!!!!!ALL CREDIT GOES TO Zinx Verituse!!!!!

!!I WILL DELETE THIS POST WHEN HE MAKES AN ACCOUNT AND POST HERE HIMSELF!!

Zinx Verituse rooted the Droid

--UPDATED: 12-9-09--

*NEW METHOD* Much easier!


New exploit zip, including Superuser from CyanogenMod

md5sum: cf653352967253e99d967498ffd9ce69

1) Rename the file to update.zip and copy to the root of the sdcard on the phone

5) Boot the phone to recovery mode

6) Apply the update

There you have ROOT! (and su on the 2.0.1 update!


*please register on the forum and give feedback on the process!*


DETAILS:
Eclair has a new signature checking mechanism, which has a hole allowing unsigned updates up to a certain size.
bootable/recovery/verifier.c notes that a zip file could be hidden in the signature, and has measures to prevent this, but due to a copy/paste mishap, does not check for a hidden zip properly.
This was brought to my attention by embeem, a week or two ago. I do not know who mentioned the problem to him.
Patch that closes the hole: http://review.source.android.com/12807


POST FEEDBACK!

edit: deleted because there is a new simple method now.

I have a good amount of bandwith on my site... hopefully this can help a little

Also.. this is my first time with an Android phone and rooting and all of that, how do you go about actually applying it? Or do we need to wait for a "method" for that? Sorry I'm a noob with this


http://neonlotus.net/FTP/droid-root.zip
(old link not for 2.0.1)

i have the same question. how do we go about applying said root to device? i've always had a jailbroken iPhone and just recently made the switch to droid. i would love to see the difference between the stock device and when its rooted. please help.

I updated the first post with a HOW TO.

I'd also reccomend: THE SUPERUSER WHITELIST AND A TERMINAL APP. IT'S A MUST!

Anyone know of any devs working on a recovery image so we can start putting custom roms on the droid?

Point them this way!

Am I hearing right that it's already been patched? I'm completely out of my element around code, but I've seen this cited as evidence that the vulnerability's already been patched.

https://review.source.android.com/#patc ... verifier.c

Few questions:

1) If I install this - can I get future updates and still be rooted?
2) Has this indeed already been patched - and therefore am I unable to install?
3) Any other clear disadvantages?

Thanks

Prospero wrote:Am I hearing right that it's already been patched? I'm completely out of my element around code, but I've seen this cited as evidence that the vulnerability's already been patched.

https://review.source.android.com/#patc ... verifier.c

Looking into that, lets hope not!

Few questions:

1) If I install this - can I get future updates and still be rooted?
2) Has this indeed already been patched - and therefore am I unable to install?
3) Any other clear disadvantages?

Thanks

1 - Most likely no. But you should still be able to apply updates manually.
2 - looking into that
3 - non that i can currently think of. But This whole rooting of the droid is huge and im sure it's going to expand and there will be more and more you can do with a rooted droid very soon. Lets hope someone gets a recovery working soon so you can install custom roms.

can we get someone with a droid to confirm this update? and which apps have you tested using su?