Now, they did tell me one thing. The keys are embedded in the .NET binary in JLJ’s iPhone activation server. So I began working and this led to where I’m at now, a how-to. This post will not provide the tokens, nor will I provide them until JLJ says I can. This article will walk you through the process of obtaining them so you can activate your iPhone on a mac though, as suggested by the developers of the tool.zip we will be using.
As of now, you can just download the newly released iPhoneActivatorTool to activate your phone. This is a newer version of tool.zip that includes the plist file required.

Step 1:
Download the following files:

• JLJ’s PhoneActSrv - Mirror
• tool.zip - mirror
• My iPhone Decrypt App
• Lutz Roeder’s Reflector .NET disassembler

Step 2:
This step is where you’ll actually prepare the data you need to get. You will need windows with .NET framework 2.0+. JLJ’s PhoneActSrv’s binary has the keys stored within it, encrypted using AES. In order to get the keys, we need to disassemble the binary. To do this, you need to open up Reflector and go to File->Open then locate and open the PhoneActSrv.exe file.

Once it’s loaded, you will see the entry in the tree view. Right click on PhoneActSrv and click Export. Make sure you save this somewhere that you will remember, you will spend a lot of time looking at the disassembly. You also need access to it over the mac.

Step 3:
Now, open the directory you saved the disassembly files to. You should see the following files:

• a.cs
• b.cs
• AssemblyInfo.cs
• d.cs
• DotfuscatorAttribute.cs
• e.cs
• e.resources
• f.resources
• Global.cs
• PhoneActSrv.csproj

If you see these files, you did step 2 correct. If not, go back and do it again. This is where you may need some coding experience, as I can’t just hand these keys out. I provide you with enough hints that I feel you can find the keys. Unzip my iPhone Decrypt application and open up iphone_decrypt.c and read the comments. For each variable needed, I provide you with a hint on how to find it. All the values needed are located in the d.cs file.

Once you find them, plug the values into their appropriate arrays in iphone_decrypt.c. Once you have what you think are the values, open up a terminal, go to the directory iphone_decrypt.c is located in and run the following in console.

$ ./build.sh
$ chmod +x iphone_decrypt
$ ./iphone_decrypt

If all goes well, you should see something like the following on the terminal:

kalashnikov:~/Desktop/iPhone-RE/AES decrypt cody$ ./build.sh
kalashnikov:~/Desktop/iPhone-RE/AES decrypt cody$ ./iphone_decrypt
Welcome to the iPhone JLJ key decryptor. Find the data in his app and set the variables in the code to this one.
Setting AES key...done
---1076
Attempting to decrypt the key...done
Key is <?xml version="1.0" encoding="UTF-8" standalone="no"?>
<Document xmlns="http://www.apple.com/itms/" disableHistory="true" disableNavigation="true">
&nbsp;
<Protocol>
    <plist version="1.0">
        <dict>
	
          <key>iphone-activation</key>
          <dict>
            <key>unbrick</key>
            <true/>
            <key>activation-record</key>
            <dict>
              <key>AccountToken</key><data>*snip*</data>
              <key>AccountTokenSignature</key><data>*snip*/data>
            </dict>
          </dict>
	
        </dict>
    </plist>
</Protocol>
&nbsp;
</Document>??V?n9???lsQ?
Freeing up memory...done

If you do, move onto step 4, if not, keep trying.

Step 4:
Unzip tool.zip and open up the blank.plist file in something like textmate. It’s just an XML file. blank.plist contains the following:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>ActivationRecord</key>
	<dict>
		<key>AccountToken</key>
		<data>
		</data>
		<key>AccountTokenCertificate</key>
		<data>
		</data>
		<key>AccountTokenSignature</key>
		<data>
		</data>
		<key>DeviceCertificate</key>
		<data>
		</data>
		<key>FairPlayKeyData</key>
		<data>
		</data>
	</dict>
	<key>Request</key>
	<string>Activate</string>
	
</dict>
</plist>

Copy the AccountToken and AccountTokenCertificate lines and their data lines from the console output of iphone_decrypt. Paste them into the plist file so that it looks like the following:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>ActivationRecord</key>
	<dict>
		<key>AccountToken</key><data>*snip*</data>
	              <key>AccountTokenSignature</key><data>*snip*</data>
	</dict>
	<key>Request</key>
	<string>Activate</string>
	
</dict>
</plist>

Save this file as activate.plist in the same directory as blank.plist

Step 5:
Activate your iPhone by running the following command in the terminal after changing to the directory that blank.plist is located in.

