PR1.2 compulsory My Nokia subscription - Revision history

imported_>andre: Protected "PR1.2 compulsory My Nokia subscription" [edit=autoconfirmed:move=autoconfirmed]

2012-06-13T15:33:27Z

Protected "PR1.2 compulsory My Nokia subscription" [edit=autoconfirmed:move=autoconfirmed]

← Older revision	Revision as of 15:33, 13 June 2012
(No difference)

imported_>pelago: Undo revision 48339 by 151.142.239.11 (Talk) Vandalism

2012-06-12T08:33:15Z

Undo revision 48339 by 151.142.239.11 (Talk) Vandalism

@@ Line 11: / Line 11: @@
 Although users can unsubscribe after the installation is completed, Nokia have not said what data is sent in the registration SMS, they make no promises to remove their data, nor do they refund any costs and it is possible that the some courts may consider that the legal agreement they presented during the process was in some way binding on the user.
-That's way more cvleer than I was expecting. Thanks!
+== How to avoid the compulsory registration while upgrading to PR1.2 ==
 == Technical analysis ==

151.142.239.11: /* How to avoid the compulsory registration while upgrading to PR1.2 */

2012-06-12T04:17:46Z

How to avoid the compulsory registration while upgrading to PR1.2

@@ Line 11: / Line 11: @@
 Although users can unsubscribe after the installation is completed, Nokia have not said what data is sent in the registration SMS, they make no promises to remove their data, nor do they refund any costs and it is possible that the some courts may consider that the legal agreement they presented during the process was in some way binding on the user.
-== How to avoid the compulsory registration while upgrading to PR1.2 ==
+That's way more cvleer than I was expecting. Thanks!
 == Technical analysis ==

imported_>pelago: /* Automatic method */ Linked extras-devel

2011-01-08T17:35:18Z

Automatic method: Linked extras-devel

← Older revision		Revision as of 17:35, 8 January 2011
Line 17:		Line 17:
	=== Automatic method ===		=== Automatic method ===

	Install the ''notmynokia'' package from the extras-devel repository. As long as this package remains installed, it checks at every re-boot that the My Nokia registration program (cherry) will not run.		Install the ''notmynokia'' package from the [[extras-devel]] repository. As long as this package remains installed, it checks at every re-boot that the My Nokia registration program (cherry) will not run.

	The package should be installed before the upgrade to PR1.2 takes place, and should remain installed afterwards. The package is believed to be effective for "over the air" (OTA) upgrades and should also work if the software is re-flashed (but the package should be re-installed as soon as possible afterwards).		The package should be installed before the upgrade to PR1.2 takes place, and should remain installed afterwards. The package is believed to be effective for "over the air" (OTA) upgrades and should also work if the software is re-flashed (but the package should be re-installed as soon as possible afterwards).

imported_>pelago: /* Recovering */ Clarified how to turn off, and a couple of other changes

2010-07-11T20:51:27Z

Recovering: Clarified how to turn off, and a couple of other changes

← Older revision		Revision as of 20:51, 11 July 2010
Line 37:		Line 37:
	=== Recovering ===		=== Recovering ===

	If the cherry process runs and displays the terms and conditions screen, it is not too late to avoid the registration as long as you have not clicked on the button to allow it to proceed. Simply turn the phone off ~~(without clicking on~~ the ~~"Done"~~ button), remove the SIM card, and turn the phone back on again. Then, start ~~an Xterm~~ and type in the commands:		If the cherry process runs and displays the terms and conditions screen, it is not too late to avoid the registration as long as you have not clicked on the Done button to allow it to proceed. Simply turn the phone off by holding down the power button for a few seconds, remove the SIM card, and turn the phone back on again. Then, start X Terminal and type in the commands:

	touch ~/.cherry_state		touch ~/.cherry_state
	sync		sync

	Note: if you have ~~WiFi~~ network connectivity, you can install ''notmynokia'' instead of typing those commands if you wish.		Note: if you have Wi-Fi network connectivity, you can install ''notmynokia'' instead of typing those commands if you wish.

