Database Info

BlackBerry Connect OTA enterprise activation backup, passwords etc.

QUESTION 1
I've been flashing and reflashing ROMs for a couple of weeks now and am very impressed with Dutty's latest endeavor. In anticipation of the v4 release, I'm hoping someone in the community can tell me if it is possible to backup an over-the-air (OTA) enterprise activation of BB Connect. Currently I'm calling our technical support guys who, sooner than later I'm sure, will start asking why I have to have to get a new OTA activation password (which they change as soon as you use it) every 5-7 days.
So, in short: moving from one ROM to the next and want to back up OTA BBConnect enterprise activation. Possible? If so, how?
QUESTION 2
Any BES administrators out there willing to tell me if my Tilt/Kaiser shows up on the BES (v4) differently than a BlackBerry (like the POS 7280 I'm given by the company). If so, is there a way to "spoof" that since my company will not allow non-blackberry devices.
QUESTION 3
When using the stock AT&T ROM, my Tilt respects the (highly restrictive, Bluetooth disabling, password-enforcing, ridiculous) IT Policy pushed by the BES administrator. When I flashed to Dutty's DualTouch ROM v3 Final, this no longer happened. Now, it just reads "default" for the IT Policy. Is this a fluke or some wonderful reg entry that we need to identify and protect like diamonds?
Thanks, all.
Cheers,
Your Local Village Idiot

VillageIdiot said:
QUESTION 2
Any BES administrators out there willing to tell me if my Tilt/Kaiser shows up on the BES (v4) differently than a BlackBerry (like the POS 7280 I'm given by the company). If so, is there a way to "spoof" that since my company will not allow non-blackberry devices.
Click to expand...
Click to collapse
We run BES here and indeed non-blackberry devices are reported as the phone model when you look up the phones information.
This could probably easily be spoofed to whatever you like. If you hacked the blackberry connect application, or intercepted and modified the data passed over to BES. You could make it say anything you want at that point.
I'd get "in" with your IT guys and that way they can pull a favor for you now and then with the BES server. Other then that, have the company pay for a blackberry phone and carry two phones around, or refuse to carry a company phone and don't use your personal phone for company resources. If they're blocking your productivity by a poorly guided company policy, make it cost them money. Don't inconvenience yourself to keep your productivity as an employee on par.
Really though, it's not feasible to secretly go behind your employers back with your tilt. I think it's ridiculous a company wouldn't let you use your Tilt -- though probably because the corporation is uneducated or ignorant to the fact that the Tilt can be locked down just as well as a blackberry phone. Too bad the employer has a bunch of pointy haired management types running around who don't know what they're doing and out of ignorance banned non-BB devices.

Jon,
Thank you for your prompt reply and clarification on what shows up at the BES. Hacking the BB connect app is beyond my current knowledge set, but I may look into it if I'm unable to find a simpler solution.
Unfortunately, my company has several thousand employees so my productivity concerns are far outweighed by their misinformed security concerns. I've pitched the benefits of BB connect, WM5/6 devices and direct-push Exchange sync, but my pitch falls on deaf ears. They have provided me a BB 7280 and some get newer 8XXX devices, but beyond that we're expected to be happy with what we have. I'm even buying a non-camera Tilt to replace my two week old Tilt because they won't allow personal camera phones (all BB connect issues aside). You'd think I work for MI-6...
Cheers,
T.V.I.

VillageIdiot said:
QUESTION 1
I've been flashing and reflashing ROMs for a couple of weeks now and am very impressed with Dutty's latest endeavor. In anticipation of the v4 release, I'm hoping someone in the community can tell me if it is possible to backup an over-the-air (OTA) enterprise activation of BB Connect. Currently I'm calling our technical support guys who, sooner than later I'm sure, will start asking why I have to have to get a new OTA activation password (which they change as soon as you use it) every 5-7 days.
im soooo it this situation, any ideas?
Click to expand...
Click to collapse

