A PLEASE TO ROCKBOX

[Rockboxboy]

First of all thank you for your program it's very good and it works well. But I have two things that I want from you, first, please make a new bootloader that have the option for a password, and second, please make the program should work for Sansa clip sport and clip jam also. Thank you again it's a very nice program

[wodz]

Rockbox for clip sport/jam will not happen. The hardware is too constrained.

[Rockboxboy]

Thank you for answering. What's about the password thing?

[saratoga]

Search, its been discussed before and isn't practical on a lot of devices.

[Rockboxboy]

I need it for Sansa clip zip and fuze+

[saratoga]

I don't think either of those are possible given dual boot. You can try and hack something if you want though.

[[Saint]]

Regarding the password, such a thing wouldn't be trivial to implement at all.

If you wanted to just secure Rockbox, for varying definitions of secure, this would be possible. However it would be next to useless doing so because the filesystem would be broadly accessible though the original firmware as saratoga alluded to. Actually writing a full bootloader for this device would be non-trivial. Instead of deploying a full bootloader, where possible Rockbox simply patches the OF (original firmware) so that it jumps to booting the Rockbox binary unless a key press is detected.

To actually be useful, what you want to achieve needs to be significantly more involved. Even if you did manage to deploy a passphrase check to the bootloader, to actually be useful in any capacity for the purpose of security you would also need to deploy full disk or file based encryption to both the OF and Rockbox. Otherwise the files would still be very trivially accessible to even a relatively unskilled attacker.

Fact of the matter is, you basically have no business expecting any degree of security from a device like this. If you do need a degree of security like this it is best to carry an encrypted container on a USB thumbdrive, or use a dedicated secure storage device.


[Saint]

[__builtin]

How a "password option" should work would vary greatly depending on what your security goals are.

If they include the confidentiality of data, then you either want a plugin to store small amounts of sensitive data, which is already possible, or full-disk encryption at the filesystem level, which will be very involved and most likely useless.

On the other hand if you are intending to secure the device against use by unauthorized persons, please give up now and despair to save yourself a headache. On most devices we don't have total control over the boot process and the security of any system would likely be easily undermined by any even slightly determined adversary.

[Rockboxboy]

Thankx to everybody's advise. Bottom line I see there is no way (expect hacking) for a option of a password.

[Rockboxboy]

Thanks to everybody's advise. Bottom line I see there is no way (expect hacking) for a option of a password.