Coddec released

Finally we’ve decided to release coddec to public. Well, it is not actual coddec we use “in-house” but a very first working version of it.

Source and binary are provided. Please don’t ask for documentation or how to use it, I think it is very straightforward. There is a little bug which fires exemptions in some cod files – it is easy to fix it so we’ve left it there for you :)

Coddec

Enjoy

dr bolsen

But battery ?

I’ve been thinking about the place where cryptographic keys module could be located and accidentally find  this  information .

“The BlackBerry CS-2 Battery features a secure, cryptographic chip to ensure you’re using a battery specially designed to work with your BlackBerry device.“

I am curious what kind of chip is that ? Can it be used for secure keys generation and storage for example ?

Application Registry

Application registry is a core RIM Java OS structure . To play with it add the following string

Object __appReg = Process.getAppRegistry();

to BB java project. We used “Hello World!” sample project from JDE. Sure you need correct the import section of your project by adding import net.rim.vm.*;.
Using JDE IDE set a breakpoint on the next line and execute your code in standard IDE emulator. When program stops at the breakpoint, check __appReg :)

By the way the public key mentioned in this post was discovered using this approach.

8700c teardown analysis

All parts from Blackberry 8700c enumerated and documented here

What happened ?

Well to make a long story a little bit shorter – I am a dad again :). Basically that was the main reason for my silence since August last year.

Cheers

Call for a new name for cod decompiler

I have googled and suddenly found that coddec name is already used by a number of different projects so we definitely need to find a different name for our work. All suggestions are welcome.

More blackberry pickers …

Well, it was quite a surprise to find more people interested in Blackberry reversing. Good news. Additionally I have realised that my information is required more explanation, I mean that I should include more details in my posts as it gives better understanding of BB internals and it would provide more valuable starting points for other people not just me.

What’s in a name?

Well, I like the name, but maybe the sub-title could be a little more subtle. Something along the lines of “Security Discussion Blog”, or “Idea Generator”. I am curious, it’s true, but paranoid.

 Added later:

You know, I am happy to just to work on some stuff and then publish. This publish while we work idea is a little scary. I am so shy!

Napoleon’s plans

Hrrrrr, changed this post an uncountable number of times. Finally I am able to understand why a process of writing even a simple article may be a non-trivial task when you don’t have a clear idea what you actually want to write about.

So we need a plan. Something that is basic and simple. Probably just to put some order in our own heads.

My top two:

• vulnerabilities and hacks [I promise that it would be at least fresh :)]
• reverse engineering [my favorite, but please don’t expect something extraordinary – I am not a guru]

Hope Nicky’s fantasy is more creative than mine … 

This is going to be fun :)

Not another “Hello World!”

 

Mmmmm, just got this blog and obviously decided to play a bit around. What can I say? A typical “Hello World!” situation. Hopefully it won’t be another “whoo-whoo-forget-forever” initiative.

Let see what Nicky says …

Added later:

Well, it seems like she likes the idea. So an initial approval has been received and we are going on air! Bless us! Amen :)