Ubuntu 可以运行在谷歌 Nest Hub 上了？！
Ubuntu Nest Hub

> 
> 一名安全专家成功地在谷歌 Nest Hub（第 2 代）上运行了 Ubuntu，嗯，然后呢？
> 
> 
> 


![Ubuntu Google](/data/attachment/album/202206/23/172809dqs3mk7syhm3mgep.jpg)


我刚刚看到了一个关于在谷歌 Nest Hub（第 2 代）上运行的 Ubuntu 的消息。


嗯，这实在是让人兴奋！


所以，让我在这里分享更多关于它的信息吧。


### 破解谷歌 Nest Hub 以安装 Ubuntu


是的，破解使得这成为可能。


网络安全专家 Frédéric Basse 破解了谷歌 Nest Hub（第 2 代）的安全启动，并成功运行 Ubuntu。


当然，谷歌 Nest Hub 并没有正式支持启动一个自定义操作系统。但是，Fred 使用了一个安全漏洞，从而成功运行了 Ubuntu。


虽然这很有趣，但对于始终在线的谷歌智能家居显示器来说，这也是一个严重的安全问题。


![](/data/attachment/album/202206/23/173042akools2scf82fdic.gif)


正如这位安全专家在 [博客文章](https://fredericb.info/2022/06/breaking-secure-boot-on-google-nest-hub-2nd-gen-to-run-ubuntu.html) 中所解释的，他使用了树莓派 Pico 微控制器，利用引导加载程序中的 USB 漏洞，从而破坏了安全启动链。


这位安全专家得出结论：



> 
> 因此，攻击者可以通过插入恶意 USB 设备并按下两个按钮，从而在早期启动阶段（内核执行之前）执行任意代码。
> 
> 
> 


如果你想进行实验（适合安全研究人员），他还在 [GitHub](https://github.com/frederic/chipicopwn) 上提供了相关代码（关于如何利用这个引导加载程序漏洞）。


### 让 Ubuntu 在 Google Nest 上运行


![](/data/attachment/album/202206/23/172809v0tccv57cha71hc5.jpg)


该漏洞允许攻击者启动未签名的操作系统。但是，在那之前，攻击者必须对为树莓派（64 位 ARM 版）量身定制的预装 Ubuntu 镜像进行一些修改。


这位安全专家还提到了以下内容：



> 
> 我们构建了一个自定义 U-Boot 引导加载程序，禁用了安全引导，并更改了引导流程以从 USB 闪存驱动器加载环境。我们还为 elaine 构建了一个自定义 Linux 内核，其中包括包括了一些 [额外驱动，例如 USB 鼠标](https://github.com/frederic/elaine-linux/commit/11068237d9178e77d79e3a5d27fc4f8f9b923c51) 。重新打包了来自 Ubuntu 的初始 ramdisk（initrd），以集成触摸屏所需的固件二进制文件。引导镜像是基于自定义 Linux 内核和修改的 initrd 创建的。
> 
> 
> 


因此，很明显，你不会获得完整的 Ubuntu 体验，但由于该漏洞，我们现在知道，如果你愿意破解 谷歌 Nest 进行测试的话（真心不建议！），Ubuntu 是可以在谷歌 Nest 上作运行的。


### 智能家居安全担忧 + Linux


网络安全专家指出，该漏洞已在上游（两次）修复。


但是，研究人员也指出，缺乏分配的 CVE 编号可能会导致修复程序无法向下游传播。


毫无疑问，看到有人在不受支持的设备上运行 Linux 真是太棒了。这让我思考，我们是否应该也制造一些 **由 Linux 驱动的商业智能家居设备？**


*或者说，已经有类似的东西了吗？*


然而，智能家居设备容易受到简单攻击，也同样令人担忧。


你怎么看？在下面的评论中分享你的想法吧。


**本文最初发布于** [Liliputing](https://liliputing.com/2022/06/hacker-installs-ubuntu-on-a-google-nest-hub-2nd-gen-smart-display.html)




