Develop Bugs

Time To Modify IIWPO Theft Control.

hey guyz..
the scene is set, dont want to tell anyone where it happened by whom and ofcourse who got robbed but here's the story.
User had an o2 Xda II, customized rom, with IIWPO Theft Control installed in the rom, so that means hard reset wont wipe IIWPO out of the pda.
Robber comes puts a knife on the user's throat takes away cash and the pda, user gives it happily thinking she will get a msg on the other number with all the info of sim changed.
4 days pass by no info come's and the pda is sold or forwarded to someone else or whatever. END OF STORY.
now how did the user not get a msg of the new sim info.
1. SIM WAS NOT CHANGED.
2.SIM CHANGED BUT NO CREDIT IN NEW SIM.
3.BATTERY TAKEN OUT PDA TOTALLY DEAD TILL NEW CUSTOMER GETS IT. ETC ETC.
WHAT CAN BE DONE.
ok guyz this is the part where i would like allll the geeks & gurus to put in some effort, i know it will be tough but i have a feeling its not impossible.
CAN UR,LL UPDATE IIWPO IN SUCH A WAY THAT WHEN WE ARE FEEDING OUR NAME AND OTHER INFO IT WILL ALSO ASK FOR A SECURITY PASS TO BE PUT IN, SO THAT WHEN ROBBER CHANGES SIM THE IIWPO RECOGNIZES THE SIM CHANGE AND LOCK'S THE PDA AND ASKS FOR THE PASS, AND WONT UNLOCK TILL PASS PROVIDED, REBOOT WONT HELP.
Now ofcourse the robber can be anyone, so the robber plans to hard reset and still the device would recognize the sim change and ask for pass now so annoyed he plans to flash the device and what happens after that all of us know.
To prevent this THE GEEKS & GURUS can just build a small security patch that can wont allow flashing of device till pass given, it would work like this, we flash our device for the first time install IIWPO and the NEW SECURITY PATCH (with passwords) device is robbed, robber changes the sim gets pass error he gets pissed and tries to flash the device and that clever software would not flash the device till pass provided, this would prove that all the efforts the robber made to steal the device are gone to waste.
And ofcourse someday someone might put in a sim with credit and we would get the info.
NOT FORGETTING CHARLES WARNER FOR THE GREAT WORK HE'S PUT IN FOR ALL xda-developers.com USERS and also giving the IIWPO to us for free, REALLY APPRECIATE YOUR WORK SIR !! THANKS ALOT.

no one interested in being secured ?

I think the IIWPO idea can definitely be improved, BUT: It will never protect you from being robbed.
The true advantage of IIWPO in its currect form is to be able to get track of the 'new' owner of a nicked device. In the end: someone will put in his/her sim and then its just bing!
All other enhancements will just make sure noone else gets to use the device. Sure an improvement, but less important to me: I just want my device back and get the thief nailed!

Interesting...
But I think you have misunderstood how IIWPO works.
IIWPO does not detect if someone changes the SIM card. It ONLY acts when the someone changes the Owner Information (Start/Settings/Owner Information), so no matter what SIM card there is, as long as it has credit it will send an SMS to the recipient's phone number. That's the beauty of it, that it silently sends the SMS with the 'new' users data so there is a slight chance of knowing who's the 'new' owner.
But! This is by no means fool proof. It's what they call 'protection by obscurity', so if a savvy robber knows how to reflash the device it will get away with it no matter what features we can integrate to IIWPO.
That's one of the cool new features of WM5.0, that we can at least know for sure that our data is SAFE by wiping the info remotely if necessary.
Just a thought.
Rayan

edsub said:
The true advantage of IIWPO in its currect form is to be able to get track of the 'new' owner of a nicked device.I just want my device back and get the thief nailed!
Click to expand...
Click to collapse
Rayan said:
so if a savvy robber knows how to reflash the device it will get away with it no matter what features we can integrate to IIWPO
Click to expand...
Click to collapse
ofcourse this is why we all love IIWPO cause it sends use a msg, and ofcourse even if someone was to modify IIWPO iam sure that this feature would'nt wipe out.god forbid you get robbed u get a msg frm the cell but you for some reason cant track the person or some other c#@p...and the pda is gone....WHY caz it only sends sms it does not block the screen....if you were to have a feature which would jam or freeze the pda on change of the name then the pda would be useless to the robber nothing much he could do....unless he knows how to flash it...now comes a part where we can do something about not flashin the device with out a pass....this would totally make the pda useless to the robber and would also keep sendin us msgs and secondly the robber maybe maybe next time might think twice before robbing a pda and might go for something else

How about a device that would be installed internally to the xda and if it is stolen and a different sim/different user info is entered and the person makes a call it fires a large captive bolt which nails the phone to the head of the user, it then adjusts itself to full volume with all lights flashing and announcing "This is a stolen phone...call an ambulance...or hearse".,

cruisin-thru said:
How about a device that would be installed internally to the xda and if it is stolen and a different sim/different user info is entered and the person makes a call it fires a large captive bolt which nails the phone to the head of the user, it then adjusts itself to full volume with all lights flashing and announcing "This is a stolen phone...call an ambulance...or hearse".,
Click to expand...
Click to collapse
tht would be great..... are u goood enough to build something like tht ?

