Related
I will not do anything with this, or publish how. But you can be assured the "warez" guys from that one site will figure this out within a day or so as well...
As most of you will know I am a software developer by trade, with some commercial offerings from my company.
And then there was Marketplace. For commercial devs, something nice to have. But if you have followed the news, the piracy protection for commercial developers is not much to speak of. See this document http://download.microsoft.com/downl...tplace for Mobile Anti-Piracy White Paper.pdf.
I will refrain from quoting the obvious mistakes in this document, if you give this thing a read, you will notice them soon enough. What it all comes down to is that there is no copy protection, not even at the advanced level, at least if they implement it in the way I interpret from reading that document.
So today I started up Marketplace and it worked. Hurrah. The current level of protection is making sure the CAB files are deleted upon install - which is obviously not a way to protect anything - but even this, I thought, should easily be circumventable.
Now, because I wanted to see how fast it could be done, I went with a hunch instead of doing any investigation. And that hunch worked like charm. It took me less than five minutes to circumvent this "protection", and get the ability to save the CABs the MarketPlace app downloads to a different folder. As the CAB file is the same for every downloader, you could just give this CAB you payed for out to all your friends.
Obviously I will not disclose the method, because that would be working against other commercial developers, and ultimately myself. It's just to let you know how ridiculously easy it is, and to give fair warning to those looking to sell apps on the Marketplace.
So, the moral of the story is... WTF MICROSOFT?
I know firsthand there is no such thing as perfect copy protection, but this is just plain ridiculous.
What we really need is for apps to be able to use our own copy protection schemes... you know, like the good web-based app stores out there.
EDIT: l3v5y has also succeeded in doing something similar, and it seems the WMPowerUser admin also found another easy way to do it... Yay, and it ain't even out yet!
Not even 12 hours after launch...that's pretty quick
Oh noes.... that's not good!
Imagine Microsoft reads this and decides to offset tomorrow's Marketplace launch...
Or even worse, Microsoft launches the Marketplace but developers decide not to submit their apps because they're concerned that their apps get pirated.
Thats what happens when devices aren't locked down.
That sounds bad, but it's really no different to how things are today. Perhaps there are some apps that have more security than either nothing or a serial key, but none that I use have anything more sophisticated.
Even as a developer myself, I'd easily take this over some DRMfest.
So, if I'm reading this correctly, when you buy something from marketplace it's not tied into your username with a password like most apps? Instead, you just buy it and it installs the app, but doesn't give you a cab? Yeah, I don't think it's that hard to work around that and get a cab for yourself. Some of the cheaper apps at Handango are like that. Can you re-download an app onto a new device or if you have to hard reset, and is it free or do you need to buy download protection like form Handango?
Good, copy protection pisses me off, all it does is piss of the genuine users. We have to deal with codes and activation to be legit, while people getting it free, just click here and there, copy a code here and huzah.
Copy protection doesnt work, someone will always find a way around it. Unless its linked to a windows live profile/xbox live profile. Which I can see probably happening when they bring out Zune on mobile phones, which sounds like it might be sooner rather than later!
I did something like this earlier... MS haven't quite got security done yet, though my guess is the iPhone is no better...
I'm really surprised by the lack of any drm; what's the point of signing in w/ one's Windows Live account? The easiest thing to do is to associate valid applications w/ one's Window's Live account. That's what itunes does for music at least (I don't know about apps as I don't have an iphone/ipod touch). Of course, what would happen is that an internet connection of some form is needed when the application is first installed, which could become inconvenient.
The truth of the matter is that the percentage or ratio of people who would bother to do this is pretty small. Most WinMo usersbarely even know how to setup e-mail not to mention install a cab file.
Most of the people in this forum already know how and where to get cracked apps or warez if they wanted too. I don't see this so called "flaw" as being an issue to MS or developers.
Must admit that I find it a bit worrying that your not able to make a backup of the applications you buy by taking a copy of the cab file somewhere safe.
