Post OS1.04 - pinging 'the collective' for new install method

xorg · 06/29/2009, 06:59 PM

Update: We have a method working thanks to greg roll. This method is much easier than all of the initial installation steps for the SDK method.

Here are detailed instructions...
http://www.webos-internals.org/wiki/...talling_An_Ipk

See post for other methods that could still be pursued.

Original initiative posted...

Quote:

Ping

xorg@borg:/# ping thecollective.borg.com

Pinging the collective for a new mission. The United Federation of Palm has plugged the email link method for installing apps with webOS 1.04. The new mission is to find another way to load apps on a stock Pre w/out needing to use the SDK or rooting the phone. For those fully assimilated, share your ideas with the collective and let's operate as a single hive mind.

Hella lame, enough of that, on to the good stuff…

Purpose
Provide homebrewers a way to widely distribute apps, allowing easy install for the average consumer. The rooting and SDK methods are not exactly consumer oriented.

Goal
- Create a simple, consumer friendly, more secure way to load apps on a stock Pre
- Pre must be non-rooted
- No SDK installation (though simplifying that method could be a start)

Ideas to Explore...

Mimic the SDK install method w/out SDK
greg_roll discovered that the SDK method pushes this command with palm-install...

luna-send -i palm://com.palm.appinstaller/installNoVerify '{"target": "/media/internal/developer/FILENAME.ipk", "subscribe": true}'

More here. I dropped an ipk in /media/internal/developer (the USB drive) and ran this command from root and it installed.

Perhaps this command can be executed with webOS Doctor only installed or maybe with just 3rd party novacom drivers. The curious thing about webOS Doctor is that it doesn't require Dev mode ('roar' pointed this out).

Update: We essentially have this working thanks to greg. Is much easier than all of the initial installation steps for the SDK method. See page 10 of this thread.

Here are detailed instructions...
http://predev.wikidot.com/installing...st-1-04-update

Loading via USB drive, triggered by external web page
Could an external web page be created that uses a <script> tag to reference JavaScript and execute an SDK installer command against an ipk that exists in /media/internal (the usb drive)? Or execute a provided shell script that the user puts in the usb drive with the ipk? The luna command above could then be pushed. I'm a unix/linux guy, not a web developer.

The user experience would then be to copy the ipk to the USB drive (with sh script if needed) and then visit a web page to complete install.

BTW, I also experimented with trying to trigger things in the web browser with file:///media/internal/index.html and the like with no luck. Browser doesn't appear to support it. Also tried palm:// commands. No luck so far but it could probably be looked into further.

Spoof download of real app
When downloading an app from the app store, it temporarily places the .ipk file in /media/internal/downloads, which is also accessible from the USB drive. When the file download completes, it unpackages in the same dir with a subdir of _tmp*(package name). Watch this folder while downloading an app from the app catalog. Also check out /var/log/messages for hints with what is going on.

I've been tinkering with placing a homebrew app in place of the original .ipk as well as in the _tmp dir. The Pre will overwrite the files no matter the permissions, but this is still worth looking further into. There are several challenges to this, but worth exploring more.

Look for USB folder
Look for code in the OS that may already allow loading apps if dropped in some USB folder that may not exist yet.

Spoof a valid resource ID to launch an ipk package
Check out /usr/palm/command-resource-handlers.json , which launches apps based on file extension or commands. While likely a stretch, if you rename a .ipk with the extension of an app that launches, maybe there is a way to get the launching app to trigger an install.

Tools
To search for a string through entire system...
find / -type f -exec grep -l "searchstring" {} \;

Or from directory you are standing in...
find . -type f -exec grep -l "searchstring" {} \;

To search files by file name...
find / -name "filename" -print

Check logs for clues when researching how something behaves...
/var/log (especially messages and installer.log, use 'tail -f' command to watch live)

The Collective
Please post your ideas for any of the above or any new approaches. If we operate as a hive, a collective with a single mind, we can get it done. Healthy, half-glass full collaboration and experimentation is key. You will be credited for any breakthrough that leads to a solution.

