Related
Hey guys,
I've done some dev on *NIX before, including writing ways to sign my own packages using encrypted hashes and the like. Does anyone know the method that HTC is using to sign the zip files?
The reason that I ask is because I'm interested in trying my hand at reverse-engineering the signature. I am sure some of you guys have already done some work in that area, and I'd rather not repeat someone else's effort if y'all have already taken steps to break the signature. My CSI teacher told me to never start from scratch if someone else has already done good work. It's insulting to them, and makes more work for you.
Where are you folks at with breaking the signature? Is the method known (i.e., is it based on files inside the zip, is based on the bits of the zip, is an additional hash or added metadata, etc)? I would really appreciate any feedback on this if you have the time.
EDIT: For those of you who are leakers or users et. al. DO NOT get any hopes up about this thread. I'm just getting started and this idea could fizzle within minutes of you reading this particular sentence. Anyone posting, please focus on practical suggestions or comments such as sickbox's initial comment below. Thank you!
I've wondered about this since the beginning.
I understand just how complex signing can be (to some degree, I'm not a math guy but I understand scale).
My thought though is we can utilize several tools to make this process possible - though I have no idea how to implement most of this to make this possible. Maybe I'm nuts, but here goes...?
- We now have what, three or four different HTC signed images in the wild with another on the way (OTA). Would it be possible when trying to reverse the sig to utlize the differences between the packages to narrow the cope a bit?
And next
- Using GPUs to process data like this has been shown to be exponentially more efficient and effective than CPUs. What would it take to use some of our awesome GPU power ( a la CUDA) to attempt this task?
Lastly:
- Can we break up the processing required among several of us to speed things further?
I know this has probably been thought of before and discarded for good reason, but I guess the more ideas the merrier.
I'm no CS guy, but I would love to help! I'm one of those unfortunate leakers but rather than whine I'm looking for ways to help. Reversing the HTC key would make life sooo easy. Who knows, maybe they'll use the same key on the next few phones?
Pretty much why I'm asking NOW is because I have enough packages for me to examine and compare and test against. I'm not the best or the most experienced at it, but this kind of thing is fun for me and fits into my spare time. When I have spare time.
It's not the signing we need to know how to do its the cryptographic key that they use to sign their packages that we need. The private key changed with the last bootloader so even if we cracked the key before the couple hundred years it would have taken us to crack the one used for 1.5 we would have to do it again now for 2.1 stuff.
Just look around for test signing and such and you can find the test key that people use to sign stuff as well as the method used to sign the package.
As far as getting the key... you will have to know someone from HTC who would risk their job to get you a copy of their private key.
Greetings Sickbox,
I guess my intention isn't clear. I want to be able to sign packages regardless of what key HTC uses. We have a signature, and we have keyhole. I've noted that the behavior on my Eris is that the signed packages check out just fine each time no matter what version I'm trying to flash (obviously, cannot downgrade, I know, but trying to downgrade still passes the signature and it is the version that fails). So what I would like to do is reverse engineer the signature not necessarily to find the key, but to discover how to create keys. I have 4 different packages, and two test keys that I can examine.
I'm only wanting to know if someone knows how the packages are signed so that I can eliminate looking at all the signing methods. In my research so far, I haven't been able to google, bing, or yahoo anyone who knows what method is used to sign the HTC official packages.
That help, Sickbox? Thanks for your input, I really appreciate it.
So the intent is to reverse engineer the key correct? Then we can sign whatever we want...
Or are you trying something else?
Just want to see if we're on the same page.
1234567ten
I don't necessarily want to reverse engineer the specific key that HTC used to sign any one package, but rather the template for the keys. A prime example of this kind of key decryption would be DeCSS written by DVDJon. He quit trying to reverse engineer the keys used to encrypt DVDs and reverse engineered the decryption of DVD signatures.
I'm not using technical terms for the following, but basically when you sign or encrypt something, the key used is not found within the package or signature, nor is it in the program used to verify the signature or decrypt the package.
