THE BYTES MACCRACK 1 CHAPTER 1 PROTECTION METHODS IN THESE EARLY DAYS OF MACCRACKING, THER

---
Master Index Current Directory Index Go to SkepticTank Go to Human Rights activist Keith Henson Go to Scientology cult

Skeptic Tank!

THE BYTE'S MAC-CRACK #1 CHAPTER 1 -- PROTECTION METHODS =============================== IN THESE EARLY DAYS OF MAC-CRACKING, THERE ARE ONLY A FEW MAIN METHODS OF PROTECTING PROGRAMS. ONE OF THE MOST POPULAR METHODS OF PROTECTING A DISK INCLUDES HIDING AN INVISIBLE FILE ON THE DISK. THE APPLICATION THEN CHECKS TO MAKE SURE THAT THE FILE IS ON THE DISK, AND IF IT DOESN'T FIND THE FILE IT WILL CRASH, HANG, OR TELL YOU TO "INSERT MASTER". [MULTIPLAN USES THIS METHOD]. AN INVISIBLE FILE CANNOT BE COPIED WITH THE FINDER, BUT IT WILL BE COPIED WHEN A FULL DISK COPIER IS USED (IE. DISKCOPY, DISKUTIL, OR BLOCKSMITH). TO STOP PEOPLE FROM COPYING THE WHOLE DISK, THE DISKPROTECT BYTE ON BLOCK #2 IS SET TO $40. DISKCOPY (THE COPY PROG WHICH EVERYONE GETS ON THEIR SYSTEM DISK) CHECKS THAT BYTE, AND IF IT IS A $40, DISKCOPY WILL SPIT OUT THE DISK AND SAY "THAT DISK IS COPY-PROTECTED!" (SHAME ON YOU). NOT ONLY DOES EACH DISK HAVE A PROTECTION BYTE, BUT EACH FILE IN THE DIRECTORY ALSO HAS ONE. THIS BYTE (CALLED THE "ATTRIBUTE" BYTE BY EXAMINEFILE) IS TRICKY. ONCE IT HAS BEEN SET (BY EXAMINEFILE FOR EXAMPLE), THE ONLY WAY TO RESET IT (RIGHT NOW) IS TO USE A BLOCK EDITOR (SOMETIMES CALLED A 'DISK ZAP'). YOU CAN USE EXAMINEFILE TO SEE IF A FILE IS PROTECTED THIS WAY (THE ATTRIBUTE BYTE WILL BE A $40) OR YOU CAN JUST TRY TO MOVE, TRASH, OR DUPLICATE THE SUSPECT FILE. IF YOU GET THE MESSAGE: "THAT MAY NOT BE DUPLICATED OR MOVED" THEN YOU KNOW IT'S PROTECTED BY THAT BYTE. ALL OF THE ABOVE METHODS OF PROTECTION ARE NO CONTEST FOR DISKUTIL AND TWO DRIVES, BUT IT'S NICE TO BE ABLE TO COPY WITH ONE DRIVE AND TO PUT STUFF ON THE SAME DISK.... UNFORTUNATELY, A FEW PROGRAMS [MILLIONAIRE, THINKTANK] ARE NOW USING SOME STRANGE TRACKS THAT WILL NOT COPY WITH DISKUTIL. I HAVE BEEN TOLD THAT THE BLOCKSMITH TYPE OF COPIER WILL CHURN THROUGH THAT TYPE, BUT I HAVEN'T BEEN ABLE TO GET MY HANDS ON AN ORIGINAL TO TRY IT. THE BYTE ======================================= THE BYTE'S MAC-CRACK #2 ======================================= CHAPTER 2 -- CRACKING METHODS ============================= REQUIRED TOOLS: -BLOCK EDITOR V1.01 -SETFILE -EXAMINEFILE -DISKUTIL -BLOCKSMITH OR EQUIVALENT -BLANK DISKS FIRST, I'LL EXPLAIN WHAT WE ARE TRYING TO DO, THEN I'LL GIVE SPECIFICS. OUR MAIN OBJECTIVE IS TO MAKE A PROTECTED DISK COPYABLE WITH THE FINDER, BUT MAKING A DISK COPYABLE WITH DISKCOPY WILL ALSO BE SUFFICIENT (THE EQUIVALENT OF THE "COPYA" TO THOSE OF YOU IN APPLE //-LAND). IF DISKCOPY SAYS THAT A DISK IS COPY-PROTECTED, WE MUST DISABLE THE DISKPROTECT BYTE ON BLOCK #2. IF THE FINDER SAYS THAT ANY FILES ON THE DISK CANNOT BE MOVED/DUPLICATED, WE MUST RESET THE ATTRIBUTE BYTE IN THE DIRECTORY FOR EACH FILE. IF DISKUTIL OR BLOCKSMITH CANNOT COPY THE ORIGINAL, THEN YOU WILL