Attention Palm
I intend to keep this white hat and completely in the open. By placing in a public forum, all ideas will be known to you. PM me if you have a comment on the effort. I have sent an email to webos-security@palm to inform Palm this effort is in progress. - xorg

Attention Contributors
I have been in contact with Palm and they are aware of this initiative (and likely monitoring this thread). They seem to be OK with it as long as we keep it white hat. Please follow white hat guidelines if you want to participate. Also lookup responsible disclosure, which I've been trying to follow by making all ideas available to Palm as they progress.

Hopefully we'll find a way that allows apps to be very easily installed and requires a conscious effort by the end user, therefore being relatively more secure than the email link method. Maybe we can find the right balance of liberty and security that works effectively for Palm, end users/consumers and homebrewers.

In the meantime, for those who want to load apps via the SDK, here is that method...
Installing apps on your Pre HOWTO

Edit:
Also being tracked on the Dev Wiki...
pre dev wiki: Installing Apps on a Stock Pre (post 1.04 update)

xstaticxgpx · 06/29/2009, 07:13 PM

As i posted in the old homebrew thread, with a rooted pre you can...

Simply, use ar to extract the ipk - then extract the data.tar.gz, cd into the usr/palm/applications dir, then using your rooted pre with ssh and sftp, copy recursively the (in the case of the translator app) de.umass.translate directory to your pre's /usr/palm/applications directory.

SirWill · 06/29/2009, 07:18 PM

Quote:

Originally Posted by xstaticxgpx

As i posted in the old homebrew thread, with a rooted pre you can...

Simply, use ar to extract the ipk - then extract the data.tar.gz, cd into the usr/palm/applications dir, then using your rooted pre with ssh and sftp, copy recursively the (in the case of the translator app) de.umass.translate directory to your pre's /usr/palm/applications directory.

There are many ways of installing on a rooted pre. I think what the community is after a way for homebrew to be sideloaded without rooting ones pre.

xorg · 06/29/2009, 07:18 PM

Yes, the goal is do this on non-rooted Pre and without the SDK. The purpose is to allow homebrewers distribute apps for a stock Pre with no mods.

xstaticxgpx · 06/29/2009, 07:21 PM

I understand that, but it's so ridiculously easy to root the pre and you have so many benefits why would anyone not want to do it?

xorg · 06/29/2009, 07:24 PM

^That's not a consumer friendly method.

Blubble · 06/29/2009, 07:25 PM

Regardless of how easy you think it is, the vast majority of users won't root their Pres. I have heard that it will void your warranty although I am not sure that it's true.

Heck, I am a software developer and I haven't rooted mine and don't plan to do so. I am happy to use the palm-install from the SDK.

SirWill · 06/29/2009, 07:35 PM

Another reason for not rooting would be a developer who wants to sell an application that for what ever reason Palm will not put in the app store. They should have a easy way of distributing the application.

I feel that the most secure way of offering the loading of software would be USB. Another thought would be possibly a USB one time load of an application that in itself would be Homebrew Catalog that would allow you to download from a catalog via wireless.

The downside to that method would be having to maintain a public software repository. It wouldn't have to host the software but rather it would be a link essentially that would transfer it from the developers hosting.

Maybe the application could be configurable for 'Sources' Either way, you have to find a way to get any application on to the device.

phwelo · 06/29/2009, 07:37 PM

i was just grep'ing around and found ApplicationPath=* in /etc/palm/

has anyone tried changing that to something within /media/internal/ ? I'm working right now or i'd give it a shot

xorg · 06/29/2009, 07:44 PM

^Yes, I've done that (dsevil posted about it) but obviously the Pre must be rooted to add the additional path. The goal is to find something in the existing OS that we can utilize.

phwelo · 06/29/2009, 07:48 PM

ah and here i am searching for the easiest option for myself, sorry

phwelo · 06/29/2009, 07:49 PM

has anyone who's done this browser download hack tried downloading a signed ipk? what are the results of that? i wonder if once palm implements browser downloads we might be able to "side load" them like that..

