Jasi2169とのインタビュー

グレージャック
やあジャシ！ よろしければ、すべてのHabrahabr読者に質問をしたいと思います。

ジャスプリート・シン
はい、お願いします

グレージャック
ハングアウトで話し合っています-個人情報に関するプライバシーやGoogleからの漏洩について心配しませんか？ ちなみに、Google +にもアカウントがあります。 今では皆が妄想的になっているように見えますが、あなたではありません。 なぜ-あなたの活動を考慮して、あなたにはすべての権利がありますか？

ジャスプリート・シン
私はabtのアイデンティティを気にしません。私はグーグルグーグルです。私はどこから来ましたか。私は誰にも私の顔を見たくありません。自由を望むなら、アメリカに留まらない方が良いです。

グレージャック
いくつかのソフトウェアをクラックするので、誰もあなたに負担をかけませんか？ インドの法律は非常に寛容に見えます！ ））））

ジャスプリート・シン
私はインドの法律を破らないでください
また、2016年10月にソフトウェアを物理的にクラックしないuret patcherでのみ作業するため、以前のようにクラックを作成することも停止しました.Windowsでは、ソフトウェアを物理的にクラックするよりも、パッチ、ローダー、keygensまたはシリアルを作成する方が良いので、ユーザーに提供します彼らが望むならPATCH / GENERATEをクリックするオプション、それは彼ら自身の責任であるため、彼らは国内法を破りません。そうでなければ、PATCH / GENERATEボタンをクリックしてLucky Patcherが動作する方法であるソフトウェアをいっぱいにしないでください、それは/ユーザーが望んでいない限り。 URET PATCHERを作成するアイデアは、ユーザーが機能するかどうかを選択できるオプションを提供することでした。開発/反転スキルをテスト/強化するだけで、それを愛し、知識が力となり、ひび割れを供給しませんそれの背後にある何らかの理由がない限り、アプリはもうありません。また、Androidでも、2016年以来、私からの亀裂を見ましたか？ ositkpが強制終了する新しいアップデートで発行される問題を尋ねられたときにmxプレーヤーであった2つのクラックのみをリリースしました.1つはインドのストアで彼のアプリをブロックしたxprivacyプレミアムcusであり、彼が知っている1つの評価を与えました、それが唯一のクラックですしました。
ユーザーがパッチをクリックするか、彼の意志でパッチを適用するかどうかに依存するパッチを行ういくつかのアプリを作成する方が良いです、私は単に私のリバーススキルを強化し、パッチャーがあなたの開発スキルを強化するようにパッチをしました。

グレージャック
あなたについて少し教えてください。 私たちが今知っているのは、あなたの名前がジャスプレイト・シンであり、あなたはインド出身で、URET（United Reverse Engineering Team）クラッカーチームの一員であるということです。

ジャスプリート・シン
うん、Ouk lemmeがいくつかの情報を教えてくれます
私はインドにいて、米国に行きたいと思っていましたが、SAT試験でマークを取得できませんでした

グレージャック
SAT試験？ なに？

ジャスプリート・シン
アメリカに留学するための卒業試験
とにかく、2011年に最初のAndroid携帯電話galaxy yを購入したとき、4番手になりました。 私は米国で12級/クラス==専攻でした。
私が最初にすることは、オーディオとビデオプレーヤーをダウンロードすることです
最初にpoweampをダウンロードしました
15日後に停止しました。私は未成年者でしたが、銀行口座や支払い用のものなど何も停止していなかったため、ひどく欲しかったのです。
今ではそれはいまいましい悪役プレーヤーだったが、私はこのようにグーグルを検索した。
（今では多くのアプリを購入しており、powerampの2 diffライセンスも持っています;-)開発が本当に混乱していることを知っているのでアプリを使用する場合、開発者をサポートする必要があります）

グレージャック
それで、あなたは自分のカジノを作りました-ブラックジャックと売春婦で？ ）））））

ジャスプリート・シン
まだ仲間はまだ始まっていない
「poweramp music player version bla full」を検索しましたが、今でもこれを覚えており、チェルパのpowerampパッチャーパッチを取得しました。
その後、XDAでチェルパを見つけて、彼にメッセージを送ったあなたのようになりたいです笑私はまだそれを覚えています、それが始まった方法です
どうすればいいのかと尋ねましたが、彼はツールが必要だと言って、IDA proについて教えてくれたので、動画を見ることに興味を持ちました。
それは、最初は非常に複雑だった16進光線によるWindowsソフトウェアのディセンブラーです。
Ida proは使用方法がわからない前の最高のツールですが、アプリを静的に分析するのに最適なツールです
そのとき、私はこれをやった理由とブロ・チェルパに感謝し、彼がスキルを向上させていると言って、インターネット接続がなく、開発者が顧客をだますときがあると言ったので、私はいつもブロ・チェルパが私のメンターだと思います。
So thats how it was started he told me to look for original app and patched poweramp and couple of apps he patched and told me what he did.
That was hit/run type of patching and then i started learning language from internet java and visual basic all learnt from net made me clear now when it was start of 2014 i was good in developing & understanding the algos ,then i started making windows apps patches,loaders and there was time on URET i released a single byte patch for winchm and one guy named jaspreet singh came & said its lame it should be keygenned then i started making keygens. Thats a diff. Story
Then i started making keygens thats how it came mostly Dot Net, few native.
It was time devs used to message me its his app so i never release updates for that app,my blog was removed by google due to so many dmca that's why i made wordpress

Gray Jack
Have you studied IT (I mean college, university etc) or it's just a hobby?

