[Q] Does Microsoft offer bounties for exploits like Google? - Windows Phone 7 Q&A, Help & Troubleshooting

The reason I ask is because I found a big one. Well for MS it's big. It allows for an end user to 'buy' apps/games from the on device marketplace without actually paying anything. The app purchase appears in your history and can be redownloaded at anytime just as with any legitimately purchased app. This can all be done on an unmodified device pretty simply and if the device is dev unlocked it can be done REALLY easily. Sadly this doesn't help any of us in the interop/full unlock area as it has more to do with purchase validation than code validation.

I would say ask Microsoft. But you should turn it in regardless, not because of morals but because it could hurt our ecosystem/chance of WP success if someone with the wrong hands found it. Plus since your a recognized dev I'm sure you wouldn't like your work getting stolen

He-he, MS marketplace scheme is full of bugs but I don't think they will pay you something.
Good example is ChevronWP: for their great and early find MS "paid" (actually just let 'em do the job) for $100K total, it means one year job (OK, may be a moonlight job) for each team member for $30K? (Don't forget: they prepared some backend, payment system, databases etc. etc. etc - lot of pain in the a$$)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
C'mon, you may earn that money for pizza delivery!
BTW, nice find, good job, congrats!
P.S. voluptuary, if you have some direct MS contacts (4 example, your MS evangelists, or some MS insiders - middle level managers or developers etc.), try to contact these guys first.

I don't believe MS has bug-bounties for external finds, though you could always try negotiating with them (I don't recommend it, they may get litigious if they think you're trying to extort them). They do however generally deal fairly with external finds (i.e. if they don't think you're being abusive and are acting in good faith, they'll be appreciative unlike some companies which would immediately unleash the lawyers).
I'm with @jeffreygtab on this, also; anything that makes app piracy really easy needs to be dealt with for the good of the platform. Android frequently loses notable devs who don't want to deal with an unreliable market. WP7 doesn't need that kind of bad rap; it's hard enough just getting the market share.
The implication that it can be done without having dev-unlock is interesting... and a bit scary. That needs to be patched immediately. MS knows that some dev-unlock is used for piracy (that's why there's the 10-app limit by default) but if it can be done on a dev-locked phone, that needs to be fixed immediately. It's also going to be easier for somebody unscrupulous to repeat this now that they know it's possible.

Agree 100% with GoodDayToDie! So, voluptuary, please try to keep your find in secret and do not share with anybody (including recognized developers and friends from XDA), it's kinda dangerous (GoodDayToDie is 200% right). If you want and don't have direct contacts in MS, let me know, I can try contact my guys ASAP. PM or email me.

Thoroughly impressed that you guys have the foresight to see this for what it is, as opposed to just extorting it for personal gain. Truly shows where your hearts lie, and it's refreshing to see.
The three of you are a credit to the WP7 scene here, even if it's just in the eyes of a rookie Mod
I tip my hat to you.

He-he, from my own experience. In 2006 I've found (accidentally) a very critical vulnerability for ALL Microsoft operating systems: from Windows 95 to latest Vista or Windows Server 2003!
That simple Pascal code (but can be C or whatever; also you'll never suspect something wrong in this code!)
Code:
program reboot;
uses
windows;
var
pData: pointer;
Info: TBitmapInfo;
Width, Heigth: dword;
ImageDc: HDC;
Bitmap: HBITMAP;
begin
Width := 640;
Heigth := 480;
ImageDc := GetDc(0);
Bitmap := CreateCompatibleBitmap(ImageDc, Width, Heigth);
GetMem(pData, Width*Heigth*8);
ZeroMemory(@Info, sizeof(TBitmapInfo));
Info.bmiHeader.biSize := sizeof(TBitmapInfo);
Info.bmiHeader.biWidth := Width;
Info.bmiHeader.biHeight := Heigth;
Info.bmiHeader.biPlanes := 1;
Info.bmiHeader.biBitCount := 32;
Info.bmiHeader.biCompression := BI_BITFIELDS;
GetDiBits(ImageDc, Bitmap, 0, Width, pData, Info, DIB_RGB_COLORS);
end.
(I'm publishing that code 'cause issue already resolved by MS)
causes immediate crash of any MS OS and push system to reboot, even without BSOD! If you have a MSDN 2005, you can easy reproduce that bug.
But... I wrote 5 (five!) emails to MS until issue wasn't resolved (at April 3-rd, 2007). Try to guess, how I was rewarded? Yep, for a real hacker "sorry" and "thanks" from the Microsoft Security Response Center stuff is best award