Here's how you do it
you could use the desktop software instead of OTA. this will activate the phone without requiring you to get a new activation code.
Here's how I back up and restore. This has worked often, and not worked a few times.
Try to follow this exactly for best results.
get task manager v2.7 from fdcsoft
tap the blackberry icon on the taskbar and suspend the service under status
start taskmanager, and go to services. stop the two blackberry services, log and security.
open file explorer, and copy the directory RIM in /application data to your storage card
flash your phone with whatever-
copy the RIM folder back to /application data from your storage card
load blackberry connect (this should be the same version you had, otherwise you may have issues)
tap the blackberry icon in settings-system
instead of installing, you should see a window that says "repairing settings"
your old password should be restored, and the phone will lock and ask you to unlock. use your password you had before the backup.
all of your folders and mail should be back.
This works about 90% of the time.
some issues I've had-
multiple blackberry folders- one with emails, one with nothing.
folders missing, a bunch of email in drafts folder.
older messages no longer sync with desktop
good luck!

identify if IMSI catchers were used with field test?

Hello all
I've been reading this forum for some months now and i like the windows'es and informations i've found here on my Hermes device
But now i have some questions on using the often integrated tool field test.
I've found out that with the IMSI-catcher (german wikipedia as one of the sources), that are more and more often used semi-legal by the police(here in europe there are a lot of 'GA-90' devices sold to the police and other institutions), it is possible to listen to phone calls(man in the middle attack), by just 'emulating' the strongest phone-cell in the area, to which the device connects instead of connecting to the provider's cell.
I also read that it would be possible to find out if there was an imsi-catcher device active in the area near you or not. The only thing needed is a special monitor software (field test?) that observes the MNC(Mobile Network Codes) behavior(appearently you need 2 handy's from the same provider with the monitoring software running).
But they didn't explain exactly on which behavior you should pay attention.
Since I could use 2 windows mobile devices to test this out, I am searching for more detailled information on this subject, and the first place that came in my mind was xda-developers
I allready did search this forum for the subject imsi catcher, and the only thing I've found is this.
google result
so one person who tries to change hies imei number, and another one who doesn't seem to know exactly what an imsi catcher can do.
Is here anyone who knows more?
I know that where I live, there are pple who make abuse with IMSI-catchers(catching calls without the permission from a judge or similar, or even one time someone listening to his girlfriends phone calls to see if she's cheating(and she did and that was the reason he left her))And yes this one was a young policeman who told that to his friends and even was proud of it.
I also dislike the fact that the handy, instead of the encrypted one with the provider's cell, has an non encrypted connection to the imsi catcher(if not there would be no possibility for a listening man in the middle attack).
I also read about the cellphones from http://www.cryptophone.de/
Appearently they do allways have encrypted conversations even through an Imsi-catcher. But if that would be true, the other side will need the same handy to decrypt it again. Because it has to encrypt, the allready encrypted data traffic with the provider's cell, if not it can't allow any protection against IMSI -Catcher devices. I also ask myself if, depending on where u want to use it, the 2nd encryption could produce a to huge phone traffic that could result p.ex. in a robot voice...
Anyone who could light me up?
Or is there any software able of reencrypting the encrypted transfer on windows mobile devices?technically it should be possible(2nd phone dialer installed so you choose the normal one for normal calls and 2nd one for calls with pple who also have this software installed on their phones)perhaps not with an 256 bit encryption but perhaps with a 128 or 64 bit encryption...
BTW, if there would be anyone able to programm such a hot piece of software for windows mobile devices I wouldn't have any problem to donate him with paypal, and i suppose other pple would do the sameAnd no I don't wanna replace that by Voip or skype via HTC...
Thanks in advance
Patrick

So no one who knows more about this?
I would be very happy if i could at least test if they're really used that often as they say they are(where i live).
And since i could try it in different major 'cities' over here, i suppose catching a imsi catcher soon or later
I'm quite curios if all the pple, telling that there is a lot of abuse with these machines, are right, or if that's all nonsens...

