Bonum Certa Men Certa

Vista Phony 7 is Broken, Cracked

Co-authored with G. Forbes

Bulb



Summary: Vista Phony 7 [sic], Microsoft's latest platform for mobile devices, has serious new deficiencies

MICROSOFT RUSHED Vista Phone 7, its ridiculous cross-vendor response to Android, some while ago. It had also been intended to compete with the Blackberry and hypePhone, controlled solely by RIM and Apple respectively. Signs of VP7's immaturity continue to show, with this critical bug being reported: "Someone found out the hard way what happens when you install more than 15 applications that use the push notification system in Windows Phone 7. To put it bluntly: it stops working."



“Microsoft has quickly become a laughing stock in the area of smart phone software.”When it comes to application sales, Microsoft cannot realise just how badly they did with the tiny userbase. Pouring salt on these wounds, the Windows Phone Marketplace DRM has been cracked anyway (more here):

"WPCentral has been given a proof of concept which shows them breaking through WP7 Marketplace’s DRM. The weakness has apparently been known to developers for some time, and WPCentral has given the information to Microsoft, and are working to patch the hole."

Microsoft has quickly become a laughing stock in the area of smart phone software. Mediocre security is indicative of substandard programming, and with this DRM proof-of-concept crack, a solution has already arrived from the outside:

Tobias, the white hat hacker who recently revealed a proof-of-concept crack for the copy protection on Windows Phone 7 apps has taken steps to develop a solution for his own hack. His FreeMarketplace code (only 65.5kb in size) took only about 6 hours to develop, but in the process demonstrated how easily the Microsoft’s app DRM copy-protection for WP7 could be stripped. The crack was not intended to harm the WP7 Marketplace, but was intended as a critique of Microsoft’s seemingly lax security. To help protect developers in the interim, while Microsoft develops its own solution, Tobias has posted code that developers can deploy in their apps to help protect them from piracy.


Nick Farrell explains that this "software exploits a flaw in raw installation packages or "XAP" files, which means they can be freely downloaded. This works because the Zune client software downloads XML files with all the package locations to enable application browsing and installation, and both the XML and XAP files are served without restriction." Microsoft has had problems with managing operating system permissions for a long, long time.

Recent Techrights' Posts

Richard Stallman's Web Site Back Online, But It Seems Like a 2-Months-Old Snapshot
Latest political notes are dated July 2 (2026)
 
