Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Android

Motorola's Sholes Bootloader Unlocked 283

teh31337one writes "Motorola's locked bootloader for their Sholes-family devices (Droid OG, Milestone, DroidX, Droid 2 etc, not Atrix 4G) has finally been cracked. @nenolod explains on his website: The Motorola Sholes platform uses a trusted bootloader environment. Signatures are stored as part of the CDT stored on the NAND flash. mbmloader verifies the signature on mbm before passing control. mbm verifies all other signatures before allowing the device to boot. There is a vulnerability in the way that Motorola generated the signatures on the sections stored in the CDT. This vulnerability is very simple. Like on the PlayStation 3, Motorola forgot to add a random value to the signature in order to mask the private key. This allowed the private key and initialization vector to be cracked. This comes at the time when HTC are also stepping up their attempts at locking down their phones . The recently released LTE flagship — ThunderBolt is their most locked-down phone to date ... They made signed images, a signed kernel, and a signed recovery. They also locked the memory."
This discussion has been archived. No new comments can be posted.

Motorola's Sholes Bootloader Unlocked

Comments Filter:
  • Sorry, but no (Score:5, Insightful)

    by Nuno Sa ( 1095047 ) on Monday March 21, 2011 @05:33AM (#35557188)

    Even with the cracked bootloader, the company's attitude is not good, so I won't buy a phone from them.

    • I totally agree! My motophone is stuck in 2.1 with all its bugs and the additional bugs Motorola has, and will not get an upgrade, unless a kind hacker does the job that Motorola should have done. The problem is that the list of companies I won't buy a phone from is getting longer and longer. Sony, Motorola, and of course, apple. Sad.
      • Re:Sorry, but no (Score:4, Interesting)

        by mwvdlee ( 775178 ) on Monday March 21, 2011 @07:12AM (#35557528) Homepage

        Which companies are NOT on the list?

        • by Intron ( 870560 )

          How about Nokia? N900 is fairly open. The one thing no radio transmitter should let you do is modify the frequencies that you are using to be outside the permitted spectrum, although I don't see a problem with listening.

    • Wrong about HTC (Score:5, Interesting)

      by AliasMarlowe ( 1042386 ) on Monday March 21, 2011 @07:49AM (#35557710) Journal
      From TFS:

      This comes at the time when HTC are also stepping up their attempts at locking down their phones . The recently released LTE flagship — ThunderBolt is their most locked-down phone to date.

      The submitter should know that the HTC Thunderbolt is just a customized variant of the HTC Desire HD provided for Verizon. Locking it up is almost certainly a Verizon-demanded attribute, and not an initiative from HTC. The Desire HD is unlocked in most of the world, and I doubt if a locked version can be obtained in countries with a more enlightened phone system.

      • From TFS:

        This comes at the time when HTC are also stepping up their attempts at locking down their phones . The recently released LTE flagship — ThunderBolt is their most locked-down phone to date.

        The submitter should know that the HTC Thunderbolt is just a customized variant of the HTC Desire HD provided for Verizon. Locking it up is almost certainly a Verizon-demanded attribute, and not an initiative from HTC. The Desire HD is unlocked in most of the world, and I doubt if a locked version can be obtained in countries with a more enlightened phone system.

        The lockdown may very well have come from Verizon, we'll have to see with their newer devices. HTC have tried to lockdown their devices before, and this is just the next step. Check up on eMMMC, s-off and root for G2, myTouch 4g, and yes, even Desire HD.

        Desire HD being sim unlocked is irrelevant. The lockdown I'm talking about is with their eMMC chip, and now their bootloader/recovery

      • Comment removed based on user account deletion
    • Re:Sorry, but no (Score:5, Informative)

      by teh31337one ( 1590023 ) on Monday March 21, 2011 @09:11AM (#35558120)

      Even with the cracked bootloader, the company's attitude is not good, so I won't buy a phone from them.

      Speaking of which:

      December 20th, 2010 — Motorola notified of keystore vulnerability. No response received from Motorola.

      February 20th, 2011 — Motorola notified again of keystore vulnerability. No response received from Motorola.

