SecurIt 1.1: Sim/IMSI checking opensource security for us all

[Shadowmite]

I'm been working on this for a little bit now since I found all the existing apps don't work well in WM6 or don't work well in a custom rom. This is a open source program (as all of mine are) and I welcome help/donations/and comments. Bug reports will be helpful in this first release as I certainly consider this a alpha release at the moment.

What it does:
once setup at every boot it compares your IMSI number with the one stored, if it's a match it plays a little sound and that's it. If it's not a match, it locks the device and displays your email and a request to please get it back to you. It also send you the "new sim's" imsi and phone number via a SMS.

------------------------------
SecurIt 1.1 (BETA) by Shadowmite
------------------------------
TODO: Build in SMS rule filtering thus adding remote control
Lock out activesync connections?
Protect the datafile from being deleted, or keep a backup in registry.

NOTE: THIS DOES NOT WORK WITH CDMA PHONES!
Version 1 (BETA) Instructions:

This security applicatioon can run loaded normally via a cab file to your device, or via being cooked into a rom. It will require your phone able to run unsigned code (most roms at this site are fine in this regard). Furthermore it does require the .NET Framework so it's really for WM6 devices, WM5 will be more tricky and is left up to the user to figure out how to make it all work.

When first run the program resides in \windows and must run from there. If you ran the cab installer it will have created a shortcut for you into the Programs folder.

The application comes up with a form showing you the current device imei, imsi, and phone number. You need to enter a password (needed to disable security programmatically or change SIM info), a email you can be reached at my a "finder" of your phone, and a SMS phone number you'd like alert messages sent to. Once done click set. Finally, click Enable security.

The application then sets itself up to autorun upon boot and if the SIM matches, it plays a little sound file to let you know everything is fine. If the sim is found to have changed, it will lock down the device until a password is entered. Meanwhile it shows your contact email and has sent the alert sms to you with the new imsi and phone number.

If you enter the proper password the program will take you to the settings screen where you can reenter the password and make changes to the settings and resave them. Simply clicking enable security without making changes will keep the settings as they are.

Clicking disable security will remove the autorun entries and remove the data file the programs keeps at \windows\SecurIt.dat.

The data file keeps 5 lines, MD5 hashes of your imei, imsi, password, and also your email and sms phone number as plain text. Thus stealing this file does not enable retrieving the password or easy changing of the imsi. Deleting this file however would remove security. Furthermore activesync will still link to a locked device. Knowledgable people about these devices could therefore defeat this security, however it's goal is to keep the casual theif / finder out of the phone.

This program is a work in progress and I welcome help with modifications to it as well as bug fixes. Source can be found at:
svn://www.shadowmite.com/shadowmite/SecurIt

To cook this into a rom, you need 3 files. 2 of them need to be generated when you first install it like normal and set it up. Copy the SecurIt.dat from \windows and the SecurIt.lnk from \windows\start up to your rom as well as the SecurIt.exe file. It's that simple. Enjoy!

History:
1.1: Fixed all kinds of bugs causing security to crash with various sims
1.0: Initial release

If you like my work and would like to help insure I continue to have time for this, please consider a donation to: foglemATshadowmiteDOTcom

[shantzg001]

Shadowmite, thnx for starting an "opensource" project for this. I havent tried it yet, will try once I reach home.. But I had a cpl of suggestions\questions:
1. Why do u keep email and sms phone no in plain text instead of encrypting them as well?
2. Instead of storing config in a file, store the config in registry which lessens the chances of someone finding out about the prog and deleting the file to disable security.

[walshieau]

nice work as usual... :)

[walshieau]

Shadowmite, thnx for starting an "opensource" project for this. I havent tried it yet, will try once I reach home.. But I had a cpl of suggestions\questions:
1. Why do u keep email and sms phone no in plain text instead of encrypting them as well?
2. Instead of storing config in a file, store the config in registry which lessens the chances of someone finding out about the prog and deleting the file to disable security.

number 2 is in the TODO list... ;)

[Shadowmite]

#1) we could encrypt them as long as it's not a one-way hash like the first 3 lines, however those are the bits of data we don't mind the theif/finder seeing afterall as they are the means to get the phone back to its rightful owner. I suppose we could hide them but the phone number will be on his next bill for sending it a SMS and the email is displayed on the locked screen.