I never intended on sharing this with the dark underworld of the internet since it has no real use aside from piracy, but I had just read about Google's bounties for bugs so I figured I'd ask. I have to do a little more testing to make sure it's not just a backend glitch with my account but after I know for sure I'll submit a report to... someone. I'll figure that out later too.

as far as I remember there was a glitch with apps purchased and cancelled right away...someone posted here months ago something about an app that kept on reinstalling.
Glitches like these are like CC errors you see published on news papers...even if you WILL explain it, M$ will remotely erase it once they realize that there's no dineros paid...
As for piracy, only a few words: sideloading due to custom ROMs,wp marketplace, Milkman, Navigon, Nokia Apps...even running Tango could be seen as piracy; piracy is like a BJ, it depends on which end you are.
Anyway, congrats on your clean WP roms, no pun intended, they are awesome for being clean of skins and icons and so on.

Ahaha, nice find @sensboston. I once went to MS talk where they were discussing some piece of Windows malware they'd dissected. They discussed the various exploits it had used, and at one point during the talk said something like this:
"... so for the next part it exploited a vulnerability called Win32k.sys - I mean, a vulnerability in Win32k.sys - to access the kernel..."
Win32k.sys is where all the DIB stuff, among other things, lives. It's a huge mass of very high-performance code that runs in kernel mode to avoid even the (trivial, these days) performance hit of a ring switch... but it's also very old code (the oldest parts are from the mid-90s) and apparently every time they have to fix something in it there are a bunch of regressions due to the change, so apparently the Windows team is scared to touch it...
I don't know anybody on the WP7 team, but I do know some people at Microsoft if you want me to put you in touch with them. Do verify the bug first, of course, but I suggest doing so with free apps if possible...

Related

BOINC Project for bruteforcing Milestone's RSA Keys (This time for real!)