$ ./tool --activate activate.plist

You should see the following output on the console:

kalashnikov:~/Desktop/tool Folder cody$ ./tool –activate test.plist
iPhoneActivatorTool 1.0
2007-07-04 15:10:43.887 tool[10443] Found iPhone Device: 1
2007-07-04 15:10:43.887 tool[10443] Connecting…
2007-07-04 15:10:43.892 tool[10443] Checking Pairing…
2007-07-04 15:10:43.905 tool[10443] Starting device session…
2007-07-04 15:10:43.990 tool[10443] ActivationState: Unactivated
2007-07-04 15:10:43.990 tool[10443] Deactivating your iPhone…
2007-07-04 15:10:44.002 tool[10443] New ActivationState: Unactivated
2007-07-04 15:10:44.003 tool[10443] Activating your iPhone…
2007-07-04 15:10:44.163 tool[10443] New ActivationState: MismatchedICCID
2007-07-04 15:10:44.163 tool[10443] Your iPhone was successfully activated.

You will probably see a popup about your iPhone having an incorrect SIM card. Just slide the unlock slider at the bottom to the right and you should be ready to go.

This caused a real issue for me. Function names are extremely different, along with how queries are performed, compared to my mysqli library. Sometime last month I tried to make a PEAR-style wrapper for my class, but for some reason it failed with the library. Well, last night I found the Wordpress OpenID plugin. Knowing that WP runs it’s own MySQL class, I downloaded it and studied the wrapper. This allowed me to see what I had been doing wrong and get a system working before school started today.

Once I had it working, I wrote a simple class I call EasyOpenID. This class allows me to minimize the amount of code in JanRain’s consumer example to very few lines of code. I’ve decided I was going to release this library, so I converted it to FileStore, which is the default the library ships with, and packed it up. I am going to release it here to hopefully get some feedback. If the feedback is good, I will probably continue to expand on the class.

I will have a page up for the library later on tomorrow, but for now, download the file located here. This zip file contains the converted consumer example and my class. The class is released under the new BSD license, while the rest of the code is GPL. Please, provide me with any of your thoughts on the library. Even if you don’t use it on a real, live site, please just let me know what you thought.

Talking with the folks in #OpenID also got me invited to be on the first official OpenID podcast recording, no idea if I’ll be involved, but I’m listening. You will be able to obtain the podcast on http://idcast.org/ sometime tomorrow night or on Thursday. I hope all goes well. Hopefully this new podcast will provide a great resource for developers looking to learn and expand on OpenID.

The first thing you need to do for this kickass setup is to make sure you have room on your harddrive. I downloaded the ‘everything’ package which was 1.96gb. (There are alternate packages though, listed below). To get these packages, you’ll need a bittorrent client, which I’m not going to go into how to use, then you’ll need to grab the torrent files. You can choose between the following torrent packages:

• Everything: #1 #2
• Qt: #1 #2
• kdesupport: #1 #2
• kdelibs: #1 #2
• kdepimlibs: #1 #2
• kdebase: #1 #2
• kdeedu: #1 #2
• kdegames: #1 #2
• kdenetwork: #1 #2
• kdepim: #1 #2
• koffice: #1 #2

Note: All links labeled #1 are from the official mirror which is linked to at the bottom of this post. All links labeled #2 are my own personal mirror. Also, these files are only for OSX 10.4

Also, as quoted from the official page:

You must install at least Qt, kdesupport, and kdelibs for any of these packages to work. Also, kdepimlibs and kdebase are recommended since a number of things will want them. (…and it has Konqueror)

Once you have downloaded these packages, installation is a breeze. It’s just like installing any other OSX application. Double click on the dpkg, then click on one of the mpkg files provided inside the Finder window.