And as walshy said, #2 is certainly on the todo, but locking our activesync connections is a bigger concern and I believe completely doable.

[shantzg001]

#1) we could encrypt them as long as it's not a one-way hash like the first 3 lines, however those are the bits of data we don't mind the theif/finder seeing afterall as they are the means to get the phone back to its rightful owner. I suppose we could hide them but the phone number will be on his next bill for sending it a SMS and the email is displayed on the locked screen.

And as walshy said, #2 is certainly on the todo, but locking our activesync connections is a bigger concern and I believe completely doable.
ok, and sorry abt the #2, I missed the TODO part.. :)
Keep up the good work..I myself was thinking abt making smthing similar but now I think I'll drop my idea to make a different one, as this seems to be a better idea (opensource is always better :) )..
I hope I can make some contribution to the code if possible..

[famewolf]

ok, and sorry abt the #2, I missed the TODO part.. :)
Keep up the good work..I myself was thinking abt making smthing similar but now I think I'll drop my idea to make a different one, as this seems to be a better idea (opensource is always better :) )..
I hope I can make some contribution to the code if possible..

What advantages does this give over "Mobile Justice"..another similar util...my rom has Mobile Justice cooked with it which makes it hard to remove. ;)

[Shadowmite]

What advantages does this give over "Mobile Justice"..another similar util...my rom has Mobile Justice cooked with it which makes it hard to remove. ;)

If you like that software and have it working properly use it. Maybe you'd like to post in every rom thread asking why not use some other rom while you're at it?

[famewolf]

If you like that software and have it working properly use it. Maybe you'd like to post in every rom thread asking why not use some other rom while you're at it?


I'm not using Mobile Justice which is WHY I asked what advantages YOURS had over theres for COMPARISON. If it had additional features I was going to recommend it for addition into XM6R3 (the next release of the current rom), but with an attitude like yours I won't bother with further review.

[walshieau]

I'm not using Mobile Justice which is WHY I asked what advantages YOURS had over theres for COMPARISON. If it had additional features I was going to recommend it for addition into XM6R3 (the next release of the current rom), but with an attitude like yours I won't bother with further review.

you dont bother with a review but bother with a slagging :rolleyes: ... take your "fame" somewhere else...

[Shadowmite]

Ok, for starters mine isn't based on assuming every device has a GPS built in (while technically being a Trinity owner I should go that route). I instead base mine on nicely locking down the interface so far with a polite message to get the device back to the owner. Furthermore mine is trivial to build into a cooked rom which was my main reason to write it. I tried every security app out there over the last weekend without any of them working "properly" and figured the best way to get one is to write one. In addition mine is open source, mobilejustice is not.

Now then, you said you're not using it... But the last post said you had it cooked in? WTF? Need some help deciding what you use and don't use?
my rom has Mobile Justice cooked with it which makes it hard to remove.
I'm not using Mobile Justice which is WHY I asked what advantages YOURS had over theres for COMPARISON.

[famewolf]

Now then, you said you're not using it... But the last post said you had it cooked in? WTF? Need some help deciding what you use and don't use?

1) The rom I currently have installed comes with Mobile Justice preinstalled.
2) I have not configured and am not currently using Mobile Justice
3) The author is currently taking suggestions for software to include in the next revision of their rom.

What part of any of those statements are you having difficulty comprehending?

Perhaps you and the gentleman from Melbourne should both grow up and quit reading an insult where one was not intended.

[Shadowmite]

Well than back on track... Give it a try and see what you think. I really want feedback from folks outside the USA as I believe it will not properly catch your phone number of the "thief's sim" however if the sms works it should still get the phone number to you obviously.

The GPS coord. request feature is a nice one and will have to go on the todo list.

[shantzg001]

well, well, fights apart, what drew me to this app over the other apps was the opensource nature as mentioned by Shadowmite because I, like shadowmite, was not happy with the other apps doing things properly or just because I wanted somethings to be done differently..

@shadowmite:
1. I have a few ideas of getting "coordinates" and sending to the original owner even on non-GPS devices :)..Maybe we can discuss some things later on once the basic structure of the app is ok.
2. Couldn't find the source code of the app on ur site..(May be am just one dim-witted dim-sighted git ;) ) Please point me to it..