Jaspreet Singh
Yes i took Bachelor in IT in college i am done with graduation now.

Gray Jack
なんで？ You don't want to get higher degree?

Jaspreet Singh
Nope its enough, degree are just a formality here ,in india to be honest skills have no value,they need numbers to get jobs n there is caste system so even if low caste guy get 30/100 he is passed & general category guys gets 70/100 he is failed,bad stuff.

Gray Jack
Yeah, look ridiculous.
It looks like a lot of time is spent for your cracking activity: lot of posts at jasi2169.wordpress.com, activity at 4pda forum, activity at uret.in — by the way your moderator there. Do you have a free time for private life at all?

Jaspreet Singh
I got job in multinational company named wipro i gave 2 interviews for ibm n wipro then i was selected in wipro but they wanted me to have masters for 4 years which was in their bond they were paying but i never wanted to study anymore
Google also removed blog www.jasi2169.blogspot.com which had everyday 2 or 3 cracks,patches either for windows or android released, i was so inside cracking and then due to so many dmcas google removed that blog so i made wordpress and i dont add that much cracks neither i do now a days.
So at this time i have no job and never tried either cus they bound you to do what you dont like and i made one app and added on play store it pays me around 6k indian rupees per month close to 100$ per month its not that much but enough for me as i am single & i live with mom n dad.
Now i do spend time ,before i was busy though,i only glance couple of forums only but not do that much,i just glance whats new n what are issues people getting in URET Patcher or Uret Android Reverser Toolkit 'thats all,since 2017 start i do have time but not that much for RCE.

Gray Jack
$100 per month is enough for single guy in India?

Jaspreet Singh
Its enough to be honest if you are single and you live with your parents,cus dad was in army so he gets pension and its enough to live,maybe it wont be enough when i be married ;-) though i see money is important nowdays but god knows whats written living life with the way it's going.

Gray Jack
So cracking for you was just a hobby and fun. Did some of developers of the programs you have cracked contact you trying to propose a good job? ;）

Jaspreet Singh
Nope no one did ,there was time i told mini militia devs to fix couple of simple loopholes if they can pay but they were not interested
Now in night i design website in freetime of someone pays kind of freelancing
In morning i am sleeping :-D mind works great in night.

Gray Jack
And do you have any future plans?

Jaspreet Singh
I wish i get some good jobs in google cus it pays good & have better environment atleast mom wont yell at me,private jobs here pay very less and now its easy cuz i live with parents n single but i knw it will be too hard in future and here big companies come in big universities like IIT they come in college and hire them and they dont look for other small universities guys,and to be honest in IIT you can get admission with that caste system i talked above.

Gray Jack
OK, clear.
By the way www.uret.in is registered in India. Do you have any issues with abuses?

Jaspreet Singh
I dont knw these guys personally to be honest,different places & people in team are from diff. countries even the admins are from india but they live in diff. countries.
It's a reverse engineering team,to be honest i respect teams like Core,lz0,arteam,at4re,SnD and many rce teams many talented guys in different countries living simple life.

Gray Jack
So you have no connection at all? Are you working as a separate crackers or some releases are made in cooperation of several crackers?

Jaspreet Singh
Nope the cracks or patches i release are cracked by me only though i release it on behalf of team URET,they provided me platform but i had platform before as blog as well.

Gray Jack
It's interesting, so there is no team chemistry inside — just a general platform.

Jaspreet Singh
We knw many guys we talk with them ,there is chemistry but everybody is anonymous though country is known.

Gray Jack
Except of you ;-)

Jaspreet Singh
I am still anonymous nobody knows where i live in india & how i look ;-)

Gray Jack
Taking into account 1 bln people in India — yeah, it makes sense ;-)

Jaspreet Singh
Yea so many people

Gray Jack
OK, so how did you come to URET and why URET?

Jaspreet Singh
D0nt knw it was random,i was on SnD team forum and then heard about team irec which expands indian reverse engi. Club so INDIAN guys so wanted to talk to them, then i got to knw about it and i got offer from Phoenix (Admin) to join and then joined it.

Gray Jack
OK, clear.
What do you think about progress in Android OS and applications for it? Is it harder to crack it now than before?

Jaspreet Singh
Yup
Its not hard i have a way same as google server how they works i can make them work even whatever the protection is used what it need is xposed,i guess it is so easy since xposed came in no modification required.

