T-Mobile G2 'Permaroot' Achieved
VValdo writes "After over a month of relentless hacking, genius scotty2 has finally smashed the G2's notorious emmc-read-only-on-boot mechanism, which had been incorrectly characterized in the press as a 'rootkit.' The hack involves several steps — first achieving 'temp root' through a fork bomb exploit, then running a specially crafted kernel module that power-resets the read-only emmc to bring it up in read-write mode. Finally, the bootloader is re-flashed, which permanently removes the read-only on subsequent boots. The whole process is expected to be automated by tomorrow."
Now if they could only add another rows of keys I could type my password...
"Buying" a device that doesn't become yours and then going through extreme measures to make it yours doesn't help anything. It hurts everybody in the end, because (a) it makes the next round of devices even MORE locked down to since they learned from last time, and (b) it doesn't exert economic pressure against this sort of lock down to begin with.
while i am against total lockdowns that cripple a phone(think VZW) I do think that some security is in order.
This is not off topic as it is awesome that he was able to do that, but come on, no need for the magician introduction on him, "Now introducing, the wonderful, spectaculor, super genius the Amazing Houdini". What ever happened to just giving us the facts and letting us determine how awesome it is?
The world is how you make it
Donate to scotty2 (for root): walker.scott@gmail.com (PayPal)
Great! And we can program it in Intolerant.
There's no -1 for "I don't get it."
It seems that people rarely complain about the proprietary engine/drive-by-wire/etc. management software in their car, unless it breaks (think the Toyota debacle of late). Is it just that phones that run *NIX "feel" like they should be open, as we (the greater /. community) know *NIX (Jurassic Park reference intentional...)? Granted, there are legitimate safety concerns for cars, but I imagine there are less drastic examples of this apathy towards device X, but the demand for openness on device Y (phone, game console, etc.).
That said, I have a clamshell VZW phone, and it does irk me that it's useless for anything except the basics.
Gives you write access to /system/ ? (Inc /etc, so on)
My email addy? should be easy enough.
Allows you to run on the G2, non-T-Mobile versions of the Android operating system.
All I have to say is this, as an owner of two android phones, the second only because it physically fell apart from (ab)use and from someone with a love for the platform:
Looks like we still have that 'DON'T USE APPLE BECAUSE IT'S A CLOSED TOTALITARIAN SLAVE PLATFORM!!!! COME TO ANDROID WHERE ITS FREE AND OPEN AND CHAMPAGNE AND PUPPIES!!!!!!' card, right lads? I mean, we're still laughing at the silly iPhone users having to jailbreak their phones so they can run what they want, right chaps? Right?
Now while we're at it, can I can a 'connect phone, run program, press button and you're done' solution for rooting my HTC Wildfire? I'm perfectly happy of course, to run adb and replace my bootloader and all the other things that used to get me wet while I was a student - isn't that the definition of open? - but I get the feeling that we could make it just as easy as those Apple user fellows and not lose any of the openness. Right guys?
Sarcasm away, that dream is gone, guys. The phone networks got to you and Google gave up. If you're going to carry on tooting about the openness of Android to users (they couldn't care less if their developers have to pay to develop or not) then you need some other talking points.
Extraordinary claims require extraordinary evidence. Where is your evidence that treating your devices as though you own them "makes the next round of devices even MORE locked down"? How are we to know that it would not matter whether buyers did this, proprietors are going to continue to pursue ways to exclude users from being free to treat their computers as they wish?
Digital Citizen
I am only interested in a phone that doesn't have to be hacked by some genius to get root access.
It's fine if it voids the warranty or whatever, but I'm not going to pay for something if I have to fight it to get full control over it.
Frankly, I might not even take full advantage of that--but I still demand the ability.
expandfairuse.org
I sometimes miss the days by I had a phone that simply made phone calls. Although you can still get simpler phones, it seems like the industry is pushing me to larger, more complicated devices. I enjoy evolving technology, but I just a want a simple phone. The old rubber hardened nextels that you could punt across a football field and then subsequently use without any damage to the phone whatsoever were absolutely awesome.
I am not pining for the days of yore, but some of us want a simple, quality phone. It seems these are the current options:
1 - Smartphone X, slam packed with features, takes awhile to boot, too many menus to do anything
2 - Crappily manufactured with terrible interface cheap-phone Y 3 - There is no option 3.
Does anybody know of any phones that are simple, elegantly designed, work-as-advertised, and constructed with quality, and they aren't made for Barbie or Ken? RAZRs? Mattels?
