Related
According to WPcentral:
Sounds like an innocent blog that reviews apps right? Well the concerns from the Twitter posts is that not only does the site review apps but it also contains download links for the .xap file that is residing on Microsoft's servers.
Even if you download the .xap file, it's going to take some effort to get it installed to your Windows Phone 7.
You will need the developer tools and device that is unlocked for development. While the developer tools are free, you have to be a registered developer to get an unlocked device. You CAN however download the .xap and rename it as a .zip and look at the structure of the app, though we're 99% sure that the real "code" of the app is compiled/encoded/encrypted.
Not many will be able to do much with this downloadable file. That is unless you're a developer looking to download free apps from other developers. Still, one has to wonder why it's so easy for a third party site to provide download links to Marketplace apps.
Click to expand...
Click to collapse
They are talking about the website: http://winmobile7.apphab.com/
Kind of a strange site. They are offering free downloads of paid marketplace applications. Unless you are a developer, you can't do anything with it. But it's still strange...
This sounds like a good way to get in a lot of trouble. I would bet Microsoft can see what apps are installed when the phone checks for marketplace app updates even if you side load it as a developer.
And its still live and offering files to download. Shoddy MS security on display, extremely troubling for devs.
Hopefully Microsoft will look into that site and any similar sites.
We cant have developers loosing money because of these people.
I can't see where you download apps - if its real why not post a link on http://social.answers.microsoft.com/Forums/en-US/windowsphone7/threads ?
It says it's for free and trial versions. Isn't it pointless to provide download files anyway since you can only install apps via the Marketplace?
****, they have my app on there, not happy
my app does support trial, I'm not seeing anything about xap downloads, hopefully this means the breach has been fixed and not that I'm looking in the wrong place
I don't mind free publicity, but I put many hours into that and don't want it spread around in such a way (free, unauthorized downloads, raw code)
Definitely not cool for developers. One issue is that all the apps are silverlight and are only compiled to MSIL. Pop open the binaries with Reflector and you've basically got the source code. All devs should utilize Dotfuscator to at least help with this.
http://windowsteamblog.com/windows_...-with-preemptive-solutions-for-analytics.aspx
ckacey said:
my app does support trial, I'm not seeing anything about xap downloads, hopefully this means the breach has been fixed and not that I'm looking in the wrong place
I don't mind free publicity, but I put many hours into that and don't want it spread around in such a way (free, unauthorized downloads, raw code)
Click to expand...
Click to collapse
It looks like the site that had the links (http://winmobile7.apphab.com) took down the link to the XAPs but I bet the issue is still there. It was a pretty simple URL to the Microsoft server. You just had to know the application's GUID and you could download the XAP.
I don't see how this makes them free... you can easily see you need a registered dev device, I doubt it makes the app "free" because there is a fee you must pay.
efjay said:
And its still live and offering files to download. Shoddy MS security on display, extremely troubling for devs.
Click to expand...
Click to collapse
Microsoft can check your device and see if you have pirated software on it, just like they do for XBox live. They already have the infrastructure in place and if you pirate be prepared to have your phone banned from Marketplace, Zune, XBox Live, etc.
RustyGrom said:
Definitely not cool for developers. One issue is that all the apps are silverlight and are only compiled to MSIL. Pop open the binaries with Reflector and you've basically got the source code. All devs should utilize Dotfuscator to at least help with this.
http://windowsteamblog.com/windows_...-with-preemptive-solutions-for-analytics.aspx
Click to expand...
Click to collapse
Any decent develper will Obfuscate the code. If they didn't, they were kind of asking for it since it's hot hard to intercept data being downloaded over WiFi, etc. The fact that it can only come from the market was never enough to stop people from getting their hands on the files downloaded from said market.
It's no different than any other platform that uses a VM architecture (Android, WP7, WM 6.x .NET CF, Java ME, etc.).
I found my own app there. I don't however see a download link?
