<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Some More Bytes &#187; hack</title>
	<atom:link href="http://somemorebytes.com/wp/index.php/tag/hack/feed/" rel="self" type="application/rss+xml" />
	<link>http://somemorebytes.com/wp</link>
	<description>in the binary maze...</description>
	<lastBuildDate>Tue, 22 Mar 2011 19:17:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>This is one of the the reasons why&#8230;</title>
		<link>http://somemorebytes.com/wp/index.php/2011/03/this-is-one-of-the-the-reasons-why/</link>
		<comments>http://somemorebytes.com/wp/index.php/2011/03/this-is-one-of-the-the-reasons-why/#comments</comments>
		<pubDate>Tue, 08 Mar 2011 22:01:35 +0000</pubDate>
		<dc:creator>somemorebytes</dc:creator>
				<category><![CDATA[Hack]]></category>
		<category><![CDATA[hack]]></category>

		<guid isPermaLink="false">http://somemorebytes.com/wp/?p=662</guid>
		<description><![CDATA[Fly like Superman using the Force!]]></description>
			<content:encoded><![CDATA[<p><a href="http://somemorebytes.com/wp/index.php/2010/11/the-definitive-gadget/" target="_blank">THIS </a>was the definitive gadget!</p>
<p><iframe title="YouTube video player" width="600" height="350" src="http://www.youtube.com/embed/yGvsDD50cb8" frameborder="0" allowfullscreen></iframe></p>
]]></content:encoded>
			<wfw:commentRss>http://somemorebytes.com/wp/index.php/2011/03/this-is-one-of-the-the-reasons-why/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The definitive gadget!</title>
		<link>http://somemorebytes.com/wp/index.php/2010/11/the-definitive-gadget/</link>
		<comments>http://somemorebytes.com/wp/index.php/2010/11/the-definitive-gadget/#comments</comments>
		<pubDate>Sun, 07 Nov 2010 10:47:25 +0000</pubDate>
		<dc:creator>somemorebytes</dc:creator>
				<category><![CDATA[Software Dev]]></category>
		<category><![CDATA[developers]]></category>
		<category><![CDATA[gadget]]></category>
		<category><![CDATA[hack]]></category>

		<guid isPermaLink="false">http://somemorebytes.com/wp/?p=656</guid>
		<description><![CDATA[Emotiv headset. Wouldn´t it be great?]]></description>
			<content:encoded><![CDATA[<p>Recently a coworker called my attention to a great device, the <a href="http://www.emotiv.com/">Emotiv EPOC</a>.</p>
<p>The device itself, including the developer license or the research license is a bit expensive, but wouldn´t be great to develop some software using this device?? I think possibilities are endless&#8230;</p>
<p>I can see a couple of problems that are making me having second thoughts about the project&#8230; I can assume that the headset itself is not a toy, and measures correctly all the stuff it is supposed to measure. The real value however relies in the software API bundled with it. Emotiv seems to have translated successfully all the indicators associated with thoughts like &#8220;up&#8221;, &#8220;down&#8221;, or &#8220;push&#8221; into something detectable by their model.</p>
<p>However, let´s imagine for a minute that it just does not work. How do you prove it? How do you tell apart a software failure and a wrong &#8220;way of thinking&#8221;. It´s a delicate matter.</p>
<p>I´ll definitely keep an eye on it though!</p>
]]></content:encoded>
			<wfw:commentRss>http://somemorebytes.com/wp/index.php/2010/11/the-definitive-gadget/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Hacking a LG GM750 Layla Phone</title>
		<link>http://somemorebytes.com/wp/index.php/2010/07/hacking-a-lg-gm750-layla/</link>
		<comments>http://somemorebytes.com/wp/index.php/2010/07/hacking-a-lg-gm750-layla/#comments</comments>
		<pubDate>Wed, 14 Jul 2010 02:15:11 +0000</pubDate>
		<dc:creator>somemorebytes</dc:creator>
				<category><![CDATA[Hack]]></category>
		<category><![CDATA[Gm750]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[layla]]></category>
		<category><![CDATA[LG]]></category>
		<category><![CDATA[modify]]></category>
		<category><![CDATA[S-Class]]></category>
		<category><![CDATA[Vodafone]]></category>

		<guid isPermaLink="false">http://somemorebytes.com/wp/?p=567</guid>
		<description><![CDATA[My iPhone recently died due to a sudden deceleration against the floor. Needing another phone while I decide which will be my next acquisition, I borrowed from my girlfriend a LG GM750 phone that she had lying around. This is a Windows Mobile 6.5 terminal and comes with the (sometimes annoying) S-Class interface from LG. It is [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_570" class="wp-caption alignleft" style="width: 310px"><a href="http://somemorebytes.com/wp/wp-content/uploads/2010/07/GM750.jpg" rel="lightbox[567]"><img class="size-medium wp-image-570" title="GM750" src="http://somemorebytes.com/wp/wp-content/uploads/2010/07/GM750-300x274.jpg" alt="GM750" width="300" height="274" /></a><p class="wp-caption-text">GM750</p></div>