[Shadowmite]

You'll need svn to get it, windows users: http://superb-west.dl.sourceforge.net/sourceforge/tortoisesvn/TortoiseSVN-1.4.4.9706-win32-svn-1.4.4.msi

svn://www.shadowmite.com/shadowmite is my master repository for all projects.

[shantzg001]

cool, I do have TortoiseSVN installed at home..Will check it when I go back..

[shaileshashar]

Will it sustain a hard re-set ? Dont think so.

[shantzg001]

@shailesh, for sustaining hard resets, it has to be cooked into the rom, pointed out by shadow on post 1..
I don't know if something else can be done for this (writing into ext rom is one option but that is not possible for most devices now)

[naboleo]

Sounds like a great piece of software. And open source is a great idea too.

I did tried several others like this one (Eye on the thef, Ultimately Theft Alert ...) some features were still missing :

First an autoconfig method :
As already said, whatever your storage methode is (file or registry), you 'll everytime lose the configuration when a hard-reset is done on the device. The only one possibility i can imagine is to store your "installer" program on extended rom with the ability to add an external config (encrypted) file as a parameter.
Installation will be handled by the autoconfig process, using this external file. Config will probably needs to be stored on extended rom too. It's not peace of cake to create an extended rom, but easier that cook a rom.
This feature won't be very helpfull if there is no way to generate a config file automaticaly base on settings done by user : kind of export process.
On standart start/soft-reset, your program will run as it does actually, but when a hard-reset, is proceed, programm will reinstall unattented and will still be running after boot... No way to easily remove it. Bad effect is that it will also be difficult to update programm/config.

Secondly, i'd like to have the a way to "format"(or encrypt) a memory card remotely.

Do you thinks those could be part of your TODO list ?

Will try it on few next days and i'm ready to help you translating it in french

[shaileshashar]

hi shantzg001,
thanks for replying,
My mistake, did not read the whole text.

[lastnikita]

@shailesh, for sustaining hard resets, it has to be cooked into the rom, pointed out by shadow on post 1..
I don't know if something else can be done for this (writing into ext rom is one option but that is not possible for most devices now)

To avoid any de-activation by a HR, it has to be cooked into the ROM, already configured for that particuar user, or it won't be active. So, I guess only a easy-step-by-step cooking method can succeed in such a task....
Anyway it would still be avoided by flashing another ROM..

[walshieau]

Sounds like a great piece of software. And open source is a great idea too.

I did tried several others like this one (Eye on the thef, Ultimately Theft Alert ...) some features were still missing :

First an autoconfig method :
As already said, whatever your storage methode is (file or registry), you 'll everytime lose the configuration when a hard-reset is done on the device. The only one possibility i can imagine is to store your "installer" program on extended rom with the ability to add an external config (encrypted) file as a parameter.
Installation will be handled by the autoconfig process, using this external file. Config will probably needs to be stored on extended rom too. It's not peace of cake to create an extended rom, but easier that cook a rom.
This feature won't be very helpfull if there is no way to generate a config file automaticaly base on settings done by user : kind of export process.
On standart start/soft-reset, your program will run as it does actually, but when a hard-reset, is proceed, programm will reinstall unattented and will still be running after boot... No way to easily remove it. Bad effect is that it will also be difficult to update programm/config.

Secondly, i'd like to have the a way to "format"(or encrypt) a memory card remotely.

Do you thinks those could be part of your TODO list ?

Will try it on few next days and i'm ready to help you translating it in french

thats what the "Remote Control" part is for... ive got the API's to format the SD Card on command done...

yeah the whole hard reset part is stuffed... and there are three ways around it..

1. Cook the program into the ROM
2. Extended ROM customisation
i. Cannot be done unless the device is SuperCID or the fatfs dll has been patched...
3. Autorun installation from SD Card, which still needs the user to take the card out and put it back in...

[c0rnholio]

thats what the "Remote Control" part is for... ive got the API's to format the SD Card on command done...

yeah the whole hard reset part is stuffed... and there are three ways around it..

1. Cook the program into the ROM
2. Extended ROM customisation
i. Cannot be done unless the device is SuperCID or the fatfs dll has been patched...
3. Autorun installation from SD Card, which still needs the user to take the card out and put it back in...