--edit: Nvm, should've read the thread to its end.
What is the URL? To replace with GUID or XAP filename? Could always use archive.org.
i guys!i have a mega pack xap installers with games and apps.
i poste for everyone previous.
sorry bad english...
cmpts
is a method to decrypt files xap
http://forum.xda-developers.com/showpost.php?p=34246750&postcount=3
I have a 150GB GoDaddy server itching for ROMs, kernels, themes, etc. Email me at [email protected] and I'll create an FTP account for you. Your path will be something like http://www.heylisten.org/ROM/android/your-xda-username unless you request something different. All that I request in return is that you try to recommend users to my index site, http://www.heylisten.org/ROM, when appropriate. Your ROMs can be included in said index if you tell me where to find them and how to list them (phone name, base). The Inc section is the only one that works right now, but I'm working on expanding the site.
Thanks!
Yeah Im tired of mediafire and rapidshare bull aswell, I have 4 servers 2 home and 2 on godaddy. I can mirror if anyone cares ([email protected])
i offered up space on my webdomain.. it went unheard .. devs like the media sites cause they can monitor clicks.. i monkeywrench em and download files multiple times .. your counts arent true!!!!!
To devs: with a normal FTP server, you can use ROM Manager and QR code downloads, as well as the RM web link thing. C'mon, I didn't get the 150GB plan for nothing, did I?
Mobileunderground offered free ftp space for rom chefs as long as they just mirrored their threads there aswell.
I know alot of rom chefs use it to track their downloads, or to earn some extra cash by using the sharing sites (or extra bandwith to dl other things online).
There have been tons of sites that have mirrored roms and other items, but in the long run, they end up getting shut down either by htc, google, microsoft, or the webhost's request them to go down for using them to host files when it says not to in the TOS...
read the TOS, 99.9% of webhosts will have that in there, once you start getting into tens of gigs of data, they will tell you to remove the file within 2-3days....I know, it happened to MobileUnderground multiple times since I have been a mod over there...
codybear said:
Mobileunderground offered free ftp space for rom chefs as long as they just mirrored their threads there aswell.
I know alot of rom chefs use it to track their downloads, or to earn some extra cash by using the sharing sites (or extra bandwith to dl other things online).
There have been tons of sites that have mirrored roms and other items, but in the long run, they end up getting shut down either by htc, google, microsoft, or the webhost's request them to go down for using them to host files when it says not to in the TOS...
read the TOS, 99.9% of webhosts will have that in there, once you start getting into tens of gigs of data, they will tell you to remove the file within 2-3days....I know, it happened to MobileUnderground multiple times since I have been a mod over there...
Click to expand...
Click to collapse
exactly my reason for staying with multiupload.... i have a godaddy account but they have required me to pull my files more than once... its too much of a pain to redo all of that
I have about 3TB of traffic weekly. Been running solid for about 5 months.
I looked over the ToS. As long as I don't go over 150GB I'm good, because I have unlimited bandwith.
DesireC said:
I looked over the ToS. As long as I don't go over 150GB I'm good, because I have unlimited bandwith.
Click to expand...
Click to collapse
The tens of gigs statement was only used because that's when they notice that you are using it to distribute or backup files without paying for a package that allows this. It has happened to TONS of chefs/websites that hold ROMs and other items.
It's been proven time and time again that it does not work...
Maybe if you had a dedicated server, things might be different...But the traffic to the sites that host such roms are retardedly high and the webhosts see that and shut you down....
It does not take very long.
Trust me, I've had to backup the entire ftp of MobileUnderground onto my 2tb external only to upload it to the new server and have the same thing happen to us in about a two month span with three or so webhosts.
Stick around for about 2 years and you'll see it happen to plenty of people.
DesireC said:
I looked over the ToS. As long as I don't go over 150GB I'm good, because I have unlimited bandwith.
Click to expand...
Click to collapse
No, you did not read the TOS closely enough.