      February 27th, 2011 — Motorola notified that keystore vulnerability will be disclosed to public on March 20th. No response received from Motorola.

      March 20th, 2011 — Keystore signature generation vulnerability publically disclosed including private key leak. Response received from Motorola legal.(C&D)

  • by Anonymous Coward on Monday March 21, 2011 @05:33AM (#35557194)

    ... as a programmer is to spend less time trying to hack, tweak, or otherwise add value to platforms owned by companies who want to strip away my rights as a user to modify and operate those platforms as I see fit.

    • 2 years ago I bought an HTC for the very reason that there wasn't any lockdown on it. So why is it that they now want to lose me as a customer ? I don't understand that.
      • Really? You can't understand that?

        Here's why: In the US, the only way to get a phone is through a carrier. (Well, not the only way, but still) And carriers like to control the devices on their networks so they can control the features and functions active on them... so they can sell the services that should be free (like texting) for a butt-raping price.

        And if the carriers decide "for technical reasons" they cannot host a particular model or make of phone, they will lock them out of service on all of the

        • by dargaud ( 518470 )
          I did buy the phone directly, not through the carrier. So how do those DRM bootloaders behave in this case ? Are they disabled ? Or does the maker simply stop selling you phones directly ?
          • It is because of the influence of telecoms that these things happen. I will recall to your attention a story that came not long after the iPhone became common throughout Europe. Despite the fact that local carriers in Europe permitted tethering and that it was previously enabled in their firmware, AT&T's influence caused Apple to push out firmwares that disabled that for everyone because even though that functionality was disabled locally, people were acquiring EU firmware to enable tethering on their

            • So when it comes to who has the most influence, I think it is demonstrably the carriers in the US that carry the most weight... they make the most money so naturally, they are the most influential.

              Nope, not quite. The US carriers are still pretty small compared with the world market, even in terms of profit. The difference is that nowhere else in the world do carriers provide revenue-sharing deals with phone makers. If a European or Asian mobile phone network offers a phone, they buy them, then sell them to their customers (typically via a 'subsidy', which is really a loan at about 15% APR, with repayments hidden in the monthly fee). In the USA, this is how it works for most phones, but for thin

    • Get yourself an N900 before they all run out. Seems almost certain that the industry as a whole is moving toward totalitarian lockdown that makes the current Apple look like GNU. My prediction is that Samsung will be next with locked handsets.

      Meego (the only thing that could bridge the PC and phone) was all but murdered, HP/Palm haven't released anything but press releases. What hope is there that in 5 years time we will still be able to have Debian chroots in out pockets?

  • Waste of money. (Score:4, Insightful)

    by bbqsrc ( 1441981 ) on Monday March 21, 2011 @05:35AM (#35557198) Homepage
    Why do they spend so much money locking down the phone instead of making a competitive, lasting product that the consumer actually wants? "They also locked the memory.", what the fuck.
    • With a locked phone they can give the provider control over the phone (read: appstore ), and the telecom provider. I think Motorola hopes to make extra money from the provider instead of the consumer.

      You are right, if consumers wanted a closed phone they would have bought a iPhone. an android phone is NOT a closed environment, and locking one part down in an open environment leaves a mediocre (in comparison) product.

    • Whose to say the customer doesnt want the product? You're kidding yourself if you think hackers and tinkerers are a large part of any customer base outside dev products.

      The only reason custom firmware and other general modifications have become a mainstream topic is because the minds behind the exploits release tools that are trivial to use. If there wasnt a "power on, point, click" sorta method the majority of people would continue to use the products as they were intended. You want something with added

      • by bbqsrc ( 1441981 )
        I said absolutely nothing about hacking or tinkering, not even insinuated it. It was more of a shot at Motorola for making generally crap products.
        • The article is about a locked bootloader. Thats something that everyday consumers dont care about unless ofcourse the numpties at customer service hotlines blabber on about it(the case in EU?) It's in the realm of hackers and tinkeres
    • by Lumpy ( 12016 )

      Because you are not the customer. They do not care about you at all.

      At most you are an annoyance.

      the carriers are their customer.