It would be nice if a warning icon could be integrated into Windows Mobile or the dialer to indicate that a call is not being encrypted. Read the Wikipedia entry for IMSI-catcher for more info. I'm guessing CDMA is largely unaffected since the hole seems to rely on the UMTS spec's backward-compatibility with GSM.
I'd also like to note that Skype is the way to go for true endpoint to endpoint call encryption. You know, if you're a gangster or something and need to brush off the popos. It would be interesting to investigate whether the WM6 integrated VOIP stack requires authentication/encryption.

electronic ID

not sure if any body thought of this what if chefs let users to sign their names addresses and finger print scan in the rom
1st will be thief deterent
2nd good hearted will return it if found
3rda phone will be a personal thing,chefs can leave their name somewhere for the smell and taste fo thier cooking

I'd think Chefs should also put a file in the \windows directory called release_notes with their ROM name and a forum link to their ROM thread.
Can't say how many times I've forgotten who's I've got flashed at any given time.

First, most chef's already put their name in the rom in one or more places, second , if you are using one of Alex's rom's used the kitchen & you can put whatever you want in it. Third, if somebody decent finds the device, your name & etc. is already in device owner info or can be looked up by your carrier with the serial or esn. Finally, if anyone else finds your device , it will take them all of 10 minutes to use Google & figure out how to flash a new rom. You could change the device ID to something nonexistent to make it harder to flash, but that's something better worked out by you & no Chef is gonna want to do that for every single person, not to metion that if he did, the thief would google & figure it out.
There is always ways around things, just ask AT&T, HTC & everybody at XDA

GSLEON3 said:
First, most chef's already put their name in the rom in one or more places, second , if you are using one of Alex's rom's used the kitchen & you can put whatever you want in it. Third, if somebody decent finds the device, your name & etc. is already in device owner info or can be looked up by your carrier with the serial or esn. Finally, if anyone else finds your device , it will take them all of 10 minutes to use Google & figure out how to flash a new rom. You could change the device ID to something nonexistent to make it harder to flash, but that's something better worked out by you & no Chef is gonna want to do that for every single person, not to metion that if he did, the thief would google & figure it out.
There is always ways around things, just ask AT&T, HTC & everybody at XDA
Click to expand...
Click to collapse
1st the whole idea is not about the phone getting lost rather than personlizing it ,to google or change that is why i said chefs should make it possible to ingrave it in the roms thiefs if they know all that they are nottheifs they won't find time to steal they will be cooking for us

actually, for anti-theft, I was thinking of a kit...
1) modified SPL; requires non-standard password and a signed NBH using your own custom certificate
2) OS is locked down with a trusted certificate of your own in the store so SSPL won't run at all... unless you sign it with your certificate
3) program that checks the SIMcard IMSI; if it changes then it sends an SMS to another number.
now... there are a few practical issues with 2) because it makes installing new apps a pain in the arse since they all need to be signed, so maybe a way of buggering up SSPL would be better.

ras said:
1st the whole idea is not about the phone getting lost rather than personlizing it ,to google or change that is why i said chefs should make it possible to ingrave it in the roms thiefs if they know all that they are nottheifs they won't find time to steal they will be cooking for us
Click to expand...
Click to collapse
A Chef that makes ROMs used by thousands is not gonna want to customize or personalize each one for every user. That said, with a donation, there are many that might consider it for you. Of course, you can always use a base ROM & the Kitchen to do it yourself. I do this.
Also, you can use provisioning xml's to customize or personalize them on a basic level using UC. Read Sleuth's thread on UC (User Customization).
@ Olipro, I really like the idea's 1 & 3. I have played a bit with CID locking to an imagined CID & with false Model ID's but of course while you then can't flash a ROM that's not customized to match, you could bypass it with SSPL, making it pointless against anyone half competent.
Your solution 1 & 3 would almost have to go hand in hand, having the password & a way to keep SSPL from jumping the password measures. Something like this, in conjunction with WIMP & UC in ROM, would be a great tool for security. Very Interesting indeed.