NoRemorse · 06/29/2009, 07:54 PM

Why not just make a user friendly front end to browse a folder for packages, then envoke the 'palm-install -d usb [DIR]' command, to push an unsigned app to the phone that is in dev mode?

Of course the end user would have to be responsible for getting the palm SDK/palm-install.

Just an idea... It's easier than rooting the phone, and can't really be shut off by Palm as it's how developers use the phone to test applications.

Hell, I might write an application like that, because it's easier than using the CL to package/install.

It's also slightly a pain that Eclipse will generate a project and the structure, but not a new scene. typing 'palm-generate -f new_scene -d "name=HELL" ./again' over and Over and OVER.

I'm just ranting now.

EDIT:

Ahh, you said with out the SDK, so you're gonna need to find out what exactly palm-install does, and how to mimic it.

roar · 06/29/2009, 08:45 PM

does the palm-install routine work with non rooted phones? because the procedure palm-install invokes is fairly trivial.

sacherjj · 06/29/2009, 08:50 PM

The install method from the SDK uses Java programs to handle the process. Unless code was written to perform the same function, or Palm gave their blessing for distributing a palm_install SDK-lite, this would not be a possible route. This also has the problems of average users getting into Dev mode and then remembering to get back out.

I guess capturing the USB exchange might give some details as to the low level actions of a NovaCom install process.

roar · 06/29/2009, 09:00 PM

how do you put a phone in dev mode?

edit: found it: "upupdowndownleftrightleftrightbastar" so you can't do that remotely (say from an app on your pc) and the palm-install routine won't work unless the phone is in dev mode, as far as I understood. So it would be no problem to write an app that does the same what palm-install does, but it's useless for anyone who isn't eager to switch to this dev mode and back again...

sacherjj · 06/29/2009, 09:31 PM

Quote:

Originally Posted by roar

but it's useless for anyone who isn't eager to switch to this dev mode and back again...

Correct. Plus you have the added problem of Dev mode opening up a bunch of ports which can cause issues. This could open up security risks if the users don't disable dev mode, which doesn't automagically happen with a reboot.

PreNomadBrad · 06/29/2009, 10:17 PM

Anyone looked at the DocView app? any possible methods of making a call? how about PDF View? any Java support from within there? I'm going to start digging myself, after I finish checking everything out after the 1.0.4 upgrade.

xorg · 06/30/2009, 09:31 AM

^Good idea, something to check into.

I'm looking more into spoofing a download.

Simplifying the SDK method might be the shortest path if someone could look more into that. Sounds like it would require the nova drivers as well though for Dev mode. Could grep system for konami code and trace path from there to get some ideas.

How to search entire system for a string...
find / -type f -exec grep -l "upupdowndown" {} \;

xorg · 06/30/2009, 10:18 AM

Am hoping to have a method more consumer friendly than the SDK method but let's talk about minimum requirements to go down that path (as noremorse suggested) and simplify it...

- need to punch in konami code, enable Dev mode and reboot
- need novacom drivers
- need similar install.bat method

Any other minimum requirements? If we create a gui-based install program for windows/mac that includes the drivers and performs same function of the palm_install bat, this could simplify app installation for users instead of having to load and setup the SDK. Bypassing the nova drivers would be even better if possible.

This could be a path of least resistance for a consumer friendly method until coming up with a better method that needs no mods on a stock Pre.

06/29/2009, 07:37 PM	#9 (permalink)
phwelo Member Join Date: Oct 2007 Posts: 528 Thanks: 13 Thanked 16 Times in 11 Posts	i was just grep'ing around and found ApplicationPath=* in /etc/palm/ has anyone tried changing that to something within /media/internal/ ? I'm working right now or i'd give it a shot __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. for any questions or to send a donation: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

06/29/2009, 07:48 PM	#11 (permalink)
phwelo Member Join Date: Oct 2007 Posts: 528 Thanks: 13 Thanked 16 Times in 11 Posts	ah and here i am searching for the easiest option for myself, sorry __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. for any questions or to send a donation: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

