Palm has released webOS 1.0.4 as a firmware update for the Palm Pre. Palm has released few details surrounding the update, only that it fixes several security issues with webOS. Palm has not disclosed what those issues were, but encourages all users to update.
Pre owners can update to webOS 1.0.4 by using the Updates application in the Launcher.
Christopher Price is the Founding Editor of PhoneNews.com. Today, he leads the team building Console, Inc. - a new kind of Android™ device. He still likes to pontificate... a lot. You can visit his personal blog at ChristopherPrice.net.
Google - +ChristopherPrice | Twitter - @chrisprice | LinkedIn
Questions for Chris? You can also reach him by email, but please use the PhoneNews.com contact form for general comments, questions, and feedback.
Engadget reports that this closes some loopholes that allowed homebrew to be installed.
see: http://www.engadget.com/2009/06/29/palm-pre-gets-upgraded-to-1-0-4/
Jay, the update does close the email-yourself-homebrew loophole, but that was because anyone could email a Pre owner a malicious file… resulting in being a tap away from bricking a Pre (or worse).
The primary jailbreak points are still left open, of course, you have to be tethered to a computer to access them… but they’re still there. All Palm did was close the unsafe exploits.
Actually you don’t have to be tethered to a computer for most of the jailbreaking. You only need to be tethered for a VERY short period. At this point in time I can SSH into my Pre from anywhere I have access to a telnet client, all I need to know is my Pre’s IP address.
Of course, this loophole was MUCH easier for those that don’t know what “rooting” is. Hopefully Palm will give us a second option or get the App Catalog out of beta very soon!
Note, I didn’t say how long you had to be tethered. Like any device, once you have root-level SSH, you can do pretty much whatever you want.
Imagine though for a second if a site like jailbreak.me existed today… you would see plenty of malicious software out there, now that people have an understanding of OTA payloads of mobile device exploits. A well-crafted OTA-only exploit could brick a Pre, and that’s no joke.
App Catalog is not going to really affect the interests of the homebrew community… as legal as emulators, tethering, and videocasting are… I doubt Palm is going to support listing them in the App Catalog, if only because Sprint will be there to demand they stop.
I wouldn’t be surprised if a redsn0w-like app won’t be made in the future, bringing over Cydia’s portable apt installation (or an incredibly new one).