If I can do nothing with the signatures of the Eris roms, it's no waste to me. I have fun with this because I want to design an open source DRM system someday. *Sigh* dreams.
Try these. I'm still not sure if I fully understand your question but this as much as I could come up with.
Found by searching "android signing" & "android sign rom" on google if you wanna see what else might come up.
http://developer.android.com/guide/publishing/app-signing.html
http://androidforums.com/developer-101/8665-how-signing-roms.html
sickbox said:
Try these. I'm still not sure if I fully understand your question but this as much as I could come up with.
Found by searching "android signing" & "android sign rom" on google if you wanna see what else might come up.
developer.android.com/guide/publishing/app-signing.html
androidforums.com/developer-101/8665-how-signing-roms.html
Click to expand...
Click to collapse
Hmm... maybe I was being too specific when looking for "htc sign rom" and "eris htc sign rom," etc. I'll see what I can cull from those broader searches. Thanks for the tip, sickbox.
np
34567ten
You might have noticed that there is a little bit of confusion in the posts here when "signing" is brought up; there are two completely different signing methods in use.
The first applies to applications (.apk bundles), "update.zip" files (which could be used with Amon_RA's recovery), and OTA-delivered update files. The distinguishing feature of these .zip files are: 1. They have a META-INF folder in them with two Manifest files and a RSA public key file, and 2. there is nothing "unusual" about the zip file itself. (The contents of the zip file are signed, but the whole zip file is not.)
The second type is the "rom.zip" files buried inside the MR1/MR2 " RUU" updates. These files, when renamed to PB00IMG.ZIP, can be used with the bootloader to update the phone. The distinguishing feature of this type of file is that: it has a mystery blob of binary data at the front of the zip file - 256 bytes. The rest of the file is an ordinary .zip file, and if you unpack it you will find that there are no manifests, no META-INF file, and no public key certs. (In this case, the entire zip is signed, but none of the individual content files are.) I think it is this second type of signing you were referring to in your posts, but honestly I am not certain.
The first form of signing is perfomed with a java tool called "jarsigner", and its behavior is well understood: it creates the first manifest file by computing SHA-1 hashes for every file to be included in the .zip archive. Then, it creates a second manifest file which shadows the first one, and for each SHA-1 hash value, it "signs" them using the signer's private key. In this 2nd file, it also computes the hash for the complete (1st) manifest file, and signs that hash. In any event, what I mean by " well understood" is that this is just a standard use of RSA public key cryptography, using widely deployed Sun Java tools. Break it and you will have made quite a name for yourself.
Now, as for the 2nd type of file - rom.zip/PB00IMG.ZIP, I have not seen anyone (yet) describe the format of that MIC (Message Integrity Check) 256-byte blob. I poked at it a little, but certainly not exhaustively.
If you want to add to the knowledge here, try and discover what the "format" of that MIC is. I suspect that even if you do that, you will find that the sig uses exactly the same PK tools that are already built in to the bootloader - from the standpoint of practicality, it really doesn't make any sense why HTC would " roll their own" when they already went to the effort of coding RSA tools into their botloader(s).
bftb0
Hey bftb0,
You answered my question PERFECTLY. Nobody I've spoken with elsewhere has yet brought up the RSA encryption that's already built into it. You're probably only second guy to mention it, beyond some dude in an IRC somewhere (and I think he was drunk at the time).
Knowing that it is just additional bits on the zip, has anyone thought off hacking it off and paring it to another zip in an attempt to "sign" the zip (I've done this successfully with various signed ISOs)? Also, the public key could be arrived at, given two factors, 1. The same key was used for all Eris 2.1 packages; and 2. The "blobs" of data can be sufficiently compared and I have enough computing power.
Thank God I may be getting an intel I7.
Or I'll just borrow my friend's PC.
I hope I'm not just blowing steam, because it would suck to get working on this and then find it's impossible. But they say that about a lot of key encryption schemes. LIKE RSA on Blu-Ray.
