security software for wm2003 - Windows Mobile Development and Hacking General

Hi, i am working in a projecto form wm2003. The customer wants to know if exists any users managment in the operative system, independent of the application that we are developing. for example, the customer want that when the pda starts the user enters a user and a password and if the fails for 10 times then the pda is hard resetted. Do you know something about it? may be some utility? some api of the OS?. Could we develop a tool tha substitute the tipical 4 digists security pin of wm2003?. Thankss

well you can inside the settings under password choose between the simgle 4 digit password
and
strong alphanumeric password
problem with a hardreset is that then the mem is deleted and the program to require password is delted
maybe if the password program was put in the ext rom but i'm pretty sure that it's install would be possible to stop'd by the thief
and then he would not even have to know how to hardreset the device to be able to steal and operate the pda of cause without the data
but the auto reset would help him in getting a working pda

I think the same....but i must be sure about it.
For example, in the ipaq 5550 the security system was removed and they put the fingerprint security application. Is posible to do something like than without modifing the rom? may be with a app int ext rom? maybe creating a new rom with the plaftorm builder?

maybe if the right hardware were present of cause maybe if there is some sdIO fingerprint reader or something which had the buttom connector
and the software which supported it was put in the ext rom
then it should be possible like the ipaq's
but it would require the hardware and the software as in driver and the security application
also if it's was not integrated into the pda like with the ipaq
people could disconnect the fingerprint reader and then the driver would fail to load
and then some system would have to reset the pda otherwise disconnecting the print reader would be a workaround of the security system

@ dherrero
if I get your English right, then such a software is already here
see cab attached
ym

but what happens if a user hard resets his Imate? This software will be deleted and he will be able to use the pda. Isnt it?

dherrero said:
but what happens if a user hard resets his Imate? This software will be deleted and he will be able to use the pda. Isnt it?
Click to expand...
Click to collapse
hi,
this app fulfills the spec you set up:
dherrero said:
... the customer want that when the pda starts the user enters a user and a password and if the fails for 10 times then the pda is hard resetted. ...
Click to expand...
Click to collapse
does nothing more, nothing less...
btw if somebody steals the phone he/she will use it anyway, but in this case your data is (reletively) safe
cheers, ym

Related

Help with trusted certificates on WM5?

Could someone please help?
I have an XDA Exec (HTC UNIVERSAL) Ive been searching for days to a solution for this without avail and you guys seem to know what your talking about! Im very new to this and need a solution to this error when i try to install some applications and run them:
" X cannot be opened. Either it is not
signed with a trusted certificate, or one of its components cannot be
found "
Is there any way you can disable this in WM5? my WM5 version is OS 5.1.1700 (Build 14354.0.1.1)
Or is there any way whatsoever you can get around this? please if anyone can help do let me know and post!!
Thankyou !!
Is your phone locked ?
It may be locked or your operator prevent installing all of 3d party applications. In this case reinstalling "clean" WM5 may help (I'm not sure though) - I'm only a newbie in WM5.
Another reason that application you run trying access trusted functions - like allocation of the physical memory. In this case I'm not sure what can be done - reinstallation of WM5 will not help.
Its unlocked! so if i re-install wm5 it wont say this when i install programs? i have tried resetting the phone and installing different roms but nothing works! is there any particular rom i should be looking to install? or anything i can put in the extended rom to install after a hard reset to sort this out? PLZ HELP!
I have had that problem, too and I was going crazy. Then I tried the following tweak but I do not really know why it should work, it just did:
in HKLM\System\ObjectStore is a reg key "RegistryType=1", which means Hive based registry.
When you set it to "RegistryType=0", which means FILE based registry, all changes you do in the registry will stay there also if you reboot with device's reset button...
BUT AFTER YOU CHANGE THIS VALUE, FIRST REBOOT HAS TO BE DONE WITH SOME SOFTWARE, NOT WITH THE RESET BUTTON.
Subsequent reboots can be done with reset button then. :lol:
there is another tweak that gets rid of the warning messages, but I did not use that one
really! which software could i use to reboot the phone??
also is resco registry okay to view and change this? it says registry type 0x0 (1) i have now changed it to 0x0 (0) is this correct? i performed a soft reset but im stil getting the error message! is this because i need to use software to reboot?
yep, the first soft reboot needs to be done with software. After that you can use the usual way again.
After I had done this I removed all "problem apps" and then reinstalled them and it worked.
What software did you use or could i use to reboot my ppc chuckchuck?

