Earlier this week, a hack was unveiled that let Windows Phone owners bypass the DRM security of installed applications. The FreeMarketplace application would strip the application’s DRM wrapper and let users copy files to a computer and then to another Windows Phone handset. The details behind this hack were not revealed but the proof of concept video shows us all we need to know about pirating applications on WP7 in an automated, single-click process.
While we wait for Microsoft’s official response to this troubling hack, the developer behind the FreeMarketplace application offers his own temporary solution. He instructs Windows Phone developers to add a simple startup routine that checks for the presence of the “WMAppPRHeader.xml” file. This file is only added to the handset when an app is downloaded through the Windows Marketplace. If an app is pirated and side-loaded to a device, this file will be absent. With this start-up check, the app can detect the file’s absence and automatically shut itself down.
This method is not foolproof as a talented and tenacious cracker can circumvent these checks using a variety of methods.
The code and the guides I gave you here will not stop piracy. Anyone with the corresponding skills can still startup reflector, go through your code, remove any checkes, remove DRM and install it on a device. YES, but it got a lot more difficult to do it in an automated fashion. So, there might be one or two who can still break your security measures by hand but the masses won’t be able as there is no generic tool available
While not perfect, this extra code may be the only option for developers who want to protect their apps until Microsoft comes out with an official fix. With th ball is in Microsoft’s court now, hopefully the Redmond giant comes forward soon with a solution for their now-concerned developers.
[Via wpcentral and next best geek]