DesireC said:
To devs: with a normal FTP server, you can use ROM Manager and QR code downloads, as well as the RM web link thing. C'mon, I didn't get the 150GB plan for nothing, did I?
Click to expand...
Click to collapse
Yes, you did.
codybear said:
Mobileunderground offered free ftp space for rom chefs as long as they just mirrored their threads there aswell.
I know alot of rom chefs use it to track their downloads, or to earn some extra cash by using the sharing sites (or extra bandwith to dl other things online).
There have been tons of sites that have mirrored roms and other items, but in the long run, they end up getting shut down either by htc, google, microsoft, or the webhost's request them to go down for using them to host files when it says not to in the TOS...
read the TOS, 99.9% of webhosts will have that in there, once you start getting into tens of gigs of data, they will tell you to remove the file within 2-3days....I know, it happened to MobileUnderground multiple times since I have been a mod over there...
Click to expand...
Click to collapse
Yup.
savoxis said:
I have about 3TB of traffic weekly. Been running solid for about 5 months.
Click to expand...
Click to collapse
You've just slipped under their radar so far.
codybear said:
The tens of gigs statement was only used because that's when they notice that you are using it to distribute or backup files without paying for a package that allows this. It has happened to TONS of chefs/websites that hold ROMs and other items.
It's been proven time and time again that it does not work...
Maybe if you had a dedicated server, things might be different...But the traffic to the sites that host such roms are retardedly high and the webhosts see that and shut you down....
It does not take very long.
Trust me, I've had to backup the entire ftp of MobileUnderground onto my 2tb external only to upload it to the new server and have the same thing happen to us in about a two month span with three or so webhosts.
Stick around for about 2 years and you'll see it happen to plenty of people.
Click to expand...
Click to collapse
Here's the email I got from GoDaddy when we were hosted by them months ago:
Dear Sir/Madam,
It appears as though your mobileunderground.info hosting account is being used as a file repository. You may review the Storage and Security section of our Hosting Service Agreement for further clarification. If you are interested in keeping file backups, you will need to purchase the Online File Folder, a Virtual Dedicated Server, or a Dedicated Server.
Specifically, the following currently appear to be in violation:
/_db_backups 4.12 GB
/captainback 10.93 GB
/omj09 4.76 GB
/indagroove
25.31 GB
/tmartin09 3.34 GB
/sohkis 2.02 GB
/asusmobile 1.95
GB
/ai6908 2.14 GB
/smiznith 5.91 GB
/ericwgarza1 3.32 GB
/formula84
1.73 GB
/rbolen70 1.15 GB
Please remove all files not being referenced to a website and/or explain how they are being used by the web site by July 15, 2010 at 7:00 AM MST.
We will review the mobileunderground.info hosting account again at that time. If we do not receive a reply to this notice, or the content in question is not removed, access to that content will be disabled.
Please call us at 480-505-8871 or reply to this email with the necessary information so that we can review this issue further. We appreciate your understanding and cooperation in this matter.
Sincerely,
Wayne C.
Hosting Support
Hi!
I'm no developer, but wanna help all the good folks here at the forums. So I decided to set up a torrent tracker for all of you. Most developers are sharing their files via cyberlockers (like MediaFire, etc...) which is not really an option for some people. I thought a torrent tracker would be much easier and more efficient way for distributing the files (like ROMs, Themes).
Here is the link for the tracker: http://619media.hu/xdadev/
If you want to upload a file PM me for username and password.
Announce URL if you create a torrent file: http://619media.hu/xdadev/announce.php
I've uploaded zdzihu's xRecovery for the X10 as a test. If there are any problems, you can't download, etc. please PM me. I know, there will be some problems at the beginning, but I hope we can make it work.
Cheers,
DRuNKeN MaSTeR
@MODs: if this is not the appropriate forum for this thread please feel free to move it. Also, if the tracker conflicts with your rules, contact me.
