Author Topic: Intercepting Transmitted Programs  (Read 13658 times)

0 Members and 2 Guests are viewing this topic.

Offline ACagliano

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 919
  • Rating: +32/-2
    • View Profile
    • ClrHome Productions
Intercepting Transmitted Programs
« on: March 23, 2010, 09:14:56 am »
I am planning on releasing Version 6 of my Antivirus Software for the TI-83+ or compatible. This software can already search through programs for those with virus names and delete them if you choose. But now I would like to add a new feature: intercepting transmitted programs.

I am looking for an assembly subroutine that will be run with Linkman's "Run this program when link activity" feature. Upon being run, the assembly routine copies the NAME of the received program to a buffer, or to a string, or to Ans. I'll do the rest in TI-Basic.



Also, I am wondering if there are any asm programs out there that will take a name from a string and check calc memory for any programs or appvars with that name and return 1 if it exists and 0 if not. This section of my antivirus works already, but it just simply deletes the program, doesn't actually tell you if it is on your calc. I would like it to do that.

Thanks.

Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55943
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: Intercepting Transmitted Programs
« Reply #1 on: March 23, 2010, 01:12:36 pm »
Mhmm... I didn't knew there were any calc viruses though? O.o (at least, anything that will mess up/do weird stuff on your calc before you even run them, unless you mean all known prank programs/fake programs that doesn't do what they're supposed to do on launch?)

That said such routines would be nice
« Last Edit: March 23, 2010, 01:17:40 pm by DJ Omnimaga »

SirCmpwn

  • Guest
Re: Intercepting Transmitted Programs
« Reply #2 on: March 23, 2010, 02:00:37 pm »
Celtic III anyone?

Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55943
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: Intercepting Transmitted Programs
« Reply #3 on: March 23, 2010, 02:09:55 pm »
I can't find any linking function in Celtic III. I saw something called DOLINK, which is det(33, but there are no instructions on how it is used and the outputs in the readme.

SirCmpwn

  • Guest
Re: Intercepting Transmitted Programs
« Reply #4 on: March 23, 2010, 02:16:22 pm »
I was talking about AppVars, sorry

Offline ACagliano

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 919
  • Rating: +32/-2
    • View Profile
    • ClrHome Productions
Re: Intercepting Transmitted Programs
« Reply #5 on: March 23, 2010, 02:25:29 pm »
Hmmm. I'll look through Celtic III. Is it only for AppVars, though?

Offline ACagliano

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 919
  • Rating: +32/-2
    • View Profile
    • ClrHome Productions
Re: Intercepting Transmitted Programs
« Reply #6 on: March 23, 2010, 02:26:52 pm »
Mhmm... I didn't knew there were any calc viruses though? O.o (at least, anything that will mess up/do weird stuff on your calc before you even run them, unless you mean all known prank programs/fake programs that doesn't do what they're supposed to do on launch?)

That said such routines would be nice

I have researched known calc "viruses". One or two of them are potentially harmful. The others are pranks. All of them are included in my virus definitions file.

SirCmpwn

  • Guest
Re: Intercepting Transmitted Programs
« Reply #7 on: March 23, 2010, 02:27:05 pm »
(Post removed due to community disapproval and lack of a point)
« Last Edit: March 23, 2010, 06:39:55 pm by SirCmpwn »

Offline ACagliano

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 919
  • Rating: +32/-2
    • View Profile
    • ClrHome Productions
Re: Intercepting Transmitted Programs
« Reply #8 on: March 23, 2010, 02:28:52 pm »
Ok. How do you use the linking function of it? Unless its in the readme, in which case I"ll be checking that now.

SirCmpwn

  • Guest
Re: Intercepting Transmitted Programs
« Reply #9 on: March 23, 2010, 02:30:23 pm »
Not sure, never tried.

Offline ACagliano

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 919
  • Rating: +32/-2
    • View Profile
    • ClrHome Productions
Re: Intercepting Transmitted Programs
« Reply #10 on: March 23, 2010, 02:34:02 pm »
No. There is no linking commands. But there is one I can use for program removal. Which still leaves the silent linking interrupt.

Offline Galandros

  • LV9 Veteran (Next: 1337)
  • *********
  • Posts: 1140
  • Rating: +42/-10
    • View Profile
Re: Intercepting Transmitted Programs
« Reply #11 on: March 23, 2010, 05:01:02 pm »
I am planning on releasing Version 6 of my Antivirus Software for the TI-83+ or compatible. This software can already search through programs for those with virus names and delete them if you choose. But now I would like to add a new feature: intercepting transmitted programs.

I am looking for an assembly subroutine that will be run with Linkman's "Run this program when link activity" feature. Upon being run, the assembly routine copies the NAME of the received program to a buffer, or to a string, or to Ans. I'll do the rest in TI-Basic.



Also, I am wondering if there are any asm programs out there that will take a name from a string and check calc memory for any programs or appvars with that name and return 1 if it exists and 0 if not. This section of my antivirus works already, but it just simply deletes the program, doesn't actually tell you if it is on your calc. I would like it to do that.

Thanks.
Well a antivirus for calculator is paranoic because currently there aren't any real threat virus (the ones who copy themself to other calcs/pcs to calcs). Normally only sending youself a virus to your calc AND executing the virus will turn things bad. Although there are some link exploits...
Putting apart that a anti-virus of that kind can provide some experience in programming. So go for it.

Other things to note:
Searching for a name is not enough. Anyway a real anti-virus would search in assembly programs for opcodes that unlock the flash writing (and edit the TI-OS passing to control the calc) or install a stay resident custom interrupt (unwanted code may be run). Other thing I can think of is programs installing hooks in the OS to do bad things. TI-BASIC programs can do harm too.
Basically you need to have a good knowledge of assembly and TI-OS to do a good anti-virus for calcs. But as I said, you can use your TI-BASIC anti-virus to train a bit in programming.

Good luck and have fun.
Hobbing in calculator projects.

Offline Iambian

  • Coder Of Tomorrow
  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 739
  • Rating: +216/-3
  • Cherry Flavoured Nommer of Fishies
    • View Profile
Re: Intercepting Transmitted Programs
« Reply #12 on: March 23, 2010, 06:34:20 pm »
Hehe. If only you knew what I knew...

Erh. Nevermind.

Celtic III does not actually support linking. What you see in the readme is a placeholder for whenever I decide to get up and actually do it.
A Cherry-Flavored Iambian draws near... what do you do? ...

Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55943
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: Intercepting Transmitted Programs
« Reply #13 on: March 23, 2010, 07:04:51 pm »
Hehe. If only you knew what I knew...
I remember... (if this is what you are talking about) :P

Offline Gale

  • LV4 Regular (Next: 200)
  • ****
  • Posts: 115
  • Rating: +1/-0
  • Ti-84+ Silver Edition
    • View Profile
Re: Intercepting Transmitted Programs
« Reply #14 on: March 23, 2010, 07:10:39 pm »
rather than just having a pure anti-virus program, another idea is to have another feature which can flag programs on your calc that can possibly be buggy/have code that doesn't make sense. like a heads-up on programs that might not work
remember me as a time of day...