Find Your Forum
  
Welcome, Guest. Please login or register.
Did you miss your activation email?

News: Do you like Samsung Instinct?      
Instinct Forum, Samsung Instinct message board, Samsung Instinct By Sprint, Samsung Instinct phone, new Samsung Instinct, Samsung Instinct phone, Sprint Instinct, Samsung Instinct phone
Best Screen Protector for Samsung Instinct                 Free Sprint Phones and Cheap Plans
                Samsung Instinct Scratch Protection
Pages: [1] 2 3 ... 14
Reply Print
Author Topic: here's how to allow the instinct to use untrusted/unsigned apps(3rd party apps)  (Read 38908 times)
cookz123z
[I][N][S][T][I][N][C][T]
********

Cookies: 3
Phone Before Samsung Instinct: Samsung r500-cricket
Hometown: pa
Posts: 140



« on: September 09, 2008, 09:31:11 PM »


I did not know how to put this phone into download mode... so good find.

download mode would be used to flash the phone with new firmware etc...

i wonder if there are hidden menus activated by button combos like the upstage had.

this is nothing new but... here's how to allow the m800 to use untrusted/unsigned apps(3rd party gps apps, apps needing access to the file system, etc).. cert mode being enabled/disabled seems to have been removed... this gets around that.. plus more.

create a new text file and name it _policy.txt . inside the .txt file paste the text found in the code box below then save.

open qpst efs explorer and navigate to / > brew > mod > obigo and overwrite the text file already found in that folder.




Code:
alias: midp_net javax.microedition.io.Connector.http,

 javax.microedition.io.Connector.socket,

 javax.microedition.io.Connector.https,

 javax.microedition.io.Connector.ssl,

 javax.microedition.io.Connector.datagram,

 javax.microedition.io.Connector.serversocket,

 javax.microedition.io.Connector.datagramreceiver,

 javax.microedition.io.Connector.comm,

 javax.microedition.io.Connector.obex

 

alias: push_registry javax.microedition.io.PushRegistry

 

alias: gps_api com.qualcomm.qjae.gps.Gps,

 javax.microedition.location.Location,

 javax.microedition.location.Orientation,

 javax.microedition.location.ProximityListener,

 javax.microedition.location.LandmarkStore.read,

 javax.microedition.location.LandmarkStore.write,

 javax.microedition.location.LandmarkStore.category,

 javax.microedition.location.LandmarkStore.management,

 com.sprintpcs.util.Location


 

alias: wma_api_send javax.wireless.messaging.sms.send

 

alias: wma_api_receive javax.microedition.io.Connector.sms,

 javax.microedition.io.Connector.cbs,

 javax.wireless.messaging.cbs.receive,

 javax.wireless.messaging.sms.receive

 

alias: mmapi javax.microedition.media.protocol.Datasource,

 javax.microedition.media.control.RecordControl,

 javax.microedition.media.control.VideoControl.getSnapshot,

 javax.microedition.amms.control.camera.enableShutterFeedback,

 javax.microedition.amms.control.tuner.setPreset,
 
 javax.microedition.media.Manager,
 
 javax.microedition.media.Player



alias: file_connection javax.microedition.io.Connector.file.read,

 javax.microedition.io.Connector.file.write

 

alias: pim_api javax.microedition.pim.ContactList.read,

 javax.microedition.pim.ContactList.write,

 javax.microedition.pim.EventList.read,

 javax.microedition.pim.EventList.write,

 javax.microedition.pim.ToDoList.read,

 javax.microedition.pim.ToDoList.write

 

alias: bluetooth java.bluetooth,

 javax.microedition.io.Connector.bluetooth.server,

 javax.microedition.io.Connector.bluetooth.client,

 javax.microedition.io.Connector.obex.client,

 javax.microedition.io.Connector.obex.server,
 
 javax.microedition.io.Connector.obex.client.tcp,
 
 javax.microedition.io.Connector.obex.server.tcp

 

