magicJack and MagicJack Plus Support, Reviews, FAQs and Hacks Forum Index magicJack and MagicJack Plus Support, Reviews, FAQs and Hacks
magicJack and magicJack Plus Unofficial Technical Support. Your Magic Jack and Magic Jack Plus phone service information resource
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
Stroths MJ Utilities 1.6 -SIP Info & More *8/2 UPDATE*
Goto page Previous  1, 2, 3, 4 ... 34, 35, 36  Next
 
Post new topic   Reply to topic    magicJack and MagicJack Plus Support, Reviews, FAQs and Hacks Forum Index -> magicJack Tips, Tricks, and Hacks
View previous topic :: View next topic  
Author Message
stroths
Dan isn't smart enough to hire me


Joined: 02 Apr 2008
Posts: 470
Location: Dallas, TX

PostPosted: Tue Jan 06, 2009 11:28 pm    Post subject: Reply with quote

synchron wrote:
Excellent job, Stroths!

No bluescreens for me and I'm running 1.41 Only thing that doesn't work for me is running it as a service. I normally use Firedaemon and the service name is called 'FireDaemon Service: MagicJack' but it doesn't seem to take (assuming you use Start Program/Stop program buttons when in service mode. I changed the string name in the config. No biggie....

Synchron Cool


The app is just issuing the dos command "net stop yourservicename" or "net start yourservicename". I haven't dealt with firedaemon in quite a while, so I am not sure how it does things. Are you able to issue the commands above from a command prompt to start/stop the firedaemon service?

Also, do the other apps in the suite kill the service when they are running?
_________________
Use a Thin Client w/MJ
My MJ Utilities Suite - SIP Grabber, Upgrader and More
Flash Memory Lifesaving Tips
Back to top
View user's profile Send private message
Google
AdSense





PostPosted: Tue Jan 06, 2009 11:28 pm    Post subject: Magicjack support, tips, tricks, and hacks


Back to top
synchron
Dan isn't smart enough to hire me


Joined: 15 May 2008
Posts: 229

PostPosted: Wed Jan 07, 2009 12:10 am    Post subject: Reply with quote



OK, I was using the Display name that you see in the Windows services.msc. With Firedaemon, the service name is still 'MagicJack' so that worked in your suite. Bear in mind there's a good 6 or so second delay. I'm not sure if it's Firedaemon or any windows net service. At any rate, might be worthwhile to pick up the response to the net command (service started successfully, service stopped successfully and msgbox that to show any delays in the servicing process).

Once again, great job!

Synchron Cool
Back to top
View user's profile Send private message
Predator04
MagicJack Newbie


Joined: 23 Dec 2008
Posts: 7

PostPosted: Wed Jan 07, 2009 1:42 am    Post subject: Re: v1.5 Updated Reply with quote

Becky wrote:
stroths wrote:
If you are running any version 1.2 or above, you need to do a full upgrade. Completely remove the MagicJack_Utilities directory and start fresh to ensure no remnants are left over. I would rather be safe than sorry because I would hate for my code to cause any bluescreens. I think it might only be on certain systems under certain conditions since others haven't reported anything, but do a full upgrade just to be safe.

Changelog

1.5
- Added "Optional" section in config for future options
- Added MJUpgradeURL to Optional config section. Allows you to put in a different URL if you want to download a different upgrade.exe file
- Fixed a possible bug causing a bluescreen on one of my test environments. Might have just been my system, but upgrade just to be safe.


The optional upgrade URL does work, but MJ has put some workaround that causes the software to immediately upgrade to the new version upon first run. Previously, you could block the upgrade with a modification to the hosts file. The host we were blocking previously doesn't seem to have an effect now. If someone can figure out the host to block then we will be in business.

um.I post a picture of the virus

then u delete the file right after.claim there was a problem with blue screen?

u got caught spreading malware.admin should remove this user before he infects more people.

try using a antivirus that doesnt suck...

you might want to use a real av and check your system... here the info on that file..

http://www.virustotal.com/analisis/de5d3d1fbccd5695e8c149a72595ac9e
Back to top
View user's profile Send private message
Adolf
MagicJack Newbie


Joined: 04 Jan 2009
Posts: 7

PostPosted: Wed Jan 07, 2009 6:38 am    Post subject: Reply with quote

Becky wrote:
i get this error trying to run your program.can someone help me make this work?thank you.