Thank you so much bftb0
Don't read too much "encouragement" into my post; I responded in order to shed some light on the way that HTC is doing things, and that's about all.
If you think about it carefully, you will understand that the manifest-signing operation gives you hundreds, if not thousands, of individual plaintext/crypt-text pairs that are all signed with the same private key. That doesn't mean that a known-plaintext attack is easy, though.
The EFF commissioned a project a couple of years back where they built custom hardware that would brute-force key searches for short keys- 256 bit keys IIRC. The machine they built was a parallel processor built from fpgas/DSPs, and it could recover keys in a few days. Their budget for that was in the low 100,000s. Offhand, I don't know what key length HTC is using, but I doubt it is 256 bits.
I don't recommend you spend any cycles trying to brute force a key recovery.
bftb0
bftb0 said:
Don't read too much "encouragement" into my post; I responded in order to shed some light on the way that HTC is doing things, and that's about all.
I don't recommend you spend any cycles trying to brute force a key recovery.
Click to expand...
Click to collapse
Dude, I was so encouraged that I want to rip open my PS3 and put it to work RIGHT NOW.
Not really. I'm too lazy-assed to spend much time brute forcing it. I'd rather pick it apart and see if there's anyway to mimic the signature. Your advice that it may be RSA based is more exciting in that it helps me know what I may be dealing with. I hope to pick at the binary data appended to the signed roms either tomorrow or next weekend.
And thats what I appreciate.
I'm not sure what you're trying to do. You either brute force the private key, using various bits of super-math (e.g. elliptic curve cryptography?), or you give up and move on -- perhaps looking at patching the subsystem responsible for validating signatures (dangerous for production use).
There are no "mimicing" possibilities and swapping blobs/zips around is just silly. You should spend your time elsewhere, like reading up on how public-key cryptography works.
Thanks WithinRafael,
I think some of what I've written above shows I'm researching public-key cryptography. I really appreciate your thoughts, and it became clear by the end of sunday that the signature is specific to the package. Without me doing much work, mostly research. RSA is a load of work and I do not want to mess with trying to crack that.
I recently became interested in trying to turn S-off. Someone recently gained RW access to NVRAM, and I'm hoping this weekend to move on as you mentioned. Thanks for the good discussion, guys!
with a pen....duh j/k
Anyone have a supercomputer? ...lets brute force it.
Is there a way to check if a rom passes the signature test without trying to load into the phone? Can we check if the signature passes on a computer?
If so we could sign it with all possible keys and see which one passes.
Is this frowned upon and shouldn't even be discussed? or would it just take too long to do? ... or is it just not possible to check the signature on a computer?
... or all of the above?
DarthMowzy said:
Anyone have a supercomputer? ...lets brute force it.
Is there a way to check if a rom passes the signature test without trying to load into the phone? Can we check if the signature passes on a computer?
If so we could sign it with all possible keys and see which one passes.
Is this frowned upon and shouldn't even be discussed? or would it just take too long to do? ... or is it just not possible to check the signature on a computer?
... or all of the above?
Click to expand...
Click to collapse
We can check the signatures based on what is stored in the Manifest file inside the PB00IMG.zip file.
It is possible to brute-force it but it would take years to do so it isn't really worth the effort.
I've created on my desktop a shortcut to a project folder on my SD card. Can anyone recommend an app that will let me set up a password for that folder?
I'm not looking to encrypt all the data in the folder, I just want password-restricted access to it. I can't find anything suitable in The Market.
Thanks.
If it's not encrypted, then its not protected.
Really, seriously, utterly, there is no way at all that you can "protect" a folder on an SD card other than encrypting the contents. Other apps, will always be able to access it, and, equally, anyone could take the card out and stick it in a PC card reader.
I appreciate that, and that's fine! I'm not looking for total protection from access, either through SD card reading or via apps. I'm just looking for password-restricted access when accessed through the desktop shortcut.
