Database Info

Creating a Downloadable "root kit" for the Market

I was just thinking... someone could write up an application that does the following:
It verifies you are running RC29. If not, it directs you to the sticky post on xda-developers (or sends you an email with the link).
The application contains a modified/rooted recovery image.
The application tells the user to type "telnetd" + enter.
Once telnetd is running, it telnets into localhost and automatically remounts the /system partition, and replaces the recovery image.
For noobs, it would trivialize a lot of the difficulty of rooting.
I'm pretty busy porting native applications and Mono to work with Android (almost done though!) but wanted to just throw this idea out there for someone else to pick up.
I can also provide source code for my Telnet client that is currently used to do the rooting. That would make a good starting point.

Its a good idea, though whether it makes it onto the market is another question. If u want root bad enough, then u should be able to figure it out through the threads here like i did

Even better, it automatically grabs an RC29 NBH from a server, saves it to SD, verifies the SD is FAT32, verifies its hash, renames it to DREAIMG.NBH and instructs the user to boot into bootloader mode.

I think this would be VERY helpful for those ignorant idiots who post on root-only apps and rate them down because they don't know how to operate Google.
Also, I think it should include an option to download the DREAMIMG.NBH file and put it in the root so that RC30 users can downgrade.
veda_sticks said:
Its a good idea, though whether it makes it onto the market is another question. If u want root bad enough, then u should be able to figure it out through the threads here like i did
Click to expand...
Click to collapse
The thing is, this is exactly why the Android market is supposed to be better than the AppStore. There is no "official approval" process. Apps can get taken down if they are malicious, but as long as a developer has paid their $25, their apps can go straight to the Market.

I think we are all dreaming that an application like this would ever hit the market. I'm not saying it's a bad idea but think about what we putting in front of EVERYONE that owns a G1.
Do you really think everyone that owns a G1 should be trusted with root access?
What happens when the first application that comes to market place exploits root access and really does some damage/malicious to your precious G1.
I'd suggest rethinking this one.

rsfaze said:
I think we are all dreaming that an application like this would ever hit the market. I'm not saying it's a bad idea but think about what we putting in front of EVERYONE that owns a G1.
Do you really think everyone that owns a G1 should be trusted with root access?
What happens when the first application that comes to market place exploits root access and really does some damage/malicious to your precious G1.
I'd suggest rethinking this one.
Click to expand...
Click to collapse
Root access is protected by Superuser.

Koush said:
Root access is protected by Superuser.
Click to expand...
Click to collapse
I get that which is a nice feature, but I thought Superuser is only available in JF images. I don't recall having an application on my stock RC30 called Superuser and it's not found in market place.
What did I miss?

rsfaze said:
I get that which is a nice feature, but I thought Superuser is only available in JF images. I don't recall having an application on my stock RC30 called Superuser and it's not found in market place.
What did I miss?
Click to expand...
Click to collapse
It was on the market for a while. Now its incorporated into the jf updates

korndub said:
It was on the market for a while. Now its incorporated into the jf updates
Click to expand...
Click to collapse
ah then I retract all previous statements dam newbs always spouting off thinking they know everything

"root kit" is kind of an unfortunate name, don't ya think ;-)
Also, it seems like Google could certainly pull the download for violating Dev Distribution Agreement Section 4.4:
Prohibited Actions. You agree that you will not engage in any activity with the Market, including the development or distribution of Products, that interferes with, disrupts, damages, or accesses in an unauthorized manner the devices, servers, networks, or other properties or services of any third party including, but not limited to, Android Users, Google or any mobile network operator.
Click to expand...
Click to collapse
Finally, if you (or someone else) puts an app up there, people are going to download it and try it out. Inevitably some of them are going to be lazy idiots, and they're going to come to xda-dev and spam the dev board with the most inane and aggravating questions. Are you prepared to doom us to that?

jashsu said:
Finally, if you (or someone else) puts an app up there, people are going to download it and try it out. Inevitably some of them are going to be lazy idiots, and they're going to come to xda-dev and spam the dev board with the most inane and aggravating questions. Are you prepared to doom us to that?
Click to expand...
Click to collapse
I'd cancel my account

