#ifihadglass I would jailbreak it and modify the software

https://twitter.com/saurik/status/327856986278477824

by taytus • 13 years ago

390 114 13 years ago

twitter.com

thurn• 13 years ago

Accessing root on a device by using the built-in debug mode counts as "jailbreaking" now?

saurik15• 13 years ago

The debug mode gives you locked-down adb access, not root.

danilocampos• 13 years ago

Really, dude? You're going to sass saurik on the subject of jailbreaking? Know your history.

obituary_latte• 13 years ago

HN: where everyone is an expert. A vile, condescending, hate-filled expert.

sturmeh2• 13 years ago

I'm sorry, we're not talking about a locked down iOS device here.

brian_cloutier3• 13 years ago

Jailbreaking isn't quite as fun when it's a matter of

> reboot-bootloader

> fastbook oem unlock

saurik15• 13 years ago

That lets you flash the device, it doesn't give you root. To get root from that you need to make a bootable image, which requires a compatible kernel, which you normally pull off the device as root. Thankfully, there is a race condition in the backup/restore mechanism that lets you do a symlink traversal to unlock root adb (by modifying /data/local.prop).

(To be clear, though, this was a known exploit: it is normally done to the Android Settings application, which isn't present on the Glass, but it turns out that the Glass Logging service also has the right prerequisites to pull off the attack, so I adapted the restore payload. The tweet I posted right after this one made it clear what exploit I was using against what installed package.)

MostAwesomeDude• 13 years ago

Thank you so much for doing this. I knew it was only a matter of time and it's very heartwarming to see that Glass will remain useful for hackers.

drdaeman2• 13 years ago

I don't know anything about Glass, but I believe, usually, if one can reflash the device, one should generally be able to dump any MTD partition contents, too. If that is the case, rooting is as simple as getting to the bootloader, asking it to dump the root partition, unpacking (in case of cramfs, SquashFS or alikes), modifying, repacking (if necessary) and flashing back.

At least, this was the possible with D-Link and TP-Link routers (using pre-flashed u-boot) and Tegra-based Android tablet (using nvflash).

brian_cloutier3• 13 years ago

I stand corrected.

Thanks for the explanation. Your next tweet was too cryptic for me to understand so I didn't realize you were explaining your jailbreak method.

If I'm understanding you right though, this technique sounds fairly universal. Does it affect any android device with an unlockable bootloader? Just devices running a newer version of the adb daemon?

koushikdutta• 13 years ago

The original post is still correct.

You are also correct in that all you need is a bootable image, which consists of a ramdisk and a kernel. Your statement that it requires root to pull it off the device is not true however.

Here's the kernel: https://code.google.com/p/google-glass-kernel-source/

Ramdisk can be constructed/retrieved from any Android recovery build. Here's one: http://download.clockworkmod.com/test/ramdisk-recovery.img

mkbootimg to construct a flashable boot image.

fastboot oem unlock fastboot flash recovery /path/to/recovery.img

It's rooted.

The exploit was unnecessary I think.

aren55555• 13 years ago

Google Glass runs Android 4.0.4, which is subject to the adb restore race condition; com.google.glass.logging fits the needed configuration.

https://twitter.com/saurik/status/327857009754001408

ChrisClark2• 13 years ago

Or you can just use adb to unlock it. It's built right in. It's not 'fastboot unlock' but it's an actual adb command on Glass, specifically to unlock it so you can root it.

No need to try and find a back door. As Tim Bray put it, "Yes, Glass is hackable. Duh."

chriscoyfish• 13 years ago

#healreadyhasglass

agravier• 13 years ago

They should start using #asihaveglass or #wellnowihaveglass

saurik15• 13 years ago

(;P I did feel that was somewhat awkward, but I felt I satisfied the grammar with the rest of my post.)

guard-of-terra• 13 years ago

Why would I even need a device that is supposed to become part of my mind but that I don't have root on?

Come on.

UPD: I already have my mind where I don't have "root" on. It's kind of a black box. And it is counterproductive.

alex_marchant• 13 years ago

Someone start working on a psychotropic that takes back control from the amygdala and call it "su".

njloof• 13 years ago

... And gives it to what? My prefrontal cortex volunteers, but it's always so pushy.

gojomo• 13 years ago

This thread and especially your comment remind me of Cory Doctorow's short story '0wnz0red':

http://www.salon.com/2002/08/28/0wnz0red/

huhtenberg• 13 years ago

You have the root, you just don't have the API spec :)

jacquesm2• 13 years ago

It appears to be mostly sandboxed.

ihuman• 13 years ago

I wish I had root on my mind, so I could better script it.

Also, I would install vim on it.