After having sent back 4 HTC phones (two different models) in the last 10 months, and having an SD die on me I'd really like to know that I have a backup of anything I've paid for.
Can anyone confirm if its possible to reinstall something you've paid for through the Marketplace app if it gets removed from your phone, or you get another phone? ie if you log into Marketplace with the same Lice ID does it show apps that you've bought but which aren't on the phone your connected with?
If I look at an app that I have installed through Marketplace there is no install button anymore and Marketplace tells me that it is installed... so no obvious way to get the application back...
Not enough free apps on the UK store for me to mess about with really (have installed Shazam trial but don't want to risk uninstaling it just to see what happens).
-FM
fatmonk said:
Must admit that I find it a bit worrying that your not able to make a backup of the applications you buy by taking a copy of the cab file somewhere safe.
After having sent back 4 HTC phones (two different models) in the last 10 months, and having an SD die on me I'd really like to know that I have a backup of anything I've paid for.
Can anyone confirm if its possible to reinstall something you've paid for through the Marketplace app if it gets removed from your phone, or you get another phone? ie if you log into Marketplace with the same Lice ID does it show apps that you've bought but which aren't on the phone your connected with?
If I look at an app that I have installed through Marketplace there is no install button anymore and Marketplace tells me that it is installed... so no obvious way to get the application back...
Not enough free apps on the UK store for me to mess about with really (have installed Shazam trial but don't want to risk uninstaling it just to see what happens).
-FM
Click to expand...
Click to collapse
looks like it keeps track of all apps you purchased.
ow well, I guess it's a matter of time when there will be sites that point to all the cabs available on upload sites and stuff. Just like those sites exists for iphone/ipod (appulo.us for example)
I guess that's what happens when people see that there a lot of apps available on other country stores..
what do you think...
double post
thedicemaster said:
looks like it keeps track of all apps you purchased.
Click to expand...
Click to collapse
Hi dicemaster,
How did you try this? Uninstalling and reinstalling on the same phone or another phone? Or the same phone after a hard reboot / content erase?
I'm just interested to know from what state you can get back to your purchased applicationsand whether is purely your windows live id that connects you to your purchases or if there is some device specific stuff checked as well.
Cheers,
FM
Is there anything to stop Software Authors implementing (or continuing to use) their normal Serial number protection systems?
Looking at the Market Place, there are obviously some of the Big Names we all know and love, and I don't see why they would remove protection systems they have in place already, unless it was a MarketPlace requirement.
Personally, I can't say I'm at all impressed with the MarketPlace implementation - it heralds back to the early days of PocketPC. Maybe they're going for lowest common denominator hardware support, but frankly even the relatively poor Android marketplace on Hero is massively better. And the Appstore even more so. And I think Cydia tops most of them!
Let's hope that the MarketPlace at least drives prices down.
V
I am assuming it's more difficult then just going to \Windows\AppMgr\Install folder while the installer is running and copy the CAB file to another location. This is how I get the CAB files from PC only installers.
I personally use SKTracker a lot. I take a snapshot before, and then during the install and see what has changed. That generally tells me right where any install files/CABs are that I need to grab.
vijay555 said:
Is there anything to stop Software Authors implementing (or continuing to use) their normal Serial number protection systems?
Looking at the Market Place, there are obviously some of the Big Names we all know and love, and I don't see why they would remove protection systems they have in place already, unless it was a MarketPlace requirement.
Personally, I can't say I'm at all impressed with the MarketPlace implementation - it heralds back to the early days of PocketPC. Maybe they're going for lowest common denominator hardware support, but frankly even the relatively poor Android marketplace on Hero is massively better. And the Appstore even more so. And I think Cydia tops most of them!
Let's hope that the MarketPlace at least drives prices down.
V
Click to expand...