Make Part to ROM - Urgent

Please please reply it.
I want to make my application part of ROM my three PDAs. ( I have XDA2i, PDA2K and K-Jam), so machine will have application after hard reset. (i don’t want to write FLASH Memory \Storage\1257 etc i think any one can delete that)
Q1) is there any installer available which deploy to ROM and make desired application part of ROM.
Q2) to upgrade any ROM , is it must to have base ROM ?
I really thankful for your feedbacks
Khurram
Hi Khurram!
There are no installers that can put apps in to device ROM. If you want to add to the ROM you need to do the following:
1)Extract ROM image (or get one for your device from somewhere).
2)Decrypt the image (nbf file) and extract all files.
3)Add your app
4)Repackage and encrypt the image.
5)Reflash your device with the new image.
The tools to do it are on this site (check out ROM kitchen), but this is a complicated process, and there is a good chance you will wind up with a useless device which won't boot.
So you should read up on ROM cooking and be very careful when altering ROM images.
Good luck!
Hello levenum,
Great reply , thanks a lot . you are the only person who replied me now and in past as well.
in past, you suggested the "file store".
Problem: it is not a secure way , any person can remove it from the device.
does any one have idea about Extended ROM or any other secure and risk free way ?
Thanks
[/list]
Hi Khurram!
When you first posted you didn't specify your program was sensitive, and you didn't want people deleting it.
If it's really important Extended ROM is not good ether since it can be unlocked and manipulated just like the File store. There are unlocking tools in this forum.
If your program is some kind of anti-theft app. (in case your phone gets stolen) the only way to ensure no one messes with it is to put it in ROM.
Of course even then someone could re-flash the device with an original ROM,
so nothing is 100% secure.
Great , really impressed in way you picked my point.
i am working on such a application , actually 3 months ago I lost my newly purchased XDA2i , luckily i got that back with the help of mobile operator but I want to developed such a application which will lock the machine totally and will not allow re-flashing as well.
Q: stop to re-flash is possible?
Q: any existing tools for anti-theft ( i saw something at ROM Kitchen but it is for specific versions only)
any further help will be appreciated.
Thanks Again.
Yes, there are projects like this here:
http://forum.xda-developers.com/viewtopic.php?t=46174
Although, I don't remember anyone trying to put the app in ROM.
As for preventing device from re-flashing:
It is possible theoretically, but would require serious programming skills, and good knowledge of hardware.
There is a special program, called bootloader, which is responsible for loading the OS or writing a ROM update to the device. The only way to prevent re-flashing would be to write one of your own, and even then getting it on the device would be tricky.
Any way, that kind of knowledge is way beyond me.
But I do have one question you should consider:
Does your program need to save data, like SIM details for authorized SIMs or changing password?
Since this data cannot be written to ROM dynamiccaly, you would have to compile your program for each user\device specifically, and the password would have to be hard coded.
yes my application will be extention of existing security tools with more control of device something confidentional :twisted: .
the only problem is prevent from deletion so thats why i am worried about it
I didn't mean for you to tell me what your program saves.
I just wanted to point out that while preventing a program from being deleted is possible (I don't think many thieves would bother re-flashing a device, specially if your program would make it look as if the device is malfunctioning and not locked, only the user will know what to do)
its impossible to save settings so they will not be deleted.
If you are making this program only for your self, than fixed password, or SIM info is not a problem, but if you intend this for other people you will have to come up with some solution to store the settings securely.
At leas for this you may have to use the File store.

