Bonum Certa Men Certa

Vista Phony 7 is Broken, Cracked

Co-authored with G. Forbes

Bulb



Summary: Vista Phony 7 [sic], Microsoft's latest platform for mobile devices, has serious new deficiencies

MICROSOFT RUSHED Vista Phone 7, its ridiculous cross-vendor response to Android, some while ago. It had also been intended to compete with the Blackberry and hypePhone, controlled solely by RIM and Apple respectively. Signs of VP7's immaturity continue to show, with this critical bug being reported: "Someone found out the hard way what happens when you install more than 15 applications that use the push notification system in Windows Phone 7. To put it bluntly: it stops working."



“Microsoft has quickly become a laughing stock in the area of smart phone software.”When it comes to application sales, Microsoft cannot realise just how badly they did with the tiny userbase. Pouring salt on these wounds, the Windows Phone Marketplace DRM has been cracked anyway (more here):

"WPCentral has been given a proof of concept which shows them breaking through WP7 Marketplace’s DRM. The weakness has apparently been known to developers for some time, and WPCentral has given the information to Microsoft, and are working to patch the hole."

Microsoft has quickly become a laughing stock in the area of smart phone software. Mediocre security is indicative of substandard programming, and with this DRM proof-of-concept crack, a solution has already arrived from the outside:

Tobias, the white hat hacker who recently revealed a proof-of-concept crack for the copy protection on Windows Phone 7 apps has taken steps to develop a solution for his own hack. His FreeMarketplace code (only 65.5kb in size) took only about 6 hours to develop, but in the process demonstrated how easily the Microsoft’s app DRM copy-protection for WP7 could be stripped. The crack was not intended to harm the WP7 Marketplace, but was intended as a critique of Microsoft’s seemingly lax security. To help protect developers in the interim, while Microsoft develops its own solution, Tobias has posted code that developers can deploy in their apps to help protect them from piracy.


Nick Farrell explains that this "software exploits a flaw in raw installation packages or "XAP" files, which means they can be freely downloaded. This works because the Zune client software downloads XML files with all the package locations to enable application browsing and installation, and both the XML and XAP files are served without restriction." Microsoft has had problems with managing operating system permissions for a long, long time.

Recent Techrights' Posts

Even Technical Articles and HowTos From UNIXMen Nowadays Seem to be LLM Slop
We've just permanently removed the RSS feed of UNIXMen
The FSF's 2024 End-of-Year Fundraiser Succeeds: Over $400k to Support Software Freedom
That's worth bringing up again because the SFC is trying to 'crash' this achievement of the FSF
[Meme] Fentanylware (TikTok) Banned in the United States, Next Up European Union (EU)
And the United Kingdom (UK)
President Biden is Right, "Free Press is Crumbling" and the United States Exports Its Media-Hostile Culture to Other Continents
perhaps Biden should pay closer attention to how Donald Trump-inspired Americans take their battles to other continents
Guardian Digital, Inc (linuxsecurity.com) Uses Microsoft-Controlled Front Groups and LLM Slop in Order to Spread Microsoft-Directed Anti-Linux FUD
Microsoft garbage likely produced by Microsoft LLMs, spewing out Microsoft FUD
Thank You, London! There Was No Way to Still Reliably Host Gemini From Home (on a Raspberry Pi 4) Due to Scale
The only regret we've long had is that we hadn't made the move earlier
The Summit of Future (Kerala, 2025): Dr. Richard Stallman (RMS) to Give Keynote Talk
promotional video was uploaded
 
