Interview with Jasi2169
Hello.
Today, this Saturday night, I want to offer an interview with Jaspreet Singh (also known as Jasi2169), a member of the URET reverse team.
The interview took place a couple of days ago.
I hope this material is of interest to the IT community, maybe someone wants to ask questions, which we will then send to Jasi.
Write questions in the comments. A set of questions will be made until the end of January, after which I will try to bring them together and send them to the addressee.
But this will already be a completely different publication (if any).
So…
I
Hi, Jasi! If you don't mind, I would like to ask you a few questions for all readers of the Habrahabr resource.
Jaspreet Singh
Yes, come on.
I'm
talking to you through Hangouts now - are you worried about a possible leak of data about your identity? By the way, you have a Google+ account. Nowadays, everyone is paranoid - but not you. Why - because taking into account your activity, you have all the rights to worry about anonymity?
Jaspreet Singh
I do not care about all this, I know that Google knows where I come from. I just don't want anyone to know my face. In general, it is better to stay away from the United States if you want freedom.
I
So no one bothers you about hacking software? It seems that Indian laws are very bearable!
Jaspreet Singh
I do not violate Indian laws, and I do not crack Indian software, except for modifying games - and these are private hacks for training purposes.
In addition, I stopped publishing hacked software since October 2016, now I am mostly busy working on URET Patcher and do not physically hack software. True, I released two - it was MX Player at the request of the ositkp user from w3bsit3-dns.com forum - he wrote to me that the new version crashes at startup. And there was XPrivacy Premium - the developer just blocked his application for India, and by the way he is aware of this hack. I'm not going to release hacked releases anymore unless there is some special reason.
It is better to make patches, keygens or publish serial numbers than to crack software - in this case you give the user the choice to click PATCH / GENERATE or not - and in this case it is his responsibility to violate possible laws. So, by the way, Lucky Patcher works: it does not hack software, but gives the user the choice to do this or not. We just hone our reversal abilities and we like it, because knowledge is power. Well, by the way, this improves the development skills of the software manufacturer.
I
Could you tell us a little about yourself? All I know is that your name is Jaspreet Singh, you are from India, and you are a member of the URET (United Reverse Engineering Team).
Jaspreet Singh
Yeah, well then a little about me.
Yes, this is true - I am from India, and there was a time when I wanted to leave for the USA, but did not get the proper marks on the SAT exam, haha, no luck, yeah.
Am I a
SAT Exam? What is it?
Jaspreet Singh
Exam for study in the USA.
Well, and when I bought my first Android phone - it was the end of 2011 and Samsung Galaxy Y. I was then in grade 12 - well, this is a graduation class by the standards of the United States.
The first thing I installed was a media player.
I downloaded PowerAmp. It stopped working after 15 days, and I did not have a bank account or money - nothing, and the player did not work, as if I did not want it.
Well, I started digging into Google, I had no idea what patches, cracks were, I was completely new in this world. By the way, now I have quite a lot of legally acquired software and two different legal licenses for PowerAmp. And I really think that we should support the developers of good software, because to whom, if not to me, to know that development is really difficult.
I
Well, in the end you built your casino with blackjack and whores? )))
Jaspreet Singh
No, buddy, this is just the beginning of the story.
So, I was looking for something like “poweramp music player version full blablabla” - damn I still remember that! - and I found a player patcher from chelpa (developer Lucky Patcher - approx.). So I watched the video, realized how it was done, patched the player and started looking for this guy chelpa.
I found him on xda, and I write to him: “I want to be like you,” haha, I still remember that too! Well, it all started ...
I asked him how such things are generally done, well, he answered that special tools are needed, told me about IDA Pro. I was curious, I again found various training videos - and it started!
I must say that this HexRays disassembler is very complicated at first. Nevertheless, it is the best tool for static analysis of applications.
I once asked chelpa why is he doing this? And he replied: "This increases my knowledge, sometimes the user simply does not have the Internet or it is simply impossible to make online purchases, and indeed developers often inflate their users." In general, I have always believed and still believe that chelpa is my mentor.
Well, that's how it all started - chelpa told me to compare the original PowerAmp file and the patched one, well, showed a couple of other applications and told how it patched them.
Those patches were so, nonsense, then I started learning Java and Visual Basic - everything is on the Internet! In 2014, I already began to understand the basic algorithms, I began to make patches for Windows, some loaders. And once I published a simple single-byte patch for WinCHM on the URET platform - and here on the forum some guy under the nickname Jaspreet Singh writes: “Well, you are a lamer, you have to keygen here!” That's how I started making keygens, basically they .Net, Well, there are several on the native.
This was the time when the software manufacturer started attacking me, if this happened - well, I stopped updating my patches and keygens, but nevertheless, over time, my blog where I published all this was deleted by Google due to DMCA complaints. That's how I moved to Wordpress.
I
Did you even study IT (well, I mean college, university, etc.) or is it just a hobby?
Jaspreet Singh
Yes, I got a bachelor's degree in college, but after that I don't want to study anymore.
I
why? Why don't you want to get a higher degree?
