Comments on: Symbian Platform Security Breached! http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/ All things symbian and then some more! Thu, 11 Mar 2010 21:16:51 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: UltraMaster http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-2516 UltraMaster Wed, 10 Sep 2008 21:30:17 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-2516 Hi to everyone. For those having problems with Nokia E50 I have already posted on another forum the solution. I also have a Nokia E50 and I also experienced the “File corrupt” error. But this installserver is made for nokia E50. Enjoy. http://ipmart-forum.com/showthread.php?p=2242077#post2242077 Hi to everyone. For those having problems with Nokia E50 I have already posted on another forum the solution. I also have a Nokia E50 and I also experienced the “File corrupt” error. But this installserver is made for nokia E50. Enjoy.
http://ipmart-forum.com/showthread.php?p=2242077#post2242077

]]> By: Vaibhav Sharma http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-481 Vaibhav Sharma Sun, 11 Nov 2007 18:23:08 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-481 Its great that you are sharing info pal! Keep up the good work! Its great that you are sharing info pal! Keep up the good work!

]]> By: Nobody Special http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-483 Nobody Special Sat, 10 Nov 2007 02:23:02 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-483 Sorry to post so much. Even if Nokia update the firmware and figure out a solution that prevents people messing with NSU, the same process also works using Phoenix. This cat is out of the bag for good. Sorry to post so much. Even if Nokia update the firmware and figure out a solution that prevents people messing with NSU, the same process also works using Phoenix. This cat is out of the bag for good.

]]> By: Nobody Special http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-482 Nobody Special Sat, 10 Nov 2007 02:13:23 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-482 Yup, had this problem myself, the way to overcome it is to pad out any left over space in the swipolicy.ini file - I did this at first with 0x00 - failed, then 0x20 -failed. Both kept giving me the 'File Corrupt" message. What eventually worked for me every single time was to just pad out any remaining space with 0d 0a Hope that helps. Yup, had this problem myself, the way to overcome it is to pad out any left over space in the swipolicy.ini file – I did this at first with 0×00 – failed, then 0×20 -failed. Both kept giving me the ‘File Corrupt” message.

What eventually worked for me every single time was to just pad out any remaining space with 0d 0a

Hope that helps.

]]> By: malone http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-484 malone Fri, 09 Nov 2007 14:17:07 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-484 Hi m8, I have tried on E60 yesterday night by trying different changes (some with AllFiles, some with the full list, by following the comment there and there) At the end, i always end up with CORRUPT file even when installing "normal" / "standard" app that always worked. Do you know if Nokia have updated their FW as of today already ? Hi m8,

I have tried on E60 yesterday night by trying different changes (some with AllFiles, some with the full list, by following the comment there and there)
At the end, i always end up with CORRUPT file even when installing “normal” / “standard” app that always worked.

Do you know if Nokia have updated their FW as of today already ?

]]> By: Nobody Special http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-488 Nobody Special Thu, 08 Nov 2007 13:28:58 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-488 I modified a few image viewers initially so that I might find the operator logo more easily, rather than plugging through a few thousand directories with a file explorer by hand. After that I found a few more nefarious uses such as hiding some 'not safe for work' pictures in places that are not looked in by default. Interestingly it looks like it's possible to extract some of the built in apps and elevate their capabilities too. I modified a few image viewers initially so that I might find the operator logo more easily, rather than plugging through a few thousand directories with a file explorer by hand. After that I found a few more nefarious uses such as hiding some ‘not safe for work’ pictures in places that are not looked in by default.

Interestingly it looks like it’s possible to extract some of the built in apps and elevate their capabilities too.

]]> By: Vaibhav Sharma http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-485 Vaibhav Sharma Wed, 07 Nov 2007 17:33:16 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-485 Great job pal. N thanks for the info. U mention tweaking the capabilities for image viewers, what extra benefit would that have? Great job pal. N thanks for the info. U mention tweaking the capabilities for image viewers, what extra benefit would that have?

]]> By: Nobody Special http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-486 Nobody Special Wed, 07 Nov 2007 10:41:02 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-486 Just a small update for anyone reading - found elftran in the SDK downloaded from the nokia development site, specifically S60_3rd_Ed_SDK_FP2_Beta_b.zip. Have tweaked the capabilities for a bunch of applications such as image viewers, audio apps, and file browsers - the method works pretty much as advertised, though I skipped the whole DD thing and used a hex editor on the firmware file instead. Just a small update for anyone reading – found elftran in the SDK downloaded from the nokia development site, specifically S60_3rd_Ed_SDK_FP2_Beta_b.zip. Have tweaked the capabilities for a bunch of applications such as image viewers, audio apps, and file browsers – the method works pretty much as advertised, though I skipped the whole DD thing and used a hex editor on the firmware file instead.

]]> By: Nobody Special http://thesymbianblog.com/2007/10/28/symbian-platform-security-breached/comment-page-1/#comment-487 Nobody Special Tue, 06 Nov 2007 12:45:06 +0000 http://vaibhavsharma.wordpress.com/2007/10/28/symbian-platform-security-breached/#comment-487 So far I've managed to get the swipolicy file to accept the changes - looks like Nokia have modified the NSU a tad, it now downloads the firmware every time rather than just pick up the old files off the drive. It's still easy to bypass, literally just need to paste the modified file once it finishes downloading the new firmware, and just prior to the update. The big problem is finding elftran.exe - have downloaded somewhere close to 500 megabytes of SDK's from the developer site, but still no luck. Damned elusive executable. So far I’ve managed to get the swipolicy file to accept the changes – looks like Nokia have modified the NSU a tad, it now downloads the firmware every time rather than just pick up the old files off the drive. It’s still easy to bypass, literally just need to paste the modified file once it finishes downloading the new firmware, and just prior to the update.

The big problem is finding elftran.exe – have downloaded somewhere close to 500 megabytes of SDK’s from the developer site, but still no luck. Damned elusive executable.

]]>