Lexarius• 13 years ago

Given the way that babies flail around uselessly and can't produce meaningful output for years, I was under the impression that vim was the default editor ;)

mtgx• 13 years ago

Google did leave the root on it. Just like on Nexus devices, you could easily unlock/root it.

https://plus.google.com/118343182830485155505/posts/ERUJ8e1y...

saurik15• 13 years ago

An unlocked bootloader can sometimes be converted to root, but it is not itself root. Once you unlock it, now you need something to ask it to boot: you need a working kernel for that device. I, for the record, cannot find the GPL2 source code for the kernel that is on this device, nor is that even guaranteed to allow me to boot it (due to Linux allowing binary blobs in modules, etc.). Therefore, I feel somewhat forced to use exploits to actually get root on the device so I can modify the software, or even dump the kernel from it and potentially take advantage of the unlockable bootloader.

kvnn• 13 years ago

I believe that demand will exist for software that requires jail breaking, and hardware that interfaces with Glass's standard inputs.

Think of high-income professionals who can make $xx,xxx more per year by face-identifying people in the street and knowing their job and income. I don't believe Google's API supports this, and there are bounds of examples I'm sure.

anonfunction2• 13 years ago

Last night me and my buddy were talking about the future of personal transportation and how when cars (or helicopters) start flying themselves people will resort to jailbreaking them to take back control.

tbrownaw• 13 years ago

...why? Having control of the car requires paying attention to the car and surroundings. I'd rather be able to ignore all that and have more time for reading (whether educational or entertainment) and such.

slg2• 13 years ago

Some people actually enjoy driving/flying.

That said, in order to get the true efficiency of computer controlled vehicles, it really helps to have them all computer controlled.

yew2• 13 years ago

'Control' doesn't necessarily mean 'personally pay attention to all the details'.

Even if you let the car/plane/misc operate itself, the legal ramifications of rooting are interesting (presuming you've already reached the point of having cars without manual overrides, that is).

Imagine the impact of rooting your car on your insurance, for example.

opminion2• 13 years ago

Agree, in fact driving a car on the road is a very questionable freedom. But some would like to exercise it in spite of restrictions, for a variety of reasons. I had hoped that self-driving cars prevented also others from driving their cars. But the grandparent comment just spoiled my hopes.

anonfunction2• 13 years ago

Because I enjoy driving, and I'm sure I would enjoy flying as well. Obviously we weren't talking about manually overriding the system for every commute to the grocery store or even over urban populated areas.

pessimizer• 13 years ago

What if you have to jailbreak it to get it to go where you want it to go?

moconnor• 13 years ago

Except that flying a jailbroken plane with custom software in public airspace really should be illegal. It'll lead to interesting times, if not more open ones...

Zak4• 13 years ago

That has already started.

Cars have had antilock brakes for a long time now. Sometimes those are sensitive enough to harm braking performance when the car is driven by an expert under race conditions. It is not uncommon for people building race cars from street cars or racing cars they also drive on the street to disable ABS.

Now, traction/stability control is mandated by law. Worse yet, if there's a switch to disable it or set it to a "sport mode" that intervenes less aggressively, it must reset to full-on every time the engine is started. It's that last bit I really dislike; I generally appreciate help from computers in various aspects of my life, but once I make my intent clear, I want the machine to respect my decisions.

reustle• 13 years ago

Expert drivers under race conditions? I pull my ABS plugs every winter because it's terrible in snow. Pump the brakes manually and you're much better off than the standard ABS chatter.

stinky613• 13 years ago

I had no idea that ESC was required by law. Sure enough, you're right; U.S. National Highway Traffic Safety Administration Federal Motor Vehicle Safety Standard Rule 126 [1]: "require electronic stability control (ESC) systems on passenger cars, multipurpose passenger vehicles, trucks, and buses with a gross vehicle weight rating of 4,536 Kg (10,000 pounds) or less"

Apparently similar laws exist in Canada, Australia, and the EU. I guess you learn something new every day.

[1] http://www.nhtsa.gov/Laws+&+Regulations/Electronic+Stabi...

mmcnickle2• 13 years ago

Contrary to this, ABS in Formula 1 is banned. It was so successful in reducing braking distances that it was seen to remove much of the skill of the driver, to the detriment of the sporting aspects of the races. Similarly, traction control and stability controls are banned.

r00fus• 13 years ago

Clearly will be banned in future due to terror-inspired law. I mean, only terrorists would go against the built-in navigator, right?

DanBC• 13 years ago

Wait, isn't this a public declaration of breaking some law or other? A few years ago I'd be impressed but not worried. Now? I'm impressed and worried.

missing_cipher• 13 years ago

Depends where he lives and if Google would pursuit it.

UnoriginalGuy2• 13 years ago

He lives in CA, USA. So could definitely be an issue if Google decided to go after him.

brian_cloutier3• 13 years ago

Google has put a lot of effort into calling android an open platform. The amount of bad press and angry developers they'd get for suing _saurik_ for jealbreaking a device that already doesn't have too hot of PR would be incredible.

buttscicles• 13 years ago

I'm not sure about how the decision making process went when deciding who to give an early preview of glass, but I'd imagine the people responsible knew who Saurik was and what his intentions were.

wvenable2• 13 years ago

<Honestly curious> What US/California law is this breaking? </Honestly curious>

UnoriginalGuy2• 13 years ago

http://en.wikipedia.org/wiki/Anti-circumvention#United_State...

axusgrad• 13 years ago

The DMCA provisions for circumventing an access control measure. Cell phone unlocking had an exemption before, but are restricted again.

jacquesm2• 13 years ago

It's quite depressing that such a peripheral would need to be jailbroken in the first place.

