Android Enthusiasts

1:36 AM

@Flow That's worth a general meta question imho. I.e., should we go over the most viewed questions and do a quality control? Some answers are also badly out of date/misleading now.

10:28 AM

Anybody of you use Dolphin on CM10.1? The screen flickering is still there right?

GAThrawn

1:29 PM

@ce4 Just discovered my new favourite app thanks to that subreddit, this is how I'm waking up from now on! play.google.com/store/apps/…

2:35 PM

@GAThrawn: HOLO YOLO! LOL. FYI: I am german, I'd better not use it as advertised in the subreddit... :-)

Question: which ringtone is it?

WTF: It's almost 40MB... (installing right now).

2:50 PM

@ce4 I've not had any major issues with CM10.1 on S2. :)

Ah, nice!

Did you flash the most recent XXLS6 radio/baseband?

Just the screen flickering with Dolphin. Doesn't seem to be there on Opera, Chrome, or stock browser.

No, I'm on XXLQ6. Philippines

I installed the XXLS6 yesterday, not quite sure but I think the 2 bugs i noticed are gone: Proximity /screen off bug when phoning (didn't come back on-call) and 3G instabilities

Will see if I can flash that sometime soon. I'll check for feedbacks in our country.

Other radios don't work too well. GPS messes up.

Oh. Well, I just flashed it, if it's bad I'll return to LQ6

@geff_chang: here's where i got it: obihoernchen.net/downloads/download.php?file=SGS2%20Modems/… (MD5sum fd297bab76f16590cc2c44e9e150343b)

3:03 PM

Thanks! Will check it out later.

Q: How can I root my Lenovo Thinkpad Tablet running the latest official stock ROM?

0

Lenovo doesn't proivde updates for the Thinkpad Tablet any more. I'd like to install a custom ROM and therefore need root. How can I root my Lenovo Thinkpad Tablet running the latest official stock ROM?

What do you think?

@Flow: What's it running?

4.0x?

At rooting time? 4.0

vulnfactory.org/blog/2012/01/22/rooting-the-thinkpad-tablet

forum.xda-developers.com/showthread.php?t=1886460

Those are 2 exploits I'm aware of.

I just rooted it (answered my own question). Was just asking about opinions about the question answer style

:)

3:06 PM

You asked a question, and answered it at almost at the same time? That's FASSST!

@geff_chang There is a extra checkbox for that. blog.stackoverflow.com/2011/07/…

Ah @Flow, oops, didn't even read the Q before posting those 2 links :-)

@ce4 Do you have a list of rooting methods beside your desk or so?

:)

:-) In memory

Next step: Finding out how to boot in CWM Recovery

I wish they just would write it in the XDA post

3:11 PM

@Flow: PS, I bet that debugfs was again a symlink attag, the manufacturers (not google) added those holes a lot. Very common root-method. Sadly, Google fixed it one layer up, /data/local.prop doesn't overwrite /system/build.prop system properties any more if it's a production build.

Yes I thought so too

If you want to see more of this kind, just look at Dan's blog (mentioned above)

One sec...

@Flow: android.googlesource.com/platform/system/core/+/0dbda7e1c5

This one has been used in the most recent exploits, i.e. all aimed at writing /data/local.prop to set ro.secure/ro.kernel.qemu

It's wasn't a really bad bug, because it only allowed rooting if you physically have the device (you need adb). It's good to be fixed, though it was definitely good for modding.

But in reality: I'd like to see more makers enable fastboot and 'fastboot oem unlock' + 'fastboot oem relock' (the latter is very important for security)

3:29 PM

I like the HTC approach. IIRC they have a secure stock system and allow you to install a custom bootloader to install mods if you want.

Hmm what does it mean "bootloader unlocked" from a technical pov?

On Google Nexus, Sony devices with real fastboot access: It's just a flag in the bootloader that enables devel commands

It's basically a break of the chain of trust at the bootloader

What comes first: unlocking bootloader or root?

depends. Google's practised approach is letting happen 'fastboot oem unlock' and wipe. And secure the OS as good as possible to not let people have root by exploits

Ahh I remeber. I need to do a full wipe in order to unlock the bootloader on google devices correct?

unlocking bootloader first then root

3:36 PM

Hi @t0mm13b

(well that's what I do)

Hi @Flow :D

Hi @ce4 :) _o/

Nope. That's what fastboot does before it deletes the secure flag

Hi @t0mm13b

it depends on the handset iirc

sony - fastboot unlock first

confused So fastboot does the wipe before it deleted the secure flag

In the secure state, the BL only loads the recovery or the normal kernel (ie. start android)

3:37 PM

Isn't that the same that I was saying? wipe in order to unlock the bootloader?

yeah it is what you're saying @Flow

It's an atomic operation, you can't opt out. If you meant that, than yes, we're saying the same

for the google nexus handset series, its fastboot oem unlock...

And I still need a root exploit to after unlocking the bootloader? Or can I just install a custom ROM update.zip?

yes, you would need an exploit

3:38 PM

Nope, Once you have an insecure BL, you can do whatever you want. E.g. load Ubuntu OS

@ce4 a fastboot wipe does not mean insecure bl or does it?

Hmm different answers from you both. Lets' see how this ends

Q: What's the security implication of having an unlocked boot loader?

