Home User CP Donate Chat Register Today!  
  Get New posts Faq / Help?
   


Go Back   Hackint0sh > Projects and Hacks > iPhone > General > General

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 11-16-2007, 04:42 PM
Former Bender's Avatar
Former Bender
Status: Offline
Guest
 
Join Date: Nov 1970
Posts: 3,501
Rep Power: 0
Former Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud of
Exclamation [Stocks] sends your IMEI (and more?) to Apple.

I was trying to change the Stocks market server access to work with non-US market when i found these url in the Stocks.app binary.

Quote:
http://m.yahoo.com/apple/finance?pin...ier=uscingular

http://iphone-wu.apple.com/dgw?imei=%@&apptype=finance

ProductVersion
deployver="Apple iPhone v%@"
app="YGoiPhoneClient"
appver="1.0.0.%@"
api="finance"
apiver="1.0.0"
acknotification="0000"
Apple iPhone v%@
Stocks v1.0.0.%@
WTF ?

Last edited by Former Bender; 11-16-2007 at 06:05 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #2 (permalink)  
Old 11-16-2007, 04:49 PM
eddy123
Status: Offline
Respected Member
 
Join Date: Aug 2007
Posts: 757
Rep Power: 0
eddy123 is on a distinguished road
Default

can you provide us a lovely screenshot and how you find this so that everyone knows?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #3 (permalink)  
Old 11-16-2007, 04:58 PM
Former Bender's Avatar
Former Bender
Status: Offline
Guest
 
Join Date: Nov 1970
Posts: 3,501
Rep Power: 0
Former Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud of
Default

Sure,

Inside the Stocks.app package, open Stocks with a Hexa Editor (e.g 0xED).

Now go to the offset 18BF8 and 1C30C.


Last edited by Former Bender; 11-16-2007 at 05:02 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #4 (permalink)  
Old 11-16-2007, 05:52 PM
Former Bender's Avatar
Former Bender
Status: Offline
Guest
 
Join Date: Nov 1970
Posts: 3,501
Rep Power: 0
Former Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud of
Default

The yahoo link is where safari opens when you click on the small Y! logo at the bottom left of Stocks.app

The Apple link is the one that retrieve the stocks data, and if you try to change the
Quote:
dgw?imei=%@&apptype=finance
it won't be able to retrieve anymore.

One more thing...

Quote:
dgw?imei=%@&apptype=finance
This let Apple knows which app you are using when connecting with your iPhone.
Obviously, they know the IP address you were using, the stocks companies you are interested to, and so they can track down their customers all around the world.

This also proves that there are probably other apps that do the same.

Weather.app is also acting the same way. (Offset 13AE0)

Last edited by Former Bender; 11-16-2007 at 06:06 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #5 (permalink)  
Old 11-18-2007, 03:34 PM
Former Bender's Avatar
Former Bender
Status: Offline
Guest
 
Join Date: Nov 1970
Posts: 3,501
Rep Power: 0
Former Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud ofFormer Bender has much to be proud of
Default

I've noticed a strange thing.

I tried with an iPod Touch with Socks.app or Weather.app and when it is connecting to apple, it sends an IMEI.

How come is it possible ?

Is it sending its serial number or whatever number... ?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #6 (permalink)  
Old 11-18-2007, 04:03 PM
kerimeton
Status: Offline
Member
 
Join Date: Oct 2007
Posts: 74
Rep Power: 6
kerimeton is on a distinguished road
Default

why does this matter??? whats the difference if they have the IMEI or not?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #7 (permalink)  
Old 11-18-2007, 04:05 PM
Locked's Avatar
Locked
Status: Offline
Respected Member
 
Join Date: Aug 2007
Location: 127.0.0.1
Posts: 900
Rep Power: 49
Locked is on a distinguished road
Default

XianLi, interesting find. I gotta take a look at this!

EDIT: I can confirm that the imei of the phone is sent to apple in BOTH weather/stocks apps.

Last edited by Locked; 11-18-2007 at 05:07 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #8 (permalink)  
Old 11-18-2007, 04:27 PM
thecompkid's Avatar
thecompkid
Status: Offline
J to the T. Shaken, not Stirred
 
Join Date: Jul 2007
Posts: 1,152
Rep Power: 71
thecompkid has a spectacular aura aboutthecompkid has a spectacular aura aboutthecompkid has a spectacular aura about
Send a message via AIM to thecompkid
Default

Whether this is true or not, I don't see the relevance. Sure, it may piss some people off that their data can be traced back to them, but there's nothing really confidential or important about stocks and weather data. Now, i'm assuming that all that is being sent is your IMEI, which is what appears to be true.

You know, this really brings to light the general attitude towards Apple. Everyone is so quick to sing their praises, but even the most devoted would not trust them for a second. It's sad that we live in a world where people need to be so concerned about such things, but that's reality for you.
__________________

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #9 (permalink)  
Old 11-18-2007, 07:10 PM
NotFound
Status: Offline
Respected Member
 
Join Date: Oct 2007
Posts: 803
Rep Power: 43
NotFound is on a distinguished road
Default

Apple is evil and monopolist.

1. They seal the batteries. You have to pay them $50 to $75 to replace the problematic batteries after warranty.
2. They use non-standard headset plugs. Technically, standard plug interface is enough in doing what iPods and iPhones should do with it.
3. They steal development ideas from 3rd party developers. For example, they stole widget from Konfabulator. It's just the tip of the iceberg.
4. They rob the open source community and barely contribute. For example, Apache, Virtual Desktop and so on.
5. They don't donate. While Bill Gates became the most generous donor on Earth many years ago, we barely heard Apple or its executives being on the news for the same reason.
6. Commercials, way too many commercials. If you notice, Steve Jobs and his team keeps advertising iTunes Store etc. They even put a iTunes Store icon on the SpringBoard. They charge for everything. All they talk about is money. Only money.
Too many to talk about. Just end here for now.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #10 (permalink)  
Old 11-18-2007, 07:14 PM
enderffx
Status: Offline
Senior Member
 
Join Date: Sep 2007
Location: Germany, Europe :)
Posts: 198
Rep Power: 13
enderffx is on a distinguished road
Default

Hi !

I dont like that !
Did you find any way to patch this behaviour ?

So we would all be sending the same generic imei ?!

Greetings,

Ender
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +2. The time now is 07:32 PM.



Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.3.2 Ad Management by RedTyger
follow us on Twitter!

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105