Pocket PC Power on Password - Windows Mobile Development and Hacking General

Hi,
Does anyone know where the power on password gets stored on the Pocket PC device? Is it possible to reset the power on password from the Pocket PC registry? Or through any API call?
cheers,

If this a device with an OS before WM5: simply do a cold boot or firmware reflash.
AFAIK there is NO default application that will query a password on poweron. It sounds to me like a customized application/pocket pc device. Which device do you have?

hjgode on 2003 and 2002 there is Settings->Personal->Password
pvin007 you have these method available for passwords:
BOOL SetPassword( LPWSTR lpszOldPassword, LPWSTR lpszNewPassword );
BOOL SetPasswordActive( BOOL bActive, LPWSTR lpszPassword );
BOOL GetPasswordActive();
For them to be any use you need to know the current password, care should be taken while playing with these methods because if you forget the password you have changed it to you won't be able to activesync.
The password is stored in the registry and in an unacessable part of the memory.
This page also has good information:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnppcgen/html/wmdeploy.asp

Thanks for the responses guys. My device is an i-mate PPC. Which has WM2003.
I had a look at those API functions, but they do require the existing password. I would like to know if it is possible to clear the existing password without knowing what it is.
The reason I ask is, I want to write some sort of code, that can be used to help users clear lost password. I am using OneBridge to send down remote registry settings and run scripts remotely, so I can execute anything on the device remotely if the device is locked and user does not know thier power on password.
But I don't know how to clear lost passwords, without having to hard reset the device and loosing all information on it.
I guess it is not possible to clear lost passwords.??

There is a security dll you can overwrite and make your own API, so you wouldn't need the password.
I am not sure the exact details, but I have been told that for part of our project it can and needs to be done.
I wou't be starting this project for a few weeks though.

Thanks! Sounds like there is hope. I would appreciate if at the time you have a look at the project, if you can share more details about the security DLL on this forum.
cheers,

Related

security software for wm2003

Hi, i am working in a projecto form wm2003. The customer wants to know if exists any users managment in the operative system, independent of the application that we are developing. for example, the customer want that when the pda starts the user enters a user and a password and if the fails for 10 times then the pda is hard resetted. Do you know something about it? may be some utility? some api of the OS?. Could we develop a tool tha substitute the tipical 4 digists security pin of wm2003?. Thankss
well you can inside the settings under password choose between the simgle 4 digit password
and
strong alphanumeric password
problem with a hardreset is that then the mem is deleted and the program to require password is delted
maybe if the password program was put in the ext rom but i'm pretty sure that it's install would be possible to stop'd by the thief
and then he would not even have to know how to hardreset the device to be able to steal and operate the pda of cause without the data
but the auto reset would help him in getting a working pda
I think the same....but i must be sure about it.
For example, in the ipaq 5550 the security system was removed and they put the fingerprint security application. Is posible to do something like than without modifing the rom? may be with a app int ext rom? maybe creating a new rom with the plaftorm builder?
maybe if the right hardware were present of cause maybe if there is some sdIO fingerprint reader or something which had the buttom connector
and the software which supported it was put in the ext rom
then it should be possible like the ipaq's
but it would require the hardware and the software as in driver and the security application
also if it's was not integrated into the pda like with the ipaq
people could disconnect the fingerprint reader and then the driver would fail to load
and then some system would have to reset the pda otherwise disconnecting the print reader would be a workaround of the security system
@ dherrero
if I get your English right, then such a software is already here
see cab attached
ym
but what happens if a user hard resets his Imate? This software will be deleted and he will be able to use the pda. Isnt it?
dherrero said:
but what happens if a user hard resets his Imate? This software will be deleted and he will be able to use the pda. Isnt it?
Click to expand...
Click to collapse
hi,
this app fulfills the spec you set up:
dherrero said:
... the customer want that when the pda starts the user enters a user and a password and if the fails for 10 times then the pda is hard resetted. ...
Click to expand...
Click to collapse
does nothing more, nothing less...
btw if somebody steals the phone he/she will use it anyway, but in this case your data is (reletively) safe
cheers, ym

Passwords for files?

Im looking for a program where I can set a password and add/remove files to the list?
This way I can protect contacts/certain documents etc....
Is such a program available?
There are encryption programs that you can encrypt any files that you choose. You need to start the program, decrypt the file before you can access it. And you need to remmeber to encrypt it back after that. Not very handy for freq access files, but I used that for some of my password and secret number documents that I don't access very often. And I like to have them in the Notes folder such that it will do sync with my pc incase that I loose it on the phone.
I have found this as well, trouble is I need frequent access so cant really use the encrypt/decrypt option, still on the hunt for a password program, any suggestions are much appreciated.

How to make a pre-regged .Cab file?

Hi, i want to embed the registration key or serial no. into cab file of my programs.That way when i hard reset my tytn,other then restore from spb or sprite backup, i want to do a clean install of all my program from my storage card without key in registration code one by one(very daunting) again.Any kind soul out there can help?Thanks a million..
What you want is impossible.
Each program has a different way of storing its registration after the necessary codes have been entered. Usually it is hidden somewhere deep so it would be more difficult to find and there fore the program would be more difficult to crack.
So while you can easily add registry entries to a cab using CE Cab Manager (google it) unless you know exactly how each of your apps stores its registration (which may not even be in registry) there is nothing you can do.

Blackberry-type lock and wipe system

Basically the title says it all, i am looking for something that i can install so that when i have set a password to lock the device that after the 10th, ideally configurable, wrong attempt the device is hard reset and wiped. After a soft reset it should run in the background automatically.
Not asking much am i?
Sprite Terminator
If you're using Exchange ActiveSync you can wipe the device from the server.
(and also delete the storage card). Works really good.
Sprite Terminator can also wipe and some other things, but i don't like it.
It's quite easy to enter the program: just delete the registrykey providing the password
and when you start the software you'll be asked for a new password!!
I think that's a joke!

HTC Tattoo problem pattern!

Can someone help me how do I remove template does not respond to multiple gmail address and password, if there is a way to help me because my phone is really needed, and to point the phone is not root. Thank you.
I don't know if i understand what you are talking about, but did you attempt the unlock pattern too many times unsuccessfully ? If that is the case you have to do a factory reset. Maybe if you had previously selected USB debugging in the settings you can access your phone on a console with adb. I don't have the sufficient level in this domain to help you further, but there must be a way by accessing the memory to do something... Don't count on it. Sorry

Categories

Resources