RE: A83: Re: Flash App Hacking

To: "'assembly-83@lists.ticalc.org'" <assembly-83@lists.ticalc.org>
Subject: RE: A83: Re: Flash App Hacking
From: Hyperbyte <central@hyperfield.com>
Date: Sun, 1 Oct 2000 18:05:50 +0200
Reply-To: assembly-83@lists.ticalc.org

Is the validation info written in flash with the app, or is it recreated when the app is transferred??

is it is recreated with each transfer, we could try to phisically hack a calc, and then in essence signing it on the calc..

or not??


-----Original Message-----
From:	Solignac Julien [SMTP:x1cygnus@online.fr]
Sent:	Sunday, October 01, 2000 1:50 PM
To:	assembly-83@lists.ticalc.org
Subject:	Re: A83: Re: Flash App Hacking


>Another speculation:
>can't we fake the validation part, and then jump to the part where the app
>gets written, or does the validation part involve flash writing too?

This is how the TI-ROM works:

1. Unlock Flash
2. Check If App Is Valid
 If Yes Write
 If Not lock Flash

There is no _unlockflash routine, the required code is implemented directly
before the validation sequence and if it fails flash is locked up. TI has
done a very good job, making it logically impossible to violate the system.
Physically it's another deal.

Solignac Julien
x1cygnus@xcalc.org
http://xcalc.org

Piracy is a victimless crime, like punching someone in the dark


____________________________________________________________
Get your FREE personal .com domain name and                 
NAMEzero Personal Portal at: http://www.namezero.com.       
For customer service, mailto:customerservice@namezero.com.	 


