Skip to content
Advertisement
When Appliance Fail?

New bootloader lets you take the "Meta" out of the original Meta Quest

Privilege escalation attack grants "full control" and freedom from Meta's servers/apps.

schedule 16:04 visibility 38 views
New bootloader lets you take the "Meta" out of the original Meta Quest
Source: Ars Technica

Remember the original Quest headset that Meta (then Oculus) trumpeted back in 2019? Meta seems to hope you don't, since the company officially stopped supporting the wireless VR headset in 2023 to focus on the more popular Quests 2 and 3. Luckily, tinkerers haven't similarly abandoned the hardware and recently released a new root-access exploit and bootloader that gives "developers and enthusiasts full control over Quest 1 hardware."

The QuestStack project integrates previously known vulnerabilities in the Quest's Android fastboot process into a privilege escalation chain that leads easily to full root access on the device. The bootloading process is now streamlined enough that it can be completed without any downloads through a web interface after connecting the headset to a PC.

With this exploit, the original Quest hardware can now be officially divorced from any reliance on Meta's servers or services to be useful. That means enterprising Quest owners should be able to sideload apps without needing to register for a Meta Developer account and activating Developer Mode through Meta's mobile app. It also means users should be able to go through the initial setup and login steps for a fresh Quest headset even if and when Meta decides to shut down the servers that currently support this process.

Read full article

Comments

newspaper

Originally published at

Ars Technica

open_in_new Read Full Article

Related Articles

Pennsylvania will require labels on AI-generated ads
Technology

Pennsylvania will require labels on AI-generated ads

On Thursday, Pennsylvania Governor Josh Shapiro signed the Artificial Intelligence Deceptive Advertising Act into law, requiring disclosures on AI-generated ads. The law requires any ad - whether it's a still image, video, audio, or text - that "has...

The Verge
What to expect from Apple’s ‘Pro and tell’ event
Technology

What to expect from Apple’s ‘Pro and tell’ event

It feels like Apple's Welcome Home event just happened. And the iPhone Duo announcement isn't all that far in our rearview mirror, either. Yet, the company is back with another launch, focused on the MacBook Pro, it looks like. Its "Pro and tell"...

The Verge

Read More

Macron condemns racist terrorist attack in Paris suburb
Technology

Macron condemns racist terrorist attack in Paris suburb

Adding to the tensions, France is reeling from a shooting that authorities are investigating as a potentially racist and Islamophobic terrorist attack. One person was killed and five others wounded in the Paris suburbs of Trappes and La Verrière...

France 24
It’s time to find a new browser
Technology

It’s time to find a new browser

Hi, friends! Welcome to Installer No. 149, your guide to the best and Verge-iest stuff in the world. (If you're new here, welcome, happy It Actually Feels Like Fall Now At Least In My Neighborhood), and also you can read all the old editions at the...

The Verge
Your Appliance Broke?
Reliable Repair for