So just post the app online without putting it on the Market. Then the whole G1 world isn't stumbling across it, but you can pass the link to friends who would like root but who are too scared or too busy to go through the process themselves.

danguyf said:
So just post the app online without putting it on the Market. Then the whole G1 world isn't stumbling across it, but you can pass the link to friends who would like root but who are too scared or too busy to go through the process themselves.
Click to expand...
Click to collapse
if they are too scared they shouldn't have root in the first place. You won't understand what Superuser is truly asking of you and give the wrong application permission then Tmobile will have an influx of calls about "damaged phones."
Busy people have friends like us that can always barter something out of them, just add to the long list of favors.

danguyf said:
So just post the app online without putting it on the Market.
Click to expand...
Click to collapse
My line of thought is, if user x can't follow the instructions in the stickies to get root, then he/she probably shouldn't have root access to begin with. I don't want my phone price to be subsidizing the cost of replacing returns from users who bricked (or mistakenly think they've bricked) their phones doing things that are not officially supported by T-Mo/HTC.
...just my $0.02.

jashsu said:
My line of thought is, if user x can't follow the instructions in the stickies to get root, then he/she probably shouldn't have root access to begin with. I don't want my phone price to be subsidizing the cost of replacing returns from users who bricked (or mistakenly think they've bricked) their phones doing things that are not officially supported by T-Mo/HTC.
...just my $0.02.
Click to expand...
Click to collapse
i completely agree... if you cant read then root is not for you.... there are alot of posts that are well written

coolbho3000 said:
Even better, it automatically grabs an RC29 NBH from a server, saves it to SD, verifies the SD is FAT32, verifies its hash, renames it to DREAIMG.NBH and instructs the user to boot into bootloader mode.
Click to expand...
Click to collapse
It might even be possible to do a force reboot into bootloader. I know how to force-reboot into recovery, but I'm not sure if a similar method can force-reboot into the bootloader.

F the market, its a place for kids to hang out and yell "First" when their 3rd. What joke the Market has been. Cant get an honest review anymore, its all about Obama, gays, being first, and lack of "good games". Nobody even cares that the app says "this is only a test, you probably shouldnt download it", they do and leave bad reviews. Idiots.
If something like this comes to fruition, make them come HERE for it, so their asses can be banned for being chilish

jashsu said:
Finally, if you (or someone else) puts an app up there, people are going to download it and try it out. Inevitably some of them are going to be lazy idiots, and they're going to come to xda-dev and spam the dev board with the most inane and aggravating questions. Are you prepared to doom us to that?
Click to expand...
Click to collapse
If i had a nickel for every noob that spammed the board right now...

I really like the idea of putting it all in one complete package with as little user input as possible, but I don't think that the Android Market would be a suitable place to put it. People who don't even know what root is shouldn't have it offered to them. They should at least have to know enough to Google "root on android" and maybe be lead to one of our threads containing the link to this kit. If it goes on the market I would suggest not branding it in any way.
I support the root package idea in any case.

korndub said:
i completely agree... if you cant read then root is not for you.... there are alot of posts that are well written
Click to expand...
Click to collapse
One of the issues for some people is that there *are* a lot of posts. To get from point A to point B I had to read through one sticky on how to downgrade to RC29, complete with many pages of replies in order to get a handle on possible problems and solutions, then another sticky on flashing to modified recovery image so that I could find how to install the test keys, then another stick on upgrading to JF1.3, again with many pages of replies with potential errors and solutions, and then I realized I hadn't done the engineering bootloader yet so I had to find another sticky to read through.
I did it, and it was easy, but, wanting to be safe, I had to spend several hours paging through stickies in order to make sure I had a good grasp on the whole picture.
I would not have minded having the process automated a bit. I know what I'm doing and I could have used that time for other things.
Additionally, I think it would cut down on questions from n00bs going step-by-step through stickies and making basic errors. Because right now they're still going to go through the stickies and make dumb mistakes and ask the same questions, and of that only a small fraction will understand what they're doing and take an interest in how bootloaders and recovery images work and become the sort of users that should have root.
As it is now, I don't see the stickies as being much of a barrier to entry for those who don't know what they're doing and might brick their phones. They're doing it anyway. Might as well give them something to do it for them so they don't brick the phone right off the bat, and don't flood forums with posts about encountering errors cause by typing errors.
Just my $0.02!

