Investigating Magic SMS commands to ring/lock WP7 devices - Windows Phone 7 Development and Hacking

I was toying today with the My Phone service here (https://www.windowsphone.com/en-US/my) while my sim card was in an android device.
After trying the "ring my phone" option, I received an SMS from Microsoft that contains some string encoded as a base64 message it seems. I have then send the same SMS to my number with the sim card on my Omnia 7 and it actually made the phone ring, I have tried this process multiple times and it seems to work even when the phone has no data connection.
I have noticed that all the SMS commands sent to the phone has the same magic header, which if you even try to send it to yourself, will still be interpreted as a command. Also, once an SMS command is received, it doesn't trigger the phone anymore (the phone appears to remember the old commands).
What is left to do now is:
1. identify how the commands are encoded (and eventually generate them)
2. and if the commands are generic and work on any phone or are generated per user account.
The second point could be verified easily, as I can provide some of the SMS commands I have for anyone who wishes to test (please notice that the commands only make the phone ring).
Please leave me a message if you want to test the commands, I would also be happy to hear any thoughts about this if some of you have already investigated it before.
[Update 03/05]
After some testing it appears that the commands are not generic enough to work on all models. The commands of my Omnia 7 do not affect an HTC 7 Pro for example, but we do not know yet if they are model specific, or user/defice specific.
If you have an Omnia 7 please let me know so that we can test if it's model specific.
Those who have access to a non Windows phone can also generate SMS commands by sending a ring command from here to their number (with the sim card on another phone). It would come clear after we gather few SMS commands for several models what is and what is not specified in these commands.

I've not investigated this (though I'd thought about it before), but I'd be happy to do so (just don't send me the "wipe your phone" command!). There must be *some* degree of security, of course. I assumed that the SMS commands also couldn't be sent from the messaging UI, although with native code access it should now be possible to send them through the raw SMS API...
I don't have an Android phone to test with, though.

Cool
Sounds cool if you provide me with a sms code to ring my phone or something I would love to try it out

Not sure if it is related, but I did investigate the whole provisioning over sms stuff a while back, and the result was very disappointing. The driver that accepts the sms in the first place is in TCB, so that was promising, but it then impersonates a low-privileged account to the real provisioning. Some file-access and registry-access was possible, but nothing really important.
Good luck,
Heathcliff74

I can certainly try this. HTC 7 Pro/Arrive on Sprint.

atm153 said:
I can certainly try this. HTC 7 Pro/Arrive on Sprint.
Click to expand...
Click to collapse
tried on mine it doesnt seem to work

this is kind of interesting, but, i can't use that feature in indonesia
---
btw, can you provide all the commands here? including the "wipe your phone" command
---
eehem, we can troll other wp users if we can get that sms code

aramadsanar said:
this is kind of interesting, but, i can't use that feature in indonesia
---
btw, can you provide all the commands here? including the "wipe your phone" command
---
eehem, we can troll other wp users if we can get that sms code
Click to expand...
Click to collapse
And that, my friend, is why it should not be disclosed hehe.
The world isn't ready for a troll level that high just yet

juzz86 said:
And that, my friend, is why it should not be disclosed hehe.
The world isn't ready for a troll level that high just yet
Click to expand...
Click to collapse
and, seriously, i'm curious about this code, and i definitely won't troll other wp users. i need this for my own purposes

As per the first post edit, I've got an Omnia 7.
No secondary phone though, gave that one away to my sister.

Look what I did today:
http://youtu.be/SSFc41ZvaIo

djtonka said:
Look what I did today:
http://youtu.be/SSFc41ZvaIo
Click to expand...
Click to collapse
r u a real dj

djtonka said:
Look what I did today:
http://youtu.be/SSFc41ZvaIo
Click to expand...
Click to collapse
Could you please share the code?

Code is working only once and only with specific model as Nokia L800 or HTC HD7 from Your list on website.
SkYxAAAxAR626k5CsLvsLiv3PK2cNAxlBoTWMh9ln6uVY87rPTVmRRxGRJKLRC9E8S8R+6Z4g==
Click to expand...
Click to collapse

I am intrested in this idea.
Can you provide me more information?
Maybe I can help you

I wonder if that is the string that is on the computer you sync with in the certificate store... it says "Zune-Tuner:xxxxx" and a random looking value (NOT keys or part of the cert, but in the name)

Heathcliff74 said:
Not sure if it is related, but I did investigate the whole provisioning over sms stuff a while back, and the result was very disappointing. The driver that accepts the sms in the first place is in TCB, so that was promising, but it then impersonates a low-privileged account to the real provisioning. Some file-access and registry-access was possible, but nothing really important.
Good luck,
Heathcliff74
Click to expand...
Click to collapse
This is worth paying attention since for the erase command it surely should grant TCB privileges ... also for 'find my phone'.
Anyway ring command for OMNIA7 is:
SkY#AAAxBuTZmZCZ9DWZYBvARGyQ0auHQcVvMv2c/HqXv1zQccwcQHAC9ErEZ2nuGgy5Wq5FQg==
and for Focus:
SkY#AAAxAzZCeRmCnBJKls6/h1WIZUTNgcipqDPTax0qeiSaDqnXd441bv2JaiixMH8tzjvZUQ==
I have no clue how what code is this but the SkY#AA is the header in all messages and every ring command SMS is unique . Funny, if I send the FOCUS ring command to an Omnia7 it gets delivered( network delivery confirmation) but it doesn't show up in messages, nor does the phone react in any way so it must have an model identifier inside.
Who's good @ decryption here?
Maybe we should gather more commands to try and guess some vallues from inside.

