yashsingh1/xdaforums huggingface dataset:
[Google Chromecast] persianrisk:
Yes but what you basically said is that only one exploit has been so far and that rooted apps are a violation of...

Is it out of the question that a new exploit can be found to work with flashcast? Or what did I miss from what you stated? Something in between the lines I should no?

I mean what makes the chance of finding a new exploit unlikely? Because the Chromecast only has one button?
[Google Chromecast] bhiga:
I'm not saying it's impossible, but like I listed in the Root Mini-FAQ, it's much more difficult than on a regular Android device because there's no sideload capability (ADB/SSH/Telnet are disabled), Chromecast-side apps run in a Chrome sandbox, and Google controls what apps Chromecast can load via the whitelist.

Furthermore, Chromecast can quickly adapt because Google OTA updates are automatically downloaded and applied.

Thus, on-Chromecast attacks are easily cut off by Google via the whitelist and/or firmware update.

The potential vector with long-term feasibility is finding something in the Chromecast setup mechanics.

Because it's an on-device app and doesn't require Internet access (unlike on-Chromecast apps), Chromecast can be kept from updating to a build that patches the exploit.

Also, because it's an on-device app, the appropriate Google Play Services library could be loaded/maintained on the device (the device might need rooting though).

However, it still leads to the same "depends what build it came from the factory with" situation we have with the current root exploit, so it's still a cat-and-mouse game.

That's about it, unless someone finds something very novel, or Google throws us a bone, which is unlikely since the success of the device relies squarely on the paranoid content providers.
[Google Chromecast] persianrisk:
Thank you! I'll hope for a small miracle then. Take care bhiga and thanks again for your clear and patient answer
[Google Chromecast] bhiga:
:) It could happen... Someone recently got a 3Cxx serial that still had the original build 12072, so who knows what's happening at the manufacturing plant, heh. Maybe someone there loves us... :angel:
[Google Chromecast] reiteravi:
did not find in the thread:

as u cant format the usb disk with unrootable cc so u can copy the eureka-rom

can one use an image of a usb drive made ready by a rootable cc

or is every unit unique ?
[Google Chromecast] bhiga:
The Flashcast drive isn't specific to a particular Chromecast.

But an image of an already-prepared FlashCast drive would be specific to that make/model drive, as USB drives (like hard drives) vary in the exact number of blocks.

The Flashcast drive isn't useful without a rootable Chromecast anyway.
[Google Chromecast] reiteravi:
Thanks
[Google Chromecast] Murmel2k:
I don't own a Chromecast yet. First I want to be sure that Netflix works.

The problem with your suggested method is, that a DNS Server supplied in the router affects every device, that uses this router to access the internet. I guess, I'll just have to wait, until there is a reliable rooting method for european/international Chromecasts.
[Google Chromecast] bhiga:
The other alternative is redirecting the Google DNS requests specifically via iptables rules, but that requires a smarter router (usually one with custom firmware like DD-WRT or OpenWRT) and the router needs to be routing, not just being used as an access point.

You will need to have at least Chromecast and whatever device is using Chromecast to be using the same DNS as well, so having the router handle it tends helps ensure that.

-= this post enhanced with bonus mobile typos =-
[Google Chromecast] ClearD:
Casted apps are stored on the Chromecast itself in its sandbox, correct? So no potential exploits there? Keep in mind I've had a couple of drinks tonight, but if an app on the device had permissions a little higher than they should be, and the app on the phone was changed (decompile, edited, recompiled with same credentials) to push su, would it be potentially plausible? I'm guessing the sandbox prevents anything even close to this, but it was a random thought. :)

Sent using XDA-funded carrier pigeons
[Google Chromecast] bhiga:
I like random thoughts, I have them often. ;)

My understanding is that upon a cast request, CCast queries the whitelist to find out where to get the receiver app (request handler), similar to how a browser uses MIME type to determine what can be done with the received data.

The receiver app typically is some web app that runs in Chrome.

So it doesn't even have access to the rest of the system, unless Chrome had somehow been elevated (that would be step one).

Google controls the whitelist, so once they find out they'd just remove the offending receiver app from the whitelist so nobody else would be able to load it.

They could also patch the vulnerability in a future firmware update.

The core trouble is the whitelist - that security gate essentially makes it like trying to root a phone without sideloading, ADB or recovery.

Someone could sign up as a developer to experiment with stuff on *their* Chromecast but I don't think it works on other CCasts because your CCast needs to be registered with Google and associated with your API key. I could be wrong or out of date here...