There seems to be a way to do it via extended rom. There is a german company that has PDA security software (Utimaco). Their software (SafeGuard PDA) has a hard-reset survive feature, an uninstall protection AND an active-sync protection. I don't excatly know how they do it, but maybe you want to take a look: http://www.utimaco.de/C12570CF0030C00A/vwContentByKey/W26K9K3H200OBELUK

[naboleo]

2. Extended ROM customisation
i. Cannot be done unless the device is SuperCID or the fatfs dll has been patched...

Sure, but it is mostly exact that many people have an CIDunlocked PDA. At least those who came in here, i guess.

The others avantage of using extended rom it that you do not need to reinstall fully your pda and just need to flash extended rom.
Make me think that you can remove by hand the startup shortcut (service or whatever) as it is not part of rom :( !
Rom cooked shortcut for startup and storage (software and profile) on extended rom seems a bit too difficult for the average user ,isn't it ?

Their software (SafeGuard PDA) has a hard-reset survive feature, an uninstall protection AND an active-sync protection. I don't excatly know how they do it, but maybe you want to take a look: http://www.utimaco.de/C12570CF0030C0...K9K3H200OBELUK
Would be very nice to have those !

[Shadowmite]

In order to survive a hard reset I really intend this app to be cooked into the rom. Granted there may be other methods, but all will be just as complex as the user has to make their own settings file regardless. Installing this in a cooked rom is simplistic and is the main reason I wrote this, simple copy the 3 files to the dump folder, and edit initflashfiles to put the shortcut in startup... That's it.
I could most likely write a pc portion to automate this if needed, just point it to the dump folder and click go...

[shantzg001]

@naboleo: SuperCid\Cidunlocked doesnt mean u have "write access" to the ext rom, i think in later akus u get only read access on ext rom..

@shadowmite: i just mapped ur repository and saw that ur code is in .net..i wont be able to contribute to it much as am a native developer..but will surely be tracking this thread eagerly...

[naboleo]

@naboleo: SuperCid\Cidunlocked doesnt mean u have "write access" to the ext rom, i think in later akus u get only read access on ext rom..
You can't always have direct write access to the extended rom,but there is a way (using winimage and other tools, link was on the forum somewhere) to be able to extract/edit/flash back your own extended from a real computer


I could most likely write a pc portion to automate this if needed, just point it to the dump folder and click go...

Look at http://forum.xda-developers.com/showthread.php?t=299723, let's hope it will help you a little

[Shadowmite]

Thanks, I'll have to take a look at that... Just a note the version out of SVN will of course be far more up to date, the problem with locked SIM's throwing an exception is now fixed... Next up, activesync lockouts I think... I'm gonna let walsh tackle the sms handling portion.

[Shadowmite]

Updated the zip file here to the latest as of now, fixing quite a few early bugs that would prevent various sims from working ranging from simlock being set to no sim being present.

[naboleo]

Ok, did try it few minutes ago :

My remarks :

After completing the form, i can't enable security because of registry writing error : see screen capture.
I finally came up with soft-reset my pda and was able to enable it

I also had troubles with text imput, having square instead of text show in form, but probably not related directly to your program as I was using "MyMobiler" to remote control it.Soft reset solved the problem and I can't reproduce it yet

Number is show as NOTSUPPORTED, don't know if functionnlity is not available yet or if program have troubles with identifying my card.

Finally I think it would be better to have a different screen for entering configuration first time and for entering after security is enabled.
Just asking for password would be enough I think.
I don't know how it works in others countries but phone number is part of the identification process for providers in France (when you have to call them at least). So having my email address and/or phone number in clear text will potentialy permit identify any user as me... Same problem with storage in clear in settings file/registry

Was not able to switch sim card yet, but will do it in a few days

Should say that i can't wait to have this tool fully working :-P Great job !

[ww2250]

Good work, man!

I think the Activesync must be locked down - since via Activesync you can do many nasty things like stealing your whole addressbook, copying files, removing the program config file.

Even if you hide the config in the registry, there's still Activesync API available to modify the registry.

Next I guess, would be good to disable the memory card autorun as well. I am not sure how, but autorun may drop a program to remove the lock by simply inserting a card into the slot.

I am a trinity owner too - would be nice that it could use its gps capability for something useful. However, it's slow to get a fix. I tried to put it in my pocket and walk around and didn't get a fix at all...

