How to use SD card as real Secure card? - Windows Mobile Development and Hacking General

Hi!
Could someone point me to info how can I use SD card as real Secure storage of data?
What I need to do - to use it under Win Mobile platform?
is Any 3-rd part software available?
thanks for any information.

ryhor said:
Hi!
Could someone point me to info how can I use SD card as real Secure storage of data?
.
Click to expand...
Click to collapse
I guess it depends on how you define secure?
If you mean 'nobody else can access the data if they get a hold of the card' ... there are many articles on the web discussing this issue - here's a decent (but slightly dated) one: http://www.windowsecurity.com/articles/Securing-Pocket-PC.html
There are a LOT of app's which will provide you with varying levels of encryption for your data - Resco Explorer has an option to encrypt, for example.
Use google (or your preferred search engine) to search for "pocket pc" and "security" (or perhaps "encryption") and you'll get plenty of hits.
I must point out though that we are talking about an extremely portable device. A PDA is just so easy to steal! An SD card is even more so. So if you are talking about data which really MUST remain secure ... you may well be better served by not putting it on your unit in the first place.

Hi
Actually we wanna do a simple thing.
we wanna put our application and data on SD card and allow access to this storage only to someone who have right to do it. (it isn't top secret )
SD category 3 of levels of SDMI security requirements will be fine for us.
http://www.sandisk.com/Oem/DocumentInfo.aspx?DocumentID=1344
But as I understand - there is some problem with it. It is a little bit strange - because every normal SD card has to provide this feature (and it is), but just there is no any suuport of it from OS? even there is no some 3-rd part File System Drivers?
It isn't sounds so hard to implement.

Why do I feel like we got gipped again?
I believe SD is a scam over MMC cards just like 1.44MB 3.5" floppy disks was a scam over the 720KB version... :x

SDMI
ryhor said:
Hi
But as I understand - there is some problem with it. It is a little bit strange - because every normal SD card has to provide this feature (and it is), but just there is no any suuport of it from OS? even there is no some 3-rd part File System Drivers?
Click to expand...
Click to collapse
I did some research into SDMI last year, as a part of a contract I was on. I've dug into my notes and found this:
http://www.microsoft.com/windows/windowsmedia/drm/sdksandversions.aspx#version
It may be of some use to you. Probably not ... frankly I find the whole approach of DRM to be a joke

Related

can u use sd card for program memory?

hi, I'd like to know if you can use the sd card and say partition it so that you can make your xda exec device use the storage on it as programe memory so it speeds the device up. this really is a fab device, but it really lacks the memory capacity that I had on a blue angel.
I have a 1gb sd card and don't mind loosing any storage space to accomplish this. if there isn't a way, can someone try and find a reg tweek for this....
anyway, I leave it with you...
cheers.
joey jojo
I think this is something which should be taken as a clue by developers who make programs such as Memaid, Pocket Mechanic, etc and include this as a a feature. Maybe the concept will be something similar to the Virtual Memory on a regular windows pc.
You are absolutely right, I too really miss the shortage of program memory. I can never open a really complicated web page with lots of images in Netfront before I get the dreadful warning that I have run out of program memory.
I hope some developer picks this up and incorporates this as a feature. I am sure this will increase his sales many many times.
Regards
you can put your internet explorer's cache on the sd-card...
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache]
change cache from '\windows\profiles\guest\temporari internet files' to '\SD_MMCard' to achieve this...
however you'll notice that it only slows your device incredibly down if your SD-Card is not set up right
see also http://forum.xda-developers.com/viewtopic.php?t=50301
There is just no way a third party program can add this. On the windows mobile team blog, there's a post from a few months back talking about doing virtual mem on the SD card, and basically, it's just not in the OS and won't be until at least WM6, and third-party programs can't do it.
JasperJanssen said:
There is just no way a third party program can add this. On the windows mobile team blog, there's a post from a few months back talking about doing virtual mem on the SD card, and basically, it's just not in the OS and won't be until at least WM6, and third-party programs can't do it.
Click to expand...
Click to collapse
Those are very disappointing news...
Speaking of memory management and the OS itself..I really wonder during the development of WM5, did they try to come up with a better OS, or just building up upon WM2003.
Reason why I say this is my Universal crashed yesterday, and a look into the "Memory" panel in the Settings showed the OLD memory management screen along with the sliders and all... :lol:
Looks like the developers got lazy and just placed a panel on top of the old one :lol:
Ehh.. You guys want to be buying new SD cards every third month?
Flash memory like the SD cards have only a limited number of write operations before they fail.
Using them for storage is good, because you don't write to the cards that much.
Using them as memory would totally screw up the card in a rather short time.
And, I think using SD card for program memory would result in a slower application, because of the read/write speed of the SD compared to the RAM..
--- EDIT ---
3 months is just a figure of speach..
I have no idea of how much time it would take before failure occurs..
It would probably result in slower and slower performance, because some sectors would be worn out faster than others..
What you say about the writes before failure is right, but when you are faced with a £300 PDA that has the same amount of RAM as my little finger, you have to do something.
SD cards are cheap enough these days, and money grows on trees. I'd rather be able to leave programs open and not worry about how much it will slow the machine down to have more that three big apps running than I would be about coughing up for a new SD card every 3 months.
I have seen a 4GB card on Ebay for less than £80, Tescos sell 1GB for £30 these days.
The great thing about Tescos is their guarantee. You buy the card, write it to death, take it back for a full refund, no questions asked.

