I lost over $5000 betting on Urovo products for my new business venture. 4 days before I needed to perform, the WIFI on the UROVO i9000 just stopped working. The only fix was to update the OS which then requires all code to be signed by Urovo. You can not even install a service pack for the .NET framework unless it comes from Urovo which they will not provide.
Bottom line, Urovo is inept. They are incompetent. And they are fools.
The whole reason they refuse to provide the Developer updates is because of their idiotic security model. HOWEVER, they provide the NK.bin files for the Encoded OS. So all you need to do is extract the files from the update they provide and remove all the code signing requirements from the base Windows CE image. Because to make the product work all you need is the device specific drivers.
Using this approach you could then HACK all UROVO devices and steal millions in credit cards numbers and pin codes. All you would have to do is push a new OS image and reload the proprietary software back on with some API hooks to monitor the inputs.
No comments:
Post a Comment