htc9420 said:
This is worth paying attention since for the erase command it surely should grant TCB privileges ... also for 'find my phone'.
Anyway ring command for OMNIA7 is:
SkY#AAAxBuTZmZCZ9DWZYBvARGyQ0auHQcVvMv2c/HqXv1zQccwcQHAC9ErEZ2nuGgy5Wq5FQg==
and for Focus:
SkY#AAAxAzZCeRmCnBJKls6/h1WIZUTNgcipqDPTax0qeiSaDqnXd441bv2JaiixMH8tzjvZUQ==
I have no clue how what code is this but the SkY#AA is the header in all messages and every ring command SMS is unique . Funny, if I send the FOCUS ring command to an Omnia7 it gets delivered( network delivery confirmation) but it doesn't show up in messages, nor does the phone react in any way so it must have an model identifier inside.
Who's good @ decryption here?
Maybe we should gather more commands to try and guess some vallues from inside.
Click to expand...
Click to collapse
Also, note that the phone, upon receipt of the magic SMS would reply back to the short code indicating success or failure, which would ripple back to the website with the status-I stuck a prepaid SIM into a spare phone to capture the ring and wipe requests-in both cases the website said something to the effect of "we couldn't do it right now" (and in the case of the erase, asked if you wanted to keep trying until successful).
speaking of this, did the OP post what short code was being used? I wonder if it's the same between carriers?

There doesnt appear to be one code for Focus and One for HTC whatever etc...
My wife and I both have lumia 900's. I did this first with My SIM, then her's and back to mine. I got 3 different values. So both phones were different and even the same phone was different on two seperate occasions.
It looks like the value the MS messaging system negotiates with their server. Check out the messaging SDK sample projects.

Related

Extra Security

How can I prevent my phone from being answered and displayed, unless a password is provided?
The current security, only prevents you from using the device, but if there is an incoming phone call, you are able to SEE it and ANSWER it.
Thanks
switch it off in comm manager then lock your device
LOL that would be a solution but i prefer to have the phone on.

			
				
By the time you put in your password, the caller will have been directed to voicemail.
You can try "slide 2 unlock"
http://forum.xda-developers.com/showthread.php?t=353008
It is showing your incoming calls too but you can set it to use the slider to answer this call.
You can still answer the phone with S2U on. Why would you want to do this anyway?
As one of the contributors has said, by the time you had entered a password to answer the phone the caller would have dropped off. Boyfriend/girfriend trouble perhaps?
WB
You Guys are incorrect about the call going to voicemail before entering the password. My Motorola Razor, has this type of security built in.
You cant view the caller, answer it or do anything with the phone until you put in the password. I put my phone down alot and people have a habit of answering my phone.
I got a question also about the security
I ONLY want to lock my sms/email/mms with a pass..
Most phones can do that but windows mobile not..
Help?
i guess no one knows how to do this
have you googled?
this one may fit the bill, I especially like the hard reset option, loads of fun to be had by finding ya mates device entering the password incorrectly a few times and then forcing a hard reset
http://www.totalpocketpc.com/PS_4.0_Website/default.html
http://classic.pocketgear.com/software_detail.asp?id=18993&associateid=17
All Hardware Buttons Become ‘Disabled’ While Device is Locked.
that program is no good, it still allows incoming phone calls to be displayed and answered while device is locked
is there any kind of help out there
Did you try the magical "SILENCE" function ? activated it, then no one will know when your phone is Ringing or new SMS are coming EVEN you left the phone at the meeting room . And the BEST of it, YOU CAN LEFT THE PHONE ON !!! ( Like I do when I'm sleep or at the gym).
i want to hear the phone but if i chose not to pick up, then i wont. The whole point of security is soo OTHERS cant get to your phone.
always put your phone in your pockets
ughhhh someone got to know
Hmmm ... sounds like what you're seeking is a very personal enhancement that nobody using a WM device has needed until now. If nobody has offered a usable suggestion, and you can't find anything with an Internet search, then, as I see it, you have only two options:
1) Go get that Razr
2) Take advantage of WM's extensibility, and write your own cutomized app. You can do it in PPL or MS C++ ... maybe a few other languages. If you do a good job, you might even be able to make a few bucks on it
-pvs
pvs said:
Hmmm ... sounds like what you're seeking is a very personal enhancement that nobody using a WM device has needed until now. If nobody has offered a usable suggestion, and you can't find anything with an Internet search, then, as I see it, you have only two options:
1) Go get that Razr
2) Take advantage of WM's extensibility, and write your own cutomized app. You can do it in PPL or MS C++ ... maybe a few other languages. If you do a good job, you might even be able to make a few bucks on it
-pvs
Click to expand...
Click to collapse
1)
2) Amen !!!