'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
What does rooting the Android accomplish?
Maybe fixing some of the crappy base functionality that come with the phone and can't be replaced by normal apps? For example, the alarm clock that wouldn't stop ringing until I pulled the battery. And countless other major warts that Google is not doubt horribly embarrassed about, but not so embarrassed as to fix or take patches for.
Have you got your LWN subscription yet?
There are many answers, but realistically, it enables you to use it as a "free" wi-fi hotspot. (as in, no extra charge from the carrier.) Some other cool stuff, too. Useful stuff, not just changing your background.
-Arthur
Cave ne ante ullas catapultas ambules
Where were all these genius hackers when all I wanted to do was install Rockbox on my iPod Classic?
Because I'm not going to pay full cash price for a cell phone.
I've been with the same cell company for 11 years, so a 2 year contract isn't a big deal.
Gone!
I intend to buy a device that lets you replace the phone software out of the box without the need to exploit it (most likely a Nokia N900)
Don't forget tethering, and the up and coming new favorite annoyance of the wireless industrial machine, bloatware! yes, exactly like the crap that is shipped on pc's! only you can't remove it, at all, ever, unless you root the device
He didn't actually say anything negative about android. It's the handset manufacturers that are doing this at the behest of the telephone companies.
All the evil is coming into the pipe _after_ android, down in the boot loaders and the skins.
And Google doesn't actually have the Apple Fanboy features that Apple has. Google knows that they will be held to some account by their fickle fan base if the screw up or let their brand get _too_ tarnished by the handset cartel.
It is a given that "Apple can do no wrong" as far as an Apple Fanboy is concerned. Google has simply not done wrong enough yet to deserve derision as far as Android is concerned.
Not the same thing at all. In fact, there are legions of people waiting to catch Google out to crucify them.
Innocent people shouldn't be forced to pay for inferior software development.
--"Code Complete" Microsoft Press
Tethering is part of the OS and is sitting there in the network menu where you'd expect it. There are also applications you can download from the market that accomplish the same thing.
DMCA:
http://www.wired.com/threatlevel/2010/07/feds-ok-iphone-jailbreaking/
Magnuson-Moss Warranty Act:
http://en.wikipedia.org/wiki/Magnuson-Moss_Warranty_Act
specifically:
The federal minimum standards for full warranties are waived if the warrantor can show that the problem associated with a warranted consumer product was caused by damage while in the possession of the consumer, or by unreasonable use, including a failure to provide reasonable and necessary maintenance.
You do realize that you are paying more than full retail for the phone during 2 year contract, don't you?
What does rooting the Android accomplish? Beyond the ability to change your prompt... what is the result of this?
I don't have an Android so if somebody could enlighten me (and I'm sure others as well).
Much appreciated.
AC
Well, I will tell you what. Among a number of interesting things, rooting allows you to run any of a number of third-party operating system ROMs. One guy even got Debian Linux running on a G1 (not too practical, but it shows the power of an open device.) My personal favorite, and by far the most popular, is the Cyanogenmod ROM. Keep in mind that the relatively open nature of the open-source Android operating system has made this a legitimate affair: this is not remotely comparable to what iPhone users suffer under Apple's heavy-handed rule. Frankly, having used Cyanogen's product (generally faster, more stable, and more featureful than the stock firmware) for over a year now, if a particular phone won't let me install it ... well, that's one handset I won't be buying. More interestingly, Cyanogen (aka Steve Kondik) has a close relationship with the lead Android developers at Google, and much of his team's work has been used to improve the mainstream OS, so even those who are running the stock firmware have benefited. Are you listening, T-Mobile? Yeah, and that applies to the rest of you bloodsuckers as well: open is good for your customers, and good for your business.
Here's the deal folks. It was one thing when we were all using not-particularly-smart phones that had a few built-in applications, a camera, and maybe some extra flash to store a few MP3s. That's not what we're talking about here: these are not cellphones, they're personal computers that happen to fit in your pocket. I cannot accept that cell phone carriers (who are, after all, just fat pipes, not gods) have an intrinsic right to determine what operating system and/or applications we can use on our rather powerful pocket computers. I wouldn't accept that treatment from a PC vendor, and I see no reason for society to accept that from corporations who have spent years trying to convince us that they absolutely must limit the potential of these devices in order to "manage their networks", to provide us with a "better user experience." Of course, we all know what it means when a carrier is in control of the user experience. I will decide upon the kind of experience I want, and so far as network management goes, well that's not my problem. I expect to be provided with the service that I pay for, and that includes a hands-off approach to the phone and it's software. It's my pocket computer, not yours. Just deal with that, and stop trying to use it as an alternate revenue source.
