• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Liberty 1.5 possessed?

Status
Not open for further replies.
faber78 said:
let me get this right;

- a guy who knows a ton about this stuff accidentally sets off a hidden code in one of his roms while showing his buddy about it....as though he had no clue this could possibly occur?

- the other developer could give a rats ass?

- my phone is checking in on boot up to "verify the legitimacy" of open source software?

did i miss anything here?
Click to expand...

Well said! This is how I feel about it as well and have those same questions/concerns.
 
"I was too lazy to re-write code to google liberty so...."
".... how everthing works and forgot about the file."
"I'll be carefull never to test something...."

ok....
1 - honesty is a good start
2 - these quotes all sound like when my 4 year old gets caught.
3 - yes its free software and we all appreciate it, but we each trust you with a $500 phone.
4 - its a free country but as someone with a high level of knowledge, maybe you should learn to be more careful....especially if your gonna "forget" shit.

5- before anyone says it, i dont have to run it....and thats exactly what im gonna do....

edit: and the guy that "doesnt know and doesnt care" can flat kiss my ass.

Id rather you screwed up my phone on accident then because "you forgot"....and id really rather one of the two guys that put this thing together did care.
 
Guys the issue has been resolved. really no reason to dwell on it anymore. i am sticking with liberty but we all have the right and ability to run whatever rom we choose. jrummy made a mistake. was it a big one? kinda, but he is sorry and he did apologize. its not like the phones melted or anything. we all know the risks that come with tweaking our phones. the file is nested on our phones for a legitimate reason, however you can just delete the file as many of us have.
 
bouchigo said:
And the Diva Devs strike again......or at least it looks that way. I was a very strong proponent of Liberty, but after this little stunt I don't know anymore.

I think I'm just going to go back to good old trusty Fission.
Click to expand...


DIVA DEV!!!!!! hahahahahaha where did you get that? hmmmm
 
tom108 said:
Guys the issue has been resolved. really no reason to dwell on it anymore. i am sticking with liberty but we all have the right and ability to run whatever rom we choose. jrummy made a mistake. was it a big one? kinda, but he is sorry and he did apologize. its not like the phones melted or anything. we all know the risks that come with tweaking our phones. the file is nested on our phones for a legitimate reason, however you can just delete the file as many of us have.
Click to expand...

I've read thru everything I think, and the only thing I've seen an apology for is for writing a script that googled liberty 1.5 awesome. What I think alot of people are taking issue with is the idea that devs are starting to put "kang proof" scripts in roms to begin with. I understand nobody wants to get screwed out of credit, but how is this different from locking bootloaders, nand locks, or anything else we bitch about mfg. and carriers putting on our phones?

As far as making sure devs get proper credit, listen even though we are spread across the country we are a pretty tight community. Its not like a new rom slips by without us noticing. If you are really worried about somebody stealing your work, CHECK IT. If it truley is a ripoff, trust me, that person is going to be crucified in the court of public opinion and their work will not be supported by the community.
 
not only did it google Liberty 1.5 awesome, it pretty much made the phone blah. touch screen was completely unresponsive. I had to battery pull and reboot into recovery, then flash Liberty all over again. Not saying my time is worth millions of dollars a minute but it was a bit ridiculous and the "don't care" attitude really didn't help.

Imagine if that happened to a new user? They would freak out and could do some serious harm in a fit of panic. That may be an over exaggeration but I'm a worse case kinda guy
 
Just glad that Jrummy stepped up and apologized for his mistake. He has never done anything in the past (all the way back to the original Droid) that has been anywhere close to malicious. I will continue to support his apps and ROMs in the future.
 
Good to know that I was'nt the only one this happened to yesterday! Apologies are appreciated, just don't be offended if I'm gunshy with the next ROM or update they put out. And it's not kind of a big deal, it was a damned mess if it happened to you! Crap like that makes people react haphazardly and do things they should'nt do. Then they end up holding a brick in their hand. Not cool. As for now, Liberty and anything with it will not be on my phone, and I don't think that's being unfair at all.
 
JrzDroid said:
Imagine if that happened to a new user? They would freak out and could do some serious harm in a fit of panic. That may be an over exaggeration but I'm a worse case kinda guy
Click to expand...

New users should learn able it what they are doing before they do it, and if they do they know they can sbf. Smart users wait on updates until we see what happens with everyone else's phones first, and if there is a new OTA then we wait for a full sbf or update and leave it stock until a full sbf.

I had a similar problem with ApeX 1.0 where the touch screen wouldn't work and I had to sbf the first time and used a Nandroid the next time. It's frustrating but it happens, I think everyone is over reacting.
 
Good thing we have different ROMs to chose from... so do yourself a favor if you don't like a ROM just flash to the one you like.

=)

This is getting old! The guy made a mistake so what! No one is perfect and we all know different tricks to get our phones back to factory. I am new to this and I have factory reset and sbf my phone to many times because playing with the settings I did something wrong.

None of these guys ever forces us to use their roms its up to us. With this saying I am not defending any one neither I am trying to be your enemy. We are here because we like to help each other.
 
eraursls1984 said:
New users should learn able it what they are doing before they do it, and if they do they know they can sbf. Smart users wait on updates until we see what happens with everyone else's phones first, and if there is a new OTA then we wait for a full sbf or update and leave it stock until a full sbf.

