Kindle Fire and Nook Upgrades Kill Root Access
jfruhlinger writes "The Kindle Fire and Barnes and Noble Nook tablets are similar enough and close enough together in price that they ought to be fighting market share and one-upping each other in terms of features they offer users. But the latest OS upgrades to both gadgets claims to be an 'upgrade' while actually taking functionality away: both remove the ability to root the device."
A more balanced way of looking at it is that the updates fix known local privilege escalation vulnerabilities. This might be more of an issue for people wanting to hack on the Nook Tablet: its bootloader is confirmed locked, but reports lean toward the Kindle Fire having an unlocked bootloader letting anyone flash their own software without needing to gain root first.
Root access was a security risk. I'm glad Amazon fixed that.
GENERATION 25: The first time you see this, copy it into your sig on any forum and add 1 to the generation.
I'm just annoyed that they have not implemented all of Gingerbread. They claim they have Android 2.3.4 on kernel 2.6.37 and yet they don't support the ADK (accessory development kit). It's just a couple of already written classes in the kernel, a framework jar, and a permissions file. It would take an hour to implement and 3 to test. Hook us up Amazon! Then I wouldn't even want to root the thing.
Sounds like some parties are moving towards a walled garden... but but but... it's teh Android!!!onehundredeleven!!!
Get those that cheap "shanzai" tablets from China. They come with pretty good hardware and quite a few already have ICS firmware released. Best of all, you need not worry about not being able to root the tablet.
w00t
Neither device [...] has access to the real android market.
Maybe you should [...] go buy a real Android tablet...
Which affordable, certified "real Android tablet" in the 7 to 8 inch range do you recommend instead of a Kindle Fire or Nook Tablet? Or are Kindle Fire and Nook Tablet like game consoles, sold at razor-thin margins or even at a loss to get people onto the manufacturer's store, and that's why they're so much cheaper than Google-certified devices?
That's not what ADK means. ADK is the Android Development Kit.
For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
Since the last update to the Nook Color let me watch Netflix (it works really well, although subtitles could be slightly larger) and fixed a few oversights like not being able to read books in landscape mode, I really don't have a reason to root it anymore. It may just be my perception, but overall performance seems to have improved slightly as well. Does anyone know if this affects dual-booting the Nook Color off of a microSD card?
Get those that cheap "shanzai" tablets from China.
Are they certified by Google? If not, then what market do they come with?
They come with pretty good hardware
Does "pretty good hardware" include a capacitive digitizer so that 1. I can run applications that require Android Market, and 2. I don't have to either borrow my DS's stylus or press so hard I feel like I'm running the risk of breaking it?
1) That people don't try to return the product when they screw it up doing something that the product wasn't intended to do (and it costs me money)
2) That I eliminate a potential attack vector for malware which would lead to decreased sales and increased returns (which costs me money)
3) That people are locked into using my products (which makes me money)
This is all about the money people. This isn't about trying to screw over the 0.1% of people who buy the tablet - It's about maximizing the profits. And let's be realistic here - they will be recracked in short order.
I call it 'The Aristocrats'
1. I can run applications that require Android Market,
I don't know how I ended up typing that and missing it on preview. I meant "1. I can run applications that require multitouch,"
I have a real faux Android tablet called an HPTouchPad. It's sweet!
I had my rooted NC for several months.
I went back to factory a couple of weeks ago, before the 1.4.1 upgrade, because it simply works better.
The community will have it rooted again in 10 seconds flat.
If you want an eInk reader, then fine get a dedicated eReader. Otherwise get an Adroid tablet, not an LCD eReader.
A year ago, getting something that you could convert to a decent $250 Android tablet was a BFD. Today, not so much.
There were all kinds of great Black Friday deals: Acer Iconia for $200 and so on. You can still get a Vizio 8 at Costco for $189, or a Lenovo Idiapad A1 at Amazon for $199.
Get a real tablet and you are not vendor-locked. You can read any format you want, without excessive hacking. Plus tablets have way more features, like GPS, and cameras.