HAVE TO MAKE ANY INVISIBLE FILES VISIBLE (WITH SETFILE) AND MOVE ALL THE FILES TO ANOTHER DISK. HOPEFULLY THE FILES WILL NOT BE LOCATION-DEPENDANT. OK, LET'S CRACK THE BASIC GENERIC PROTECTION OF MOST PROGRAMS. FIRST COPY THE ORIGINAL WITH DISKUTIL OR WHATEVER, THEN USE SETFILE TO MAKE ALL INVISIBLE FILES VISIBLE (THIS IS OPTIONAL IF YOU WILL END UP WITH A "DISKCOPY", OR "COPYA", CRACK). NOW USE THE BLOCK EDITOR TO READ IN BLOCK #2, AND LOOK AT BYTE $0A (10 DECIMAL). THIS BYTE WILL MOST PROBABLY BE A $40, BUT WHATEVER IT IS, CHANGE IT TO A $00. NOW THE DISK CAN BE COPIED WITH DISKCOPY. NEXT READ IN BLOCK #4, WHICH SHOULD BE THE FIRST BLOCK OF THE DIRECTORY. A SHORT DESCRIPTION OF THE FORMAT OF EACH FILE ENTRY IS IN ORDER. (NOTE THAT THE LENGTH OF EACH ENTRY DEPENDS ON THE LENGTH OF THE FILE NAME, WHICH IS LAST). THE ZEROETH BYTE OF EACH ENTRY IS THE ATTRIBUTE BYTE WITH THE HIGH BIT SET. THE NEXT BYTE IS THE VERSON # (I THINK) AND IS USUALLY ZERO. THE NEXT FOUR WORDS (1 WORD = 2 BYTES) ARE THE FILE TYPE & CREATOR; THEY CAN BE CHANGED WITH SETFILE, BUT IT SHOULDN'T BE NECESSARY. NEXT COMES 20 WORDS (40 BYTES) OF DIFFERENT INFO ON THE FILE, NONE OF IT VERY IMPORTANT. THE NEXT BYTE IS THE LENGTH OF THE FILENAME AND THEN THE FILENAME IN POSITIVE ASCII. IMMEDIATELY FOLLOWING THE NAME (OR ON THE NEXT EVEN BYTE) IS THE ZEROETH BYTE OF THE NEXT ENTRY... SINCE THE ATTRIBUTE BYTE (AS DISPLAYED BY EXAMINEFILE) IS NORMALLY A ZERO, THE NORMAL VALUE OF THIS ZEROETH BYTE IS $80 (ZERO WITH THE HIGH BIT SET). FOR A PROTECTED FILE, THIS BYTE WILL BE A $C0. CHANGE IT TO AN $80. THIS FILE CAN NOW BE MOVED/DUPLICATED. THE TRICK TO THIS IS FINDING THE ATTRIBUTE BYTE FOR THE PROTECTED FILES. THE EASIEST WAY IS TO LOOK FOR FILENAMES IN THE ASCII DUMP ON THE RIGHT OF THE SCREEN (YOU ARE USING BLOCK EDITOR AREN'T YOU), AND THEN LOOK AT THE BYTE IMMEDIATELY AFTER THE NAME. IF IT'S A $C0, THEN THE ODDS ARE GOOD THAT IT SHOULD BE AN $80. YOU WILL GET USED TO FINDING WHAT YOU ARE LOOKING FOR.... ONCE YOU HAVE DE-PROTECTED THE DISK AND ITS FILES, THE DISK SHOULD BE COPYABLE WITH DISKCOPY. HOPEFULLY, IT WILL ALSO WORK IF YOU COPY THE FILES ALONE (ALL FILES MUST BE VISIBLE), BUT NOT NECESSARILY. TAKE PFS FOR EXAMPLE: THERE ARE TWO PROTECTED FILES ("PFS FIL E" & "PFS REPORT") AND TWO INVISIBLE FILES ("TRACK 2.TEXT" & "TRACK 3.TEXT") . PFS WORKS FINE WITH THE "TRACK" FILES VISIBLE AND THE OTHER TWO UNPROTECTED, BUT IF YOU TRY TO COPY THE FILES WITH THE FINDER, THE FILES WILL NOT END UP IN THE SAME PLACE ON THE DISK, SO PFS WON'T RUN ON THE FINDER COPY. (SO PFS IS A "COPYA" OR "DISKCOPY" JOB). OTHER PROBLEMS YOU MIGHT ENCOUNTER ARE MODIFIED FINDER & SYSTEM FILES. MACSLOTS REQUIRES ITS OWN SPECIAL SYSTEM FILE, SO YOU CAN'T PUT ANY SYSTEM-FILE-USING PROGRAMS ON WITH IT. (YOU CAN PUT SOMETHING LIKE ALICE ON WITH IT THOUGH). IF ANY NEW ADVANCES IN MAC-CRACKING EMERGE, I'LL CONTINE THE SAGA.... HAPPY MAC-CRACKING -- THE BYTE Fort Chappa 203-633-2616

---

E-Mail Fredric L. Rice / The Skeptic Tank