hi

ok.. hackers (or other idiot) at it once again, they posted |HaCkMe|
to eurocool idiots used my email address, so, it was easy for me to get
the password to remove it.. so, thats done..

they have also posted it on a public group.. so, lets stop messing
around with this - if your peeved off.. add the following code
to your apps and you can detect if this sucker is installed. i dont
know of any other hack that patches the same trap call.. but, if they
do, they are probably doing something similar *g*

anti-HaCkMe code
---
Boolean
ApplicationDetectHaCkMe()
{
  Boolean result;
  UInt8   *dlkGetSyncInfoAddr;

  // NOTE: rom stuff is normally stored > 0x1000000 in memory, so testing
  //       this bit will determine if the pointer is in rom/ram - this may
  //       only work for the existing m68k units, it may not work on future
  //       units - be prepared for this

  // lets see if the patch is in rom or ram: ram = HaCkMe installed
  dlkGetSyncInfoAddr = SysGetTrapAddress(sysTrapDlkGetSyncInfo);
  result = (UInt32)dlkGetSyncInfoAddr < 0x1000000;

  // PS: MemLocalIDKind didn't seem to work - thats why the 0x1000000 :P

  return result;
}
---

if you detect looking for the creator id or name of the application,
they can easialy get around it by changing these values (easy task)
so, the above code will detect if the system patch has been touched.

not much i can do about them posting the software to other sites, but
i'm contacting the websites as they appear (grrr) - if you do see it
somewhere, dont hesitate to email the webmaster to get it removed.

the above code is to be used at your own risk.. i will take no
responsibility for problems you may encounter on future devices.
i suggest you detect the os version - at least to say before 5.0.
there will be no easy way to patch traps in the best of my knowledge
for units from 5.0 onwards - that may be a good guide in my books
(and, it pointer value may change with newer units)

// az "annoyed..."
[EMAIL PROTECTED]
http://www.ardiri.com/


-- 
For information on using the Palm Developer Forums, or to unsubscribe, please see 
http://www.palmos.com/dev/tech/support/forums/

Reply via email to