mikeschuld / nookdevs

Automatically exported from code.google.com/p/nookdevs
3 stars 1 forks source link

Soft-rooting nook compromises its security #96

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Start up the soft-rooted nook and use internet for something
2. Use router to figure out IP of Nook
3. Use ADB to connect to Nook and delete/modify files

What is the expected behavior?

There should be a way on the Nook to turn on/off ADB connection, so that the 
device can not be compromised when in a public Wifi hotspot.

Original issue reported on code.google.com by lakshma...@gmail.com on 15 Jul 2010 at 6:48

GoogleCodeExporter commented 9 years ago
Although it has been said otherwise, my experience is that disabling ADB via 
the WifiLocker prevents ADB connections from being established until it is 
restarted manually.  Still, the default state is enabled, which should probably 
be changed.

Original comment by mgoetze2...@gmail.com on 15 Jul 2010 at 8:37

GoogleCodeExporter commented 9 years ago
You can start/stop ADB from WifiLocker app. It's on by default. 
If you reboot the device, make sure to go into WifiLocker and stop ADB. 

Original comment by hari.swa...@gmail.com on 15 Jul 2010 at 9:24

GoogleCodeExporter commented 9 years ago
I also feel it is better to keep the default to off instead of on. Is there any 
settings to configure the default to off? or is it implemented directly in code?

Original comment by paddy.iy...@gmail.com on 20 Jul 2010 at 7:35

GoogleCodeExporter commented 9 years ago
no. This has to change in the code.

Original comment by hari.swa...@gmail.com on 20 Jul 2010 at 9:00

GoogleCodeExporter commented 9 years ago
In the latest softroot image, adb is only available over USB, so public wifi is 
safe to use now.

Original comment by kevin.v...@gmail.com on 29 Jul 2010 at 11:13

GoogleCodeExporter commented 9 years ago
But "only available over USB" doesn't mean it can't be activated via the 
WifiLocker, does it?

Original comment by mgoetze2...@gmail.com on 30 Jul 2010 at 5:50