From here, just continue installing the files until you have everything you want. They will be stored in /opt/kde4. (It’s a Fink distribution). According to the official snapshot page, you need to launch these applications from a terminal window. Now, I did not need to do this, but I do not doubt the knowledge of the developers. (My shell setup is *way* modified compared to the default OSX release.) So to take care of these few issues, you need to run the following in a terminal window:

export PATH=”/opt/kde4/bin:/opt/kde4-deps/bin:/opt/qt4/bin:$PATH”
eval `dbus-launch –auto-syntax`

As I said, according to the main page for these files, it says to try to launch them from the terminal. If launching them by double click does nothing, here is how you can start them:

/opt/kde4/bin/kwrite.app/Contents/MacOS/kwrite

These directions are based off the official ones which can be found here. I would just like to take this time to thank the KDE developers for what they are doing. They are really taking a stand to improve the desktop interface overall. This project really shows the strength open source can have if harnessed properly.

Note: I’m still a gnome guy.

Here are a few screenshots for you:
Kwrite:

Konqueror:

The Kenwood Apple Store was true to their word, they called me the day they came in. I ended up getting to the store around 6:30-7pm and it was packed. These things must be selling like hotcakes because I know they sold 3 of them while we were waiting on the cashier to see if they had any 2gb ram sticks in stock — which they didn’t. So I’m still 1gb of ram short until my reserved stick comes in. They do have a nice deal going right now though. You can get an HP Photosmart C3180 printer for free with your MacBook if you are buying it on a college discount. You have to pay upfront, but you get a rebate for the full price of the printer, similar to how they were running the iPod deals.

So far my experience of moving from Linux to OSX has been pretty grand, as I hinted at above. The built in wireless coupled with my new WRT45G, that I hadn’t tested the wireless on, seem to be working much better than my old setup. It’s so nice having wireless again, no cat5 cable to get tangled up in my mouse. Application-wise, I have already found a replacement for everything I used on Linux. I knew all of these before I even owned a Mac though, since I talk to/code with a few people that own a mac.

Heck, in the three days I’ve had this thing, I’ve already spent $50 in software. I bought textmate since it appears to be the best coding text editor on the planet for the mac and web 2.0 crew. I’m definitely liking it so far, but I’m on the hunt for PHP plugins now. They are a bit saturated with Ruby plugins. ;) I still need to get a legal copy of Photoshop CS2 for this box though. If only it was cheaper…

I’ve also had the joy of being able to run a lot of my favorite Linux applications on this thing. Fink is quite a nice system. I already have X11 running at startup, without that stupid xterm. I’ve modified my shell settings so everything I need to start X apps from Terminal.app is there and ready to go. I suggest all of you go out and install Xdroplets. Combined with this custom X11 setup and Xdroplets, I have a pretty standard application interface for running my old applications, such as XMMS or Konqueror for testing.

To give you some idea of how fast this laptop is, I have two benchmarks for you. While I was writing this post, I started a compile of Apache 2.0.59 to start setting up my development environment for ThreadBound. Here are the command that I ran:

$ ./configure
$ export MAKEOPTS=”-j6″
$ time make

What are the results? Astounding, considering this is a 10-20 minute compile on my old Athlon64 3200+ laptop…

real 1m37.240s
user 0m53.671s
sys 0m37.242s

The other benchmark is from when I installed Windows XP on my friend’s MacBook Pro, which is identical to the one I bought. After installing Counter-Strike: Source, we ran the video stress test. These machines averaged 114 FPS on it. This test set all of the settings on high, so we tried it. We were getting about 60-90 FPS at 1680×1050 during games. This just goes to show you the performance of this machine. Considering that people don’t know that the x1600 graphics cards they ship with are underclocked by around 45% below what ATI ships them as, due to heat. So I’m going to have to overclock them a bit and see how it does.

Here is a nice picture of my MacBook Pro:

Macbook Pro Core 2 Duo Opening Hosted on Zooomr

More pictures of it can be found here.

From what I’ve seen, there are two types of these accounts. You have the fake accounts with modified layouts which disguise the number of friends, and you have the accounts that have been stolen. The ones I have been receiving come from the first time. So, let’s begin.

The first thing you need to do is make an account. I suggest creating a fake email account just for this purpose, but that’s up to you. Once you have your account created, you’ll need to log in and find a teenage girl styled theme. These usually consist of clashing colors with pink, green, blue, and maybe even yellow. The main point here is to think like a designer with an iq lower than one hundred.

This next step is an all important step. You need to get your image. Usually, these consist of fake pictures of high schoolers, high school girls, guys playing football, models, etc. The goal here is to stand out.

