Interesting find... xml? - Atrix 4G General

After looking at a list of motorola cloud servers I decided to mess around with them in cmd and tracert and pingtest them. This led me to entering IP addresses into my browser, and this led me to discover weird .xml documents listed on the cloud sites.
I discovered that there were 3 types of .xmls on the cloud servers regulating "crossdomain".
Type 1 (365bytes):
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" secure="false"/>
<allow-http-request-headers-from domain="*" headers="*" secure="false"/></cross-domain-policy>
Type 2 (550bytes):
<cross-domain-policy><allow-access-from domain="*.motorola-2.com"/>
<allow-access-from domain="*.motorola.com"/>
<allow-access-from domain="*.motoapi.com"/>
<allow-access-from domain="*.mucloud.com"/>
<allow-access-from domain="*.brandup.net"/>
<allow-access-from domain="*.socketcloud.com"/>
<allow-access-from domain="*.tcpcloud.com"/>
<site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>
Type 3 (226bytes):
<cross-domain-policy>
<site-control permitted-cross-domain-policies="none"/>
</cross-domain-policy>
Here is the list of cloud sites, what is known to be retrievable from them, and what xml the site has (thanks samcripp for the list).
Master-lab.blurdev.com / type 1 xml
this server has the HKTW(dl)
master-demo.blurdev.com / sends to yahoo search
nothing discovered yet
master-dev.blurdev.com / sends to yahoo search
nothing discovered yet
master-qa1.blurdev.com / type 1 xml
nothing discovered yet
master-qa2.blurdev.com / type 1 xml
this server has 4.5.40(dl att), 45.2.12(dl bell)
master-qa3.blurdev.com / type 1 xml
this server has 4.5.91(dl att)
master-qa4.blurdev.com / type 3 xml
nothing discovered yet
master-staging1.blurdev.com / error 404
nothing discovered yet
master-sdc1.svcmot.com / type 1 xml
nothing discovered yet
master-blur.svcmot.com / type 1 xml
this server has 33.99(not dl bell)
master-bqa1.blurdev.com / type 2 xml
nothing discovered yet
master-bqa2.blurdev.com / problem loading page
nothing discovered yet
testcloud01-sdc1.blurdev.com / type 2 xml
nothing discovered yet
What I find interesting is that all of the sites with type 1 .xml either have an update or have nothing discovered yet. Could this mean all servers with type 1 .xml have some sort of OTA on them, or will at some point in the future? Do they perhaps have French, Brazilian, or Mexican OTAs?
The type 2 .xml cloud servers have nothing discovered yet. However, if you take a look at the sites they allow to have access (in their .xml code look at the beginning of the post) the only sites listed are some motorola ones, and some randoms. The randoms that aren't motorola all lead to http://brand-up.com/ which is some sort of advertising/marketing group. The motorola ones lead to.. motorola sites. Maybe these cloud servers are used somehow for their web content? I'm not entirely sure.
The type 3 .xml sites seem weird to me. I can't understand .xml, but from what I see it has no site-control cross domain policies. Whatever that means.
Anyways, for all I know, this is hocus pocus, and I'm an idiot. So let me know what you think. If you know what this .xml text means, enlighten me. If you think this has helped you unlock the key to the universe, thank me. If you think I'm mentally challenged, don't flame too hard, I spent a lot of time typing this.
Cheers.

reserve op

Related

kSOAP2 and custom string types, or alt. engine?

Hi All,
I'm trying to access a SOAP service (I know, why can't people provide REST?!) from my android app.
I found ksoap2 and it looks nice and simple, I've imported the lib into my project (eclipse fwiw) and it all appears to be functioning normally.
However, the SOAP service I'm attempting to use is extremely picky.
It expects string data ("SAE" or "SHY" for example) named "crs" in a "type" of "CRSType". I can not figure out how I can get kSoap2 to do this. If I send the data as type String, I get a soap error back from the server of "no crs specified".
I have tried setting the request property to a java type of CRSType implementing CharSequence and a toString() method that returns the data. Wireshark shows me it's still reported to the service as "d:string".
I tried creating a custom data type with KvmSerializable and it nested it, and called the data "d:anyType" containing a normal "d:string"...
I'm starting to think I should craft the xml myself, but it's frustrating me and I figured I'd see if anyone here had any ideas.
ETA: Feel free to suggest other libs that might be suitable and as easy-to-use as kSoap2.
BTW, it's an opensource app, probably won't reach market but is on googlecode under droidtransport if anyone wants it (no webservice code committed as so far it's not working!)
TIA
--
Martyn

