Step-by-step: Bypass Java security

[Evostance]

This guide was written for the LG Vu. However the interface is the same as the Viewty so this will possibly work

FAQ:

Q: What does this do?
A: It allows you to bypass the notifications when running 3rd party applications. (For rogers, it allows you to install 3rd party applications)

Q: Do I have to re-install all the applications that came with the phone?
A: No, you only have to re-install the ones you installed

Q: Can doing this brick my phone?
A: As long as you are following the instructions carefully, then no

Q: Is this bypass reversible? If I follow the instructions in reverse, do I get the default applications back?
A: The bypass is reversible. This "myth" of lost application was due to another thread - in fact no application is lost. One does have to reinstall his/her own applications (which is trivial, since you did it once already)

Q: Is it possible to bypass java security for a single application?
A: No but if you look at the file pointed at the instructions, you'll find that its possible to select "categories" - for example one could only bypass security for internet usage only.

Q: Are there any side-effect from doing this hack?
A: Not really, just make sure you know what you are installing as doing this hack will allow ANY 3rd party applications to be installed (even some that may be harmful)


Requirements:

*EFS software [http://www.ku990.co.uk/lg-ku990-u990-viewty-downloads.php]
* LG Viewty Driver [http://www.ku990.co.uk/lg-ku990-u990...-downloads.php]
* USB cable (For those that do not have one, its been reported that the RocketFish USB Cable DOES NOT WORK and will ONLY charge your phone, also to be noted: make sure it says DATA cable)
* The correct .pol file for your network provider (they can be found at the bottom of this post)

Instructions:

1. Install software listed above
2. Hook up phone (you MUST be in data service mode)
3. Launch BitPim
4. BitPim should show "Other CDMA phone on COMx" (where x is the COM port being used)
5. Choose Edit, Settings
6. Change Phone Type to "LG-VX8700" (this is the CDMA version Shine)
7. Click OK to close
8. Choose View, View Filesystem
9. Click the Filesystem icon
10. Click the expand button beside "/"
11. It will say "Retrieving" for a minute or two
12. Expand to the following directory: /LGAPP/Media/Java/cert

For Rogers:

13. right-click on the "cert" folder and select "New File ..."
14. Select the "rogers.pol" file you downloaded, and overwrite the existing file
15. Disconnect and reboot the phone, you're all set to go!

For AT&T:

13. right-click on the "cert" folder and select "New File ..."
14. Select the "att.pol" file you downloaded, and overwrite the existing file
15. Disconnect and reboot the phone, you're all set to go!

A few more things you might be interested in:

* Proof that Rogers is evil - look at the cingular.pol file. It allows for application signed by any trusted source. The rogers.pol file only allows for apps signed by Rogers. This goes well beyond just wanting to protect the customer from bad applications!
* This edit makes the phone completely trust any java application, so make sure you know what you're installing before you install it!

rogers.pol
att.pol

This can be done with the viewty. just check out your own .pol file and then we have to try and copy what the rogers.pol file does

--------------

Toliver once posted

have posted this as it will solve alot of problems
make a backup of :
LGAPP/media/java/cert

now go to the backup(make another backup) and find the file *.pol file and open it with notepad.

find the line: Quote:
the domain: untrusted

and make it look like this
Code:
domain: untrusted
allow: low_level_network
allow: network_connections
allow: application_auto_invocation
allow: messaging
allow: local_connectivity
allow: multimedia_recording
allow: read_user_data_access
allow: write_user_data_access
allow: file_connection
allow: phone_call
save the file, upload it to the phone,

[color=#FF0000]then re-install moby explorer [color]

becarefull this now means that any third party app can access the file system... so be carefull of what u install

but it all works now

Seems like the same to me

[rezzsha]

hey , i tried using that method but still does not work on my aussie 3(three-hutchinson telecom) viewty n plus i have different options in my cert file den da 1 above, so any solutions
this is what my one has

alias: network_access
javax.microedition.io.Connector.http,
javax.microedition.io.Connector.https,
javax.microedition.io.Connector.datagram,
javax.microedition.io.Connector.datagramreceiver,
javax.microedition.io.Connector.socket,
javax.microedition.io.Connector.serversocket,
javax.microedition.io.Connector.ssl,
javax.microedition.io.Connector.obex.client.tcp,
javax.microedition.io.Connector.obex.server.tcp