Google would probably get suspicious of a single dev registering more than a handful of CCasts.

Also, I think much of the runtime environment is read-only - Flashcast applies root by flashing a rooted ROM image, rather than just pushing su to the filesystem like you can on phones.

-= this post enhanced with bonus mobile typos =-
[Google Chromecast] lojden:
Is the chance like 0 to ever be able to root a chromecast with s/n 41xx build 15xxx?
[Google Chromecast] Ashcunak:
uhm im going to assume here that you are knowledgeable to know wtf you are doing if you are rooting so i am going to assume you would know how to do the same to your router and load up third party firmware.

Currently my setup ive got two chromecasts and have setup my router (netgear wnr3000L or something running Tomato firmawre) to ONLY redirect DNS for the MAC's of the two chromecasts and no other device on my network, meaning i have to manually setup the dns on a laptop or phone on my wifi/lan when i want to use a non Canadian service like netflix US.

I got this idea from the original "chromecast in canada" thread from way back in august, pretty sure the details are in that thread on the fire wall script to use.

*edit* also there is a way in tomato to change the function of the botton on the front of the router, eventually i want it to enable modes ie.. "hold for 3 seconds enable US netflix" "hold for 5 seconds disable all scripts use regular DNS servers" "hold for 7 seconds enable script to redirect to euro netflix dns or something" etc..
[Google Chromecast] bhiga:
Please see post #426

http://xdaforums.com/showthread.php?p=51424646

-= this post enhanced with bonus mobile typos =-
[Google Chromecast] Asphyx:
Isn't it ironic that most of us who have Motorola devices were hoping and dreaming that Google's purchase of Motorola would result in Moto releasing Unlockable Bootloaders for all of their devices and in the end what happened is Google locked up the bootloader on one of their devices the way Moto did instead?
[Google Chromecast] fredphoesh:
you must understand, the chromecast is NOT like a mobile phone, it is a wifi streaming device which links specifically to huge third party coroporations and their paid-for media... my point being, they sign lengthy contracts on the understanding that their content will not be "stolen" by anyone. We might say it's silly/unfair etc, but each of these Netflix BBC etc companies have huge amounts of money at stake, so they trust google will protect their rights. As much as I dislike this type of control, I understand it perfectly, and don't blame google at all for doing a great job at protecting their partner's content.

Mark.

---------- Post added at 10:28 AM ---------- Previous post was at 10:27 AM ----------

did you try?

I get my chromecast today, and OTG next week... so if it does not work, I will forget about trying. I'm pretty sure my serial will be 41xx too.

---------- Post added at 10:37 AM ---------- Previous post was at 10:28 AM ----------

possibly, if you buy a few (more readily available) things... see this thread:

http://xdaforums.com/showpost.php?p=50195949&postcount=351
[Google Chromecast] lojden:
Yeah, not rootable.. :(
[Google Chromecast] bhiga:
Actually, the MicroUSB OTG reader [MENTION=3469749]YoungSkeezy[/MENTION] will not work, because it only has an OTG MicroUSB plug and the OTG MicroUSB plug has to be the part that plugs directly into Chromecast - nothing in between, otherwise you lose the OTG-ness.

Since it has no other USB connections, there's no (easy) way to inject power, short of opening it up and finding the correct points to connect power to, and if you have the means and knowhow to do that, you can probably just assemble your own powered OTG cable. :)
[Google Chromecast] hadramos:
Hi,

I live in france and my Chromecasr has a S/N 4110 build 16041.

I can root this?

Thanks
[Google Chromecast] bhiga:
No. No builds newer than the original 12072 are rootable by current means.

From the first post...
[Google Chromecast] hadramos:
Ho no :(

be a root lucky one day?

Very thanks
[Google Chromecast] fkrone:
Maybe there will be a possibility to root, maybe not. Nobody knows unless time travels are possible and you can travel to future and find it out ;)
[Google Chromecast] compuguy1088:
Funny...I just ordered a chromecast from amazon, and it is based on the serial number rootable!

Edit: NM, its a 3B (looked like an 8 :()
[Google Chromecast] persianrisk:
It will be rooted sooner than later though I think
[Google Chromecast] Coppernob:
Success

I purchased this month on ebay an early serial number : 3729101Z0D81

Was successful in rooting with latest Eureka release
[Google Chromecast] scttduk:
So you were able to search for and buy a rootable cc?
[Google Chromecast] bhiga:
Amazon is a gamble, as are most online stores except for auction sites where rootable serials are going for crazy rates because a lot of people "just must have root" not knowing what it really means, especially for Chromecast.