Jaspreet Singh
No, that's enough! In India, all these degrees do not matter; this is a simple formality. We have a caste system, it determines whether you get to work or not.
I
Yes, it looks stupid.
You spend so much time on your activity: a lot of posts on jasi2169.wordpress.com, write on the forum w3bsit3-dns.com, on URET.in - there you are generally in the status of a moderator. Do you still have time for personal life?
Jaspreet singh
I had a job at the multinational company Wipro - I remember how I came for two interviews at IBM and Wipro, and then I was invited to work. But then Winpro wanted me to get a master's degree for 4 years under the contract (they paid for the training), but I do not want any more training. So I left.
Well, as I said, Google deleted www.jasi2169.blogspot.com , on which I posted 2-3 patches for different software every day, I moved to Wordpress, and to be honest I’m not as active there as I was before .
In short, now I’m unemployed and somehow I’m not looking yet, because at work they bind you with the obligation to do what you don’t like. I wrote one application for the market, now it brings me about $ 100 per month. In principle, I have enough - I am a young bachelor and live with my parents.
Yes, I look at a couple of forums, but not so much - basically, I track problems with the URET Patcher and the URET Android Reverser Toolkit, so I have had enough time since 2017.
I'm
$ 100 a month - is that enough for a bachelor in India?
Jaspreet Singh
Honestly, yes. Well, besides, my father is a former military man, he receives a pension, and we have enough. Maybe someday I will marry and I will be few. I understand that now money is important, but as it is destined, it will be so.
I
So, hacking programs is your hobby. Did the manufacturers of hacked software contact you and offer a job?
Jaspreet Singh
No, no one. I once wrote to the developers of Mini Militia that I could close several vulnerabilities, but they were not interested.
I’m doing web design at night now, well, it's kind of freelancing. Well, in the afternoon I sleep. I like to work at night.
I
And what are your plans for the future?
Jaspreet singh
Well, in general, it would be nice to get a good job on Google - they pay well and a good atmosphere, although my mother does not yell :) Private work is poorly paid, and it is clear that sooner or later it will be necessary to take up the mind and it will be very difficult. Now large companies come to large universities and hire workers from there, they are not interested in graduates of small educational organizations. Well, the caste system, I already said.
I
get it.
By the way, www.URET.in is registered in India. You have no problems with complaints about the resource?
Jaspreet singh
Honestly, I do not personally know these guys. Different people from different places participate in the team, even the administrators, even though originally from India, live in different countries. This is an ordinary team of reversers, I know and really respect other teams - Core, lz0, arteam, at4re, SnD - talented guys in different countries who live their simple lives.
Me.
So you don’t communicate at all? Each release is the result of the work of one person, you do not have general releases?
Jaspreet Singh
Well, my releases are the result of only my work. I release them on behalf of the team, they provided me with a platform, but in general I have my own blog and my own platform too.
I
wonder, that is, in a team you have no communication - only a common platform?
Jaspreet singh
No, well, we communicate, but no more - everyone is anonymous, although which country from which we know.
I am
besides you.
Jaspreet Singh
Well, I am also anonymous - no one knows where I live in India and how I look.
I
Well, taking into account that in India a billion people are yes.
Jaspreet Singh
Yes, there are a lot of people.
I'm
fine, so why did you choose URET?
Jaspreet Singh
I don’t know, quite by accident, I was on the SnD team forum, and I heard that some team was expanding the club of Indian reversers there, I talked with them, and then Phoenix invited me to join the team, and I agreed.
I
get it.
What do you think about the development of Android OS and applications for it? Is it harder to hack?
Jaspreet Singh
No, not harder. Google servers both worked and work, I can bypass checks as before. All you need is Xposed. With its appearance, you do not need to change the code at all.
I
But it seems that Xposed for new versions of Android has not yet been released?
Jaspreet Singh
No, it was already released under Android 8, two weeks ago.
True, still beta.
I
see.
Let's talk about URET Patcher. Is this your idea or did someone help from the team? I know that chelpa helped, right?
Jaspreet singh
This is my idea and only I worked on it, but yes - chelpa helped. We talked, especially regarding changes in Android 8, including with regard to the work of Lucky Patcher in this OS. Well, you know Lucky Patcher - he patches the code and dalvik, he invented and supports his chelpa.
Chelpa helped me a lot in working with dalvik, especially with patching and checking CRC on Lollipop, and then with every reboot of the device all the changes flashed.
Chelpa is generally very cool.
I
But in new versions of Android Dalvik has changed to ART.
Jaspreet Singh
Well yes, but it's even easier. Dalvik required more edits, this is not just replacing or adding bytes, as in Windows, in Android, even replacing one byte requires patching md5, crc32, adler32 - otherwise the system will not accept the file.
I
That is, with the transition to ART it became even easier?
Jaspreet Singh
Not easier, there are nuances, too, but fewer steps have been required in patching than with Dalvik. Yes, the algorithms became a little more complicated, it became necessary to determine the processor and bit depth, determine the position of the system, and only then work - this was not in Dalvik, but there were more steps in editing signatures and other things.
Well, everywhere its nuances.