I smell a rat here from Ymax.

I am running McAfeee and I never got this, the file is clean and it works good.
So Lady or who ever you are tell Dan That is nothing you can do to stop this program.

ISAD


Last edited by Adolf on Wed Jan 07, 2009 8:07 am; edited 1 time in total
Back to top
View user's profile Send private message Send e-mail
neo2121
Dan isn't smart enough to hire me


Joined: 09 Jan 2008
Posts: 279

PostPosted: Wed Jan 07, 2009 7:46 am    Post subject: Reply with quote

Well I guess that there always has to be someone that make stupid claims about programs that where written to benefit them. Thanks for your hard work on this, its going to save a lot of people sometime. Some people don't know how to appreciate a good thing or favors, and most likely don't even understand what to do with their info in the first place. its just ignorance its like the people that send me e-mails about cain & able giving then a false positive.
Back to top
View user's profile Send private message Visit poster's website AIM Address
stroths
Dan isn't smart enough to hire me


Joined: 02 Apr 2008
Posts: 470
Location: Dallas, TX

PostPosted: Wed Jan 07, 2009 8:11 am    Post subject: Reply with quote

Thanks for the support and I appreciate it. There are a lot of great people around here and I do my work for you all.

Regarding the virus accusation, Becky had a legitimate concern and had a right to voice it. I think the comment to ban me was a bit hasty, but keep in mind we've all jumped to conclusions in the past. Let's keep that in mind and welcome constructive posts. There are people out there trying to do nasty things with their code and they give all others a bad name.
_________________
Use a Thin Client w/MJ
My MJ Utilities Suite - SIP Grabber, Upgrader and More
Flash Memory Lifesaving Tips
Back to top
View user's profile Send private message
Adolf
MagicJack Newbie


Joined: 04 Jan 2009
Posts: 7

PostPosted: Wed Jan 07, 2009 8:20 am    Post subject: Reply with quote

Sorry I was referring to the Gunter guy on that post, I edited the post after that.
I do appreciate the work you do.
You are the greatest.

Thank you
Back to top
View user's profile Send private message Send e-mail
MagicHack
Dan isn't smart enough to hire me


Joined: 12 Nov 2007
Posts: 241

PostPosted: Wed Jan 07, 2009 10:02 am    Post subject: Reply with quote

Adolf wrote:
Becky wrote:
i get this error trying to run your program.can someone help me make this work?thank you.



I smell a rat here from Ymax.

I am running McAfeee and I never got this, the file is clean and it works good.
So Lady or who ever you are tell Dan That is nothing you can do to stop this program.

ISAD

I seem to have missed a bit here...

From the thread, it appears as though at 12:58 am someone posted indicating that there was a virus in this exe.

At 3:42 am, the author removed his code. He stated that it caused blue screens. (Note: Having written software for the last couple of decades, I tend to think this statement is BS, since his program is doing nothing more than dumping a processes memory, then searching the dump file for some strings; though, this is just my opinion.)

With that said, if someone wants to post a mirror of the original zip file, I'd gladly analyze it.

I do tend to question the authors motives though. Is there a reason you posted this information publicly?

Take callerid spoofing for example. When Stewart originally posted about caller id spoofing, I decided to rewrite it to make it easier for people to use.

Caller id spoofing was fun while it lasted, but, eventually (I'm guessing thanks to this forum), magicJack caught on, and blocked us from being able to do that. In fact, I can probably come up with a good dozen things magicJack has done to prevent (or at least make harder) for us to do.