<p>My iPhone recently died due to a sudden deceleration against the floor.</p>
<p>Needing another phone while I decide which will be my next acquisition, I borrowed from my girlfriend a LG GM750 phone that she had lying around. This is a Windows Mobile 6.5 terminal and comes with the (sometimes annoying) S-Class interface from LG. It is not a super modern, super advance terminal, but it has the features I need: 3G which means web and mail, GPS and a nice battery. Add to this a couple of useful apps, and a GPS offline navigator and now you&#8217;re talking.And the best part, it was free!!.</p>
<p>Unfortunately there are not stable alternative roms for this model yet, so I had to change manually a couple of things that were making me unconfortable.</p>
<p><span id="more-567"></span></p>
<p>The idea behind the S-Class is nice: Use your finger (even with resistive screens) instead of the stylus (for which windows mobile is designed). The implementation however, is not so good. It refuses to blend seamlessly with the rest of the windows mobile OS. Click on the wrong option, and you will find yourself in the true Windows Mobile screen where either you have pen-point sized nails, or you will need to take the stylus out.</p>
<p>So after play with the S-Class interface a little bit, my first attempt was to completely disable the S-Class layer, and rely on the Windows Mobile interface, even if that meant use the stylus everywhere. However that&#8217;s not easy, as some events, notifications, and applications  are handled by default by the S-Class layer, and there&#8217;s no setting to get rid of it.</p>
<h2>Eliminate the S-Class almost completely.</h2>
<p>Here are the necessary steps :</p>
<ol>
<li>Of course, Go to Start-&gt;Config-&gt;Personal-&gt;Boot Screen and disable LG-Smart Boot Screen. That one is pretty obvious.</li>
<li>Now you would like to disable the Message (SMS &amp; MMS) and email notification system, which by default triggers the LG S-Class one. To do so first go to Start-&gt;LG S-Class-&gt;Messaging-&gt;Settings-&gt;Notifications and here select for &#8220;New Text Message&#8221; and &#8220;New MMS Message&#8221; MS Notification instead LG Notification.</li>
<li>No you&#8217;ll realize that when a message arrives the S-Class interface is not fired up, but it starts when you&#8217;re composing a message. To disable the S-Class message composer, you&#8217;ll need a registry editor. You can try <a href="http://www.freewareppc.com/utilities/phmregistryeditor.shtml" target="_blank">PHM registry Editor</a>, <a href="http://alex-software.com/downloads.html" target="_blank">Alex&#8217;s Software Simple Regedit </a>or any other. DO A REGISTRY BACKUP BEFORE!!!</br><br />
Navigate to:</br><code>HKCU\Software\Microsoft\Inbox\MsgTypes\IPM</code>And change the following keys:</p>
<p><code>Change SMStext\Dll  from LGEUMS.dll to htmlnote.dll</code><br />
<code>Change LGESMS\Dll  from LGEUMS.dll to htmlnote.dll</code><br />
<code>Change SI\Dll  from LGEUMS.dll to htmlnote.dll</code><br />
<code>Change MMS\Dll  from LGEUMS.dll to htmlnote.dll</code></li>
<li>Now delete the following key so the notifier itself isn&#8217;t launched as a service:<code>HKLM\Software\LGE\Apps\InitApp\Launch\Launch01  (It will contain the value LGNoti.exe)</code></li>
<li>Disable the LG Skin changing the key value from 1 to 0<code>HKLM\Security\Phone\Skin\Enabled</code></li>
</ol>
<p>Now of course disabling completely the S-Class has its drawbacks. You loose the widgets, you loose the horizontal keyboard autorotation in the SMS and email composer, the cute alarm that the S-Class has, and well, you will end up wanting to kill someone with the damn stylus.</p>
<p>To solve the auto rotation feature, which I think is the only real loss, you can install <a href="http://ae.inc.ru/aebplus.php" target="_blank">AE Button Plus</a>. This small application will allow you to assign a button double click to the rotate function, so you can see *almost* any application in landscape mode. Simple, neat, fast.</p>
<p>At this point I decided, that maybe I could just ignore the things I didn&#8217;t like about the S-Class, and cope with it. However, what I could&#8217;t stand was the crap that vodafone (this terminal was vodafone exclusive where my girlfriend bought it) installs in the phone. Having unlocked the phone, it triggered errors about non-existent websites being accessed, non available applications and other sort of misbehaviour.</p>
<p>You can eliminate the Vodafone things even if you decide to have disabled the S-Class. It is not so annoying with the default windows mobile interface though (you do not have the Vodafone shortcuts in the main screen).</p>
<h2>Getting rid of Vodafone Stuff</h2>