alias: satsa javax.microedition.securityservice.CMSMessageSignatureService



alias: sprint_extensions com.sprintpcs.util.System


alias: sprint_ext_device_info com.sprintpcs.util.System.getProtectedProperty



domain: embedded

allow: wma_api_receive

allow: wma_api_send

allow: mmapi

allow: push_registry

allow: satsa

allow: sprint_extensions

allow: gps_api

allow: pim_api

allow: midp_net

allow: file_connection

allow: bluetooth

allow: sprint_ext_device_info


domain: CN=Sprint Vision Root CA OU=PRG O=Sprint L=Overland Park ST=KS C=US

allow: wma_api_receive

allow: wma_api_send

allow: mmapi

allow: push_registry

allow: satsa

allow: sprint_extensions

allow: gps_api

allow: pim_api

allow: midp_net

allow: file_connection

allow: bluetooth

allow: sprint_ext_device_info

 

domain: CN=Sprint STIC OU=Network O=Sprint L=Lenexa ST=KS C=US

allow: wma_api_receive

allow: wma_api_send

allow: mmapi

allow: push_registry

allow: satsa

allow: sprint_extensions

allow: gps_api

allow: pim_api

allow: midp_net

allow: file_connection

allow: bluetooth

allow: sprint_ext_device_info

 

domain: untrusted

allow: wma_api_receive

allow: wma_api_send

allow: mmapi

allow: push_registry

allow: satsa

allow: sprint_extensions

allow: gps_api

allow: pim_api

allow: midp_net

allow: file_connection

allow: bluetooth

allow: sprint_ext_device_info


*I DID NOT WRITE THIS I FOUND IT*
AND THOUGHT IT WOULD HELP APP CREATORS. AND TO GET SOUND FOR THE GAMES THAT HAVE NO SOUND, CREDIT TO AUTOPRIME
Logged

dave12285
[I]
*

Cookies: 0
Hometown: San Diego
Posts: 3


« Reply #1 on: September 10, 2008, 12:30:48 AM »

Wow this sounds pretty neat.  I see a lot of people talking about how it would be $500 to get a signed app and what not.  I'm not a developer but if this works i'm assuming it will be of great help to you.  Someone who knows what their talking about will chime in i'm sure.
Logged
mhousser
Section Moderator
[I][N][S][T][I][N][C][T]
***

Cookies: 7
Hometown: Vancouver
Posts: 96



« Reply #2 on: September 10, 2008, 11:49:40 AM »

This is a pretty awesome find!

However, for us developers, it doesn't help that we'd require users to install this policy file before they could run our applications.. =P
Logged
waterbound
[I][N][S][T][I][N][C][T]
********

Cookies: 5
Posts: 204


Surfin even faster now..


« Reply #3 on: September 10, 2008, 12:00:37 PM »

This is a pretty awesome find!

However, for us developers, it doesn't help that we'd require users to install this policy file before they could run our applications.. =P

Network engineer here so please excuse my ignorance but when writing a program, couldn't that piece of code be compiled into the application so that end users wouldn't have to each time?
Logged
KillerBeagle
Instinct Fanatic
******

Cookies: 234
Hometown: Wilmington
Posts: 1282



« Reply #4 on: September 10, 2008, 12:08:09 PM »

Network engineer here so please excuse my ignorance but when writing a program, couldn't that piece of code be compiled into the application so that end users wouldn't have to each time?