-= this post enhanced with bonus mobile typos =-
[Google Chromecast] rekids:
What is a reasonable price for a new rootable Chromecast any how? Seen as high as $125 which I think is way to much.

1080xt root 12.15.15
[Google Chromecast] bhiga:
Value is in the eye of the beholder... that said, rootable units are quite rare in the technology-savvy areas now. Been to 4 local stores and there are none to be found.
[Google Chromecast] NRadonich:
I just picked up a 3927 Serial at a Best Buy Mobile of all places. Going home to try now. Will let you know if it works!
[Google Chromecast] Coppernob:
I purchased mine on eBay at $45. It was advertised as unopened with a possible rootable swrIal. It was not already rooted
[Google Chromecast] zul8er:
My fist 3B model started acting up, Google replaced it with s rootable version. :)
[Google Chromecast] Chrisdroid4.4:
My Serial

Hello

My Serial begins with 4104 whats with this serial number?:confused:
[Google Chromecast] bhiga:
Looks like the non-US units start 41xx, perhaps 40xx

Regardless, very unlikely it has a vulnerable bootloader, but you can either try, or check the firmware version.
[Google Chromecast] Chrisdroid4.4:
OTA

Im very very sad because the OTA is finished :crying: hope for the future for a another exploit :good:
[Google Chromecast] bhiga:
If it makes you feel better, 99% chance it wasn't rootable by current means even before the update, You'll have to hope a new exploit is found.
[Google Chromecast] Cyril-29200:
Hi.

I receive my CCast today and i want to flash i before connect it to the TV.

I have the serial number 4109xxxxx

Do you know if flash or root are available for it ? or soon available ?

Thanks
[Google Chromecast] bhiga:
If it doesn't have firmware build 12072, not rootable by today's means (FlashCast).
[Google Chromecast] Cyril-29200:
QUOTE=bhiga;52195267]If it doesn't have firmware build 12072, not rootable by today's means (FlashCast).[/QUOTE]

Okay Thank you. How to know if it's on firmware 12072 ? It's not detected on my laptop and I didn't have put on TV yet.

I buy it in Europe (France).

Thanks
[Google Chromecast] bhiga:
http://xdaforums.com/showpost.php?p=52020396&postcount=1

Very unlikely it has anything earlier than 15xxx build, but doesn't hurt to check.
[Google Chromecast] Cyril-29200:
I did not get the hint and it's updated OTA and I couldn't stop it. Now it's on firmaware 16664. Too bad for me :(

Thanks you anyway !
[Google Chromecast] ClearD:
May have just gotten a second chance. Had a $25 gift card for best buy so I figured "what the hell, I'll take a look". And I bought a 3917 :)

Edit: flashcast installed. Never give up hope! SEARCH EVERY LOCATION!

I finally have my rooted Chromecast! :)

Sent using XDA-funded carrier pigeons
[Google Chromecast] flex420:
just got my chromecast from amazon germany - serialnumber is 4107 :(

edit :

build_version":"15098"

what a bummer, will still keep it :)
[Google Chromecast] bhiga:
I'm pretty sure that all internationally-shipped (non-import) Chromecasts have build 15025 or newer.
[Google Chromecast] Sergeant Dude:
Just received my chromecast from amazon today, and to my surprise the sn was 3917 with stock 12072 firmware. Who would have thought nearly a year after release, amazon would still have flashable ones left.
[Google Chromecast] extrem0:
From where did they ship it to you?
[Google Chromecast] Sergeant Dude:
Looks like it shipped out of the lezington, ky center.
[Google Chromecast] getz2thapaper:
3819 SN..but it's always been connected to Net (latest build)

any hopes of Rooting?
[Google Chromecast] bhiga:
From the first post:

Since yours has been connected and updated already, not until a different root method is discovered.
[Google Chromecast] romester:
My serial number is 4214101S7POT, is possible install root?
[Google Chromecast] bhiga:
No, sorry. So far no Chromecasts with serials starting with 4 have come with anything older than build 15xxx. So way far past root by today's means.

Makes sense, as the international support didn't come until the 15xxx builds.
[Google Chromecast] adot111:
Hi,my serial number is 3829101XXXXX, H: H2G2-42 , is possible install root?

the box is still sealed

Thank you
[Google Chromecast] extrem0:
Probably. What matter is the firmware version (12072).