How to register/developer Unlock Windows Phone 7 for free, even NoDo

All,
Why all the fuss to Chevron Unlock or any other hack when you can just register it as a developer phone and unlock it officially for free????
Oh, maybe you all didn't know about the free part, maybe that is the piece of magic everyone is seeking...
Here is how to register your phone as a developer phone FOR FREE....
1. Get and verify a Dreamspark account. Two options here....
a. If you are a student with an email address ending in .edu just go to www.dreamspark.com, register and verify the email address.
2. Create an Apphub account and link it to your Dreamspark LiveId.
a. After Dreamspark is verified, go to http://create.msdn.com/en-US/ register your Windows Live ID and signup as a student. It will ask if you have a verified Dreamspark account, follow the steps to link the two accounts. (I didn't take screenshots but intuitive)
3. Populate your required profile information to the point that "My Dashboard-->My Windows Phone" does not show any more pending tasks.
a. You MUST go through the process to submit a "DummyApp" for Windows Mobile 6.5 to Windows MarketPlace before Geotrust will send you the email to verify your identity. Just put "Dummyapp for id verification" in the notes sections. You will have to upload a .cab and a bunch of icons that all have to be sized properly. Just take a .png file and resize it a bunch of times and upload it. Doesn't matter what it is.
b. Geotrust will send an email requesting you to verify some info. I received it about 10 minutes after submitting my app, but could take 24 hours. I answered 4 questions, and then about 2 hours later Apphub took off the "identity verification pending" alert.
c. I also submitted my bank account info, but not sure if this was necessary.
4. Download the Windows phone developer tools from here http://www.microsoft.com/downloads/en/details.aspx?FamilyID=04704acf-a63a-4f97-952c-8b51b34b00ce
5. Run the Windows Phone Developer Registration tool. Sign in with Windows Live ID you registered at AppHub, connect your phone and make sure it is not screen locked, viola, Windows 7 Phone now unlocked. And you can unlock 2 other Windows 7 phones too for a total of 3 phones.
Total process took less than 24 hours due to waiting on Geotrust and MS confirm.
-Paul
This is only for students,so its not really an option for everyone
Sent from my 7 Pro T7576 using Board Express
Follow the link on 1B above if you are not a student or do not have a .edu email address. Works just fine.
Paul_Hammons said:
Follow the link on 1B above if you are not a student or do not have a .edu email address. Works just fine.
Click to expand...
Click to collapse
I assume he ment that Dreamspark is for students that cannot afford the software but can bring in revenue to Microsoft with the program and games they create. So, if you signup under the guise of a student, you can kind of defrauding Microsoft. But I guess that is a moral issue, so most people may not care. But, there are also schools and online classes that do not provide any sort of educational email addresses, so having a way to gain access as someone studying and taking classes, is nice. So, in those cases I think its ok. I personally use a Austraila.edu email since my online classes didn't provide anything. But, this might be a nice way to get an unlock if you are NoDo and can Go(do) back.
I keep getting the following error when I get to step 2a:
WE’RE SORRY. AN ERROR HAS OCCURRED.
We have detected an error while processing the page you were looking for. We apologize for the inconvenience. Please try again.
View App Hub FAQ
A01/7J9W
Any ideas what that is?
EDIT: weird.... I just tried it again (for the fourth time) and it worked. So if you get the above error, just keep trying.
I live in country that App hub does not support. Can anyone help me please?
AppHub confirmation step3 is disabled and NEXT button not working
Hmmm only have one problem.
You have to submit an APP and does it come up in marketplace ?.
Dont know how to get a "Dummy APP" to put on market for Winmobile 6.5 or 7.
If you can just put in a random app witch does not get in marketplace then i guess its no problem.
*edit*
Made a Winphone 7 app that does not have any purpose, lets check what happens
All this works.
Sadly I failed the geotrust verification, so I have to send a signed document with a copy of my national ID. Let's hope they believe my history about living in the states but having a ID of another country.
All works fine until i had to verify my account after publishing the dummy app. But now verifying failed and i have to send them my copy of id etc. But how the hell could i send them my info when i give them fake ( generated ) info?
FJosep said:
All this works.
Sadly I failed the geotrust verification, so I have to send a signed document with a copy of my national ID. Let's hope they believe my history about living in the states but having a ID of another country.
Click to expand...
Click to collapse
I just said im not from the states but im allowed to have a free marketplace account since im dreamspark verified so this is my dutch passport and it was fine, no lies and we dont have a marketplace either. I had to sign it as well its a 5 minute job and if it takes to long you can open up a chat session and they will process it straight away. I think they are not even reading it haha, i started a chatsession didnt say a word, signed off and minute late got the you are verifie mail.
Man please how did you send them that letter? Can you show me some screenshot how it looks like ? x)
imatulo said:
Man please how did you send them that letter? Can you show me some screenshot how it looks like ? x)
Click to expand...
Click to collapse
hmmmm ........... APP HUB stops me at create account?
Is the page flawed?
So has anyone else confirmed they have unlocked their phone following this process? I see a few of you working toward it.
-Paul
This worked for me. I can unlock up to 3 devices. Only used one so far.
drkfngthdragnlrd said:
This worked for me. I can unlock up to 3 devices. Only used one so far.
Click to expand...
Click to collapse
can you share to me one so i can also unlock mine?lol
moonshines said:
can you share to me one so i can also unlock mine?lol
Click to expand...
Click to collapse
Sadly it'd require me giving you my Windows Live ID & password, which I'm not exactly fond of lol. You need to enter it into the unlocker tool installed on the pc the device is connected to. Just folow the information giving by the OP closely with your real information (don't make up a fake ID) & it'll work. It took a couple hrs for me to finally get verified.
Where is 1B?
Removed..?!
imatulo said:
Man please how did you send them that letter? Can you show me some screenshot how it looks like ? x)
Click to expand...
Click to collapse
No because it contains my id and autograph.
But its very simple, just print the mail they snend you, fill in everything add a copy of your id, scan it and email it back. Its not even a letter, just add what i said above as your motivation.
Did you received the email from geotrust?
****, I'm stucked again.
The apphub doesn't let me choose my country, so I chose USA and now geotrust rejects my documentation because it's not from the USA.
Ahh, Microsoft, always fu*king the third world.