Even if that storage area didn't have special protections (which it probably does), it would take a signed app to write to the filesystem.  Catch-22!
Logged
nossifer
[I][N][S][T][I][N]
******

Cookies: 1
Hometown: toronto
Posts: 57


« Reply #5 on: September 10, 2008, 12:18:04 PM »

this sounds like a great find.  i googled   'qpst efs explorer' and didnt find the immediate answer.  i will post if i get it.  does this mean that my problems with installing apps will go away?  I am currently getting Application Authorization Failure 910 on GlassPlayer with the Instinct.
Logged
KillerBeagle
Instinct Fanatic
******

Cookies: 234
Hometown: Wilmington
Posts: 1282



« Reply #6 on: September 10, 2008, 12:25:29 PM »

this sounds like a great find.  i googled   'qpst efs explorer' and didnt find the immediate answer.  i will post if i get it.  does this mean that my problems with installing apps will go away?  I am currently getting Application Authorization Failure 910 on GlassPlayer with the Instinct.

QPST is a commerical program from Qualcomm.  I think you can only find it as "warez".

Mistakes made with QPST can brick your phone.  Check out autoprime's own video on youtube of two phones he put in an infinite reboot loop.
Logged
mhousser
Section Moderator
[I][N][S][T][I][N][C][T]
***

Cookies: 7
Hometown: Vancouver
Posts: 96



« Reply #7 on: September 10, 2008, 12:27:59 PM »

Even if that storage area didn't have special protections (which it probably does), it would take a signed app to write to the filesystem.  Catch-22!

Bingo! You need a signed app to let you modify this file which lets you run unsigned apps. =P

But.. This could be really useful for us who are in-the-know. Surely there are/will be great apps that aren't signed, which we could then run by modifying the policies file..
Logged
tntsniper
Global Moderator
[I][N][S][T][I][N][C][T]
*****

Cookies: 19
Hometown: PA
Posts: 292



« Reply #8 on: September 10, 2008, 12:47:08 PM »

I posted this a while ago in a review I did, but since its been long gone, this is a great trick and hopefully our developers can use this to make better apps Smiley
Logged

BE KIND TO THE SITE... SEARCH HERE before you post. 
Only takes a minute and we likely already have it here! Smiley

mhousser
Section Moderator
[I][N][S][T][I][N][C][T]
***

Cookies: 7
Hometown: Vancouver
Posts: 96



« Reply #9 on: September 10, 2008, 12:59:06 PM »

Alas, 'better apps' would require people to hack their file manually, I'm afraid.. Sad

That or we pay the outrageous fee to sign our applications.
Logged
KillerBeagle
Instinct Fanatic
******

Cookies: 234
Hometown: Wilmington
Posts: 1282



« Reply #10 on: September 10, 2008, 12:59:50 PM »

I read about this a while ago on another forum.  Not interested due to the high probability of a bricked phone.

Interesting philosophical question - will software developers, whose livelihood depends on paying customers, embrace a technique that depends on pirated software?

For now, I'll stick with the developer certificate to sign apps for my own phone that need signing, and if I actually make something worth sharing, I'll get a real certificate and sell it on the app store.

It would be a trivial change for Sprint to disabled that little trick, if they cared enough to do so. (big if)
Logged
mhousser
Section Moderator
[I][N][S][T][I][N][C][T]
***

Cookies: 7
Hometown: Vancouver
Posts: 96



« Reply #11 on: September 10, 2008, 01:05:05 PM »

I'm a software developer by profession, and I definitely pirate software. =P

Maybe I'm too young to feel moral about this yet!

For example: No, I'm not paying you hundreds of dollars for Photoshop, Adobe. I have a paid newsgroups subscription, and the newsgroups scene is pretty addictive, I basically only buy software if 1) It's an OS, which I don't want to worry about 2) It's a game whose box I want!

KB, do you actually have the dev certificate yet?

What App store do you speak of? I'm not American, PS. How does that work?
Logged
KillerBeagle
Instinct Fanatic
******

Cookies: 234
Hometown: Wilmington
Posts: 1282



« Reply #12 on: September 10, 2008, 01:10:31 PM »

Oops, I forgot you were above the border.  We actually don't know how the Sprint app store will work because it doesn't exist yet.   Angry  The assumption is that it will be similar to the iphone app store.

