Towelroot

[matt]

Any crash test dummies? Supposedly will root without first unlocking, preserving data. Then a root app can be used to unlock, preserving data. I'm waiting to see if anyone has success with these tablets. It has been used on nexus phones.

sent by mirrorflash Morse code

[Tiny]

I'd maybe try it if I had a new phone or tablet.  All of my Android devices are already rooted.  They ain't broke, so I have no need to fix them.

Here is the link for Towelroot.  A search will find many tech site articles on it.

[matt]

Interesting, though. I might try if inside exchange window.

Sent from my Nexus 7 using Tapatalk

[birdastrompgman]

I'm your test mule, Matt.  After reading about Towelroot's security issues, I dropped back to a pre-June 3 OS (4.4.0, build KRT160) on my N7 (2012), and re-locked my bootloader. 

Then I ran Towelroot.  Nothing obvious happened on reboot.  Bootloader is still locked, root checker says I'm not rooted.  But adblocker plus and root explorer run like they're on a rooted device.  Ads are blocked on Ookla Speedtest and root checker, and I can see root level files/directories with root explorer.  I'll do more testing tomorrow.

[matt]

Try SuperSU , and boot unlocker app.

Sent from my Nexus 7 using Tapatalk

[matt]

I believe the linux exploit exists even on the current 4.4.3 build. It may be patched next update.

This means root and unlock may be achieved at app level, without a PC.

And possibly a script could be run to boot into a custom recovery without flashing it. To backup and restore nandroid.

Can android be weaned away from it's PC dependence?


sent by mirrorflash Morse code

[birdastrompgman]

I'm purposely not unlocking the bootloader and not loading SuperSU or Superuser yet, because people who do those things aren't afraid to root their devices.

My Towelrooted N7 can't see my OTG-connected USB flash drive, because Stickmount uses SuperSU, which I haven't installed.

Yes, Towelroot really opens the door to a huge variety of good and bad options. It's exposed such a glaring weakness, Google is going to have to patch it ASAP!

Sent from my Nexus 7 using Tapatalk

[matt]

Hmm, I've had a number of cheap Chinese tablets that root explorer can mount system RW. Rootchecker just seems to look for superuser or supersu and busybox. I wonder if rooting and installing supersu would prevent the exploit from working.

sent by mirrorflash Morse code

[birdastrompgman]

I attempted to install a boatload of apps requiring root access, and almost all of them wouldn't run because either SuperSU, Superuser, or Busybox were missing.  I tried installing Superuser, and it gave no error messages, but every Busybox installation I tried failed.  I couldn't push the SU or busybox binaries because of my locked bootloader.  Bascs like Titanium backup and AL Mass Storage Manager wouldn't run.

So, essentially, Towelroot isn't a viable alternative to traditional rooting.  Its importance lies in its exposing Android's vulnerablities.

[matt]

I've had issues with SuperSU not updating binaries. There is a beta build that supposedly works.

Sent from my Nexus 7 using Tapatalk

[matt]

It doesn't seem compatible with the 2012 n7.

sent by mirrorflash Morse code

[matt]

The 2013, on the other hand...

sent by mirrorflash Morse code

[matt]

sent by mirrorflash Morse code

[birdastrompgman]

Towelroot did that with a locked bootloader and no SU or Busybox binaries on the 2013?  I chose the wrong mule!

[matt]

I think tr puts in the su binaries, then supersu updates. There's also bootunlocker for nexus on gplay  (root) that doesn't wipe data! 2013 only. Guess I need to move this thread.

sent by mirrorflash Morse code