	Then turn the phone off again, reinsert the SIM card and turn it back on. The registration screen should not appear. You may want to still install ''notmynokia'' as soon as possible to help protect you in case the file somehow gets deleted.		Then turn the phone off again, reinsert the SIM card and turn it back on. The registration screen should not appear. You may want to still install ''notmynokia'' as soon as possible to help protect you in case the file somehow gets deleted.

imported_>gcobb: Update Manual Method and add Recovering section

2010-07-11T15:04:46Z

Update Manual Method and add Recovering section

← Older revision		Revision as of 15:04, 11 July 2010
Line 31:		Line 31:
	touch ~/.cherry_state		touch ~/.cherry_state

	~~Before you~~ first boot into PR1.2, ~~it is probably best to remove your SIM anyway~~, ~~just in case something went wrong and <code>/usr/bin/cherry</code> still ran~~.		If, on your first boot into PR1.2, you see the Ny Nokia registration screen, see the "Recovery" section below.

	If your upgrade method to PR1.2 involved flashing eMMC, this will mean that you cannot create the <code>/home/user/.cherry_state</code> file before booting into PR1.2. ~~But you can remove~~ the ~~SIM card, boot and create the file. Then you are free~~ to ~~reboot~~ with ~~the SIM card in and it should not subscribe you~~.		If your upgrade method to PR1.2 involved flashing eMMC, this will mean that you cannot create the <code>/home/user/.cherry_state</code> file before booting into PR1.2. See the section below for how to deal with that case.

	~~Cherry will tell the CSD daemon, through CSD's libcsd-sms.so module, to send the SMS directly, bypassing Telepathy and RTCOMM.~~		=== Recovering ===

	~~Before~~ you ~~put a~~ SIM back in, check to see if there are any files in <code>/var/spool/sms/outgoing</code> and check to see if <code>/var/spool/sms/regs_out.txt</code> contains an entry. If you haven't sent any other SMSes, it's a safe bet that this message scheduled to go out is the one produced by Cherry. Removing the file in <code>/var/spool/sms/outgoing</code> and the entry from regs_out.txt is safe, but make a backup just in case.		If the cherry process runs and displays the terms and conditions screen, it is not too late to avoid the registration as long as you have not clicked on the button to allow it to proceed. Simply turn the phone off (without clicking on the "Done" button), remove the SIM card, and turn the phone back on again. Then, start an Xterm and type in the commands:

			touch ~/.cherry_state
			sync

			Note: if you have WiFi network connectivity, you can install ''notmynokia'' instead of typing those commands if you wish.

			Then turn the phone off again, reinsert the SIM card and turn it back on. The registration screen should not appear. You may want to still install ''notmynokia'' as soon as possible to help protect you in case the file somehow gets deleted.

			If you have clicked to allow the registration process to continue, it is probably too late to stop it. Cherry will tell the CSD daemon, through CSD's libcsd-sms.so module, to send the SMS directly, bypassing Telepathy and RTCOMM so the SMS is not visible in your Messaging history.

			If the SMS cannot be sent (no balance on SIM card, no network coverage), the SMS may still be on the phone waiting to be sent. You can check to see if there are any files in <code>/var/spool/sms/outgoing</code> and check to see if <code>/var/spool/sms/regs_out.txt</code> contains an entry. If you haven't sent any other SMSes, it's a safe bet that this message scheduled to go out is the one produced by Cherry. Removing the file in <code>/var/spool/sms/outgoing</code> and the entry from regs_out.txt is safe, but make a backup just in case.

			If the SMS has been sent, then all you can do is to use the Settings/My Nokia to unregister. Note that, in this case, Nokia makes no promises to discard your registration data (see the Terms and Conditions for whatever promises it makes, if any).

	== Technical analysis ==		== Technical analysis ==

imported_>jaffa: Nokia's response

2010-06-26T20:44:22Z

Nokia's response

@@ Line 77: / Line 77: @@
 The package is not optified, contributing to the rootfs compressed terms files of about 1.3MB.
 [[Category:N900]]
 [[Category:Users]]

imported_>gcobb: Add notmynokia package and some extra text

2010-06-24T10:19:07Z

Add notmynokia package and some extra text

← Older revision		Revision as of 10:19, 24 June 2010
Line 7:		Line 7:
	== The problem ==		== The problem ==

	~~The main problem is that~~, ~~by default~~, all devices upgraded to PR1.2 are automatically subscribed to My Nokia. This involves a text (SMS) being sent from the device to Nokia, which might be at the owner's expense, and then receiving texts from Nokia. In normal circumstances, it is not possible to use the upgraded operating system without agreeing to subscribe to My Nokia.		In the PR1.2 update, Nokia included a feature to automatically register users with their MyNokia service. However, they did not allow an opt-out so all devices upgraded to PR1.2 are automatically subscribed to My Nokia. This involves a text (SMS) being sent from the device to Nokia, which might be at the owner's expense, and then receiving texts from Nokia. In normal circumstances, it is not possible to use the upgraded operating system without agreeing to subscribe to My Nokia.