Rayan said:
But I think you have misunderstood how IIWPO works.
Click to expand...
Click to collapse
I perfectly understands the IIWPO functionality. It was me who put together IIWPO for other devices than Wallaby.
Let me explain how my earlier post should be interpreted: Sure it is triggered by the change of owner info, but most thieves (or buyer from a stolen device) will put in another SIM (simply because they dont have the pin of the stolen sim or because the stolen sim is blocked by the network). Thus: As soon as the 'new' owner puts in a SIM AND he/she has changed the owner info (and every one does that!) the sms is sent.
Also: Eventually a thief might flash a device, but ost certain a thief (or buyer) starts it up to test whether its working or not.
Imho IIWPO can be improved, but practically chances of getting a device back will not significantly improve

edsub said:
Rayan said:
But I think you have misunderstood how IIWPO works.
Click to expand...
Click to collapse
I perfectly understands the IIWPO functionality. It was me who put together IIWPO for other devices than Wallaby.
Let me explain how my earlier post should be interpreted: Sure it is triggered by the change of owner info, but most thieves (or buyer from a stolen device) will put in another SIM (simply because they dont have the pin of the stolen sim or because the stolen sim is blocked by the network). Thus: As soon as the 'new' owner puts in a SIM AND he/she has changed the owner info (and every one does that!) the sms is sent.
Also: Eventually a thief might flash a device, but ost certain a thief (or buyer) starts it up to test whether its working or not.
Imho IIWPO can be improved, but practically chances of getting a device back will not significantly improve
Click to expand...
Click to collapse
Sorry edsub, I should have specified to whom I was refering to (zairyaab) when I wrote that comment.
Best regards,
Rayan

np m8

edsub said:
It was me who put together IIWPO for other devices than Wallaby.
Click to expand...
Click to collapse
Can you explain what should I change in the cab to make it work on other devices (Like ETen M500/Torq P100)?
edsub said:
Imho IIWPO can be improved, but practically chances of getting a device back will not significantly improve.
Click to expand...
Click to collapse
Yeah, but still I would feel somewhat better if I can at least call the thief/buyer and shout some expletives if he/she refuses to cooperate!!! :twisted: :lol:
Best regards,
Rayan

i have my girlfriend's number as my report number.. what if were together and we got robbed both our phones are taken away.. a multiple report number would be a good addition to IIWPO

The changes I'd like to see done to IIWPO include:
a) not using "IIWPO" or 'xda-developer' in the registry (user customisable registry key)
b) user customisable executable file name (IIWPO_startup is like a dead giveaway)
c) not storing owner name & number 'in the clear' (a simple XOR to hide it would be just as effective)
d) a hash of the entire owner info page (not just the last name) so unit will resend an SMS if any info changes
e) a new sms is resent after a preset time (eg: every 24/48/120 hours for example), regardless if owner info has changed or not.
I also like the idea of multiple number reporting.
a,b,c) Considering the concept of IIWPO is 'security by obscurity'; it will help if one could hide it more effectively. (no one is going to bother too much about bluetooth.exe or msn_update.exe in the startup folder for example...)
d) Most people get their name right; then meddle with the other bits of information as time goes on - it'd be good to get 'updated' info as and when it happens.
e) Consider it a 'keep alive' thing, so we'll know the unit is still in use, and can continue to keep in touch with the new owner =) I've no moral issues burning up the credit of someone who refuses to give me back my property either. =P
If nothing else, we'd be able to know when the unit gets reflashed, and can quiety say goodbye to our unit after not hearing from it for a while... =(
Is IIWPO still being maintained by the author, or anyone on xda-developers? If not, is the source available? I might be interested in following up on it (time permitting...)
Edited to add: A really vicious version of the IIWPO would possibly send out:
a) phone numbers stored in the SIM card
b) phone numbers stored in the addres book
c) recently dialed/received phone numbers
d) recently sent/received SMS phone numbers
Not all in one go; but in bits and pieces (eg: every 20 startups; send phone numbers of last 5 SMSs sent/received + last 5 phone calls dialed/received).
That would allow us get in touch with his friends and would possibly aid in getting the unit returned (use your imagination... probably easier to get them tell you who/where he is, rather than to get them convince him to return it...)
Probably this would add too much bloat to IIWPO; but hey, could be useful... =P