SwellDisk 300% Enlarge Memory Card WM5 1.8.6

Hello everyone..
I know this has been talked about befor but i want to have all info about this in one place.
Mods: move around as you wish.... Sticky?
I was looking throu pocketgear and found this : http://www.pocketgear.com/software_detail.asp?id=19899
There is no Demo to download so i thought.... take the risk.
i bought the software and 1 week after i got my reg code too unlock.
I have a 2GB SDcard, put it in my pocketpc ( Orange SPV m5000 , HTC Universal )
i used SewlklDisk and now have 5.8GB of free space.
With Card Export ( software to transforme your pocketpc into a usb drive ) i conected to my pc and..... 5.8 GB USB device detected.
hvent filld it up yet, but RescoExplorer and internal storage viewer indicate also 5.8GB of usable Space.
Here is another one...: http://www.pocketgear.com/software_detail.asp?id=22364
There are some Slowdowns, but only when saving to the SDcard, and only minimal.
If anyone else has this sofware ( or not ) tell me about your expiriences and thoughts..
Try fill it up to over the original capacity. Thats when problems appear apparently....
btw. something similar was here with win95 - doulbe space,& u were able 2 use aprox 60-70% of capacity that showed. not worth of money
In fact, there were a bunch of these programs for Windows 95 way back when. Turns out they were all minimally useful at best and, as I recall, a couple of outfits that churned out "memory doublers" were successfully sued because they did absolutely nothing.
After all these answers, I supose that the experience says that it´s not a good idea to use this program to enlarge the memory? Or is there anyone who have a good experience whith this program??
"Enlarge" seems to be not 100% correct word here.
You may "enlarge" the displayed storage capacity, but real capacity would be not as high, so you'd end up deceiving yourself...
The idea of compressing data written on disk comes up quite often, and then larger disks destroy it. Then again the same occurs on the next level.
I personally prefer the "honest" capacity. There may be applications using the "sparsely filled" files, where the compression would be beneficial; but all round, the gain is normally 1.2-1.5:1 on average files, and might not be worth it, considering increasing read/write times... MP3's or MPEGs, even worse, are already compressed and are virtually incompressible as such -- so if you think more songs will fit on that "5.8GB" card, ... think again
So, I'd just buy a double capacity device. But, tastes differ and your mileage, as Americans say... may vary.
EastExpert said:
"Enlarge" seems to be not 100% correct word here.
You may "enlarge" the displayed storage capacity, but real capacity would be not as high, so you'd end up deceiving yourself...
The idea of compressing data written on disk comes up quite often, and then larger disks destroy it. Then again the same occurs on the next level.
I personally prefer the "honest" capacity. There may be applications using the "sparsely filled" files, where the compression would be beneficial; but all round, the gain is normally 1.2-1.5:1 on average files, and might not be worth it, considering increasing read/write times... MP3's or MPEGs, even worse, are already compressed and are virtually incompressible as such -- so if you think more songs will fit on that "5.8GB" card, ... think again
So, I'd just buy a double capacity device. But, tastes differ and your mileage, as Americans say... may vary.
Click to expand...
Click to collapse
Installing this disables the Visibility of Extended Rom i mean if any one has unlocked Extemded rom & installed some applications in the EXT Rom.
Any solution please ,i even wrote to the CEO of the Swell disk org no responce. Cheers, T
hmmm, sounds too good 2 b true.
can those who have this software test by filling up their cards close 2 their max. level & leave only a few MB's? & then try accessing d files & software stored on d card. this way, we'll know if d app really works.