I have several FlyTouch pads from China. The new ones are dual touch with 1ghz processors in a 7" format and are running around 80$ including shipping. They are google Android and they will send you the android image. Re-flashing is as easy as putting the image on an sd card and booting the unit with the sd card in it.
Not the greatest in the world but they are very good for around the house network access, book reading, hacking, etc.
Lurk Moar
The linux kernel is written in C, not C++ so how did they manage that?
In-case anyone hasn't read the Richard Stallman story: http://www.gnu.org/philosophy/right-to-read.html
From the authors notes:
One of the ideas in the story was not proposed in reality until 2002. This is the idea that the FBI and Microsoft will keep the root passwords for your personal computers, and not let you have them.
The proponents of this scheme have given it names such as “trusted computing” and “Palladium”. We call it “treacherous computing” ...
The 1997 prediction, proposed in 2002, is reality in 2011. The big surprise is that the implementation isn't a technical DRM/TC scheme, but a fundamental change in corporations retaining ownership and control of items after they've been sold. Who could have predicted that?
tomorrow who's gonna fuss
It's just a couple of already written classes in the kernel
The linux kernel is written in C, not C++ so how did they manage that?
A class in C++ is a fancy name for a struct. The only difference between the two keywords is whether the first member is public or private, and best practice overrides that anyway. So allow me to rephrase: "It's just a couple of already written structs in the kernel."
In practice, C++ programmers use the keyword struct to denote that a particular class is plain old data, and they use class to denote that a particular struct has virtual methods, such as a non-empty destructor, and thus can't be used in a union or in a C++ module's C API.
What is the relevance of an affordable, certified "real Android tablet" to the Kindle Fire or the Nook? Just because there isn't a product on the market that satisfies your desire to not pay anything doesn't mean that Amazon and B&N have to satisfy your thriftiness by opening up their tablets.
This is one of the best trolls I've seen a while. People fall for it every damn time!
What is the relevance of an affordable, certified "real Android tablet" to the Kindle Fire or the Nook? Just because there isn't a product on the market that satisfies your desire to not pay anything doesn't mean that Amazon and B&N have to satisfy your thriftiness by opening up their tablets.
Absolutely right. If B&N and Amazon want to sell you hardware that you don't 'own' in the traditional sense, there is nothing forcing you to buy it.
Don't forget about "eminent domain". Government can seize your home for any reason, whenever they please.
Nope. The reply almost certainly came from the same A.C. who posted the original comment.
There are a number of exposure vectors for stuff like this. Certainly the average user does not want something that they buy/download to gain additional privileges and do unexpected things. Anything that makes that less likely is going to be required.
I believe these devices are WiFi only and do not have a great deal of radio power, but you can believe anything with a cell radio in it is going to be locked down as tightly as necessary to absolutely prevent changing radio parameters. The first hacker that gets into a cell radio and shows the world how they can disrupt cell communications in their corner of the world will prove the need for this kind of lockdown beyond any doubt. But I don't see how this would apply to these devices.
Certainly both devices are sold either at a loss or at a very, very thin margin with the expectation that they will be used to buy stuff from the parent company and mostly the parent company. Overall, Amazon has been quite generous with the Kindle line - supporting the 3G wireless access for web browsing, email reading, etc. Yes, you can download non-Amazon books through the Amazon-supported wireless access. I suspect with the Fire the capabilities are there to access free and paid content outside of Amazon, but the Amazon stuff is easier to get to. I have no idea what sort of capabilities the Nook has, but I am guessing both have NetFlix access just as an example. So the devices aren't really "owned" by their parent but the expectation that there will be future profits affect the price of the devices. Similar devices are normally priced a bit higher - as much as 50%.
I do not think the parent "subsidy" is the reason for the lockdown as to the average consumer they are no more locked down now than before. If you can still pay NetFlix and watch movies on the device, then it isn't locked to only Amazon or B&N content.
I think the only explanation that is reasonable is the absolute very last thing they want is any sort of downloaded software making its way onto one of these devices and taking it over. Anything that prevents that or makes it less likely is going get pushed out to the user community. Anyone criticizing this doesn't understand the risks or the incredible backlash that would follow from an exploit on one of these devices.