WOW, ok.
First of all - I registered 2 this forum less than a week ago,
and great job for doing these kind of things.
second - where can i d/l the prog?
and last another idea: when some1 steals ur pda he's usually gonna sell it over. meaning he made his money.
HOWEVER - if even after a HR after changing sims (maybe even without) there will be a picture message saying:
"You cannot use this phone"
"This phone can only be used by me - *name*"
"However, Im willing to buy this phone back from you. call +......"
there wont be a place on the screen to enter the code.
however - the phones' user knows he can type his password and unlock the phone. you might even integrate a handwriting recognition programm for signature or somthing but that will be super hard, i know.
another option is that when seeing this message user has to touch 4 corners of the screen with the stylus in a specific order, then he'll have a please enter password screen.
any comment?
is it do-able?

http://wiki.xda-developers.com/index.php?pagename=IIWPO

Windows Mobile Device ID

Hi Guys,
I am wondering where the Device ID is hardcoded and if it can be overridden by any software or bootloader hack.
I have a corporate mail windows desktop software that checks for the reported device ID. It was configured to look out for a Cingular 8525 (HTC Wizard) which has a device ID of [WIZA200] however after I upgraded to a a HTC Trinity [TRIN100] it refuses to sync with a an error message of pointing to the invalid device id.
any advice/help appreicated how I can make my Trinity ID look like a Wizard ID to sync again.
cheers,
Ollie.

Probably a stupid question, but wouldn't it be simpler if you go to the administrator (or who ever is in charge of the tech staff at you company) and have your account changed for the new device?
What you want can theoretically be done by editing the ROM image (I know this ID is something PB sets) but I don't think anyone ever tried it (at least on this forum).
One more thing: why is your software checking device model? This would be fairly useless as a security feature. Are you certain it is not locked on your phone IMEI or UUID - in which case my first suggestion is the only way to go.

I'm with levenum on this. Checking if the phone is a WIZA or TRIN is rather an extra effort that does not provide much security or identification purpose. E.g. there are like millions of WIZA out there that is able to by pass this 'security' or be identified as.. you?
IMEI on the other hand, is unique to each device, for security and identification purpose, thats most likely what it is doing. ELSE, if it were to be like a login name, you can try changing the one at 'Start'->'Settings'->'System'->'About'->'Device Id'

Thank you for the suggestion guys. I have tried...
The reason they are checking for ID is, that they would like to ensure that only "standardized devices" are used.
However, you probably can appreciate that I'd prefer to use my Trinity rather than a Wizard.
The are not checking for the "soft" device ID that is user configurable as the access security is done on application level with a login password.
The other problem is, talking to a IT organisation which supports 40,000 people. Not exactly easy to get a one off change done ;-)
levenum, what do you mean with PB ?
BTW the application is CREDANT password manager.
Pretty sure, its locked to Device ID based on the extract from Log of credant connecting via Active Sync:
DevOS=PocketPC
Device=TRIN100
Cert=M2M
SyncOS=ActiveSync
SyncVersion=4.5.5096.0
ProcessorClass=2577
05-15-2007 15:54:10 [W] PPC device is unknown: [TRIN100]
cheers,
Oliver.

P.B. stands for Platform Builder, it is an MS tool that creates ROM images (thats what OEMs use).
I understand your frustration about dealing with IT but trust me - it is a lot easier than actually changing the device ID (if it is at all possible).
Plus if your company has 40000 employees I am sure you are not the only one using Trinity or at least something other than Wizard. Maybe group pressure can help expedite the proceedings.

nedd help to unlock T-MOBILE DASH FOR FREE

Hi I Need Your Help To Unlock My Phone T-mobile Dash

Had you done some basic research you would have found that there is no "free" solution out there.
You can use iemi-check for $38, or there is a member here (whose name is slipping my mind -- I appologize) who does it for cheaper.
If you have tmobile for more than 90 days, just call tech support and ask them for the unlock code (for free).

yea...the only free way is just call them. they emailed my code 2 days later. just make sure you acount is all paid up and you have maintained service (with no missed payments) for over 90 days as stated above

boubasakcom said:
Hi I Need Your Help To Unlock My Phone T-mobile Dash
Click to expand...
Click to collapse
What type of lock are you referring to? The guys above are referring to a SIM unlock, but there are two other types as well...
CID unlock- Is required to operate software/operating systems of other carriers on your device; this can be costly through imei-check, but you can get around this by using CID bypass software such as JumpSPL or Haret.exe (it'll bypass the CID lock and allow you to install whatever ROM you desire)
Application unlock- Is required to operate unsigned 3rd party application software on your device; software such as SDA app unlock or SurrealNetworksApplicationUnlock works great

