2010-12-20 front | Hacker News

This article nails it. Myself and the other folks who make up the Unrevoked team are basically searching for security exploits on the devices we support. We can't reveal these to the carriers, the phone manufacturers or the Android team because they'll be fixed in the next release and we'll invest the time to find another one.* Each additional exploit is marginally more difficult than the last to find.

We'd much prefer to abandon our rooting efforts entirely and have the market flooded with phones that have the equivalent of "fastboot oem unlock", or have easy ways to flash custom ROMs like the Dell Streak (no signature required), the original Droid and some of Samsung's devices. The energy we spend working on root could be better applied in finding and fixing the security holes that exist on the Android platform.

Until then we'll keep poking holes in the security of HTC devices (our focus) and make them work as hard as possible to figure out which holes we've exploited to keep the rooting window open as long as possible. We'll also keep recommending that people put their money on open devices like the Nexus One and the Nexus S.

* The exception to this was the skyagent hole, where HTC and Sprint shipped a suid-root program that would give any program you installed full control of your device. We notified them of the problem, then shipped a root based on it shortly after:

http://www.scribd.com/doc/34024714/Skyagent-Protocol-Descrip...

http://unrevoked.com/rootwiki/doku.php/public/unrevoked1_dis...

28.

Avoiding Burnout in a Software Startup (tophatmonocle.com)

29.

Forrst v3 Launched Today (forrst.com)

ihodes on Dec 20, 2010 | parent | context | on: A 'Thank You' from Google

It's sure disheartening to see the majority of comments here say something to the effect of "20 mil is nothing—Google has so much more to give." Well they sure as hell do, but we wouldn't be saying anything if they'd donated nothing.

I don't see why it's Google's responsibility to donate a percentage of their income, or donate relative to other large donors.

I think it's cool Google donated 20 million. I don't know why it's on HN. I'm not going to take this as an opportunity to bitch about how they could have donated much more.