I
know that earlier you released quite a lot of patches for specific Android applications. Then URET Patcher appeared - an all-in-one solution, and now you are trying to make some general generic that will work for any application - without creating separate patches. Did I set everything right?
Jaspreet singh
Well, yes, in principle, this has already been done - called emulation of licenses and billing. This approach is an offline substitution of Google server responses. Thus, the application will consider itself licensed forever.
So far, the online check is not deceived, but I have a few ideas in this direction. When I realize this, it will be a plague. Developers will not be able to get around this, but so far these are only plans.
Me
And then what is the difference between URET Patcher from Lucky Patcher, Freedom and all other solutions that “emulate” Google’s response to a license request?
Jaspreet singh
Freedom and LP are similar in this, and URET Patcher is different. I made an actual clone of Google servers that sends the correct answer to the request, calculated according to the correct algorithm with a full crawl of all Google libraries in the application.
I have
you mentioned online verification cheating. So these are your plans for future development? Why I ask - the last update of URET Patcher was on October 31, 2017, and the other of your development - URET Android Reverser Toolkit - on June 20, 2017. After that there were releases for programs for Windows, and generally there were rumors that you were tired of Android, and you switched to Windows.
Jaspreet Singh
No, those releases are just some close people asked me, so I released a couple under Windows.
I
Well then - briefly - what are the plans for the development of URET Patcher?
Jaspreet Singh
Well, I need to complete the list of everything that needs to be done and changed in URET Patcher, and then I need to fall out of life for 4-5 days. It's just that when I update this patcher, it usually takes me so much time, with 16-18 hours of work every day. It is necessary to check the work on each version of Android in emulators, check all possible situations in order to eliminate errors and failures.
Now I am waiting for the upgrade to Android 8 on my device, after which I will start working. I already made some corrections in patches for Android 8, and one user even tested them on their device, but before the general release I want to check everything myself.
Now I plan mainly some edits, adding a couple of additional features, updating patches of some programs - and of course the online check, which I already mentioned.
I
bet that your device is OnePlus 5.
But in general it looks like a very painstaking work. I hope someone appreciates such efforts and offers you a really good robot!
Jaspreet Singh
No, I have a Galaxy S7.
What have b / y)
I'm
Damn, I blew the bet!
Jaspreet Singh haha
yes.
Now S9 will come out and sales of cheap S8 will start, then I will sell S7 and switch to S8. In principle, I do this all the time, this allows me to receive the latest Android updates. Because Samsung’s general policy is two major updates, after which support is virtually discontinued.
Basically, that’s how I found out that the URET Patcher and Lucky Patcher patches on Android 7 in Samsung phones caused a reboot of the device.
I saw this on S7, after many users wrote about it to me. It turned out that this was caused by Knox - I solved the problem and unsubscribed by chelpa, he fixed it in Lucky Patcher.
I
Why Samsung? Do different manufacturers have different protections?
Jaspreet singh
Well, I prefer Samsung, because most of the problems are with them. Well, and besides, they are the most in the world. Yes, and I like Samsung!
I
see.
I think that readers of Habrahabr may still have a question for you after reading this material. Can I put them together and then ask you?
Jaspreet Singh
Yes no problem, ask!
Until!
At the request - the original in English under the spoiler.
Gray Jack
Hi, Jasi! I would like to ask you some questions for all Habrahabr readers if you don't mind.
Jaspreet Singh
Yes ask go ahead
Gray Jack
We are talking through Hangouts — don't you worry about privacy and leaks from Google concerning your identity? By the way you have an account in Google+ also. Now it looks like everybody becomes paranoid — but not you. Why — taking into account your activity you have all rights to be?
Jaspreet Singh
I dont care abt identity i knw google already knw where i am from,i just dont want anybody to see my face though,it's better to stay out of USA if you want freedom.
Gray Jack
So nobody strains you because crack some software? The laws in India looks very tolerant! ))))
Jaspreet Singh
I dont break indian laws neither indian softwares only games modification which are private for educational purposes/learning.
I also stopped making cracks the way i used to be,since oct 2016 i only work on uret patcher not cracking any software physically,like on windows its better to make patch,loader,keygens or serial rather than crack software physically so you give user a option to click PATCH/GENERATE if they want to,it's their own resposibility so they are not breaking their domestic laws else they should not click PATCH/GENERATE buttons to make software full that's how Lucky Patcher works,it doesnot crack any software until/unless user wants it to be. That was the idea for the creation of URET PATCHER to give users option if they want to make it work or leave it,we just test/enhance our developing/reversing skills and we love it,knowledge is the power,i do not supply cracked apps anymore unless it's some reason behind it,also on android have you seen any crack from me since 2016? I did only released two crack one was mx player when ositkp asked me issue coming in new update it force closes and one was xprivacy premium cus that guy blocked his app in india store plus he gave 1 rating he knows that, that's the only cracks i did.
Its better to make some apps which does patching cus its dependent on user to click patch or want to patch on his will,i did patch just to enhance my reversing skills and making patcher enhance your developing skills.