  • Wrong way, go back (Score:5, Insightful)

    by axx ( 1000412 ) on Monday March 21, 2011 @05:38AM (#35557210) Homepage

    Sorry, but we shouldn't have to fight teeth and nails to get proper access to devices we buy and own.

    Being locked out of our own legally purchased devices is NOT normal.

    Kind of like buying a computer and not being able to do what you want with it.

    Wait, what is this OSX upgrade you tell me about? Sounds great, and only 29.99!

    • by ledow ( 319597 )

      "Being locked out of our own legally purchased devices is NOT normal."

      Ever tried to access the air-bag controller on your car? Ever flashed your ECU and then expect the manufacturer to cover the consequences? Ever bought software that was reliant on a hardware dongle? Ever bought a large dedicated device (like a specialist microscope) that comes with some ancient MacOS version on the controller PC that you can never touch or upgrade without voiding the whole setup? What about trying to make a replacemen

      • by Kludge ( 13653 ) on Monday March 21, 2011 @09:01AM (#35558070)

        Ever flashed your ECU and then expect the manufacturer to cover the consequences? ... Ever bought a large dedicated device (like a specialist microscope) that comes with some ancient MacOS version on the controller PC that you can never touch or upgrade without voiding the whole setup? ... Hell, some high-end cars have tyres that "talk to" the car so they know exactly when you fitted a third-party component so they can void your warranty.

        The GP poster is not asking for the companies to cover his device when he installs something new on it. Warranties are made to be voided. He is just saying that they should stop trying to control him so that he can not install what he wants.

  • by mr100percent ( 57156 ) on Monday March 21, 2011 @05:40AM (#35557218) Homepage Journal

    It seems these DRM schemes are getting harder and harder to break as the manufacturers are learning from the unlocking community. The iPhone hasn't had an unlock for iOS 4.1, 4.2, and 4.3 yet due to Apple closing more security holes and implementing new checksums. (Anyone who has an unlocked iPhone for 4.1 and 4.2 is doing a hacked form of upgrade that prevents a full firmware/baseband upgrade, but new buyers are completely out of luck)

    It seems like the rooting/jailbreaking/unlocking/modchipping community kinda small; a few geniuses figure it out and publish it in a handy software package for the rest. What does this mean for the future, will the locking/DRM powers outpace them?

    • Re:Getting worse? (Score:4, Informative)

      by Nerdfest ( 867930 ) on Monday March 21, 2011 @05:48AM (#35557240)
      Hopefully it will mean sales going down for phones that are crippled, and up for those that are not. As usual, spread the word about which phones to buy. The manufacturers will only respond to lost sales (and some of them are a little too dense even for that it seems).
      • by pmontra ( 738736 )

        Maybe. Only a few geeks and nerds care about bootloaders but they can tell friends "don't buy that because you won't be able to install that app that requires rooting/jailbreaking". Chances are that locked down phones will sale some units less than non locked down ones. But manufacturers might get more than that money back if locking down is appreciated by phone operators. If that's the case, locking down might make the difference between having a phone subsidized by an operator or not and that impacts heav

      • by jimicus ( 737525 )

        Let me give you an analogy.

        "Do not buy an MP3 player - you can only listen to music that's available on MP3 or been ripped from CD. Instead, you should buy a bunch of musical instruments and then you can listen to whatever you like."

        Anyone who you say that to will give you very funny looks. Then they'll point out things like "I don't want to learn to play an instrument. And besides - only listen to what's on CD or MP3? So I'm limited to.... well, I'm not really, am I?"

        And so it is with locked down phone

        • by Rennt ( 582550 )
          Trust me, no consumer likes being told a manufacturer forbids them using their devices a certain way in order to milk them for more cash. Even if they never planned on doing any of the forbidden things in the first place.
        • And that's the difference right there. Apple will provide you with software support and patches for 2-3 years that will work.

          Motorola, HTC, Samsung, give varing levels of support depending on how many units sold. the flag ship line might get 2 years, but you are lucky to get a single update to other phones. Or those updates are blocked by the carrier.