Now, we come to the hook. Set the profile to private so people have to be your friend to see your profile. (This is why you want an attention getting picture) Okay, so people will be your friend, now what? Hide the real number of friends. This is an amazing strategy that would fool most people without the firefox web developer toolbar. (I immediately disable embedded css on myspace pages, which is how I found this out) All you have to do is fill out your “about me” fields with fake, but interesting information, then in the “I’d like to meet” section, paste the code located at http://codymays.net/files/myspacecode.txt (Note: this is not my code. I ripped it from a spammer’s account, so change the images and stuff) and save your profile.

Amazing isn’t it? In this small amount of time, you have a spam system ready to go. All you have to do now is google for some myspace pages, start adding friends and sending messages saying that people should add you as a friend since myspace gives you errors when you try.

In all seriousness though, this is the exact reason the myspace revolution is going to have to come to an end. It is a whole new system for spammers to hit a target audience with, and it works quite well. Ask the developers of myspace. They are probably floating on a yacht somewhere. My intentions in writing this article is that people will stop falling for such stupid setups… I can wish can’t I?

Example profiles made by real spammers here and here

Currently, the only thing you have to do to get NetBSD 3.0 Release to compile is edit the list file that has two entries for pte.h, one marking it obsolete and one marking it not. Remove the line marking it non-obsolete and compile as the handbook says with build.sh.

The good news to come from this is that one of the developers instructed to get the port updated was there. He doesn’t have a bebox, so he didn’t want to do it blindly. He asked me to assist him with getting it up-to-date. So not only was yesterday the first day that NetBSD 3.0 has run on the bebox, as far as I know, but it also marks my slow journey back into an open source project. (I’m not going to get near as involved this time.)

Here are some pics to drool over, click for larger versions:

NetBSD 3.0 on bebox Hosted on Zooomr

NetBSD 3.0 on bebox Hosted on Zooomr

So we’ve all seen the disasters of pages created by millions of teenagers (like myself :/ ), that are impossible to read or even look at without giving yourself a seizure. To top all of that off, they have annoying flash ads that even talk without a mute button. So, today I set out to get rid of them and create my own, special, page.

First off, here is a screenshot for you to drool over:

moo Hosted on Zooomr

So to start, the first thing I did was see if I could escape the tables. Once I did this, I knew I could get rid of the ads and every other piece of junk I could. So in the About Me section, I had the following:

</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</table>

This allowed me to get out of the table-hell layout that is myspace.com, but I had to do one thing to make it not display the rest of the page. I had to reopen the tables. Code is below:

<table>
<tbody>
<tr><td>

Knowing this, I just added the CSS/HTML and images that can be found in the zip below to the About Me section.

Click here to download the zip file.
Click here to see the myspace live.

I hope that helps some of you.

NOTE: This *WILL* violate your agreement to the Myspace.com Terms of Service. Until they allow the iframe, we have no way to show their ads.

I emailed him and offered $50 for the one domain name, which he just renewed and pointed out that he would still be making a profit on it. ($8 * 4 = $32). He then comes back with a personal attack on my “IQ” level. I’ll let the following emails speak for themselves:

To: ravi4321@aol.com
Are you interested in selling this domain name? I know it is going on it’s 4th
year for sale. What are you asking for it?

His reply:

From: ravi4321@aol.com
HI CODY

I BUY AND SELL DOMAINS GLOBALLY…AND I HAVE MORE THAN 9200 DOMAINS..
MOST OF MY DOMAINS ARE ON AUTO RENEW.

I HAVE…THE FOLLOWING DOMAINS..

*THEERECTILEDYSFUNCTION.COM*
*THEED.COM*

I CAN MAKE A SACRIFICE IF THE PRICE IS RIGHT.

I SHALL SETTLE FOR *$900*

THANKS.

RAVI

THE*ED * ALSO CAN BE USED FOR EDUCATION.

My response:

To: ravi4321@aol.com
I really only want theed.com, but I’m not paying $900 for it knowing what you just payed last week for it.
The most I would be willing to pay is $50. Would you be willing to sell it for that? It is still almost $30 profit.

His reply:

From: ravi4321@aol.com
HOW MUCH DID U PAY FOR

CODYMAYS.NET

AND WHAT IS YOUR
ASKING PRICE

RAVI4321@AOL.COM

My response:

To: ravi4321@aol.com
It is not for sale.
Do you or do you not agree to the price I offered in the last email?