Gray Jack
Could you tell us a little about you. All we know now is that your name is Jaspreet Singh, you are from India and as a part of URET (United Reverse Engineering Team) crackers team.
Jaspreet Singh
Yup ouk lemme tell you some of the infos
Yea thats true i am in india and there was time i wanted to goto US but i didnot get marks in SAT exam haha bad luck anyway
Gray Jack
SAT exam? What is it?
Jaspreet Singh
Exam for graduation to study in USA
Anyway when i bought first android phone galaxy y in 2011 it came in 4th qut. I was in 12th class/ class == major in US.
The first thing i do is download audio n video player
I downloaded poweamp thats the start
It stopped after 15days i was minor didnot had any bank account and stuff to pay or anything it stopped so i wanted it badly.
Now it was damn badass player but i searched google like this i didnot knw what is crack,patch stuff is,i was new in this world.
(Now i have many apps purchased and have 2 diff. license for poweramp as well ;-) we should support developers if we use their apps as i know developing is really a mess)
Gray Jack
So you built your own Casino — with black-jack and whores? )))))
Jaspreet Singh
Not yet bro still start
I searched «poweramp music player version bla full» i still remember this and then i got a way poweramp patcher patch by chelpa now i saw videos n patched poweramp n then searched about bro chelpa
Then found chelpa on xda then messaged him i want to be like you hahah i still remember that, that's how it started
I asked how you do that he told me u need tools and told me about IDA pro thats what made me curious watching videos n stuff how it works n all started it
It's Windows software dissembler by hex rays it was very complicated in the start
Ida pro is best tool before i did not knew how to use but it is best tool to analyze the app statically
At that time i asked bro chelpa thanks for doing this and why he does this ,he told me he is enhancing his skills and there are times when there is no internet connection and developers trick customers,so i always think bro chelpa is my mentor.
So thats how it was started he told me to look for original app and patched poweramp and couple of apps he patched and told me what he did.
That was hit/run type of patching and then i started learning language from internet java and visual basic all learnt from net made me clear now when it was start of 2014 i was good in developing & understanding the algos ,then i started making windows apps patches,loaders and there was time on URET i released a single byte patch for winchm and one guy named jaspreet singh came & said its lame it should be keygenned then i started making keygens. Thats a diff. Story
Then i started making keygens thats how it came mostly Dot Net, few native.
It was time devs used to message me its his app so i never release updates for that app,my blog was removed by google due to so many dmca that's why i made wordpress
Gray Jack
Have you studied IT (I mean college, university etc) or it's just a hobby?
Jaspreet Singh
Yes i took Bachelor in IT in college i am done with graduation now.
Gray Jack Янв
Why? You don't want to get higher degree?
Jaspreet Singh
Nope its enough, degree are just a formality here ,in india to be honest skills have no value,they need numbers to get jobs n there is caste system so even if low caste guy get 30/100 he is passed & general category guys gets 70/100 he is failed,bad stuff.
Gray Jack
Yeah, look ridiculous.
It looks like a lot of time is spent for your cracking activity: lot of posts at jasi2169.wordpress.com, activity at 4pda forum, activity at uret.in — by the way your moderator there. Do you have a free time for private life at all?
Jaspreet Singh
I got job in multinational company named wipro i gave 2 interviews for ibm n wipro then i was selected in wipro but they wanted me to have masters for 4 years which was in their bond they were paying but i never wanted to study anymore
Google also removed blog www.jasi2169.blogspot.com which had everyday 2 or 3 cracks,patches either for windows or android released, i was so inside cracking and then due to so many dmcas google removed that blog so i made wordpress and i dont add that much cracks neither i do now a days.
So at this time i have no job and never tried either cus they bound you to do what you dont like and i made one app and added on play store it pays me around 6k indian rupees per month close to 100$ per month its not that much but enough for me as i am single & i live with mom n dad.
Now i do spend time ,before i was busy though,i only glance couple of forums only but not do that much,i just glance whats new n what are issues people getting in URET Patcher or Uret Android Reverser Toolkit 'thats all,since 2017 start i do have time but not that much for RCE.
Gray Jack
$100 per month is enough for single guy in India?
Jaspreet Singh
Its enough to be honest if you are single and you live with your parents,cus dad was in army so he gets pension and its enough to live,maybe it wont be enough when i be married ;-) though i see money is important nowdays but god knows whats written living life with the way it's going.
Gray Jack
So cracking for you was just a hobby and fun. Did some of developers of the programs you have cracked contact you trying to propose a good job? ;)
Jaspreet Singh
Nope no one did ,there was time i told mini militia devs to fix couple of simple loopholes if they can pay but they were not interested
Now in night i design website in freetime of someone pays kind of freelancing
In morning i am sleeping :-D mind works great in night.
Gray Jack
And do you have any future plans?
Jaspreet Singh
I wish i get some good jobs in google cus it pays good & have better environment atleast mom wont yell at me,private jobs here pay very less and now its easy cuz i live with parents n single but i knw it will be too hard in future and here big companies come in big universities like IIT they come in college and hire them and they dont look for other small universities guys,and to be honest in IIT you can get admission with that caste system i talked above.