Software Freedom, Even If Difficult to Attain Due to Outside Pressure, Does Make You Happier
Peer pressure and opinionated employers can make friends and staff more miserable if they dictate bad software
You Can Run GNU/Linux on a Desktop/Laptop for 1,000+ Days Nonstop
To me, the long uptime is a way of "marketing" GNU/Linux as robust and stable
Profiting From Global Warming (and Making More Money the More You Cause Warming)
Unregulated bank and pyramid scheme
SLAPP Censorship - Part 172 Out of 200: The Solicitors Regulation Authority (SRA) Complicit in the SLAPPs by Inaction (Didn't Even Study Any Evidence, Only Wasted Time and Budget)
"SRA placed into special measures due to 'disappointing standard of leadership'"
China Does Not Need American (US) Products Like GAFAM's
China has abundance of technical things it can leverage to preserve its autonomy
RMS Didn't Make Enough Backups
Making backups is important
Refresher: Why EPO Staff is on Strike This Year (Aside From the EPO Acting Like a Corrupt, Above-the-Law, For-Profit Corporation That Violates Its Own Charter)
One core issue at the EPO is erosion of purchasing power
Gemini Links 05/09/2026: Fireflies, Shore Pine, and ASCII Art
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 04, 2026
IRC logs for Friday, September 04, 2026
The Legal Services Board (LSB) Takes on Solicitors Regulation Authority (SRA) for Utter Failures, We'll Resume Our SRA Series to Illuminate How Bad the SRA Really Is
a quick overview of the latest news
Links 04/09/2026: Notorious Patent Trolls' Judge Enters the Private Sector (Corruption, Revolving Doors), Gloria Steinem's Life in Pictures
Links for the day
Gemini Links 04/09/2026: Worries, Upgrades, and CS Students
Links for the day
SPAM Disguised as Benchmark or Comparison: The Register MS "PARTNER CONTENT" is Getting Weirder by the Month
Sites that promote fake 'coins' or pyramid schemes to their audience(s) aren't worth tolerating
PIPs at IBMs are Layoffs Because They're Impossible to Satisfy (or They Terminate Workers Despite Satisfying Them)
What insiders say
In the United Kingdom You Can No Longer Make the Assumption People Use Windows (or 'Smart' 'Phone')
As autumn arrives Microsoft faces a crisis
SLAPP Censorship - Part 171 Out of 200: Talking About Corruption and Violence Against Women
Today the Labour Party (UK) speaks about corruption
Warming Up for Investigative Journalism About the European Patent Office (EPO), Europe's Second-Largest and Probably Most Corrupt Institution in Europe
It continues to exploit diplomatic immunity for impunity
Microsoft Handing Out PIPs by the Thousands, Anxiety in GAFAM Building Up
Years ago I heard from people who pretended to be ill to avoid getting fired
BRICS in the Windows: Brazil's GNU/Linux Share (as Measured by CDN) Has Hit Highest Point in a Month
The largest Web CDN, Clownflare, sees GNU/Linux at 8.1% right now in Brazil
Corporate Media Will Always Glorify Its Owners (Corporations That Value Nothing But Capital)
Collecting "money" like it's a form of competition where they track "score"
We'll Never Do Slop!
Being against slop is not being "left behind"
Thieves Complain About the People They Steal From
"When you point the finger at someone, there are three fingers pointing back to you"
Links 04/09/2026: "The Rise of the Billionaire Lobby", the "Imperialist Delusions", and Digital Restrictions (DRM) From Nvidia
Links for the day
Buying From China
Nations must begin to speak about their digital sovereignty, which Free software is best equipped to grant and best positioned to assure in the face of outside resistance
GNU/Linux Continues to Grow in China
GNU/Linux reached its highest point in a month
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 03, 2026
IRC logs for Thursday, September 03, 2026
Gemini Links 04/09/2026: Forgotten Realms Avatar Series and Slop Plagiarism's Footprint in Gopher/Geminispace
Links for the day
Like Uber, Paypal's Debt Has Shot Up 2.5 Billion Dollars in 3 Months, Now the Mass Layoffs Come to India
even reducing the salaries by offshoring isn't enough to save the company
IBM Eliminating Over 20,000 IBM Workers by Year's End, Insiders Claim
the layoffs are silent
Microsoft "engineers who aren’t critical are let go" this week/month (silent layoffs)
"stack ranking"
Is Microsoft Trying to Kill What's Left of XBox by Year's End?
How many people will still bother purchasing these consoles by the end of the year?
SLAPP Censorship - Part 170 Out of 200: Downtimes
Yesterday traffic skyrocketed here
The Register MS Publishes More Word Salads Promoting "AI" Because It's Paid to Do So
Hype, name-dropping, and scaremongering
Gemini Links 03/09/2026: Google Maps, Gemini's Early History, and Suppressing Slop Plagiarists
Links for the day
Links 03/09/2026: Unsafe Skies, Thunderbird Adopts Proprietary / Vendor Lock-in Traps, "Xbox Live Down Again"
Links for the day
Growing Thirst for Free Software, the LibreOffice Edition
LibreOffice is in "high demand"
Links 03/09/2026: John Ternus Enters Apple Amid Mass Layoffs, Journalist İrem Delice Arrested
Links for the day
Stallman.org Down Due to Virtual Machines Issue, "Senior Engineers are Investigating the Issue" Since Saturday
RMS site down due to virtual machines issues upstream
Linux Foundation is Plagiarism Hub, Linux is at Risk From It
Torvalds never looked weaker and more compromised
Gemini Links 03/09/2026: Back in Japan, Another New Year, Reasons to Avoid Have a "Smart" "Phone", and Rant About Built-in Batteries
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 02, 2026
IRC logs for Wednesday, September 02, 2026