How I Freed My Android Tablet: A Journey in Reverse Engineering (www.thanassis.space)
Slashdot reader ttsiod is an embedded software engineer at the European Space Agency, and shares this story about his quest to "dominate" his new tablet:
Just like it's predecessor, I wanted to run a Debian chroot inside it -- that would allow me to apt-get install and run things like Privoxy, SSH SOCKS/VPN tunnels, Flask mini-servers, etc; and in general allow me to stay in control. But there was no open-source way to do this... and I could never trust "one-click roots" that communicate with servers in China... It took me weeks to reverse engineer my tablet -- and finally succeed in becoming root. The journey was quite interesting, and included both hardware and software tinkering. I learned a lot while doing it -- and wanted to share the experience with my fellow Slashdotters...
He writes that "I trust Debian. Far more than I trust the Android ecosystem," and describes everything from how he probed the boot process and created his own boot image to hunting for a way "to tell SELinux to get off my lawn".
He writes that "I trust Debian. Far more than I trust the Android ecosystem," and describes everything from how he probed the boot process and created his own boot image to hunting for a way "to tell SELinux to get off my lawn".
At one point in time every kind of personal computer you could buy would be yours.
Then people started buying locked down devices, which became a bigger and bigger part of the market. Because why not? People buy them, and it's better for the selling company to maintain control of the device so they can exfiltrate your data, lock you into their software store to reap a cut off the top, or disable the device remotely.
But, generally, you could still get past against-the-owner security in various ways. But companies are learning from the holes, and each generation is more difficult to bypass. Even whitebox PCs are moving in this direction.
The ownership-era for general purpose computing devices is drawing to a close. Step back to 1970's someone playing with their Apple II or C= Pet and try to explain to them that someday, their computer will take orders from someone else in preference to theirs. They might not even understand how such a thing would be possible, but a million tiny steps have led us to our cages. The next million tiny steps will throw away the key. At each step, people get to argue, "THAT step didn't cause the problem. Why are you complaining so much??"
Thus ends the potential freedom brought about by the computing revolution.
the problem is rooting more and more today. creating a non gui debian or other linux distro base is not that hard with a console and chroot.
Very very impressive. But of course, now we know you can do this, landing some more expensive stuff than a tablet on Mars without breaking it should be on your To Do list...
Bert
(You probably saw that one coming, didn't you?)
Great read.
Harrison's Postulate - "For every action there is an equal and opposite criticism"
Good job achieving what millions did already. Just buy a noname tablet from China, they don't care if you root it, and there are probably dozens of ROMs to choose from.
Dirty COW can be used in every Android kernel except the very latest versions, and can root the device easily.
https://en.wikipedia.org/wiki/Dirty_COW
It was Flavor-Aid, not Kool-Aid!
http://www.theatlantic.com/hea...
Reading comprehension is not really your thing, is it? I didn't write Kool-Aid.
Thanks for playing though. We have some lovely parting gifts for you.
Gotta give this guy credit for doing some serious detective and reverse-engineering work. Good job.
Just cruising through this digital world at 33 1/3 rpm...
From the articles conclusion:
There were many points during this journey that I felt really sad.
Congrats on getting past it all to sort of gain some control back of the thing you nominally own.
Less than a year ago, I replaced my trusty n900 with an android device. A co-worker asked how I liked my new phone, and I answered, "Android makes me sad."
I tried the same thing as you (same ultimate goal, to have a working Debian chroot), but I failed.
Thanks for writing this up. SElinux (assumed this, but didn't figure out how to kill it) and caps must have been my issues, since I did get root. Maybe will re-visit this with some insights from your writeup.
This is pretty awesome, and something I wish I could do.... just far too complex and involved for me.
I just kinda gave up, have plans to use an offline Android tablet, but for online stuff falling back to laptops with something like Qubes, Tails and whatnot.
I know there are some alternatives out there, but they are usually either very expensive or hard to get, and you end up in the same situation where you have to trust the guys who did it (stuff like Aquaris M10 Ubuntu tablet, Copperhead OS, BlackPhone 2).
In any case, kudos to ttsiodras(?).
Only LUDDITES would ever think of installing LUDDITE Debian on an app apping device!
Apps!
The tenacity is noteworthy. This guy did a very good job at getting to the bottom of things and enabling total control over his tablet.
Well done!
We suffer more in our imagination than in reality. - Seneca
I have an Android tablet for which root and TWRP are available as is without any trouble (thanks Samsung). The thing I am wondering about is why I'd need to install Debian chroot on it? Aren't Linux apps mostly optimized for computers with keyboards and all. What is its killer app?
i guess the future readers will never know....
Always-connected Internet made securing your machine impossible. This was the innovation that took away permanent control over your machine. After all, you "need" to install security patches so *other* programs or people on the Internet can't take over your machine, right? This means you can never "fix" your machine to a set configuration. You trust someone else to update your machine, and these updates keep control over you.
But why? There cant be a need for that.
Apple iPads are the locked down devices. The "walled garden" devices.
Android devices are the open devices.
I'm sure of it. Slashdot told me so.
Repeatedly.
I always thought Hillary's pantsuits looked like inmate uniforms. Guess she was trying to tell us something.
Great job. Sell me a tablet with the process done? Then crowd source the next one...?
There ain't any good humor left on Slashdot these days. I guess the biggest casualty of this election is, no matter who wins, is the death of genuine wit in a large section of population - namely Trump supporters.
It's means it is.
"It was as if Android creators absolutely HATED people like me, and did their best to make us suffer; because they group us together with malware authors; and add multiple layers of checks that don't distinguish between the owner of the machine and the developers of applications that run in the machine."
Android it's there and supported boards are not so painful to setup. :D ...) because the provided BSP is already a mess.
The point is OEM want to protect their IP and avoid thinkering.
In some case they even don't know themselves how to make some stuff work and put in place awful workarounds (e.g. china tablets roms, Samsung
I used the one clivk root that talks to china. I then used the permisions to the file system to rewrite the boot sector and recovery. Then used unlocked boot and recovery to rewrite the device with the rom of my choosing with an open source root. Then booted and scanned to ensure the one click rooter was no longer present, remove any potential reminant and your done.