Bonum Certa Men Certa

Vista Phony 7 is Broken, Cracked

Co-authored with G. Forbes

Bulb



Summary: Vista Phony 7 [sic], Microsoft's latest platform for mobile devices, has serious new deficiencies

MICROSOFT RUSHED Vista Phone 7, its ridiculous cross-vendor response to Android, some while ago. It had also been intended to compete with the Blackberry and hypePhone, controlled solely by RIM and Apple respectively. Signs of VP7's immaturity continue to show, with this critical bug being reported: "Someone found out the hard way what happens when you install more than 15 applications that use the push notification system in Windows Phone 7. To put it bluntly: it stops working."



“Microsoft has quickly become a laughing stock in the area of smart phone software.”When it comes to application sales, Microsoft cannot realise just how badly they did with the tiny userbase. Pouring salt on these wounds, the Windows Phone Marketplace DRM has been cracked anyway (more here):

"WPCentral has been given a proof of concept which shows them breaking through WP7 Marketplace’s DRM. The weakness has apparently been known to developers for some time, and WPCentral has given the information to Microsoft, and are working to patch the hole."

Microsoft has quickly become a laughing stock in the area of smart phone software. Mediocre security is indicative of substandard programming, and with this DRM proof-of-concept crack, a solution has already arrived from the outside:

Tobias, the white hat hacker who recently revealed a proof-of-concept crack for the copy protection on Windows Phone 7 apps has taken steps to develop a solution for his own hack. His FreeMarketplace code (only 65.5kb in size) took only about 6 hours to develop, but in the process demonstrated how easily the Microsoft’s app DRM copy-protection for WP7 could be stripped. The crack was not intended to harm the WP7 Marketplace, but was intended as a critique of Microsoft’s seemingly lax security. To help protect developers in the interim, while Microsoft develops its own solution, Tobias has posted code that developers can deploy in their apps to help protect them from piracy.


Nick Farrell explains that this "software exploits a flaw in raw installation packages or "XAP" files, which means they can be freely downloaded. This works because the Zune client software downloads XML files with all the package locations to enable application browsing and installation, and both the XML and XAP files are served without restriction." Microsoft has had problems with managing operating system permissions for a long, long time.

Recent Techrights' Posts

Red Hat Has Become a Buzzwords Vendor, Not a Linux Company
Red Hat is quickly becoming a joke of a company or "90% marketing"...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 14, 2024
IRC logs for Thursday, November 14, 2024
Perils for Patent Eligibility Restoration Act (PERA) and PREVAIL (Efforts by the Litigation 'Industry' to Bring Back Software Patents and Crush Challengers at PTAB)
The EFF and FSF seem to have caught up with it
Phoronix Did Not Cover This...
1,000 people fired at AMD is not news
Links 15/11/2024: LF Talks About Patent Trolls, Advancing a Warning About "Buy Nothing Day"
Links for the day
Alexander Wirt (formorer), Wayward people & Debian censorship
Reprinted with permission from Daniel Pocock
Gemini Links 14/11/2024: Infocalypse and "Multiple Monitorings"
Links for the day
Links 14/11/2024: The Web We Lost Coming Back, X/Twitter Crashing
Links for the day
Links 14/11/2024: Politics, Climate, and Instability
Links for the day
Links 14/11/2024: EmacsConf and Flounder
Links for the day
Links 14/11/2024: Science and the Demise of Microsoft-Connected USPTO Director
Links for the day
For "X" to Die the Media and Politicians Will Need to Quit (Then, Advertisers Will Lose Interest, Even for Political Ads)
Fewer people are still there anyway
Debian GNU/Linux and Free Software Developer Daniel Pocock in Irish Elections This Month (Dublin Bay South)
Polling day in 15 days
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, November 13, 2024
IRC logs for Wednesday, November 13, 2024
Bob Should Tell Alice About What GitHub (Which Linux Foundation Outsources Code to) Does to Entire Nations, Following Donald Trump's Policies
"What's next, preventing access to Linux from non-NATO countries? Putting NSA backdoors in the kernel?"
Layoffs as Happy Stories in the Corporate Media
It's based on a longstanding pattern
It Took The Guardian More Than 2 Years of Musk to Realise What Twitter Was and It Took Twitter 4 Years of a President Trump to Realise What Trump Was
Trump was deplatformed only a fortnight before Biden became president anyway
[Meme] Google 80%, Windows 2%
"I'm going to f---ing bury that guy, I have done it before, and I will do it again. I'm going to f---ing kill Google."
Microsoft's Market Share Falls to 2% in Haiti
Throw in Android (now 80% of "the market") and Windows is down to 2%
Gemini Links 13/11/2024: Magic of Walking and Lest We Forget
Links for the day
Links 13/11/2024: USPTO Director Kathi Vidal ('Former' Microsoft Rep) Resigning, Censorship After Car Ramming Attack in China
Links for the day
Microsoft: Layoffs, Outsourcing, and R.T.O. as Cover for Mass Layoffs Without Severance Pay
Microsoft had mass layoffs pretty much every month this year
[Meme] The Addicted Lolicon Throwing Stones
"They've found my RMS attack site"
Jonathan Carter & Debian betrayed Joel Espy Klecker
Reprinted with permission from Daniel Pocock
Links 13/11/2024: Red Tape War and Programming Experiences
Links for the day
Links 13/11/2024: "Make Your Laptop Last FOREVER" With GNU/Linux, 23andMe Mass Layoffs, Intel 'Resignations' Layoffs Loophole
Links for the day
In Switzerland, GNU/Linux Reaches Record Highs, But What About the Corruption?
Pocock is a disappointed citizen of Switzerland
More Than 3 Years After Vista 11's Release More Chinese Computer Users Still Use Vista 7 (Than "11")
it was "officially" released October 5, 2021
At BetaNews, "Most Commented Story" Is Not a Story But LLM Slop! (Readers Talking to Bots)
They make fake stories with provocative headlines and then boast that these get many comments
[Meme] Swiss Lawyers/Attorneys Who Fake Qualifications and Rob People
Switzerland mostly guards its reputation by censorship of media
Just How Slow Has the News Industry Become?
We're drowning in garbage from fake publishers
Things That Still Work OK (But We're Being Shamed for Using)
Using old stuff is nothing to be shamed of (or afraid to do)
Free Software is About Collaboration
WordPress limits it
Even the Managing Editor of BetaNews is Doing Slop and Spam
A Fish Rots From The Head Down
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, November 12, 2024
IRC logs for Tuesday, November 12, 2024
PERA Bill in US Senate Strives to Crush Caselaw, Making Patents on Mathematics and Algorithms 'Great Again'
Follow the money
BetaNews is Beta-Testing the Site as LLM Slop With Microsoft Propaganda Thrown In
Many of the people there are Microsoft boosters and they use slop as "filler" (for marketing)
Evolution of euthanasia & WIPO UDRP similarities exposed by W. Scott Blackmer
Reprinted with permission from Daniel Pocock
Gemini Links 13/11/2024: Phasing Out 3G, Brian Kernighan Books, Tcl/Tk, Time to Ditch x86
Links for the day