Researchers 'jailbreak' Windows 8 RT; Microsoft unfazed

A researcher has claimed to have jalbroken Windows RT, the version of Microsoft's Windows 8 operating system for ARM-based mobile devices.

 

The researcher identified only as @clrokr said the hack can make the Windows RT device run apps not necessarily approved by Microsoft.

 

"It’s taken longer than expected but it has finally happened: unsigned desktop applications run on Windows RT. Ironically, a vulnerability in the Windows kernel that has existed for some time and got ported to ARM just like the rest of Windows made this possible," @clrokr said in a blog post.

 

Windows RT, which comes preloaded on mobile devices, runs apps only from the Windows Store, and uses a checking system to see if the apps are properly signed.

 

Microsoft unfazed

 

For its part, Microsoft did not seem fazed by the hack, and hinted it may come up with a patch for it, CNET reported.

 

"The scenario outlined is not a security vulnerability and does not pose a threat to Windows RT users. The mechanism described is not something the average user could, or reasonably would, leverage as it requires local access to a system, local administration rights and a debugger in order to work. In addition, the Windows Store is the only supported method for customers to install applications for Windows RT," CNET quoted Microsoft as saying.

 

It also quoted Microsoft as saying there are mechanisms in place to scan for security threats and help ensure that apps from the Store are legitimate.

 

Microsoft even applauded the "ingenuity of the folks who worked this out and the hard work they did to document it."

 

"We'll not guarantee these approaches will be there in future releases," it added.

 

Won't survive reboot

 

Meanwhile, a separate blog entry on security vendor Sophos said @clrokr managed to identify which part of the operating system to modify so it would run "unauthorized" apps.

 

"While it involves a level of expertise few users possess, I imagine someone will create a tool to replicate @clrokr's efforts for those with less knowledge of a debugger," it said.

 

But Sophos also noted the technique @clrokr used can only modify the setting in memory, "so it will not survive a reboot."

 

Pirated apps coming soon?

 

Sophos also cautioned users on jailbreaking their Windows RT devices, saying they may be free to run any app they like but they also risk running rogue code.

 

"If jailbreaking Microsoft tablets becomes a popular way to run pirated applications we may begin to see more malicious apps like have been observed on Android," it added. — TJD, GMA News