App Developer Bidding

Is there a website where you post what you want and developers bid to do the work? I've used similar services before for html / php / java and was wondering if it was available for android apps???
sites like guru.com and rentacoder.com you may be able to find people.
Do you mind explaining the project"s" your looking at having done. Might find some people here who will be able to help and assist
I thought i saw something similar on www.anddev.org
Sluzpuppet said:
sites like guru.com and rentacoder.com you may be able to find people.
Do you mind explaining the project"s" your looking at having done. Might find some people here who will be able to help and assist
Click to expand...
Click to collapse
Here is my thought (remember, I'm not a developer):
A super basic app: a single icon (like wifi tether) that opens a predefined url that has users info appended to the end as arguments, see example below:
Code:
mydomain,com/page.php?name=mike&id=1234&color=blue
Users info are just text fields with no validation and are setup from the menu button.
This would be a customizable app. A person could modify the app by adding (changing) three files
icon image
url.xml - contains the base url and perhaps the app name
user.xml - contains the users data fields
above example users.xml would add 3 setup fields for name, id, color
by changing the url xml file, you could setup app to piont to any domain
by changing the users.xml, you could setup any number of arguments
by changing icon, app image would match users preference
Ideally it would be best if it could have multiple occurances of the app (maybe just app name being different would work) because I may want it for mydomain.com any you may want to use it for yourdomain.com
Hope this makes sense.

Application idea - camera (read barcode), and send data to ip address

I want to create an application or two, and the first one I want to do must be able to:
using a "chart", assign a numeric value to various barcode symologies... 1 for UPCA, 2 Code 39, etc
Read a barcode with the camera
"decode" the barcode symbology and create a value for the scanned bc
Cache the data from the decode and symbology
open a text file
Write that barocode symbology value to a file
Write that barcode data to the file on the phone or sd card
save the change
Send the file to an ip address and port that is configured by the user.
What I can already do with terminal emulation apps (in Windows or Android apps) is log into the ip address of a embedded wireless device, and configure the device through a console. I would like to send it a script instead. By scanning a barcode from a scanboard, I could take a value from that barcode and inject it into a file that is already mostly scripted, but with the value of the barcode as the only part that is missing. Once scanned, then written to the file, it could automatically or through a button press, send the file to the ip address to configure the device.
Since some barcodes might be code 39, upca, code 128, etc, each of those barcodes must be programmed into my script. So if I scan a code 39 barcode, the script might call that a value of 2, and then I place that 2 in my script along with the data in the code 39 barcode. With 2 variables always in play, type of barcode and data from the barcode read, that's what always has to be in the script.
Now for the hard part, at least for me. I have been working with App Inventor, and found that they do not have a TCP module, and do not believe that AI is where I should be to make this app. My question is for anyone familiar with programming TCP/sockets, or whatever other networking name it would be called, and another form of programming for the creation of this type of app. I am already working in Eclipse, and the learning curve for me is high because of the lack of time I am able to spend with the beast of a utility. As much as I would love to build this app myself, I would consider paying someone to create it for me as long as I could have the source and continue to modify it after the fact and call it my own. PM me your price, but please remember that I have an ex wife that is already bleeding me to death and that I would prefer to work on this app myself, so I am more interested in a nudge or push in the right direction to create the app.
Long of the short, it's a scanner app that allows me to inject the data read from the barcode into a text file and then send the file to an ip. if I could find a telnet app (ip and port configurability) that allowed me to send text files, I would be partially there, so instead I strive to create.
Anyone?
Thanks in advance,
Standupdad
There should be lots of tutorials on TCP/IP and URL connections you can probably google up.
That's actually the easier of the two tasks. However for scanning the barcode, you're also in luck: zxing's library for barcode and QR code scanning is opensource (and it's excellent). It will take a bit to learn how to integrate it into your app, or you can have the users download the BarcodeScanner app and just communicate from your app to the Bacrode scanner app with it with Intents.
http://code.google.com/p/zxing/