Click to collapse
Microsoft does not support your own serial systems. There is no information you can compare runtime vs purchases either, so you can't roll your own. Well ok, you DO actually have device ID information you could use, but that way purchasers can only run the application on the phone they actually bought it on. It is not clear how 're-download' information will be transmitted. If that also transmits a device id, then it is possible to roll your own, though it would be pretty nasty.
zim2323 said:
I am assuming it's more difficult then just going to \Windows\AppMgr\Install folder while the installer is running and copy the CAB file to another location. This is how I get the CAB files from PC only installers.
I personally use SKTracker a lot. I take a snapshot before, and then during the install and see what has changed. That generally tells me right where any install files/CABs are that I need to grab.
Click to expand...
Click to collapse
If you go to C:\Program Files\Microsoft ActiveSync on your PC, you'll probably find an archive of many things that you installed over active sync.
SK Tools is a good way to re-pack any installed programs into cabs. I would guess that it works with programs from Market Place.
good find bud..i sent it to engadget for ya
http://www.engadget.com/2009/10/08/dev-finds-windows-marketplace-drm-severely-lacking-easily-circu/
AppInventor is basically an online resource for making Android apps. However, to make them you don't need to write codes mostly, making this easier for people like me, who dream about actually being a dev.AppInventor, although is a great resource, but got lost in the forums .
The quality of app is really just dependant on the amount of time you are you wiling to spend on it, and how much time you have taken to understand the AppInventor program itself.
There are many apps that can be made from this, ranging to just info apps, to ones that provide links, and others that actually turn out to be mathematical games. Again, it is just up to the amount of time you decide to spend on the app itself, so don't expect your app to be something utterly brilliant the first time.
This can be used as a learning process. The basic logic behind any app development can be found in here.
So here are my first two attempts.
The first one is basically an app that provides me links.
'Indian Restaurants Guide'
This was my first attempt, so please bear my 'noobness'
The app basically provides buttons, which, when pressed lead the person to a website I built. I did not make it a a major thing, trying to draw traffic to the website, rather the website was built for the app. The app, and the website, both are low in content.
https://market.android.com/details?id=appinventor.ai_hateem_ha.glasgowcurrys&feature=search_result
'Neha Sharma Bollywood Actress'
This is my Second attempt
Basically, this app is a bit more complex, and a lot more logic was used.
The app is about an actress, and it gives some more info about her, and also provides links to her facebook and twitter profiles.
Further, it has also links which open up in the youtube application as trailers of her movies.
https://market.android.com/details?id=appinventor.ai_hateem_ha.trial&feature=search_result
The second app, if you notice was a bit more complex, and I had to make use of the Blocks Editor (a tool provided that helps you create the logic) much more. Also, I had to dig deep into the online resources about the app itself, to make sure that nothing in the design and the blocks went wrong. You get better at stuff as you go along, and I think this will be same.
Try Google AppInventor Now
http://appinventor.googlelabs.com/learn/setup/
Tutorials
https://sites.google.com/site/appinventorresources/home/tutorial-topics
'Publish Your App on Android Market'
Taking, it to the next step.
If you want to publish your apps on the Android market, you need to make an Android market publishing account.
The cost is 25$, but if you are even an amateur 'dev', this might be worth it.
With AppInventor, you can not think about generating revenue from the apps you make, unless they are exceptional.
However, once you make an account by going to
www.market.android.com/publish
you can start posting apps on the market.
All apps made on the AppInventor will need to be signed before you can put them on. However, before signing you might want to consider changing your app icon, because the one that comes from AppInventor is just the default one, and I expect you would want to add some personal touch.
Here are the steps on putting your own icon on the app.
[EDIT]
These steps below are not necessary now. In the Appinventor window, when you select Screen1 it will give you the option to set the icon for the app.
The steps below are here, if that does not work out or you are just trying to change the icon of any app.
1)- Get your finished .apk file and rename it from '.apk' to '.zip'
2)- Browse into the now '.zip' file (use any means you like 7zip, windows explorer, etc)
3)- In the first directory of your app you will see a folder called 'res', which will contain the image file.
Now I have tried replacing the file, but somehow it does not work, so select the 'res' folder and delete it.