Disable the lock code if needed (By-pass exchange policy)

TESTED ON MANGO, AND WORKED FINE
Gentlemen,
I have found the reg key in some posts to disable the lock code for the windows phone, if you have configured the exchange e-mail account in Phone.
I was unable to view the specific reg key in normal registry editor. So I have converted the reg key to an xap file by using provxml method. And you can apply the key even if you don't have the registry editor app installed on your device.
Steps:
1. Deploy the xap file to your developer unlocked device.
2. Launch the app.
3. Tap on the green button, it should gibe you a success message.
4. Uninstall the app.
5. It may require to restart the device, since this is a registry change.
5. U r done. Now u will be able to turn off your phone security code even if you have configured the exchange e-mail account in your phone.
I have tested on my chevron unlocked HTC HD7, and it is working fine.
Hope some one will be looking for this.
Note: it's recommended to keep your phone with lock code enabled, but sometimes we need to keep the phone unlocked for some reasons.
If you install this xap, it will enable another wonderful feature..
By default, the 10 invalid attempts will erase ur phone. But after you install this xap, the password will be locked out for 1 min after 5 invalid attempts. Then after each attempts, the lockout time will double. I have tried untill the phone lockedout for 64 minutes. Then I stopped trying with the invalid lock codes. It will help you to keep the data safe, if anyone play with the phone, especially kids.
Note: Please don't try after 5-6 attempts if the phone didn't get locked out, may be this not compatible on your device. You may lose your data. I applied this on my T-Mobile HD7, and it is working fine.
Hit thanks if you like my post..
Thanks
JAZEEL
So I just applied the registry change in your provxml, and it temporarily works,i.e. it enables the option in the lock and wallpaper screen to disable the password, but next time you sync email the policy is reenforced and you have to set a pin again.
Are you also changing the permissions to that reg key in your xap somehow? haven't got a machine with the dev tools handy to try the actual xap out.
benneh said:
So I just applied the registry change in your provxml, and it temporarily works,i.e. it enables the option in the lock and wallpaper screen to disable the password, but next time you sync email the policy is reenforced and you have to set a pin again.
Are you also changing the permissions to that reg key in your xap somehow? haven't got a machine with the dev tools handy to try the actual xap out.
Click to expand...
Click to collapse
I have tested myself, and it's a permanent solution. It's stays for ever. But I don't know what will happen if you reconfigure the exchange account..
Is there any way to keep a timeout for the lock? I find it very irritating to enter the unlock code every time the device wakes up
@OP, what is the reg key for the change? You must know that to make an XAP?
timmymarsh said:
@OP, what is the reg key for the change? You must know that to make an XAP?
Click to expand...
Click to collapse
This is the key which deploys through the xap..
[HKEY_LOCAL_MACHINE\Security\Policies\Policies]
"00001023"=dword:1
Doesn't Work ...
Hi I tried this unlocker but it is not working for me every time I connect to the computer (Zune and Windows Phone Device Manager) it relocks and have to chevron unlock again.
Any suggestions?
Hello OP,
I have a Sprint HTC Arrive, I got the following message just trying to launch the xap file:
(WARNING)
(The carrier doesn't exist in database. Please contact your carrier for connection setting and go to Setting>cellular>edit
APN for further configuration.)
Theres no APN in my settings that I see, any help would be great, thanks
Striving said:
Hi I tried this unlocker but it is not working for me every time I connect to the computer (Zune and Windows Phone Device Manager) it relocks and have to chevron unlock again.
Any suggestions?
Click to expand...
Click to collapse
This is to disable the lock code on the phone if you have enabled the exchange account which will force to put the lock code.
To permanent developer unlock, please search in xda, someone already posted it before and I have applied that on my HD7.
purian23 said:
Hello OP,
I have a Sprint HTC Arrive, I got the following message just trying to launch the xap file:
(WARNING)
(The carrier doesn't exist in database. Please contact your carrier for connection setting and go to Setting>cellular>edit
APN for further configuration.)
Theres no APN in my settings that I see, any help would be great, thanks
Click to expand...
Click to collapse
I have checked on my HTC HD7 T-Mobile unlocked.. It's working fine..
Search for the reg key for your specific device, and if you find I will help you to deploy it on your device..
jazeelkk said:
This is to disable the lock code on the phone if you have enabled the exchange account which will force to put the lock code.
To permanent developer unlock, please search in xda, someone already posted it before and I have applied that on my HD7.
Click to expand...
Click to collapse
Thanks for the response funny a little while after I realized that is was for something other than the dev unlock. And happily I have gotten have way there I am unlock but have to make sure I remember to put phone in flight mode before connecting it.
rhn said:
is there any way to keep a timeout for the lock? I find it very irritating to enter the unlock code every time the device wakes up
Click to expand...
Click to collapse
i 2nd that!
jazeelkk said:
I have checked on my HTC HD7 T-Mobile unlocked.. It's working fine..
Search for the reg key for your specific device, and if you find I will help you to deploy it on your device..
Click to expand...
Click to collapse