On the other hand, I believe this program must be cooked into the rom. Just too many knows the fact that extended rom customization could be skipped by just resetting at the right time, in time.

God knows if there's a way to prevent flashing the device at all. I believe it's possible since the I believe SPL could be hacked to accept some sort of password such that everyone must know the password before flashing. That way, we can really lock down our phones.

Perhaps, I dream too much :-)

[aatreya]

If there's a way to programmatically lock the device using the built-in password lock, you might want to consider that, since that will lock the person out of activesync as well.

[Shadowmite]

There is, the problem with that is I want to have a message up about why the device is locked and who to contact to return it. The solution I'm using is pretty effective, I just need to explore the registry keys to break the activesync connection (which should be all there is to it).

[ww2250]

Hmm... no offend - but the method to break activesync connection might not be universal or portable across different machine models. Just my 2cents.

[ww2250]

Just have a new idea. How about to add a function to take a photo when someone is trying to enter a password (after the SIM has changed), and then send that photo out if the user enters wrong password too many times.

Trinity has 2 cameras - one in front, so it's bound to be extremely effective counter theft measures. Incidentally, I came across a free camera library that may be useful.

http://teksoftco.com/forum/viewtopic.php?t=52

[princeasi]

ok just to let you know, i cooked the app into my rom, i tested it this morning and found out that when the password screen pops up from a different sim card insertion, i was able to bypass inputting the passsword by holding down the x button for a sec and releasing. it seems that it was closed by the x-button app!

[shantzg001]

Just have a new idea. How about to add a function to take a photo when someone is trying to enter a password (after the SIM has changed), and then send that photo out if the user enters wrong password too many times.

Trinity has 2 cameras - one in front, so it's bound to be extremely effective counter theft measures. Incidentally, I came across a free camera library that may be useful.
I had smthing "similar" in mind. The thing that u r suggesting is not possible (unless u get some help from HTC itself) because the front camera of any HTC device is not exposed to external developers, so u cant control it..
What I had in mind was, that if the app detects a wrong sim, it starts clicking pics at some interval and uploads the onto a preset server(or mails them or mms's them), but this can be quite a PITA because of so many variables like if the user doesnt have a gprs connection, and how to do this (making a data connection) while not letting him know etc..But if those things can be figured out (or we agree to live with them) then its quite a good feature because the cam is bound to click snaps of places arnd the thief, of ppl arnd him, or maybe even himself (when he is checking out the back of the phone :P )...(plus he also runs a bill on his data usage :) )...
Another idea that I had was, that whenever the app detects the phone as idle, it makes a "background" call (i.e. no visual indication to the thief) to ur preset number and u can listen in on the sounds around the thief, maybe u can catch names of ppl, or names of places where they work\study etc, which is easier to implement, easier to hide, and mide get u clues abt where to look for him

[Shadowmite]

ok just to let you know, i cooked the app into my rom, i tested it this morning and found out that when the password screen pops up from a different sim card insertion, i was able to bypass inputting the passsword by holding down the x button for a sec and releasing. it seems that it was closed by the x-button app!

Yea, if you put this into a rom or on your phone having x-button set to close on click and hold is not a good idea... I'd recommend turning that off, that's a process kill and not much a running program can do to stop that, though I guess I could launch a second program which runs in the background and will re-run the first if it's closed... But that is a lot of extra memory overhead for something as simple as not having x-button set this way.

I'm sorry I haven't worked on the app lately, I was hoping walshy was gonna help out with the sms portion but I think he's been busy, so I will soon pick it up and start running with it as well. I'm coming up to speed in native c++ programming which will be needed for the sms intercept handler...

The cam pictures idea is a great one and will go into the todo list...

[shantzg001]

abt the x-button thing, I think there is indeed an option, which is to:
1)Keep thepswd input box maximised, create extra taskbar and softkeybars to cover the rest of the pocket pc apps,buttons so that the user cant reach them.
2)trap all the hw buttons so that the user cant use smthing like alt-tab or smartskey to bypass the pswed screen..
BTW, a few months ago when I was thinking abt creating a anti-theft prog, I had created a kind of spec listing most of the things that I wanted the app to do. I'll paste that list here in a short while (as soon as I'm able to find it in my cluttered lappy ;) ), maybe u can find smthing useful there...

