develop to make a better program?
First Post Updated
Check first post. I made a layout and features suggestion, I think it could work pretty well. I had to think a while to solve the problem with having to move the mouse without drawing.
So if you hold the "left-click" button, the button holds down, which means if you then move with the stylus, it gets drawn. If you don't have the left-click button held down, you only move the mouse.
Feel free to add suggestions and opinions!
Christ... since this thread was moved to Q&A the activity died completely!
I use the Read It Later extension for Firefox heavily, and have always missed an WM App that would allow me to read the pages I've marked on my phone.
Well, since I've bought the HD2 I've missed this even more...
Now, it seems that the folks that makes RIL released an API so that anyone can make its own app...
There's an official one for the iPhone, a user made for Android... and none for WM.
I've tried to make one myself, but its way beyond my "search and learn with Google" programing skills.
This way, I want ask if someone is interested or is capable of doind a Read It Later App for WM, HD2 customized, using their API.
The site is here: http://readitlaterlist.com/
It would be really nice to have a "Instapaper" like app for WM...
Thanks in advance!
Request seconded.
without looking at exactly what this is. do you mean an offline browser? if so then opera has the function built in.. saved pages
fards said:
without looking at exactly what this is. do you mean an offline browser? if so then opera has the function built in.. saved pages
Click to expand...
Click to collapse
It's not only saved pages...
It's like Instapaper for the iPhone.
You mark a page to read later in RIL Firefox, for example, and then can access the link throught the app in the phone to read it.
The good thing about RIL is that you can mark a page in your desktop and it sincronizes with web, so, as soon as you open RIL in the phone the page is already there.
The advantage here is that you can mark pages to read in multiple PCs (I use in Vista/7 installarion in my notebook as well as XP/7 in my desktop) and still have a unified list.
+1 It looks like a swell piece of software which Id like on winmo
[★] said:
+1 It looks like a swell piece of software which Id like on winmo
Click to expand...
Click to collapse
It is very nice.
ATM i'm using the web version, with the shortcut readitlaterlist.com/unread . When you create an account, this shortcut will lead you directly to the reading list.
Putting Opera zoom in 100%, it fits right in the screen.
But it lacks a lot of features. It is actually just a list of links. You have to manually check read itens, press and hold the link if you want to open in another tab.
What I miss the most is some options to store the pages for future references. Now I have to manually do this... It would be nice if the app allow us to send the pages to another apps...
I hate to bump my own threads, but no one can help me?
Can someone at least tell me what programming language would be easyer to make such an app?
zefiltrin said:
I hate to bump my own threads, but no one can help me?
Can someone at least tell me what programming language would be easyer to make such an app?
Click to expand...
Click to collapse
Could someone at least tell me what would be the easyest way to make a app like this?
I really miss an app for RIL, since internet version is not that good.
Id also like to have this app on WM or somethin similar. Cant help you build it, though.
TheGoD said:
Id also like to have this app on WM or somethin similar. Cant help you build it, though.
Click to expand...
Click to collapse
Thanks anyway... I'm kind of resign that this won't be done.
Using the web version. Not perfect, but does the job.
I have not used this application/service before, but it looks interesting.
I have checked the API and it looks very simple to use.
The only thing that remains before starting to code is to have a rough design of the application GUI, just to set a rough scope on the functionalities.
Then I believe it is possible to create an "ugly" but functional application in a few days. I can work on this project if I can manage to allocate some spare time on this.
zefiltrin, I think you know the usage scenarios of this application way better than me, as I have not yet used it. Why not make a few sketches for describing the GUI of the application you want to see on your PPC. I mean the buttons, lists, etc. Then I would try to realize them (again, if I can manage to allocate some spare time on this)
vizier said:
I have not used this application/service before, but it looks interesting.
I have checked the API and it looks very simple to use.
The only thing that remains before starting to code is to have a rough design of the application GUI, just to set a rough scope on the functionalities.
Then I believe it is possible to create an "ugly" but functional application in a few days. I can work on this project if I can manage to allocate some spare time on this.
zefiltrin, I think you know the usage scenarios of this application way better than me, as I have not yet used it. Why not make a few sketches for describing the GUI of the application you want to see on your PPC. I mean the buttons, lists, etc. Then I would try to realize them (again, if I can manage to allocate some spare time on this)
Click to expand...
Click to collapse
I´ll do that! I'm travelling until april 4th, but will try to do that as soon as I come back.
I think I´ll use some of the screeshots of the existing apps for iPhone and Android.
Thank you for your help!
