T-Mobile G2 'Permaroot' Achieved
VValdo writes "After over a month of relentless hacking, genius scotty2 has finally smashed the G2's notorious emmc-read-only-on-boot mechanism, which had been incorrectly characterized in the press as a 'rootkit.' The hack involves several steps — first achieving 'temp root' through a fork bomb exploit, then running a specially crafted kernel module that power-resets the read-only emmc to bring it up in read-write mode. Finally, the bootloader is re-flashed, which permanently removes the read-only on subsequent boots. The whole process is expected to be automated by tomorrow."
Now if they could only add another rows of keys I could type my password...
"Buying" a device that doesn't become yours and then going through extreme measures to make it yours doesn't help anything. It hurts everybody in the end, because (a) it makes the next round of devices even MORE locked down to since they learned from last time, and (b) it doesn't exert economic pressure against this sort of lock down to begin with.
while i am against total lockdowns that cripple a phone(think VZW) I do think that some security is in order.
Since this was obviously quite a lot of fun.
I hope the next level of this game is even more challenging! Maybe a phone which explodes if it detects tampering?
This is not off topic as it is awesome that he was able to do that, but come on, no need for the magician introduction on him, "Now introducing, the wonderful, spectaculor, super genius the Amazing Houdini". What ever happened to just giving us the facts and letting us determine how awesome it is?
The world is how you make it
What does rooting the Android accomplish? Beyond the ability to change your prompt... what is the result of this?
I don't have an Android so if somebody could enlighten me (and I'm sure others as well).
Much appreciated.
AC
Donate to scotty2 (for root): walker.scott@gmail.com (PayPal)
It seems that people rarely complain about the proprietary engine/drive-by-wire/etc. management software in their car, unless it breaks (think the Toyota debacle of late). Is it just that phones that run *NIX "feel" like they should be open, as we (the greater /. community) know *NIX (Jurassic Park reference intentional...)? Granted, there are legitimate safety concerns for cars, but I imagine there are less drastic examples of this apathy towards device X, but the demand for openness on device Y (phone, game console, etc.).
That said, I have a clamshell VZW phone, and it does irk me that it's useless for anything except the basics.
Those responsible can be found here, if you wish to thank them!
irc.freenode.net
#g2root
All I have to say is this, as an owner of two android phones, the second only because it physically fell apart from (ab)use and from someone with a love for the platform:
Looks like we still have that 'DON'T USE APPLE BECAUSE IT'S A CLOSED TOTALITARIAN SLAVE PLATFORM!!!! COME TO ANDROID WHERE ITS FREE AND OPEN AND CHAMPAGNE AND PUPPIES!!!!!!' card, right lads? I mean, we're still laughing at the silly iPhone users having to jailbreak their phones so they can run what they want, right chaps? Right?
Now while we're at it, can I can a 'connect phone, run program, press button and you're done' solution for rooting my HTC Wildfire? I'm perfectly happy of course, to run adb and replace my bootloader and all the other things that used to get me wet while I was a student - isn't that the definition of open? - but I get the feeling that we could make it just as easy as those Apple user fellows and not lose any of the openness. Right guys?
Sarcasm away, that dream is gone, guys. The phone networks got to you and Google gave up. If you're going to carry on tooting about the openness of Android to users (they couldn't care less if their developers have to pay to develop or not) then you need some other talking points.
Extraordinary claims require extraordinary evidence. Where is your evidence that treating your devices as though you own them "makes the next round of devices even MORE locked down"? How are we to know that it would not matter whether buyers did this, proprietors are going to continue to pursue ways to exclude users from being free to treat their computers as they wish?
Digital Citizen
I am only interested in a phone that doesn't have to be hacked by some genius to get root access.
It's fine if it voids the warranty or whatever, but I'm not going to pay for something if I have to fight it to get full control over it.
Frankly, I might not even take full advantage of that--but I still demand the ability.
expandfairuse.org
I sometimes miss the days by I had a phone that simply made phone calls. Although you can still get simpler phones, it seems like the industry is pushing me to larger, more complicated devices. I enjoy evolving technology, but I just a want a simple phone. The old rubber hardened nextels that you could punt across a football field and then subsequently use without any damage to the phone whatsoever were absolutely awesome.
I am not pining for the days of yore, but some of us want a simple, quality phone. It seems these are the current options:
1 - Smartphone X, slam packed with features, takes awhile to boot, too many menus to do anything
2 - Crappily manufactured with terrible interface cheap-phone Y 3 - There is no option 3.
Does anybody know of any phones that are simple, elegantly designed, work-as-advertised, and constructed with quality, and they aren't made for Barbie or Ken? RAZRs? Mattels?
'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
Nokia
Where were all these genius hackers when all I wanted to do was install Rockbox on my iPod Classic?
Why would anyone bother cracking the crippled phone (ok, jailbraking, whatever) when there is a better, competitively priced ($400) and completely open alternative (N900)? T-mobile does charge lower monthly fee and does not lock you into 2 year contract if you bring your own device. So again, why do you want to waste your time with any of the G-stuff that also spies on your keystrokes?
I intend to buy a device that lets you replace the phone software out of the box without the need to exploit it (most likely a Nokia N900)
He didn't actually say anything negative about android. It's the handset manufacturers that are doing this at the behest of the telephone companies.
All the evil is coming into the pipe _after_ android, down in the boot loaders and the skins.
