those of you who've had a chance to play with TomTom Navigator on their Universal (very cool, by the way!) will know that it needs an Activation Code
this code is provided by the TomTom website - generated through some combination of a product code that is provided with your purchase of TomTom, and a device code that uniquely identifies your PDA
this (and the fact that the TomTom website only give you one activation code) means that you cant give your tomtom software and activation code to someone else for a different phone (with a different device code)
unfortunately, when i switch SD cards in my PDA, it sometimes needs me to re-enter my Activation Code. that would be fine, except it comes up with a different device code - which in turn needs a different Activation Code
took a lot of persuading to get TomTom to give me multiple activation codes - they were very suspicious! - but i've got them now, so all is well.
has anyone else had this, or is my Exec being a bit special?
Hi there,
right I have got 3 legit copies of tomtom and ithey were a pain in the ass to get working on my execs and kjam amd other wm5 devices.
I also have a duff copy that worked first time stright away has no crashes or issues. So I will hazzard you a guess which I use. I paid for the product three times and tomtom support was slow, lacking and I had to keep faxing copies of invoices to them. I get a new pda/phone every month. Its a life choice I have.
apple_power said:
...a pain in the ass to get working on my execs...
Click to expand...
Click to collapse
in it's defence, my experience has been fine - once i enter the activation code. the tricky bit is just digging out the correct activation code from the ones i have to choose from!
apple_power said:
I had to keep faxing copies of invoices to them.
Click to expand...
Click to collapse
yeah - i had to send them all sorts of stuff to convince them that i was legit. they are a little paranoid about piracy, arent they? :?
Yes indeed they are I have 3 for personal use and a further 20 copies for my employees. I wish to god they would make it easier. Oh well such is life. Glad that yours works though.
Related
It took a small group effort, but we cracked it.
Problem 1: Bug in limitation to %UREG command
First of all, on 4.20 they check to see whether the %UREG request lies within certain bounds as follows:
AT%UREG?addr,len:
if (addr < 0x3ef000 || addr > 0x3ef007) return(0);
if ((addr+len) < 0x3ef000 || (addr+len) > 0x3ef007) return(0);
Now because addr en len are both 32 bits, we can make use of the wrap (negative in effect). After the test above the maximum length will be limited to 100 (0x64).
So for instance:
AT%UREG?3FE004,FFFFFFFF
will read 100 bytes from 0x3FE004, clearly outside the range UREG was meant to be restricted to.
Problem 2: Obfuscation too easy
When executing the command above: after 74 bytes of FF, the obfuscated result code is displayed. The information needed to get the unlock code is contained twice, in the format ABCDABCDEFGHEFGH if a different letter is assigned to each unique nibble. Nibbles are first swapped to make EHAFGBCD. Then bits 3 of nibbles H, F and B are rotated left, so that nibble H gets bit 3 from F and so forth. After this, the whole 4 byte value is rotated into the lower bit. The result is the 8 digit unlock code in BCD, which can be supplied to the unlock command:
Code:
AT%SIDLCK=0,<8-digit unlock code>
Commentary:
Nice try: took us 2 person-days, probably still less than it took to think up, define, approve and program. :twisted:
The new version of The Manipulator, online now, supports unlocking of Radio Stack 4.20.
Yippee... the manipulator works for 4.20 !!!!!
Hi,
I must be a very lucky guy.
Just received my xda today (64mb ram, 4.20.00 radio version, 3.16.32 ENG rom, dated 2/13/03) and was fiddling with it about half and hour ago with the former xda manipulator program (ver 1.02) which recorded error messages and couldn't work. Then I looked into the net and found this posting just made( at 10.30 pm) and was the number 6 person to view the posting; downloaded the new manipulator and hey presto - the xda is unlocked !!!!
Only one thing though- don't see the gid lock, the imei number and the call timer entries in this new program(ver 1.1) which were present in the ver 1.02 program. Not a problem for me though as long as I could use the phone on my vodaphone sim.
Anyway, thank you so much for the hard work in cracking the 4.20; really appreciate it. Well done and keep up the magnificent work.
Cheers
Yup - it works a treat - unlocked in 10 seconds.
WELL DONE guys - thanks so much for all your input here. I now have an XDA that is truly useful and versatile.
BRILLIANT!!
Rog
Just tried 1.1 on 6 phones, all with 4.20. Five of them unlocked no problem, but one of them, for some strange reason, didnt work, it read the sid code, but the one that it came back with was only 6 digits long, and when pressinng "UNLOCK" nothing more happened. All the other codes were about 8 digits long. I tried entering the code manually, butjust came back saying it wss incorrect!!!
Anyone come across this??
Many thanks in advance
Hmmm. It could be that the code (or the second half of it) starts with two zeroes, and now that you mention it: the manipulator doesn't display (or unock with) leading zeroes.
Could you try that six digit code with two leading zeroes, and (if that doesn't work) inser the zeroes in the six digit number as follows XXXX00XX or as follows 0XXX0XXX. Tell me if that's it, please...
