The #1 Nexus 7 News, Discussion and Fan Site!

2012 Nexus 7 Discussion Forums (1st Generation) => Nexus 7 Android OS (Jelly Bean) => Topic started by: matt on June 17, 2014, 06:25:09 PM

Title: Towelroot
Post by: matt on June 17, 2014, 06:25:09 PM
Any crash test dummies? Supposedly will root without first unlocking, preserving data. Then a root app can be used to unlock, preserving data. I'm waiting to see if anyone has success with these tablets. It has been used on nexus phones.

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: Tiny on June 17, 2014, 07:09:21 PM
I'd maybe try it if I had a new phone or tablet.  All of my Android devices are already rooted.  They ain't broke, so I have no need to fix them.

Here is the link for Towelroot (http://towelroot.com/).  A search will find many tech site articles on it.
Title: Re: Towelroot
Post by: matt on June 17, 2014, 07:22:15 PM
Interesting, though. I might try if inside exchange window.

Sent from my Nexus 7 using Tapatalk

Title: Re: Towelroot
Post by: birdastrompgman on June 18, 2014, 12:49:41 AM
I'm your test mule, Matt.  After reading about Towelroot's security issues, (http://geeksided.com/2014/06/16/towelroot-exploit-reveals-security-nightmare-android/) I dropped back to a pre-June 3 OS (4.4.0, build KRT160) on my N7 (2012), and re-locked my bootloader. 

Then I ran Towelroot.  Nothing obvious happened on reboot.  Bootloader is still locked, root checker says I'm not rooted.  But adblocker plus and root explorer run like they're on a rooted device.  Ads are blocked on Ookla Speedtest and root checker, and I can see root level files/directories with root explorer.  I'll do more testing tomorrow.
Title: Re: Towelroot
Post by: matt on June 18, 2014, 05:08:12 AM
Try SuperSU , and boot unlocker app.

Sent from my Nexus 7 using Tapatalk

Title: Re: Towelroot
Post by: matt on June 18, 2014, 06:23:23 AM
I believe the linux exploit exists even on the current 4.4.3 build. It may be patched next update.

This means root and unlock may be achieved at app level, without a PC.

And possibly a script could be run to boot into a custom recovery without flashing it. To backup and restore nandroid.

Can android be weaned away from it's PC dependence?


sent by mirrorflash Morse code
Title: Re: Towelroot
Post by: birdastrompgman on June 18, 2014, 08:20:31 AM
I'm purposely not unlocking the bootloader and not loading SuperSU or Superuser yet, because people who do those things aren't afraid to root their devices.

My Towelrooted N7 can't see my OTG-connected USB flash drive, because Stickmount uses SuperSU, which I haven't installed.

Yes, Towelroot really opens the door to a huge variety of good and bad options. It's exposed such a glaring weakness, Google is going to have to patch it ASAP!

Sent from my Nexus 7 using Tapatalk
Title: Re: Towelroot
Post by: matt on June 18, 2014, 01:48:30 PM
Hmm, I've had a number of cheap Chinese tablets that root explorer can mount system RW. Rootchecker just seems to look for superuser or supersu and busybox. I wonder if rooting and installing supersu would prevent the exploit from working.

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: birdastrompgman on June 18, 2014, 08:40:34 PM
I attempted to install a boatload of apps requiring root access, and almost all of them wouldn't run because either SuperSU, Superuser, or Busybox were missing.  I tried installing Superuser, and it gave no error messages, but every Busybox installation I tried failed.  I couldn't push the SU or busybox binaries because of my locked bootloader.  Bascs like Titanium backup and AL Mass Storage Manager wouldn't run.

So, essentially, Towelroot isn't a viable alternative to traditional rooting.  Its importance lies in its exposing Android's vulnerablities.
Title: Re: Towelroot
Post by: matt on June 18, 2014, 09:49:05 PM
I've had issues with SuperSU not updating binaries. There is a beta build that supposedly works.

Sent from my Nexus 7 using Tapatalk

Title: Re: Towelroot
Post by: matt on June 19, 2014, 05:23:27 PM
It doesn't seem compatible with the 2012 n7.

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: matt on June 19, 2014, 05:24:29 PM
The 2013, on the other hand...(http://img.tapatalk.com/d/14/06/20/9enemaru.jpg)

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: matt on June 19, 2014, 05:24:57 PM
(http://img.tapatalk.com/d/14/06/20/zamy4agu.jpg)

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: birdastrompgman on June 19, 2014, 11:53:26 PM
Towelroot did that with a locked bootloader and no SU or Busybox binaries on the 2013?  I chose the wrong mule!
Title: Re: Towelroot
Post by: matt on June 20, 2014, 06:28:19 AM
I think tr puts in the su binaries, then supersu updates. There's also bootunlocker for nexus on gplay  (root) that doesn't wipe data! 2013 only. Guess I need to move this thread.

sent by mirrorflash Morse code

Title: Re: Towelroot
Post by: birdastrompgman on June 20, 2014, 03:41:37 PM
You got my curiosity up, so my N7 2013 is Towelrooted now, too.  This is one-button rooting at its easiest!
Title: Re: Towelroot
Post by: matt on June 20, 2014, 04:12:48 PM
As far as security, sure some malware might attempt to use the exploit, but I got a pop up from Google verify and malware bytes.

With all the popup ads, I've noticed some that do not close when clicking the x, instead redirecting or attempting to run an executable. Adwareplus is worth the root.

sent by mirrorflash Morse code