I have created my own QX10 client app which just published to store. (available on Windows Phone Store: http://www.windowsphone.com/en-us/store/app/nc-qx10/1c8d71da-0e4b-43cd-a5c2-020a072419d3 and it's being open sourced here: https://github.com/nantcom/SonyCameraSDK {not synced yet, still cleaning up code...}) and my next step is to get Camera Password from NFC.
After a few trials, I have small success in reading NFC tag embedded on my QX10 using NdefLibrary. And here is what I can get from my QX10:
Mime Type:
application/x-sony-pmm
Payload:
\0\0\0\0DIRECT-qdQ0:DSC-QX10\0\*********\0\n\0��\0\0\n\0\0����ɇ\v\0\0\0�@/\0\n\0\0�A\nDmsRmtDesc\0\0
I can see the SSID of my QX10 and the location that was masked with **** is my QX10 password, so this is a possible way to get the password from QX10.
However, the payload seems to have some specific format which I have been trying to find for about 2 hours. I can simply substring to get the password but it does not seems to be very reliable as it might be different on other camera.
Is there any published specification about this Ndef Record type, So I can reliably read the SSID/Password from it?