[XAP][Source] Webserver v0.6.0 (File uploads)

Version Alpha 0.6.0 is now available
I'm back! Not dead yet, I promise. This is actually a relatively small update in terms of user-facing features, with only one really big new thing - support for file uploading - but that's a lot bigger than it might sound. It's the first write support I've implemented in the server, and it also required some fairly massive updates to the HttpServer component (support for binary requests, for POST parameters, for MIME multipart parsing). These will be built upon in forthcoming versions to add support for things like registry editing, in-browser file viewing (possibly editing), and so on. There are also a large number of small fixes and improvements that I've made over the last two-weeks-shy-of-a-year, which should make the server faster, more robust, better able to support concurrent connections, and lighter on device resources. Finally, while the app still targets WP8.0 and should run on 8.0, it now is designed for 8.1 compatibility (especially the AllCapabilities version).
Previous update (0.5.6): This version is mostly bug fixes and UI changes. The biggest changes are: clearer display of weird registry data types, the server now consumes fewer threads (it used to spawn them with wild abandon) and does faster string compares, the app version is now shown on the phone, error pages are now better, if you launch the app without a WiFi IP address it'll offer to take you to the WiFi settings page, connections are no longer closed as soon as the app starts sending a response, and the server now defaults to using the Connection: keep-alive header, with a two-minute timeout. The last change, combined with the second-to-last, should hopefully both do away with the tendency to have the app fail to display a page. However, I shouldn't have *needed* to switch it to "keep-alive" - using "close" should have worked - but it still veeeery occasionally would kill the connection early. Agh. Anyhow, this is better in the meantime.
DevDB offers me a support / Q&A thread. Please use that thread to ask questions; don't PM me unless it needs to be kept private for some reason!
ISSUES ON WP8.1:
It *should* work to deploy the app with "Application Deployment", but if you have a problem try deploying with "Windows Phone Application Deployment 8.1" instead.
Problems have been reported in the past when the app is installed to the SD card. It's small, though; putting it on internal storage shouldn't be a problem.
RESOLVED The AllCapabilities version included a few capabilities that were present in 8.0 but removed in 8.1. Those capabilities have been removed; the AllCapabilities version now deploys and runs on capability-unlocked WP8.1 phones.
IN CASE OF OTHER ISSUES: Please provide a *detailed* error report - what phone and OS version you have, what hacks you've installed, what Webserver version you're running, what you do to get the error to occur, and exactly *what* occurs - and I'll fix it as soon as I can! There's a DevDB section for posting bug reports, and you can also use CodePlex if you want.
I finally implemented file upload! I'll work on getting more stuff like that (file delete, possibly file rename/move/copy, various registry edits), hopefully soon! I also hope to add support for different areas, like an "Applications" path, a "Processes" path, a "Services" path... eventually. Many of those are really hard without good privileges. I'm also looking at moving the server to a background process and making the app just a control UI for it, adding support for authentication and/or HTTPS, adding some stylesheets to the web UI, adding caching, and much more. I did finally implement Connection header support.
Once again, the XAP is published twice. One is a fairly standard XAP that any phone can sideload, and the second has many exotic capabilities to enable viewing of (and writing to) slightly more of the file system and registry. The standard XAP has had its list of capabilities expanded to pretty much all of them that can be used without interop-unlock. The high-capability variant requires not just interop-unlock, but the additional capability-unlock hack available in the interop-unlock thread. The AllCapabilities version now works with WP8.1; sorry for the long delay on that!
An item of note: the AllCapabilities version (or either version, on WP8.1) can open other drives in the file system. On phones with an SD card, it is mounted at D: and you can browse it as normal. Credit to @hjc4869 for this discovery!
DESCRIPTION: This is a simple webserver app which can enumerate those files that are in folders readable from the sandbox, can download and upload (access permitting) files, can browse the registry, and can display the contents of registry values of any type. It runs on WP8.x (not yet tested on W10M). It is a spiritual successor to the Functional Webserver / WebServer (Mango) projects from WP7. This version is still missing a lot of functionality as I decided to implement it from scratch, but it is advancing swiftly. Note that there's no access controls implemented; use it on a public network only at your own risk!