Thanks for your response, the only reg i've ever found to disable the lock on my device is the one you posted and built into your xap file. For some reason the reg doesn't exist in my phone and I can't create it either.
Most likely why you put this together for us. But on my end here, I now have to app to my phone, once I go to launch it I get the message from my previous post, it just wont deploy/launch. Any ideas up i'm for trying.!!
Thank you,
The reg key is protected, so you can't browse to it, but you can still use a tool like advanced explorer to set it by manually specifying the full path and value to change.
I was able to set the value manually like this, but like I mentioned the value is set back automatically next time your phone sync's with exchange. The policy must get checked on every sync with exchange, and gets set back if your exchange server requires a PIN policy.
From what I can ascertain this XAP simply sets that value, so you would have to run this xap after every sync which isn't a great solution.
barrychon said:
i 2nd that!
Click to expand...
Click to collapse
I have tried it as mentioed in some old posts. But it is not working. Only thing I could do is to activate the ON/OFF button with this reg key, so that I can disable the code at any time.
I presume you guys know this already, but just for the heck of it.
You're bypassing a policy. A policy that's most likely you companies' policy. If you do lose your phone and people are able to access files or e-mails that are highly important and/or confidential, you could take the blame for leaking this information.
This could mean the company would sue you for all kinds of things, and it would be very much possible they would fire you. There is a reason the policy is enforced.
I can see why you want to disable the policy, but, as said, there is a reason your company wants that policy on a device that connects to their Exchange server and it's not to annoy you.
EvilWhiteDragon said:
I presume you guys know this already, but just for the heck of it.
You're bypassing a policy. A policy that's most likely you companies' policy. If you do lose your phone and people are able to access files or e-mails that are highly important and/or confidential, you could take the blame for leaking this information.
This could mean the company would sue you for all kinds of things, and it would be very much possible they would fire you. There is a reason the policy is enforced.
I can see why you want to disable the policy, but, as said, there is a reason your company wants that policy on a device that connects to their Exchange server and it's not to annoy you.
Click to expand...
Click to collapse
You are right. I recommend to keep the phone locked always.
It meant for some situation, where we need the phone need to be stayed unlocked. Atleast we should have the option for it.
EvilWhiteDragon said:
I presume you guys know this already, but just for the heck of it.
You're bypassing a policy. A policy that's most likely you companies' policy. If you do lose your phone and people are able to access files or e-mails that are highly important and/or confidential, you could take the blame for leaking this information.
This could mean the company would sue you for all kinds of things, and it would be very much possible they would fire you. There is a reason the policy is enforced.
I can see why you want to disable the policy, but, as said, there is a reason your company wants that policy on a device that connects to their Exchange server and it's not to annoy you.
Click to expand...
Click to collapse
Thanks mum. But seriously...
I think this is a perfect example of a security policy being set which isn't realistic, so users find workarounds. Like when you mandate everyone has a 50 character password which has to be changed once a week, everyone simply ends up writing them down on post it notes.
The PIN code every time you want to use your phone is bloody annoying. It could improved to make it more useable, e.g.:
Only require a PIN if it's been more than 30 minutes since you last entered it.
Only require a PIN when accessing data in exchange like calendar/email.
Specify certain actions which don't require a PIN unlock, e.g. playing music or games.
Anyhow this is mostly irrelevant as this hack is only temporary and the setting reverts so that's a killjoy.
benneh said:
Thanks mum. But seriously...
I think this is a perfect example of a security policy being set which isn't realistic, so users find workarounds. Like when you mandate everyone has a 50 character password which has to be changed once a week, everyone simply ends up writing them down on post it notes.
The PIN code every time you want to use your phone is bloody annoying. It could improved to make it more useable, e.g.:
Only require a PIN if it's been more than 30 minutes since you last entered it.
Only require a PIN when accessing data in exchange like calendar/email.
Specify certain actions which don't require a PIN unlock, e.g. playing music or games.
Anyhow this is mostly irrelevant as this hack is only temporary and the setting reverts so that's a killjoy.
Click to expand...
Click to collapse
Lol, you have a point, but or colleague above is quite correct, the policy is enforced for a reason. At my company, such an offense can mean instant dismissal
(if you use exchange for just calendar and contacts, as i do, a pin is not required to unlock, the policy is only enforced for email strangely enough....)
I agree the Pin should be how it was in WM 6.5 where you could have it only ask after 2 hours or evey 24 in some cases. That way if was a good balance. This business of requiring the PIN every time you look at your phone is crap. I have removed it from my droid device and I am fornunate that my company will not hassle me over it. Still though its a bunch a crap to enter it every 5 minutes.