I had a similar problem with ApeX 1.0 where the touch screen wouldn't work and I had to sbf the first time and used a Nandroid the next time. It's frustrating but it happens, I think everyone is over reacting.
Click to expand...

I see your point that ROMs at times have issues, but the problems you had with ApeX 1.0 were not done intentionally.

JRummy may have been demonstrating something to a friend as he claims, and I'm not going to sit here and say he is lying, but I don't have to use any ROM he is associated with if I don't want to either.

To each their own, and let's just leave it at that.

P.S. I don't think people are overreacting, I think people are being cautious ;)
 
Full explanation by JRummy
I am closing this thread but just wanted to recap what happened below. If anyone has any further questions you can pm me or email me.

On 2-15-2011 I was talking to a friend showing him scripting in Liberty ROM. We were discussing a script in /system/bin called loadpreinstalls.sh. This script can be found here: Bash | #!/system/bin/sh # # loadpreinstalls.sh - insta

loadpreinstalls.sh installs any apps in /data/liberty/app, restores any apps in the restore directory (which can be setup in liberty settings), unzips animation files and sets up adb to fully work. After that it waits until there is a data connection and then downloads a file. If there is a link in the file it will download it. Then if that file is an app it will install it, if it is a script then it will either run it or install it depending on its file extension. This was created for update purposes and was in liberty 1.0 and rumm rx.

I wanted to show my friend Jake who I was talking to how it worked. I made a script and uploaded it to the server to download and run. I then got hung up with other things I had going at the moment and then had to go to my class. After class I realized from twitter messages that I forgot about the script so I came and responded here as soon as I could and removed the script.

The script I uploaded could only be run if the user rebooted while the script was on the server. I meant to tell my friend to reboot right when I uploaded the script and see it work and then I would remove it right away. The script googled liberty 1.5 awesome using another script in /system/lib called libgnakfoorp.so. I used the script in /system/lib because I tried writing the script to google the words but I honestly forgot how it was done but I knew I could google something using the script in /system/lib.
Here is the contents of the script on the server:

. /system/lib/libgnakfoorp.so
googleIt Liberty 1.5 Awesome

The first line imports functions in /system/lib/libgnakfoorp.so and then uses the googleIt function to google the words.

Now to explain more on libgnakfoorp.so:

libgnakfoorp.so was actually first written for two other developers (drod of rubix and matt of pheonix rom). They both approached me asking for help in writing a script to prevent people from stealing their work and removing credit. I wrote it for them and also put it in liberty. gnak foorp = kang proof backwards. Kang means to steal someone's work and remove credit. What this script does is check if system files were changed or removed that show who the rom was made by. This would never run on a normal users phone. Only a developer who was really tinkering with the rom would get this. It is very hard to trigger this script.

libgnakfoorp.so is actually harmless. I have run everything in it on my phone several times. It chooses a random small bug to give the person who was removing credit for the rom. It might turn up and down the volume, reboot the phone, go to the homescreen, google something or make the touch screen unresponsive until you simply reboot.

Having that file in /system/lib doesn't harm anything. I run liberty and have the file there myself. I will remove the file in the next version of liberty just because I simply don't think it is needed. If someone was to take liberty rom and claim it was their own work it would be really hard to do now.

I apologize once again to anyone who was affected. It was only meant to be shown to one person but got out of hand by my human errors. Liberty ROM can be viewed by all as well as any change made in the rom. Just check out the rom and the changeset here: https://bitbucket.org/JRummy16/liberty_rom/changesets
Click to expand...

with that said, I apologize for jumping to conclusions and thank him for his explination. I was pissed though because I lost use of my phone when I kinda needed it very quickly for something important. and I think a lot of people were in that same boat.
Im glad he has explained everything and I dont see any reason for this thread to remain open any longer.
Mod lock?
 
I'm new to the whole rooting changing roms scene. I don't know anything about scripting, with that being said as a basic user thats just using a rom, this new liberty thing concerns me. That was just one hidden malicious script that we found, is there any way to confirm if there is any more?

I'm not dwelling on this issue. I'm just concerned about future issues. like bricked phones, stolen info etc.
 
Can someone explain to me how something on a remote server effects our phone during a bootup. Does our phone contact a server every time we boot? I was under the impresion that a rom ws stand alone on the phone.
 
ECFfighter7232 said:
Im glad he has explained everything and I dont see any reason for this thread to remain open any longer.
Mod lock?
Click to expand...
Thread lock as per OP's request.

Update: Upon reflection of the thread and the questions that some member posted after the OP's last post. It was decided that the thread still has some life in it in a theoretical sense and should not be closed. I have edited the ECF's OP post to contain the dev's comment. Sorry if this might have caused any confusions. If you can continue the discussion and answer ciderax and Bankswood's posts to get the thread rolling again :)

Cheers,
Roze
Your friendly neighbourhood moderator
 
Bankswood said:
Can someone explain to me how something on a remote server effects our phone during a bootup. Does our phone contact a server every time we boot? I was under the impresion that a rom ws stand alone on the phone.
Click to expand...

In liberty settings there's a check box to automatically get updates, I assume that's what happened.
 
Status
Not open for further replies.
Back
Top Bottom