          The carriers need to be locked out of phones other than sim cards. I was going to get an Atrix, but seeing how crippled it is because of AT&T I am chan

        • "I can't upgrade it whenever I like? By the time a version of comes out that I want to upgrade to but can't, the phone will be worn out from being used every day for 2 years, I'll be at the end of my contract and eligible for a heavily subsidised upgrade to the latest model. So again, I don't see why I should care."

          I got my current phone (Nokia E65) in 2007. Apart from a broken display which cost me 12 € to repair and the scratched case which I do not care about the phone is perfectly fine. The contract I am on is older than that, though. 2003 at the latest.

          I certainly am not representative of the majority of users, but not everyone treats their mobile phones and contracts as throw-away items. And not everyone takes subsidised phones.

      • If you can't get Angry Birds on the phone you're recommending, you're not going to win anyone over.

        Jo Sixpack / Jane Peroxide don't care about your open platform. They don't care about homebrew, tracking, licensing, DRM, locked bootloaders ("Is that like a shoehorn?") or any other of that stuff which matters to you and me. They want to play Scrabble and update their bookface status with twatter. Don't kid yourself that it's any different.
    • by jonwil ( 467024 )

      What surprises me is that Apple hasn't modified iOS 4.x so that it will refuse to run unless its running alongside the correct baseband, thus preventing the "upgrade but dont upgrade the baseband" trick.

  • Why the hell? (Score:3, Insightful)

    by Anonymous Coward on Monday March 21, 2011 @05:51AM (#35557254)

    Why can't you use your own phone as you please, even more so if it's Android, an open platform?

    The only reason I can think of is piracy, which seems to be the justification for everything nowadays.

    Seriously, this is a genuine question, not some sort of philosophy.

    • Re:Why the hell? (Score:4, Insightful)

      by gatzke ( 2977 ) on Monday March 21, 2011 @06:06AM (#35557288) Homepage Journal

      There may be network issues. Just like the FCC regulates what you do with your wifi antenna. Yes, you can get into your router and up the power on your wifi router, but I think it violates some regulations. I am not a EE, but I bet if you up the power it may screw up other frequencies.

      For a cell phone, imagine if you started spewing crap packages on their network? Or somehow masked your id and got free service? They don't want people exploiting their network, which I understand.

      Ideally they would put all the magic in hardware, then let your OS do whatever you want. Have the cellular radio chip handle everything, so the OS can just interface to it so the network is protected and you can't scam a fake ID. Then you could do whatever you want, like run up cell bills for running over your cap using p2p.

      • by Nursie ( 632944 )

        That's pretty much how it works AFAICT, so good guess. But the lock down in phone OS can't really be explained away by the lockdown in the radio units, otherwise open units would be more or less illegal, and I don't see the FCC going after Nokia for the N900, or google for the nexus phones.

      • GSM (and probably CDMA) modules, as far as I know, already implement the protocol in separate chips. And you can't simply fake an ID like changing a MAC address, they use cryptographic authentication.

        Besides, plenty of cellphones have been sold - and still are - without such protection, nor they care to implement them.

      • Most home routers broadcast at 56- 87 milliwats, where 1 watt is the allowed max. The hardware will literally cook itself before you could violate any sort of FCC regulation with it.
      • Most cellular data networks converge with their landline networks almost immediately. If it were possible/desirable to "throw crap packets" or "exploit" their network, I believe their DSL customers would pose a much bigger threat. Most of these phones REQUIRE the user to get an unlimited data package when you purchase them.
      • Re: (Score:3, Informative)

        by Anonymous Coward

        As an observation, it should be noted that NOTHING of what they've done up to this point has honestly prevented anything like spewing packets on their network. The malware that got onto the phones through the app stores managed this all on it's own very nicely- and saying that this is a good reason for Apple's walled garden approach, is wrong as well as they had their malware incidents too.

        Protecting their network isn't the reason.

    • Re: (Score:2, Offtopic)

      "Terrorism," "piracy," and "think of the children" are excuses that the average person just seems to accept.

      "There was a terrorist attack!? Maybe you should take away some of our rights that we claim we are better for having so that we can have a false sense of security! That couldn't ever be abused by a corrupt government! Humans can't ever make mistakes when they are given unchecked powers!"