Computers got to where they are because they were hackable, not because they were locked up.

joeblau• 13 years ago

It is hackable, he hacked it.

JasonFruit• 13 years ago

I think he or she means "hackable by intent", which seems to be a dying category.

ChrisClark2• 13 years ago

There is no need to 'jailbreak' it. It's built with the same idea as the Nexus phones. It isn't 'fastboot unlock' but Glass has a specific command in adb to unlock, so you can root it. Takes less than a minute, no need for exploits.

Tim Bray says, "Yes, Glass is hackable. Duh."

shmerl• 13 years ago

They could already use normal Linux and open bootloader. Android? Sounds boring.

saurik15• 13 years ago

Apparently the previous person to provide your overall commentary got downvoted enough that you likely don't see my response anymore, so I will respond more directly here (making this reply sadly somewhat repetitive: I'm sorry).

First, it actually does have fastboot oem unlock, and no: there is no "specific command in adb" to unlock it; the command you are seeing people post reboots the device unto the bootloader, which can then be used with fastboot oem unlock.

However, that isn't helpful; in fact, I had to use an exploit (not one I came up with: a known one that affects all Android 4.0/4.1 devices) to accomplish this. (So, my device actually still has a locked bootloader ;P.)

In order to go from "unlocked bootloader" to "root" you need a new image to flash. The most common way to get this is to dump the kernel from the device (as you know that that works), but guess what: you can't, as that requires root.

The alternatives are either to have a stock image from the manufacturer that you can extract a working kernel from (something Google did not provide for the Glass, at least yet) or to build your own from the Linux source code.

Building your own kernel is, of course, possible, however it is quite irritating, and there is no guarantee the result will work as there might be binary blobs in loadable modules that you need, or other irritating hardware checks.

You also need a good feel for what hardware the device has for this to be an option, and Google disabled access to /proc/config, which makes the process of building a vaguely compatible kernel all the more like guess-and-check.

So no, it isn't at all clear to me that it is so obvious that you can go from nothing to "modified software" on the Google Glass. I'd like to see Tim Bray explain how he'd easily go about hacking on the thing ;P.

This is especially the case as the Glass Guide (the fancy term for the Google Glass sales person) who gave me the glass (I chose the option to go to Google HQ to pick it up in person) seriously told me that the debug mode feature (which gives you adb shell) is something that he thought they removed from the units they were distributing. (I guess I was the first person to find it during the at-Google demo and then ask what it would let me do ;P.)

bobz• 13 years ago

There are some pretty serious potential health consequences for the improper use of such a device.

In this case, I actually don't blame Google for keeping things locked down a bit until those are better understood.

The best I would hope for is for them to provide some amount of support for custom OEMs... but allowing people to do whatever they want on the device without some real barriers / safeguards would expose them to enormous liability.

emidln• 13 years ago

There are some pretty serious potential health risks for the improper use of your laptop and mobile phone too. Each can easily start a fire. Your laptop's keyboard is likely damaging your wrists. Small text, dimly lit screens, and hours upon hours of constant use are hurting your eyes.

Maybe we should take away root access to your computer while installing software that forces you to take a break every few hours? Maybe require some APIs that lock you out of your Google account during that time period so you don't cheat with another device (like your cell phone).

smegel• 13 years ago

I wonder if one day it will be mandatory to wear some descendant of this device in order to receive government bulletins, and if the jailbreakers become some underground citizens rebellion against the corporate borg in Google, which ironically still goes by the now-sinister mantra "don't be evil".

derefr• 13 years ago

I'd be okay with this being mandatory in some sense to our future descendants, after it becomes uniquitous enough that it's only the lone straggler who doesn't have one.

Not for government bulletins, though--for instant-vote referrendums :)

DEinspanjer• 13 years ago

There was a fun dystopian future book I read a while back pretty close to this topic. http://en.wikipedia.org/wiki/Feed_%28Anderson_novel%29

Zigurd• 13 years ago

You have to wonder if face recognition will become regulated in some way. For example, if it becomes OK for police to ID you by face, but not OK for you to know that the policeman talking to you has lots of complaints filed against him.

dannowatts• 13 years ago

saurik: doing god's work!

tomphoolery• 13 years ago

Sometimes, I love you saurik.

Just this time...try not to capitalize too much on the whole thing ;)

sturmeh2• 13 years ago

Except it's not called jailbreaking on an Android device.

#ifihadglass I would jailbreak it and modify the software

Related Stories