4)- Make a new folder in the '.zip' folder called 'res'. Then make a subfolder 'drawable'
5)- Find your icon image that you want to put it.
The icon needs to be a 48x48 image in '.png' format.
I used Microsoft Paint on Windows 7 to resize my image to that size and then save as a '.png' file.
You can use that, or if on XP use the default image resizing tool called 'MS PowerToy'
Or you can use this program to resize the images
http://imageresizer.codeplex.com/releases/view/30247
6)- Place the image file in res\drawable\'your image file'.png
7)- Now re-name the image file to 'ya'
8)- Then rename the '.zip' file back to'.apk'
If you can't do it on your computer, send the file to your mobile, and use Astro to rename.
https://market.android.com/details?id=com.metago.astro&feature=search_result
9)- This bit's maybe an easier bit, signing your app.
Since there is no easy way to sign an app, I used this program which signs the app with your details.
http://amerkashi.wordpress.com/2011...version-of-app-inventor-apk-to-google-market/
Watch the video about this program, and all will be clear.
10)- After this get the '.apk' created which says 'zipaligned'
Goto your Android market dev account, and upload the '.apk'
Complete the steps, provide Screenshots, and another Icon. This time the icon
has a bigger size. 512x512. Use any way to Resize your image. Then make your '.apk' Active, and Publish your app.
Sounds maybe a bit complicated, but can be done easily if the steps are followed.*
Please leave your feedback concerning your experience with this program, also, please post any links to apps that you make using this.
*I have done all this on Windows 7, so the steps you need to take to complete the procedure might be different on a Mac.
Reserved (ONE)
Reserved (TWO)
Bump.........
Cool. Good info. I may give it a try sometime. Thanks
Sent from my King's Alliance Evo running 4G data
Wow, this looks like a real easy way to get into making some apps. Thanks for posting this, I'm going to give it a try.
Thanks, hateem, this is a really good intro to the service. I wish I'd had it when I started!
FYI, AppInventor is one of those Google Labs projects that's been canned. It's still open and there seems to still be some question as to whether they're actually going to shutter it or move it elsewhere and open source it. No, I'm not trolling, I've been an AI user since shortly after it was launched and have been following the discussions over at its Google Group.
I made an account about a year ago, but did not start using it till now.
I did hear some news about it being dropped off by Google, but I don't think that has happened yet, or will anytime soon.
Bump........
Sent from my HTC Desire using XDA App
New way added, to set the app icon.
Sent from my HTC Desire using XDA App
Cool thanks, i guess this is why there are a million horrible apps in the market lol
The number of apps made by appinventor on the market are low, due to the payment needed for a market account.
Sent from my HTC Desire using XDA App
Bump........
New SAT app coming soon. This will be a major advancement from the Restaurant app, and will hopefully contain a tinydb.
Sent from my HTC Desire using XDA App
Now I just need a decent idea!
Im thinkin of making an app which lets you take a snapshot and then edit it quickly, maybe u cud beat me to it?
Sent from my HTC Desire using XDA App
Is this Easy to use?
PMGRANDS said:
Is this Easy to use?
Click to expand...
Click to collapse
This is easier, in the sense that actual app development is exremely complicated. Parts of this (the really complicated apps which make use of webdb) are not easy to grasp, However, most of it is quite straight forward. Plus there are a lot of tutorial videos on this. Just search on youtube, and don't feel like you don't know anything after seeing a really complicated one cause that's really as hard as it gets.
Starters should really begin with Purr and paintpot app, and then maybe move on to making a twitter application and so on.
Sent from my HTC Desire using XDA App
Just made a quickn simple photo editing app, and a SAT guide using this, will be updating main post soon with links to them.
Sent from my HTC Desire using XDA App
App inventor can be frustrating at times due to some of its limitations, but all in all, its pretty good. I have seen that once MIT gets app inventor back from Google soon they have big plans to help it take off even more.
I have an app on the market too, its in beta, its free, and i havent really been working on it for very long. almost 1000 downloads in 2 weeks, so im happy.