That is a GREAT idea, does it happen to support HTTP seeding also? Because in addition to this it would also be awesome to have a kinda standard drop box that isnt like the other file dumpsters.
Hi!
Yup, supports HTTP seeding Currently only 5 simultaneous uploads with 100KB/s each, but I can take it higher if this catches on.
EDIT: RT supports 2 types of HTTP seeding:
- "Use BitTornado HTTP seeding specification: Relative location of file or directory, e.g. ../../files/file.zip" -> I can give limited space on my server for this type (about 30-40GB).
- "Use GetRight HTTP seeding specification: FTP/HTTP URL of file or directory, e.g. http://yourwebsite.com/file.zip" -> this everybody can use.
Bump! Nobody interested?
This is a GREAT idea!
You should discreetly pm some developers, as they probably haven't seen the thread
I'm with this. Just hang in there till word gets around about it. You've built it, now they will come
Of 'course people are interested. YOU DA MAN!
No Sieriously - Thanks so much.
thumbs up
Great idea
any torrent i create i just copy and paste a list of about 30 known working trackers into the settings of create torrent, works like a charm, no password bull, create & start seeding, put the .torrent up on forum or PM out... dont know why this would be needed....
http://inferno.demonoid.com:3416/announce
http://tracker2.istole.it:6969/announce
http://www.h33t.com:3310/announce
http://tracker.istole.it:80/announce
http://exodus.1337x.org/announce
http://nemesis.1337x.org/announce
http://genesis.1337x.org:1337/announce
http://tracker.publicbt.com/announce
http://tracker.openbittorrent.com/announce
http://tracker.torrentbay.to:6969/announce
http://cpleft.com:2710/announce
http://h33t.com:3310/announce
http://papaja.v2v.cc:6970/announce
http://tracker.desi6.com:7979/3paz2gybgymgo6aub7e9d3u15784ubfx/announce
http://tracker.packy.se:2710/announce
http://dttracker.debian.net:6969/announce
http://tracker.torrent.to:2710/announce
http://tracker.bitreactor.to:2710/announce
http://tracker.ccc.de/announce
http://umunu.com:1984/announce
http://opentracker.umunu.com:80/announce
http://p2p.lineage2.com.cn:6969/announce
http://PhoenixRG.no-ip.org:2710/announce
http://gdbt.3322.org:6969/announce
http://star-tw.no-ip.org/announce.php
http://exodus.desync.com:6969/announce
http://222.171.190.184:7000/announce
http://scene-project.com/announce.php
Click to expand...
Click to collapse
Really cool idea. Will use it for my firmwares.
This is a great idea
This is a bloody good idea! I wish more of the ROM dev's would use it.
Eh not being a negative nancy but I thought mods already decided against using torrents for roms there's a thread in the about xda section for it
Sent from my SCH-I400 using XDA App
Bierce22 said:
Eh not being a negative nancy but I thought mods already decided against using torrents for roms there's a thread in the about xda section for it
Click to expand...
Click to collapse
Torrents have a bad rap because of their association with...unsavory material, but the torrent protocol itself is actually a very efficient way of distributing large files to large numbers of people. Just look at big linux distro releases, ubuntu especially. It is simply a data transmission technology just like email, FTP, or HTTP in that they can be used to transfer files.
I for one would love to donate some of my bandwidth and seed things for XDA, at the very least everything I download and use if not setting up a seedbox.
Hopefully XDA seriously considers embracing torrents and encourages devs to upload to and users to seed on the official tracker in addition to the current methods (for n00bs or those who don't want to set up a torrent client). I'm sure everyone would appreciate not having to negotiate the megaupload-style sites with ads (and what about their uploaded content licensing?) only to get throttled bandwidth.
Sorry to say but the link to dl the app/prog is broken? Cheers
THis thread is 3 years old. XDA has it's own use of torrents through the DevDB projects.
Hello XDA Moderators!