eWallet vs CodeWallet Pro

Thinking of getting one of these, any one here have experience of these two apps and any recommendations ?
Thanks.
Hello,
Actually I have pretty much experience with CodeWallet, eWallet and FlexWallet. I've been using eWallet for many years and recently switched to CodeWallet. There is a serious security issue with eWallet. It appears the Category names are in plain text unencrypted format !! Altought the actual cards are encrypted, I wouldn't be so happy for a thief to be able to see what I am hiding inside (i.e. Bank Accounts etc..) Sometimes the category name itself is something you would want to protect. That's why I switched over to CodeWallet even though CodeWallet provides only 128 bit encrptiong while eWallet provides 256 bit, though again with no category encryption.
MOBILER
Thanks for pointing that out.
I agree with you , eWallet is now off my list.
The other option I am looking at is instead getting Sentry 2020 which creates an encrypted mount. Then just have my sensitive info in Excel spreadsheets on that mount encrypted. Perhaps the encrypted mount can be my external storage card.
http://www.softwinter.com/sentry_ce.html
http://www.geek.com/hwswrev/wince/sentry/index.htm
Any opinions on this ?
Gut feeling , CodeWallet seems best all rounder so far.
hey linuxgeek
from my own personal experience, I've used many encryption programs and found all to have flaws except for this one: CryptoStroage which I eventually purchased.
It's key benefits is unlimited size - most other programs have limits of a few Mbs. with this program I can mount a few houndred MB volume on my SD Card where I put all my scanned documents in and view them with acrobat reader.
Another key benefit it has a desktop version so you could use the same volume to mount on your desktop pc. very neat, instead of going to the ppc each time. It is the most fast I've tested and is super easy to use. It looks like another SD card storage.
I think I've tested Sentry 2020 and found it was inconvenient for me.. but i'm not sure.. I may have not tested the recent version so I don't know. but I see Sentry costs $50 and Cryptostorage costs $20.
Let me know if there's something else i can help you with.
Great tip thanks for that.
Cryptostorage looks fab , definately going to get it.
Do you think its worth getting CodeWallet also or shall I just get Cryptostorage and like metioned earlier keep all my info in excel/word files inside the safe ?
Thanks for all your input.
Looking at Cryptostorage website it doesn't mention it works with Windows Mobile 5 .
Are you or any one using on a Universal with WM5 ?
LinuxGeek said:
Looking at Cryptostorage website it doesn't mention it works with Windows Mobile 5 .
Are you or any one using on a Universal with WM5 ?
Click to expand...
Click to collapse
Hey,
Yes it works on my Universal just fine. I found it to be the most convenient program among the encryption programs.
I do suggest getting Codewallet as well. It is not convenient to mount a volume each time, then fire up excel if only to check for a password. I personally have all my passwords, maybe a hundred stored with Codewallet and I also enjoy the Desktop version, which is easier to use when working on the desktop PC. I use my wallet file on the Synced My Document folder and then the desktop version and the PDA version are synced with the latest wallet file each time.
Thanks for reply.
I am moving towards getting eWallet and using cryptic category names because of its 256bit encryption.
I am definately going to get Cryptostorage too now that u confirm it is fine under Universal.
Thanks for all your input mate.
Anyone used cryptocard? I've been thinking of changing from myCodes Lite to this. myCodes seems OK but is a little slow.
Anyone ever wondered, how comes that CodeWallet can sync your Desktop/Mobile wallet without any password entered?
I guess they encrypt the data by record and keep a timestamp unencrypted. But this way if you often use the same login name and have many similar forms (Username, Login, URL), an attacker could get the password somehow, I think, since there is always the same beginning of the records.
It's something like security vs. sync-without-password-prompt. Where as 128bit RC4 isn't "strong" encryption nowadays anyways. I'm a bit concerned about the *real* security of this app...
Cheers,
-mARKUS
CodeWallet insecure
CodeWallet now is a NO GO for me. Found some patched EXE-file of its Desktop-version, where you can enter *any* 3-digit password to open your file. This is not security, this is INsecurity par excellence.
Cheers,
-mARKUS
UPDATE:
- Windows Mobile Security Software fails the test (info about header-copy to open files)
- mininova (first mention of this security flaw)
- PxDxA (detailed infos about this flaw)