Well, here are some ideas:
I think the home screen should look like iPhone's Read It Later app:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
The list of things to read could be similar to GReader site, with big letters, two or more lines to allow seing the whole title:
In the "Greader-like" list abobe, there shoud be a search bar and the buttons to direclty mark as read or show the text only view, like this:
Finally, it would be great to have the sharing options like iPhone app (don´t know if the API allow that):
Let me know if this helps...
Ok I will spend some time on this tomorrow.
I started working on this project, I call it "Late Reader" for now. Any better name suggestions are welcome. I think I can post a first beta or alpha in a week.
vizier said:
I started working on this project, I call it "Late Reader" for now. Any better name suggestions are welcome. I think I can post a first beta or alpha in a week.
Click to expand...
Click to collapse
Thank you very much!
I'll be glad to test it when you release it.
ooh, this would be a fantastic application
I'll be following this with this new account.
Anyway, very anxious to see the result!
hugocbp said:
I'll be following this with this new account.
Anyway, very anxious to see the result!
Click to expand...
Click to collapse
OK I should call you hugocbp as of now I guess
I was on a business trip during the week, so I could not work on this project. I plan to have some progress this weekend, and hopefully post you some alpha to test. We'll see.
vizier said:
OK I should call you hugocbp as of now I guess
I was on a business trip during the week, so I could not work on this project. I plan to have some progress this weekend, and hopefully post you some alpha to test. We'll see.
Click to expand...
Click to collapse
No problem! I posted only to subscribe to the thread and let you know I'm the same who created it.
Take you time, I'll be here whenever you're done!
Click here and help us getting to the XDA main page.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
This is an official thread about AndrOINC - BOINC project created by Sesef and OxyOne from Polish National Team.
Informations
Official name: AndrOINC
Motto: For Motorola Milestone freedom
Website:
Creators: Sesef and OxyOne from Polish National Team(BOINC.pl)
Special thanks to:
pontomedon - for creating the MilestoneRSA project and putting everybody one step closer to Milestone freedom
Platforms:
Windows x86 - supported
Windows x64 - supported(with app from x86)
Linux x32 - currently working on
Linux x64 - currently working on
GPU application ATI + nVidia - very soon
What is it?
AndrOINC is a BOINC project trying to break a 1024 bit RSA key used by Motorola to sign the boot and recovery partitions on the Motorola Milestone. If this key could be broken, we would be able to sign our own boot/recovery images, which would enable us to run custom kernels and recovery images on the Milestone.
//Will be updated later
Reserved for future use.
Let's get started, I'm sure all of us together can achieve it.
What about the possibility of searching not just the milestone key but also the ones from other moto models to increase the audience ?
It's already going to take till the end of time to find the Milestone without adding extra verables to the mix.
DannyDroid said:
That would length the time on all they keys.
Click to expand...
Click to collapse
My skill on symmetric encryption is almost zero, so sorry for the dumb questions.
This mean that every motorola phone has a different pair of public and private keys ? There isn't a single public motorola key, right ?
I have joined this project
Team Canada ready for joining.
Thanks for the project hosting
just a sec - AndrOINC? nobody told me there'd be pigs involved!
seriously, though: congratulations and thanks for the effort. count me in.
registered
what happened to previous boinc project?
bijixda said:
registered
what happened to previous boinc project?
Click to expand...
Click to collapse
Unfortunately, the MilestoneRSA has been aborted and we have to start from scratch....
However the good news is that we are going to use optimized worker from PNT and they are goin to provide GPU support as well.. so we'll cover up the wasted work sooner than later.
joined in (tough its just a laptop). can't wait for the bootloader to be cracked.
source code of the worker so we would actually know what are we computing?
Alternative Quicker Method?
Started helping you guys out with some computing cycles.
I know nothing about encryption, but a team from Univ. of Michigan broke 1024-bit encryption quickly by altering voltage to cause CPU faults. We can easily control voltage on Milestone and DX...anyone looked into their paper and its application to unlocking the boot loader faster than a brute force method?
engadget.com/2010/03/09/1024-bit-rsa-encryption-cracked-by-carefully-starving-cpu-of-ele/
ns.umich.edu/htdocs/releases/story.php?id=7551
I'll join as soon as the linux client will be available .. Can i use it first and then switch to the one with CUDA support?
yes, I think BOINC will just have to update the worker itself to support CUDA, not the whole client
However, since they mention Nvidia and ATI support, they won't be using CUDA (nvidia only)
man these WUs are fast. I'm doing 6 minutes compared to 12 hours on my x86 Win7 VM with 2Gb on my MacPro.