Modding the "lock"

And no, this is not another one of those.. " I locked myself out threads".
I used to have a Treo 700wx which worked wonderfully until I switched to ATT and bought a HTC tilt. The Tilt being way faster and everything I could ask in a phone there is 1 small problem..
With the Treo, when I went to "lock" I could enter any sequence of numbers, either being 1111 or 1234, or anything simple. With the Tilt, its not so simple.
When I try to enter a simple password, it says it must be more complex.. The exact error message is "Password Error. Please enter another password. The password must be at least 4 characters and not contain a simple sequence". That's nice and all HTC, but considering my phone is in MY pocket 90% of the day, I don't necessarily need a complex password.
Ive tried looking on xda, all the possible software sites that Google has thrown at me, and I couldn't find a single post or thread about this.
I do know there are programs out there like the iphone slider, which is amusing. and a couple of other ones with patters and whatnot.
So my question is Does anyone know of a way to make it so I could have a simple pin with the default lock program? And if not, does anyone know of a similar program that does the same thing?
The reason I ask is myself a few other windows 6.1 users have also asked the same question. If anyone knows, please share so this community will know!
Thanks
- Felman
*edit* I just realized that this thread belongs in the "Questions and answers" area*

I'd suggest editing the registry, and changing the policies.
However, if you're synching with Office/Outlook Exchange servers and the server is actively pushing security restrictions to your phone periodically, you might have a hard time getting rid of said restriction permanently.

Thank you Bouvrie for your post, and I did find some useful information, but nothing to the lines of actually modding the registry to allow me to have custom passwords that are not complex.
Any more ideas?

So this part ain't of any help to you ?
Determining Password Complexity
Registry Key: HKLM\Comm\Security\Policy\LASSD\LAP\
lap_pw\PasswordComplexity
Value: 0 = Require Alphanumeric. 1 = Require numeric (PIN). 2 = No restriction.
Click to expand...
Click to collapse
~Flo

You didn't say if it was to do with enforced security settings?
If so, this little app will help
http://www.zenyee.com/2008/10/19/stay-unlock-goes-20-after-two-years/

TheFloww said:
So this part ain't of any help to you ?
~Flo
Click to expand...
Click to collapse
I did think this part would work, but after looking into the registry, I found it was already set at 2. Because I do not have a password set.

brandall said:
You didn't say if it was to do with enforced security settings?
If so, this little app will help
http://www.zenyee.com/2008/10/19/stay-unlock-goes-20-after-two-years/
Click to expand...
Click to collapse
I just tried this app, and it did not work the way we thought. Thanks for the try!

anyone have any ideas.. I can't seem to find any regedit keys that deal with this issue.

It's impossible BOB.

[Q] Bluetooth File Transfer

why I can't send and receive any file thru bluetooth on my samsung focus mango ( 7720) , it asks me to tap for pairing and when i key in the code ( 0000 ) I get the messaage : device not supported
please help
thanks

Because the security model in WP7 doesn't support this.

... all devices with WP7.

can we hack this security model?

Nope, because system WP7 this option haven't (that is not lock by Microsoft but this function not added to system). Maybe later ...

Budniu said:
Nope, because system WP7 this option haven't (that is not lock by Microsoft but this function not added to system). Maybe later ...
Click to expand...
Click to collapse
You can send files through one wp7 device to the other though!

In other words no because right now WP sucks and Microsoft doesn't care what we want or need they only care about $$$$$.

sinister1 said:
In other words no because right now WP sucks and Microsoft doesn't care what we want or need they only care about $$$$$.
Click to expand...
Click to collapse
Nonsense. The platform has to evolve according to priorities, meaning that the things people use *most* need to be polished and working *first*. I own an Android tablet and used to have an iPhone; know how many times I've used bluetooth file transfer? ONCE. And that was just to see if it worked.

