Guidance (archived)

Introduction

Android tablets, like Creative Ziio, support wireless connection to WIFI access points, but not to ad-hoc networks. However, with other portable devices like laptops and mobile phones, it might not be possible setup an access point, but an ad-hoc network connection.

Therefore many persons are looking if it is possible to use ad-hoc network for sharing existing connection with the android tablet.

Test

For Ziio, there exist an article called ad-hoc fix, which instructs on how this can be done.

Following those instructions, a modified binary called wpa_supplicant is introduced to the device. After modification, it was possible to see and connect to ad-hoc networks. In this example case to barnacle application running on an android mobile. WifiFinder and Wi-Fi Analyzer are applications for Ziio.

Warning

The steps executed here are for verification purposes; ie. to test how easy it is to run custom software on an android device. Please note that running custom software on your device might open doors for malware and might make you as a victim for security and privacy attacks.

Summary

In the reference article, this is called as “ad-hoc fix”, ie. fixing something that was not working earlier. Consumers are interested to get best out of their purchases, and it seems that industry has not been able to control/manage the market situation. Functionality and sales comes as higher priority, and security aspects are left for someone else to concern, ie. the consumer.

Unfortunately many consumers do not undertand the threats involved when downloading and applying “fixes” from internet. Many users have adopted the custom to test and try different fixes until one get the right “fix” which works.

The software downloaded in this test did work, and gave the wished functionality. However, for user/consumer that are no way to verify the origin of the new added software. It seems to do what is was supposed to do, but what else it might be doing? Is the user still safe, that is the question.

Introduction

Android 2.3 provides more features and functions, for example see wikipedia article on android version history.

CyanogenMod 7 is a modification based on Android 2.3 Gingerbread. Their about page contains nice collection of screenshot to show how it looks like. From their wiki pages, their definition goes:

“CyanogenMod is a customized, aftermarket firmware distribution for select Android devices. Intended as a replacement for the software (also known as the “firmware” or “ROM”) that comes factory installed on your smartphone, CyanogenMod is based on the Android Open Source Project – the same base software used in all Android devices.”

For alternative look and feel, there are several themes available (with screenshots). After installation, use Theme Chooser to select.

MiniCM7 is a custom-built ROM for the X10 Mini Pro based on Cyanogen 7.1.

Test

Instructions on the links are followed on how to install MiniCM7 pro into Xperia X10 mini pro phone.

• Link to Instructions
• Link to the ROM used (MiniCM7Pro_V21.zip)
• Link to xRecovery
• Link to netfilter

Adaptation: USB and android SDK

I installed PC companion in order to get the USB drivers for x10 mini pro, and android SDK in order to get the debugger tool (adb) which is needed for operating system commands on android phone. (It is also possible to get these without installing these SW’s).

Adaptation: xRecovery

xRecovery is needed in order to load the ROM. xRecovery tool is started on the phone boot time; keep on tapping the “back” button until xRecovery menu shows up (Right after when Sony Ericsson logo shows up).

I used the manual installation as instructed in the link.

Adaptation: Netfilter

While trying to get tethering to work, I installed netfilter (iptables).

Not working:

• Build-in Wifi tethering
• • “wifi tether” application did not work either
  • • Note: kernel has not been updated separately
  • “barnacle” application works (uses ad-hoc mode)

Started working after theme selection and reboot (?):

• drocap2 screen capture application
• HW keyboard special keys

Warning

The steps executed here are for verification purposes; ie. to test how easy it is to run custom software on a smartphone. Please note that running custom software on your device might open doors for malware and might make you as a victim for security and privacy attacks.

Summary

I guess this is no longer a surprise, but it is scary that it is way too easy to hack or modify your smartphone.

Smartphone rooting, and modifications, resembles the era of wild western, with common people, sheriffs and outlaws. It is really important to know what you are doing, than to trust that everyone in internet are sharing goodies for you in good faith.

For many, the phones are personal and they want to protect their privacy and their data, and it safer to use phones and software from reliable origins only.

This test just confirms that smartphones are HIGH security risks which need to be considered, and managed. Like there are million of different smartphone & software combinations, likewise there are several different protection mechanisms to suit the needs.

Looking the definition of outlaw in wikipedia

• “an outlaw is declared as outside the protection of the law”
• “the outlaw had only himself to protect himself”

If you are performing modifications on your phone, please remember that real hackers might see you are an outlaw. You might be a good target to attack, since you are on your own…