RMS 'Inauguration' in Montpellier (Government Administration) on January 20th
Happy hacking
Links 17/01/2025: TikTok Banned by the United Stated (SCOTUS Rejects Appeal)
Links for the day
Software Freedom Conservancy Inc (SFC) Makes It Obvious It's Just a Copycat Trying to Exploit or Leech Off the FSF's (and GNU's) Work
They swim next to the rich people (who "match")
Links 17/01/2025: Fentanylware (TikTok) Herds Its (Drug) Users Into Even More Harmful "Apps"
Links for the day
Likely Fake 'Article' About Linux Mint 22.1
BetaNews fired up its plagiarism machine (LLM)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, January 16, 2025
IRC logs for Thursday, January 16, 2025
Links 16/01/2025: Conflicts, Overpopulation, and Software Patents
Links for the day
[Meme] Lock-down With DRM Server/s (in a Nutshell)
Companies like Microsoft and Apple have a 'God complex'
Richard Stallman's Talk This Coming Monday (European 'Tour')
bunch of talks in Europe
Total Lock-down Ambitions - Part II - Down to the Very Core, Including the Hardware (CPU, GPU, Peripherals, and More)
instead of distinguishing themselves and antagonising these broadly reviled "antifeatures", both Canonical and IBM decided to join Microsoft in advocating lockdown
FSF, Guardian of the GNU Project, to Reach $400,000 in Winter Fundraiser Ahead of 40th Anniversary
The GNU Project Turns 42 later this year
Links 16/01/2025: "Meduza, IRL" and the Clock is Ticking on TikTok in the US
Links for the day
Gemini Links 16/01/2025: Yesterday's Gone, The Hour of the Dragon by Robert E Howard
Links for the day
Computer Users Aren't Zoo Animals
Animals don't belong inside cages in zoos, either
Links 16/01/2025: Scale and Scope of Microsoft Layoffs Revealed (Two Waves of Layoffs in 2025 Already)
Links for the day
Gemini Links 16/01/2025: Meta Has a Pixelfed Problem and Space Time Scoping
Links for the day
Anti-Linux 'Articles' in linuxsecurity.com (Guardian Digital, Inc) Are Composed by Bots, Probably Microsoft's
linuxsecurity.com has become a mindless stream of LLM slop
"New Year, New Career"
published a few hours ago
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, January 15, 2025
IRC logs for Wednesday, January 15, 2025
If You See Many Microsoft Puff Pieces That All Say More or Less the Same, Consider the Possibility That Microsoft LLMs 'Wrote' Those
There are also many phantom fake 'reports' about Microsoft in relation to some "hey hi" (AI) things
[Meme] The Crybully
Crybullies shrug
IRC Logs Complete in Geminispace (Even in GemText Format!)
We still envision ourselves - a community of justice-seeking enthusiasts - as a multi-protocol platform, not just some ordinary Web site
It Was Only a Matter of Time
We're going to pursue justice
[Meme] "Well, He’s Dead So," Bill Gates Tells the Media (Which He Pays) About His Close Friend Jeffrey Epstein
Does the police in San Francisco cover up crimes instead of solving them?
The Rumour Was Right, Today is the Second Large Wave of Microsoft Layoffs in 2025
It has only been two weeks since the year began
The Free Software Foundation (FSF) Has Had a Good 2025 Already (Its "Year 40")
FSF will reach $400,000
[Meme] Not About How Many Locks One Adds
Some people try to point their fingers in all the wrong directions now that a new patch is available for rsync
Total Lock-down Ambitions - Part I - DRM and TPM Need Not be the Future of Computing, There's Another Way
Who is being restricted? Us, the users.
[Meme] His Existence is Proof It's Not Infeasible
We salute the FSF's original mission
New Upcoming Series About DRM and TPM
We'll do our best to name and explain some of the alternatives that are still available
Links 15/01/2025: Efforts to End Wars and 'Newsflation'
Links for the day
Gemini Links 15/01/2025: Abandoning Windows for GNU/Linux, SIS Progress Update
Links for the day
Links 15/01/2025: Social Control Media Spreading Lies, TikTok Banned in 4 Days
Links for the day
More Microsoft Cuts and Layoffs (Microsoft Media Mole Jordan Novet Tries to Float "Hiring Freezes" Spin After the "Headcount" Spin Failed)
As one might expect...
Microsoft Breaks Linux Again
Does it even care? It's selling Windows.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, January 14, 2025
IRC logs for Tuesday, January 14, 2025