Gray Jack
But for newer version of Android Xposed is not released yet, correct?

Jaspreet Singh
Its released for android 8 ,2 weeks back
In beta

Gray Jack
OK.
Let's talk about URET Patcher. Is it only your idea and product or somebody else from your team involved? I know chelpa helped you also, correct?

Jaspreet Singh
It's my idea and i only single handedly worked on it but bro chelpa helped me & i used to give some info to bro chelpa like support for android 8 i fixed it first n told bro chelpa couple of new stuff in android 8 then LP, as you knw dalvik patch n code patch are basically a odex type patch in LP invented by bro chelpa.
Bro chelpa helped me in dalvik patch and with lollipop instruction patch/CRC fix else before patch was gone on every reboot for some firmwares on lollipop
Chelpa is master.

Gray Jack
But ART replaced Dalvik in newer Android.

Jaspreet Singh
Yeah i knw but art patch is simple whereas dalvik needs more fixes,its not like you replaced or added bytes and patch done like in windows ,in android even a single byte change makes file corrupt then you need to patch md5,sig and crc32,adler32 and make system think the changes are made by android system.

Gray Jack
So moving from Dalvik to ART makes patching more simple?

Jaspreet Singh
Not simple but tricky but it took me less steps to patch then dalvik,it required couple of more steps n algos to patch, its tricky cus from art u need to detect cpu and 32/64bit and then check system location n then start the work,on dalvik was simple but fixes required more steps fixing timestamp native C time n other dalvik fixes it loops more.
From android 6 loops are less ,android 8 had more loops the way i patch

Gray Jack
I know you have released a lot of standalone patches, then it moves to «all-in-one» URET Patcher and now it looks like you are trying to build a general approach — without generating cracks for single applications? Is it true?

Jaspreet Singh
Yea its already done,its called emulation, license & billing emulation is general simple approach works like google servers but offline,so if app doesnot have online authorization billing n license will work offline lifetime.
Online cant be patched,i do had online check idea to patch but i did not implemented yet n it will be beast then it will be hard for devs to save cus i will make offline server authorization if everything went as plan but god knows.

Gray Jack
And what is difference from Lucky Patcher, Freedom and everything else that «emulates» Google respond on license?

Jaspreet Singh
Freedom n LP has same approach for emulation,UP emulation is clone of google server send legit stuff not random stuff everything is properly calculated with proper algos and it totally bypass libs of google inside the app with its own.

Gray Jack
You told about online check bypassing. So you have future plans in this field? I am asking because last update of URET Patcher was in 31/Oct/2017. As for another your product — Uret Android Reverser Toolkit — last update was in 20/Jun/2017. After that we can see mainly Windows software cracks from you. So somebody starts talking you are tired with Android moving to Windows.

Jaspreet Singh
Nope windows patches was due to someone close asked only 2 patches done for windows

Gray Jack
So — briefly — what are future plans for URET Patcher?

Jaspreet Singh
Uret patcher needs ideas n stuff to be added in todo list then i need 4 or 5 days break totally off cus when i update UP it's last 5 days includes working 16 or 18 hours of work on it with testing on each n every build of android on emulators with all the possible inputs if it works perfect or issues
Right now i am waiting for android 8 on my device then i will work though i have fixed code n dalvik patch on android 8 with some user help who tested on his android 8 but when u have your own you can test as much u can
Right now fixes are in my mind n some couple of features excluding patching and then updating custom patches for some apps n then online stuff working

Gray Jack
I can bet your device is OnePlus 5 device ))))))
Looks like very dedicated work. I hope that someone will recognize it providing a good job for you!

Jaspreet Singh
Nope i have galaxy s7
Old device from someone

Gray Jack
Damn, I've lost my bet!

Jaspreet Singh
Haha yup you do

Jaspreet Singh
Now s9 is coming someone will sell s8 i will sell s7 n buy s8 it makes me to get update for latest android as samsung provide android 2 major updates
This is how i get to know on android 7 on samsung devices UP n LP used to makes device reboot
When i get s7 this is what i tested many people emailed me
Then someone tested for me and then i fixed n let chelpa know knox was issue which made laumching UP n LP reboot knox smasung devices n which is fixed now

Gray Jack
Personally I wished to buy new Huawei with latest Kirin — but now waiting for Snapdragon 845 this year. Till then — I have a pain-in-ass Galasy S3 ))))
And yes — sometime vendor-specific protection causes problems.
Knox is just an example, LG has it's own etc.

Jaspreet Singh
Well i prefer samsung devices for testing as it has many issues and used different approach and is in more quantity in the world so it should work on android OS released on samsung devices,PS i like SAMSUNG ;-)

Gray Jack
OK, I see.
I am pretty sure more questions to you can arise from everybody who will visit and discuss tis interview at Habrahabr. Can I combine them and ask you later after this interview will be published?

Jaspreet Singh
No problem feel free to ask
Bye see yeah!