[theGoods]

Hack Name: Cached Firmware Hack
What it does: Modifies Zune software to allow the transmission of modified ZuneFirmware.cab
Suggestions: Don't modify the firmware itself, as we can't re-sign it. Getting extra files onto the system partition would be accomplishment enough.


Here's the idea... the Zune software downloads new firmware upon request, but then uses the same firmware from a cache when updating multiple zunes or the same zune multiple times. (fyi the firmware is downloaded to: C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Zune\#\ZuneFirmware.cab where # is some number) I took the cab file and added the asian language font files and tried to get the Zune software to upload the file to a formatted Zune 4GB. The software recognized my tampering and did not send the updated cab. My idea is for someone to hack the Zune software to alter that firmware check. I tried to do it myself, but my limited knowledge of SoftIce prevented me from finding a nearby entry point. Anyone with more experience care to give it a go?