Help needed desperately

Hey guyzzz i have DOPOD 838 PRO and the sad news for me is that the phone KEYPAD has been locked and i cant remember the code now.... I am sure someone might have messed with it and changed it.... i desperately need to reset the KEYGAURD.... How can fix this problem plzzz heelp me as i am new to XDA WORLD....
Just inform what i need to do....
No t sure if there is a way to read the code from the phone.
Only thing I can think of is a hard reset. You will lose all information on the phone however it will be reset back to manufacturers defaults.
Click here http://wiki.xda-developers.com/index.php?pagename=Hermes_Resets to find out how.
S.K.
yp ... I only thing I can think of too is hard reset .. dont know of a way to reset the lock code ..
yeah i think hard reset is the only way... but guyzzz the keys are lock so will the soft keys and reset work? i really have no idea abt it and i feel like a total noob .... thnxx for the help and codes....
Should do, if not soft reset the device and then do hard reset sequence whilst the phone is booting up.
Reagrds
S.K.
thnxxx alot guyzzzzz.... i have reseted my phone and now its back to its original state.... just one last question guyzzz.... what security do i have incase someone steals my cell i am just curious abt the security feature.... jus wonderin what if someone changes the sim..... wht security can i put in my celll
The only security you have pre-installed is a password lock that asks for a password when you power on your screen.
However there is software available (most of which you have to pay for) that can encrypt files on your phone and also some programs that are probably subscription based that can remotely wipe all data from your phone if it is stolen.
There is a thread on some programs that do this but for the life of me I cant find it. Try searching on Google but this software does exist.
Regards
S.K.
that was really helpful guyz.... one last help i need ( i know its asking for alot ) but all i need to know is that i recently purchased a 1 gb memory card for my cell and i need to find a way to format it completely as its a second hand (used) memory card... i have NOKIA MEMORY CARD reader but this memory card is too small to fit in that device. Is there a way i can format my MEMORY CARD completely... does HARD RESET also resets i means formats MEMORY CARD. thnxx
A hard reset will not format your memory card
You can format the card in the phone. The in built in file exporer does not support this. However you can download Resco File Explorer from here: http://www.resco.net/downloads/byplatforms.asp
It is only a trial, you must buy a license key if you want to keep it. Just install it on your phone memory, format your card and then uninstall it after.
I've kept it on my device, much better than the built in explorer.
Regards
S.K.
zahirsayed said:
thnxxx alot guyzzzzz.... i have reseted my phone and now its back to its original state.... just one last question guyzzz.... what security do i have incase someone steals my cell i am just curious abt the security feature.... jus wonderin what if someone changes the sim..... wht security can i put in my celll
Click to expand...
Click to collapse
I use Remote Tracker on my phone. There is a whole list of things you can do to your cell via a text message. I would need to look at the command list again but I think it will clear your memory card too. It also has gps tracking.
http://remotetracker.sourceforge.net/
WP
Be a good idea to use a backup program too. It will back up all contacts /messages, and depending what app, system and registry too.
I use SPB backup 2.0.1. Works pretty well for when things go bad...
Cheers...

big BUGs on WM6 OS 5.2.2000 (Build 20000.1.0.0.PV.HAT)