How do I get it home from the store?
Once a copyright owner has authorized the making and distribution of a particular product embodying a copyrighted work or patented invention within the United States, the exclusive distribution right is considered "exhausted", and further distribution of the same product within the United States is not an infringement of copyright. For copyrights, see 17 USC 109; for patents, see Keeler v. Standard Folding Bed Co., 157 U.S. 659, 666–67 (1895). The only exception for copyrighted works is when a for-profit entity lends a phonorecord (copy of a sound recording) or a copy of a computer program, unless the program is for a game console or embedded in an appliance.
http://www.dealextreme.com/c/tablets-1409
Any of those should do. I just bought a couple of these myself in preference to the Fire:
http://www.dealextreme.com/p/7-capacitive-screen-android-2-3-tablet-pc-w-dual-camera-wifi-bluetooth-hdmi-tf-1ghz-4gb-107665
Then why would you upgrade it? I mean, rooting it sort of replaces the normal software with a new bit of it, so therefore you don't need the upgrade and if you want to root it then just don't upgrade it. Problem solved. The rest of us don't care all that much about that "Feature".
Can you get the source code for the GPL bits?
Which affordable, certified "real Android tablet" in the 7 to 8 inch range do you recommend instead of a Kindle Fire or Nook Tablet? Or are Kindle Fire and Nook Tablet like game consoles, sold at razor-thin margins or even at a loss to get people onto the manufacturer's store, and that's why they're so much cheaper than Google-certified devices?
They're coming. Of course if you're absolutely desperate for a tablet from a brand then $200-250 is probably the best you can hope for right now. But I expect next year the market will be flooded with tablets from $100 up running Ice Cream Sandwich or its successor.
In the United States, a taking under the Fifth Amendment requires just compensation. The government takes my house, and it gives me its fair market value to be put toward a replacement.
You can do whatever you want to them, so yes, you do own in a traditional sense. They're not required to make it easy for you to root.
There is no legal or ethical justification to force [Sony, Microsoft, and Nintendo] to use an open game format.
If you don't agree with the restrictions on a Nook Tablet, you can always buy an Archos 80 G9 instead. But there are no competing video game console makers that use open formats. So if Sony, Microsoft, and Nintendo conspire to forbid a particular game from appearing on any console, why isn't that predatory refusal to deal?
That was the question I went through just a couple days ago. I bought the NC because I could get it cheaper than the Kindle Fire and the reviews for the Fire said it was crap. The ONLY reason I decided to root it was so I could download the Kindle App. I wanted an eReader because I can rent the textbooks I would plan to resell anyway for less than I can find them used and don't have to deal with the hassle of reselling. Amazon rents for way cheaper than B&N and most 3rd parties. I realize locking in is about profits, but I'm not going to pay above a certain price for things either way.
It's a classic troll like those from the dawn of internet trolling, alt.religion.kibology circa 1993. Ah, the good old days of cross-posting about "Majel Barrett Shatner" and "the fifth Beable", both to the appropriate newsgroup for the show, and a.r.k for the audience.
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
The point is arguable. If you wish to by disabled hardware, yes it is your right to do so. I suppose it is their right to sell you broken stuff, even if they broke it on purpose.
I'll stick by my point, it is my right not to buy products that the vendor screws up on purpose.
Lenovo IdeaPad A1 - 7", webcam + mic, offline GPS, $249. I'm still fighting the urge to replace my first generation Nook Color with one of these...
+1 Disagree
If there is such a great market for rooted devices and it's always a battle with manufacturers and service providers why is there not a manufacturer or service provider who simply sell fully open and rooted devices.
They're not required to, no. But then I am not required to like it, and I can post on Slashdot saying "I don't like it, and I'm not going to buy one, and you shouldn't too."
Just because they're not legally prohibited from trying to prevent people from rooting their devices doesn't mean that people can't publically condemn them for it.
And I say this is only speculation based on advertized prices, and not the contracted rates Amazon gets.
Also the none of the NT, NC, or Fire are double the price of any other hardware.
If someone is passing you on the right, you are an asshole for driving in the wrong lane.