06/29/2009, 07:49 PM	#12 (permalink)
phwelo Member Join Date: Oct 2007 Posts: 528 Thanks: 13 Thanked 16 Times in 11 Posts	has anyone who's done this browser download hack tried downloading a signed ipk? what are the results of that? i wonder if once palm implements browser downloads we might be able to "side load" them like that.. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. for any questions or to send a donation: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

06/29/2009, 09:00 PM	#16 (permalink)
roar Member Join Date: Jun 2009 Location: Germany Posts: 101 Thanks: 10 Thanked 380 Times in 27 Posts	how do you put a phone in dev mode? edit: found it: "upupdowndownleftrightleftrightbastar" so you can't do that remotely (say from an app on your pc) and the palm-install routine won't work unless the phone is in dev mode, as far as I understood. So it would be no problem to write an app that does the same what palm-install does, but it's useless for anyone who isn't eager to switch to this dev mode and back again... Last edited by roar; 06/29/2009 at 09:12 PM.

06/30/2009, 10:18 AM	#20 (permalink)
xorg Member Join Date: Jun 2009 Location: kansas city, mo Posts: 566 Thanks: 80 Thanked 275 Times in 128 Posts	Am hoping to have a method more consumer friendly than the SDK method but let's talk about minimum requirements to go down that path (as noremorse suggested) and simplify it... - need to punch in konami code, enable Dev mode and reboot - need novacom drivers - need similar install.bat method Any other minimum requirements? If we create a gui-based install program for windows/mac that includes the drivers and performs same function of the palm_install bat, this could simplify app installation for users instead of having to load and setup the SDK. Bypassing the nova drivers would be even better if possible. This could be a path of least resistance for a consumer friendly method until coming up with a better method that needs no mods on a stock Pre. Last edited by xorg; 06/30/2009 at 03:03 PM.

06/29/2009, 07:13 PM	#2 (permalink)
xstaticxgpx Member Join Date: Jun 2009 Posts: 27 Thanks: 0 Thanked 1 Time in 1 Post	As i posted in the old homebrew thread, with a rooted pre you can... Simply, use ar to extract the ipk - then extract the data.tar.gz, cd into the usr/palm/applications dir, then using your rooted pre with ssh and sftp, copy recursively the (in the case of the translator app) de.umass.translate directory to your pre's /usr/palm/applications directory.

06/29/2009, 07:18 PM	#4 (permalink)
xorg Member Join Date: Jun 2009 Location: kansas city, mo Posts: 566 Thanks: 80 Thanked 275 Times in 128 Posts	Yes, the goal is do this on non-rooted Pre and without the SDK. The purpose is to allow homebrewers distribute apps for a stock Pre with no mods.

06/29/2009, 07:21 PM	#5 (permalink)
xstaticxgpx Member Join Date: Jun 2009 Posts: 27 Thanks: 0 Thanked 1 Time in 1 Post	I understand that, but it's so ridiculously easy to root the pre and you have so many benefits why would anyone not want to do it?

06/29/2009, 07:24 PM	#6 (permalink)
xorg Member Join Date: Jun 2009 Location: kansas city, mo Posts: 566 Thanks: 80 Thanked 275 Times in 128 Posts	^That's not a consumer friendly method.

06/29/2009, 07:25 PM	#7 (permalink)
Blubble Member Join Date: Jun 2009 Posts: 425 Thanks: 15 Thanked 234 Times in 72 Posts	Regardless of how easy you think it is, the vast majority of users won't root their Pres. I have heard that it will void your warranty although I am not sure that it's true. Heck, I am a software developer and I haven't rooted mine and don't plan to do so. I am happy to use the palm-install from the SDK.

