Although there have been reports of people porting over WP7 to the HTC HD2 and some chatter of people being able to make ROMs (though not load them), there may yet be one final hurdle that could be very difficult to overcome: PVK.
PVK are the private keys Microsoft evidently uses to sign off on the OS that is also tied to the hardware. Specifically, some aspect of the OS looks for and then pulls these keys from the device motherboard for verification. If the keys cannot be found, the motherboard must be replaced or serviced. While elements of the phone/OS might still work without the PVK key, core elements such as Xbox, Marketplace, Windows Live or Zune...basically any "cloud service" will not.
The challenge to developers/hackers would be to circumvent this security, much like folks have managed to get around Microsoft's Genuine Software checker for Windows 7 and Office products. No easy task, we imagine.
In addition to the above image, there is an accompanying "Service Advisory" on one of the HTC internal sites that reads:
This Service Advisory aims to resolve invalid PVK or PVK missing issue for any returned WP7 units
Condition(s) to follow this service advisory:
1. When customer complains about can not access Microsoft services such as XBOX, Marketplace, Windows Live and Zune on the WP7 devices.
2. When ASP performs diagnostic program test, ASP needs to follow the below repair actions if the diagnostic program detects invalid or missing PVK.
If the PVK is invalid or missing, there will be message on device as following when user try to login to Windows Live service.
To all of this we say good on Microsoft for throwing down some serious security, but alas, the ROM community now has a challenge ahead of itself. Of course, this is probably more motivated by piracy concerns than ROM cookers, but we imagine Microsoft welcomes that as a wanted side effect as well. Combined with the Xbox Live security (see earlier coverage), cracking this OS wide open may be far off.
Thanks, Conflipper, for the info