Instructions are simple: sideload the XAP, connect to WiFi (required), run the app (called "WebServer Native Access"), point a web browser (on a PC or phone that is also on that local network) to the URL that the app displays. You should get a basic index page. Click on a Filesystem or Registry link to begin browsing the phone. There's a textbox near the top of all filesystem pages, type in a path there (for example, "C:windows" with no quotes) and hit Enter or click Get Files. You'll see a list of the contents of that folder. Click on a file to download it or a directory to open it. There's also a box for uploading files, one at a time, to the current directory. Navigating the registry is similar, except you'll need to specify the registry hive and then the path from that hive (or no path, to access the root of the hive).
As of v0.6.0, uploading files is finally supported! Other modifications (editing files, creating, deleting, or changing registry keys or values) are currently not supported. They will be "soon" although my personal testing suggests that basically the whole registry, and most of the file system, is off-limits for writing unless you use restricted capabilities.
You might see an error code (error 5 is "ACCESS_DENIED", you'll see it a lot; I should replace it with an appropriate 403 or whatever). Or you might see a status 500 message because of an exception in the server. Or the server may just crash (hopefully not so often anymore...). I'm making it more resilient, but there are still bugs. Please report any previously-unreported issues you find, including how to reproduce them, and I'll fix them if possible.
Also feel free to request features or changes; I'll implement them if reasonably possible. The app is a mixture of C++ and C# code; I could probably have done it all in one or the other but wanted to have a C++ component in case I ran into something that wasn't available in C#, and although it probably would have saved some time, I decided that hacking up a web server in C++ was maybe not the best idea.
The source code is on Codeplex, at the following projects: https://wp8webserver.codeplex.com/ for the server and the app (C#) and https://wp8nativeaccess.codeplex.com/ for the native access wrappers (C++). You may have to fix up the reference paths to get the C# component to see the C++ component correctly. The code is reasonably well documented, but let me know if you have any questions. Permission to re-use the code or components is granted under the MS-PL (Microsoft Permissive License) as posted on Codeplex.
Go forth and find cool stuff!
Version history (see the git commit logs for more detail:
07 July 2013 - 0.2.0: Initial release, FS only, 920 downloads (source: 652 downloads)
14 July 2013 - 0.3.2: initial registry, HTTP server and web app encapsulation, source on Codeplex, 225 downloads
0.3.3: bugfixes, 454 downloads
0.4.2: basic registry values display, 86 downloads
0.4.3: bugfixes, 326 downloads
0.4.6: multistring registry values, bugfixes, updated libraries, first AllCapabilities version (950 downloads), 453 downloads
25 Oct 2013 - 0.4.8: binary and long registry values, formatting and bugfixes, 451 downloads AllCaps, 201 normal
22 Dec 2013 - 0.4.9: all registry value types, better threading, proper resume, remembers port, 97 downloads AllCaps, 53 normal
24 Dec 2013 - 0.5.0: background operation using Location APIs. Downloads: 1011 AllCaps, 963 Normal
20 Jul 2014 - 0.5.1: More capabilities, better navigation. Downloads: 358 AllCaps, 352 normal
07 Aug 2014 - 0.5.3: .REG export, better traversal, bugfixes. Downloads as of 0.5.5 release: 260 AllCaps, 164 normal
10 Oct 2014 - 0.5.5: Bugfixes and back-end work. Downloads as of 0.6.0 release: 140 AllCaps, 113 normal
25 Oct 2014 - 0.5.6: Bugfixes and UI tweaks. Downloads as of 0.6.0 release: 1720 AllCaps, 1334 normal
12 Oct 2015 - 0.6.0: Binary requests, file uploads, bugfixes.
XDA:DevDB Information
WebServer Native Access, Tool/Utility for the Windows Phone 8 General
Contributors
GoodDayToDie
Source Code: https://wp8webserver.codeplex.com/
Version Information
Status: Alpha
Created 2014-10-17
Last Updated 2015-10-12
I'm going to use this space to mention something that's pretty cool:
J. Arturo of http://www.komodosoft.net is using a modified version of the HTTP server that powers this app in the ShareFolder app (http://www.windowsphone.com/s?appid=e2b9c82e-eaa1-4a3b-9d4a-8a2933a8bdb4) to support opening video files directly from Windows network shares! This was done to work around a limitation of the WP8 media control: it can only source from an isolated storage file or a HTTP URL. By running a server in the background and streaming the video file through it, and pointing the video player control at the localhost URL, it becomes possible to play the file on the phone without first copying it to the app's isolated storage. A very cool way to solve the problem! Also, reviewing the changes that were made to the network code of the server pointed me toward those threading fixes I made that have hopefully much improved version 0.4.9.
Please note that the updated version of ShareFolder with this feature may not yet be available, although it should be soon. It is a commercial (paid) app, but the author sought and received permission to use my code (although the license does not require such permission be received).
What exactly is the problem with sockets? I am battling myself with sockets atm too, maybe we can share knowledge?