DigiK said:
Started helping you guys out with some computing cycles.
I know nothing about encryption, but a team from Univ. of Michigan broke 1024-bit encryption quickly by altering voltage to cause CPU faults. We can easily control voltage on Milestone and DX...anyone looked into their paper and its application to unlocking the boot loader faster than a brute force method?
engadget.com/2010/03/09/1024-bit-rsa-encryption-cracked-by-carefully-starving-cpu-of-ele/
ns.umich.edu/htdocs/releases/story.php?id=7551
Click to expand...
Click to collapse
They way I see it, you would have to alter the voltage at boottime since that is when the keys are being checked.. this is not the same as tweaking the vsel if this is what you refer to with "we can easily control the voltage"
So I don't know if would be that easy to do.. But hey, I'm not an expert or something
SophT said:
man these WUs are fast. I'm doing 6 minutes compared to 12 hours on my x86 Win7 VM with 2Gb on my MacPro.
Click to expand...
Click to collapse
or the workunits are very small...
Joined. Hopefully we will win
The reason I ask is because I found a big one. Well for MS it's big. It allows for an end user to 'buy' apps/games from the on device marketplace without actually paying anything. The app purchase appears in your history and can be redownloaded at anytime just as with any legitimately purchased app. This can all be done on an unmodified device pretty simply and if the device is dev unlocked it can be done REALLY easily. Sadly this doesn't help any of us in the interop/full unlock area as it has more to do with purchase validation than code validation.
I would say ask Microsoft. But you should turn it in regardless, not because of morals but because it could hurt our ecosystem/chance of WP success if someone with the wrong hands found it. Plus since your a recognized dev I'm sure you wouldn't like your work getting stolen
He-he, MS marketplace scheme is full of bugs but I don't think they will pay you something.
Good example is ChevronWP: for their great and early find MS "paid" (actually just let 'em do the job) for $100K total, it means one year job (OK, may be a moonlight job) for each team member for $30K? (Don't forget: they prepared some backend, payment system, databases etc. etc. etc - lot of pain in the a$$)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
C'mon, you may earn that money for pizza delivery!
BTW, nice find, good job, congrats!
P.S. voluptuary, if you have some direct MS contacts (4 example, your MS evangelists, or some MS insiders - middle level managers or developers etc.), try to contact these guys first.
I don't believe MS has bug-bounties for external finds, though you could always try negotiating with them (I don't recommend it, they may get litigious if they think you're trying to extort them). They do however generally deal fairly with external finds (i.e. if they don't think you're being abusive and are acting in good faith, they'll be appreciative unlike some companies which would immediately unleash the lawyers).
I'm with @jeffreygtab on this, also; anything that makes app piracy really easy needs to be dealt with for the good of the platform. Android frequently loses notable devs who don't want to deal with an unreliable market. WP7 doesn't need that kind of bad rap; it's hard enough just getting the market share.
The implication that it can be done without having dev-unlock is interesting... and a bit scary. That needs to be patched immediately. MS knows that some dev-unlock is used for piracy (that's why there's the 10-app limit by default) but if it can be done on a dev-locked phone, that needs to be fixed immediately. It's also going to be easier for somebody unscrupulous to repeat this now that they know it's possible.
Agree 100% with GoodDayToDie! So, voluptuary, please try to keep your find in secret and do not share with anybody (including recognized developers and friends from XDA), it's kinda dangerous (GoodDayToDie is 200% right). If you want and don't have direct contacts in MS, let me know, I can try contact my guys ASAP. PM or email me.
Thoroughly impressed that you guys have the foresight to see this for what it is, as opposed to just extorting it for personal gain. Truly shows where your hearts lie, and it's refreshing to see.
The three of you are a credit to the WP7 scene here, even if it's just in the eyes of a rookie Mod
I tip my hat to you.
He-he, from my own experience. In 2006 I've found (accidentally) a very critical vulnerability for ALL Microsoft operating systems: from Windows 95 to latest Vista or Windows Server 2003!
That simple Pascal code (but can be C or whatever; also you'll never suspect something wrong in this code!)