Are the Canadian phones also locked out of the same set of JSRs that Sprint's are?  Are the OSs similar enough that the policy file will be in the same place? Clearly it will need changing for other cell providers because the policies are all provider-specific.

I think the developer cert is included in the Sprint WTK, and then you need to enable your phone(s) to make it work.  I have been avoiding anything that needs signing, so I haven't tried it yet.
Logged
mhousser
Section Moderator
[I][N][S][T][I][N][C][T]
***

Cookies: 7
Hometown: Vancouver
Posts: 96



« Reply #13 on: September 10, 2008, 01:14:51 PM »

I don't know how the policies differ. I suppose I could try and make a test app that reads a file.. although I'm pretty sure they have similar/the same restrictions.

I don't want to go looking for my policy file. =P I don't know if it's in the same place or not.

I'm also avoiding anything that needs signing - it's all a bit scary for now. Since I have persistent store working, as shown in my Database class, I'm no longer keen on exploring signed apps.. I mean, there are many great apps to be made, so long as they can save their own data..
Logged
playaller
[I][N][S][T][I]
*****

Cookies: 0
Phone Before Samsung Instinct: Moto Q
Hometown: Dallas
Posts: 48



« Reply #14 on: September 10, 2008, 03:32:18 PM »

We actually don't know how the Sprint app store will work because it doesn't exist yet.

I would say the app store does exist. It just doesn't have any off the developer created appsfrom the contest in it yet.
Logged
Pages: [1] 2 3 ... 14
Reply Print
Jump to:  

Got a new phone? Find the forum here


Subject Started by Replies Views Last post
What kinda of third party apps do you really want to see on the Instinct? « 1 2 ... 7 8 »
Third-Party Instinct Software
MarsVolta 106 22691 Last post October 10, 2009, 08:51:51 PM
by lenoirebeaute
Instinct as a remote, any 3rd party apps?
Third-Party Instinct Software
rank78 9 6457 Last post November 22, 2008, 09:39:10 AM
by crm114
Exiting Third Party Apps
Instinct Application Developer
pwagner 12 4048 Last post October 27, 2008, 10:26:12 AM
by instinct1329
Post all working 3rd party apps here « 1 2 »
Third-Party Instinct Software
caliskimmer 16 4672 Last post September 21, 2008, 06:02:57 PM
by caliskimmer
Third-Party Apps « 1 2 »
SaskTel
gruf 23 3490 Last post March 04, 2009, 08:10:48 AM
by welfaredog




Galaxy S3 | Galaxy Note | Galaxy Nexus | Kindle Fire | Atrix 4G | Motorola Xoom | Windows Phone 7
Nokia Lumia | Top Hosts | Samsung Galaxy Tab | Samsung Galaxy S2 | Samsung Galaxy S | Samsung Wave
HTC Evo 3D | HTC Evo 4G | HTC Incredible | HTC Incredible 2 | HTC Incredible S | HTC Thunderbolt
Motorola Droid Razr
| HTC Desire | HTC Desire HD | HTC Desire Z | HTC Desire S | HTC Wildfire
Motorola Droid | Galaxy Indulge | Nokia N8 | Droid Charge | Droid X | Droid X2 | Droid 2| Droid 3 | Fascinate
HTC Sensation | HTC Flyer | LG Revolution | Asus Transformer | Xperia Play | iPhone 4 | Nexus S | Droid Bionic
HTC One | HTC Wildfire S | HTC Droid Eris


This is an Un-Official fan based Website. The views expressed on this website are solely those of the proprietor, or contributors to the site, and do not necessarily reflect the views or opinions of the parties it covers, and is not affiliated with, endorsed or sponsored by parties involved.
If you have a problem with any of the content posted on this website, please contact "sales@verticalscope.com"
Term of Use | Privacy Policy | BlackRain 2006 by, Crip





















CopyRight 2008 www.instinct-samsung.com
Powered by SMF 1.1.11 | SMF © 2006-2007, Simple Machines LLC