@t0mm13b: false. Having an unlocked bl gives you access to 'fastboot boot insecure-cwm.img'

ok, there's an Q/A from me for this

2

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is done, most people leave the boot loader unlocked. Devices that support unlocking the boot loade...

security bootloader-lock

its the wording I guess, insecure bl, unlocked bl... they sound the same upon impression

/me looksy @ linky

LG definitely locked bootloader and no way of unlocking

Again: Having an unlocked bootloader only unlocks these fastboot commands (on Nexus devs): 'oem unlock', 'oem lock', 'boot kernel.img ramdisk.img' and 'flash recovery cwm.img' and so on

3:41 PM

there's a cm developer arcee, he does stuff for LG and gets handsets from them and he stopped dev efforts on other LG handsets except O2X

So: Using flash and/or boot commands, you can load insecure software or alter the partitions of the device => root

because that one only has unlocked bootloader - the rest are crappy! :D

@ce4 that statement - after unlocking bl right?

Yep. That's why you should relock your bootloader and not have CWM installed (if you don't want this to happen:

Source: youtube.com/watch?v=uM2_CpuzQ0o and github.com/kosborn/p2p-adb

seems fastboot oem unlock 0xkey seems standard de-factor

Zte Blade didn't have to do that :)

The first is lengthy but worth it, the second link is the github project for p2p-adb

3:45 PM

p2p-adb looks very interesting - cheers for that linky for sharing

never knew! :D

it's basically fastboot+adb on a phone that has USB-OTG.

Use: Leech data from android phones with insecure bl's and enabled adb

lol

terrible terrible :D

I.e. stealing the Google/facebook/whatsapp account, etc.

but then droidwall/afwall could block that

It's definitely a hacker tool, but: I bet the TSA uses this

3:48 PM

just one small comment about your answer @ce4

@t0mm13b droidwall doesn't block this. Droidwall is an iptables frontend, nothing more

I'm so amazed... my old nook color will run CM10... and runs pretty smoothly too!

Nexus handsets are orientated towards developers really :)

google does encourage unlocking it :)

Howdy @BryanDenny

hey hey

I would love a Nexus 4 if it would run on Verizon :/

Yeah, but no one cares about the implications...

3:50 PM

Galaxy Nexus still running strong though

Nexus 4 are hard to get by here

Even no Nexus around... :(

@BryanDenny: Yeah, also own one of those old nooks. It's pretty cool that it sill gets CM love!

"no market for it in Ireland"

My Xoom has hit EOL for updates... I might have to consider a Nexus tablet in a year or two

@BryanDenny: which xoom do you own: wifi/gsm?

3:50 PM

wifi

get.cm/?device=wingray

Got CM10.1 lately

(nightlies of course)

hmm... I hadn't considered going to CM on my xoom, it's been stock/rooted the whole time. I'll put that on my todo list :)

right, must go for now, bbiab, later all @ce4, @Flow, @BryanDenny _o/ :)

cya @t0mm13b

cya

GAThrawn

4:04 PM

@BryanDenny I know that pain, I switched my Xoom from the EU to the US ROM about 9 months ago so I could get the official updates, only to find out it would never get 4.2 :(

PS: check this out, area51.stackexchange.com/proposals/49416/android-rom-modding

Blog - Stack Exchange: Podcast #40 – Random Musings (Plus a Suprise Guest)

@GAThrawn: I originally meant play.google.com/store/apps/details?id=asia.namikawa.hitleralerm in my post above (misread it). It's for some strange reason not available in Germany :-)

Stack Exchange

Alex Miller on January 10, 2013

You’re listening to the Stack Exchange Podcast #40 (We apologize to everyone who expected Wil Wheaton last week) Your hosts are David Fullerton, Jay Hanlon, and Joel Spolsky. We also have a surprise special guest: Britton Payne(?), professor of Copyright, Trademark, and Emerging Technologies at Fordham University. He knows a lot of things about software patent law, so we grabbed him as he walked by the studio to talk to us.

About 15 years ago, Congress passed the Digital Millennium Copyright Act to create some useful guidelines for the new digital landscape. We talk about what actually happens with the DMCA takedown notices, including loophole issues that Joel has discovered. …

4:19 PM

wtf is HitlerAlerm?

Get woken up by Adolf speeches, I guess. Highly recommended for germans. Not.

It seems unavailable in germany :)

With good cause!

I like the reviews: "This alarm almost made me loose my job when the alarm never went off in the morning?..randomly works....fun at first though"

I guess, it's the other way round if you use it here and it goes off at an inappropriate time

GAThrawn

4:26 PM

@ce4 heh didn't even see the Hitler one! Have installed the Brian Blessed one on my phone and am waiting to get out of work so I can try it out - hoping for some proper classic Blessed lines, a bit of Flash Gordon and Blackadder maybe?

Why wait for after work? :-)

Every time I visit play.google.com I remember that this site is just a huge usability/UX fail

e.g. my settings -> orders shows a bunch of 'free' Apps

@Flow not surprised. what does it do? hitler yells at you in the morning?

I think it's just an alarm clock with hitler speeches

Matthew Read

coincidentally my stock alarm app rebooted my phone rather than sounding this morning, i was late

4:46 PM

@MatthewRead: If you like, we can chat here a little and I then add the information about insecure recoveries later...

It's more interactive here...

Liam W

5:32 PM

@t0mm13b Why is my answer not right? I said that they would have to get the source and edit it. What is wrong with it?

8:21 PM

@LiamW: Did you vote to reopen on this Q: android.stackexchange.com/questions/37216/…

The reopen suggestion was triggered because of the edit that was made here: android.stackexchange.com/posts/37216/revisions

And not by a user here. Anyway: Nevermind, if I'm mistaken here. I've almost been tricked to vote reopen by the automated suggestion either. Just wanted to share this info.

Izzy

9:14 PM

@ce4 I saw this as well and wondered. Finding the streaming source URL in some web document (I checked, it's most likely contained in some Java code) is not a typical Android question -- so I chose not to vote for re-open :)