Gray Jack
OK, clear.
By the way www.uret.in is registered in India. Do you have any issues with abuses?
Jaspreet Singh
I dont knw these guys personally to be honest,different places & people in team are from diff. countries even the admins are from india but they live in diff. countries.
It's a reverse engineering team,to be honest i respect teams like Core,lz0,arteam,at4re,SnD and many rce teams many talented guys in different countries living simple life.
Gray Jack
So you have no connection at all? Are you working as a separate crackers or some releases are made in cooperation of several crackers?
Jaspreet Singh
Nope the cracks or patches i release are cracked by me only though i release it on behalf of team URET,they provided me platform but i had platform before as blog as well.
Gray Jack
It's interesting, so there is no team chemistry inside — just a general platform.
Jaspreet Singh
We knw many guys we talk with them ,there is chemistry but everybody is anonymous though country is known.
Gray Jack
Except of you ;-)
Jaspreet Singh
I am still anonymous nobody knows where i live in india & how i look ;-)
Gray Jack
Taking into account 1 bln people in India — yeah, it makes sense ;-)
Jaspreet Singh
Yea so many people
Gray Jack
OK, so how did you come to URET and why URET?
Jaspreet Singh
D0nt knw it was random,i was on SnD team forum and then heard about team irec which expands indian reverse engi. Club so INDIAN guys so wanted to talk to them, then i got to knw about it and i got offer from Phoenix (Admin) to join and then joined it.
Gray Jack
OK, clear.
What do you think about progress in Android OS and applications for it? Is it harder to crack it now than before?
Jaspreet Singh
Yup
Its not hard i have a way same as google server how they works i can make them work even whatever the protection is used what it need is xposed,i guess it is so easy since xposed came in no modification required.
Gray Jack
But for newer version of Android Xposed is not released yet, correct?
Jaspreet Singh
Its released for android 8 ,2 weeks back
In beta
Gray Jack
OK.
Let's talk about URET Patcher. Is it only your idea and product or somebody else from your team involved? I know chelpa helped you also, correct?
Jaspreet Singh
It's my idea and i only single handedly worked on it but bro chelpa helped me & i used to give some info to bro chelpa like support for android 8 i fixed it first n told bro chelpa couple of new stuff in android 8 then LP, as you knw dalvik patch n code patch are basically a odex type patch in LP invented by bro chelpa.
Bro chelpa helped me in dalvik patch and with lollipop instruction patch/CRC fix else before patch was gone on every reboot for some firmwares on lollipop
Chelpa is master.
Gray Jack
But ART replaced Dalvik in newer Android.
Jaspreet Singh
Yeah i knw but art patch is simple whereas dalvik needs more fixes,its not like you replaced or added bytes and patch done like in windows ,in android even a single byte change makes file corrupt then you need to patch md5,sig and crc32,adler32 and make system think the changes are made by android system.
Gray Jack
So moving from Dalvik to ART makes patching more simple?
Jaspreet Singh
Not simple but tricky but it took me less steps to patch then dalvik,it required couple of more steps n algos to patch, its tricky cus from art u need to detect cpu and 32/64bit and then check system location n then start the work,on dalvik was simple but fixes required more steps fixing timestamp native C time n other dalvik fixes it loops more.
From android 6 loops are less ,android 8 had more loops the way i patch
Gray Jack
I know you have released a lot of standalone patches, then it moves to «all-in-one» URET Patcher and now it looks like you are trying to build a general approach — without generating cracks for single applications? Is it true?
Jaspreet Singh
Yea its already done,its called emulation, license & billing emulation is general simple approach works like google servers but offline,so if app doesnot have online authorization billing n license will work offline lifetime.
Online cant be patched,i do had online check idea to patch but i did not implemented yet n it will be beast then it will be hard for devs to save cus i will make offline server authorization if everything went as plan but god knows.
Gray Jack
And what is difference from Lucky Patcher, Freedom and everything else that «emulates» Google respond on license?
Jaspreet Singh
Freedom n LP has same approach for emulation,UP emulation is clone of google server send legit stuff not random stuff everything is properly calculated with proper algos and it totally bypass libs of google inside the app with its own.
Gray Jack
You told about online check bypassing. So you have future plans in this field? I am asking because last update of URET Patcher was in 31/Oct/2017. As for another your product — Uret Android Reverser Toolkit — last update was in 20/Jun/2017. After that we can see mainly Windows software cracks from you. So somebody starts talking you are tired with Android moving to Windows.
Jaspreet Singh
Nope windows patches was due to someone close asked only 2 patches done for windows
Gray Jack
So — briefly — what are future plans for URET Patcher?
Jaspreet Singh
Uret patcher needs ideas n stuff to be added in todo list then i need 4 or 5 days break totally off cus when i update UP it's last 5 days includes working 16 or 18 hours of work on it with testing on each n every build of android on emulators with all the possible inputs if it works perfect or issues
Right now i am waiting for android 8 on my device then i will work though i have fixed code n dalvik patch on android 8 with some user help who tested on his android 8 but when u have your own you can test as much u can
Right now fixes are in my mind n some couple of features excluding patching and then updating custom patches for some apps n then online stuff working
Gray Jack
I can bet your device is OnePlus 5 device ))))))
Looks like very dedicated work. I hope that someone will recognize it providing a good job for you!