Solving the Authentication Key Problem

Hi everyone!
DISCLAIMER
I have no f* idea of what this does, or if it's legal, common, natural, whatever wherever you live. So if this does magic or can't be posted, tell me so i know .
So IF VERIZON blames you for entering there... i don't care. My relationship with V ends when the logo goes off, but your case may be normal usage... or so.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
WARNING!! As stated by some users, this may affect/disable your calling and messaging capabilities. You have been prevented, test this only if you'r curious under your OWN RESPONSABILITY.
This is a summary of the issues and solving procedure from Zero2duo (thanks ):
calls out to ppl, i hear this "welcome to verizon, but we're sorry, we cannot authenticate your phone right now".
calls coming in, ppl calling go straight to voicemail...and i get a miss call on my end
just had a 20-30 min chat with verizon....got it sorted out, phone works again
turns out there system saw my old and new phones "active", so system was like "this phone number shows up twice" and then just put a block on the number
after the guy refreshed the system, phone works again
Click to expand...
Click to collapse
Intro
As i could read many times, there is a submenu inside the ##PROGRAMNITT menu from the phone called "AUTHENTICATION KEY".
Ok,so you need some code that you dont have hum....let's play a bit.
note: this does nothing and doesn't let you hack the device or make coffee for you, it's a crappy result.
Mmm well, to start, you need a *unknown* length password, which you don't know, and also other values that you can't get from the phone itself, but you can fetch with tools. The download list goes as:
- RevSkills
- A-Key Calculator (http://www.superbank.ru/sms/)
- From the old times, the QualcommDIAG (old driver) or the SPST usb driver, so we get a COM port for the device. Both can be found on the forum itself. The best option is the bitpim guide, so you can know how to set the com port and yak yak yak.
Walkthrough
- Enter the ##PROGRAMNITT submenu and then activate the serial class mode within the "OTHER" submenu.
- Plug the kin
- Open revskills and set the port dropdown menu with your current phone com port (probably COM3)
- Go to the tab on this image, and press the "Read" button:
Write the ESN value (red square) / keep this window open.
- Open the A-key calculator, and input (write as is) the ESN value on the textbox (Note that it's a 8 hex char value, so put 0's on the left if doesnt). The right value will be updated while you type your ESN.
The result looks like this:
- Enter the "AUTHENTICATION KEY" submenu and type the updated value from A-key calculator & press "OK" button.
- Enjoy the... well does nothing for me so... who knows what's this for? unlocking the kin?
Note that i shadowed my values for security reasons... for the verizon customer, i guess, i dont use any of them .
Looks interesting. From what you've explained, you are not on a Verizon network (out of the country) and do not have an activated phone, correct?
I'm going to play with this later tonight, unless someone else beats me to it and convinces me not to.
klamation said:
From what you've explained, you are not on a Verizon network (out of the country) and do not have an activated phone, correct?
Click to expand...
Click to collapse
Outta the verizon network, outta the country. I'm from Europe. That's why i got some delay on the posts... rofl.
I knew i couldnt use it, I just bought the first kin for the lulz. I thought i was going to be able to hack it through IE bugs... meh, life shows you that things are not always as expected....
Anyone tested this yet on the Verizon Network? I know it sounds dangerous but it's worth a try. I believe I've bricked mine so I'll attempt it when I get it back to a serviceable state.
Here's to hoping.
Heratiki said:
Anyone tested this yet on the Verizon Network? I know it sounds dangerous but it's worth a try. I believe I've bricked mine so I'll attempt it when I get it back to a serviceable state.
Here's to hoping.
Click to expand...
Click to collapse
Was gonna try it until you reminded me of a brick possibility. Eh, my kin is only 2 weeks old, I'll try it tonight.
Eh, no brick here. I tried it on my 2m. Calculated the hex key, entered it into the phone, it said stored and that it required a reboot. I exited the ##programnitt menu, then phone rebooted.
Nothing appears different. Bitpim still has access to the same folders.
On a side note, RevSkills is a crazy program! John, have you used any of these other tools? on a kin or other phone?
GrandSportX said:
Eh, no brick here. I tried it on my 2m. Calculated the hex key, entered it into the phone, it said stored and that it required a reboot. I exited the ##programnitt menu, then phone rebooted.
Nothing appears different. Bitpim still has access to the same folders.
On a side note, RevSkills is a crazy program! John, have you used any of these other tools? on a kin or other phone?
Click to expand...
Click to collapse
seconded, just got my authentication key and entered it, and phone still works. Now if only it actually triggered/done something in our favor.
GrandSportX said:
On a side note, RevSkills is a crazy program! John, have you used any of these other tools? on a kin or other phone?
Click to expand...
Click to collapse
I tested all the tools, all the programs i could run on a virtual and normal machine long time before developping KinO.
"Nothing to see here" is always the answer. The phone memory couldnt be readed with this programs, and nothing access the phone, apart the cdma data, which is like meh for me (no cdma usage for the settings). As even SPST uses MTP driver for firmware (not the COM port driver), i guess all feasible with com ports is just cdma settings.
Also you can write something that mess your phone and that things....
Maybe other users from this forum (whole xda) know what's this for in cdma phones. I got any comunications knowledge, apart the network software needed for me.
me= noob post
heyyo so i tried this but rev skills keeps crashing when i tell it to read ( i set it com3 which is where bitpim and my compy say the phone is) and sad face taht it doesnt change anything has anyone looked at the logs after entering the key?
edit nm my compy worked the kin screen needs to be on
so i entered the key last night and somehowmy phone can send or receive messages or calls... so i restored it adn now it works. also a red light appeared where the light sensor is...
ishbar said:
also a red light appeared where the light sensor is...
Click to expand...
Click to collapse
That was always there for me during boot time. It just flashes for a little time, anyway.
It's extrange that only 1 reported it. If it's a common issue, i will change the advice to a bigger one, so you could know before messing things up.
ishbar said:
so i entered the key last night and somehowmy phone can send or receive messages or calls... so i restored it adn now it works. also a red light appeared where the light sensor is...
Click to expand...
Click to collapse
Did you mean that "you cannot make phone calls or receive them when you entered the key"?