begin 600 WINMAIL.DAT
M>)\^(C00`0:0" `$```````!``$``0>0!@`(````Y 0```````#H``$(@ <`
M& ```$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`0V ! `"`````@`"``$$
MD 8`Z $```$````0`````P``, (````+``\.``````(!_P\!````5P``````
M``"!*Q^DOJ,0&9UN`-T!#U0"`````&%S<V5M8FQY+3@S0&QI<W1S+G1I8V%L
M8RYO<F<`4TU44 !A<W-E;6)L>2TX,T!L:7-T<RYT:6-A;&,N;W)G```>``(P
M`0````4```!33510`````!X``S !````'0```&%S<V5M8FQY+3@S0&QI<W1S
M+G1I8V%L8RYO<F<``````P`5# $````#`/X/!@```!X``3 !````'P```"=A
M<W-E;6)L>2TX,T!L:7-T<RYT:6-A;&,N;W)G)P```@$+, $````B````4TU4
M4#I!4U-%34),62TX,T!,25-44RY424-!3$,N3U)'`````P``.0`````+`$ Z
M`0```!X`]E\!````'0```&%S<V5M8FQY+3@S0&QI<W1S+G1I8V%L8RYO<F<`
M`````@'W7P$```!7`````````($K'Z2^HQ 9G6X`W0$/5 (`````87-S96UB
M;'DM.#- ;&ES=',N=&EC86QC+F]R9P!33510`&%S<V5M8FQY+3@S0&QI<W1S
M+G1I8V%L8RYO<F<```,`_5\!`````P#_7P`````"`?8/`0````0````````"
MN6T!!( !`!\```!213H@03@S.B!293H@1FQA<V@@07!P($AA8VMI;F<`# D!
M!8 #``X```#0!PH``0`2``4`,@```"L!`2" `P`.````T <*``$`$@`#`"H`
M```A`0$)@ $`(0```$9%-$$R.38Q0S,Y-T0T,3$X134U,#!#,#(V,C0P-C0X
M`.P&`0.0!@"H!P``(0````L``@`!````"P`C```````#`"8```````L`*0``
M`````P`N```````#`#8``````$ `.0#@W0MXP2O `1X`< `!````'P```%)%
M.B!!.#,Z(%)E.B!&;&%S:"!!<' @2&%C:VEN9P```@%Q``$````6`````< K
MP7@+82E*_Y?#$=2.50# )B0&2 ``'@`># $````%````4TU44 `````>`!\,
M`0```!<```!C96YT<F%L0&AY<&5R9FEE;&0N8V]M```#``80L5,R?0,`!Q#M
M`P``'@`($ $```!E````25-42$5604Q)1$%424].24Y&3U=2251414Y)3D9,
M05-(5TE42%1(14%04"Q/4DE3251214-214%414172$5.5$A%05!025-44D%.
M4T9%4E)%1#\_25-)5$E34D5#4D5!5$5$5P`````"`0D0`0```(($``!^! ``
M/0<``$Q:1G7>9\"#/P`*`0,!]P*D`^,"`&-HP0K <V5T," '$P*#0P!0#N9P
M<G$R#^9]$PJ ",@@.PEO,C4U2P* "H%V")!W:PN 9-HT#&!C`% +`V,`00M@
M0&YG,3 S,PNF(())!"!T:&4@=@= H&ED871I`B @"X!Y`A @=P40`D )\!@!
M(/)F"V!S:!A0&( 94!<BX&%P<"P@!;$$`!@`]P5 "7 %`&47L F &% 7,*<#
MH!G%&G)T<@!Q9@20^0EQ/S\*H@J$"H :A!J!OQKI&8(;( ]@''<:,'<70-D%
MH'5L&V <@'D7$!A I'!H! !I8P= ;"$PN0]P8VL9\""@!T!C&C _`' @\1N2
M&.$'D ^@;F/[%T `D&<#`!8`&J(7X1<B&2*B+BX=6@6Q;F]T?QT\'545H % 
M$3 FP 60=*$0=#$V("TI<D\%$!YG"X '0 70(\%A9V4_*7,=5BB$*%$+$RB&
M:2WX,30T`4 7@"T3#- M$ZAB($8#83H,@V(/T,Y3!O D40#0($H@T B0@0.@
M6U--5% Z+>#$8WDD8'5S0 (@%X#H;F4N`U!='54N0 9@2P(P+JAU%-!A>1HP
M3XDHP&]B!) @,#$:,$,!T#1P(#$Z-0_04/)-,<=4;RZG&3 /H ;0(2(`+3@S
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M54]260>15QAQ95!83GTFP"!-WDJ61-(:@2:P(%Y?,S!-TAD4`V!U2:%EQQHP
M%R()<'%U:0EQ(*%W`0`:<T/ ;#:0,F$;463_5F$HP"(`'50SX (01.47:?\/
MH%9 (_,C`@:0&J)!< ,0GP0@&10:@4W2&U%U<$V0_TOP(B$/,!UC1P`Q8")Q
M2.#M(2%G2@`;8&HST!HP`,"_.U(:H@D`*? AU%<Q;P00_FD"8%DA&$ 4< ;P
M&S$7$YQS>3= -I EM5!H8A#Y7_9T)P0@`' _5 $`!T"O);LO/1U4,)=X-ZQH
M`D#P<#HO+V=-8G568 #0_V!!8[%A,2C !W!78 01!0'O!X :,!> 09%P,S /
M8"2"^G,#<&5=TACA%R(7H$R ^2</"E]O#W ?<2]QMAU4,D</L"!Y"&$N4%)%
M7D4A< 20;+ J$BX%H&W_1O$`P!CA*A '@"+S==X=5&!.04U%>@20&$!0?706
M4 D1*B$7L#G0:#5W?7F +G52=X)TDDV0=HI&_P6Q/^ W0&S!/Y$$D&JQ5;&U
M=0%L(5 Z>Z9\-4!YRR\,@G;&'5H1\0" P ```P`0$ `````#`!$0`0````,`
M@!#_____0 `',.!HM"O!*\ !0 `(,.!HM"O!*\ !"P``@ @@!@``````P ``
M`````$8``````X4````````#``* "" &``````# ````````1@`````0A0``
M``````,`!8 (( 8``````, ```````!&`````%*%``"W#0```P`*@ @@!@``
M````P ```````$8``````84````````>`!. "" &``````# ````````1@``
M``!4A0```0````0````X+C `"P`7@ @@!@``````P ```````$8`````#H4`
M```````#`!B "" &``````# ````````1@`````1A0````````,`&H (( 8`
M`````, ```````!&`````!B%````````'@`I@ @@!@``````P ```````$8`
M````-H4```$````!`````````!X`*H (( 8``````, ```````!&`````#>%
M```!`````0`````````>`"N "" &``````# ````````1@`````XA0```0``
G``$`````````'@`]``$````%````4D4Z( `````#``TT_3<``*?I
`
end
Prev: Re: A83: Re: Flash App Hacking
Next: A83: Linking routine
Index(es):
- Main
- Thread