Suggestion Using Torrents for Rom/Radio downloads

Just wondered if anyone had considered creating torrents for things instead of posting links to upload sites or having to worry about having to host things on a private server. This could solve a lot of problems and make downloads much faster for everyone. Linux users probably already know that many of the linux distro sites offer torrents just for that reason.

yareally said:
Just wondered if anyone had considered creating torrents for things instead of posting links to upload sites or having to worry about having to host things on a private server. This could solve a lot of problems and make downloads much faster for everyone. Linux users probably already know that many of the linux distro sites offer torrents just for that reason.
Click to expand...
Click to collapse
I think they like to track the # of downloads, I don't know if you can do that with Torrents.

Another reason is, such as with the bamf previews, they can take them down. On a torrent they do not have that option.
sent from my bolt

This was suggested a couple months ago. I seeded BAMF and BAMF Remix 1.6.3 or something for a couple weeks and posted it in the BAMF thread because people asked but no one used it.

abn75 said:
Another reason is, such as with the bamf previews, they can take them down. On a torrent they do not have that option.
sent from my bolt
Click to expand...
Click to collapse
Why should they really care if they can take them down or not? If there is a problem with the ROM and it is bricking everyone's phone, just make a new sticky that says "Don't install this". This whole recurring theme about "don't re-post the ROM cause you might piss off the devs" is kind of silly.

droidisawesome said:
Why should they really care if they can take them down or not? If there is a problem with the ROM and it is bricking everyone's phone, just make a new sticky that says "Don't install this". This whole recurring theme about "don't re-post the ROM cause you might piss off the devs" is kind of silly.
Click to expand...
Click to collapse
Because they were strictly previews, and it was stated as such that they would only be available for a short time. And honestly if a dev wants control over their Rom and where it's located, well more power to them.
sent from my bolt

abn75 said:
Because they were strictly previews, and it was stated as such that they would only be available for a short time. And honestly if a dev wants control over their Rom and where it's located, well more power to them.
sent from my bolt
Click to expand...
Click to collapse
So we are rooting our phones against the wishes of our carrier and manufacturer but don't want to upset a dev by posting their rom where folks can download it faster? We do the same thing with most all other applications on the internet without regard to the original developers. Firefox has retired Firefox 4 but you can still find plenty of places on the net to download it.

droidisawesome said:
So we are rooting our phones against the wishes of our carrier and manufacturer but don't want to upset a dev by posting their rom where folks can download it faster? We do the same thing with most all other applications on the internet without regard to the original developers. Firefox has retired Firefox 4 but you can still find plenty of places on the net to download it.
Click to expand...
Click to collapse
Way I see it, the devs have the right to request that no one mirror their roms for what ever reason, be it tracking downloads, ability to take them down (again for what ever reason) or just plain being a ass. If people dont agree with that request, they can and should feel free to download a different rom.
Also with torrents, can you really be sure you are getting the correct file? how many people actually check the md5 before trying to flash the rom? Keeping it in the control of the dev insures, at least partially, that the download is correct.

abn75 said:
Way I see it, the devs have the right to request that no one mirror their roms for what ever reason, be it tracking downloads, ability to take them down (again for what ever reason) or just plain being a ass. If people dont agree with that request, they can and should feel free to download a different rom.
Also with torrents, can you really be sure you are getting the correct file? how many people actually check the md5 before trying to flash the rom? Keeping it in the control of the dev insures, at least partially, that the download is correct.
Click to expand...
Click to collapse
Or we can continue with the spirit that makes the internet great including things like custom ROMs, and do whatever the hell we want to do.
This code is owned by Android / HTC. Did the devs get their permission before they modified it and posted their custom ROM?
Please, this whole "lets don't upset the devs" is getting really old. XDA is full of a bunch of dev ass kissers and smart ass devs.
If someone is too dumb to generate a MD5 then that is their fault.