Weird thing (pretty sure it isn't because I entered the Authentication Key), my bro activated his HTC Thunderbolt yesterday and when I try calling him, after 2 rings, I then hear a voice that says "welcome to verizon, but the number you are dialing cannot be reached". My calls to him don't go through, but he can call me. I am thinking it is because I had blocked all the data services (thru My Verizon except for the Pic/Txt MMS) and since the Thunderbolt is a smartphone, I cannot make calls to it.
So I unchecked "blocked all data", and will try to call my bro's phone again once I officially get an email from verizon stating that my features that been updated. I will also call up Verizon later today and ask them what's up.
zero2duo said:
my bro activated his HTC Thunderbolt yesterday and when I try calling him, after 2 rings, I then hear a voice that says "welcome to verizon, but the number you are dialing cannot be reached". My calls to him don't go through, but he can call me. I am thinking it is because I had blocked all the data services (thru My Verizon except for the Pic/Txt MMS) and since the Thunderbolt is a smartphone, I cannot make calls to it.
Click to expand...
Click to collapse
If it was both things, i would really think about the Auth change, but receiving/calling separately OK is pretty much weird.
I would call to a home number or another number, if any. Dunno how 3g/cdma works to call another phone and if it's data or normal usage.
johnkussack said:
If it was both things, i would really think about the Auth change, but receiving/calling separately OK is pretty much weird.
I would call to a home number or another number, if any. Dunno how 3g/cdma works to call another phone and if it's data or normal usage.
Click to expand...
Click to collapse
Just tried calling other family members cells and house number, and I still get the "welcome to verizon, but we're sorry, we cannot authenticate your phone right now".
So I think it's safe to say that entering the A-Key did this. I went back to the hidden menu, and tried to "disable" the Authentication Key, but it just asks me to enter it and nothing more.
Any ideas to "disable" the Authentication Key? Besides this
Clear Storage memory (reset phone)
* Hold C+B+ Power
* Prints a Phone image (and reboots)
Hate to have to re-enter my contacts again.
Update: did the Clear command, tried calling, and still get that "welcome to verizon, but we're sorry, we cannot authenticate your phone right now" msg. Gonna call verizon; hopefully it's an easy fix on their end and I won't need to get a new phone.
I updated the first post, so the user knows what could happen. I don't see the point of the authentication then. Unless it dissengages you from verizon, but receiving must be done withing a mobile network, so all it's pretty much weird.
zero2duo said:
Any ideas to "disable" the Authentication Key? Besides this
Clear Storage memory (reset phone)
* Hold C+B+ Power
* Prints a Phone image (and reboots)
Click to expand...
Click to collapse
Try to export your contacts from the submenu, so you can download the xml and, at least have the ones you had previously to a CB operation. You can try to reupload it with kino and try to import after rebooting. Nothing is assured but worths a try (at least the export part is feasible).
I'm sorry about the CB requirement, but that's expected when playing with unknown things in a production phone.
As this could change things, and i dont loose anything, i will check what the changes are in the logs files (like "skipping verizon connection" messages).
OK just called verizon (20-25 min chat), after the 1st rep couldn't fix it, she found a tech who could. Basically, he said that their billing system saw two instances of my number (they were saying maybe when I activated my Kin, that I had my old phone on and that caused the problem...we know what caused it though), so he refreshed the system. Then had me re-activate my Kin via *228. Then after rebooting phone, outgoing and incoming calls work...also txt msg does too.
Before doing the Clearing button command, exported contacts to my laptop. Then after phone was working again, tried importing it back in but got this error msg "can't import contacts right now because there is non-compliant XML in the contacts file". Guess I will just go to a verizon store and get it transferred from the old phone.
Here's a little summary of everything john (if you wanna put this info in the 1st post):
calls out to ppl, i hear this "welcome to verizon, but we're sorry, we cannot authenticate your phone right now".
calls coming in, ppl calling go straight to voicemail...and i get a miss call on my end
just had a 20-30 min chat with verizon....got it sorted out, phone works again
turns out there system saw my old and new phones "active", so system was like "this phone number shows up twice" and then just put a block on the number
after the guy refreshed the system, phone works again
Great to hear about the solving procedure being done. Then the menu and the option would probably be a manual introduction into the verizon network, as you would do for entering the company from others (Sprint maybe?). I guess that's done auto on their side, but this menu allows you to do it too.
I dunno why you all get the contacts error. As i just imported the xml from klamation ok.Maybe yours has more data than "name, phone number" values.
i will export my full one and see what happens, when i'm a little ... less bored so i can reboot several times hehehe.
PS: quoted on first post.
johnkussack said:
I dunno why you all get the contacts error. As i just imported the xml from klamation ok.Maybe yours has more data than "name, phone number" values.
i will export my full one and see what happens, when i'm a little ... less bored so i can reboot several times hehehe.
Click to expand...
Click to collapse
I was able to successfully upload the contact file from klamation (got 215 of those BOB contacts). Then I renamed my "contacts.export" file to "cellebrite.contacts.xml", also removed my own name/contact from it, and still get the error when trying to import. It could be the case that I have extra junk for some contacts (have some work and home numbers, also maybe added some values in the "notes" field/tag. What I will try tonight, edit my contacts file so that its just the Name and Mobile tags that are present and retry importing that.
zero2duo said:
I was able to successfully upload the contact file from klamation (got 215 of those BOB contacts). Then I renamed my "contacts.export" file to "cellebrite.contacts.xml", also removed my own name/contact from it, and still get the error when trying to import. It could be the case that I have extra junk for some contacts (have some work and home numbers, also maybe added some values in the "notes" field/tag. What I will try tonight, edit my contacts file so that its just the Name and Mobile tags that are present and retry importing that.
Click to expand...
Click to collapse
After many trial and error attempts at importing my contact list, it finally worked once I gave a LastName tag and value for the contacts that I previously only had FirstName (some of my contacts, I only had first names since a last name wasn't necessary for me to remember them).
So from my testing, you need both FirstName and LastName tags, and at least one character for a valid value and then the import will work.