06/29/2009, 07:35 PM	#8 (permalink)
SirWill Member Join Date: Jun 2009 Location: Everett, WA Posts: 396 Thanks: 57 Thanked 34 Times in 32 Posts	Another reason for not rooting would be a developer who wants to sell an application that for what ever reason Palm will not put in the app store. They should have a easy way of distributing the application. I feel that the most secure way of offering the loading of software would be USB. Another thought would be possibly a USB one time load of an application that in itself would be Homebrew Catalog that would allow you to download from a catalog via wireless. The downside to that method would be having to maintain a public software repository. It wouldn't have to host the software but rather it would be a link essentially that would transfer it from the developers hosting. Maybe the application could be configurable for 'Sources' Either way, you have to find a way to get any application on to the device.

06/29/2009, 07:44 PM	#10 (permalink)
xorg Member Join Date: Jun 2009 Location: kansas city, mo Posts: 566 Thanks: 80 Thanked 275 Times in 128 Posts	^Yes, I've done that (dsevil posted about it) but obviously the Pre must be rooted to add the additional path. The goal is to find something in the existing OS that we can utilize.

06/29/2009, 07:54 PM	#13 (permalink)
NoRemorse Member Join Date: Apr 2009 Posts: 110 Thanks: 6 Thanked 18 Times in 11 Posts	Why not just make a user friendly front end to browse a folder for packages, then envoke the 'palm-install -d usb [DIR]' command, to push an unsigned app to the phone that is in dev mode? Of course the end user would have to be responsible for getting the palm SDK/palm-install. Just an idea... It's easier than rooting the phone, and can't really be shut off by Palm as it's how developers use the phone to test applications. Hell, I might write an application like that, because it's easier than using the CL to package/install. It's also slightly a pain that Eclipse will generate a project and the structure, but not a new scene. typing 'palm-generate -f new_scene -d "name=HELL" ./again' over and Over and OVER. I'm just ranting now. EDIT: Ahh, you said with out the SDK, so you're gonna need to find out what exactly palm-install does, and how to mimic it.

06/29/2009, 08:45 PM	#14 (permalink)
roar Member Join Date: Jun 2009 Location: Germany Posts: 101 Thanks: 10 Thanked 380 Times in 27 Posts	does the palm-install routine work with non rooted phones? because the procedure palm-install invokes is fairly trivial.

06/29/2009, 08:50 PM	#15 (permalink)
sacherjj Member Join Date: Jun 2009 Location: Indianapolis, IN Posts: 1,582 Thanks: 36 Thanked 319 Times in 187 Posts	The install method from the SDK uses Java programs to handle the process. Unless code was written to perform the same function, or Palm gave their blessing for distributing a palm_install SDK-lite, this would not be a possible route. This also has the problems of average users getting into Dev mode and then remembering to get back out. I guess capturing the USB exchange might give some details as to the low level actions of a NovaCom install process.

06/29/2009, 10:17 PM	#18 (permalink)
PreNomadBrad Member Join Date: Jun 2009 Posts: 13 Thanks: 1 Thanked 2 Times in 2 Posts	Anyone looked at the DocView app? any possible methods of making a call? how about PDF View? any Java support from within there? I'm going to start digging myself, after I finish checking everything out after the 1.0.4 upgrade.

06/30/2009, 09:31 AM	#19 (permalink)
xorg Member Join Date: Jun 2009 Location: kansas city, mo Posts: 566 Thanks: 80 Thanked 275 Times in 128 Posts	^Good idea, something to check into. I'm looking more into spoofing a download. Simplifying the SDK method might be the shortest path if someone could look more into that. Sounds like it would require the nova drivers as well though for Dev mode. Could grep system for konami code and trace path from there to get some ideas. How to search entire system for a string... find / -type f -exec grep -l "upupdowndown" {} \;

