I bricked then recovered my reMarkable 2

Re:I bricked then recovered my reMarkable 2 by tjoff on Monday September 27, 2021 @02:41PM (#28674371)

> We made sure that the toltec install process includes a hash of the install script to prove that it isn't modified by a man-in-the-middle.

A bit late for that, no?

Maybe I misunderstood but the modified version could do it's thing and then download the official script to fool that check.

Or pretty much anything else imaginable.

[ Parent | on HN ]

Re:I bricked then recovered my reMarkable 2 by Eeems on Monday September 27, 2021 @02:53PM (#28674546)

I guess you haven't looked at our install instructions[0]. The hash check is done before running the script. You can't run the script if it doesn't match unless you choose to just run it manually and ignore the check.

0. https://toltec-dev.org/

[ Parent | on HN ]

Re:I bricked then recovered my reMarkable 2 by tjoff on Tuesday September 28, 2021 @07:18AM (#28681454)

I have not. Just responding to the information that was available in this thread.

But that is better!

[ Parent | on HN ]

Re:I bricked then recovered my reMarkable 2 by kayodelycaon on Monday September 27, 2021 @06:37PM (#28676947)

The bash script is fairly easy to download and verify before running it. It’s only 200 lines with a few functions and if statements.

[ Parent | on HN ]

Re:I bricked then recovered my reMarkable 2 by tjoff on Tuesday September 28, 2021 @07:19AM (#28681468)

Yes, but the whole antipattern of wget | bash is that you don't encourage that sort of scrutiny.

[ Parent | on HN ]