Will Verduzco · Jul 28, 2013 at 11:00 am

Chromecast Secure Boot Exploit and Root

The Google Chromecast is shaping up to be quite a popular device. Largely due to its price point, adoption of Google’s latest media streamer has been so high as to exhaust Google’s free Netflix promotion. As exciting as the new device is, it’s hard to disagree that the included feature set could be a bit better. However, as with all limited devices, it was only a matter of time before someone rooted it, and that’s exactly what the folks over at GTV Hacker have done.

So how does it work? You first must get your device into USB boot mode, which is accomplished by holding down the single button as the device powers on. Then you use a powered mini USB OTG cable to provide the device with a signed image at a specific address on the USB drive. This firmware is passed along to the device’s cryptography hardware to be verified. However, due to problems with the device’s image signature verification, return code is simply not checked. Thus, you are able to run your own code at will. One thing to keep in mind, though, is that this security hole could be closed with any update at any time, so it’s likely not to be available for too long.

So what can you do with this? Right now, not a whole lot. In fact, if you’re not thinking of developing for the device, we’d recommend not doing this due to the inherent risks. However, the groundwork has been laid for future developments that will build upon this and add more functionality to the admittedly spartan device. I mean after all, who wouldn’t want Miracast support on the Chromecast? Seems like a match made in heaven.

To learn more head over to the GTV Hacker Wiki and also read their coverage of the exploit. And when you’re ready to get in on the Chromecast fun yourself, be sure to head over to the newly created Google Chromecast forum.


_________
Want something on the XDA Portal? Send us a tip!

Will Verduzco

willverduzco is an editor on XDA-Developers, the largest community for Android users. Will Verduzco is the Portal Administrator for the XDA-Developers Portal. He has been addicted to mobile technology since the HTC Wizard. But starting with the Nexus One, his gadget love affair shifted to Google's little green robot. He is also a Johns Hopkins University graduate in neuroscience and is now currently studying to become a physician. View willverduzco's posts and articles here.
Emil Kako · Jul 1, 2015 at 04:24 pm · 3 comments

What Features Do You Look for in a Gallery App?

With so many different options to choose from, finding the right Gallery app may be a tough thing to do. Google Photos is the latest cloud service/gallery app to attempt to meet all your needs, but is it the best? Let us know what features you look for in a Gallery app, and which one is your favorite in the comments.

DISCUSS
Jack Jennings · Jul 1, 2015 at 03:34 pm · 3 comments

Google Photos ‘Unlimited’ Storage Reportedly Being Capped

When Google Photos was announced, many of us thought very highly of the idea. It seemed like Google had taken what they learned from G+ Photos and added some extra touches to polish the experience, making it something that more people were likely to actually utilize. Now however, the much-lauded 'Unlimited Storage' element may not be quite what it seemed. Here's what we can gather so far...   Reports have come in from multiple G+ and Reddit users who have attempted to back up a...

XDA NEWS
Faiz Malkani · Jul 1, 2015 at 02:22 pm · 4 comments

Sprint Moves to Lift Video Streaming Limit for All-In

Yesterday, Sprint announced a new unlimited scheme that offered customers an $80 bundle, which included a $60 plan for unlimited talk, text and high speed data and a $20 payments towards towards a 24 month phone lease, However, a footnote in the plan stated that video streaming would be limited to 600Kbps for users, and this revelation created a flurry of indignation. In a bid to save face in light of the scores of agitated customers, Sprint published a blog post...

XDA NEWS
Share This