[req] System Utilities

Hi
Is there any program for Diamond (or WM6.1) like drive defragger, startup manager, registry defragger or registry cleaner?
TNX
I recommend SKTools...also MemMaid can be an alternative...
Great!
TNX
With regards to de-fragging, I might very well be wrong, but as far as i'm aware, de-fragging makes no difference to devices with flash storage - because the 'drive' is solid state, there is no (or at least always the same) 'seek' time like there is with Hard Drives and Optical Storage (CDs). So the phone can access any part of the flash storage at the same speed as any other, unlike HDs, where if data is spread across the drive, it needs to physically search for it.
If anything, I think de-fragging shortens the life of the flash storage, as it has a limited number of read/writes in its lifetime, and de-fragging 'wears it out' more quickly.
As I said though, I could be wrong - have a good thorough Google to be sure.
_JuSteR_ said:
Hi
Is there any program for Diamond (or WM6.1) like drive defragger, startup manager, registry defragger or registry cleaner?
TNX
Click to expand...
Click to collapse
I like pocket mechanic
nice
I recommend SKTools...
Click to expand...
Click to collapse
For me the best system tool.
GurneyHalleck said:
With regards to de-fragging, I might very well be wrong, but as far as i'm aware, de-fragging makes no difference to devices with flash storage - because the 'drive' is solid state, there is no (or at least always the same) 'seek' time like there is with Hard Drives and Optical Storage (CDs). So the phone can access any part of the flash storage at the same speed as any other, unlike HDs, where if data is spread across the drive, it needs to physically search for it.
If anything, I think de-fragging shortens the life of the flash storage, as it has a limited number of read/writes in its lifetime, and de-fragging 'wears it out' more quickly.
As I said though, I could be wrong - have a good thorough Google to be sure.
Click to expand...
Click to collapse
Well,
i hear that a lot too,
but is there ANY person that, due to massive flash usage, got to the point it didn't work anymore?
USB sticks and SD cards count also

encryption recommendations

what program/method does everyone recommend for encrypting and password protecting a folder or set of files on a memory card? I would like to carry files with confidential info but dont want anyone to access them should i lose my phone.
excuse spelling. posted from titan.
Take a look at http://www.freeotfe.org/. There's a windows mobile version as well as the desktop versions.
Secubox
Greatest encryption software for ppc, google it.
thanks guys. will give them a shot.
jimnutt said:
Take a look at http://www.freeotfe.org/. There's a windows mobile version as well as the desktop versions.
Click to expand...
Click to collapse
Wow, thanks for the post. This is free and it seems to work very well. Very small memory footprint, no noticeable delay running video files, fast copy, basically it looks just like another mounted SD card, (and that is running the mounted vol from the real SD card!). The only issue I have seen is a slightly slow mounting of the secure volume. I can live with that for sure.
I run TrueCrypt on my PC's (no PDA version), but now I may switch my PC's over to FreeOTFE just so I can have a common solution on both.
Just to be fair, I will look at SecuBox, but for $40 I think it will have to have have some very good options over FreeOTFE before I can shell out the money.

Categories

Resources