Code:
program reboot;
uses
windows;
var
pData: pointer;
Info: TBitmapInfo;
Width, Heigth: dword;
ImageDc: HDC;
Bitmap: HBITMAP;
begin
Width := 640;
Heigth := 480;
ImageDc := GetDc(0);
Bitmap := CreateCompatibleBitmap(ImageDc, Width, Heigth);
GetMem(pData, Width*Heigth*8);
ZeroMemory(@Info, sizeof(TBitmapInfo));
Info.bmiHeader.biSize := sizeof(TBitmapInfo);
Info.bmiHeader.biWidth := Width;
Info.bmiHeader.biHeight := Heigth;
Info.bmiHeader.biPlanes := 1;
Info.bmiHeader.biBitCount := 32;
Info.bmiHeader.biCompression := BI_BITFIELDS;
GetDiBits(ImageDc, Bitmap, 0, Width, pData, Info, DIB_RGB_COLORS);
end.
(I'm publishing that code 'cause issue already resolved by MS)
causes immediate crash of any MS OS and push system to reboot, even without BSOD! If you have a MSDN 2005, you can easy reproduce that bug.
But... I wrote 5 (five!) emails to MS until issue wasn't resolved (at April 3-rd, 2007). Try to guess, how I was rewarded? Yep, for a real hacker "sorry" and "thanks" from the Microsoft Security Response Center stuff is best award
I never intended on sharing this with the dark underworld of the internet since it has no real use aside from piracy, but I had just read about Google's bounties for bugs so I figured I'd ask. I have to do a little more testing to make sure it's not just a backend glitch with my account but after I know for sure I'll submit a report to... someone. I'll figure that out later too.
as far as I remember there was a glitch with apps purchased and cancelled right away...someone posted here months ago something about an app that kept on reinstalling.
Glitches like these are like CC errors you see published on news papers...even if you WILL explain it, M$ will remotely erase it once they realize that there's no dineros paid...
As for piracy, only a few words: sideloading due to custom ROMs,wp marketplace, Milkman, Navigon, Nokia Apps...even running Tango could be seen as piracy; piracy is like a BJ, it depends on which end you are.
Anyway, congrats on your clean WP roms, no pun intended, they are awesome for being clean of skins and icons and so on.
Ahaha, nice find @sensboston. I once went to MS talk where they were discussing some piece of Windows malware they'd dissected. They discussed the various exploits it had used, and at one point during the talk said something like this:
"... so for the next part it exploited a vulnerability called Win32k.sys - I mean, a vulnerability in Win32k.sys - to access the kernel..."
Win32k.sys is where all the DIB stuff, among other things, lives. It's a huge mass of very high-performance code that runs in kernel mode to avoid even the (trivial, these days) performance hit of a ring switch... but it's also very old code (the oldest parts are from the mid-90s) and apparently every time they have to fix something in it there are a bunch of regressions due to the change, so apparently the Windows team is scared to touch it...
I don't know anybody on the WP7 team, but I do know some people at Microsoft if you want me to put you in touch with them. Do verify the bug first, of course, but I suggest doing so with free apps if possible...
I ran into a technical hurdle with implementing the Windows RT 8.1 jailbreak. I believe that it will only be possible to install the jailbreak while in a command prompt recovery console. You'd have to hold volume down, or other similar mechanism for non-Surface products, select recovery, then select Command Prompt. You'd have to, of course, be very careful when you do this, because the "format your SSD" options are right next to it.
Would this make you reluctant to install such a jailbreak? Once installed, it should stay persistent until a major upgrade event like a service pack or Windows 8.2/9.0.
The reason for all this is because it turns out that what I'm trying to do can only be done on the C: drive. In order to do my exploit, I need raw write access to the disk sectors, and Windows does not allow writing to mounted filesystems to even applications running as Administrator. Only kernel drivers are allowed to do such raw writes, and I'm trying to become a kernel driver. They actually do this to defeat attempts to defeat driver signing. =)
A way to bypass this, of course, is to get to the drive when it's not mounted. You can't lock the C: drive for raw writing without booting to another OS installation, such as the recovery image.
This method is somewhat risky; I'd be doing sector-level writes to your primary disk partition. There would be a number of precautions to try to prevent writing to the wrong location, but there can never be guarantees that I don't screw up the code and delete your priceless documents.
How do you all feel about this?
I would totally be fine with this. Can't wait to see exactly how the Jailbreak works. Anyways if you need a Surface 2 tester to test before the finish release I could help XD
I kinda guessed it would degenerate to this.
I won't mind, but then again I wouldn't consider myself an "average" jailbreak user, and compared to how easy (relatively) the initial RT8.0 jailbreak was this might be an issue.
Do we have any idea the kinds of people who are currently using the jailbreak?
lowjoel said:
Do we have any idea the kinds of people who are currently using the jailbreak?
Click to expand...