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

LinkBacks (?) LinkBack to this Thread: http://forums.precentral.net/web-os-development/189497-post-os1-04-pinging-collective-new-install-method.html
Posted By	For	Type	Date
Forums webOS • View topic - Vista x64 USB Installation Problems [resolved]	This thread	Refback	07/21/2009 02:37 PM
Tutorials webOS Installing An Ipk - WebOS Internals	This thread	Refback	07/19/2009 07:57 PM
WebOS installer ·Ç¹Ù·½ÍÆ³ö - Palm Web OS - MAXPDAÂÛÌ³	This thread	Refback	07/17/2009 10:45 PM
New & Upcoming in Homebrew: Active Home Screen, an App Installer, & a Fart App \| Premazing.com	This thread	Refback	07/16/2009 01:45 AM
New & Upcoming in Homebrew: Active Home Screen, an App Installer, & a Fart App	This thread	Refback	07/14/2009 08:03 PM
Google Reader - PreCentral.net	This thread	Refback	07/14/2009 12:43 AM
Apps \| Premazing.com	This thread	Refback	07/13/2009 05:02 PM
Palm Pre highly anticipated homebrew updates \| Palm WebOS	This thread	Refback	07/13/2009 02:31 PM
[ZT]Ò»¸ö²»´íÐÂµÄÈý·½Èí¼þ - Palm Pre,webOS ÌÖÂÛ - [´µÓÑ°É¡¤·çÓï](Palm PreÂÛÌ³) Palm Pre,ÖÇÄÜÊÖ»ú,Palm Treo,Centro,iPhone,blackberry,QWERTY,È«¼üÅÌ - Powered by Discuz!	This thread	Refback	07/13/2009 01:45 PM
pre dev wiki: Installing Homebrew Apps on Stock Pre without Rooting	This thread	Refback	07/06/2009 05:39 PM
½«pre×ª³ÉÒ»¸öÍøÂç·þÎñÆ÷ - Palm Pre,webOS - [´µÓÑ°É¡¤·çÓï](Palm PreÂÛÌ³) Palm Pre,ÖÇÄÜÊÖ»ú,Palm Treo,Centro,iPhone,blackberry,QWERTY,È«¼üÅÌ - Powered by Discuz!	This thread	Refback	06/30/2009 09:22 PM
Palm Kills Homemade Apps With Latest Pre Firmware - Page 2 - Brighthand.com Smartphone and PDA Discussion Forums	This thread	Refback	06/29/2009 10:03 PM
pre dev wiki: Installing Apps on a Stock Pre (post 1.04 update)	This thread	Refback	06/29/2009 07:13 PM



Next (next) Android version is Gingerbread? How's your Nexus One 3G reception now? Google's Phone Support Line for Nexus One is Live Google Working On Voice-to-Voice Translation T-Mobile Drops Price of myTouch 3G to $99.99, Better Off Waiting For myTouch 1.2	BlackBerry App: ReportAway! for FreshBooks Grooveshark For BlackBerry Updated To v1.0.7 BlackBerry Tour Gets a Guest Spot on 'House' Contest Reminder: Developers Survey and Round Robin Official OS 5.0.0.464 For The BlackBerry Bold 9000 Released	Say Hello to TiPb: The iPhone, iPod, and iPad Blog! Hey Apple, is there an app for this? Play SNES with PS3 controller on the big screen Stream Slacker Radio to your Nokia N900 Check in to Foursquare on your Symbian S60 device Race around your neighborhood with Nokia Ovi Maps Racing game	Contest Reminders: Developer Survey and Round Robin ? Win a 32GB iPod touch, iPhone 3GS! TiPb at Macworld 2010 ? Conference Begins! Notion Ink Adam ? Don?t Call it an ?iPad Killer?! Apple Store Down ? iPad Ordering, New MacBooks, or Just Aperture 3? Navigon MobileNavigator Goes 3D, Social, and Intelligent

webOS Market Share: Needs Work? Contest Reminders: Developer Survey and Round Robin Review: Poster New in the App Catalog for 08 February 2010 Palm Pre Plus and Moms, Continued	Palm Does South Beach Throwback time: A look at the Palm Treo 700w Wireless Providers Offer Goods and Services for Haiti Relief Efforts Keeping up with Moms Sling Media Releases SlingPlayer Mobile for Windows Mobile V2.0	Review: Motorola HX1 Endeavor Bluetooth Headset TouchTwit gets bumped to v1.6 WMExperts Podcast Episode 89 Review: H1-Touch from Luxa2 Say Hello to TiPb: The iPhone, iPod, and iPad Blog!