Need a dialer that IGNORES letters in the phone number

In my contact manager, I often include some descriptive text in the phone number field to differentiate one "Work" number from another.
For example, I have two "Work" numbers for Verizon. In the phone number field, after the actual number, I'll enter "Tech Supp" for one and "Billing" for the other. On my phone, it looks like:
Work: (800) 555-1212 Tech Supp
Work: (800) 555-1213 Billing
But dialers convert that text and dial it as numbers. Dialers I have tried will dial the above numbers as:
800555121283247877
80055512132455464
Is there a dialer that will ignore text that appears in the field with the phone number and/or simply dial the first ten digits??
Thanks.
Jace
I've never seen such a dialer, especially since some letters are actually used for things like a 'hard pause' and 'wait'.
There is a cleaner solution however, but it'll take a bit of work on your part.
If you use Google Contacts as your primary contact list (and I highly suggest you do for all sorts of reasons), you can actually change the text displayed next to any phone or email simply by clicking where it says Home/Work and selecting CUSTOM. Name it whatever you like and that label will carry over to your phone in the S3's default address book.
For example I have a few listed as:
Work - Direct (Line)
Work - Main (Company)
Note: I had an issue with a previous phone where not all the letters showed up so I tried to keep the names shorter by omitting the parts you see in ().
It works great however and it's quite easy to set up on a PC when on the Google contacts page. (I'm not sure if you can set custom on the phone directly).
Good luck
Thanks. I'd always heard that the characters for pauses and waits were "," and ";". but a little Googling reveals that "p" and "w" are used as well. You learn something every day, eh?
I use Microsoft Exchange for my contacts and sync w/ my phone because the contact list is shared with other people. Calendars too. I'll look into syncing with Google Contacts, but am a little leary of putting all that data in the cloud with reports of all the breaches occurring these days. Still, if Google Contacts can sync (two ways) w/ MS Exchange and with our phones (also two ways) so we are able to edit data on the phones and have it sync back to MS Exchange (through Google Contacts), that would be a workable solution.
Thanks again for the input.
DroidGnome said:
I've never seen such a dialer, especially since some letters are actually used for things like a 'hard pause' and 'wait'.
There is a cleaner solution however, but it'll take a bit of work on your part.
If you use Google Contacts as your primary contact list (and I highly suggest you do for all sorts of reasons), you can actually change the text displayed next to any phone or email simply by clicking where it says Home/Work and selecting CUSTOM. Name it whatever you like and that label will carry over to your phone in the S3's default address book.
For example I have a few listed as:
Work - Direct (Line)
Work - Main (Company)
Note: I had an issue with a previous phone where not all the letters showed up so I tried to keep the names shorter by omitting the parts you see in ().
It works great however and it's quite easy to set up on a PC when on the Google contacts page. (I'm not sure if you can set custom on the phone directly).
Good luck
Click to expand...
Click to collapse
And yes you can do the same thing from the phones contacts list.
_______________
Just Flash It !!!
I don't see how to edit the label from the phone itself, if that is what you were referring to, neither from the stock Contacts app, nor from Touchdown (which is what I currently have all my contacts in).
jrgreenman said:
I don't see how to edit the label from the phone itself, if that is what you were referring to, neither from the stock Contacts app, nor from Touchdown (which is what I currently have all my contacts in).
Click to expand...
Click to collapse
It was started above already
In the stock contacts app
Edit contact
Next to the number should be a label
Click it scroll down to custom and change it.
Sent from my SPH-L710 using Tapatalk 2
ZiggSVO said:
It was started above already
In the stock contacts app
Edit contact
Next to the number should be a label
Click it scroll down to custom and change it.
Sent from my SPH-L710 using Tapatalk 2
Click to expand...
Click to collapse
Aha!! Got it. Thanks!
jrgreenman
I see someone gave you a solution to your issue, you should edit your title to reflect that it's been fixed or something along that line, I jumped in to suggest that same solution!
elephant007 said:
jrgreenman
I see someone gave you a solution to your issue, you should edit your title to reflect that it's been fixed or something along that line, I jumped in to suggest that same solution!
Click to expand...
Click to collapse
While the solution may be workable, it is rather brute force to edit the 4000+ contacts I have. Is it acceptable to leave the thread open in the hope of a more elegant solution?
jrgreenman said:
While the solution may be workable, it is rather brute force to edit the 4000+ contacts I have. Is it acceptable to leave the thread open in the hope of a more elegant solution?
Click to expand...
Click to collapse
of course it is, you're the OP, it's your thread!
Wow that's a lot of contacts!
elephant007 said:
of course it is, you're the OP, it's your thread!
Wow that's a lot of contacts!
Click to expand...
Click to collapse
A lifetime's worth. And growing every day.
Thanks for the confirmation. Wasn't sure if I was on the edge of a forum rule or something.

Categories

Resources