Its a RPGish game, with barcode scanning, online battles, npc battles, items, leveling up, etc. Made a network with usernames/passwords, etc. App inventor can be pretty awesome if you use it to its potential.
Heres the link: Market Link
If anyone ever needs help with AI, email me at [email protected], I'd be glad to help.
So, I decided that the $5 for the car cradle from verizon was too tempting. I've recieved it and have been using it for a day or so and it serves it's purpose. A good charging station that keeps it from sliding around my center console. I'd like to utilize the CarCradle app, but with the removal of bing (I'm not disappointed by this) the app dead-ends when selecting Maps, Voice Search & Navigator. Would it be possible to re-establish links to Google Maps, Goodle Voice Search & Google Navigator instead? I know that there are many other car apps on the market but this one isn't terrible, providing that the links work.
I've unpacked the .apk file but it's like trying to read Swahili. I wouldn't know the first place to begin. I'd like to eventually try my hand at app building but I'm a long way off.
Any thoughts on this would be appreciated.
Peace,
Ray
sure, wouldn't be hard at all actually! I'll work on this sometime this week/weekend
wouldnt this be considered as warez if it was modded for foryo.
Thanks Trailblazer, I look forward to seeing your result. The desk cradle app is suffering from the same de-binged issue if you're interested. I still don't understand why Samsung didn't allow for any customization with these two apps. Oh well, it is what it is.
Bierce22, I don't know. If that were the case you could say the same about 75% of the apps that make their way out to the public. Transparent widgets and apps and such would be similar, I would think. For that matter the froyo rom we now have could be considered the same. But I don't know the ins and outs of all this stuff. I'm just a simple end user looking the get the most out of a pretty good phone with lots of potential.
this is just my opinion i dont wont to start a big debate or flaming contest but i remember when theimpailer got in trouble for modding andgry birds to get it to run on lower devices he took out the adds in order to make it work. i just dont want to see someone get into trouble. if u fix it then keep it to yourself and problem soloved lol.
It's all good, I didn't see it as the beginning of a flame anything. The way I see that situation, and I only know what you have posted here, is that Angry Birds is a paid app in the market. Modding that and reposting could be considered copyright infringement, much like reposting an mp3 of a song on the old Napster. These Apps are included as part of the Samsung android os. I guess to eliminate the possibility of being infringement the "proper" thing to do would be to mod the app and only include it in an updated ROM. That way only current Continuum owners could aquire the Apps. But the nature of the open source OS is the ability to freely share modification and development. At least that's the way I see it, for whatever that's worth. Thanks for keeping us honest though. Simply because you can doesn't always mean that you ought. I don't see any issue with this situation... Then again, I'm a little biased as I'm the one interested in the mod. ;-)
Sent from my SCH-I400 using XDA App
Cradle Apps
Hi All,
I started the same musings on the accessory thread, then I started downloading alternatives. I haven't tried any of them because my car cradle was working with Google Maps and Search. I wonder if the de-Bing rom works the same way. I haven't tried that either. I get the same errors you speak of with the original 2.2 rom. I think to use these alternatives you just need to use something like Root Explorer to rename the stock app and name the new one the original stock app name. Search and you shall see the results of the different apps. I can post what I found if needed.
I'm still newer to Android and today realized the permissions that apps request. Before I was quick to just accept & go. I was about to install an app that is requesting a LOT of permissions. Phone calls, hardware controls (pics/vids at any time), and network communication (SMS I believe). My questions are simple.
1. Do some mods already implement certain things into itself to disable some of these features? I understand this is a mod-by-mod basis if so. Does Synergy do anything to disable this crap, anybody know?
2. How worried do I have to be about this? Will the app literally take pics and send them out without my knowledge? Or is it only the pics I take it can send out? How does this work?
3. Which of the permissions that apps request do I really need to keep an eye on and watch out for? AKA, what could take info/pics that I dont want it to?