Strictly speaking, the problem was with the phone's limited subset of the Sockets API forcing me to access it through functions I wouldn't normally use (asynchronous everything, SocketAsyncEventArgs and lambdas and AutoResetEvents and so on everywhere...) but I've got a pretty good handle on it now, at least for the System.Net.Sockets.Socket and its friends. The new .NET 4.x ones (using the async keyword and all) are in a different namespace; I didn't mess with them. They are more abstracted from the Bekeley sockets interface that I'm used to from C, but they are also (supposedly) more user-friendly, especially if you don't feel like writing all your own thread management code (and in fairness, I should re-write the webserver's threading to use threadpools; they're better for this type of work).
If you want to ask questions about the topic, I suggest starting a new thread (possibly in the Q&A subforum, although it's also dev related...) and I'll answer if I can.
GoodDayToDie, just an idea: how about sharing your source code via CodePlex or GitHub?
Oh man, this is pretty nice! GoodDayToDie does it again!
So far, I can read \Windows, the current install folder which you access just by typing "." with no quotes and the current application folder by typing ".." I can access the .dlls, .winmd and AppManifest.xml from the current install, but from everywhere else, it goes boom. This is a great step towards something awesome though!
EDIT:
I was wrong. For some reason, when you click on a folder it's trying to "download" it, rather than chdir. I can get pretty far into the Windows directory.
THAT's what you meant by "Click on a file (note: there's no current way to tell the difference between files and folders) to download it.
You might see an error code (error 5 is "ACCESS_DENIED", you'll see it a lot). Or you might see a status 500 message because of an exception in the server. It's getting a lot more resilient but there are surely still some bugs. ".
If you see a folder, just type the full path to it instead of clicking on it and you will be able to read the contents.
ANOTHER EDIT:
I just found a file inside of the \Windows\System32 directory named [guid].devicemetadata-ms (It's easier to just search for "devicemetadata-ms"). It's a cab file with some metadata about WP8 with a sign.cat and packagesign.cat file in the archive. I don't know what these files could potentially be useful for.
New version in a day or two (busy tonight). Features I plan to implement (not necessarily in the next version or at any particular time):
File upload (IsoStore and, of all crazy things, install directory are writable. I think I'll put a flag on each FS page that says whether the current dir is writable...).
File deletion (where possible, of course).
File and Directory distinction in the listing (clicking a dir should open it, not error out).
Filesystem index page with links to folders that can be accessed successfully (since the root isn't readable).
Some more file info (size, probably attributes, possibly permissions).
Possibly an option to preview a file (as plain text) without downloading it.
Some kind of background mode (the server uses minimal resources when not actively servicing a request, so I'll see if I can get it to work in the background, perhaps by abusing the music transfer agent...)
Some kind of offline mode (at least basic file browsing within the app, as an alternative to using the web interface, though I might just make a second app for that).
Source code changes: separate the server code from the webapp / phone app code (move it into its own project).
Source code changes: move to a hosted version control service, probably CodePlex (good suggestion sensboston).
Maybe add an icon and such...
Any other suggestions?
I also want to try experimenting with various non-standard capabilities and see if I can get access to more of the system . I've already added the ability to access removable storage, but I've also found a bunch of really weird and frequently undocumented capabilities in the OS's policy configuration files, and I need to look into those... The interesting (and possibly the uninteresting) ones are probably blocked for unsigned sideloaded apps, but it's worth checking on anyhow.
Yeah sorry, I should have been more explicit about clicking on dirs. not working in 0.2.0. Also, it's "unofficial" but if you check the URL bar you'll see a URL parameter called something like "pattern" (by default, it's *) and if you change that, you can filter the results. For example, "foo*.exe" (note: no quotes!) will search for EXE files whose names start with "foo". Among other uses, this makes it a lot faster to load large dirs like System32. This will be added to the UI at some point. Also note that URL decoding is applied correctly to querystring parameters (Probably already noticed with the path sometimes written using %5C for \) so you can add special characters that way if needed, though currently any of them but \ will probably just cause an exception.
...
Actually, does this filesystem support Alternate Data Streams? If so, you should be able to download them by appending a : and the ADS name to the filename in the download URL...
OK, so that was a new version in five days. Sorry, stuff takes time.
