Goatbreaking- Full Permissions for apps installed OTA

This is the new hack of the century. I call it Goatbreaking! Named it after me. Heehee. This method will allow full permissions. This will work with mgmaps to allow you to see the memory card. Should give full permissions to any app you can install on your phone. Again this works with all applications that use the gps, access the internet, or use the memory card.

This method is for those that have a data plan and can access the internet on their phone. You will need to be familiar with the program TKFileExplorer.

For my example I will use amazegps. Download the Signed version for the Samsung Eternity to your phone from wap.amazegps.com.  All other applications download to your phone from their respective servers using your medianet browser. Always try to get the signed version but not necessary for this method. If you already have it then good. If you dont just install it. No need to run the app after installing it. But you may run it to see if it is fullscreen. That means no dpad if touch screen version. If you already have a modified version on your phone it is best to delete it and download it again.

Connect your phone using TKFileExplorer. Go to the amaze folder (exe/java/games/amaze/) and delete the manifest.mf, and the appdb folder. 

Amaze is already fullscreen, but other apps like opera mini and mgmaps are not. In this case. Upload the jad file to your computer using TKFE. Open the jad with notepad and copy these lines to the bottom. Resave the jad and download it back to your phone.



MIDlet-Touch-Support: True
UseNativeTextButtons: false
ReverseSoftkeys: true
UseNativeCommands: false

Some apps can be made to rotate on the solstice. Works for SOME apps not games. Add this code also to the jad.
MIDlet-ScreenMode: ROTATE

Disconnect your phone and run amaze or the app you just installed.

Again this process should work for any app that you can manage to install by using wap (internet). Its safe and its the most complete in allowing all permissions.


   

Here is what is happening with this modification. When you install an app OTA, Att allows the install but does not grant all permissions for the app to run . They have to have a certain level of signings to be accepted. Many have noticed this with the gps issue in Amaze.  Or if you wanted to put maps on your phone for mgmaps the phone didnt allow mgmaps to see the memory card. According to ATT, only ATT signed apps are permitted to see the memory card or gps. So here lies our problem.

Way back someone came up with the TKFileExplorer install method for installing apps. They unfortunately didnt know what else this install method did. The method said to put the jad and the jar in a folder in your games folder on your phone and delete the file phodedb_data.00. What this accomplished was that when the phone reboot it installed the app when it rebuilt its file database. But they did not know that if you used a jad with permissions the phone also granted those permissions. Basically the app was installed under the radar of ATT's signing scanner. If the app granted permissions to see the gps then it was allowed.  This wasnt noticed because gps apps needed the data connection to function so the people that didnt have data didnt install gps apps. Deleting the phonedb_data.00 file is dangerous and causes the phone to lose phone data which includes contacts.  So not many used this method. Now there is a new offline install method using TKFE and the master key to install. It is much safer and also provides full permissions of apps installed.

So what does the OTA method do when it installs. It places the jar and the jad in a folder and adds a shortcut in the phonedb_data.00 file for the app to be run. It also places an appdb folder with the jad and jar and this basically defines what the program is allowed to do in it.

Ok, the app is installed so how do we get it to grant permissions to run without reinstalling with the dangerous TKFileExplorer method or using a half working settings.bin hack? That is where I came up with my method. If you delete the contents of the appdb folder the app will actually have to reinstall itself to run. You can delete the manifest.mf file because it will not be used in the reinstall so it is dead wieght. So when the app reinstalls it installs under the radar of ATT's signing check. All permissions that were asked for in the jad are suddenly granted this time. Right under ATT's nose for say.  It is very much like installing with the TKFE method except you dont have to delete the phonedb_data.00 file because the rebuilding is not needed since it is already installed the first time by wap or OTA.

So there you have it. Your app is granted all permissions. This is so much better than the settings.bin hack. This is why. The settings.bin file is from another app. It grants permission to use the gps but not the memory card. And if the app requires other permissions they may not be granted too. This 'Goatbreaking' method allows all permissions requested in the jad.

There are stipulations. The jad need not be signed for this method. But it must ask for permissions. So if you are installing amaze be sure to use their jad whether signed or unsigned. If you installed amaze with a wap uploader like rumkin a generic jad was formed in the install. This jad does not ask for permissions. It must be replaced with an Amaze jad. You can do this at the same time you delete the contents of the appdb folder using TKFE. Just replace the generic one with the amaze one which you can download from Amaze on your pc. So if you originally installed amaze, mgmaps, gmail, nav4all, opera mini, bolt, or any such app straight from the app's servers using your phone Then this method will work great for you.

You will get use of your gps, you will be allowed to access the memory card if the app needs it, and you will never get asked if its alright to use the internet 100 times.

For those that are curious, here is the list of permissions for things that can be done with our phone. If you ever opened up a jad and read the midlet permissions these are the signings required to perform those permissions.

http://developer.att.com/developer/index.jsp;jsessionid=VDQGQ5QRRLQF5B4R0EWCPJQ?page=toolsTechDetail&id=11300207#PIM


This method has been tested thoroughly with the apps listed below. I will list the name and the link that you can go to on your phone to get the app. It also states whether it needs to be made full screen or not. If you wish to add to this list please post in this thread and i will add it.


AmazeGPS                 http://wap.amazegps.com/                    already full screen
Mgmaps gps               http://wap.mgmaps.com/                       needs to be made full screen
Bolt Browser             http://boltbrowser.com/                             needs to be made full screen
Opera Mini Browser       http://mini.opera.com                            needs to be made full screen
Nav4All gps              http://www.nav4all.com/                             needs to be made full screen
Gmail (google mail)      http://m.gmail.com/app                          needs to be made full screen
Trapster  speed trap gps   http://trapster.com                             needs the dpad
     

Any ideas on getting touch screen working on google maps, doesn't seem to work for me.

I tried full screen/rotate but that makes the java arrows disappear making the program useless without touch screen support at least.

sweet thanks, works great now.

Goatbreaking is done after you install. Only way to get full permissions is to goatbreak or install with TKFE. Both of which require a cable.

You can pick a usb cable up under $5 from amazon.com. If you plan on getting the most out of your phone then a cable is at the top of the list of required items.

Thankyou. I do what i can. I lkie to have a good phone also, so why not share as much info as possible. Nice touch with adding true to the gps. Feels good to get the applications to work.

I have yet to try this myself. I take it you have to register first to see the download links?

I know it feels good. And google maps is a very good application. No voice turn by turn but it has godd searching, great satellite view, and it will give you a route. And the best thing about this version of google maps is it uses the gps. Something google didnt even want us to get our hands on.

The gps is free. ATT just has it disbled to work with third party apps unless they are goatbroken or installed with TKFE. The navigator app on the phone is what requires a subscription. Of course you need a data plan for most gps apps to work still.

Without a data plan how are you going to download maps? Yes mgmaps can cache maps but they must be very small. Like the size of a county or 2. I wouldnt go over a 100MB map if making a map for mgmaps.