I was taking issue with a ownership definition that I thought was incorrect, not saying someone should not be able to criticize certain design decisions.
Much better car analogy: some car manufacturer comes out with a model where, if you hit the driver's door with your hand in the right place, the door unlocks. Lots of people buy the car and enjoy it, since you don't need to carry the keys around with you. Then the car manufacturer fixes the fault, and many people cry foul. Everyone misses the point that it is a generally bad idea to allow criminals to trivially get in to your car, and that locks are a *good* thing.
My point is simply you still "own" it in the traditional sense. You can strip it down to the molecular level, incinerate it, use it as a cutting board, etc.
Galaxy Tab 7.7 and 8.9 are legit, certified "real Android tablets". Not as affordable, but great devices.
Last time I re-flashed one of them, they sent me a link to download the image and it was everything. Including the source. But I have not done that in about a year.
U2
If Sony, MS and Nintendo blacklist a game, that doesn't prevent someone from selling an "open" console (like a PC)
Other than the fact that gamers have a mental set against connecting a PC to a TV. (Others agree: 1 2 3 4 5) How should the developer of a video game convince people to overcome such a mental set and connect a PC to the TV to play a game?
I bought the NC because I could get it cheaper than the Kindle Fire and the reviews for the Fire said it was crap.
You made a mistake relying on bad reviews written by morons. I've looked at a lot of them. They're mostly immature Apple fanbois trashing the competition and/or ignorant "tech journalists" who are cutting and pasting other peoples' reviews. 90% of what you see on tech blogs is pure plagiarism with a lame excuse link buried at the bottom.
The truth is that the Kindle Fire is a really pleasant device, a great bargain, well-supported by Amazon (three OS updates so far) and with the 6.2.1 OS, quite snappy.
I have a Fire, and my daughter has the Nook Color. In terms of performance, responsiveness and usability, the Kindle is head and shoulders above the Color (which is last year's model). A much faster dual-core CPU is the biggest reason, but the display is also much brighter. The Nook Tablet, which is about $50 more, is arguably better hardware, but it's more limited on the media and software side. Both support Netflix. The Fire has more apps and the Amazon music and video, which is important if you are a Prime member but maybe not all that big a deal otherwise. The Fire lacks SD card support and has no microphone like the Nook Tablet.
For books, the Nook Android software is easily obtained and sideloaded on the Kindle Fire without rooting, so you have a choice. I'm not so sure that can be done the other way around.
The Kindle Fire 6.2.1 upgrade wipes and reconfigures the Android /system partition. This is an easy way to do the upgrade, but if you rooted your Fire in order to install the Google app framework, you'll suddenly discover that calendar and contact sync has gone away. Most of the other Google software works without requiring rooting, and it's simple to pull a backup off your Android phone that can be installed on the Kindle Fire.
The culprit here isn't Amazon, but rather Google, which is responsible for making its apps unavailable on the KF platform and for requiring that its application components be installed on the system partition. The only way to make the system partition writeable is to root the device.
There are some parts of the Fire UI that needed some work; the carousel in particular was jerky and not always responsive. That's fixed in 6.2.1. I also see reports that the Kindle Fire doesn't like flaky, crappy wifi routers (and there are a LOT of crap routers out there). I don't know how much of that might be fixed in the upgrade. My routers all work fine.
I see them on ebay, but shipping is ridiculous. Otherwise I see them on Amazon for almost $200.
I'm so tired of having an adversarial relationship with my hardware vendor.
First if was Sony with the "OtherOS" crap.
Now Barnes & Noble wants to dictate what I can & can't do with MY hardware.
I'd argue that it is a vendor's right and responsibility to plug security holes in their products whether it's hardware, software, or both. Simply because plugging that security hole removes future ability to exploit the product in such a way that gives you or someone else root access is a good thing. We really shouldn't be pressing vendors to keep security holes open because you're part of the vast minority that wants to have full root access to the device when, a majority of the time, you don't need or use those root functions. We should be pressing vendors for unlocked/unlockable bootloaders (via fastboot oem unlock for Android devices) that open up access without having to use a security exploit. It should be a feature, not a bug.