      "Oh, you implemented this strict and annoying DRM scheme because of pirates? It's all their fault even though you're

    • by jimicus ( 737525 )

      Why can't you use your own phone as you please, even more so if it's Android, an open platform?

      The only reason I can think of is piracy, which seems to be the justification for everything nowadays.

      Seriously, this is a genuine question, not some sort of philosophy.

      I suspect it's got less to do with piracy and more to do with customer returns. These phones are fundamentally consumer items, and like most consumer items a high level of returns is an absolute killer for your profits.

      Phone shops aren't really set up to deal with phones that have been significantly messed around. They can reload the software from a PC provided there's enough of the firmware left on the phone to support this, but that's about it. Combine a burgeoning community of hackers who are turning

      • by arth1 ( 260657 )

        Also, and I think this is the main reason: pressure from the providers.
        Here in the US, it's about impossible to get a phone that hasn't been locked to a provider, and crippled.
        When the provider gets a cut for every app you buy through the "sanctioned" channels, can charge outrageous fees for music services and ringtones, and can charge you an outrageous amount of money for things like international calls and would lose that money if you could call through apps like Skype, well then the provider also would

      • They already managed to pass a tethering app disguised as a flashlight through the Apple Store review process. I really doubt they can't pass through a trojan. Just disguise it as an app that needs to access the web for a valid reason but that in fact is calling home to know if it should activate the trojan or not. Then you simply flip the switch on the server once it's approved.

  • by wisebabo ( 638845 ) on Monday March 21, 2011 @06:19AM (#35557348) Journal

    ... so maybe this is a stupid question.

    Is it easier to jailbreak an iPhone (or iDevice) than this? I thought Android devices were "open"; if so shouldn't one be able to change their OS more easily?

    Or does the openness of the Android platform refer to the fact that there is no restriction on the Apps you can install? Or is there something else I am missing?

    *about this issue. I'm quite knowledgeable about a host of others though!

    • by Tukz ( 664339 ) on Monday March 21, 2011 @06:30AM (#35557402) Journal

      Android itself is relativity open, however, the vendors (Motorola, HTC, SE, etc) can lock it down if they want.
      Only 2 phones use Android in it's base form, everyone else use vendor modified versions.

    • by bemymonkey ( 1244086 ) on Monday March 21, 2011 @06:31AM (#35557406)

      A guess as to what "Open" refers to in this context: Android is open source. iOS is not... Basically, anyone can put Android on their device.

      Unfortunately, this doesn't mean that the manufacturers of mainstream Anroid devices can't lock them down so the people that buy them can't put on their own versions of self-baked Android. It's not Android's fault, but it damn well is Android's problem :(

      • Unfortunately, this doesn't mean that the manufacturers of mainstream Anroid devices can't lock them down so the people that buy them can't put on their own versions of self-baked Android. It's not Android's fault, but it damn well is Android's problem :(

        I'm pretty sure that parts of the LGPL (which a parts of Android are undoubtedly licensed under) makes it clear that the user must be able to:

        0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.
        1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version.

        (From http://www.gnu.org/copyleft/lesser.html [gnu.org])

        I'd argue that a locked bootloader prevents me doing just that, since I can't update the firmware image with my replacement library and expect it to boot.

      • Not in the right context. Android is a truly open platform. You can go get the original source and do damn well what you please with it, so can the vendors who are modifying it and packaging them on their phones. It is the hardware that is being locked down through the use of bootloaders which are not part of the Android system itself.
        • Hate to reply to my own, but think of this analogy. If I run Linux on a computer where the BIOS is intentionally screwed up so that the operation system I installed doesn't run properly, does that make my copy of Linux any less open?
          • As a practical matter: If you're unable to find hardware that will run said copy of Linux, yes. This is, unfortunately, becoming more and more the case on Android. The only current phone that'll let you do what you want with it (Nexus S) is built on sub-par hardware.

            Theoretically: Obviously no.

    • by slim ( 1652 )

      I thought Android devices were "open"; if so shouldn't one be able to change their OS more easily?

