Kaankehh commented 8 years ago

Hey guys,

Like you already know the PoGo app doesn't work. The reason for that is that Niantic updated their server. The update ruined the API, the requests are now cryptographically signed. The latest update was forced so the app could read it.

Does this mean that it is over? No, the makers of the API are looking in to this, it is not sure if they can fix it.

What do you say? Is it over in your opinion? Sadly, yes. I dont think that the API creators will be able to decrypt it and if they will be able to get it to work, Niantic will probably add more encryptions. This is probably one of the I don't know how many encryption they will add.

We have to wait till the API creators have more news, I will keep you updated. Or, you can look by yourself. https://www.reddit.com/r/pokemongodev/comments/4w1cvr/pokemongo_current_api_status/

It is over!

Latest update!

They finally did it! All the unknown errors are gone! They are now implementing the API and we dont know when the port to C# is done! Stay tuned

ghost commented 8 years ago

I'd give it some time. There are plenty of good reasons to think that the API devs will succeed. It will be interesting to see if Niantic will escalate to the point of breaking stuff. At any rate, war has been declared. Let's see how competent Niantic is.

robertmclaws commented 8 years ago

It looks like some people have been able to extract the certificate and use it. See: https://github.com/ST-Apps/PoGo-UWP/issues/376

alextheangel commented 8 years ago

I knew that since the android version force me to update (while since my android device is not official supported either, i need side download and side load that as well)

GeorgeBalis commented 8 years ago

This is very sad but i am sure that devs will fix it...As I heard they didn't change sth huge in the API so i believe that they are going to fix it...Anyway they can easily fix it we are standing on them.

ST-Apps commented 8 years ago

@GeorgeBalis not a huge change in terms of "raw size", meaning that they just probably changed one or two lines. The problem is that with those lines they enabled some kind of checksum and/or encryption, meaning that the server expects something else alongside each map request and we don't know how to compute that value.

Kaankehh commented 8 years ago

Okay guys, the developers are saying that they got something, they are currently debugging. There is just 1 problem left called 'unknown6' that still has to be fixed. Probably before 3 CEST it is fixed. (that's my prediction, not official)

But still I believe that Niantic will go much higher than this... The question is just when. But at least we got something for now.

ghost commented 8 years ago

I'd love to help, but we need people who can live trace ARM assembly code, and know a bit about crypto. That's not me. Unknown6 is going to be a tough nut to crack. Once it's found, though, escalating is going to be very difficult.

If you can help, follow the link above and go into the Discord chat. You'll want to join the api-debugging channel, and they won't take just anyone.

Zonnald commented 8 years ago

Realistically you have to go to the source - if you solve this and they turn around and break it again then it isn't going to be pretty. If you go to them and offer to be their eyes, ears and hands in the Microsoft ecosystem you may get somewhere. On the other hand maybe they did this because they have their own plans to move into the Microsoft ecosystem???

WallyCZ commented 8 years ago

@cubikca It's useless work because Mila432 has already working script to fetch pokestops. I hope he will public it somehow soon.

zakius commented 8 years ago

@Zonnald I'm pretty sure they did this for two reasons: it was intended earlier but they just left it for later and they wanted to cut off ALL unofficial apps, they couldn't care less about windows client, but map scanners and bots are evil

gogeterobert commented 8 years ago

Isn't it possible for the app developers to get to an agreement with niantic so they could colaborate to develop the windows phone app? I mean even if they don't want to participate at least they could give you the future encryptions if you switch from open source.

GeorgeBalis commented 8 years ago

@Narroow8 It is a good idea but I think that Niantic won't agree.But it worth a try i think

Kaankehh commented 8 years ago

@Narroow8 yeah ofcourse, looks easy, but they are not sure if we won't give the encryption method to everybody so the bots start taking over again. They won't even react if we would ask them in person, they would walk away, bc they don't give a shit.

Looks right now that Unknown6 is NOT gonna be fixed. There are so much developers looking in the code to find which pieces are being used to create the encryption, nobody found it already and they are searching for about 8 hours? Longer?

This is probably the moment it is over, we had it for 2/3 days, that's it.

GeorgeBalis commented 8 years ago

It's sad that it's over now.So Nianyic won this war it started.So sad.

Kaankehh commented 8 years ago

@GeorgeBalis it did not officially end, I just said that the encryption method is good hided to recreate. There is a chance they will find it and create it, but I don't believe that it will help, Niantic will be rolling out more if they find out...

vikiee6199 commented 8 years ago

i believe in ST-Apps

GeorgeBalis commented 8 years ago

Yeah it seems that its impossible to be fixed.But never say never

Kaankehh commented 8 years ago

@vikiee6199 ST-Apps is NOT the developer of the API. Ofcourse, if he knows how it works to search the method in a big file he can help, but there are a lot of people who know that. ST-Apps just ports that API to 'our' API to say so It is up to some Reddit users.

