WebOS Homebrew Apps Demo'd

Posted By: Ryan Kairer Monday, June 22, 2009 11:20:49 AM

PreCentral is currently running an article that details another proof of concept for the webOS homebrew scene. Some users have sorted out how to package and install unauthorized third party apps to the Palm Pre using a standard (i.e. non-rooted) device.

This forum thread also details the process. It basically involves emailing a link to yourself that points to a preexisting webOS app in some kind of .ipk format. The group responsible for figuring this out intends to further detail how this works at some point so that other interested hackers can release application.

Permalink |

Article Comments

(10 comments)

The following comments are owned by whoever posted them. PalmInfocenter is not responsible for them in any way.
Please Login or register here to add your comments.

This actually is THE biggee hack

SeldomVisitor @ 6/22/2009 11:37:55 AM #

Allowing unfettered install of applications outside Palm's control without having to modify/root the Pre.

Of course, it MIGHT be a VERY small step from user-purposeful installation of running software on a non-rooted device to user-maliciously-ignorant-of installation of running software on a non-rooted device.

RE: This actually is THE biggee hack

bhartman34 @ 6/22/2009 2:59:12 PM #

Indeed, it does sound like a small step from unfettered install of apps to a user unwittingly installing something - especially if it's done via e-mail. It reminds me of the problems VBScript used to cause.

Still, I don't see the point of a root password on a Pre. A phone isn't a multi-user environment. A simple confirmation dialog should be enough to thwart any malicious code at this level.

RE: This actually is THE biggee hack

freakout @ 6/22/2009 3:44:09 PM #

True. Personally, I'd rather a device on which it's easy to install the software of my choosing, rather than one where I have no say in the matter. Security risks be damned, I'm old enough to look after myself.

RE: This actually is THE biggee hack

bhartman34 @ 6/22/2009 6:41:41 PM #

freakout wrote:
True. Personally, I'd rather a device on which it's easy to install the software of my choosing, rather than one where I have no say in the matter. Security risks be damned, I'm old enough to look after myself.

As a general principle, I agree. I think it's important not to carry that too far, though. You can only choose to install that which you know is being installed, and I think that's part of the potential danger. Without some appropriate dialogs, it would be very easy for someone to create a link, have someone click on it, and surreptitiously install a program on the Pre. From what I've read on the Palm support page, there's not much in the way of a caution when you download an app from the App Catalog. In the App Catalog itself, maybe that's not necessary (although we'll have to see if Palm tests the programs for stability), but if people start downloading from other sites, it may be.

RE: This actually is THE biggee hack

freakout @ 6/22/2009 8:47:40 PM #

Indeed. The Precentral story makes it sound like there's no warning at all. Something along the lines of Windows' "May contain malicious code, only accept trusted sources yada yada" warning would suffice, methinks.

What's the bet this is one of the first things addressed in webOS 1.0.4?

RE: This actually is THE biggee hack

jca666us @ 6/22/2009 10:29:46 PM #

>True. Personally, I'd rather a device on which it's easy to install the software
>of my choosing, rather than one where I have no say in the matter.

Of what devices do you speak of?

>Security risks be damned, I'm old enough to look after myself.

Right, and what will you do when your device craps out from all the buggy untested bloatware you're running?

Or your phone is unresponsive and slow (if you own a Pre, you already have these two qualities :))

RE: This actually is THE biggee hack

twrock @ 6/23/2009 4:31:36 AM #

Trollin', trollin', trollin',....

Hey Palm! Where's my PDA with Wifi and phone capabilities?

RE: This actually is THE biggee hack

freakout @ 6/23/2009 4:40:02 AM #

twrock:
Trollin', trollin', trollin',....

Seems to be getting worse as time goes on. Can we ban it yet?

RE: This actually is THE biggee hack

BaalthazaaR @ 6/23/2009 7:07:30 AM #

Visits from the occasional member of the Cult of Jobs should be encouraged. You never know when they'll go back to worshiping at the feet of the Turtlenecked one. :-)