Don't connect it to internet so it doesn't get any OTA.
[Google Chromecast] adot111:
Thank you again for your reply

Is there any way that I can figure out the firmware version without out the box?

I purchased it around Sep18,,2014
[Google Chromecast] extrem0:
No you can't. If the box is well sealed it's most likely that it's rootable, but it's not 100%. Chromecast must be powered on and connected to your wifi in order to check its build using Chromecast app.
[Google Chromecast] bozuzu6:
Hi everyone! my serial it's over 42,there is the root for me?
[Google Chromecast] bhiga:
No, sorry, not today. Please see the original post of the thread and my post a few up.
[Google Chromecast] xXsquirr3lsXx:
3C08 running 16664. Rootable or not? Didn't quite understand this.
[Google Chromecast] bhiga:
For a unit to be rootable it must be on build 12072 firmware. Since you're already on 16664, no, not rootable by current methods (FlashCast).
[Google Chromecast] linkinfive:
sorry guys i stumbled upon this article posted just recently and it says chromecast updated to recent build 16664 can be rooted by team eureka and it doesnt say anything about serial code. can anyone confirm this?

http://www.xda-developers.com/andro...-to-build-16664-here-are-rooted-alternatives/
[Google Chromecast] ClearD:
That's not what that says at all...

Sent using XDA-funded carrier pigeons
[Google Chromecast] rekids:
There is no way to root a CC If the firmware is HIGHER then 12072.

12072 firmware is found 99% of the time on units with 3921xxxxxx and LOWER serial numbers.

3Axxxxxx and 3Bxxxxxx numbers are HIGHER then 3921xxxx SN.

3Bxxxxxxxx (NOT rootable) and 38xxxxxx (usually rootable if not been updated) are commonly mistaken for being the the later (38xxxxxxx) which is usually comes with 12072 firmware.

FlashCast can only root 12072 firmware nothing else. That has not been another usable exploit found in newer firmwares.

IF and only if there is another exploit found will this change in the future.

Some how is ... There have been a few not many but more then 1 report of some finding and our getting units that are either old stock with low serial numbers and 12072 firmware or an even less chance of a unit that has a high serial number and yet has 12072 firmware. Just keep your eyes open and ready gran one if you see one.
[Google Chromecast] bhiga:
Sorry, that's not what the article says... The article says Team Eureka's Eureka-ROM adds a lot of functionality for those that

already

have root.
[Google Chromecast] linkinfive:
Got it. Another question. Does that means regardless of what serial number it is as long as I don't connect it to the internet and root it right out of the box it will work too?
[Google Chromecast] efrant:
Have another read of this post. What matters is what firmware version comes with your Chromecast out of the box. If it is 12072 you can get root. If it comes with a newer version, then EVEN IF you don't connect to the internet, you cannot get root.
[Google Chromecast] skinny-dipper:
is that possible to revert the firmware by factory reset chromecast?
[Google Chromecast] bhiga:
No. Factory Reset just erases the settings, it doesn't touch the ROM.
[Google Chromecast] rekids:
It is not possible to revert firmware backwards by factory reset.

Once updated the CC will not go backwards on firmware versions.
[Google Chromecast] corporal d:
I was just given a CC from a vendor at work today... it's a 3914, can't wait to get home and verify the build! Not sure how long they've had these sitting around or if they have any more, but if mine's good I'll check and see if I can get any more to get in the hands of developers.
[Google Chromecast] Jacksonroh:
I got two chromecast with 3C03 (same as Fatallll) just to see and neither shipped with 12072
[Google Chromecast] ozeyguy:
Tried rooting Chromecast serial 3C21. It is not rootable.
[Google Chromecast] LOCOSP:
Hi, I got the 3C07 Chromecast, what about rooting ?

Edit:

So now it depends on build number, or we are sure that CCs above 3922 are NOT rootable ?

Thank You
[Google Chromecast] bhiga:
It's always been the build number, but you can't get that until you've already bought it. ;)

So the serial number had been the best pre-purchase guide. It's not infallible, but has held up with very few exceptions so far.

Except for one extraordinary case, all CCs known so far greater than 3922 have shipped with updated (non-vulnerable) bootloader.

Somewhere in the 3922 range seems to lie the cutoff, but the last places of the serial don't seem to be sequential so we may never know exactly where in the range things changed.
[Google Chromecast] LOCOSP:
Thank You for Your reply, how can i check the build number ? At this point i know to not connect CC to the Internet.

OK, please tell me like for a noob is any chance to root or not and what should i check to be sure for real if I can or no.