<p>First thing you want to do is to install <a href="http://www.ghisler.com/download.htm" target="_blank">Total Commander</a> for Windows Mobile. This will allow us to overwrite some files that otherwise would be impossible either from the pocket explorer or ActiveSync.</p>
<p>Let&#8217;s start:</p>
<ol>
<li>With the pocket explorer (or the Total Commander) navigate to My Device\Windows\Start Menu\Programs and delete the folder Services. This folder is absolutely useless if you&#8217;re not of vodafone.</li>
<li>Now the other annoying thing about Vodafone is the &#8220;My Web&#8221; icon that will start Internet Explorer with the default vodafone site, and can&#8217;t be changed anywhere. So the best solution is get rid of the icons and every shortcut to it.With Total Commander, navigate to My Device\Windows and delete the Vodafone_Live application.</li>
<li>Here&#8217;s a tricky part: S-Class comes with 2 main screens. The Idle, and the HelloUI. The Idle is the S-Class Cube itself and it has a launcher on the Today screen. The HelloUI is the 4 rows icon menu that appears when you touch the menu icon in the above mentioned launcher.To get rid of the vodafone icons in the TopMenu (communications in the HelloUI) you need to navigate to  the following registry key:<code>HKCU\Software\LGE\TopMenu</code>Here you can edit which icons will appear in each menu. Each number represents an icon. The order represents the order that you have in you mobile phone. The vodafone ones are the m151 and the m153. If you delete them, they will not appear in the communications row. I couldn&#8217;t find where are those images to avoid test and try in further customizations but they should be anywhere of course.</li>
<li>The only thing that remains is the main screen (today) launcher icons. Here you have several options. At first, I just created the Services folder where I deleted it in the first step, and put some shortcuts to some useful applications. This way You have everything at hand&#8230; with the vodafone icon though.If you want to remove it, you have to get your hands dirty. Every S-Class screen is a *.swf file. The file corresponding to the launcher My Device\Windows\launcher.swf.I decompiled it using <a href="http://www.sothink.com/product/swfquicker/" target="_blank">Sothink SWF Quicker</a> and took a look to the action script code on it. You&#8217;ll find the following line:<code>var arIcon = [id_contacts, id_message, id_vodafoneSuite, id_myweb, id_topmenu, id_dialer, id_email, id_calendar, id_alarm, id_music];</code>As you can see this is the array that organizes the launcher icons. You just need to remove from there <strong>id_vodafoneSuite </strong>and <strong>id_myweb </strong>and you&#8217;re good to go. I reordered as well my icons to a more logical position. Once you have finished, you just need to republish the swf file. Adjust the jpg quality to 100  to make it look the same as the original.Take into account that the Sothink SWF decompiler is not free. It adds a watermark to the resulting published swf that will appear on the phone later. <a href="http://somemorebytes.com/wp/wp-content/uploads/2010/07/Modified_launcher.swf" target="_blank">Here</a> you can download my version, so you won&#8217;t need to decompile and modify it yourself. Jusr rename it to <strong>launcher.swf</strong> and copy it to your SD card, and then to your My Device\Windows directory using Total Commander.
<p>To take a look at the code, maybe the<a href="http://www.flash-decompiler.com/" target="_blank"> Trillix Flash Decompiler</a> is more user friendly, but I couldn&#8217;t recompile the swf with it, so I used it only to read code.</p>
<p>Remember to copy the  launcher.swf file again to the My Device\Windows directory with the Total Commander. <strong>Explorer or active Sync wouldn&#8217;t let you overwrite this file</strong>.</li>
<li>Last but not least, you can get rid of your operator&#8217;s picture when you turn on and off your phone. The shutdown animation would be this one:<code>HKLM\System\Startup\1\StartUpAni.dll</code>Removing this entry will suffice.The Log-in picture is referred by this registry entry:<code>HKEY_LOCAL_MACHINE\Software\Microsoft\Splash Screen\MSBitmap</code>By default it points to the picture <strong>\Windows\StartUpImg_DMDO_000.bmp</strong>. You can either remove the registry entry or change the picture itself.</li>
<li>If you plan to use the GPRS connection as a USB modem, you should change the default APN for the DUN connecion. Of course, I assume you would have changed by now the normal connection settings to fit your operator. The default DUN APN can be found here:<br />
<code>HKLM\Software\LGE\Data\APNforDUN</code><br />
Just change this value to fit your operator&#8217;s APN and you should be ready to go.</li>
</ol>
<p>And that&#8217;s it. The S-Class interface can be modded much more. Flash design is not among my skills, but I bet that I designer would take all the *.swf files in the Windows directory and would be able to modify a bunch of things without needing to recompile a custom ROM.</p>
