Privilege escalation attack grants "full control" and freedom from Meta's servers/apps.

Remember the original Quest headset that Meta (then Oculus) trumpeted back in 2019? Meta seems to hope you don’t, since the company officially stopped supporting the wireless VR headset in 2023 to focus on the more popular Quests 2 and 3. However, tinkerers haven’t abandoned the hardware and recently released a new root-access exploit and bootloader that gives “developers and enthusiasts full control over Quest 1 hardware.”

The QuestStack project integrates previously known vulnerabilities in the Quest’s Android fastboot process into a privilege escalation chain that leads easily to full root access on the device. The bootloading process is now streamlined enough that it can be completed without any downloads through a web interface after connecting the headset to a PC.

With this exploit, the original Quest hardware can now be officially divorced from any reliance on Meta’s servers or services to be useful. That means enterprising Quest owners should be able to sideload apps without needing to register for a Meta Developer account and activating Developer Mode through Meta’s mobile app. It also means users should be able to go through the initial setup and login steps for a fresh Quest headset even if and when Meta decides to shut down the servers that currently support this process.

    • corsicanguppy@lemmy.caEnglish
      3·
      3 hours ago

      How it started:

      • “hey portal, call my kids” and it shows up on the fucking TV. That’s the workflow. It lights the TV, switches inputs and starts a call. Boom.
      • microphone array works from everywhere
      • digital-ptz camera was game-changing
      • “hey portal, answer call” when the TV was off would light the TV, select the right HDMI and start the call. The workflow again was a single command.
      • setup: plug in HDMI, plug in power . Use QR to auth the unit to your account.
      • it was loss-leadered at like $100, which is why we outfitted the entire family during covid for the cost of a single tablet.

      How it’s going:

      • the M agent is dead, so its voice control for calling no longer works.
      • the Alexa link is dead, so it no longer works as an Alexa agent for home control
      • the streamer apps are dead, so it can’t do Netflix, britbox, prime, etc
      • zoom is too weird to set up with the remote, so no zoom
      • video works
      • Cam still crushes it
      • sound still rocks
      • poking the remote HDMI-CECs over to the portal still, like what voice commands did

      But it still - and here’s the thing - is a single set-top appliance with an easy UI and controller that puts video chat on the damned TV

      Grandma can no longer use her voice, but she can use the tivo-style remote to start calls. And, again, they’re on this gorgeous big screen so nana can see everyone.

      I simply cannot describe the difference between a phone, even a tablet, and a monster fucking TV image to make you feel really connected with people of normal size. I’d say it again if I thought it’d make a difference.