His reply:

From: ravi4321@aol.com
WHILE
THEED.COM
IS NOT FOR SALE FOR $50…
WWW.CODYMAYS.COM
IS FOR SALE …

RAVI4321@AOL.COM

My response:

To: ravi4321@aol.com
Sir, I hate to break it to you, but it’s definitely not for sale. There is no way I am paying
$900 for one domain name that was purchased for about $8. Right now, you are the only
one at a loss here. I have nothing to lose, but you do because you have renewed the domain
for four years now.

If you accept the $50 payment for it, you will come out ahead, but if you don’t, you’ll stay in the
hole. No one else, obviously, wants this domain name because this is your 4th year of attempting
to sell it.

His response and the beginning personal attack. Notice the above email has no attack on him.

From: ravi4321@aol.com
HI

I BUY AND SELL DOMAINS GLOBALLY.
I DO NOT WANT TO WASTE MY TIME TRYING
TO GAUGE YOUR “IQ”. I LEAVE IT AT THAT.

RAVI

My final email before this post:

To: ravi4321@aol.com
Okay, you’re going to gauge my IQ as lower than your own because I pointed out basic
business logic to you?

Well if we’re judging IQ here, you better get reading a grammar book, because you are
flunking English 101 right now. You see the key marked Caps Lock? Press it so the light
turns off. That will get you started. Hope you have fun in the coming days.

Now, I become another person to ask the international blogosphere for some help here. I know the blogosphere has been pretty powerful with Comcast and AOL over the past few weeks, so I figured I would try it as a last resort. As of right now, my partners and I are very set on this name and really want the domain. Is there anyway we could still go about getting it? Any help would be appreciated.

Note:
We do not want to harm Mr. Ravi. All email addresses provided here are for reference only. Do not attempt to spam him by email or phone number from a whois lookup of theed.com

By pressing Alt + SysReq + any of the keys below, you can perform any of the functions listed:

• r - Turns off keyboard raw mode and sets it to XLATE.cc
• k - Secure Access Key (SAK) Kills all programs on the current virtual console
• b - Will immediately reboot the system without syncing or unmounting your disks
• c - Will perform a kexec reboot in order to take a crashdump.
• o - Will shut your system off (if configured and supported)
• s - Will attempt to sync all mounted filesystems
• u - Will attempt to remount all mounted filesystems read-only
• p - Will dump the current registers and flags to your console
• t - Will dump a list of current tasks and their information to your console
• m - Will dump current memory info to your console
• v - Dumps Voyager SMP processor info to your console
• 0-9 - Sets the console log level, controlling which kernel messages will be printed to your console. (’0′, for example would make it so that only emergency messages like PANICs or OOPSes would make it to your console.)
• f - Will call oom_kill to kill a memory hog process
• e - Send a SIGTERM to all processes, except for init
• i - Send a SIGKILL to all processes, except for init
• l - Send a SIGKILL to all processes, INCLUDING init (Your system will be non-functional after this.)
• h - Will display help ( actually any other key than those listed above will display help. but ‘h’ is easy to remember :-)

There are more suggestions in the official Linux kernel Documentation directory (that’s where this came from). See /usr/src/linux/Documentation/sysrq.txt for more information on this handy kernel feature.

APC is very nice. The API is definitely the simplest out of all of the PHP memory caches I have looked at, but it lacks the ability to be distributed across different servers like memcached. I have run into some problems though. According to the documentation for APC, apc_load_constants() should return true on success and false on failure, but from everything I have tried tonight, that has not been the case. It has always been false, even when the constants loaded are working, which signifies to me that it actually worked.

I have also moved my new sites management system from Bugzilla to Basecamp. Basecamp is one of the many very idollized Web 2.0 sites from 37signals. The software is just amazing. The use of AJAX is very nice, it’s always were you want it and never where you don’t. Plus, the actual tools the software provides is great, even at the free level. You get very dynamic to-do lists, milestones (work kind of like deadlines), user management, asset stuff, and a whole slew of things I haven’t even played with yet.

My server rack page has also gotten some official recognition in my book. The man behind http://rack.modzone.dk found my project page today and linked to me from his site. Thanks, I really appreciate it!

If anyone has been wondering how to design a website efficiently, I would check out this article. That is pretty much the method I use, except I suck at coming up with such a pretty layout, but I’m definitely getting better with photoshop.