PIQ story ended ! - Legacy files uploaded

[jedi1]

I am pretty sure if PIQ open sourced the API to connect to the sensor, then the data could be shown in Surfr for example. I don't have a PIQ, so I am not particularly interested, but with the power of this forums, I guess it could be possible to reach PIQ directly and ask for it.

[surfbird]

If PIQ provided Bluetooth communication protocol with their sensor, theoretically I could write an app to download and review the jumps. No social or leaderbords functionality though.

Or, it would be even better if PIQ opened source of their app, so it could be modified to work with sensor directly without servers.

It almost is
I had a look at the apk, completly unencrypted, no obfuscation. Easy peasy.

public class KiteLeaderboardConnection extends LeaderboardConnection {
private static final String METHOD_GET_COMMUNITY_SEARCH = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/search");
private static final String METHOD_GET_KITE_NEWS_FEED_FRIENDS = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/friends");
private static final String METHOD_GET_KITE_NEWS_FEED_MY_SPOT = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/spots");
private static final String METHOD_GET_LEADERBOARD_DETAILS_FOR_USER = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/{cuuid}");
public static final int SEARCH_PAGE_PORTION = 20;
private static final String TAG = "KiteLeaderboardConnect";

public static KiteCommunityUserEntity getLeaderBoardUserDetails(Context context, @NonNull String str, @NonNull List<Pair<String, String>> list) {

[a99]

@ Surfbird > thanks, good news.

PIQ apps already disapeared from Apple appstore, so PIQ message about end was true.
Lucky i donwloaded two PIQ aps for ios - Duotone PIQ for Kiteboarding and Rossignol PIQ for snowboarding. I uploaded it now, link for download will valid for 30 days. https://easyupload.io/m/ukz80v

[aleks]

If PIQ provided Bluetooth communication protocol with their sensor, theoretically I could write an app to download and review the jumps. No social or leaderbords functionality though.

Or, it would be even better if PIQ opened source of their app, so it could be modified to work with sensor directly without servers.

It almost is
I had a look at the apk, completly unencrypted, no obfuscation. Easy peasy.

public class KiteLeaderboardConnection extends LeaderboardConnection {
private static final String METHOD_GET_COMMUNITY_SEARCH = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/search");
private static final String METHOD_GET_KITE_NEWS_FEED_FRIENDS = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/friends");
private static final String METHOD_GET_KITE_NEWS_FEED_MY_SPOT = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/spots");
private static final String METHOD_GET_LEADERBOARD_DETAILS_FOR_USER = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/{cuuid}");
public static final int SEARCH_PAGE_PORTION = 20;
private static final String TAG = "KiteLeaderboardConnect";

public static KiteCommunityUserEntity getLeaderBoardUserDetails(Context context, @NonNull String str, @NonNull List<Pair<String, String>> list) {

Nice! Can you send me the source code you got?

[surfbird]

If PIQ provided Bluetooth communication protocol with their sensor, theoretically I could write an app to download and review the jumps. No social or leaderbords functionality though.

Or, it would be even better if PIQ opened source of their app, so it could be modified to work with sensor directly without servers.

It almost is
I had a look at the apk, completly unencrypted, no obfuscation. Easy peasy.

public class KiteLeaderboardConnection extends LeaderboardConnection {
private static final String METHOD_GET_COMMUNITY_SEARCH = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/search");
private static final String METHOD_GET_KITE_NEWS_FEED_FRIENDS = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/friends");
private static final String METHOD_GET_KITE_NEWS_FEED_MY_SPOT = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/spots");
private static final String METHOD_GET_LEADERBOARD_DETAILS_FOR_USER = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/{cuuid}");
public static final int SEARCH_PAGE_PORTION = 20;
private static final String TAG = "KiteLeaderboardConnect";

public static KiteCommunityUserEntity getLeaderBoardUserDetails(Context context, @NonNull String str, @NonNull List<Pair<String, String>> list) {

Nice! Can you send me the source code you got?

Use
https://github.com/skylot/jadx
to decompile.
run with:
./jadx//build/jadx/bin/jadx-gui orig.apk

I deleted the source and apk, I just checked if it was encypted or not.

[aleks]

Thanks. The source code looks huge, it will take forever to make it work. I don't have time to take it on, sorry

[surfbird]

Thanks. The source code looks huge, it will take forever to make it work. I don't have time to take it on, sorry

The standard approach when reversing is to mock the functions that do server calls, so the app start up as normal. Then recompile back to apk.
It's usually just a couple of lines that has to be changed, but you never know how much an app has to be changed.

That said, it's much easier done while the servers still are there. And sometimes it downloads codesnippets live, but it didn't look like that was the case here.

Reversing is fun! You should try it I can help you with different tools and techniques. I'm in the middle of a mind boggling reverse case right now, so I won't have time to do it.

[aleks]

Thanks. The source code looks huge, it will take forever to make it work. I don't have time to take it on, sorry

The standard approach when reversing is to mock the functions that do server calls, so the app start up as normal. Then recompile back to apk.
It's usually just a couple of lines that has to be changed, but you never know how much an app has to be changed.

That said, it's much easier done while the servers still are there. And sometimes it downloads codesnippets live, but it didn't look like that was the case here.

Reversing is fun! You should try it I can help you with different tools and techniques. I'm in the middle of a mind boggling reverse case right now, so I won't have time to do it.

Just sold my PIQ, so that is it for me. To all PIQ owners - send a note to WOO support, they might give you a discount on a new WOO

[LineCutter]

If PIQ provided Bluetooth communication protocol with their sensor, theoretically I could write an app to download and review the jumps. No social or leaderbords functionality though.

Or, it would be even better if PIQ opened source of their app, so it could be modified to work with sensor directly without servers.

It almost is
I had a look at the apk, completly unencrypted, no obfuscation. Easy peasy.

public class KiteLeaderboardConnection extends LeaderboardConnection {
private static final String METHOD_GET_COMMUNITY_SEARCH = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/search");
private static final String METHOD_GET_KITE_NEWS_FEED_FRIENDS = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/friends");
private static final String METHOD_GET_KITE_NEWS_FEED_MY_SPOT = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/newsfeed/spots");
private static final String METHOD_GET_LEADERBOARD_DETAILS_FOR_USER = ("/api/v1/" + SPORT_TYPE + "/users/{uuid}/community/{cuuid}");
public static final int SEARCH_PAGE_PORTION = 20;
private static final String TAG = "KiteLeaderboardConnect";

public static KiteCommunityUserEntity getLeaderBoardUserDetails(Context context, @NonNull String str, @NonNull List<Pair<String, String>> list) {

Nice! Can you send me the source code you got?

I've uploaded it here:
https://www.decompiler.com/jar/5266daaa ... ction.java

I'll later try to recompile it back before trying to modify the functionality.

[haiku]

Hi. A surfshop gave me, as a gift, a new red North PIQ (not the Duotone). Unfortunately the PIQ server is not longer on line so without an activation code (via sms) I cannot connect It to the app. Any suggestions? Thanks in advance.

Cheers
Carlo