I'm sure most of you know the previous thread about this topic, but it died pretty fast..
I spent the last few weeks on developing a boinc project to bruteforce the RSA key Motorola uses to sign the boot and recovery partitions on the Motorola Milestone.
The project is located here:
http://poseidon.shacknet.nu:8080/MilestoneRSA/
The front page pretty much describes what this is all about, i won't repeat all of it here, but the basics are:
simple, naive bruteforce implementation (yes i know it's pretty much impossible to bruteforce RSA 1024, but why not give it a try and see if we're lucky)
windows and linux 32 and 64 bit architectures are supported, currently windows 64 bit is much faster than the other 3, i'm working on it.
if anyone has access to a mac, experience in building on it and interest in porting the MilestoneRSA_main app to mac, i would appreciate if you contacted me. The app must be statically linked to either GMP or MPIR.
sooo. what is needed now are lots of participants, every single cpu increases the chance to break the key!
There were so many people in the other thread, willing to participate, i hope all of you stand to your word!
Poseidon Pontomedon
My 3 dual-core PCs will join the fight !
I'm in, of course.
Would it be possible to use the power of GPU along with CPU somehow?
Edit: read the site now, it actually lets us use CUDA capable GPUs. Cool. In theory.
Six core pc. Im not sure wether i did well or not... It look like this
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I`m in.Lets beat this little green alien inside our motorolas.
jackeh070 said:
Would it be possible to use the power of GPU along with CPU somehow?
Click to expand...
Click to collapse
In theory, yes, Boinc supports cuda applications. In practice: Someone would have to port GMP or MPIR or some other Big Integer library to cuda, because we have to deal with really large (1024bit) integers here. If there's someone experienced with cuda please contact me, but i'm not able to do it..
Yriel40k said:
Six core pc. Im not sure wether i did well or not... It look like this
Click to expand...
Click to collapse
The default GUI is really ugly, click on "Advanced view" to get the full one. (apart from that, yes looks like you're calculating )
zviki said:
I`m in.Lets beat this little green alien inside our motorolas.
Click to expand...
Click to collapse
I m always down for a good fight. Even if its a losing one haha.
joined.
cant seem to get it to use my gpu though.... sorta weird.
hefonthefjords said:
joined.
cant seem to get it to use my gpu though.... sorta weird.
Click to expand...
Click to collapse
as i said above, no cuda client so far, probably someone will help me implement one..
As sysadmin at a certain institution, we're giving quite a few cycles to this (almost lost) cause Thank you, keep it up!
http://forum.xda-developers.com/showthread.php?t=779917
"If you subtract the sig_start_addr and sig_end_addr I suppose you get the length of the signature. I checked them all. They are all 2048-bit . Did not find any 512-bit ones."
How did we get to 1024bit?
You are my hero
I hope everybody is willing to donate some cycles for this excellent cause
Uhm don't wanna piss on the parade here, but did anyone check out how long it takes to calculate the key? AFAIK such a key would take millions and millions of processing hours.
This means that just the power it costs to power those CPUs will probably get you a truckload of Nexus ones.
And to add to that, it is probably much better for the environment to buy a new phone instead of running your computer for three million years.
AliceXES said:
http://forum.xda-developers.com/showthread.php?t=779917
"If you subtract the sig_start_addr and sig_end_addr I suppose you get the length of the signature. I checked them all. They are all 2048-bit . Did not find any 512-bit ones."
How did we get to 1024bit?
Click to expand...
Click to collapse
The values in the CDT refer to the whole signature block, including (at least) two certificates and a 1024bit (128 byte) actual signature (as in "encrypted hash") at the end. if i have time a little later i can explane how the signature block is built in detail. but believe me, i have the correct public key, and i have successfully decrypted the encrypted hash with it. what we need is the private key for this public key, because then we can hash our own partition and encrypt the hash with the private key (aka signing). For an overview about digital signatures read http://en.wikipedia.org/wiki/Digital_signature
geekmystique said:
Uhm don't wanna piss on the parade here, but did anyone check out how long it takes to calculate the key? AFAIK such a key would take millions and millions of processing hours.
This means that just the power it costs to power those CPUs will probably get you a truckload of Nexus ones.
And to add to that, it is probably much better for the environment to buy a new phone instead of running your computer for three million years.
Click to expand...
Click to collapse
if you read what i wrote on the front page of the project, you'd know that i'm well aware of that fact that it would take forever (in the worst case). but we might be lucky and find the key today, or in a week, or in a month. Or, of course, we do never find it, and the project will die a slow death. Anyway i wanted to try it, if you do not want to use your computer to help, no one forces you to
You've got my cycles!
Yeah ! I'm in too!
and im in, running on my netbook for now until i get home to install it on my desktop and get that bad boy running, lets crack it! even if it will take alot of time and power it is still possible
Does anyone have any documentation on whether Motorola uses the same RSA key for all models of phones?
If not, then pontomedon, would it be possible to set up a different project for searching for the XT720 key?
Sorry guys, but the time to crack a 1024 bit RSA key in brute-force mode i really too long...It's really too optimistic hoping to crack it from now to ten years.. I think it is only a waste of resource...
Lets try to put all power 2gether 4 the 1 project!
Step by Step!
So up and running!
Possible to see any statistics?
Keep on Hacking!!!! Free the Bootloader free the Milestone xiss on Moto!