Click to collapse
According to Microsoft just hackers, according to me: Devs, Hackers, and noobs who think they can run Minecraft XD
I'm rather concerned about the final group; the others are probably going to live fine with it.
lowjoel said:
I'm rather concerned about the final group; the others are probably going to live fine with it.
Click to expand...
Click to collapse
Agree, still though release it but with quite a large USA-Style license. Like do not run this on your cat style
I don't think it matters that much (or at all) if it's a one time thing. While some people have the tendency to screw up everything regardless of how well the procedure is documented (you can't avoid those YOU BROKE MY DEVICE people anyway), they know the risks beforehand.
As for the data, the documents are most likely synced up to skydrive since the local-only account option is hidden pretty well in 8.1.
Also, just flashing a different ROM to a mobile phone can be much more complicated than your decribed procedure - just a couple of days ago I helped a friend to "upgrade" their Android phone and I had to install a SDK and issue some shady console commands over the USB in the recovery mode to get it to work. And as far as I could tell this is considered pretty standard.
PS2 jailbreak
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I think it's OK. Do you remember rooting of first android phones? Working on ADB Shell and so on?
So one time boot into recovery and execute carefully some commands will be OK.
I think it's okay, too.
And if someone Says it isn't okay: Do you want to abandon all your work you have done for the Jailbreak so far?
I think a Jailbreak like this is better then none, and when there is no easier, less critical method to do it everyone should be fine with yours.
I'd be fine with it too. Especially since the procedure only has to be done once. Sure it might run the risk of data loss, but I'd be sure I had a backup first.
filfat said:
According to Microsoft just hackers, according to me: Devs, Hackers, and noobs who think they can run Minecraft XD
Click to expand...
Click to collapse
Hmm, not sure where I fit into that. IT guy that wants to make use of the RT desktop and isn't a hugh Modern UI fan, but couldn't afford a Surface Pro (and wanted the better battery life anyway). I can run Minecraft on it?!?
Thanks again for all your work on this jailbreak Myriachan! I'd pretty much written RT 8.1 off as I had no idea if or when a jailbreak would or could be developed. But now I'm kind of excited!
Looking forward to it.
I think most would be fine with it. If not, they do not have to use it.
Just put up a VERY BIG WARNING and beyond that you can't stop people from not following directions.
If it have a way to go back to original state (before jailbreak, without factory reset). I don't have any problem.
Hi.
I would do it, as long as I end up with Notepad++ and svn on my Surface RT ^^
Thanks for asking, though. I really like your attitude.
I'm sending best wishes and keep on looking forward to the mighty jailbreak,
Kalle
domboy said:
I can run Minecraft on it?!? !
Click to expand...
Click to collapse
This is precisely what he meant, too many people seem to read jailbreak as: I can play minecraft. You can't.
SixSixSevenSeven said:
This is precisely what he meant, too many people seem to read jailbreak as: I can play minecraft. You can't.
Click to expand...
Click to collapse
I think he was joking.
Offtopic, but Minecraft should be able to run with a openGL-DriectX Wrapper, and a lot of work with Ikvm. but that aint going to happen anytime soon if ever.
filfat said:
I think he was joking.
Offtopic, but Minecraft should be able to run with a openGL-DriectX Wrapper, and a lot of work with Ikvm. but that aint going to happen anytime soon if ever.
Click to expand...
Click to collapse
IKVM cannot load minecraft on x86, let alone ARM. It doesnt support any external library with native code in it (ie, LWJGL)
SixSixSevenSeven said:
IKVM cannot load minecraft on x86, let alone ARM. It doesnt support any external library with native code in it (ie, LWJGL)
Click to expand...
Click to collapse
yes, thats why i suggested a wrapper (translate the OpenGL code to DirectX code for the Cpu, we have been using that a lot in school projects latly) and modifying of the source code to allow such a thing
SixSixSevenSeven said:
This is precisely what he meant, too many people seem to read jailbreak as: I can play minecraft. You can't.
Click to expand...
Click to collapse
filfat said:
I think he was joking.
Click to expand...
Click to collapse
Sorry, I was joking. I've read all the queries about running Minecraft, both on this forum, and on Microsoft's own forum. Suffice to say, If someone does get Minecraft running on Windows RT they will be a rather popular person...
Also sorry for the off-topic bit...
Sounds good to me.
I think it'd be good for anyone who actually wants to jailbreak the RT, so no problem Just put up a warning and disclaimer (although I think that the people who wouldn't understand the technical details and warnings wouldn't read the disclaimers anyway...)
Thanks for your hard work. Looking forward for the RT8.1 jailbreak