Posting information like this will surely catch magicJack's eye. Your method of searching for plain text passwords in process memory can easily be fixed by magicJack. All they need to do is ensure that the passwords are never stored in plain text in system memory - something that ALL companies should do in the first place. I'm guessing that they'll do that soon.

Also, it is possible for magicJack to determine if you are using the softphone or an ATA. 'Bogus' User-Agent strings is just one way for them to do this. The softphone not only deals with standard SIP. (As long as we're posting all of this information publicly for magicJack to read, here's how I would prevent ATA's if I were magicJack.) During the initialization of the magicJack, a few things happen:
  1. A connection is made to one of the provisioning servers to retrieve your encrypted credentials.
  2. Standard SIP registration occurs
  3. Your softphone registers it's 911 location.

(I've actually dumbed this down a bit - there is a lot more that occurs, just showing enough to make my point.)

When you use an ATA, you just do step #2.

So, if magicJack wants to prohibit ATA use, they just need to do a couple of lookups in their database. If step #2 was done without step #1 or #3, ban account.

So, now that we've effectively put the nail in the coffin, what's the next big thing we want to help magicJack with? Perhaps you should publicly post how to add free international minutes to your account. magicJack would love to know that hole exists.
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
VaHam
Dan Should Pay Me


Joined: 13 Feb 2008
Posts: 838

PostPosted: Wed Jan 07, 2009 10:48 am    Post subject: Virus Scans Reply with quote

I have scanned the following list of versions using AVG, MalWare and Norton all of which are up to date.

Versions:

1.0
1.1
1.1a
1.2
1.41
1.5

No problems were found in any of these versions. Yes I missed a couple of the update versions in there but I believe the most current version at the time of the posting reporting a virus was v1.41.

I do understand that making these things so easy; will allow many who otherwise would not be savvy enough to violate the MJ TOS to do so and may increase MJ's efforts to block this kind of activity. However I do think it would only be a matter of time before the holes are addressed anyway.

The best all around solution would be for MJ to honor it's word and make BYOD available.

I can say I have enough respect for strohs that even if I had detected virus (WHICH I DID NOT), I would simply felt he may have gotten infected and passed it on accidentally.
_________________
Sad Times Ahead for this Obamanation !!!! Psalms 109:8
Back to top
View user's profile Send private message
az2008
MagicJack Sensei


Joined: 20 Aug 2008
Posts: 1404
Location: Tempe, AZ

PostPosted: Wed Jan 07, 2009 11:05 am    Post subject: Re: Virus Scans Reply with quote

VaHam wrote:
The best all around solution would be for MJ to honor it's word and make BYOD available.


It seems like a Catch 22. Maybe if they weren't spending so much time plugging holes due to them being exploited by so many people, they'd have more time to do things like provide caller ID blocking (the absence of which caused so many people to use caller ID spoofing), or an ATA device.

IMO, making the info available (to take advantage of MJ's holes) isn't a big problem. It's always going to be available to some extent, even if it's just a few people PMing info to each other. Eventually it will get out far enough. It's inevitable. Might as well just get all the info out there.

The only downside I see is that it causes MJ to devote more resources to hardening their system. That's not entirely bad. But, it could contribute to delaying a Linux client, ATA device, etc.

Mark
Back to top
View user's profile Send private message
elschus
MagicJack Newbie


Joined: 03 Jan 2009
Posts: 1

PostPosted: Wed Jan 07, 2009 11:36 am    Post subject: Reply with quote

Thank you, Stroths. This is great stuff. Is there any chance of you posting the source? I don't want to sound unappreciative, and from what I read I am confident you would not do anything unsavory. And I'm not concerned about viruses, as a scan with a quality AV program is enough validation for me.

However, I think there is a bigger issue with software like this (similiarly pm.exe at http://magicjackhacks.com/) because I am allowing it to read my magicjack account information. In general (again, this isn't aimed at you specifically), it would be really easy to have an extra subroutine that sends that account information to a web form or e-mail address. Suddenly, the software author has control of a few hundred accounts. Now, the time is unlimited, so free phone calls aren't really an issue, but the potential for other kinds of abuse is there. I don't know all the possibilities, as I'm new to VOIP, but could a second softphone "pick up the line" as an extension and listen? At the very least, the second softphone could answer calls to that number.