The higher the technology, the sharper that two-edged sword.
Tethering is part of the OS and is sitting there in the network menu where you'd expect it. There are also applications you can download from the market that accomplish the same thing.
That's a very recent addition to the Android featureset. For a long time you either had to use a third-party tethering app (as you say) or run an alternate operating system ROM like Cyanogenmod, which has had that feature for some time now. Rooting was never really a requirement for tethering, even on early versions of Android, since apps like PDANet were available and didn't require root access.
The higher the technology, the sharper that two-edged sword.
Enables you to install a kernel with proper support for Bluetooth HID, so you can use a folding keyboard and/or bluetooth gamepad with the phone.
Enables you to create a swapfile and use virtual ram. See, Android has an official mechanism for reclaiming memory used by suspended apps, but it's not instantaneous. If you buy Class-6 (or faster) microSD flash, it's faster to just swap a chunk of ram to the flashcard than it is to wait for the app to shut itself down, save its state, and release its memory so something else can use it. If you use class 4 flash, it'll be roughly the same speed either way. If you use class 2 flash, swapping is slower. As you've probably guessed, the free microSD card that comes with most Android phones is only class 2.
Tether for free. Sprint charges $30/month extra if you want to tether without rooting.
Run the CPU faster. Unlike (Intel) desktop CPUs, phone CPUs don't really have a hard upper speed limit. They just go through a point where your battery life totally goes to hell, then a zone where they're kind of flaky and it crashes a lot, then finally a zone where it's almost impossible to use for more than a few minutes WITHOUT crashing. A rooted G2 can run at 1GHz without breaking a sweat, and I'm pretty sure I read that they're generally stable up to around 1.6GHz. The catch is, your battery will last about an hour at that speed.
You can use Samba to make your /sdcard filesystem accessible over the network as a normal Netbios share.
You can use OpenVPN. Unrooted Android can't use it, not even as a client.
You can install sshd and use SSH to securely connect to a root shell on your phone.
You can install thirdparty SSL root certs.
You can use Tor.
Those are just a few things off the top of my head. There are a lot more.
Because T-Mobile service is pretty well nonexistent most places where I need my mobile to work. Also I have unlimited text, data, voice, and roaming with my current carrier - does TMobile even offer that?
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
Why is that odd? The internet was designed exactly so that major issues would not cause outages. As the infrastructure grew, it saw massive demands from all over, both attacks and valid uses - and so the internet we have today was designed from the start AND forged in fire exactly to handle "everyone running anything".
The cell networks were never originally designed with network use, or even really truly heavy loads in mind. More recently they are thinking along those lines but it takes time to widely deploy physical infrastructure. It's absurd to claim the cell network should ne able to handle things "the internet" can because both are "networks".
"There is more worth loving than we have strength to love." - Brian Jay Stanley
tethering that 4g internet that is faster than many home DSL connections
Make it known to any Google representative who will listen (warning: these are few and far between) that you regard the company as hypocritical and cynical, and not worthy of your trust unless the rights of owners of phones running Android/Linux are fully respected.
Right. Look: google doesn't even give a shit about the fact that people have been complaining for YEARS about the lack of group support in Android's contact manager and poor company name support (for example, it is impossible to search for your contact at Widgetco. That's a BIG problem for someone with a couple hundred business contacts, like a salesperson.)
Something my Siemens phone could do back in the early 2000's (bluetooth sync my contacts with the Macintosh Address Book, complete with groups), something my original iPhone did since day 1...Android can't. Well, it sort of does- but it made an utter fucking mess of things when I enabled syncing.
There's all sorts of half-assed-ness throughout Google products and in particular Android. For example, you can use groups in Google Voice to manage call handling behavior per-group, but only by using the Gmail Contacts interface- not your phone. You can't add a calendar to Google Calendar from your phone. Google Voice doesn't accept mp3 voicemail announcement uploads, something Youmail has supported since day 1.
The music syncing sucks (doubletwist can bite my shiny iPhone), the music player sucks (both stock and free alternatives, though at least the free alternatives have lockscreen systems), and there's all sorts of annoying 'holes'- like not being able to add a calendar from your phone.
Please help metamoderate.