SmartLock will let you lock your photos/videos, as well as apps and such but I don't think it does folders. The best you could probably do would be to hide the folders using SmartLock or a similar app along those lines.
Yes, I have discovered SmartLock, thanks. But I have to say I'm not a fan at all of the whole mentality with mobile phones that data is split into storage of photos, videos, "music", etc, in separate locations and treated separately.
The folder in question contains mp3, pdf, jpg, xls and doc files.
Hiding the folder would be completely against what I'm trying to do, which is to have a clearly visible, easily accessible desktop shortcut. I guess basically I'm looking for the Android equivalent of a zip file with password.
AidanBell said:
I've created on my desktop a shortcut to a project folder on my SD card.
. . .
Click to expand...
Click to collapse
When you write desktop, do you mean homescreen or as a network shortcut on your PC? If the latter you can use the desktop's OS to protect the link.
AidanBell said:
. . . I guess basically I'm looking for the Android equivalent of a zip file with password.
Click to expand...
Click to collapse
Wouldn't the Android equivalent be a zip file with a password? ES File Explorer is free and supports password protected archives.
Sorry, terminology!
Yes, I mean the home screen on my Streak (or strictly speaking one of them!).
I already have and use ES File Explorer, that's how I created the Homescreen shortcut!
So if it turns out that what I'm looking for is already a feature of that program, then how's that for irony!
Glad you've found a solution that works for you, but... you do know that password protected zipfiles are encrypted,
jim-bo said:
Glad you've found a solution that works for you...
Click to expand...
Click to collapse
Thank you, but regrettably I haven't.
When you zip a folder it of course creates a copy of that folder, zipped, which is not what I want at all. I'm amazed that what I do want doesn't seem to be readily available; in order to open a folder you have to enter a simple password, and then you're in the folder. Simple as that ...
AidanBell said:
Thank you, but regrettably I haven't.
When you zip a folder it of course creates a copy of that folder, zipped, which is not what I want at all. I'm amazed that what I do want doesn't seem to be readily available; in order to open a folder you have to enter a simple password, and then you're in the folder. Simple as that ...
Click to expand...
Click to collapse
Well, part of the reason that nobody makes such an app / feature, is that it is pretty much the equivalent of selling a security system for your house that consists of a door that doesn't lock, with a sign on it saying "no unauthorized entry". It really offers no actual protection at all.
That being said, what you're trying to achieve sounds more like you want to protect an app / shortcut on your launcher screen, rather than protecting the folder itself
Take a look at something like https://market.android.com/details?id=com.sp.protector.free&feature=search_result (I searched for password any app, if you want to see other options). It may let you achieve what you're after.
Thanks for your thoughts. To use your analogy, yes; I do indeed want the sign that says "no unauthorized entry" but I don't want the door to be locked. Precisely!
Perhaps I should explain my situation more closely. I'm taking my Streak in to meetings with colleagues who will also make use of it. All I want is to prevent casual non-malicious access of the folder by other people. I neither need nor want encryption or strong security, I just want that tiny bit of difficulty, the little hint that says "you're not supposed to be doing this".
Thanks for your thoughts.
Using your own analogy; yes, that's exactly what I do want; the sign says, "no unauthorized entry", but the door remains unlocked!
Let me explain. I take my Streak in to meetings where it is also used by other people. What I want to prevent is non-malicious, accidental access by others. I want a gentle hint, not a 100% secure lock-out or data encryption, just a little kick that says "you're not supposed to be doing this".
Smart App Protector would be ideal if it would protect a folder. It's exactly what I want, but I need it for for folders, not apps.
You said that you wanted the prompt to come up when you hit an icon on your desktop - that would be app-protection, or shortcut protection, since it is the launch of the app / shortcut that causes the password prompt.
If you are saying that you are already in a file browser, and you want the prompt to pop up when you choose a certain folder to enter, then you are going to need to find a file browser that supports protecting or "hiding" folders, since it will have to be a direct function of the file browser app itself. I'm afraid that I don't know of any that offer anything like that feature.