I just flashed WM6 OS 5.2.2000 (Build 20000.1.0.0.PV.HAT) on my O2 Xda IIs but found two BUGs on it:-
(1) The System will forget the password when you take out your battery
I set a password on it but the system can't remenber the password when i took out my batter to put a new SIM card. have tried this twice and the same happened. have to hard reset the unit to reload the OS.
(2) The Extended ROM can't be unhidden with the following tool ->Unlock tool
i installed the UNlock tool on my unit and 4 tools come out to my stsyem, but the UNHIDE tool didn't work when i double click it. have tried this for many times but no any works.
Lost for words
1) Siim password would change if you change sim / System password is a know issue and should not be set on sartup of a new WM6 rom (use the skip and set that up later)
2) WM5 And WM6 dont have an Extended rom, the space is used with the Repart_doc thus you cant unlock something that you dont have.
Thank you for your advise. But
MDAIIIUser said:
1) Siim password would change if you change sim / System password is a know issue and should not be set on sartup of a new WM6 rom (use the skip and set that up later)
Click to expand...
Click to collapse
- First time,I did set the password after i using the unit, not set it on startup. the system forgot my password when i put a SIM card in.
- Second time, I kept the SIM card in the unit, hard reset to reload the OS, then set the password after setting up the system. then i remove the battery and restart the unit ->now the system forgot the password again.
MDAIIIUser said:
2) WM5 And WM6 dont have an Extended rom, the space is used with the Repart_doc thus you cant unlock something that you dont have.
Click to expand...
Click to collapse
seem i didn't know this well before.
But the system can have a Extended rom on a Himalaya model which runs WM5 or WM6.
tangwd898 said:
But the system can have a Extended rom on a Himalaya model which runs WM5 or WM6.
Click to expand...
Click to collapse
Different devices, different characteristics.
It's not a BUG... it's an ISSUE
it's not a BUG.
it's called hardware incompatibilities.
and it is an ISSUE.
WM6 isnt designed for our BA.
tangwd898 said:
MDAIIIUser said:
1) Siim password would change if you change sim / System password is a know issue and should not be set on sartup of a new WM6 rom (use the skip and set that up later)
Click to expand...
Click to collapse
- First time,I did set the password after i using the unit, not set it on startup. the system forgot my password when i put a SIM card in.
- Second time, I kept the SIM card in the unit, hard reset to reload the OS, then set the password after setting up the system. then i remove the battery and restart the unit ->now the system forgot the password again.
Click to expand...
Click to collapse
No Specific Version.
All WM6, AFAIK, is "capable" of trashing out our system password and some other data when we remove our batteries or get flat batt. if only we can find ways of "disabling" it.
tangwd898 said:
MDAIIIUser said:
2) WM5 And WM6 dont have an Extended rom, the space is used with the Repart_doc thus you cant unlock something that you dont have.
Click to expand...
Click to collapse
seem i didn't know this well before.
But the system can have a Extended rom on a Himalaya model which runs WM5 or WM6.
Click to expand...
Click to collapse
On our BA. We could only unlock/unhide/formatdoc the extrom before you upgrade to WM5 or WM6. Otherwise Downgrade first. Then eliminate the untouchable extrom as you see fit. Once visible it can be carried over to the WM5 or WM6.

