Will Verduzco · Jul 28, 2013 at 11:00 am

Chromecast Secure Boot Exploit and Root

The Google Chromecast is shaping up to be quite a popular device. Largely due to its price point, adoption of Google’s latest media streamer has been so high as to exhaust Google’s free Netflix promotion. As exciting as the new device is, it’s hard to disagree that the included feature set could be a bit better. However, as with all limited devices, it was only a matter of time before someone rooted it, and that’s exactly what the folks over at GTV Hacker have done.

So how does it work? You first must get your device into USB boot mode, which is accomplished by holding down the single button as the device powers on. Then you use a powered mini USB OTG cable to provide the device with a signed image at a specific address on the USB drive. This firmware is passed along to the device’s cryptography hardware to be verified. However, due to problems with the device’s image signature verification, return code is simply not checked. Thus, you are able to run your own code at will. One thing to keep in mind, though, is that this security hole could be closed with any update at any time, so it’s likely not to be available for too long.

So what can you do with this? Right now, not a whole lot. In fact, if you’re not thinking of developing for the device, we’d recommend not doing this due to the inherent risks. However, the groundwork has been laid for future developments that will build upon this and add more functionality to the admittedly spartan device. I mean after all, who wouldn’t want Miracast support on the Chromecast? Seems like a match made in heaven.

To learn more head over to the GTV Hacker Wiki and also read their coverage of the exploit. And when you’re ready to get in on the Chromecast fun yourself, be sure to head over to the newly created Google Chromecast forum.


_________
Want something on the XDA Portal? Send us a tip!

Will Verduzco

willverduzco is an editor on XDA-Developers, the largest community for Android users. Will Verduzco is the Portal Administrator for the XDA-Developers Portal. He has been addicted to mobile technology since the HTC Wizard. But starting with the Nexus One, his gadget love affair shifted to Google's little green robot. He is also a Johns Hopkins University graduate in neuroscience and is now currently studying to become a physician. View willverduzco's posts and articles here.
TK · May 21, 2015 at 02:15 pm · 1 comment

Device Review: No.1 X1 Rugged Smartphone

We are almost at the end of Q2 for 2015, and we have seen most of the flagship phones for the year already. While flagship phones usually offer bleeding-edge specs and are the most sought after phones, there is a huge market for non-flagship phones. Some offer value, others offer unique differentiating features. Today, we are going to look at the X1 phone by a Chinese company named N0.1. The company promises a truly rugged IP68 Certified phone. The device has a Quad...

XDA NEWS
Emil Kako · May 21, 2015 at 01:10 pm · 4 comments

When a Friend or Family Member Asks for a Phone Recommendation, What Do You Tell Them?

The majority of us here at XDA would consider ourselves power users and Android enthusiasts. Thus, when a friend or family member has a question about which phone they should get, they usually come to us. However, this is where we all differ. While some will atomically recommend the Nexus line, others in the community will suggest an offering from Samsung or LG. When a friend or family member asks you for a phone recommendation, what do you say?

DISCUSS
Chris Gilliam · May 20, 2015 at 04:08 pm · 8 comments

Nexus 4, 5, and 9 OTA Downloads of 5.1.1

This month was a big one for Android 5.1.1 updates, as you can see from last week's roundup and the barrage of posts on the portal's front page in the recent past. So far we are seeing the lineup of Wear watches, the Nexus 4, Nexus 9, Nexus 10, Nexus Player, and a handfull of others slowly make their way to the latest Android. While waiting around for updates may be fine for casual users, this is XDA; we have OTA download links...

XDA NEWS
Share This