Beaded Bunny vibrator
 

Archive for January, 2009

How to Find your UDID on your iPhone

Apple has offered developers a way to beta test iPhone applications with up to 100 iPhones. Some developers have already started using this to their advantage by giving their software out as free public betas. But, you must supply a developer with your iPhone’s UDID (unique device identifier) in order to install these “Ad-hoc” applications on your iPhone.

To find your iPhone’s UDID, just plug it into your computer and wait until iTunes recognizes it. Please note that a Firewire iPod cable will not work, since the iPhone does not have the proper hardware to support firewire connections. Select your phone from the Devices list in iTunes and click the “Summary” tab. To see your UDID, click on the word “serial number” beside the picture of the iPhone. You should see the word “identifer” and an alphanumeric string – this is your UDID.

Alternative: You can also download an app from the Apple Store called Ad Hoc Helper which is a free download. Here is the itunes store URL http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=285691333&mt=8

To copy it, just press command + C on your Mac’s keyboard (or control + C in Windows). Now comes the hard part: getting on a developer’s beta testing list.

MAC address spoofing on OSX

This weekend I took a trip to Maumee bay with my family. We got a cabin which offered it’s own WiFi access point, but it’s $10 for a 24 hour period. Well we suckered up and got it billed to our Cabin number, and they gave us an access code. The problem is that the access code is for 1 computer only! After some sifting around on the source code of the login page where we entered in the access code, I figured out that they were using our MAC addresses for verification. Well, I changed my MAC address on my jailbroken iPod touch using an application called SpoofMAC using the MAC address of the computer we used the access code on. My iPod touch was connected to the web, but I wanted my PowerBook G4 on the web too! I used these two commands to try and change the mac address on my Airport Extreme Card.

sudo ifconfig en1 ether aa:bb:cc:dd:ee:ff
sudo ifconfig en1 lladdr aa:bb:cc:dd:ee:ff

But nothing seemed to work, so I downloaded MacDaddyX to try and change it. Still didn’t work! What Gives?! I could change my ethernet port mac address all I wanted, but not the wifi card mac address. After doing some digging I learned that the mac address for my airport Extreme card is loaded from within my Airport Card driver. Here is how to change your mac address from within your Airport Card Driver:

Because of the few problems with the dynamic method of MAC address spoofing I “invented” a static method. It makes MAC changing more complicated, because you have to hardcode the MAC you want into the driver and then reload it, everytime you want to change your MAC. But atleast no other real problems were discovered with this method.

Setting up…

I strongly suggest not to experiment with the original drivers in /System/Library/Extensions/AppleAirPort2.kext atleast until you made sure that everything works as you want. Therefore you should first create a copy of the driver into a test environment and also don’t forget to make an additional backup.

base:/Users/spoofer root# cp -pR /System/Library/Extensions/AppleAirPort2.kext .
base:/Users/spoofer root# cp -pR /System/Library/Extensions/AppleAirPort2.kext.backup .

Patching the binary driver

For now there is no automatic installation tool and therefore you have to patch the driver binary in AppleAirPort2.kext/Contents/MacOS/AppleAirPort2 with a hex editor of your choice. The following values are maybe different in your driver but atleast 3 driver versions have the same bytes.

For pre Tiger driver versions search for:

88 FF 15 30 | 89 5F 15 31 | 89 1F 15 32 | 7C E0 50 38
89 7F 15 33 | 7D 00 00 38 | 89 3F 15 34 | 7D 60 00 38
88 5F 15 35 | 7D 20 00 38 | 7C 40 00 38 | 2F 80 00 FF
41 9E 01 98

and change into

3C E0 Xx XX | 90 FF 15 30 | 3C E0 Yy YY | 60 E7 Zz ZZ
90 FF 15 32 | 60 00 00 00 | 60 00 00 00 | 60 00 00 00
60 00 00 00 | 60 00 00 00 | 60 00 00 00 | 60 00 00 00
60 00 00 00

For post Tiger driver versions search for:

88 FF 19 90 | 89 7F 19 91 | 89 5F 19 92 | 89 1F 19 93
7C E0 58 38 | 89 3F 19 94 | 7D 40 00 38 | 88 5F 19 95
7D 00 00 38 | 7D 20 00 38 | 7C 40 00 38 | 2F 80 00 FF
41 9E 01 CC

and change into

3C E0 Xx XX | 90 FF 19 90 | 3C E0 Yy YY | 60 E7 Zz ZZ
90 FF 19 92 | 60 00 00 00 | 60 00 00 00 | 60 00 00 00
60 00 00 00 | 60 00 00 00 | 60 00 00 00 | 60 00 00 00
60 00 00 00

Of course you have to replace Xx:XX:Yy:YY:Zz:ZZ with the MAC you want. It should be mentioned, that putting any value other than 0×00 into Xx resulted in not working connections. I don’t know if it is my accesspoint that refuses such MACs or the Apple kernel.

Testing

After having patched the binary you can now test if everything works by

base:/Users/spoofer root# kextunload AppleAirPort2.kext
kextunload: unload kext AppleAirPort2.kext succeeded

base:/Users/spoofer root# kextload AppleAirPort2.kext
kextload: AppleAirPort2.kext loaded successfully


base:/Users/spoofer root# ifconfig en1
en1: flags=8863 mtu 1500
inet6 fe80::211:22ff:fe33:4455 prefixlen 64 scopeid 0×5
inet 192.168.1.100 netmask 0xffffff00 broadcast 192.168.1.255
ether: 00:11:22:33:44:55
media: autoselect status: active
supported media: autoselect

Known Problems/Limitations

  • Changing the MAC is more complicated than using ifconfig until someone releases an autopatcher
  • WPA/WEP connections maybe need that you reenter the key after changing the MAC

Permanent install

I suggest that you perform this step only if you are sure that everything is okay, because otherwise your kernel maybe crashs during startup. Copy your modified AppleAirPort2 file to /System/Library/Extensions/AppleAirPort2.kext/Contents/MacOS/AppleAirPort2 and clear the kext caches.

base:/Users/spoofer root# cp AppleAirPort2.kext /System/Library/Extensions/AppleAirPort2.kext/Contents/MacOS/AppleAirPort2
base:/Users/spoofer root# rm -r /System/Library/Caches/com.apple.kernelcaches/
base:/Users/spoofer root# rm /System/Library/Extensions.kextcache
base:/Users/spoofer root# rm /System/Library/Extensions.mkext

The above instructions was found at http://generation-php.net/airport-static.html