To be absolutely clear, there are no features or functions in an SD card filesystem that will allow this sort of security flagging, and to do it at the OS level would involve some relatively low level dalvik / libc / kernel patching, which would require root, a custom ROM, and quite possibly end up being device specific, which explains why you can't find anything in the market.
I seem to manage to make a habit of this: There are literally tens of thousands of available apps that do everything under the sun. Yet the simple, not unique or unusual, function that I'm after isn't available! Oh well, many thanks for your kind help nevertheless.
AidanBell said:
I seem to manage to make a habit of this: There are literally tens of thousands of available apps that do everything under the sun. Yet the simple, not unique or unusual, function that I'm after isn't available! Oh well, many thanks for your kind help nevertheless.
Click to expand...
Click to collapse
Unfortunately, this one isn't simple (you are asking for a low-level redesign of the security model), and while it may not be uniquem it is something that not many people would want - referring back to the previous metaphor, how many people would buy a front door with no lock, just a keep out sign, really? Especially once they learned that burglars can't always read...
But if I ever do come across anything that might help, I'll definitely let you know
AidanBell said:
Thank you, but regrettably I haven't.
When you zip a folder it of course creates a copy of that folder, zipped, which is not what I want at all. I'm amazed that what I do want doesn't seem to be readily available; in order to open a folder you have to enter a simple password, and then you're in the folder. Simple as that ...
Click to expand...
Click to collapse
Can't you then delete the folder and use the zip. When you tap on the zip you can see the file names, but to open a file you need the PW. Not ideal since ES Fie Explorer doesn't support copying directly to a zip file, but it is as close as you can get, I think.
Edit: I don't usually put shortcuts to things I don't want others peeking at on the homescreen.
I read the whole section forum and people are side loading uncompatible apps, but no where does anyone explain "how to" side load an app can somenoe tell me, I have apps on my Galaxy 7in and they are not compatible with the Sony S running Android 3.2.1.
I want my Amazon app store, Pinger texting, words with friends and I have others too!
This is a new toy for me but disappointed that I cannot get these apps
Any help is appreciated!
It's easiest if you have ADB knowledge so you can pull apps from the galaxy tab and push them to the tablet s, but you can get the amazon appstore by going to amazon's website and it'll email you a link to the download. Also, I have words with friends on my tablet which I downloaded from the market no problems. Maybe with the latest tablet s update it is no longer marked as compatible, in which case we'll have to wait for the ICS update for a lot of the fragmentation problems to go away.
Put the .apk file from your Tab on your sd card, then you go into a file explorer type application on the Sony to find the file. Click on it and it should ask you if you want to install.
You should be able to download the amazon app store directly from amazon.com.
Also a nice program that will backup all your settings/files/apks is MyBackup Root, which will put all the apk's in one folder. However looks like the sony still hasn't been rooted?? I'm still waiting for mine in the mail.
Thank you
I am sure some of this is out of my league but I am going to take a shot at it. This is all new to me. I am technically challenged LOL.
I am going to go get the Amazon App Store though.
Thank you for the extra help
Sandy
spoilingpets said:
I am sure some of this is out of my league but I am going to take a shot at it. This is all new to me. I am technically challenged LOL.
I am going to go get the Amazon App Store though.
Thank you for the extra help
Sandy
Click to expand...
Click to collapse
If you use Astro File Manager (I know plenty do) on your Tab, you can use Astro's built-in App Manager to backup the apk files from every installed app to a folder on your SD Card. Then just copy this folder to your Sony like any other file, then using Astro (or some other file manager) to click on the individual apps in that folder and choose install.
I backed it up
AGC 93
I really am technically challenged here, I downlaoded the Astro File system, and I backed up the programs I want but I don't know where I backed them up to, it didn't give me a choice as to where to back them up.