(Expect 1.11 of The Manipulator in the next day or two...
IMEI Change
Great work guys i'll be unlocking my xda as soon as i get the serial cable. It is a combines serial and USB cable so if anyone has experience with this not working (Ordered from Expansys thenlet me know) otherwise i'll post here to let you know if it worked or not.
I would like to know if there are any plans to make a version of the communicator that ill change the imei.
If not will commands from hyperterminal work? (Sorry if this is not currently possible I havn't been motivated to look it all up but will be if it possible to change the IMEI through this.)
I know that ther version of Hyperterminal that come with in 2k and XP is more limited that the one in 95 and 98 so would another terminal emulation program do the job better (Reflections 420 for example).
Thanks again for the great work.
How do you find all this stuff out?? How do I learn.?
Minesh
@Peter Poelman ur a blinking genius mate, it was the last method (0XXX0XXX)
So now ive done 11 phones(R4.20), and all 11 unlocked, pretty good success rate i reckon
Keep up the great work guys
Re: IMEI Change
MineshT said:
I would like to know if there are any plans to make a version of the communicator that ill change the imei.
Click to expand...
Click to collapse
Manipulator (I assume that's what you mean) does change the IMEI, but not on 4.20 phones, because we can't easily reach the memory range. In fact we have ways to do it, but we didn't yet feel like doing the necessary programming work before they lock us out completely.
If not will commands from hyperterminal work?
Click to expand...
Click to collapse
There's no easy (or medium-hard) way to change the IMEI on 4.20 phones.
How do you find all this stuff out?? How do I learn.?
Click to expand...
Click to collapse
In this specific case, we looked at the ARM machine-code in the 4.20 binary contained in S-record form in the RSU upgrade package, using IDA (a disassembler program). We then figured out the %UREG restriction was lacking. Looking at the obfuscated code we figured we could break it without looking at further code (and the phone binary code guru was unavailable for the day), so we cracked it by just staring at enough possibilities. (We could set and reset the lock using different codes with AT%SIDLCK).
Not sure hacking phones is a specific skill one can learn. Even though we're mostly still pretty young, most of us are very experienced software developers, senior security experts. Electronics, programming and reverse-engineering experience of 20-25 years in some cases. But there's pretty good texts out there that describe disassembling other people's code, understanding embedded hardware and other areas of expertise you'd need.
Reverse-engineering needs a lot of the same skills that 'forward-engineering' does. If you have the skills needed to build something, you can begin to take it apart.
Current issues with The Manipulator
The Manipulator currently does not unlock phones which were locked and then user-upgraded to 4.20. So unlock first and then upgrade. Also, please read hotentot's post and my reply above for a problem that appears when the code has zeroes in certain positions.
Both issues will be addressed in the next version, due in a few days, when I know there's no other things that need fixin'.
I have had a guts full of TomTom's crap. Their support is a joke.
I have legitimately bought all their software (paying twice for GB) I have bought their traffic plug-ins. But because an O2 repair was given a new device code I've gone 6 months without my navigation.
I got in touch & was told to send proof of purchase, I was about to upgrade to an XDA IIi so I waited, I then sent this e-mail with all my product codes & an A4 scan of my new contract :-
Please guys,
I have recently upgraded from an XDA II to an XDA IIi and although I've uninstalled previous versions of Nav3 & traffic each time I try to re-install I get a message saying ' you have not installed any voice files, I've tried zip versions too. I also need an unlock code as I've changed my phone again.
I have seen in another question that there exists an upgrade disk for versions using 2003SE which seems to have a seperate voice files, do I need this disk?
Or would I be better off waiting for Nav5 upgrade? (tho this would mean no navigation during my present 2 month+ tour of Europe)
Will the Nav3 maps work with Nav5?
I then got this reply :-
Response 13/04/2005 03.31 PM
Dear Mr R,
1. Run the installation CD and select Change voice promts, You can install from there.
2. This software has already been installed/activated on two different PDAs .To comply with the terms of the software licenece. Please fax a proof of purcahse of the new PDA. ( sorry we are unable to read the scanned attachment propelry) to +31 20 850 1097
3.Navugator 3 maps will not be Nav 5 compatible. However an upgrade will be happening in the new couple of weeks, More information will appear on our website in the coming few weeks.
With best regards,
The TomTom Customer Support Team
I'm going to try to get our Advertising & Trading Standards Board onto them, after the amount I've paid for this unreliable rubbish, it's completely unacceptable to have to be put through 'hoops of fire' to be able to use my own programme (I bought it, & all it's accessories, it's mine, isn't it?)
Sorry guys I'm ranting again! F*@%$#ng TomTom! I can't believe I'm saying this :-
Microsoft & their £40 Autoroute 2005 hve been my saviour! I just said something good about Microsoft!!!! :? :?
It may be some solace that the upgrade to TTN5 is imminent and this will effectively reset your install count. You will get TTN5, the latest UK map and a free upgrade to Maps Of Western Europe for a very very reasonable fee.