First of all I want to apologize if this topic has been already discussed or is it forbidden (I didn't found such restrictions in the rules)
Anyway, since I got my HTC Desire S this forum is the primary source of information for me, and most probably for all the other visitors around.
And especially when it comes to custom rom files there are sometimes troubles with dead links, crappy file sharing sites with stupid limitations, etc.
So I think it will be much more convenient for everyone (devs and users) to use the torrent system via magnet link (combined with QR scan maybe) for all the files that are posted around here. The download speed will be much better and all that have downloaded the file once will contribute by seeding it to the others. And of course via the appropriate client the files can be downloaded directly to the SD Card (this is possible now through the phone web browser, but a lot of steps are required - waiting, human security check forms, etc.). And last but not least one of the greatest advantages is that on single torrent there can be multiple files, that one can pick to download or not (for example all radio images for a specific model, etc.)
Looking forward to your comments.
no interest?
Obviously not...
Well... I do direct download links for ROMs, on several gigabit servers. So it's of no interest here...
P2P systems also require client software, meaning people downloading via their phone might have issues...
But I personally see no need for a different download system, and nobody has ever complained about waiting times or ads for direct uploads
Thank you for this reply
Agreed with above commenters but I can't disagree with OP either.
It's true that torrents may present an issue due to the requirement of a client but a torrent has one huge advantage - integrity.
Torrent clients automatically check the files for integrity. Also, torrents can provided reliable downloads for larger files.
However, I hardly think torrents are relevant here. Torrents are useful only for large files. Most of the files shared on XDA are 500MB at the most. Most ROMs are 100MB and apks are around 1-15MB.
Although RapidShare is annoying, there are other pretty reliable file sharing services like MediaFire. MediaFire is by far my most favorite site for mass file sharing and Dropbox is pretty reliable too although Dropbox has a 10GB/day traffic limit per account.
Check out these sites listed at http://forum.xda-developers.com/showthread.php?t=1210372 for remote uploading to dropbox where you download the file directly to dropbox and then download it from dropbox. Pretty useful if the download speeds are too low.
Curious..
Browser add-ons bring torrent to your normal browser download. Opera has had one for quite some time out of the box. But you can even get a real torrent client for Android now.
And to be frank, as long as the OP provides checksums, the value of integrety should remain. I get eered out downloading from some of these file share sites, plus with all the spammy ads and what not!
Maybe somebody should make an XDA related torrent cache?
I just stumbled across another site that is a 1:1 clone of much of XDA: forum.freelatestmovies.org.
A lot of images are missing, and a lot of links don't work, but if you search the site via Google, there are a significant number of subforums/threads that do work, are current, and are direct copies (including XDA's 404 page lol). The homepage doesn't seem to want to load at all on my Mac, but a number of subforums and individual threads do, and the homepage loads on my mobile.
I'm not sure if it's someone phishing for xda usernames/passwords or if it's hosting any malware, or if it's just some bot that's crawling around copying everything, but it's clearly not legit, whatever it is.
Anyway, just wanted to bring it to the staff's attention.
Thanks for letting us know :good:
@bitpushr
Morningstar said:
I just stumbled across another site that is a 1:1 clone of much of XDA: forum.freelatestmovies.org.
A lot of images are missing, and a lot of links don't work, but if you search the site via Google, there are a significant number of subforums/threads that do work, are current, and are direct copies (including XDA's 404 page lol). The homepage doesn't seem to want to load at all on my Mac, but a number of subforums and individual threads do, and the homepage loads on my mobile.
I'm not sure if it's someone phishing for xda usernames/passwords or if it's hosting any malware, or if it's just some bot that's crawling around copying everything, but it's clearly not legit, whatever it is.
Anyway, just wanted to bring it to the staff's attention.
Click to expand...
Click to collapse
Morningstar, I was searching for your notipanel smali mod and google brought me to this site:
http://www.ttnairport.com/developer...notification-panel-background-t3189731/page3#
This might be an other clone as well.