Yes, they do as well as unlimited internet. They also will charge you less if you bring your own phone, or decide not to upgrade. In fact, the last time I was in the store, they explained that they were switching to a new policy where they didn't subsidize the phone, they just charged you the lower rate for the service, and would give you a 22 month loan for the purchase of a phone. For most people, that works out the same, but for those that want to keep their phone longer, or upgrade more frequently, it is quite a bargain.
Great way to kill time (and annoy other people) back in the cs lab...
Hi, Robert Joseph (Joe) Hamelin, formerly employed by Amazon.com as a network engineer. Saw a lot in netops worthy of drinking stories, eh?
http://webcache.googleusercontent.com/search?q=cache:tNzoc2EMubAJ:nethead.com/resume/Resume.doc+joe%40nethead.com&cd=1&hl=en&ct=clnk&gl=us&client=firefox-a
So, yeah, I'd agree with you. And add in something about glass houses and stones.
Please help metamoderate.
I'm with at&t so it doesn't matter as I pay the same price contract or not. T-mobile isn't available in my area.
Gone!
Now while we're at it, can I can a 'connect phone, run program, press button and you're done' solution for rooting my HTC Wildfire?
8 steps to root on the N900:
(1-5) main menu -- App manager -- Category:All -- gainroot -- install
(6-8) main menu -- xterm -- "sudo gainroot"
Works fine. You can also install custom Linux kernels from the package manager to get wifi-tethering (which I have done, and it works fine).
Folks like Scotty2 are doing serious, difficult, rigorous pen testing. For free. Leading only to a new generation of un-hackable handsets. Careful what you wish for.
My personal favorite, and by far the most popular, is the Cyanogenmod ROM. Keep in mind that the relatively open nature of the open-source Android operating system has made this a legitimate affair: this is not remotely comparable to what iPhone users suffer under Apple's heavy-handed rule. Frankly, having used Cyanogen's product (generally faster, more stable, and more featureful than the stock firmware) for over a year now, if a particular phone won't let me install it ... well, that's one handset I won't be buying.
As a CyanogenMod user since shortly after getting my N1 I fully agree. Capability to flash custom ROMS and a solid release of CM are prerequisites for me even considering a new phone.
What does rooting the Android accomplish? Beyond the ability to change your prompt... what is the result of this?
I don't have an Android so if somebody could enlighten me (and I'm sure others as well).
Much appreciated.
AC
Edit hosts file to get rid of ads
Enable swap on SD cards to help low-memory devices
Increased range of dynamic under/overclocking
Better backup capabilities
Cool stuff like wifi tethering
Much better performance (better kernels, i/o scheduling, etc)
With the first link, the chain is forged.
Yep, and when you have eventually paid for the item in full, or eventually go into the store and buy it outright, it's all yours. Until then, it belongs to someone else - the manufacturer or the phone company.
So what's your point again?
My point is that though it may seem like that's the case, it's not. If it were, you would have the option of surrendering the device and paying the difference between the device's FMV and the ETF in the event that you decide to break the contract, but you don't. There's no lien on the device itself. Once the sale is made and the 30 day return window has lapsed, the service provider couldn't care less what you do with it so long as you maintain service with them.
If you want absolute proof that it really is the case that you own the phone outright from the moment you acquire it regardless of subsidy, there's a simple question to ask yourself: "Does the monthly cost of my cellular service go down when my contract expires and I am presumably done paying off the device itself?"
You'll also notice that your bill doesn't state recurring fees for the hardware either.
So I'll reiterate:
If I buy your shit from you, it's not your shit anymore. It's my shit and you have no damn business telling me what I do with it, and no, I signed no contract stating otherwise.
Don't ever forget that, and don't ever let a retailer tell you differently.
Boot Windows, Linux, and ESX over the network for free.
My personal favorite, and by far the most popular, is the Cyanogenmod ROM. Keep in mind that the relatively open nature of the open-source Android operating system has made this a legitimate affair: this is not remotely comparable to what iPhone users suffer under Apple's heavy-handed rule. Frankly, having used Cyanogen's product (generally faster, more stable, and more featureful than the stock firmware) for over a year now, if a particular phone won't let me install it ... well, that's one handset I won't be buying.
As a CyanogenMod user since shortly after getting my N1 I fully agree. Capability to flash custom ROMS and a solid release of CM are prerequisites for me even considering a new phone.
The impressive thing about Kondik & Co. is that they don't make you wait very long for that solid release.
The higher the technology, the sharper that two-edged sword.
Nice detective work. Noticing that my public email address matches to my real name in whois.
Wrong. I just plugged your email address into Google.
Please help metamoderate.