It's evolving at a very slow rate of speed, Bluetooth file transfer has been around since the 90's and is a very common function on just about every phone. They are not polishing anything all the do is locked the phone down more and more with each update. Is it me or does anyone notice how WP is following in the same exact foot steps as the iphone? When the iPhone came out it hand no cut and paste, it had no start screen wallpaper, how about iTunes and Zune. I can understand people defending WP because I use to and still do some what but I have a WP device, do you know how many other people have one? None! And there is a reason for that just look at WP sales and where they fall, they are behind Blackberry for God's sake, Blackberry, the lamest phone and OS. MS needs to wake up and take their head out of the cloud or Apples tactics or they will fail big time. I use to wonder why Verizon didn't support WP and now I know why, no one wants a limited, dictated iPhone clone. In fact WM was better than the iphone because of that but MS never really put forth effort into it or took the cell phone market seriously that's why Google took advantage of the situation and now Android picked up where MS left off.

sinister1 said:
It's evolving at a very slow rate of speed, Bluetooth file transfer has been around since the 90's and is a very common function on just about every phone. They are not polishing anything all the do is locked the phone down more and more with each update. Is it me or does anyone notice how WP is following in the same exact foot steps as the iphone? When the iPhone came out it hand no cut and paste, it had no start screen wallpaper, how about iTunes and Zune. I can understand people defending WP because I use to and still do some what but I have a WP device, do you know how many other people have one? None! And there is a reason for that just look at WP sales and where they fall, they are behind Blackberry for God's sake, Blackberry, the lamest phone and OS. MS needs to wake up and take their head out of the cloud or Apples tactics or they will fail big time. I use to wonder why Verizon didn't support WP and now I know why, no one wants a limited, dictated iPhone clone. In fact WM was better than the iphone because of that but MS never really put forth effort into it or took the cell phone market seriously that's why Google took advantage of the situation and now Android picked up where MS left off.
Click to expand...
Click to collapse
I believe not just you everyone knows wp7 follows iphone.At first I didn't know that wp7 don't support bluetooth transfer until it's too late wen I buy my hd7
---------- Post added at 11:00 AM ---------- Previous post was at 10:57 AM ----------
There is a vote somewhere in the forum regarding this matter.If the vote is many, I think wp7 will enable the file transfer.i already voted 3x.

If you are forwarding contacts... use the app called forward contact and use a qr code... way better!
If you are transferring a file, hit save to skydrive then share it with the skydrive app... or... hit share and choose email.
Bluetooth transfer is such a waste of battery and i for one never found a real good use for it.
Also ignore the poster above u. He's been trolling here for a while

Ttblondey said:
I believe not just you everyone knows wp7 follows iphone.At first I didn't know that wp7 don't support bluetooth transfer until it's too late wen I buy my hd7
---------- Post added at 11:00 AM ---------- Previous post was at 10:57 AM ----------
There is a vote somewhere in the forum regarding this matter.If the vote is many, I think wp7 will enable the file transfer.i already voted 3x.
Click to expand...
Click to collapse
That is true, if you are a normal everyday consumer that doesn't know how to go online and look up XDA Developers you would never know that that option didn't exist on WP. They don't tell you the phones limits on commercials or at your local cell phone store of course but get you all hyped up into buying one. I feel sorry for people who are not savvy and have to figure out stuff too late when they already bought the phone.

I'm not here to argue whether or not WP7 needs bluetooth transfer but a simple search would have gotten someone their answer.
The point here is that if it wasn't such a big deal for someone before they bought the phone, or else they would have checked beforehand, why is it such a big deal now?

Boburto said:
I'm not here to argue whether or not WP7 needs bluetooth transfer but a simple search would have gotten someone their answer.
The point here is that if it wasn't such a big deal for someone before they bought the phone, or else they would have checked beforehand, why is it such a big deal now?
Click to expand...
Click to collapse
Because you expect it by default?
Anyhow, since bluetooth hardware is already physically implemented in the phone, it is not impossible to improve it. Although you may use network (3G+WIFI) for data sharing via mail, whatsapp, viber, facebook, virtual drive, dropbox or whatever you imagine, the cloud is not 100% secure (look at megaupload, what you have on the cloud doesn't belong to you)
and will lead to total failure in case you have no signal coverage or you use the phone as a handheld (suppose you have only one SIM and two or three phones, the other obviously won't have GSM/3G signal and maybe you don't have wifi access when you like)
So, if it is already hardware implemented, not much difficult to improve it.