I know the install protection is a PITA but its there because earlier versions were widely pirated (although its done nothing to stop piracy of V3!).
It was exactly because of this problem that the keygens were produced, I have legit copies of tomtom 2 and 3 but still had to use third party hacks so i could use it when i upgraded roms or changed/upgraded pda.
(sorry this if this is in the wrong place , but the original device was a Uni )
I had copilot 6 installed on my MDA Pro , I sold (& formatted ) the MDA ,but kept the Card with Co-pilot on it , thinking I could use it in the event that I got a new WM device
Well , that day has now come (bought an Ameo ) and I have tried to install Co pilot on there , but it wants me to deactivate it on the old device !
I obviously cannot do this , as I no longer own the device , and even If I could get to it ... copilot was removed anyway !
Anyone encountered this problem before ?
Yes me!!
I damaged my phone and had a new one sent. I can deactivate it for obvious reasons. I've asked Copilot support but had no reply yet!
Any ideas anyone!?
Things like deactivation of software should be printed in big letters before anything else on software. I get very p....off with things like that. You pay hard earned money and if your hardware gets damaged or you forget this small detail and format your hardware some companies don't care at all. They've got your money, now it is your problem. They treat you like s*&*!
In this case TomTom gives a better customer service because you can register more than one device with the licence without deactivating it. I had once an Axim and the Universal both with the same TomTom licence that came with the Axim without any problem. There are companies that work with a concurrency policy, so you can install on different equipment as long as you don't use them simultaneously.
It is not a solution for your problem but I feel your pain! Been there, done that.
Did you activate it via email? Did you keep the activation email by any chance? Or was it done online through the hardware? If it was done via email, you could try and see if you could send and email back deactivating it. Just an idea.
Hello all,
This is the problem i have had recently.
I have a Softbank X01HT running Shaps 3.54b Rom. I then installed TomTom and ran it nicely.
So what, do you say?
Well, last night i upgraded my Softbank from 3.54b to 4.31 and installed everything over again including TomTom.
This time TomTom gave me a different Device Code which required me to aquire a new Activation Code. This really pissed me off.
Why?
Just the inconvenience thats all. Does this mean TomTom thinks i have a new device?
I had to re-contact the person i bought the software from (E-Bay) and beg for a new Activation Code. Lucky they were understanding (this time) as they charge $25.00 for an Activation Code.
This will ultimately mean that if i want to upgrade my phone in the future and need to re-install TomTom i will have to pay a fee to get the code. This is ontop of the fee that i have already paid to buy the software.
This sucks. Anyone have any ideas or suggestions?
Hello,
Mod Edit: Offering serial codes / warez is AGAINST forum policy. strike 1.
seems to me like you have just been hustled. first off, you bought tomtom off someone on ebay (sign #1). second, if at first your version of tomtom is really legal, you could have just obtained a new activation code from tomtom themselves for free, but instead the seller charged you $25 for it (sign #2). i would report this guy to ebay and to tomtom.
and pr4tik, what you mention is a keygen and is illegal, i would not offer such services here.
Hello XtreMe_G,
I am sorry I didn't realize about that. I will make sure I do not make such offers or post anything that is illegal. Should have read details before posting. Sorry for the inconvenience.
Take care,
Pr4tik
I've done a stupid thing and I don't know of a way to sort it.
Basically I think I formatted the memory card that came with the phone before putting in the replacement card I already had. Trouble is I believe the CoPilot maps and so forth were on it. Now I can't use the 15 day trial, just comes up with "error downloading" when trying to get it working. The program launches, it just (of course) won't open the maps.
I can't find a way of downloading them from the CoPilot website without paying for a licence (pointless as I want to try before I buy) and Virgin (my provider) can't help. My only hope is HTC themselves who I shall ring tomorrow.
So my question is. Has anyone else done this and sorted it? Alternatively, is there a way of downloading the map/s (legally) without having to buy the licence?
I'm doubting anyone is as stupid as me, but you never know
You can download the U.K and Ireland maps from here and copy the folder to your memory card.
https://copilotlive8.s3.amazonaws.com/8.0.0.557_UK_Ireland_Card_Image.zip
I don't know how you found that but I googled like my life depended on it last night and found nothing!
Thanks.
Copilot Licence issues
I have two HTC HD2 phones that came with Co-Pilot 8 on them. I purchased a licence for the Aus/NZ maps for my first one amd I was able to activate my original device and Co-Pilot works fine.
Purchased a second phone recently and thought I'd try the old key but it failed to validate. So I purchased a new set of maps for the 2nd HD2 but the phone now has the old key in it and won't let me activate via the new key - it comes up with Error 806.
At the moment I can't get the 2nd phone running as it just keeps rejecting all entries.
Does anyone know a registry edit to remove the activation? I think I've found something but thought I would seek more knowledgeable people!!! Don't want to have to re-rom the phone to get it going again.