      Other people have given accurate answers, but just for clarity -- most Android phones consist of an "open" OS on a "closed" device.

      Imagine you're designing a vending machine. You can use a 100% free Linux distro as its core OS. But you can hide every data interface behind a padlock such that your customer can't install a different Linux, or install extra applications -- they just have access to the coinbox and the product selection buttons. You could include your own non-free software on there -- the applic

    • ... so maybe this is a stupid question.

      Is it easier to jailbreak an iPhone (or iDevice) than this? I thought Android devices were "open"; if so shouldn't one be able to change their OS more easily?

      Or does the openness of the Android platform refer to the fact that there is no restriction on the Apps you can install? Or is there something else I am missing?

      *about this issue. I'm quite knowledgeable about a host of others though!

      It depends on what you're referring to when you say "open".

      The Android platform itself is completely open source. Anybody can download the source, modify it, compile it, etc. In that respect it's quite a bit more open than the iPhone OS.

      The platform, in general, is also more open. You aren't necessarily tied to a single app store. Worst-case scenario, you can load an app from an .apk on an SD card or something. Which makes it far easier to develop your own homebrew/in-house apps.

      However, the individual

  • Why do manufacturers restrict the use of their products like this? For me, as a presumptive buyer, it doesn't sound like a feature at all, just silly. What is the purpose?
    • by bemymonkey ( 1244086 ) on Monday March 21, 2011 @06:35AM (#35557428)

      In theory:

      1. To appease the carriers. The less control end users have over how they use their device, the better. This allows carriers to charge out the ass for things like tethering...

      2. Planned obsolescence. If every user could upgrade their device to the next version of Android easily, you'd get (*gasp*) people only buying a new phone every 4 years instead of every one or two...

      3. To minimize support costs - there's always a few idiots out there that'll brick their phones and then try to RMA them. Of course, switching to PC type OS upgrade/installation system would eliminate that problem right away.

      • by brandorf ( 586083 ) <brandorf@brandorf.com> on Monday March 21, 2011 @07:48AM (#35557704) Homepage
        It's pretty much 100% 1 and 2. Both the carrier and manufacturer get kickback for shipping the phones with certain apps preloaded, and since they are part of the system image, unremovable without some extra work (rooting). Every Verizon android phone, for instance, comes with Amazon Kindle/MP3, Verizon's Navigator software, CityID, and Blockbuster pre-installed, and there's nothing you can do about it. In addition, things like usb tethering (not wifi) is supposed to be a standard feature for android as of 2.2, but is disabled in most phones. As far as planned obsolescence, while you can't directly prove it, one nice example is Sony Ericsson, which promised for months and months that it would upgrade its X10 line to the latest android, then finally said it was impossible for "technical reasons", then announced its new line of phones, which would launch with the latest version of android.
      • 1 &3 I agree with but not 2.

        Planned obsolescence works for dumb phones, but for smart phones especially right now it doesn't make much sense as the smart phones of just 2 years ago didn't have the processing abilities they do now.

        Maybe in 4-5 more years when the majority of major changes have been done and we are all using multi-core 28nm processors in our smart phones you can say it is planned obsolescence however right now things are moving far to fast, for that.

        • You're partially correct, of course - older phones often don't have the processing power to run the newest version of their OS - case in point, iPhone 3G, or the HTC Dream.

          However, there are cases where it's the other way around, and the phone has more than enough horsepower to cope, but is being shackled by an overprotective manufacturer - See the subject of this article, for instance: Motorola's Android phones starting from the Milestone - why wouldn't those be able to run Gingerbread? Or even Ice Cream w

  • Fake (Score:2, Informative)

    by Anonymous Coward

    According to the Guys from #milestone-modding (nadlabak, xvilka,...) the keys and the Story is a fake/hoax.

    Does nobody check this before releasing News?

  • by log0n ( 18224 ) on Monday March 21, 2011 @09:00AM (#35558066)

    We're getting to a point where if we don't like how we're being treated as a customer, we can no longer take our money elsewhere. Every option is becoming evil.

A morsel of genuine history is a thing so rare as to be always valuable. -- Thomas Jefferson

Working...