The source code is now on Codeplex. The native access portion is at https://wp8nativeaccess.codeplex.com/, and the web server portion is at https://wp8webserver.codeplex.com/. Both are licensed MS-PL and use Git for version control. The full XAP is also available for download from the Webserver project on Codeplex.
GoodDayToDie said:
OK, so that was a new version in five days. Sorry, stuff takes time.
The source code is now on Codeplex. The native access portion is at https://wp8nativeaccess.codeplex.com/, and the web server portion is at https://wp8webserver.codeplex.com/. Both are licensed MS-PL and use Git for version control. The full XAP is also available for download from the Webserver project on Codeplex.
Click to expand...
Click to collapse
You are a god. I'll be sure to post my findings .
Hmm. When I first load up WebServer File Access then access from my laptop, I get the main page then the program crashes on my phone. It seems to hold a lock on to the socket as i can no longer access port 9999 from any other device when re-opening the app. I can access it again when I reboot, but the same thing happens.
EDIT: I think it may be due to the WiFi at work... it's junky. I'll try again when I get home. I was just able to browse some directories.
Wow, that's completely unexpected... I can beef up the error chacking and handling around the listener port though. That part of the code is really straightforward, so I actually haven't hardened it very much. I can also put in a Finally block to close the socket and/or mark the socket as re-usable so that other apps (or the same one again) can listen on it in the future.
I also plan to add support for setting your own port, but that doesn't solve the underlying problem. I'll put in more error reporting as well, to enable better debugging. Thanks for the report! Always good to have users report problems so I know where to prioritize fixes.
GoodDayToDie said:
Wow, that's completely unexpected... I can beef up the error chacking and handling around the listener port though. That part of the code is really straightforward, so I actually haven't hardened it very much. I can also put in a Finally block to close the socket and/or mark the socket as re-usable so that other apps (or the same one again) can listen on it in the future.
I also plan to add support for setting your own port, but that doesn't solve the underlying problem. I'll put in more error reporting as well, to enable better debugging. Thanks for the report! Always good to have users report problems so I know where to prioritize fixes.
Click to expand...
Click to collapse
I tried the app at home and it DOES crash on the first hit of the home page, but I'm able to open it up again and it works fine.
The new version 0.3.3 should be more rebust; try it and let me know if you still have issues. If you do, let me know what the exception message is (and any other info you can provide) and I'll try to track it down.
Downloading really big files should also work now. The app will read and push files in smaller chunks (the code to do this existed in the NativeAccess library before, but wasn't used).
a simple SDK?
Dear Sir
Will it be possible for you to make some sort of SDK from this so other developers can integrate this into their apps and enable browsing isolatedstorage?
Sorry if it is a stupid question.
Bruce_X_Lee said:
Dear Sir
Will it be possible for you to make some sort of SDK from this so other developers can integrate this into their apps and enable browsing isolatedstorage?
Sorry if it is a stupid question.
Click to expand...
Click to collapse
With the restrictions in permissions, this app only allows browsing of the app's isolatedstorage locally. You are able to use the IsolatedStorage API within your app to browse files and directories already.
snickler said:
With the restrictions in permissions, this app only allows browsing of the app's isolatedstorage locally. You are able to use the IsolatedStorage API within your app to browse files and directories already.
Click to expand...
Click to collapse
That's right. What I want is to allow the end user to be able to browse the isolatedstorage. Imagine I have a video download app, I want the user to be able to transfer those downloaded videos from the app's isolated storage to, say, a PC.
One can do this by integrating the webserver code into the said app.
Bruce_X_Lee said:
That's right. What I want is to allow the end user to be able to browse the isolatedstorage. Imagine I have a video download app, I want the user to be able to transfer those downloaded videos from the app's isolated storage to, say, a PC.
One can do this by integrating the webserver code into the said app.
Click to expand...
Click to collapse
Ahh I see what you mean now. That sounds like a pretty nice idea. I think more research needs to be done to see whether it would even be allowed in the marketplace.
The webserver portion is stand-alone (builds to its own .NET DLL with no dependencies on the other parts) and has a pretty clean interface. You'd need to implement the web application portion of it yourself - the thing that generates the response pages for a given request - but the HttpResponse class in the server does a lot of the work of that for you; you basically just specify the content you want to send (as a String or byte array) and it sends it.