[REQ] graphical google analytics app - the better version

I've been using google analytics for a little while now and grown to like the way information is laid out for the desktop browser version. Then I looked on the market and found some apps that give you basic information from your account.
But they left me a bit wanting. I was hoping for something more informative, easy and fast to read and remember.
Now as I'm programming illiterate I can only speak for usability and general feel of the app, while appreciating and giving credit to the people putting their time, talent and effort into writing them. The following is not a criticism, it is a proposal for improvement.
So I tried to make something better. Thought about why the desktop version works so well for me and sought out ways to include as much of it onto a small screen. So I drafted my idea of an interface and interaction plus an explanation on how I see it working.
I've done this with a 480 width so that anyone with a 480x800 screen can see how it would look with a bit of zooming 1:1
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
As you can see, I've done things a bit differently. Starting with choosing the account and profile, everything is on one page. No more 2-3-4 taps before you get what info you need. This should work by setting one account and one profile as default in the settings. Also integrated graphical representations with a bit of interaction to help with bringing a lot of info onto a small screen.
Also chose the areas that I think would be of most interest. This might not be true for everyone so i'm open for suggestions.
Now, I have some questions.
1. Is this technically feasible?
For one, the apps on the market I've tried so far take a few seconds to return 20-30 lines of text. (my device is a htc desire) How much time wold it take to download and process all this behemoth of data? If too much, could the interface be loaded sequentially by section?
2. What are the hardware platforms that this app could work on with decent performance?
Hero class? Snapdragon?
So I'm looking for someone that is interested in either:
- coding the app from the ground up
- or improving (at least i'm hoping this is an improvement ) his/her existing app with all this
I'm also looking for some feedback of existing analytics apps users.
I would help in any way my programmingly crippled self could. I can also do all the things I've done with Timester: concept, graphics, promotion.
Here is the thread for Timester: Timester development thread
Could someone with experience tell if this is possible?
Thank you
Hello zamolxees,
thanks for the idea. Of course this would be possible to realise. While implementing my app GAnalyticz I had several problems and questions you also have:
How to display the big list of data on the small screen?
How to make the app as fast as possible?
What is the best user experience?
...
I decided to make only a text based view (table). I this case you can show the data on every device with any resolution and you have all information you need. I know it's not so fancy, but it is/was ok for a first version (I think ).
Second important part was the app performance. Google hasn't a library ready and there aren't any good libraries available, so I had to call the Google API on my own. You can get the data in xml via http request. Just combine the metrics & dimensions available in querystring.
So getting the data is very easy. The easiest way to get all the needed data is to make one http request. But then you have to sort and filter the xml which needs a lot of performance. This made my app unuseable. Because of this I decided to make multiple requests. In this case I can just parse the xml and output the data while iterating through it. This is much faster (the fastest way I found, I've tried a lot...). But as you say it is also slow this way...This is because the response from the Google service is really really slow...
So far about my app. Technical it is easy to implement (I think the graphical stuff is the hardest part, but there are libraries for this). The challenge is to find the perfect way to show the data on the device (and to get a good performance for this). You could also load the data sequentially (as I also did).
In my opinion, the hardware is not a problem. This should run on every device.
Actually I don't have enough time to implement this or improve my app (because of another app ). But I hope you will find another developer and looking forward to download this app
Many greets,
aquasonic
Hey, thank you for your detailed input.
I think that one way to help with slow response time from google servers might be to make the requests for data in the background at set intervals (6 or 12 hours) and when the app is opened do the processing of data already received.
The user could clearly see the hour of the last sync and also choose to refresh if they wanted to.
Isn't there a more elegant solution to getting analytics data from google?
Thanks again aqua-sonic, good luck on the other app, let us know how it turns out
Anyone else wanting to take a stab at it?
I'm thinking that as there are a lot of people using analytics apps now, all the more would want to use this.
Any existing users would care to express their opinion?
Would this interface mean an improvement that is worth investing time and effort into?
Would you like to see this done?
Know any good good developers willing to write the code?
Enough questions.

