Registration system

[clach04]

My 2 cents.

Has this been considered: for non hardware serial id's base the registration key upon some sort of hashing function using the contents of User Information (set in control panel) and the cpu type?

That would get around the "hassle" of a hard reset (without backup). But does have a couple of problems:

1) re-write of the registration system.
2) If you move house etc. Or change hardware CPU (i.e. the user information changes) then you still need to get a new key (but I don't see that as a big deal - I hard reset more often that I move house :-O )
3) someone could post their key and user information screen info - so warez-kiddies could change their user info and then use the key when using DEXplor, and change back after use.
4) someone may "hack" the hashing algorithm

For me personally, number 3 would not be a viable option to steal DEXplor as I use the "show user info screen on power up" option in case I mis-place my PPC.

I've not actually tried DEXplor yet so my opinions may not count for much. I've been getting by with the old version of FTPview, PHM regedit, Free unzip, tascal lha and formatting CF cards on the desktop. With the new 1.2 version (with all its features) I'm seriously thinking about trying out the demo as it will save me a lot of hassle, but I'd prefer not to have to email everytime I hard-reset (I often change what I want as a base install so I'm not fond of the backup approach suggested).

Chris

[randall]

But installing 4 different applications to get the same functionality isn't a big deal? I'm confused here. I can do all that stuff in one little package, and it didn't cost me an arm and a leg.

[clach04]

I can see where you are coming from, but this topic is about registration of programs. I can hard reset my mips PPC and have those four applications fully installed and operational within 2 mins.

With the current registration process for DEXplor there is a time delay in getting a new key - there is no instant up and running with full features. Instant gratification is fairly important to me personally and some of the other people in this thread but different people have different expectations (or in this case hardware that avoids this problem).

I'm seriously thinking about getting the demo to consolidate some of those programs (as I could then dump free unzip and regedit, I'd still use lha and FTP view for ftping). That being said I don't expect Dan to change the reg system to convince me to get DEXplor! And from all the the posts I've read there have been timely turnaround on requests for updated keys so perhaps it is not such a big deal for some people.

I've other programs that I've registered I can also get up and running instanly with my reg key without emailing the authors - BUT I think Dan is completely justified in tieing DEXplor to particular hardware, but having to email after a hard reset (for non serial numbered devices) is inconvienent. It would be nice if there were some flexibilty in the system that did not open the door to warez-kiddies, tieing to user information may be one viable option.

I use Starbuck and I believe that the reg key for that is tied to the User information (at least that is what the registration key email said) and I don't find that inconvient. If I had an ipaq I would probably be happy with the current system as ipaq owners do not suffer this problem.

That fact that Dan has discussed a decent workaround (the OS backup) and is discussing this is a great indicator that Dan does care about user opinion.

It is a shame (I think) that the PPC2000 standard didn't specify that hardware had to have a serial id. I'm not going to be moving from PPC2000 for a while - but at least this kind of problem won't exist when I eventually upgrade

Chris

[Guest]

I don't know whether this works, but when I ran the DEXRegKey.exe, it created a .tmp-file which was the uncompressed EXE of the Registration utility. And when I looked into it, I found my Hardwarekey, name and email-address somewhat before the end of the file. Did someone ever try to change this HardwareID to his new one? Did this work? I'd be interested in that...

Regards,
-mARKUS

[Dan East]

Go for it. I will simply say that I am slightly more intelligent than to design something as weak as that.

Dan East

[Dan East]

I feel I must supply a warning. Making manual changes as you suggest would at least result in DEXplor crashing, and could result in other more serious problems with your device. It is not that DEXplor purposefully tries to do damage as part of its security, as much as the registration key would be corrupted resulting in unknown behavior.

I will save you the time and assure you that what you are attempting will not unlock DEXplor for other devices.

Dan East

[Guest]

Okay, that's what I wanted to know. I also did not think that you built such a light protection.

Regards,
-mARKUS

[James S]

Dan, some programs available for the iPaq and other devices with flashable ROM allow a direct install onto the ROM so a hard reset would not result in their erasure. That would be a really good idea for DEXplor. I'm not thinking it would resolve this registration problem, but these comments reminded me of that possibility.

[Dan East]

That could be a valid solution for non-iPaq devices (there is no issue with the iPaqs because of their Electronic Serial Numbers). I think the newer Jornadas have a "safe rom" area.

Dan East

[Staci]

if I'm reading this thread correctly, I'm slightly disappointed that I just purchased this product. like a lot of pocketpc owners I know, I do hard-reset my system frequently because of the variety of software I use and the obsessive-compulsive need I have to run a clean pocketpc.

to add my two cents on the idea of using the hp safe store, it can really slow down the performance of the new jornadas, and I prefer not to use it. I do frequent backups of my system, but only for the unlikely event that my pocketpc crashes or the battery completely dies. I also have to admit I feel like a dissed customer just because I chose not to buy the ipaq. and like some of the other posters here, I believe what's paid for is mine; I shouldn't have to wait until Dan decides he wants to check his email in order to have a fully functional program, that I paid for, work on my freshly rebuilt jornada.

that said, I also hate Microsoft but I continue to use their products because they work.

I don't know enough about security to know what prevents warez and what doesn't. would it be a risk to create a real-time key generator, through a website or a small desktop application, that could provide a key whenever a registered user needs it? logging into a secure site that would generate a key and send it to a specified email address within ten minutes, perhaps the verified paypal email address, would be more customer-oriented than waiting for a live response.

thanks for listening.

Staci

[Dan East]

The registration issue will be addressed shortly for Pocket PC 2002 devices (not the upcoming 1.30 release, but the following release which will occur in the next couple weeks).

Dan East

[Markus Birth]

Hey Dan, why don't you set up a Perl-script (or PHP?) which identifies a user via his email-address and a password and - after login - lets him create a new key. The script should test whether the user already requested a new key in the current month...

I think this would satisfy 99% of all users here... so they are able to receive their new key instantly. (I think they are all concerned because of the probability that you're e.g. (I hope not!) in hospital when they need a new key urgently...)

What do you think of that?
Oh, and what about 1.30? I read you planned to release it on Sunday evening ... it's now Tuesday here ...


Best regards,

-mARKUS

[Ainvar]

I just kepy my regged zip file and use that when I do a hard reset works for me. Or am I missing this whole point now?

[accolon]

The registration file works if your hardware ID doesn't change during a hard-reset.

iPAQs have got fixed IDs, but Casio owners have to get a new key each time they re-initialize their devices.

[Dan East]

The main problem is the creation of the CAB files and installer. I could generate the registration file in an automated manner, but the user would have to copy the registration file to the correct location on their Pocket PC. The only tools I know of to generate CAB files (in additional to the custom installer DEXplor uses) run on Windows boxes, and Pocket Matrix (DEXplor's host) does not run on a Windows machine.

Dan East