Introducing XDA:DevCon – A Conference For Developers By Developers
XDA Developers Android and Mobile Development Forum
Forgot your password?
 
Post Reply+
Tip us?
 
realyst2k
Old
#1  
Member - OP
Thanks Meter 15
Posts: 46
Join Date: Feb 2010
Default Anyone know the mechanics of the Honeycomb exploit used on the Transformer?

Does anyone know the mechanics of the exploits used on the Transformer? They tend to come as .exe files without source code. If we can figure out what they used to break HC on another device, it'd be our first step for the same on the TPT.

I ask this because the prior exploits not working on HC seems to indicate that many of the normal vectors were patched out of HC.
 
headdy
Old
#2  
headdy's Avatar
Junior Member
Thanks Meter 1
Posts: 29
Join Date: Sep 2008
I'm pretty sure I've read somewhere that it uses Asus' backup app.

But it seems like that Lenovo's Mobility Manager has root-privileges to set up the device remotely. I think there could be an exploit for our tablets.
Or somebody finds an exploit inside the Honeycomb source code and provides an universal root mechanism.

Sadly I'm no dev, so chances are high that the text above is just bullsh*t
 
realyst2k
Old
#3  
Member - OP
Thanks Meter 15
Posts: 46
Join Date: Feb 2010
Hmmm, that's an interesting idea...I haven't paid much attention to the mobility manager. Also, there are a lot of Lenovo tools that would need root(their configuration manager when you activate it)....I wonder if it has any exposed undocumented interfaces...
 
realyst2k
Old
#4  
Member - OP
Thanks Meter 15
Posts: 46
Join Date: Feb 2010
won't have time for the next few days(holiday hectic period), but I'll do some decompiling on the lenovo apps to see what I can find expose in those goodies. Hopefully, I'll get the accursed Windows OS to recognize debug mode properly(or give up an VM linux).
 
Noneus
Old
#5  
Junior Member
Thanks Meter 1
Posts: 20
Join Date: Jul 2009
Yes they use the backup tool.

All the preinstalled apk's reside in /mnt/pia, which itself is on an own partition: /dev/block/mmcblk0p6
 
Volker1
Old
#6  
Senior Member
Thanks Meter 72
Posts: 251
Join Date: Jul 2009
Quote:
Originally Posted by realyst2k View Post
Hmmm, that's an interesting idea...I haven't paid much attention to the mobility manager. Also, there are a lot of Lenovo tools that would need root(their configuration manager when you activate it)....I wonder if it has any exposed undocumented interfaces...
I don't think the mobility manager has any privileges beyond standard android permissions like android.permission.CHANGE_NETWORK_STATE or android.permission.CHANGE_WIFI_STATE.

There is also the McAfee Enterprise Mobility Management; I don't know exactly what it does but it seems like not much. You can shell over what is presumably a lot of $$$ so McAffee's app gives you a button to show the apps that you have to install yourself

Of course Lenovo saved itself the trouble of providing a backup solution, so there is no backup. In the strange Lenovo parallel universe, this is apparently acceptable for a business device.
 
original_ganjaman
Old
#7  
original_ganjaman's Avatar
Forum Moderator
Thanks Meter 3480
Posts: 3,944
Join Date: Jul 2007
Location: Glosta
Moved to general

I did not move this straight away because i thought it might become a development thread. Its not gone that way.

So because it is a question, i will move it to general.

Take it easy

O_G


 
Post Reply+
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Go to top of page...

XDA PORTAL POSTS

Nandroid Manager Receives Major Update

Do you find yourself obsessively jumping from ROM to ROM? And do you hate having to restore a full … more

Careers in Android: Recruiter Reveals How Resumes are Chosen – XDA Developer TV

XDA Developer TV Producer Jayce released a video a … more

HttpClient Tutorial to Upload and Download with Your App

Developers wanting to interact with the Internet need to choose a package to do the … more

Profile Flow: A Tasker Alternative

By now, we’re all quite familiar with Tasker, the personal automation app that seems to be able to … more