Jaspreet Singh
Nope i have galaxy s7
Old device from someone
Gray Jack
Damn, I've lost my bet!
Jaspreet Singh
Haha yup you do
Jaspreet Singh
Now s9 is coming someone will sell s8 i will sell s7 n buy s8 it makes me to get update for latest android as samsung provide android 2 major updates
This is how i get to know on android 7 on samsung devices UP n LP used to makes device reboot
When i get s7 this is what i tested many people emailed me
Then someone tested for me and then i fixed n let chelpa know knox was issue which made laumching UP n LP reboot knox smasung devices n which is fixed now
Gray Jack
Personally I wished to buy new Huawei with latest Kirin — but now waiting for Snapdragon 845 this year. Till then — I have a pain-in-ass Galasy S3 ))))
And yes — sometime vendor-specific protection causes problems.
Knox is just an example, LG has it's own etc.
Jaspreet Singh
Well i prefer samsung devices for testing as it has many issues and used different approach and is in more quantity in the world so it should work on android OS released on samsung devices,PS i like SAMSUNG ;-)
Gray Jack
OK, I see.
I am pretty sure more questions to you can arise from everybody who will visit and discuss tis interview at Habrahabr. Can I combine them and ask you later after this interview will be published?
Jaspreet Singh
No problem feel free to ask
Bye see yeah!
Hi, Jasi! I would like to ask you some questions for all Habrahabr readers if you don't mind.
Jaspreet Singh
Yes ask go ahead
Gray Jack
We are talking through Hangouts — don't you worry about privacy and leaks from Google concerning your identity? By the way you have an account in Google+ also. Now it looks like everybody becomes paranoid — but not you. Why — taking into account your activity you have all rights to be?
Jaspreet Singh
I dont care abt identity i knw google already knw where i am from,i just dont want anybody to see my face though,it's better to stay out of USA if you want freedom.
Gray Jack
So nobody strains you because crack some software? The laws in India looks very tolerant! ))))
Jaspreet Singh
I dont break indian laws neither indian softwares only games modification which are private for educational purposes/learning.
I also stopped making cracks the way i used to be,since oct 2016 i only work on uret patcher not cracking any software physically,like on windows its better to make patch,loader,keygens or serial rather than crack software physically so you give user a option to click PATCH/GENERATE if they want to,it's their own resposibility so they are not breaking their domestic laws else they should not click PATCH/GENERATE buttons to make software full that's how Lucky Patcher works,it doesnot crack any software until/unless user wants it to be. That was the idea for the creation of URET PATCHER to give users option if they want to make it work or leave it,we just test/enhance our developing/reversing skills and we love it,knowledge is the power,i do not supply cracked apps anymore unless it's some reason behind it,also on android have you seen any crack from me since 2016? I did only released two crack one was mx player when ositkp asked me issue coming in new update it force closes and one was xprivacy premium cus that guy blocked his app in india store plus he gave 1 rating he knows that, that's the only cracks i did.
Its better to make some apps which does patching cus its dependent on user to click patch or want to patch on his will,i did patch just to enhance my reversing skills and making patcher enhance your developing skills.
Gray Jack
Could you tell us a little about you. All we know now is that your name is Jaspreet Singh, you are from India and as a part of URET (United Reverse Engineering Team) crackers team.
Jaspreet Singh
Yup ouk lemme tell you some of the infos
Yea thats true i am in india and there was time i wanted to goto US but i didnot get marks in SAT exam haha bad luck anyway
Gray Jack
SAT exam? What is it?
Jaspreet Singh
Exam for graduation to study in USA
Anyway when i bought first android phone galaxy y in 2011 it came in 4th qut. I was in 12th class/ class == major in US.
The first thing i do is download audio n video player
I downloaded poweamp thats the start
It stopped after 15days i was minor didnot had any bank account and stuff to pay or anything it stopped so i wanted it badly.
Now it was damn badass player but i searched google like this i didnot knw what is crack,patch stuff is,i was new in this world.
(Now i have many apps purchased and have 2 diff. license for poweramp as well ;-) we should support developers if we use their apps as i know developing is really a mess)
Gray Jack
So you built your own Casino — with black-jack and whores? )))))
Jaspreet Singh
Not yet bro still start
I searched «poweramp music player version bla full» i still remember this and then i got a way poweramp patcher patch by chelpa now i saw videos n patched poweramp n then searched about bro chelpa
Then found chelpa on xda then messaged him i want to be like you hahah i still remember that, that's how it started
I asked how you do that he told me u need tools and told me about IDA pro thats what made me curious watching videos n stuff how it works n all started it
It's Windows software dissembler by hex rays it was very complicated in the start
Ida pro is best tool before i did not knew how to use but it is best tool to analyze the app statically
At that time i asked bro chelpa thanks for doing this and why he does this ,he told me he is enhancing his skills and there are times when there is no internet connection and developers trick customers,so i always think bro chelpa is my mentor.