And Google doesn't actually have the Apple Fanboy features that Apple has. Google knows that they will be held to some account by their fickle fan base if the screw up or let their brand get _too_ tarnished by the handset cartel.
It is a given that "Apple can do no wrong" as far as an Apple Fanboy is concerned. Google has simply not done wrong enough yet to deserve derision as far as Android is concerned.
Not the same thing at all. In fact, there are legions of people waiting to catch Google out to crucify them.
Innocent people shouldn't be forced to pay for inferior software development.
--"Code Complete" Microsoft Press
DMCA:
http://www.wired.com/threatlevel/2010/07/feds-ok-iphone-jailbreaking/
Magnuson-Moss Warranty Act:
http://en.wikipedia.org/wiki/Magnuson-Moss_Warranty_Act
specifically:
The federal minimum standards for full warranties are waived if the warrantor can show that the problem associated with a warranted consumer product was caused by damage while in the possession of the consumer, or by unreasonable use, including a failure to provide reasonable and necessary maintenance.
Why is that odd? The internet was designed exactly so that major issues would not cause outages. As the infrastructure grew, it saw massive demands from all over, both attacks and valid uses - and so the internet we have today was designed from the start AND forged in fire exactly to handle "everyone running anything".
The cell networks were never originally designed with network use, or even really truly heavy loads in mind. More recently they are thinking along those lines but it takes time to widely deploy physical infrastructure. It's absurd to claim the cell network should ne able to handle things "the internet" can because both are "networks".
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Make it known to any Google representative who will listen (warning: these are few and far between) that you regard the company as hypocritical and cynical, and not worthy of your trust unless the rights of owners of phones running Android/Linux are fully respected.
Right. Look: google doesn't even give a shit about the fact that people have been complaining for YEARS about the lack of group support in Android's contact manager and poor company name support (for example, it is impossible to search for your contact at Widgetco. That's a BIG problem for someone with a couple hundred business contacts, like a salesperson.)
Something my Siemens phone could do back in the early 2000's (bluetooth sync my contacts with the Macintosh Address Book, complete with groups), something my original iPhone did since day 1...Android can't. Well, it sort of does- but it made an utter fucking mess of things when I enabled syncing.
There's all sorts of half-assed-ness throughout Google products and in particular Android. For example, you can use groups in Google Voice to manage call handling behavior per-group, but only by using the Gmail Contacts interface- not your phone. You can't add a calendar to Google Calendar from your phone. Google Voice doesn't accept mp3 voicemail announcement uploads, something Youmail has supported since day 1.
The music syncing sucks (doubletwist can bite my shiny iPhone), the music player sucks (both stock and free alternatives, though at least the free alternatives have lockscreen systems), and there's all sorts of annoying 'holes'- like not being able to add a calendar from your phone.
Please help metamoderate.
Great way to kill time (and annoy other people) back in the cs lab...
Hi, Robert Joseph (Joe) Hamelin, formerly employed by Amazon.com as a network engineer. Saw a lot in netops worthy of drinking stories, eh?
http://webcache.googleusercontent.com/search?q=cache:tNzoc2EMubAJ:nethead.com/resume/Resume.doc+joe%40nethead.com&cd=1&hl=en&ct=clnk&gl=us&client=firefox-a
So, yeah, I'd agree with you. And add in something about glass houses and stones.
Please help metamoderate.
Now while we're at it, can I can a 'connect phone, run program, press button and you're done' solution for rooting my HTC Wildfire?
8 steps to root on the N900:
(1-5) main menu -- App manager -- Category:All -- gainroot -- install
(6-8) main menu -- xterm -- "sudo gainroot"
Works fine. You can also install custom Linux kernels from the package manager to get wifi-tethering (which I have done, and it works fine).
Folks like Scotty2 are doing serious, difficult, rigorous pen testing. For free. Leading only to a new generation of un-hackable handsets. Careful what you wish for.
If the GPLv3 was the dominant free software license, we would not have to crack our own phones. For the free software comnunity today, the biggest problem is not the availability of free software, but vendors taking away our freedom as users while using our software. Using GPLv3 exclusivly helps.
Yep, and when you have eventually paid for the item in full, or eventually go into the store and buy it outright, it's all yours. Until then, it belongs to someone else - the manufacturer or the phone company.
So what's your point again?
My point is that though it may seem like that's the case, it's not. If it were, you would have the option of surrendering the device and paying the difference between the device's FMV and the ETF in the event that you decide to break the contract, but you don't. There's no lien on the device itself. Once the sale is made and the 30 day return window has lapsed, the service provider couldn't care less what you do with it so long as you maintain service with them.
If you want absolute proof that it really is the case that you own the phone outright from the moment you acquire it regardless of subsidy, there's a simple question to ask yourself: "Does the monthly cost of my cellular service go down when my contract expires and I am presumably done paying off the device itself?"
You'll also notice that your bill doesn't state recurring fees for the hardware either.
So I'll reiterate:
If I buy your shit from you, it's not your shit anymore. It's my shit and you have no damn business telling me what I do with it, and no, I signed no contract stating otherwise.
Don't ever forget that, and don't ever let a retailer tell you differently.
Boot Windows, Linux, and ESX over the network for free.
ghd straighteners,
purple ghd,
ghd hair,
ghd straighteners
purple ghd
ghd hair
Nice detective work. Noticing that my public email address matches to my real name in whois.
Wrong. I just plugged your email address into Google.
Please help metamoderate.