DMNerd commented 8 years ago

@Kaankehh The unknown6 thing is very interesting. As it stands it's a value that can be up to 256 bytes long (the importaint thing in my opinion is that it's not always like that, which would indicate it's being assembled by adding other values togeather) and the first 32 bytes are afected by time alone. I suspect it's some sort of authentication Value that's being generated each time client makes request to server as some sort of "two way" authentication.

Kaankehh commented 8 years ago

@DeMoMan159 It sure is a authentication method, it is a method so only the real app can read the requests. But they are searching in the code which variables are making the hash. Only it is a really big shit file if you ask me, so it will take a time, but it is if you think about it in the code, or the app couldn't read it, only where, thats the question.

vikiee6199 commented 8 years ago

unknown6 is a variable that was being calculated prior to the update but is now being validated, assuming this is what is breaking all the tools, unknown6 could be checking for valid GPS location(ie:blocking known spoofing methods). Or, With my limited understanding of what is going on being that the bots can't interact with any map object, is there any difference between how the system(system being your phone not their servers) recognizes a player screen press vs the bot "touching" the screen.

GeorgeBalis commented 8 years ago

Niantic is the worst.They don't publish the app on wp cause they want everyone to switch on Android or iOS to make Google and Apple earn more money...Also when a third party app created the did everything for being closed...This is like shit they do everything for money

vikiee6199 commented 8 years ago

i dont think they have problem with pogo... .. those cheating pokemon scanning apps and bots matters them... they did this update for those bots and cheaters... but unfortunately we have also become victim of their doings

GeorgeBalis commented 8 years ago

But still they do everything for money.

Kaankehh commented 8 years ago

@vikiee6199 Nope, it is exactly the same. Or the bots didn't work at all and everybody who used it would have a softban haha. We need just the solution to use it, people are searching really active to understand how the game creates the hashcodes and in which order...

gogeterobert commented 8 years ago

Do you think Niantic would agree to take the pogo , encrypt it and then post it as a close source? Like this the comunity could continue working on the open source one and all that would take would be Niantic's help from time to time. I am not fully understanding encryption methods but would it take that much time to implement in pogo on their part?

vikiee6199 commented 8 years ago

wat do u think..will we be able to play again!!!

panoukos41 commented 8 years ago

@GeorgeBalis like what google did to Microsoft's youtube app xD they didnt touch myTube but if its made by Miscrosoft we have to destroy it xD

ST-Apps commented 8 years ago

My bet is that Unknown6 is a request timestamp+request checksum

vikiee6199 commented 8 years ago

@ST-Apps .. can u please have a look at this!! found something .. thought i should share.. Famous Pokemon GO API developer Mila432 has already found a way to make his Pokemon Go API work again, but he got hit by a cease and desist letter and will not share his fix. Niantic definitely has to hire this guy. If Mila432 has found a solution, it is only a matter of time another developer will find a workaround too. Mila432 has published a video as proof that he found the solution to the new security measure Niantic has implemented. Watch below. https://youtu.be/WhryILX3NI0

Kaankehh commented 8 years ago

@vikiee6199 Like I earlier said, ST-Apps is NOT the API creator. I see in the discord chat that the API creators found this just now and are now looking in to this

GeorgeBalis commented 8 years ago

Oh boy I really wish one of the developres find a solution for this.I also think that like one guy said before you should try to collaborate with Niantic if the devs don't find a solution.

Kaankehh commented 8 years ago

@GeorgeBalis Collabing with Niantic isn't an option xD I've good news, they found a promising canditate for an algorith, this doesn't mean that it is going to be fixed, but if it is than we have the algorith to create hashcodes by ourself!

gogeterobert commented 8 years ago

@Kaankehh you should try and keep that algorithm hidden so it won't attract naintic's attention or other hacks/bots.Maybe so they won't have a reason to advance with the encryption or at least delay it.

Kaankehh commented 8 years ago

@Narroow8 I'm not one of the devs from that algorith, but the algorith has to be exactly the same as the Pokeon GO app or it wont work

EvolvedRamoz commented 8 years ago

Hope it get sorted soon

GeorgeBalis commented 8 years ago

Does that mean that the problem is half fixed?

Kaankehh commented 8 years ago

@GeorgeBalis Nope, it does mean there is a chance that it can be the solution, but it can also mean that it is nothing except wasting time.

GeorgeBalis commented 8 years ago

Oh ok.

Kaankehh commented 8 years ago

Hey guys, They found the piece of code that was the problem of Unknown6! It is just letting them convert the code making an algoritm etc They are so close to get it working! There is a chance that the app will work tomorrow already, maybe even today, I cant promise anything because they dont know when they will be done!

I hope this makes it a littlebit better :)!

ghost commented 8 years ago

Nothing official yet though, so hard to tell if trolling

Kaankehh commented 8 years ago

@cubikca I am reading with them in the discord server, they found it (: If you think it is trolling, think that.

ghost commented 8 years ago

@Kaankehh you're closer than I am to the action :) If you say it's so, I believe it

GeorgeBalis commented 8 years ago

Really good news!I am pretty sure that the will fix it we are standing on 'em 😀