Then I dont know how to transfer them from one device to the other. I wasn't kidding when I said technically challenged!
Thank you
Sandy
you could also save apps on a shared drive and install from there using file manager or the same via dropbox, etc
Maybe?
Maybe one of you would be willing to walk me through this procedure from beginning to end and then I will learn it, but right now it is all a mumbo jumbo to me.
We can do it through PM if we don't want to clog up the forum or maybe there is someone else who needs the same help as myself
Thank you
Sandy
Would it not be easier to just use the normal Amazon web page rather than mess about trying to get an app to install? If it's anything like the Amazon iphone app, it's pretty useless anyway - certainly nowhere near as good as using the web page.
I should explain better
I really need to text so I need a texting program that works well with at least some options. Chompsms and Handcent do not work without a phone number and getting an answer from tech support from either of those is like pulling eye teeth,(sorry)
I found a texting program on my galaxy 7 inch that works wonderful and does have some options for larger fonts, a local phone number bubbles so you know who is talking blah blah blah, it is not compatible with Android 3.2.1 which is on my new Sony tablet,
I am trying to side load that and Have no idea what I am doing,
Plus when we get ICS does that mean some of the things that are not compatible now will be when we get that update?
thank you in advance for all the help
Sandy
spoilingpets said:
AGC 93
I really am technically challenged here, I downlaoded the Astro File system, and I backed up the programs I want but I don't know where I backed them up to, it didn't give me a choice as to where to back them up.
Then I dont know how to transfer them from one device to the other. I wasn't kidding when I said technically challenged!
Thank you
Sandy
Click to expand...
Click to collapse
Sorry for the slow reply. By default, the apps we be backed up to a folder called Backup on the SD card. In there, there should be your apk's.
Hope that helps
Oops, seem to have cross posted due to having two tabs open, cant make sense of the changed layout!
Mods please feel free to delete this thread if no one has answered!
Hi all!
An oldie but a goldie!
I've changed from S6 32g, to S6Eedge 64g since I was running out of space.
Now I need to transfer 4000 photos (sorted by date) to the new phone. A direct copy from PC converts all the created dates to the current date (ie when transfer is done) which as you can imagine screws everything up royally!
Ive tried and failed in many many many ways including:
Samsung Smart Switch
FTP
Syncing programs from pc to phone
ADB push
WEBdav
Hail marys, and praying to every god out there
They all bugger up the dates...........
The ONLY ONLY way Ive found out that works is by zipping up the original files, transferring to new phone, and unzipping locally with Total Commander. ONLY Total Commander seems to be able to unzip and preserve the dates, all the other file managers and extracting programs (I tried 10-15) out there can NOT manage this. Total Commander probably works cuz im rooted, and it can use this.
HOWEVER this only worked with smaller directories, but my main pics folder is a 8 gig compressed zip, and when I try the same way Total Commander only manages to unzip the same 700 files and stops (anyone else come across this limitation?). So the only way I can manage is to zip up the original files in 7-8 different zip files and unzip locally individually, which is a big hassle.
Ive googled many threads on this problem, most of them were unresolved and some solutions refer to previous android versions or software and dont work anymore.
I'm hoping that you all dont spend four days setting up a new phone everytime ( home screen and app settings is a whole different drama! Thank you Titanium backup! iOS really has the jump on Andoird when it comes to changing phones...)
The only thing I can think of which I havent tried yet is USB OTG, since I dont have the cable. Anyone can confirm whether this method keeps the dates unchnaged?
So in your experience, whats the best way of doing this? How do you guys do it?
To be honest for 4 thousand photos swapping back and forth between devices you are better off using a could storage. Especially if you want to minimise the risk of loosing them all if something goes wrong. All zip folders will extract with the original date it. You could try and torrent you DCIM folder and language download it to your computer. Torrents download with their file dates intact.
Thanks for your reply!
IMHO this cloud thing is actually whats causing so many of the problems in hardware design these days in general.