As stated above, torrents are a bad idea when it comes to flashing a Rom. Also if you do ever upload a Rom anywhere make sure you ask the developer first no matter whether you think you should or not
Sent from my ADR6400L using Tapatalk

droidisawesome said:
Or we can continue with the spirit that makes the internet great including things like custom ROMs, and do whatever the hell we want to do.
This code is owned by Android / HTC. Did the devs get their permission before they modified it and posted their custom ROM?
Please, this whole "lets don't upset the devs" is getting really old. XDA is full of a bunch of dev ass kissers and smart ass devs.
If someone is too dumb to generate a MD5 then that is their fault.
Click to expand...
Click to collapse
If XDA is so bad, why are you here? Honestly? There are other sites, go find one

abn75 said:
If XDA is so bad, why are you here? Honestly? There are other sites, go find one
Click to expand...
Click to collapse
Nah, I'll just stay here and try to make it better

droidisawesome said:
Nah, I'll just stay here and try to make it better
Click to expand...
Click to collapse
Well you're doing a fine job right now...

General tips to avoid destroying a rooted phone

I recently rooted and even though I did a ton of research, I destroyed my phone. So here are some tips to avoid turning your phone into a paper weight.
First thing you should do after rooting is create a backup. If I had done this I would still have a phone. To do this boot into recovery (look up how to do this for your phone) and go to backup, create backup.
DO NOT: Trust titaniumbackup to backup system apps or preinstalled apps. IT WILL NOT WORK.
DO NOT: Randomly uninstall system apps even if you do not use them. Many system apps are used for other applications or are required to run in order for the phone to work properly. Some system apps can be installed, but just research it before you uninstall. I found, the hard way, that it is safer to flash a new rom to get more space than to uninstall things that might be important.
If you flash a ROM and have issues with connectivity, internet, sms, etc., it might be because you have a CDMA phone and the ROM is meant for a GSM phone or vice versa. If you look at the back of your phone and you have an MEID number, you have a CDMA phone. If you have an IMEI number you have a GSM phone. If you think this might be your problem go to settings/about phone/phone identity and see if it tells you a IMEI number or an MEID number and see if it matches the number on the back of your phone.
I hope this helps. Feel free to ask me questions and I will try to answer although I am still somewhat new to all of this. If I helped be sure to click thanks.

Thank you Captain Obvious.

lowandbehold said:
Thank you Captain Obvious.
Click to expand...
Click to collapse
Dont be like that, he screwed and wanted help so it doesnt happen to anyone else
It might be obvious, but the good intentions are appreciated
Sent from my X10a using xda premium

lowandbehold said:
Thank you Captain Obvious.
Click to expand...
Click to collapse
I'm sorry if I offended your far superior android abilities with this simple post meant for much less intelligent users like myself, but can I ask you why you are reading a post titled general tips if your expertise extend beyond anything general?
Also if a brilliant "expert" like yourself would have posted a thread like this before, in all likelihood I would not be in the position I am now.
I suggest you get off your high horse and start being a little more accommodating to people who are just learning this stuff.

Thanks for the input. Thanks for helping out us new folks.

Jeff827 said:
I'm sorry if I offended your far superior android abilities with this simple post meant for much less intelligent users like myself, but can I ask you why you are reading a post titled general tips if your expertise extend beyond anything general?
Also if a brilliant "expert" like yourself would have posted a thread like this before, in all likelihood I would not be in the position I am now.
I suggest you get off your high horse and start being a little more accommodating to people who are just learning this stuff.
Click to expand...
Click to collapse
So no one ever told you to only flash ROM's made for your phone? And you cant brick your phone by deleting system apps...you get force closes, go to recovery, reflash, good to go.