Rip Syntaxx said:
What type of lock are you referring to? The guys above are referring to a SIM unlock, but there are two other types as well...
Click to expand...
Click to collapse
In my experience -- people who don't specify what type of unlock are generally looking for SIM unlocking. But you are correct -- never assume anything

u know its sad they keep saying there is no free way to unlock the imei ok maybe im asking the wrong question how do the pay sites do it . maybe its not free but i am sure its cheaper and say say its not free well what are they doing who are they paying i guess the question is how are they getting the code

Can't Sign in to Windows Marketplace account

Hi everyone!
I'm not a new visitor here but posting for the first time.
Recently I got my hands on Nokia Lumia 710. I updated it to WM 7.8 and it was great. Kept using it for few days until I needed to capture my screen on Lumia 710 but I couldn't find any program/feature. I felt really disappointed. But today I gathered some nerve to unlock my device and did it successfully using Nokia Lumia 710 - A Layman's guide to install CUSTOM ROM posted by psquicker.
I successfully unlocked my device and can now use several different features.
Unfortunately came up with the problem that I cannot sign in to my Windows Marketplace account with my Windows Live ID. Can't even sign in to my Windows Live/Hotmail account under Email Accounts settings.
Error it shows, says:
Activation failed
We were trying to activate your phone without troubling you about it, but something went wrong, so we need some more information before we can continue. Tap Close and we'll explain.
When I click Close, it asks me to call Support.
The same error appears anywhere I try to sign in.
Note that I was using all the Windows services normally before unlocking the device.
Screenshots are attached.
Help will be appreciated.

bilalshaw said:
Hi everyone!
I'm not a new visitor here but posting for the first time.
Recently I got my hands on Nokia Lumia 710. I updated it to WM 7.8 and it was great. Kept using it for few days until I needed to capture my screen on Lumia 710 but I couldn't find any program/feature. I felt really disappointed. But today I gathered some nerve to unlock my device and did it successfully using Nokia Lumia 710 - A Layman's guide to install CUSTOM ROM posted by psquicker.
I successfully unlocked my device and can now use several different features.
Unfortunately came up with the problem that I cannot sign in to my Windows Marketplace account with my Windows Live ID. Can't even sign in to my Windows Live/Hotmail account under Email Accounts settings.
Error it shows, says:
Activation failed
We were trying to activate your phone without troubling you about it, but something went wrong, so we need some more information before we can continue. Tap Close and we'll explain.
When I click Close, it asks me to call Support.
The same error appears anywhere I try to sign in.
Note that I was using all the Windows services normally before unlocking the device.
Screenshots are attached.
Help will be appreciated.
Click to expand...
Click to collapse
Hi,
contact with Microsoft Live support ( Live chat with MS) .. ask activation code ... i to had same problem... not its solved ...
don't tell about your custom rom... just say your mobile need activation code...
Note : keep that code for future... whenever you hard reset your phone or flash ROM it ll ask again...

Suhas0581 said:
Hi,
contact with Microsoft Live support ( Live chat with MS) .. ask activation code ... i to had same problem... not its solved ...
don't tell about your custom rom... just say your mobile need activation code...
Note : keep that code for future... whenever you hard reset your phone or flash ROM it ll ask again...
Click to expand...
Click to collapse
Thanks a lot Suhas. I am sorry, I didn't reply you in time but it actually worked. Thank you. :good:

technician unlock Mi in Note 8 Pro

Colleagues,
A customer (an older Mr. with a teenager) brought me a note 8t (note 8 pro) to unlock, whe power on go to a screen: "this device is locked this device is associated with an existing Mi Account. For security reasons, you need to enter the password to verify the device" - So what happens: the boy had a chip and was not putting a credits (here the telecom block pre-paid chip when you dont put credits each month), until the telecom canceled the number, and the boy didn't care much for that and bought another chip and some time after, he says he had to reset, anyway, the cell phone turns on and enters the Mi account's length screen, he doesn't remember his password and can't recover, because the code goes to his old number that has been canceled and he has no more.
I'm a technician, but I usually always took care of hardware, I never performed a service more related to software like that.
I didn't find anything on the internet about unlocking the Note 8 Pro, I got here:
I didn't see a step by step so I don't know.
If I re-install Miui will solve this?
https://forum.xda-developers.com/re...ui-stock-reinstall-redmi-note-8-pro-t4004391*
Or there is another way?
Could anyone help?

Sadly as far as I am aware you need to either already have access to the xiaomi account to remove the device, or input the password on the device to unlock it. For security purposes clearly.

JuanM2020 said:
Sadly as far as I am aware you need to either already have access to the xiaomi account to remove the device, or input the password on the device to unlock it. For security purposes clearly.
Click to expand...
Click to collapse
Indeed clearly is for security reason (stolen phone? sounds like a fishy story).
But is not it possible to recover via email? Because if I remember correctly we also had to provide an email upon Mi Account creation. I am not sure because I never had to recover yet, but is not a link sent to attached email to reset account password?
If the guy neither have original number, password or email, that's smells way more than fishy to me
Regards