alias: application_auto_invocation
javax.microedition.io.PushRegistry

alias: messaging
javax.microedition.io.Connector.sms,
javax.microedition.io.Connector.cbs,
javax.microedition.io.Connector.mms,
javax.wireless.messaging.sms.send,
javax.wireless.messaging.sms.receive,
javax.wireless.messaging.cbs.receive,
javax.wireless.messaging.mms.send,
javax.wireless.messaging.mms.receive

alias: local_connectivity
javax.microedition.io.Connector.comm,
javax.microedition.io.Connector.bluetooth.client,
javax.microedition.io.Connector.bluetooth.server,
javax.microedition.io.Connector.obex.client,
javax.microedition.io.Connector.obex.server

alias: multimedia_recording
javax.microedition.media.control.RecordControl,
javax.microedition.media.control.VideoControl.getS napshot

alias: read_user_data_access
javax.microedition.pim.ContactList.read,
javax.microedition.pim.EventList.read,
javax.microedition.pim.ToDoList.read

alias: write_user_data_access
javax.microedition.pim.ContactList.write,
javax.microedition.pim.EventList.write,
javax.microedition.pim.ToDoList.write

alias: file_connection
javax.microedition.io.Connector.file.read,
javax.microedition.io.Connector.file.write

alias: phone_call
javax.microedition.midlet.MIDlet.phoneCall

alias: h3g_info
com.h3g.info.Info

alias: launch_midlet
javax.microedition.midlet.MIDlet.launchMIDlet

domain: O=Hutchison Whampoa Group;CN=Authority6 - Operator Protection Domain
type: operator
allow: network_access
allow: application_auto_invocation
allow: messaging
allow: local_connectivity
allow: multimedia_recording
allow: read_user_data_access
allow: write_user_data_access
allow: file_connection
allow: phone_call
allow: h3g_info
allow: launch_midlet

domain: O=Hutchison Whampoa Group;CN=Authority5 - Identified Third Party Protection Domain
type: third-party
blanket(session): network_access
blanket(session): application_auto_invocation
blanket(session): messaging
blanket(session): local_connectivity
blanket(session): multimedia_recording
blanket(oneshot): phone_call
allow: h3g_info
blanket(oneshot): launch_midlet

domain: O=Hutchison Whampoa Group;CN=Developer6 - Operator Protection Domain
type: operator
allow: network_access
allow: application_auto_invocation
allow: messaging
allow: local_connectivity
allow: multimedia_recording
allow: read_user_data_access
allow: write_user_data_access
allow: file_connection
allow: phone_call
allow: h3g_info
allow: launch_midlet

domain: O=Hutchison Whampoa Group;CN=Developer5 - Identified Third Party Protection Domain
type: third-party
blanket(session): network_access
blanket(session): application_auto_invocation
blanket(session): messaging
blanket(session): local_connectivity
blanket(session): multimedia_recording
blanket(oneshot): phone_call
allow: h3g_info
blanket(oneshot): launch_midlet

domain: O=Hutchison Whampoa Group;OU=Developer2
type: operator
allow: network_access
allow: application_auto_invocation
allow: messaging
allow: local_connectivity
allow: multimedia_recording
allow: read_user_data_access
allow: write_user_data_access
allow: file_connection
allow: phone_call
allow: h3g_info
allow: launch_midlet

domain: O=Hutchison Whampoa Group;OU=Developer1
type: third-party
blanket(session): network_access
blanket(session): application_auto_invocation
blanket(session): messaging
blanket(session): local_connectivity
blanket(session): multimedia_recording
blanket(oneshot): phone_call
allow: h3g_info
blanket(oneshot): launch_midlet

domain: C=KR;O=LGE;CN=LGE JAVA
type: operator
allow: network_access
allow: application_auto_invocation
allow: messaging
allow: local_connectivity
allow: multimedia_recording
allow: read_user_data_access
allow: write_user_data_access
allow: file_connection
allow: phone_call
allow: h3g_info
allow: launch_midlet

domain: untrusted
session(oneshot): network_access
session(oneshot): application_auto_invocation
session(oneshot): messaging
session(oneshot): local_connectivity
session(oneshot): multimedia_recording
session(oneshot): phone_call
session(oneshot): launch_midlet