[HOSTS file] Block sites with Canvas-Fingerprinting scripts

One of the most severe threats when surfing the Internet currently is browsing a website that does Canvas-Fingerprinting. For example here is reported, that actually 5600+ sites do so.
I've tranformed the 5600+ list into a text-file (57 copy & paste operations) that easily can be imported into your PC's HOSTS file. The text-file is attached.
HTH
If you know a little about MortScript, you futurely can create by yourself an updated text-file to be imported in your PC's HOSTS file using a script as shown next:
Code:
Path=SystemPath("ScriptPath")
InFile=Path\"sites-with-canvas-fingerprinting.txt"
If(NOT FileExists(InFile))
Exit
EndIf
OutFile=Path\"HOSTS-file-extension.txt"
OutFileLine="######## Canvas-Fingerprinting Domains ##################^NL^"
WriteFile(OutFile,OutFileLine,0)
LineCount=0
InFileLine=ReadLine(InFile)
While(NOT IsEmpty(InFileLine))
URLStartPos=Find(InFileLine,"http")
If(URLStartPos)
InFileLine=SubStr(InFileLine,URLStartPos)
URLEndPos=Find(InFileLine," ")
If(URLEndPos)
URLToBeBlocked=SubStr(InFileLine,1,(URLEndPos-1))
Else
URLToBeBlocked=InFileLine
EndIf
LineCount+=1
OutFileLine="127.0.0.1 "&URLToBeBlocked&"^NL^"
WriteFile(OutFile,OutFileLine,1)
EndIf
Sleep(1)
InFileLine=ReadLine(InFile)
EndWhile
If(LineCount)
OutFileLine="######################################################"
WriteFile(OutFile,OutFileLine,1)
Message(OutFile&" created")
Else
Delete(OutFile)
Message("Failed create "&OutFile)
EndIf
While I appreciate the effort, mass-blocking via the hosts file isn't a good idea for canvas fingerprinting (CF) blocking. In fact, it's not a good idea, period, since it requires the user's thorough knowledge of the sites be blocked, and constant monitoring of any changes. IP-blocking should be done only on an individual basis, with known-bad actors. In any case, CF in itself is an insufficient reason to entirely ban a site, which may be useful for the user.
Browser/system fingerprinting is a continuing escalation, with moves and countermoves on both sides. Now that this new CF technique has made the news, circumvention methods will likely be made available at the browser level, via extension or plugin. I'd suggest simply keeping up with developments by periodically Googling on "canvas fingerprinting blocking".
I did just that to find out more about it, and blocking methods. From ghacks.net,
http://www.ghacks.net/2014/07/21/companies-use-canvas-fingerprinting-track-online/
CF is simply another of several fingerprinting methods. From the the EFF's Panopticlick page (fingerprint test), your browser plugin details are already enough to establish a unique fingerprint. All are limited by the fact that changes to the user's system/browser can change the fingerprint. With Chrome/Firefox rapid iterations, I don't see CF as a major concern.
http://panopticlick.eff.org
No easy blocking methods exist as of yet for CF, although plugins will surely appear for it. The privacy conscious can always take further steps by researching on "how to modify browser fingerprint". I can only imagine that spoofers exist.
it's interesting, will think about

Categories

Resources