<p>Every information I&#8217;ve found about cracking the S-Class speaks about extracting the firmware, and then cook a custom ROM with the S-Class modified. I guess there must be a reason why nobody is just modifying (maybe I didn&#8217;t find it) the *.swf files and making a installer, but hey, it worked for what I needed. And at the end, it is seems to me as the safest option, as if you break something, you just hard reset and everything would revert to a safe state.</p>
<p><strong>Proof of concept</strong>: In my opinion, the third and fifth (and probably the fourth) screens of the S-Class interface present an absolutely lack of usability. It would be great that anyone with more actionscript knowledge would disable them in a more stylish way, changing the images of the white dots that mark the cube face index somehow. Here I have two tests. I just modify a couple of lines in the action script code in the file idle_manager.swf.</p>
<p>At the beggining of the action script frame, you&#8217;ll find:<br />
<code>var MAIN_STATE_NONE = -1;<br />
var MAIN_STATE_TODAY = 0;<br />
var MAIN_STATE_WIDGET = 1;<br />
var MAIN_STATE_MMIDLE = 2;<br />
var MAIN_STATE_HELLO = 3;<br />
var MAIN_STATE_SHORTCUT = 4;<br />
var TOTAL_CNT_IDLE = 5;</code></p>
<p>To enable only the two first screens, would be enough to modify the total screen counter (which later in the code is used with a module operator (%) to change from state to state)  this way:</p>
<p><code>var TOTAL_CNT_IDLE = 2;</code></p>
<p>Enable 3 screens selectively is easy just reordering the indexes of each state, and modifying the total counter. For example, if we want to enable only the first, second, and fourth screens (today, widgets, and favourite contacts) we could modify the code this way:</p>
<p><code>var MAIN_STATE_NONE = -1;<br />
var MAIN_STATE_TODAY = 0;<br />
var MAIN_STATE_WIDGET = 1;<br />
var MAIN_STATE_MMIDLE = 3;<br />
var MAIN_STATE_HELLO = 2;<br />
var MAIN_STATE_SHORTCUT = 4;<br />
var TOTAL_CNT_IDLE = 3;</code></p>
<p>The two modified files are <a href="http://somemorebytes.com/wp/wp-content/uploads/2010/07/idle_manager2Screens.swf" target="_blank">here</a> and <a href="http://somemorebytes.com/wp/wp-content/uploads/2010/07/idle_manager3screens.swf" target="_blank">here</a>. Just rename them to idle_manager.swf and copy it to your Sd card, and from there to the My Device\Windows directory using Total Comander.</p>
<p>Both files are  just tests. Maybe someone finds interesting to play with those files and make a more usable S-Class interface.</p>
<p>Some information extracted from <a href="http://www.clublgmobile.com" target="_blank">clublgmobile</a> and <a href="http://forum.xda-developers.com" target="_blank">xda-devs</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://somemorebytes.com/wp/index.php/2010/07/hacking-a-lg-gm750-layla/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Anatomy of a Null derreference in the Kernel (Linux)</title>
		<link>http://somemorebytes.com/wp/index.php/2010/04/anatomy-of-a-null-derreference-in-the-kernel-linux/</link>
		<comments>http://somemorebytes.com/wp/index.php/2010/04/anatomy-of-a-null-derreference-in-the-kernel-linux/#comments</comments>
		<pubDate>Sun, 18 Apr 2010 11:41:12 +0000</pubDate>
		<dc:creator>somemorebytes</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Software Dev]]></category>
		<category><![CDATA[derreference]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[null]]></category>
		<category><![CDATA[pointer]]></category>

		<guid isPermaLink="false">http://somemorebytes.com/wp/?p=515</guid>
		<description><![CDATA[Anatomy of a Null derreference in the Kernel (Linux)]]></description>
			<content:encoded><![CDATA[<p>This week KSplice published in his blog the second part of a interesting article, explaining the effect of a dangerus NULL derreference in the Linux Kernel. In the last year many of those holes were fixed in the kernel, so finding a true exploit wouldn&#8217;t be easy. It is still nice to understand how this kind of exploit works.</p>
<p>Here the <a href="http://blog.ksplice.com/2010/03/null-pointers-part-i/" target="_blank">first </a>and <a href="http://blog.ksplice.com/2010/04/exploiting-kernel-null-dereferences/" target="_blank">second </a>parts of the article.</p>
]]></content:encoded>
			<wfw:commentRss>http://somemorebytes.com/wp/index.php/2010/04/anatomy-of-a-null-derreference-in-the-kernel-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
<!-- This Quick Cache file was built for (  somemorebytes.com/wp/index.php/tag/hack/feed/ ) in 1.72648 seconds, on Feb 5th, 2012 at 4:20 pm UTC. -->
<!-- This Quick Cache file will automatically expire ( and be re-built automatically ) on Feb 5th, 2012 at 5:20 pm UTC -->