[princeasi]

hey no worries, I like this program. It has alot Of potentials, and I'll try cancelling the x- button to see how it works! Thanx

[ww2250]

I had smthing "similar" in mind. The thing that u r suggesting is not possible (unless u get some help from HTC itself) because the front camera of any HTC device is not exposed to external developers, so u cant control it..


It's quite a piece of old code floating around. It should be able to access the camera via the HTC api. But whether the 2nd camera would work is an unknown.

http://blog.opennetcf.org/ncowburn/content/binary/HTCCameraAPI.zip

There is also an app that can use the HTC front cam:

http://www.ateksoft.com/webcamplus.html

[shantzg001]

If the HTCCameraAPI really allows access to front camera, then WOW man..
Shadowmite, pls do check it out. I cant do much with it cuz I dont have an iota of knowledge about .net programming and the attached code is in .net..
I know about ateksoft app. I guess they might have signed NDA etc with HTC to get the APIs, its a paid app after all..

[shantzg001]

Here is a list of some of the things that I thought of putting into my (non-existent) app. Many of the things are already implemented by u, or in ur to-do list..Just take a look if you find smthing interesting:

1. Option to lock down the phone completely.
2. Option to disallow phone calls
3. Option to display owner contact info and message
4. Option to make a hidden\unhidden phone call to owner specified number.
5. Option to take picture regularly and send to owner
6. Option to send sms to owner specified number
7. Option to send contacts info stored in thief's sim to owner specified no.
8. Option to send sms to all called numbers specifying that the phone is stolen
9. Option to send sms to all contacts of thief specifying that the phone was stolen
10. Option to take GPS coordinates of thief and send to owner
11. Option to send Cell Id (or sm other location info) on non-GPS phones to owner
12. Option to remotely send message to thief thru message box.

[fallenczar]

here is my (unwanted) advice...
1)have the app. incorporated in the rom and make it store the settings file on the phone 2) on ext rom 3) on the memory card and have the app scan these places in this order..if this file is found then the settings in it will be used and it will create copies of itself in the above mentioned places.
you could also provide an option to hide the extended rom and lock it during initial config of the program.
2)this is technically more demanding but you may consider creating a costom dialer which will show the no. pressed but will dial only a predefined no. this will be launched when the thief presses the phone button (you will need to trap all hardware buttons) making him call the owner

[shantzg001]

fallenczar, you dont need a custom dialer here..one can just trap the outgoing call event, hangup that call and start ur own call with the predefined no.., though the native dialer will show that the dialed no. is disconnected..

[daxliniere]

Heya Shantz!
Good to see you contributing your vast knowledge to this project (which seems like a GREAT version of a great idea)

Best of luck! I'll be loading this as soon as it's done!
(I might even learn how to cook a ROM because of this!)

[fallenczar]

fallenczar, you dont need a custom dialer here..one can just trap the outgoing call event, hangup that call and start ur own call with the predefined no.., though the native dialer will show that the dialed no. is disconnected..

i'm pretty sure you can but the reason i proposed a custom dialer was so that it did not have a close button and it did not provide access to the start button, while at it we may also consider making the hangup button ineffective (maybe we can make it hide the phone call and bring down the phone volume to minimum level )

[faria]

@ Shadowmite

i have cooked the app into my rom...it worked fine for 3 days,then today a decided to test it properlly by using my wife sim card, the device booted and asked for the password, but once i enter the password nothing happens i stays locked....so i put my sim card in and rebbot ,again the same....my device still locked! i have attached a picture...


as for the htc taskmanager i wiil post later the fix for it including the fix for the new upcoming htc task manager.

[Shadowmite]

Faria, the program sets a flag when it locks out to prevent the thief from putting the original sim card back in to get it working again. Are you sure your password was correct? you can of course get around this at the moment by syncing with activesync and deleting the SecurIt.dat file from \windows, but if your password wasn't wrong this is odd...

Looking at your email, it's a little messed up, is this a character translation issue maybe? If you open the SecurIt.dat file, how many lines are in it? should be 5...

[faria]

Faria, the program sets a flag when it locks out to prevent the thief from putting the original sim card back in to get it working again. Are you sure your password was correct? you can of course get around this at the moment by syncing with activesync and deleting the SecurIt.dat file from \windows, but if your password wasn't wrong this is odd...