Why is it so hard for companies to realise that when you are two floors underground, or roaming or even in middle of central london, net connection is not guaranteed......
Let alone the speed, convenience, security issues etc etc etc
As to the loss risk, I back them up on my home pcs regularly with a sync application, which ironically enough works perfectly well thank god!
So for me cloud is a no go....
As to your other suggestion, sounds great
Can I torrent just on the local net? ie direct from phone to pc?
Any apps you can reccomend? will save me trawling through a hundred crap apps in GPlay.
Thanks again for your time, its appreciated!
PS re what you said about all zips extracting correctly. Can you try on your device? Zip up a few small old files on your pc, transfer the zip to phone, extract there, and check the dates.
All except one of the ones I have tried do it, as mentioned above.
PPS Gave your torrent suggestion a go, no joy. All the transferred files had the new date ;-(.
I tried the the utorrent android app...
Update and for future help for people who will come across this issue.
I managed it!
I used Total Commander on the phone through the LAN plugin function, to access my backup folder on the pc, select all files and copy to local phone directory.
You need to initiate the copy from the PHONE on Total Commander, ie pull the files onto the phone, dont copy them by drag and drop from PC.
It took a while but it was done!
Dates and timestamps all preserved and correct!
hello. i thought to be smart and download the APK through a downloader in browser on PC, but is still not able to install. it just says "App not installed".
ANYHOW... i feel this app should work just fine on the phone. problem is is that the company don't want it on other phones. so, there are some HTC and Sony apps from my past that won't install to a Coolpad phone i have.
is there any way to modify the APK so it will properly install? i don't believe the app to actually be incompatible, it is just proprietary to a different brand of phone.
the app i most want right now is > https://play.google.com/store/apps/details?id=com.sonymobile.xperiaweather
i used this to download it > https://apps.evozi.com/apk-downloader/
thanks for reading! i await any responses
@sk74261700027
If your phone's Android is rooted, you can try to edit Android's build.prop file housed in /system, will say change there brand / model settings according to your needs. Use a "BuildProp Editor" app to manage this,
jwoegerbauer said:
@sk74261700027
If your phone's Android is rooted, you can try to edit Android's build.prop file housed in /system, will say change there brand / model settings according to your needs. Use a "BuildProp Editor" app to manage this,
Click to expand...
Click to collapse
shoot. i have yet to figure out how to root this phone. it doesn't seem like there is any public root method for this phone yet. drat.
but if i could do that on the phone... shouldn't it also be possible to do this in the APK? i also don't know exactly what info that would be put there even if the phone was rooted. meh.
i figured worst case, i could use the regular Android software on PC to make changes to the APK. other then that, i think it could be possible to make changes to the APK with luckypatcher, but am not certain about that.
@sk74261700027
I never made use of LP.
You of course can try to decomplie an APK, rewrite app's source code and afterwards recompile it and then correctly sign the APK. Personally never have done so.
jwoegerbauer said:
@sk74261700027
I never made use of LP.
You of course can try to decomplie an APK, rewrite app's source code and afterwards recompile it and then correctly sign the APK. Personally never have done so.
Click to expand...
Click to collapse
oof. that sounds complicated. lol :/
i know there is Android Studio and SDK tools, but there is a lot there and i don't know exactly what is needed. i was just hoping that changing an APK for proprietary apps to install on non-proprietary devices was a normal thing, and that there would be a straight forward way to do this. sadly, i don't see any guides on this.
might just have to look around for something more generalized, like what you were talking about. i am surprised that there isn't a normal process for this type of thing. meh
well, thanks anyhow. thank you for replying here. at least that might give me an idea on where to go from here. in the meantime, imma just give this thread some more time. see if anyone knows anything more specific about this.
P.S. oh yeah! i do recall some kind of google market app that would allow you to change, or emulate, a device to download apps from the Play Store that are stated as not being compatible. will have to look for that and see if it still works. if someone knows where to find this, that would be really great.