Bonum Certa Men Certa

Vista Phony 7 is Broken, Cracked

Co-authored with G. Forbes

Bulb



Summary: Vista Phony 7 [sic], Microsoft's latest platform for mobile devices, has serious new deficiencies

MICROSOFT RUSHED Vista Phone 7, its ridiculous cross-vendor response to Android, some while ago. It had also been intended to compete with the Blackberry and hypePhone, controlled solely by RIM and Apple respectively. Signs of VP7's immaturity continue to show, with this critical bug being reported: "Someone found out the hard way what happens when you install more than 15 applications that use the push notification system in Windows Phone 7. To put it bluntly: it stops working."



“Microsoft has quickly become a laughing stock in the area of smart phone software.”When it comes to application sales, Microsoft cannot realise just how badly they did with the tiny userbase. Pouring salt on these wounds, the Windows Phone Marketplace DRM has been cracked anyway (more here):

"WPCentral has been given a proof of concept which shows them breaking through WP7 Marketplace’s DRM. The weakness has apparently been known to developers for some time, and WPCentral has given the information to Microsoft, and are working to patch the hole."

Microsoft has quickly become a laughing stock in the area of smart phone software. Mediocre security is indicative of substandard programming, and with this DRM proof-of-concept crack, a solution has already arrived from the outside:

Tobias, the white hat hacker who recently revealed a proof-of-concept crack for the copy protection on Windows Phone 7 apps has taken steps to develop a solution for his own hack. His FreeMarketplace code (only 65.5kb in size) took only about 6 hours to develop, but in the process demonstrated how easily the Microsoft’s app DRM copy-protection for WP7 could be stripped. The crack was not intended to harm the WP7 Marketplace, but was intended as a critique of Microsoft’s seemingly lax security. To help protect developers in the interim, while Microsoft develops its own solution, Tobias has posted code that developers can deploy in their apps to help protect them from piracy.


Nick Farrell explains that this "software exploits a flaw in raw installation packages or "XAP" files, which means they can be freely downloaded. This works because the Zune client software downloads XML files with all the package locations to enable application browsing and installation, and both the XML and XAP files are served without restriction." Microsoft has had problems with managing operating system permissions for a long, long time.

Recent Techrights' Posts

Brett Wilson LLP Reported to Police for Trying to Throw Large Parcel Into Our Home
This morning the campaign of intimidation...
Slop Has no ROI, an Economy Built on False Assumptions of Slop is Doomed
we're all going to suffer from this Ponzi scheme
The Cyber Show Has "Exciting Guests Coming" and a Gemini Capsule
"Site development is ongoing but now settling into a more stable form"
Banning Things Versus Teaching People the Reason/s to Shun/Boycott Those Things
Prohibition has its limits
 
Links 08/06/2026: "Rising Emissions, Depleting Water" Due to the Pyramid Scheme of Slop; "Canada Needs to Rebuild Public Telecoms"
Links for the day
GAFAM Bots Are Not "Good Bots"
There's nothing "Good" about Google
Links 08/06/2026: Criticism of Microsoft Trying to Criminalise Pointing Out Bug Doors, TikTok Now "Climate-Denying Social Media App"
Links for the day
GNU/Linux Measured at 10% in Liechtenstein This Month
it seems like statCounter wrongly classified some GNU/Linux clients as Mac clients and is now issuing a correction
Communicating With Freedom - Part III - Quibble Envisioned as a New and Easily Accessible Communications Platform Based on LibreJS
the FSF really needs to become more active if not proactive in promoting those sorts of things
Clownflare Says Majority of Web Traffic is Now Bots, But the Net is Another Story
Bots are to Clownflare what lawsuits are to lawyers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, June 07, 2026
IRC logs for Sunday, June 07, 2026
The Strikes at the European Patent Office Planned to Carry on for the Entire Year, Maybe Future Years as Well
There's a cautionary tale somewhere
Number of Patent Grants Has Plunged 23% Amid Strikes at the European Patent Office, Today There Are More Strikes (Strike Participation at Over 3,000, More Than Doubled Since Winter)
There is a growing crisis at the European Patent Office
E.E.E. Still Ongoing, the War on Copyleft/GPL Enables That
It also imperils security.
Gemini Links 07/06/2026: Lynx in the 'Modern' Web and 'Overcooked' (Plagiarised by LLM) Code
Links for the day
Links 07/06/2026: Java Needs Seawall, Egypt Blasted for Arbitrary Detention of Activists
Links for the day
SLAPP Censorship - Part 100 Out of 200: Interlude and Outline of the First Half, 3+ Months That Got Us Death Threats Connected to Brett Wilson LLP (and Cyber Attacks That Are Difficult to Attribute)
This week we plan to have a good time
Links 07/06/2026: NASA's Mars Maven Declared Dead, Telegram Founder Pavel Durov Bemoans Russia's Crackdown
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, June 06, 2026
IRC logs for Saturday, June 06, 2026
Gemini Links 07/06/2026: How to Train Your Dragon (2010) and "Six Days of Play"
Links for the day
Links 06/06/2026: 'Epstein Problem' in Board of Directors of Microsoft, Surveillance Giant Google Under Legal Threats for Online Misuses
Links for the day
Software Freedom Takes a Lot More Than Coding
some of the roles in the Free software community that don't receive (m)any grateful words
Ubuntu is Losing to Other GNU/Linux Distros
"Linux Mint"
Old Articles Explaining That Patents - Especially Software Patents - Are Bad for Innovation
We've omitted more than 50% of the articles we had gathered as candidates for inclusion
European Patent Office (EPO) Crisis: Huge EPO Strikes, Profound Corruption, and Cocaine Use by Managers Tolerated
These strikes won't be ending any time soon
Why GNU and FSF Will Choose AV1 Over AV2 (It's More Widely Supported)
for the foreseeable future they'll stick with AV1
Mass Layoffs (RAs) and PIPs (Excuses to Sack) at IBM: Insiders Tell No Relation to Actual Performance
If many thousands are impacted by this, then certainly it is newsworthy
Links 06/06/2026: LinkedIn Infested With Spies, Ethernet WiFi Router On Pi Pico 2W
Links for the day
25 Years With PalmOS
That my Palm PDA still works in 2026 (not in mint condition but close to that) says a lot about the "build quality" of gadgets 20+ years ago
Why We Dumped Online Shopping (Groceries)
subsidies kept the "online" stuff artificially cheap
Microsoft Fell to All-Time Low in Monaco Last Month
So says statCounter anyway
Lawsuits That Don't Work
Not as expected anyway
SLAPP Censorship - Part 99 Out of 200: Graveley and Garrett Seem to Have Crashed Brett Wilson LLP (Worse Than Taking Russian Oligarchs as SLAPP Clients)
a state of disarray
Microsoft Has Spent Months Preparing Lists of People to Cull in Massive Wave of Layoffs (Allegedly Start of July)
There is some consensus that we're weeks away from mega-layoffs at Microsoft
Gemini Links 06/06/2026: "Competing" With LLMs and "Automation of Any Kind"
Links for the day
Links 06/06/2026: 'Linux' Foundation Openwashing Slop on Microsoft's Payroll, Ukraine Wants Permanent Ceasefire With Russia
Links for the day
50% of the 'Gains' Made by "Quantum" Hype Already Evaporated
"It was all hype about quantum nonsense. Heading back to reality now. Expect sub-$220 after earnings release next month."
Heap of Trash Online, Not Just the Fault of LLM Slop But Enabled by Slop
Google News has just promoted a pair of prolific slopfarms
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, June 05, 2026
IRC logs for Friday, June 05, 2026