I have a NC, and use the boot-from-SD feature to run CyanogenMod7. The original firmware is not rooted (it is unmodified in any way). I updated to the newest Barnes and Noble-skinned OS version in the past week because of the updates you mentioned.
My SD-card still boots up just as it did before, no change. So the update may have changed whether you can root the device itself, I don't know--but it doesn't change the ability to run full-Android from SD card. I'm looking forward to CM9...
Just wait until January for some ice cream sandwiches.
Think of how stupid the average person is, and realize half of them are stupider than that.
Immediately after reading these posts I called Barnes & Noble and found out a few things about my Barnes & Noble Tablet.
1. It's true; they're locking it with the upgrade.
2. The lady who told me I could put any android app on it was wrong; I can't.
3. Since I bought it during this year's holiday shopping season I have until after Christmas to return it.
I still have the receipt and all the wrapping. So I'm taking advantage of step 3 above. I'll buy a sub-$100 tablet, load both the Kindle & Nook apps on it, and use it the way God and nature intended :).
Well, not quite, since either can still remove my books if they want, but closer.
Why then, since my membership card doesn't get me anything from Barnes & Noble when I use it for eBooks, don't I switch back to physical books? (There's an article somewhere recently showing eBooks are no longer much cheaper than physical books, and may in some cases be more expensive.)
Only because as I age I find it easier to read backlt text in large type, than I do to read physical books. I'll buy what I want, from whom I want (within the limits of the new duopoly) but I won't bite off my nose to spite my face.
"challenge accepted"
Make it the size of a PS3, ship it in molded plastic
In other words, something like an Acer Aspire X1 with a 10-foot-UI media launcher. But one still runs into "I already own a PS3 and a Wii, and I have plenty of games to choose from for them, so I don't need games developed by micro-studios." I don't see how any game with production values typical of indie budgets could be made desirable enough to get the masses to pay $400 for one game. Major-label games have the advantage that the end user is likely to already have the hardware to play it, and therefore each game doesn't have to be a system seller by itself.
Once all major CPUs have locked bootloaders on the same die, then what are people supposed to use to run free software? Video game consoles already put a locked bootloader on the CPU die. And given the hullabaloo about the "UEFI secure boot" feature of Windows 8, it appears even PCs are likely to go the same way.
But, for some reason, you expect to be able to modify an eReader into a general computing device, but still have it function as the manufacturer intended.
With computing devices, there isn't nearly as much of a danger of permanently destroying mechanical parts. I expect to be able to flip a switch and use all the general-computing-device parts I installed, and then flip it the other way, remove all general-computing-device parts, and send it back to appliance mode. Apparently on the older Nook Color, the switch is as easy as inserting or removing an SD card.
If you bought a talking doll, Mattel doesn't have to provide you with any means to open up the baby to alter the voice. You may figure out how to do so by cutting open the doll, but Mattel doesn't have to provide a means to reprogram the voice chip.
There's a difference between a device that can run only the apps that come with it and a device that can run apps sold separately. I'm more willing to accept a locked down computing device, such as the MCU in a microwave oven, if it isn't marketed as supporting apps that are sold separately. As for this analogy, installing apps on a device is roughly equivalent to installing voices on a doll, but talking dolls generally lack the means to install additional voices unless their name is Ruxpin.
Tell that to Google.
http://developer.android.com/guide/topics/usb/adk.html
I think it's hilarious that instead of commenting on the topic you guys chose to argue semantics.
Lenovo A1.
If a box for a video game console does not say 'Allows you to develop and play your own games', what reasonable expectation do you have that it will in fact do that?
If I can add apps to the machine, I expect to be able to add apps to the machine. The box for an Acer Aspire X1 doesn't say 'Allows you to develop and play your own games', yet I can edit and run JavaScript out of the box. Or I could install any sort of game RAD tool (e.g. Clickteam products), I could install Python and Pygame, or I could even install Visual Studio Express (for Windows) or Xcode (for Mac OS X) or whatever syntax-aware editor is the flavor of the week on Linux. I guess an Aspire X1 is just better than a game console.