scandiun said:
Because you expect it by default?
Anyhow, since bluetooth hardware is already physically implemented in the phone, it is not impossible to improve it. Although you may use network (3G+WIFI) for data sharing via mail, whatsapp, viber, facebook, virtual drive, dropbox or whatever you imagine, the cloud is not 100% secure (look at megaupload, what you have on the cloud doesn't belong to you)
and will lead to total failure in case you have no signal coverage or you use the phone as a handheld (suppose you have only one SIM and two or three phones, the other obviously won't have GSM/3G signal and maybe you don't have wifi access when you like)
So, if it is already hardware implemented, not much difficult to improve it.
Click to expand...
Click to collapse
I don't ever remember having to transfer a file so urgently i couldn't wait until i got network coverage or got home. It doesn't seem like a situation you'd run into on a normal day.
There are a lot of things that could be added to windows phone. They could be added quickly and untested (and may not work properly/cause issues) or time could be taken to add them correctly taking time to debug and issues. MS is taking the latter approach.
Personally i prefer a phone which does 90% of what i need properly because they spent their time and effort on that, rather than a phone which does 100% of what i need badly because they are spending time on something that isn't needed the majority of the time (*cough*likeandroid*cough*).

Boburto said:
Personally i prefer a phone which does 90% of what i need properly because they spent their time and effort on that, rather than a phone which does 100% of what i need badly because they are spending time on something that isn't needed the majority of the time (*cough*likeandroid*cough*).
Click to expand...
Click to collapse
I second that as well. Android for example, has several issues and can take months to years to be fixed or even never (example: http://www.google.co.il/support/forum/p/Google+Mobile/thread?tid=55d64c4d1aa1664c&hl=en).
On the other side iPhone for example has less features but they usually solve the issue within a week that is a top quality support.
I prefer the second approach, if I have to choose.

Bluetooth transfer is very much a necessity, especially here in India. Many of my friends expressed interest of buying a Windows Phone when I showed them my Samsung Focus. They loved the amazing User Interface, but were immediately turned off when I told them that Bluetooth transfers are not supported. One guy thought I was joking when I told him about the lack of Bluetooth File Transfer. Even I'm disappointed by the lack of this very basic feature. Android can do this. Symbian can do this. There's iBluetooth for iPhone for Bluetooth transfers. Windows Phone must be the only major OS which doesn't have any Bluetooth transfer options available. Isn't there any possibility of a hack or some 3rd party XAP (like iBluetooth) which enables bluetooth transfers?

zaidthunder1 said:
Bluetooth transfer is very much a necessity, especially here in India. Many of my friends expressed interest of buying a Windows Phone when I showed them my Samsung Focus. They loved the amazing User Interface, but were immediately turned off when I told them that Bluetooth transfers are not supported. One guy thought I was joking when I told him about the lack of Bluetooth File Transfer. Even I'm disappointed by the lack of this very basic feature. Android can do this. Symbian can do this. There's iBluetooth for iPhone for Bluetooth transfers. Windows Phone must be the only major OS which doesn't have any Bluetooth transfer options available. Isn't there any possibility of a hack or some 3rd party XAP (like iBluetooth) which enables bluetooth transfers?
Click to expand...
Click to collapse
Yeah I tried to explain that to users but most of them attacked me and provoked arguments stating that Bluetooth is too 1990's and that I might as well ask for punch card technology and so on. Windows Phone is the only one that doesn't allow this as far as I know. Too bad but Windows Phone 8 is coming and lets hope MS comes to their senses.

Well, no matter, it's great news that DFT have at last released a hack for enabling bluetooth transfers ! Man, I'm elated ! All I have to do now is to fully hack my Samsung Focus, and I'm ready to reap the benefits. Well, I hope an interop unlock comes out for bluetooth transfers, because I won't be hacking the phone at least for a couple of months.