Looking at your email, it's a little messed up, is this a character translation issue maybe? If you open the SecurIt.dat file, how many lines are in it? should be 5...
:x???"t?z???&
???[??????g???H
???z&2?{I?
?w
jaf_30atmsn.com (jaf_30@msn.com)
+447911123456

above is my current data in the file.
actually activesync would not let me browse the device,had to hard reset.

also when i run the program the sms number is in the email field and vice versa....it also says my password is incorrect,im guessing that somehow the rom cooking procedure corucpted the file....i gonna try again, im sure is something wrong in this end [since im with the flu an all].... i will keep you posted.

but the funny thing is that when the device boots i get the sound that state that everything is allrigth.

[faria]

here are the settings to stop current taskmanagers verrsions 1xxxxx closing the app;

add the folowing to your rom or the app

[HKEY_CURRENT_USER\Software\HTC\TaskManager\APPS]
"99"="SecurIt.exe"

for the upcoming htc taskmanager version 2xxxxx add the folowing;

[HKEY_CURRENT_USER\Software\HTC\TaskManager\Exclusi veList\System]
"\\Windows\\SecurIt.exe"=dword:00000000

[Shadowmite]

Hmm, well I think I know the problem, I can fix it in the next version which I'll try to get out tomorrow. I expected this might happen, but never got it to. Basically I'm writing the binary md5 hash of the imsi and password etc to the dat file, but as their actual ascii values. So you happen to have a linefeed/carriage return in your hash which is screwing it up! So I'll just translate it to hex first and it should all be good.

Should be able to get a new version ready for tomorrow with a few tweaks and fixes.

[faria]

Hmm, well I think I know the problem, I can fix it in the next version which I'll try to get out tomorrow. I expected this might happen, but never got it to. Basically I'm writing the binary md5 hash of the imsi and password etc to the dat file, but as their actual ascii values. So you happen to have a linefeed/carriage return in your hash which is screwing it up! So I'll just translate it to hex first and it should all be good.

Should be able to get a new version ready for tomorrow with a few tweaks and fixes. that explains it.
thanks. i started anew but with the same results.sms still shows in email field and the email all screew up...password still no go.

[faria]

i forgot:eek:
great work and many thanks for sharing you skills with us.

regards

[Shadowmite]

No problem, just trying to give back what I can! :)

I haven't tested this version on my phone as I wrote the damn thing too well and it's locking me out since I have the app burned into my rom... I'll have to write a little PC companion to save your .dat file on the pc without the phones help (should make rom building eaiser too). This exe should use the md5 hashes in hex form now thus fixing your issue. Once I get a few more bits done I'll package it all up into a cab again.

[sigc]

A great idea

[naboleo]

Any progress ?

[Underwaterdub]

nice app...

[geedsen]

Installed it. Started it from programs.
The 'busy circle icon' shows, but never goes away.

After a few minutes it comes up with an error:

Securit.exe
NotSupportedException

at
Microsoft.AGL.Common.MISC.HandleAr()
....(and more)


this is WM6, it did complain about 'wrong version' during the install.
How do I remove it completly?


Tnx

geeds

[babarnazmi]

Its very handy application, specially device locking is great for theft protection.

Congrats Shadowmite on developing such a nice application. Thanks a lot

I tried mobile justice,

1)it got gps support (nice but my wizard don't have gps)
2)sending/displaying messages to stealer. (it will be nice to see same in SecurIt)
3)don't have device locking...


Thanks and Warm Regards,

[captkkk]

Nice little piece of app Shadowmite, I use it along side with HideMyStuff for the documents hiding with a password, also using Eyes on Privacy for locking my SMS list and recent call, so it very safe now, thanks for all the hard work.

[ChetanPujara]

Hi @Shadowmite,:)

Could you please help me to get the latest version if you have developed... I am using T-Mobile Dash (HTC S620) with Windows Mobile 6 version... I have downloaded your excellent program but it shows error in installing...

The error is....
Securit.exe
NotSupportedException

at
Microsoft.AGL.Common.MISC.HandleAr()
....(and more)


Can you please help.. I need this software...

Regards

Chetz:cool:

[Yatesy24]

Hey,

I am very interested in getting the source for this one, could you re-post it for me?