Hoping for some suggestions re tables

warning- first post, longish, but even glancing at it is much appreciated!
Hi all,
First post here - hoping I don't ruffle any feathers in asking but I've chosen this community as it has been helpful in the past and often is in the first few google search results when I'm hunting for answers.
I lucked out last year when I was working for the State Parks system (seasonal) as a State Ranger- saw an opportunity to turn paper inspection logs (of water craft launching on state waters) digital. Dusted off the programming skills (hadn't done much since VB6, and even then- my hay day was back with VB3.0) and came up with a working concept.
The state was well receiving of this - but I'm not a programmer by nature- now faced with developing software to be run by hundreds of individuals simultaneously across the state instead of just my working concept. Additionally, the state I reside in is the leader in vessel inspections- many other states are modeling after us and are interested in the software. This means the software will likely end up in the hands of thousands and the database receiving millions of entries per year.
I'm a one man show here and the people that brought me on would prefer keep a separation between myself and IT so that the state's IT folks don't muck the project and, well, ruin the best thing I have going for me. That leaves me with the internet for answers and every waking hour devoted toward not messing this up
The information that is logged contains many things that change frequently, as we're checking the condition of the vessel. Dirt, plants, accumulations of water, etc. all vary. Additionally, the trailers that these vessels arrive on can vary too.
This leaves me with no clue how to structure my tables. I can take baby steps for now as we're in the pilot phases of this deployment (~5 bodies of water max, maybe 50,000 entries this summer)... just need to figure out something that'll work for now.
Currently I have just a single table, no keys defined. I search for information with sql statements, filter by registration number as well as the time since I figure there can never be duplicates for a vessel and a particular time of a certain day. I've looked at the Northwind example and several others but they have a few fields that simply don't change. The boat reg# will not change, we don't collect owners names so that can't remain static... I may set it up with an autoincrement field but that would be the first column of a single table. I want to do this at least semi-legit, can anyone see a reason to have parent and child tables given the circumstances?
Thanks- I know this was a jumbled mess but any assitance would be so greatly appreciated.
sounds like you need to read about normalization, and get a pen and lots of pieces of paper and draw your tables out.
are you developing on android? you didn't really mention anything about this from the glance i took - the line height here is a little too close together for me to be able to read it all properly. if so, sqlite really doesn't manage fulltext searches all too well and the relevant info has to be put into a separate table. if you need that ability you're going to have to do some reading on sqlite.org
the simple answer is, no one can answer the question except you. you need to group the data together in a way that's sensible for your application.
and yes, it was all a jumbled mess. i'm sure you haven't thought it through clearly in your head yet as you can't explain it!
you could make this really funky with photos, gps coords etc etc, but again, without a solid foundation, you'll be redesigning your tables every time you want to update. so think it through!
oh, and one more thing: security.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
oh, and one more thing - you do realise that with giving all that information you have, you're showing your bosses that you're not really that comfortable programming. that puts you in a dangerous position.
Thanks for your reply-
No worries on them realizing I'm not the all-star programmer, the prototype I developed last season / after I got laid off has already demonstrated its worth and enormous savings annually. Since being brought back on (now specifically for this project) last week, I've worked to turn a functional concept in to something a little more reliable.
This includes cleaning up my code (through continued learning), adding helpful features (none that will take weeks to code), and developing a database that will last AT LEAST a season.
My software was developed for windows mobile 6 classic last year on an Ipaq 111. The state has purchased several new ES400's by Motorola per my suggestion since they were already running WM and were more reliable than any cell phone (plus barcode, finger print, etcetc).
Every bit of the code seems to be fine and not require any modifications, it's just working on my database. In 2012 all devices (over a thousand- if pilot goes ok) will be live on one central database - I will do this through occasionally connected functionality offered with SQL Compact....
In the mean time, the state was hesitant to invest in a server and data plans for each mobile device... leaving phase I as a daily syncing operation. I'll basically have to sync .SDF files from each individual PDA and then merge the SDF files in to one, which can be reloaded to each PDA again. Hopefully I can accomplish this programmatically.
I suppose that last bit is outside the topic of table structures. I've given it the afternoon to think over and I'm not sure I can benefit from multiple tables with no static fields short of vessel registration #. This may demonstrate my lack of understanding for databases in general. I'll get there some day.

