Live data from Hacker News

Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

sh1mmer.me

161–170 of 203 posts

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#161
The silliest thing about it is probably this. Google seemed to have just kind of forgotten to add code that would verify the rootfs on shims, even though they had everything they needed to do it already set up.

https://chromium-review.googlesource.com/c/chromiumos/platfo...

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#162
post #55

Earlier quoted context omitted.

Why? I used a laptop full time in school from 16-18 (and then at university too) and found it much more productive. My notes were better and more usable. For younger children I think everyone agrees that it's important to be teaching computer skills, and that requires computers. Having rooms of desktop computers is arguably outdated, and a poor use of space, so many schools have switched to trolleys of shared laptops…

Developmentally, a 16-18 year old is very different than a child. I don’t know whether laptops in school are bad for children, but you can’t really make that comparison. Personally, my belief is that children should learn to use computers (I did as a child, and it was massively beneficial) but that computers should not be central to their foundational education. Kids shouldn’t learn basic arithmetic on a computer. Th…

You say that as if learning maths by hand/on paper is generally effective. Tell me that your peers aren't innumerate.

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#163
post #116

Earlier quoted context omitted.

I relate to this. As someone currently in high school, messing around with web proxies and code deployment sights, and web-based IDE's trying to run Dwarf Fortress in my school browser has taught me more about computers and networks then just about anything else. It is painfully easy to get around school filters these days. I've never really messed with unenrollment because you do need enrollment to access the testin…

Chromebooks don't even have a Terminal for the kids. Vim's great, but VScode with Jupyter Notebook support would make the computers we bought for them into great offline calculators, too. VSCode on a Chromebook requires VMs and Containers which require "Developer Tools" and "Powerwash"; or the APK repack of VSCodium that you can't even sideload and manually update sometimes (because it's not on the 15-30% cut, and mu…

Good point. Wasn't aware of the Family Link restrictions. Will see what can be done here.

Disclaimer: I work on ChromeOS.

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#164
post #119

I stand with everyone on Hacker News in admiration for young’uns sticking it to the man and learning about command-line secret power. _However_, I’m a little more ambivalent knowing that most of them do that to look at naked ladies, presumably. Maybe create pictures of naked ladies (again: very impressed by Generative AI, with the caveat that it’s widely used for pr0n) That doesn’t feel ideal for the emotional matura…

> In my time ::shakes fists at cloud::, hacking the school network meant you risk exposing yourself to people with strong opinions about plot points in Buffy The Vampire Slayer. lol. In my time, hacking the school network meant you could access programs that belonged to other schools, or print to their printers. And that was pretty much it.

In my time, hacking the school network meant you could put cracked versions of Starcraft and Diablo II into the public drives and turn CAD class into a LAN party.

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#165
post #113

I wouldn't have a career in IT if I hadn't spent many hours at ages 11 to 15 trying to get round my schools network security. My logon was frequently disabled for misuse and I was even suspended for a couple of days once but I learnt more that way than in any class I've ever taken.

I was really lucky that our Computer Teacher/IT guy (this was back in the early 2000s) was really cool and allowed us a bit of leeway to break things. After the first time we got caught (there was three of us) he sat down with us, and essentially gave us some rules of engagement, anything we got around, or defeated we had to write up a short report and turn it into him, explaining what we were able to accomplish, the…

> he sat down with us, and essentially gave us some rules of engagement, anything we got around, or defeated we had to write up a short report and turn it into him

This is really wholesome. Like that guy. Be like that guy.

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#167
post #119

I stand with everyone on Hacker News in admiration for young’uns sticking it to the man and learning about command-line secret power. _However_, I’m a little more ambivalent knowing that most of them do that to look at naked ladies, presumably. Maybe create pictures of naked ladies (again: very impressed by Generative AI, with the caveat that it’s widely used for pr0n) That doesn’t feel ideal for the emotional matura…

Um, we didn't create the exploit to look at porn, that should be blocked on the network level anyways

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#168

The silliest thing about it is probably this. Google seemed to have just kind of forgotten to add code that would verify the rootfs on shims, even though they had everything they needed to do it already set up. https://chromium-review.googlesource.com/c/chromiumos/platfo...

That patch seems to be just checking more devices/partitions for images?

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#169

I hope I don't sound like a Luddite, but I don't think kids should have chrome books, or any type of laptops in school...

I was lucky enough to go to a school with uniforms. I thought it was stupid at the time. As an adult, I realize now what that did was level the playing field between the rich kids and poor kids. I can’t even imagine being a kid in school these days with an off brand smartphone or ipods, especially when Apple actively promotes bullying non users.

Android user in sophomore year here, no one really cares

Re: Sh1mmer – An exploit capable of unenrolling enterprise-managed Chromebooks

#170
post #146

Earlier quoted context omitted.

> I am saying is that you should be allowed whatever learning tools work best for you. A blanket ban on computers and insisting on hand written notes, is just no good. Umm, not sure whether I agree with this. Don't we expect children to learn basic mathematics without access to a calculator? This despite the fact that there are certainly children who struggle with laborious long multiplication and division. Our eldes…

I think there's a major difference between using something that removes the need for basic knowledge, as opposed to allows that knowledge to be learned in a different way. I'm not advocating not teaching people to write , I'm suggesting we do that, but then provide them the option to use a computer to assist their learning. If you provide someone with a calculator, there's no need for them to learn how to do basic ma…

> I think there's a major difference between using something that removes the need for basic knowledge, as opposed to allows that knowledge to be learned in a different way.

> I'm not advocating not teaching people to write, I'm suggesting we do that, but then provide them the option to use a computer to assist their learning

Q1a: What would we say is the purpose of young people learning to write unaided, with just pencil and paper?

Q1b: At what point do we say "OK, that's enough basic knowledge", and we let them reach for an electronic device to assist?

and

Q2a: What would we say is the purpose of learning to do mathematics unaided, with just pencil and paper?

Q2b: At what point do we say "OK, that's enough basic knowledge", and we let them reach for an electronic device to assist?

I'm not sure that I see that there's much difference between the two.

In both cases, there will come a time when you don't have your device (or its charger) handy, and you will have a significant advantage if you can manage the task in front of you without electronic assistance.

Post reply on HN