So thats how it was started he told me to look for original app and patched poweramp and couple of apps he patched and told me what he did.
That was hit/run type of patching and then i started learning language from internet java and visual basic all learnt from net made me clear now when it was start of 2014 i was good in developing & understanding the algos ,then i started making windows apps patches,loaders and there was time on URET i released a single byte patch for winchm and one guy named jaspreet singh came & said its lame it should be keygenned then i started making keygens. Thats a diff. Story
Then i started making keygens thats how it came mostly Dot Net, few native.
It was time devs used to message me its his app so i never release updates for that app,my blog was removed by google due to so many dmca that's why i made wordpress
Gray Jack
Have you studied IT (I mean college, university etc) or it's just a hobby?
Jaspreet Singh
Yes i took Bachelor in IT in college i am done with graduation now.
Gray Jack Янв
Why? You don't want to get higher degree?
Jaspreet Singh
Nope its enough, degree are just a formality here ,in india to be honest skills have no value,they need numbers to get jobs n there is caste system so even if low caste guy get 30/100 he is passed & general category guys gets 70/100 he is failed,bad stuff.
Gray Jack
Yeah, look ridiculous.
It looks like a lot of time is spent for your cracking activity: lot of posts at jasi2169.wordpress.com, activity at 4pda forum, activity at uret.in — by the way your moderator there. Do you have a free time for private life at all?
Jaspreet Singh
I got job in multinational company named wipro i gave 2 interviews for ibm n wipro then i was selected in wipro but they wanted me to have masters for 4 years which was in their bond they were paying but i never wanted to study anymore
Google also removed blog www.jasi2169.blogspot.com which had everyday 2 or 3 cracks,patches either for windows or android released, i was so inside cracking and then due to so many dmcas google removed that blog so i made wordpress and i dont add that much cracks neither i do now a days.
So at this time i have no job and never tried either cus they bound you to do what you dont like and i made one app and added on play store it pays me around 6k indian rupees per month close to 100$ per month its not that much but enough for me as i am single & i live with mom n dad.
Now i do spend time ,before i was busy though,i only glance couple of forums only but not do that much,i just glance whats new n what are issues people getting in URET Patcher or Uret Android Reverser Toolkit 'thats all,since 2017 start i do have time but not that much for RCE.
Gray Jack
$100 per month is enough for single guy in India?
Jaspreet Singh
Its enough to be honest if you are single and you live with your parents,cus dad was in army so he gets pension and its enough to live,maybe it wont be enough when i be married ;-) though i see money is important nowdays but god knows whats written living life with the way it's going.
Gray Jack
So cracking for you was just a hobby and fun. Did some of developers of the programs you have cracked contact you trying to propose a good job? ;)
Jaspreet Singh
Nope no one did ,there was time i told mini militia devs to fix couple of simple loopholes if they can pay but they were not interested
Now in night i design website in freetime of someone pays kind of freelancing
In morning i am sleeping :-D mind works great in night.
Gray Jack
And do you have any future plans?
Jaspreet Singh
I wish i get some good jobs in google cus it pays good & have better environment atleast mom wont yell at me,private jobs here pay very less and now its easy cuz i live with parents n single but i knw it will be too hard in future and here big companies come in big universities like IIT they come in college and hire them and they dont look for other small universities guys,and to be honest in IIT you can get admission with that caste system i talked above.
Gray Jack
OK, clear.
By the way www.uret.in is registered in India. Do you have any issues with abuses?
Jaspreet Singh
I dont knw these guys personally to be honest,different places & people in team are from diff. countries even the admins are from india but they live in diff. countries.
It's a reverse engineering team,to be honest i respect teams like Core,lz0,arteam,at4re,SnD and many rce teams many talented guys in different countries living simple life.
Gray Jack
So you have no connection at all? Are you working as a separate crackers or some releases are made in cooperation of several crackers?
Jaspreet Singh
Nope the cracks or patches i release are cracked by me only though i release it on behalf of team URET,they provided me platform but i had platform before as blog as well.
Gray Jack
It's interesting, so there is no team chemistry inside — just a general platform.
Jaspreet Singh
We knw many guys we talk with them ,there is chemistry but everybody is anonymous though country is known.
Gray Jack
Except of you ;-)
Jaspreet Singh
I am still anonymous nobody knows where i live in india & how i look ;-)
Gray Jack
Taking into account 1 bln people in India — yeah, it makes sense ;-)
Jaspreet Singh
Yea so many people
Gray Jack
OK, so how did you come to URET and why URET?
Jaspreet Singh
D0nt knw it was random,i was on SnD team forum and then heard about team irec which expands indian reverse engi. Club so INDIAN guys so wanted to talk to them, then i got to knw about it and i got offer from Phoenix (Admin) to join and then joined it.
Gray Jack
OK, clear.
What do you think about progress in Android OS and applications for it? Is it harder to crack it now than before?
Jaspreet Singh
Yup
Its not hard i have a way same as google server how they works i can make them work even whatever the protection is used what it need is xposed,i guess it is so easy since xposed came in no modification required.