ChevronLab Tokens

For over a week now I keep reading this on ChevronWP7 Labs:
The sale of tokens has been put on hold until more arrive, thanks for your patience.
Is it just me or is there a recurring problem with the Tokens?
It's alright if InteropUnlock gets fixed, thanks to some very hard work by Heathcliff and others....
But if I can't get ChevronUnlocked because they aren't giving out 'tokens' , well that's just annoying really isn't it?
Any one else having these issues?
Not good communicator
Not only that, but they don't reply to postings in their forum. If anyone posts a question, they might, on rare occasions, get an answer from another poster. I have to say that I am unlocked via token and appreciate that, but as far as being transparent and keeping people up to date, these developers are doing a very poor job. There are requirements to use this service that appear no where on the site other than pointing to the forums or twitter, they do a horrible job of setting expectations and, in general, are not setup to provide customer support.
Looked again today and still no tokens..
Did they close down and not tell me or something?
well better flash a DFT unlocked ROM than to trying to Unlock, its far better, u can install xap files using IE9 within WP7.
maybe they lack of manpower.
I'm also waiting for a week or more, checking several times every day.
So anoying that they are not selling tokens
December 12th?
They tweeted on their web site that more would be available December 12th.
A thought occured to me that MS might be clamping down on the release of these (they have to allow it with Chevron). The intent of these tokens was to allow people to play with app development and NOT allow a method for getting Interop-Unlock.
If MS is following any of the MULTIPLE web postings on how you can IU your phone but need to be Dev or Chevron unlocked first they probably don't care much for that (MS does not want people accessing native code and registry; that is apparent from the lock downs 2nd gen devices have plus the continued clamping down they have done with each new generation).
I wouldn't be surprised if
a) They stop issuing tokens
b) They revoke tokens (and give refunds)
There has been too much publicity on using the Chevron tokens to open up your phone to allow the various Interop-Unlock methods to be used.
LiFePo4 said:
A thought occured to me that MS might be clamping down on the release of these (they have to allow it with Chevron). The intent of these tokens was to allow people to play with app development and NOT allow a method for getting Interop-Unlock.
If MS is following any of the MULTIPLE web postings on how you can IU your phone but need to be Dev or Chevron unlocked first they probably don't care much for that (MS does not want people accessing native code and registry; that is apparent from the lock downs 2nd gen devices have plus the continued clamping down they have done with each new generation).
I wouldn't be surprised if
a) They stop issuing tokens
b) They revoke tokens (and give refunds)
There has been too much publicity on using the Chevron tokens to open up your phone to allow the various Interop-Unlock methods to be used.
Click to expand...
Click to collapse
I wouldn't be surprised if that's why 7740 update come out of no where all of a sudden.
I don't think that MS is putting the kaibash on token sales. You didn't see the tweets?
For all other issues, please email us at [email protected]. The PayPal dispute process is not for tech. support. ^RR
29 Nov
We're working on switching payment gateways prior to re-opening token sales. Possible ETA: December 12. ^RR
29 Nov
Good news, we're switching payment gateways soon. This means those having trouble with PayPal won't have trouble anymore. ^RR
21 Nov
Click to expand...
Click to collapse
They're like, a three man-team overwhelmed with a tsunami of unlockers who've been waiting for this, and lo-and-behold, there are: a) technical issues they didn't anticipate with different phone models/versions and worse b) clearly real problems with managing payments/purchases and customer service/payment support.
So they were probably naive about how much work it would be to deal with people who have trouble with their unlock. People doing things like: issuing a chargeback to Paypal (who not only reverses $9, by the way, but then hits then with another $10 'dispute fee' no matter the outcome... and eventually does massive fund freezes without explanation or recourse. Anyone who's used PayPal for any but smallest, least-refund-prone business has been there.) If they'd never undertaken something like this before, it wouldn't surprise me that they hadn't anticipated those types of problems beyond the technical.
Assume they're trying to get a merchant account opened.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
whyJoe @ChevronWP7 I'm guessing what's going on is you guys have also discovered how much #PayPalSucks. / @ChrisWalshie @longzheng @paypal 7 minutes ago
in reply to ↑
@WithinRafael @whyJoe @ChevronWP7 @ChrisWalshie @longzheng Yep, and how slow banks are.
Click to expand...
Click to collapse
Chevron token is frozen, tried to contact them no reply, haven't seen any info on what to do, and links?