---


via: <https://news.itsfoss.com/ubuntu-google-nest/>


作者：[Ankush Das](https://news.itsfoss.com/author/ankush/) 选题：[lkxed](https://github.com/lkxed) 译者：[lkxed](https://github.com/lkxed) 校对：[wxy](https://github.com/wxy)


本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出


OK
![](/assets/images/pikapods-banner-v3.webp)


![](/assets/images/pikapods-banner-v3.webp)

I just spotted a story about Ubuntu running on a Google Nest Hub (2nd Gen).

Well, that is certainly exciting!

So, let me share more about it here.

## Hacking Google Nest Hub to Install Ubuntu

Yes, a hacking attempt made this possible.

A cybersecurity professional, **Frédéric Basse**, broke the secure boot on Google Nest Hub (2nd gen) and managed to run Ubuntu.

Of course, Google Nest Hub does not officially support booting a custom OS. But, a security vulnerability allowed Fred to use an exploit and run Ubuntu.

While this is fun, it is also a severe problem for an always-connected smart home display by Google.

![](https://news.itsfoss.com/content/images/wordpress/2022/06/ubuntu-google-nest-hacked.gif)

**Frédéric Basse**

As explained in his [blog post](https://fredericb.info/2022/06/breaking-secure-boot-on-google-nest-hub-2nd-gen-to-run-ubuntu.html?ref=news.itsfoss.com), the hacker utilized a Raspberry Pi Pico microcontroller to exploit a USB bug in the bootloader to break the secure boot chain.

The security expert concluded:

As a result, an attacker can execute arbitrary code at early boot stage (before kernel execution) by plugging a malicious USB device and pressing two buttons


He has also made the bootloader exploit available on [GitHub](https://github.com/frederic/chipicopwn?ref=news.itsfoss.com), if you want to experiment (suited for security researchers).

## Making Ubuntu Work on Google Nest

![](https://news.itsfoss.com/content/images/wordpress/2022/06/ubuntu-google-nest.jpg)

**Frédéric Basse**

The exploit allowed the attacker to boot an unsigned OS. However, he had to make some modifications with the preinstalled Ubuntu image tailored for Raspberry Pi (64-bit ARM).

Here’s what he mentions about it:

We build a custom U-Boot bootloader with secure boot disabled and boot flow altered to load environment from USB flash drive. We also build a custom Linux kernel for elaine with

[additionnal d]r[ivers like USB mouse]. The initial ramdisk (initrd) from Ubuntu is repacked to integrate firmware binaries required for the touchscreen. The boot image is created based on the custom Linux kernel and modified initrd.

So, it is evident that you will not get a full-fledged Ubuntu experience, but thanks to the exploit, we now know that Ubuntu can run on a Google Nest as an experiment if you’re willing to break your Google Nest for the test (don’t do that, really!).

## Smart Home Security Concern + Linux

The cybersecurity expert mentions that the vulnerability has been fixed upstream (twice).

But, the lack of CVE may have influenced the fix not propagating downstream, as the researcher suggests.

Undoubtedly, seeing Linux running on an unsupported device is awesome. Makes me wonder if we should have someone make **commercial smart home devices powered by Linux?**

*Is there something like that already available?*

Nevertheless, it is equally concerning for smart home devices to be vulnerable to easy attacks.

What do you think? Share your thoughts in the comments down below.

**Via**: [Liliputing](https://liliputing.com/2022/06/hacker-installs-ubuntu-on-a-google-nest-hub-2nd-gen-smart-display.html?ref=news.itsfoss.com)

## More from It's FOSS...

- Support us by opting for
[It's FOSS Plus](https://itsfoss.com/#/portal/signup)membership. - Join our
[community forum](https://itsfoss.community/). - 📩 Stay updated with the latest on Linux and Open Source. Get our
[weekly Newsletter](https://itsfoss.com/newsletter/).