4. Is Anti-Virus software REALLY necessary since I'm all rooted and such? I read articles saying it's useful and others saying it doesn't even provide much protection, and the chance to get something is quite rare if you only use google play/android market?
Thanks in advance for any and all help. I ditched Apple and AT&T for this thing, and with it being rooted, I am unbelievably happy I made the switch to both VZW and the S3! AWESOME phone, screen size, and customization!
Bump...
Ok, so maybe this is getting ignored because it's too much of a noob question, or self explanatory? Not sure, but I want to know how far this crap goes...To my worst fears, like hardware control can take pics any time they want and I never know about it, or is it not that bad?
Thanks in advance for any help!
It is somewhat self explanatory... just use common sense when downloading an app... If you don't think it really needs the permission that it's asking for then don't download it. For example, there's no reason a music app that plays your sdcard contents needs your GPS location, etc... Look at the reviews of apps in question also... that's your best indicator right there if the app is trustworthy or not... If it's a bad app then its going to have bad reviews.
See your other thread on this
http://forum.xda-developers.com/showthread.php?t=1860600
I tried to explain as best I can
--Sent from GlaDos baked potato
I have several outdated android smartphones laying around and would like to re-purpose one for an 8 year old.
The thing is, I cannot trust him not to install tons of adware and games on it and play it during school hours which will just cause trouble for everybody. What I'm thinking:
I need the ability to remotely enable/disable lock/unlock the phone and/or turn the phone on or off and/or time periods during which device is automatically locked or unlocked.
I need either a locked down modified cyanogen ROM (or equivalent) or I need to somehow setup everything from scratch.
GPS tracking (realtime constant monitoring isn't necessary but I'd like to be able to ping his location if I'm worried about him and maybe have some sort of perimeter alert system in case he strays into a dangerous neighborhood/gets kidnapped/whatever)
I also need to lockdown which contacts can be called/SMSed/telegramed/IMed/emailed
This kid is sharp, so if there is a way to circumvent these measures, he'll probably figure it out. But I'd like you're ideas and I'll try anyway. How would you go about this? If you're going to tell me I'm a horrible person for tracking my child, I know already.
wow your asking for alot OP. lol eaither this is a really dangours kid, or your extremely protective lol
eaither way il try and help as best as i can. for tracking you can use "wheres my android" app. its gps tracking after you text it a certain phrase, it gives the location to the phone you texted.
you can try cnmod and just install wa app passwors to lock the settings, so the kid wont change anything
Thanks for the reply. He isn't dangerous, he is more of the absent minded genius type. I'm more afraid a stranger will say "lets go to my place to build model rockets" and he won't be able to resist.
What do you mean "wa app passwords"?
You sort of addressed the tracking and locking down apps. Any ideas for contact control so he doesn't just use up all of the minutes calling buddies and 900 numbers?
Hello, what phone are you going to give your child?? What I'm thinking is putting custom rom on the device and use the multi user option if the rom supports it. Then maybe, (maybe) you'll be able to omit which things can see/use and disable some of the things you're asking for.
Good luck.
Sent from my 1+1
go0 said:
Thanks for the reply. He isn't dangerous, he is more of the absent minded genius type. I'm more afraid a stranger will say "lets go to my place to build model rockets" and he won't be able to resist.
What do you mean "wa app passwords"?
You sort of addressed the tracking and locking down apps. Any ideas for contact control so he doesn't just use up all of the minutes calling buddies and 900 numbers?
Click to expand...
Click to collapse
We use MMGuardian Does everything you want and more and it's pretty cheap. I just assume you know a thing or two about Android so I'll tell you this, mmguardian is amazing, the only thing is you have to turn off persistent notifications for the app. I get why they don't have that built in, but just do that and hide that app and your as good as gold. You can add 'key words' that when come up in a text, IM, email or search, it will send you and alert on your phone. You get transcripts of their texts, im and email (which I was happy for, now I just find creepy and intrusive to my childs privacy) but it's pretty sold service OP