So while I appreciate your contribution, and I understand your desire to protect your IP, I ask you to at least consider releasing the source as a way to protect the magicjack community.
Back to top
View user's profile Send private message
stroths
Dan isn't smart enough to hire me


Joined: 02 Apr 2008
Posts: 470
Location: Dallas, TX

PostPosted: Wed Jan 07, 2009 12:13 pm    Post subject: Reply with quote

Wanted to give you all an update. The issues I described with my last release were real, but I wasn't sure if they would affect many (if any) people, because it might have been related to my test system. It was an older machine with an early version of XP that had not been updated with any of the service packs or updates. I planned on making the update within a few days with a few other goodies, but an issue came up that prompted me to post the update sooner than I intended and remove my 1.4.1 version. Turns out that I provided the mysipinfo.txt file with my data in the 1.4.1 update by accident.

While I believe that 99.5% of this community wouldn't take advantage of that, I know that there are some that would. I couldn't publicly announce that at the time until I could fix it. Quite honestly, I didn't plan on mentioning it at all except for the whole virus accusation. I do a lot for the community here and didn't want my good name smeared. That SIP information is no longer any good, so I don't have any issue divulging that info now.

On a related note, someone did realize that I included that SIp info and tried to gain access to my.magicjack.com. It saddens me that someone would do that after I try to help the community. Regardless, I will not let the actions of a small minority stop me from continuing to contribute here.
_________________
Use a Thin Client w/MJ
My MJ Utilities Suite - SIP Grabber, Upgrader and More
Flash Memory Lifesaving Tips
Back to top
View user's profile Send private message
stroths
Dan isn't smart enough to hire me


Joined: 02 Apr 2008
Posts: 470
Location: Dallas, TX

PostPosted: Wed Jan 07, 2009 12:17 pm    Post subject: Reply with quote

elschus wrote:
Thank you, Stroths. This is great stuff. Is there any chance of you posting the source? I don't want to sound unappreciative, and from what I read I am confident you would not do anything unsavory. And I'm not concerned about viruses, as a scan with a quality AV program is enough validation for me.

However, I think there is a bigger issue with software like this (similiarly pm.exe at http://magicjackhacks.com/) because I am allowing it to read my magicjack account information. In general (again, this isn't aimed at you specifically), it would be really easy to have an extra subroutine that sends that account information to a web form or e-mail address. Suddenly, the software author has control of a few hundred accounts. Now, the time is unlimited, so free phone calls aren't really an issue, but the potential for other kinds of abuse is there. I don't know all the possibilities, as I'm new to VOIP, but could a second softphone "pick up the line" as an extension and listen? At the very least, the second softphone could answer calls to that number.

So while I appreciate your contribution, and I understand your desire to protect your IP, I ask you to at least consider releasing the source as a way to protect the magicjack community.


You have a good point and while I agree, I don't necessarily want MJ to know exactly what I am doing specifically so they can't make a small change here or there to circumvent it. However, I will agree to a compromise to ease anyone's mind. I am willing to release my code to a select few here that I have worked with in the past to show I am not trying to do anything like that. I would trust this information to people like HolmanGT, VaHam and Trebuin. These are respected members of this community and I think they would be good choices.

Let me know what you all think.
_________________
Use a Thin Client w/MJ
My MJ Utilities Suite - SIP Grabber, Upgrader and More
Flash Memory Lifesaving Tips
Back to top
View user's profile Send private message
Predator04
MagicJack Newbie


Joined: 23 Dec 2008
Posts: 7

PostPosted: Wed Jan 07, 2009 12:28 pm    Post subject: Reply with quote

stroths wrote:
Wanted to give you all an update. The issues I described with my last release were real, but I wasn't sure if they would affect many (if any) people, because it might have been related to my test system. It was an older machine with an early version of XP that had not been updated with any of the service packs or updates. I planned on making the update within a few days with a few other goodies, but an issue came up that prompted me to post the update sooner than I intended and remove my 1.4.1 version. Turns out that I provided the mysipinfo.txt file with my data in the 1.4.1 update by accident.