[Q] Info required

Hello,
Just wondering if I could get some info pls. We have just bought our son his first mobile (HTC sensation xe) which is on a plan.
He has downloaded some game apps (Simpsons, Minecraft etc) but says he needs to jailbreak his phone to get further access into them, to gain free things (donuts for simpsons game)
I guess my questions are:
What is Jailbreak ?
Is there a process to do this without possibly damaging the phone ?
Is it really necessary for this to be done ?
I have had a quick look through some of the forum pages and noticed that "rooting" the phone sounds like what he wants to do
My concerns are that if this type of thing is attempted, we may end up paying for an unusable phone for the next 24 months.
Any ifno on these matters would be greatly appreciated.

Hi,
belly1967 said:
What is Jailbreak?
Click to expand...
Click to collapse
Jailbreak is a term which is normally used for apple devices to get the devices out of their "golden cage" which means to do things with it that were not intended by the manufacturer. And yes it's nearly the same like rooting on android devices.
belly1967 said:
Is there a process to do this without possibly damaging the phone?
Click to expand...
Click to collapse
Normally it doesn't damage the phone but it is always done at your own risk! (You may loose your warranty)
belly1967 said:
Is it really necessary for this to be done?
Click to expand...
Click to collapse
No.
belly1967 said:
...to gain free things (donuts for simpsons game)
Click to expand...
Click to collapse
Sounds like something illegal to me...

OK first of all its called rooting haha and 2nd your son needs to learn this ain't no iPhone you don't have to "unlock" anything to get the full functionality of the phone and 3rd your son is try to get rapid stuff for free which is illegal and cannot be discussed here
Sent from my Slimming Hybrid Fassy

Thanks,
bbrad said:
OK first of all its called rooting haha and 2nd your son needs to learn this ain't no iPhone you don't have to "unlock" anything to get the full functionality of the phone and 3rd your son is try to get rapid stuff for free which is illegal and cannot be discussed here
Sent from my Slimming Hybrid Fassy
Click to expand...
Click to collapse
Thankyou for reply

If he just wants to root in order to get paid things for free, you might want to give a lesson in "doing the right thing" instead of letting him go nuts from the instant gratification of stealing everything you want.
Sent from my SGH-T999 using Tapatalk 2

[SECURITY HOLE] [Readme] Newbie / Noob warning!

Hello readers, I am a cyber forensic developer and analyst.
While looking over automatic rooting softwares and websites I came across 2 programmes that installed smpt keyloggers to the system directory.
I am yet to analyse how it works [Will be updated when I do]
Till than please make sure don't use any auto rooting software.
For rooting please refer to our xda friends and developers who has posted several rooting methods through odin and a root file along with a custom recovery.
Administrators are requested to pin this post for the digital safety of the newbies and other victims.
Leave a thanks it it helped you

If you could link to, or describe these programs it would be even better

Nitro_123 said:
If you could link to, or describe these programs it would be even better
Click to expand...
Click to collapse
I am yet to analyse those files.
I captured two outgoing files,
1. Keylog068.file
2. PhoneGal.file
keylog seems like a text file but it is encrypted.
I cannot link them to the rooting websites and softwares unless I am positive about the threat.

Please report the link or program used to root... Otherwise downloading programs outside of XDA come with malware pre-installed. Try using methods to root any tablet/phone from known sources specially rooting software found within XDA itself.

The government is watching me? Even in my tinfoil hat?
Sent from my Moto X cellular telephone...

...Awesome... said:
Please report the link or program used to root... Otherwise downloading programs outside of XDA come with malware pre-installed. Try using methods to root any tablet/phone from known sources specially rooting software found within XDA itself.
Click to expand...
Click to collapse
I cannot report unless i am 100% sure the program steals our keylogs. I am trying to crack the encryption, and will report back soon
(Actually i am a bit slow with rainbow tables )

cybe4_f0rencic_d3v said:
I cannot report unless i am 100% sure the program steals our keylogs. I am trying to crack the encryption, and will report back soon
(Actually i am a bit slow with rainbow tables )
Click to expand...
Click to collapse
As this is a developers site it might be handy to share the suspect programs.
So others could help in decrypting, and/or check for malware.
But thanks for sharing this information anyway, and goodluck on your efforts! :good:

HanZie82 said:
As this is a developers site it might be handy to share the suspect programs.
So others could help in decrypting, and/or check for malware.
But thanks for sharing this information anyway, and goodluck on your efforts! :good:
Click to expand...
Click to collapse
Ok i will do one thing, I will upload the captured files ASAP

cybe4_f0rencic_d3v said:
Hello readers, I am a cyber forensic developer and analyst.
While looking over automatic rooting softwares and websites I came across 2 programmes that installed smpt keyloggers to the system directory.
I am yet to analyse how it works [Will be updated when I do]
Till than please make sure don't use any auto rooting software.
For rooting please refer to our xda friends and developers who has posted several rooting methods through odin and a root file along with a custom recovery.
Administrators are requested to pin this post for the digital safety of the newbies and other victims.
Leave a thanks it it helped you
Click to expand...
Click to collapse
First thanks for the allert. For this First step I give you 50% of an A. Why? Because you need to Post All Important Info. What you have done is useless.
It is not wrong to point out Possible or Unverified Threats to our security, since this is a mayor risk. It may compare to having some knowledge that a possible murder will be soon or in progress! You do not wait for the murder to happen just to say later that you where just concern!.
But what you have done worth nothing without the knowledge of the NAME of what program you are referring. Nobody else can confirm or denied without Program NAME. Clearly you are not sure. So in your statement, just clearly Express your Concerned. And Clearly say as you did that the info needs to be verified. Then ASK others to Verify your findings.
What you are doing will cause the opposite effect, . As Single accuser you will get back some comments.
Last, if it is a false alarm, you will see the owners of those APPs giving explanations !

Without mentioning the two rooting apps, this is an idiotic thread just spreads paranoia.
I was going to room my daughter's tab until I read this thread.
Which software should I be avoiding? If you suspect it, and can't prove it, why not just list it here so users like myself can avoid it and/or the developers can explain themselves.
Right now, am I to avoid all rooting software?

I vote this thread the most rediculous thread so far for 2014.
Go ahead and root guys. If there was an issue it would be all over the net by now. Don't listen to one tinfoiled hat guys tomfoolery.
Sent from my Moto X cellular telephone...

atudnsca said:
Without mentioning the two rooting apps, this is an idiotic thread just spreads paranoia.
I was going to room my daughter's tab until I read this thread.
Which software should I be avoiding? If you suspect it, and can't prove it, why not just list it here so users like myself can avoid it and/or the developers can explain themselves.
Right now, am I to avoid all rooting software?
Click to expand...
Click to collapse
You can root via custom recoveries and root files, its considered safe.
I will post an update today on my findings

I don't get why people would use software to root their device.
It's much more fun to do it yourself.

bensonhsu2008 said:
I don't get why people would use software to root their device.
It's much more fun to do it yourself.
Click to expand...
Click to collapse
agreed!

bensonhsu2008 said:
I don't get why people would use software to root their device.
It's much more fun to do it yourself.
Click to expand...
Click to collapse
Im sorry for your lack of imagination/empathy then.
But i dont always have the time (ie patience) to do it all myself.
And lets be honest nowadays everything has to be easy, people dont want to think for themselves anymore.
You can see that in the forums as lot's of easy/simple/dumb questions being asked. (without searching so the questions is not new).
I could go on, as its an irritating factor for me, dumb people... :angel:

cybe4_f0rencic_d3v said:
agreed!
Click to expand...
Click to collapse
Here's what I don't understand. Why are you not telling us the suspect apps? You can report more findings when you get em. Until you state actual names or links to the apps you are being disregarded by many. If it's something on xda that's causing this and you are dickin the dog on telling us, you have lost all credibility...
Sent from my Nexus 5 using XDA Premium HD app

Any update as to what apps we should be avoiding?

He's spouting the same stuff in other forums. He's a kid. LOL.
Please carry on with your normal lives.
Sent from my Moto X cellular telephone...