[Project] Metahill | Getting live help real quick to programming questions :)

Metahill Website​
Introduction
The rage is all about Metahill!
Metahill is a small project made up by 3 computer science students in Karlsruhe, Germany.
We intentionally only use the state-of-the-art technologies HTML5, CSS3, Javascript und Python.
No weirdo Flash and for sure no Silverlight is required. Ah yeah, and thus the website by the way loads super-fast .
But let's come to the real thing here..
What exactly is it about?
The best thing to do here is most likely just citing the landing page:
At metahill, you can meet other enthusiasts and chat with them in real-time.
It is entirely free, ad-free and community-driven.
Simple.
Click to expand...
Click to collapse
Metahill is a website where you can totally free of charge (and ads-free!!) chat with ethusiasts all around the world.
The cool thing is that all communication is categorized by rooms - the chat rooms. Plenty exist by default, but everyone may make new ones.
Users help users.
Of course you can be within multiple rooms at the same time, that is no problem at all, it's encouraged!
The page then looks just like that:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
What are the advantages of metahill.com over existing medias?
There is a bunch of good reasons why Metahill can be considered "superior" to other, existing services.
We listed the most significant ones at the official Metahill help site.
I will just touch the categories in this topic. Nonetheless you can find a longer description on each of these at the help page http://www.metahill.com/help
Uniformity across all devices
It is easy to get involved
It is lightning fast, thanks to open standards
We're organized
Beyond text
Never again miss anything
Behind all this is an open community
Metahill is simple to use
Community-revised code on German servers (Nope, NSA!)
To the original list.
Why im I posting this?
I like XNA and the people around here!
Leaving this aside, we also seek freaked-out beta-testers "early adapters" who would like to test metahill or even get involved.
This project is now online since a few month and keeps running quite stable, yet we need waaaay more users for the network to reach its full potential!
What is _your_ top-feature of metahill?
Messages are (if you choose so) logged for three days and there is a real bunch smilies and easter-eggs. Awwr, I like easter-eggs.
Yet my favorite feature is that I can share images so easily. Drag'n'Drop (or CTRL-C/V) your picture into the browser and the others will see it. Dude, it can't be easier . Problem reporting is a dream.
Metahill for (Web)Developers
One thing at the beginning: The developer page can be found at http://d.metahill.com.
What's planned are Android and iOS apps of Metahill.
You can embed Metahill as a client within your websites using iframes.
For instance to comment live-streams, let's play's or just to offer free live-support on your website.
To the "Embedding Metahill" Blog-Entry.
Final words and links
For updates you can surely reach us at...
Our Blog: Metahill Blog | Stay on top of the Metahill.
Facebook: Metahill Community
Twitter: @metahill_com
Google+: Metahill
I hope we will meet there too and look forward!
so long,
Michael
Why don't you support at least IE10? I'm browsing from a windows 8 tablet, and I can't even get to a landing page? Nice.
BTW: I really like XNA too.
We support Chrome, FF, Safari and Opera. IE still does not meet our standards, nor does it meet state-of-the-art web standards. The IE10 is at the technological level of Chrome 16. The current Chrome version is 29 and 30 is just about to come out. I strongly encourage you to use one of the four above browser if it is possible.
That is the reason why we both confidentially and intentionally do not (and never will) support the Internet Explorer.
countryqt30 said:
That is the reason why we both confidentially and intentionally do not (and never will) support the Internet Explorer.
Click to expand...
Click to collapse
That's great, but that "never will" tells me that this comes at least in part from an ideological bias, and not purely a technical obstacle. I was going to ask which particular features are you using that are not supported in IE10, but I suspect it doesn't really matter.
Anyway, best luck in your project, and I hope that you'll keep your cool and be pragmatic when tackling many of the challenges that lie ahead in your path.
daniel-s said:
That's great, but that "never will" tells me that this comes at least in part from an ideological bias, and not purely a technical obstacle. I was going to ask which particular features are you using that are not supported in IE10, but I suspect it doesn't really matter.
Anyway, best luck in your project, and I hope that you'll keep your cool and be pragmatic when tackling many of the challenges that lie ahead in your path.
Click to expand...
Click to collapse
Thank you, sir! The technical issues lie in CSS3 and HTML5 support. We use many of the features that just came out a few months ago to get the most out of the current web. Using the latest technologies like WebSockets over here improves the speed dramatically. We tested a lot with IE yet to make it work properly there much extra work would currently be required. Adding numerous exceptions to the code will impair the user experience of the users who use one of the four favorited browsers.
Yesterday we had a little re-design. I hope you like it!
Old:
New:
Once again many little things have been improved.
The focus has been set to practical computer science topics, such as various programming languages and platforms.
Examples are the new rooms "C++" and "Android".

Categories

Resources