While I believe that 99.5% of this community wouldn't take advantage of that, I know that there are some that would. I couldn't publicly announce that at the time until I could fix it. Quite honestly, I didn't plan on mentioning it at all except for the whole virus accusation. I do a lot for the community here and didn't want my good name smeared. That SIP information is no longer any good, so I don't have any issue divulging that info now.

On a related note, someone did realize that I included that SIp info and tried to gain access to my.magicjack.com. It saddens me that someone would do that after I try to help the community. Regardless, I will not let the actions of a small minority stop me from continuing to contribute here.

man thats fucked. i am the one who contacted you about this telling you that you have included mysipinfo.txt. so all these ppl thinking there was a virus your wrong. look at this link if you think there is a virus http://www.virustotal.com/analisis/de5d3d1fbccd5695e8c149a72595ac9e
that really pisses me off that someone could take your info like that after you release a program for everyone else. if i were you i would STOP this project asap or not stop it just not release any more updates to the public.
and also what pisses me off is that everyone is accusing you of trying to send them a virus. if you guys are worried please dont download and dont bother commenting. another thing that kinda pisses me off is that i found the info first but im not a total jackass and called him up and told him that he did release his info.
Back to top
View user's profile Send private message
Predator04
MagicJack Newbie


Joined: 23 Dec 2008
Posts: 7

PostPosted: Wed Jan 07, 2009 12:31 pm    Post subject: Reply with quote

stroths wrote:
elschus wrote:
Thank you, Stroths. This is great stuff. Is there any chance of you posting the source? I don't want to sound unappreciative, and from what I read I am confident you would not do anything unsavory. And I'm not concerned about viruses, as a scan with a quality AV program is enough validation for me.

However, I think there is a bigger issue with software like this (similiarly pm.exe at http://magicjackhacks.com/) because I am allowing it to read my magicjack account information. In general (again, this isn't aimed at you specifically), it would be really easy to have an extra subroutine that sends that account information to a web form or e-mail address. Suddenly, the software author has control of a few hundred accounts. Now, the time is unlimited, so free phone calls aren't really an issue, but the potential for other kinds of abuse is there. I don't know all the possibilities, as I'm new to VOIP, but could a second softphone "pick up the line" as an extension and listen? At the very least, the second softphone could answer calls to that number.

So while I appreciate your contribution, and I understand your desire to protect your IP, I ask you to at least consider releasing the source as a way to protect the magicjack community.


You have a good point and while I agree, I don't necessarily want MJ to know exactly what I am doing specifically so they can't make a small change here or there to circumvent it. However, I will agree to a compromise to ease anyone's mind. I am willing to release my code to a select few here that I have worked with in the past to show I am not trying to do anything like that. I would trust this information to people like HolmanGT, VaHam and Trebuin. These are respected members of this community and I think they would be good choices.

Let me know what you all think.

Dont release the code. theres no need to. your program works end of story. if they think ur trying to steal their info they dont need to download it. im surprised you would still continue your work after all this. i know you want to help but when the ppl come and take ur info that's when you have to say thats enuf. think about it

edit* since you still have the physical mj you should be able to get your account back. check with mj live chat. if you want do it i can try for you


Last edited by Predator04 on Wed Jan 07, 2009 2:18 pm; edited 1 time in total
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    magicJack and MagicJack Plus Support, Reviews, FAQs and Hacks Forum Index -> magicJack Tips, Tricks, and Hacks All times are GMT - 5 Hours
Goto page Previous  1, 2, 3, 4 ... 34, 35, 36  Next
Page 3 of 36

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB Turbo Extended Edition © 2010, phpBB Group