			Although users can unsubscribe after the installation is completed, Nokia have not said what data is sent in the registration SMS, they make no promises to remove their data, nor do they refund any costs and it is possible that the some courts may consider that the legal agreement they presented during the process was in some way binding on the user.

	== How to avoid the compulsory registration while upgrading to PR1.2 ==		== How to avoid the compulsory registration while upgrading to PR1.2 ==

	To avoid the compulsory registration, i.e. to avoid the device sending a text to Nokia and breaching privacy, it is most important to stop the <code>/usr/bin/cherry</code> app from running. It would also be nice to remove the My Nokia applet from Settings, but at least that should not subscribe you without asking.		To avoid the compulsory registration, i.e. to avoid the device sending a text to Nokia and breaching privacy, it is most important to stop the <code>/usr/bin/cherry</code> app from running. It would also be nice to remove the My Nokia applet from Settings, but at least that should not subscribe you without asking.

			=== Automatic method ===

			Install the ''notmynokia'' package from the extras-devel repository. As long as this package remains installed, it checks at every re-boot that the My Nokia registration program (cherry) will not run.

			The package should be installed before the upgrade to PR1.2 takes place, and should remain installed afterwards. The package is believed to be effective for "over the air" (OTA) upgrades and should also work if the software is re-flashed (but the package should be re-installed as soon as possible afterwards).

			However, if the eMMC is reflashed then protection is lost. See the notes on the manual method below for possible workrounds in this case.

			Note: if you later decide you want to allow the registration, simply remove the ''notmynokia'' package.

			=== Manual method ===

	As you will see from the technical analysis below, creating a file called <code>/home/user/.cherry_state</code> should stop <code>/usr/bin/cherry</code> from running. This file lives in the eMMC, so if your PR1.2 upgrade procedure doesn't involve flashing eMMC, then you can create that file before you upgrade and it should still be there after the upgrade. That means that you should avoid running <code>/usr/bin/cherry</code>. To create that file, type:		As you will see from the technical analysis below, creating a file called <code>/home/user/.cherry_state</code> should stop <code>/usr/bin/cherry</code> from running. This file lives in the eMMC, so if your PR1.2 upgrade procedure doesn't involve flashing eMMC, then you can create that file before you upgrade and it should still be there after the upgrade. That means that you should avoid running <code>/usr/bin/cherry</code>. To create that file, type:

imported_>pelago: Added bugs.maemo.org link

2010-06-23T21:37:49Z

Added bugs.maemo.org link

← Older revision		Revision as of 21:37, 23 June 2010
Line 3:		Line 3:
	The implementation of the feature is rather controversial, and some consider it a privacy breach. This document describes the problem and suggests some ways to work around it.		The implementation of the feature is rather controversial, and some consider it a privacy breach. This document describes the problem and suggests some ways to work around it.

	See also the [http://talk.maemo.org/showthread.php?t=53565 ~~related~~ talk.maemo.org thread].		See also the related [http://talk.maemo.org/showthread.php?t=53565 talk.maemo.org thread] and [https://bugs.maemo.org/show_bug.cgi?id=10366 bugs.maemo.org bug].

	== The problem ==		== The problem ==

imported_>pelago: Move analysis lower down, as most people probably just want to find out how to avoid this

2010-06-23T21:28:20Z

Move analysis lower down, as most people probably just want to find out how to avoid this

@@ Line 8: / Line 8: @@
 The main problem is that, by default, all devices upgraded to PR1.2 are automatically subscribed to My Nokia. This involves a text (SMS) being sent from the device to Nokia, which might be at the owner's expense, and then receiving texts from Nokia. In normal circumstances, it is not possible to use the upgraded operating system without agreeing to subscribe to My Nokia.
 == Technical analysis ==
 In PR1.2, the My Nokia feature is enabled by the "cherry" package. The package is closed source, but it can still be analysed to an extent. The package can be downloaded on any N900 (even those that have not been upgraded to PR1.2). Downloading the package as described here does not install it, so is safe. For some reason, trying to wget the package from a Linux desktop machine doesn't work.
@@ Line 48: / Line 62: @@
 The package also contains a ChangeLog, which makes interesting reading as to how the package developed over time.
-The package is not optified, contributing to the rootfs compressed terms files of about 1.3MB
+The package is not optified, contributing to the rootfs compressed terms files of about 1.3MB.
 [[Category:N900]]
 [[Category:Users]]