Thx
[Google Chromecast] bhiga:
Highly doubt you have a vulnerable bootloader but doesn't hurt to try.

Otherwise, just disconnect your Internet connection and run the Chromecast app and select your Chromecast.
[Google Chromecast] helix512:
still working??

Are there any people out there still trying to find a hole in the current firmware so that maybe some of the other Chromecast could be rooted or is it close so tight that only the original once will ever be rooted?
[Google Chromecast] rekids:
I heard somewhere recently that there maybe a method released sometime soon maybe Vegas show this year? I don't remember for sure. If you watch eBay closely sometimes you can find a new one with low serial number for around $50. I just another one a week ago for my project, so they do pop up every so often.
[Google Chromecast] bhiga:
You're probably thinking of this...

http://xdaforums.com/hardware-hacking/chromecast/root-method-to-released-def-22-august-t2793358
[Google Chromecast] LOCOSP:
My CC is 3C07 with 12490 :(.

So now i don't know to do wait for exploit or start using, I've try FlashCast and GTVHacker Exploit with no result ...

What You guys are thinking ? Wait or no ?
[Google Chromecast] bhiga:
I'm pretty sure any exploit would be developed/tested against a current or near-current build, so personally I don't see harm in using it.
[Google Chromecast] LOCOSP:
Yes, after update on start I've got something like 16664 software version :/
[Google Chromecast] SilentStray:
Great work guys!
[Google Chromecast] helpmeplis:
Just bought this today sealed. Let's see my luck after work.
[Google Chromecast] bhiga:
Root first, Internet later. :)
[Google Chromecast] helpmeplis:
I'll check it today. If its rootable then it'll be another week for the otg cable to arrive :(. I have an otg pen drive, thought I was set but forgot the power. The person I bought this one have another with same serial and they are sealed. If anyone is looking for one pm me to give the name of the seller.

Edit.

well it IS rootable(12072), i conected to tv and used my nexus 5 and the app to set it up with my network(no internet access).

then is says its connected to my network but have no internet access.

at this point noting cast, not even screen cast from the app. Is this normal>?

cant root it bacause i dont have a powered otg cable yet, a weeks wait.
[Google Chromecast] helpmeplis:
Wrong thread sorry
[Google Chromecast] bhiga:
Sorry, missed your post earlier. Yes, this is normal because Chromecast does a lookup to the Google whitelist on the Internet to determine the URL to get the receiver app from.

It's similar to how DNS servers translates site name to an IP. The Google whitelist translates a cast request to an Internet location to load the player app.

Yes, any powered OTG cable should work as long as it provides power to the OTG host, not just other OTG devices. So far the only one I've seen that doesn't provide power to the OTG host is one someone mentioned that's a multi-port OTG "hub."
[Google Chromecast] helpmeplis:
Thanks for the reply very helpful
[Google Chromecast] eKeith:
FYI There are still "rootables" in the wild... namely on BestBuy racks!

Background:

Been using my stock Chromecast since initial-release-date on my US VPN & DNS (router setup) network. Sadly I did not get that "Eureka Moment" until after the OTAs were applied. Tried my luck for a "rootable" with Amazon last month but received a 3C... serial; kept it sealed for future. Decided to purchase an Eureka-flashed one off eBay for $75... ouch! It took the Eureka-pushed OTAs successfully. Now I can compare Stock versus Eureka tweaks... but I digress...

My iOS non-techie buddy decided he wanted a Chromecast so went off to the local BestBuy... Just for the heck of it I asked him to also rummage through the rack for a <=3922 serial for me. He found a single 3908! Blah... Blah... Blah... Eureka inside! Thank you all!!!
[Google Chromecast] rippernz:
Has anyone bought off this seller on ebay?

http://www.ebay.com.au/itm/310729834342?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2648

they said they have serials of 3808
[Google Chromecast] rekids:
Don't see where serial numbers are listed. But I have NOT got any from this seller. I bought 1 last month for 49 free priority shipping by mail.

---------- Post added at 06:57 PM ---------- Previous post was at 06:51 PM ----------

Don't say I hold out you guys.

Here is a rootable CC for $37 bucks!

And FREE shipping!

Cheaper then any I have seen, I got 2 already don't need any more.

Someone please root this!

http://m.ebay.com/itm/131241617920?nav=SEARCH

EDIT- SOLD
[Google Chromecast] rippernz:
I have contacted him and he said the serials started with 3808.

I have bought one to be shipped to AU but will take a couple of weeks to get here.

Edit:

Also said he had serials starting 37