Gray Jack
But for newer version of Android Xposed is not released yet, correct?
Jaspreet Singh
Its released for android 8 ,2 weeks back
In beta
Gray Jack
OK.
Let's talk about URET Patcher. Is it only your idea and product or somebody else from your team involved? I know chelpa helped you also, correct?
Jaspreet Singh
It's my idea and i only single handedly worked on it but bro chelpa helped me & i used to give some info to bro chelpa like support for android 8 i fixed it first n told bro chelpa couple of new stuff in android 8 then LP, as you knw dalvik patch n code patch are basically a odex type patch in LP invented by bro chelpa.
Bro chelpa helped me in dalvik patch and with lollipop instruction patch/CRC fix else before patch was gone on every reboot for some firmwares on lollipop
Chelpa is master.
Gray Jack
But ART replaced Dalvik in newer Android.
Jaspreet Singh
Yeah i knw but art patch is simple whereas dalvik needs more fixes,its not like you replaced or added bytes and patch done like in windows ,in android even a single byte change makes file corrupt then you need to patch md5,sig and crc32,adler32 and make system think the changes are made by android system.
Gray Jack
So moving from Dalvik to ART makes patching more simple?
Jaspreet Singh
Not simple but tricky but it took me less steps to patch then dalvik,it required couple of more steps n algos to patch, its tricky cus from art u need to detect cpu and 32/64bit and then check system location n then start the work,on dalvik was simple but fixes required more steps fixing timestamp native C time n other dalvik fixes it loops more.
From android 6 loops are less ,android 8 had more loops the way i patch
Gray Jack
I know you have released a lot of standalone patches, then it moves to «all-in-one» URET Patcher and now it looks like you are trying to build a general approach — without generating cracks for single applications? Is it true?
Jaspreet Singh
Yea its already done,its called emulation, license & billing emulation is general simple approach works like google servers but offline,so if app doesnot have online authorization billing n license will work offline lifetime.
Online cant be patched,i do had online check idea to patch but i did not implemented yet n it will be beast then it will be hard for devs to save cus i will make offline server authorization if everything went as plan but god knows.
Gray Jack
And what is difference from Lucky Patcher, Freedom and everything else that «emulates» Google respond on license?
Jaspreet Singh
Freedom n LP has same approach for emulation,UP emulation is clone of google server send legit stuff not random stuff everything is properly calculated with proper algos and it totally bypass libs of google inside the app with its own.
Gray Jack
You told about online check bypassing. So you have future plans in this field? I am asking because last update of URET Patcher was in 31/Oct/2017. As for another your product — Uret Android Reverser Toolkit — last update was in 20/Jun/2017. After that we can see mainly Windows software cracks from you. So somebody starts talking you are tired with Android moving to Windows.
Jaspreet Singh
Nope windows patches was due to someone close asked only 2 patches done for windows
Gray Jack
So — briefly — what are future plans for URET Patcher?
Jaspreet Singh
Uret patcher needs ideas n stuff to be added in todo list then i need 4 or 5 days break totally off cus when i update UP it's last 5 days includes working 16 or 18 hours of work on it with testing on each n every build of android on emulators with all the possible inputs if it works perfect or issues
Right now i am waiting for android 8 on my device then i will work though i have fixed code n dalvik patch on android 8 with some user help who tested on his android 8 but when u have your own you can test as much u can
Right now fixes are in my mind n some couple of features excluding patching and then updating custom patches for some apps n then online stuff working
Gray Jack
I can bet your device is OnePlus 5 device ))))))
Looks like very dedicated work. I hope that someone will recognize it providing a good job for you!
Jaspreet Singh
Nope i have galaxy s7
Old device from someone
Gray Jack
Damn, I've lost my bet!
Jaspreet Singh
Haha yup you do
Jaspreet Singh
Now s9 is coming someone will sell s8 i will sell s7 n buy s8 it makes me to get update for latest android as samsung provide android 2 major updates
This is how i get to know on android 7 on samsung devices UP n LP used to makes device reboot
When i get s7 this is what i tested many people emailed me
Then someone tested for me and then i fixed n let chelpa know knox was issue which made laumching UP n LP reboot knox smasung devices n which is fixed now
Gray Jack
Personally I wished to buy new Huawei with latest Kirin — but now waiting for Snapdragon 845 this year. Till then — I have a pain-in-ass Galasy S3 ))))
And yes — sometime vendor-specific protection causes problems.
Knox is just an example, LG has it's own etc.
Jaspreet Singh
Well i prefer samsung devices for testing as it has many issues and used different approach and is in more quantity in the world so it should work on android OS released on samsung devices,PS i like SAMSUNG ;-)
Gray Jack
OK, I see.
I am pretty sure more questions to you can arise from everybody who will visit and discuss tis interview at Habrahabr. Can I combine them and ask you later after this interview will be published?
Jaspreet Singh
No problem feel free to ask
Bye see yeah!
Only registered users can participate in the survey. Please come in.
Is the material interesting and is it worth making a second publication with answers to questions?
- 86% Yes 99
- 13.9% No 16