The file 'IntShrUI' cannot be opened. Either it is not signed with

Ok found ICSinstall.cab on here and installed it, soft reset, and attempted to install the latest version of the WMWifiRouter program (which I finally succeeded in sourcing!).
However I get a message telling me cryptically that it 'cannot be installed' after attempting install. I wonder if this is related to ICS...
I now have the InShrUI.exe file in /windows/ *but* attempting to run it gives:
'The file 'IntShrUI' cannot be opened. Either it is not signed with a trusted certificate or one of it's components cannot be found. You might need to reinstall or restore this file.'
I reinstalled it over itself (i.e. ran the cab again) same error.
:-/
Was this the right file? I seem to remember it was dated 11th January 2008??
Thanks again for hte help folks!
I should say I'm running Microsoft Windows Mobile Version 5.0 (OS5.1.195 (build 14955.2.3.0).
Lastly I should say I've started a new topic as the last one was getting a bit off topic my original concern having been answered :-D (thanks guys!)
probably you only opened a shortcut (*.ink) and the shortcut pointed to a not existing file. Another thing is that it also was intsalled correctly (the *.exe), but the dll's or whatever are not installed.
Regards
Thanks. I'll try redownloading and repeating.
I was wondering if the file needed signed with some unique private key or something?
Anyways will give it a shot and report back
softonic123 said:
probably you only opened a shortcut (*.ink) and the shortcut pointed to a not existing file. Another thing is that it also was intsalled correctly (the *.exe), but the dll's or whatever are not installed.
Regards
Click to expand...
Click to collapse
Thanks for your suggestion I'm now a tiny bit further on.
On soft resetting the PPC I get the following error:
'Pocket PC Networking
Unable to obtain a server assigned IP address. Try again later or enter an IP address in Network settings.'
InShrUI is still giving the same error as before (and it's definately the .exe file I'm clicking).
However the improvement is: This time WMWifiRouter succeeded in installing...
However the same PPC networking error occurred during the install. I could probably tweak whatever is causing that error to use a static IP address rather than DHCP probably...but it's kind of dodging the problem.
And as said before I can't launch IntShrUI without getting that error. This time there is a shortcut to it though in program files.
I should also say that neither the executable or the shortcut has an Icon Image (i.e. it's the default no icon blank) so I suppose it might be the .exe file that's corrupt (since the shortcut get's it's icon from there I think?).
Last but not least:
WMWifiRouter reads:
Code:
'Not Connected'
Waiting for connection
I suspect the problem must lie with InShrUI but then again I'm a noob so I'll wait for the XDA gods to come and share their wisdom!
MrVarioII said:
Thanks for your suggestion I'm now a tiny bit further on.
On soft resetting the PPC I get the following error:
'Pocket PC Networking
Unable to obtain a server assigned IP address. Try again later or enter an IP address in Network settings.'
InShrUI is still giving the same error as before (and it's definately the .exe file I'm clicking).
However the improvement is: This time WMWifiRouter succeeded in installing...
However the same PPC networking error occurred during the install. I could probably tweak whatever is causing that error to use a static IP address rather than DHCP probably...but it's kind of dodging the problem.
And as said before I can't launch IntShrUI without getting that error. This time there is a shortcut to it though in program files.
I should also say that neither the executable or the shortcut has an Icon Image (i.e. it's the default no icon blank) so I suppose it might be the .exe file that's corrupt (since the shortcut get's it's icon from there I think?).
Last but not least:
WMWifiRouter reads:
Code:
'Not Connected'
Waiting for connection
I suspect the problem must lie with InShrUI but then again I'm a noob so I'll wait for the XDA gods to come and share their wisdom!
Click to expand...
Click to collapse
Is there no1 who can answer this? Anyone got any ideas?
Device is a hermes (T-mobile Vario-II) running WM5.....
There's one MAN point up for grabs for whoever can solve it!
I tried installing WMWifiRouter 0.89 onto a ROM which didn't have ICS included (which meant I had to try the same route you did) onto my Vario 2... I just couldn't get it to work, and I spent a while trying to make it work too.
I'm figuring that there's some deep-seated DLL or system association which ICS needs, which isn't configured if ICS is stripped out of the ROM - I ended up just reflashing with another ROM (the T-Mobile WM6.0 official ROM) and ICS and WMWifiRouter works fine.
Sorry that's not a solution, but it's the only way I could get it to work. Not an expert ROM cooker, so my knowledge of how ICS is stripped / included in ROMs is fairly limited, though I understand the concepts and techniques.
Thanks for your help Christopher.
I considered flashing a working ROM. My worry is about losing all the programs I have installed on the device (it took a long time to get it *this* customised ;-) ) is there any way to flash the new ROM while keeping the old registry entries etc. for registering my programs (Especially those I've bought such as Oxford Handbook of Clinical Medicine - which I cannot register anymore)? ...
Or could I somehow back up the registry and restore it later (I know that's likely to be a dangerous idea...perhaps simply the file associations and programs stuff -the windows mobile section?)
Thanks bro!
MrVarioII said:
Thanks for your help Christopher.
I considered flashing a working ROM. My worry is about losing all the programs I have installed on the device (it took a long time to get it *this* customised ;-) ) is there any way to flash the new ROM while keeping the old registry entries etc. for registering my programs (Especially those I've bought such as Oxford Handbook of Clinical Medicine - which I cannot register anymore)? ...
Or could I somehow back up the registry and restore it later (I know that's likely to be a dangerous idea...perhaps simply the file associations and programs stuff -the windows mobile section?)
Thanks bro!
Click to expand...
Click to collapse
Bumping as no replies for ages
Anyone?
Bumping again as no replies for a week or so
Bumping again to ask if anyone knows a way of slving this without having to reinstall all my programs, re register them, and reconfigure everything? (which I suspect installing a different ROM will do?) is it possible to back up the registry entries for all of my programs then do the ROM upgrade and restore the registry entries from my other programsMost of my programs are installed on the microSD card anyway (i didn't want to use up the main memory and slow the device up).??
If so how?
Thanks again folks !
I have the same problem...
I cant seem to find the answer but will continue to try.
if your programs are installed on your memory card then chances are you should be able to past shortcuts into the programs directory after reflashing. I tend to do this BUT I have found some programs that need to be re-installed or re-registered. Backing up registries can cause SERIOUS problems in itself so I would 1st do a full backup of your system (try spb backup, it backs up EVERYTHING on the phone then re-installs the lot so it seems like you never had a problem..) then flash. Try putting on shortcuts and if you have no luck you have the choice to start again on the new os or reflash to old and then restore backup (old problems wil still be there). Hope this helps.
Ps. I use resco explorer instead of the crap file explorer on the phone. It allows MUCH more versatility to do as I want. Cheers....

Categories

Resources