The official hub of The Enterprise Mobility Foundation
Want more than just blog posts? Login or Sign up for a free acount and get research, videos, slide decks and more! Join the online social network for Enterprise Mobility.

Mobile Jailbreak – The Root of All Evil?

Mobile Only: Week 23

Benjamin Robbins, an EMF member, is spending the next year working solely from a single mobile device. Each week he shares his thoughts and experience with us on what it means to be mobile-only.

This past week I was in a holding pattern. The upgrade to Ice Cream Sandwich(ICS) gorked up my device. The update caused enough issues that I needed to roll-back to the previous OS version. Yet, the service center at AT&T was waiting for the software to flash the device back. I had wanted to keep my mobile-only experience to only using out-of-the-box capabilities because I wanted to make sure that others could easily follow in my footsteps. However, since I had some time waiting for a reset from AT&T, I figured now was as good a time as any to experiment with rooting the device.

Having rooted devices in the past, I wanted to leverage CyanogenMod. CyanogenMod is an open source distribution of the Android mobile operating system. I had hoped to take Jelly Bean, the most recent version of Android, for a spin but CyanogenMod 10 for the AT&T Galaxy Note had so many issues that it was pulled it off the site. I opted instead to compare CyanogenMod 9 (ICS) to the version already on my device.

The root wasn’t without issue. Truth be told, after my first attempt to root the device, the phone was in the state of being a soft brick for a short while. A soft brick is where the phone turns on, but it gets stuck indefinitely during the device loading. Luckily, one of our knowledgeable IT folks here at Palador has been in the situation before and was able to help get the device out of that state.

I had been concerned about rooting the device. Enterprise mobile security best-practices advise against allowing rooted devices on the network. Rooting allows for too much control over the device and can easily create untested user configurations. Also, as I have already mentioned, I wanted to keep my mobile-only experience ‘pure’ and only use stock deployments. Yet, after seeing the performance and capability differences I am beginning to think twice.

There are many improvements that come native with CyanogenMod for someone who is working mobile-only. Some of these differences are small, but they represent a significant difference in terms of productivity. To start, spell check is built directly into the OS. This means that rather than have spellcheck as a feature only available if the app vendor has decided to build it in, it is automatically part of all apps, complete with red underline.

Another huge productivity improvement is that the on-screen keyboard is minimized as soon as the OS detects a connection with a Bluetooth keyboard. With the stock build I had to enable a ‘null’ keyboard every time to get it off the screen. This added several extra steps many times a day that is now gone altogether. It was one of those annoyances I put up with, but really saw it as an impediment to a serious use of Android in the enterprise.

Even the native email client has a user interface and layout better suited to mobile-only in the CyanogenMod distribution. As well, the amount of extraneous apps is significantly reduced. With the rooted version, I get to start with the bare minim of capabilities and only install those apps that I need.

With all these improvements and overall lack of OS clutter, I began to look at rooting a mobile device much like I did in the past when I purchased a new PC. The first thing I always did at the earliest convenience after the purchase of a new PC was to wipe the computer and install a fresh build of Windows. It took up less space, ran smoother, and put the experience in a known state. The amount of junk that came pre-configured on the PC was staggering. I never once regretted getting rid of the factory installed applications on my PC. Rooting my phone made me realize just how many extraneous apps were on the stock version of the device and how I haven’t missed any of them.

So here is my dilemma. I had originally planned to return the device back to its stock build after testing and comparing the rooted version of ICS. However, now that the device is running so well and I am seeing huge productivity gains, I am not so sure. The phone now ‘just works’ the way I would expect it to. It is much closer to being that uber mobile thin client I envision mobile becoming. It would feel like a step-backwards at this point to revert. What do you think? Should I stick with the rooted version? What do you see as the pros and cons? Post a comment – I’m curious to hear your thoughts.

Benjamin Robbins is co-founder and Principal at Palador, a firm that focuses on providing strategic guidance to enterprises in the areas of mobility, apps, and data. You can follow him on Twitter. Mr. Robbins resides in Seattle and blogs regularly at http://remotelymobileblog.com

3 Comments

  1. Posted August 9, 2012 at 12:46 | Permalink

    Great post Benjamin.
    Curious if anyone knows how a rooted device compares with a Google Nexus device for performance and functionality. From the reviews, it appears that the Nexus branding provides a similar speed and functional experience.
    Pursuant to our mini-Tweetchat with @Cisco_Mobile, rooting of Android is one of the issues cited by corporate IT to keep Android out. Some apps warn about installing on a rooted device whether or not it is valid. For a company building and supporting custom apps, a rooted device represents an additional test platform and possible support issues.
    In my opinion this goes back to a reluctance – or failure – by Google to exert sufficient control over the platform. Yes Android is open-source, that does not mean that design standards were impossible to enforce. I suspect that vendors could have sufficient freedom to add custom features (crapplications?) in a “layer” or container that did not effect the core OS.
    What do I know, I am a corporate rebel, relegated to webmail access only for my rogue Atrix 4G, while the Apple fanboys get VPN access to the office wireless network and other features to be rolled out.

    Thumb up 0 Thumb down 0

  2. Posted August 9, 2012 at 14:38 | Permalink

    Kevin,

    You bring up some excellent points. I haven’t yet had the opportunity to use a nexus device in a mobile-only context, although there are several around the office. Would be an interesting test.

    In regards to rooting creating an additional test platform, Android already suffers from a massive diverse platform base. (for a great visual representation of this see: http://techcrunch.com/2012/05/11/this-is-what-developing-for-android-looks-like/). If the biggest concern is a rooted device creates another test case in the matrix, it is already unmanageable. IT departments wouldn’t even be able to keep up with non-rooted devices. I suspect that the bigger issue is possible security threats to a non-standard platform. I wonder if there is any data available in terms of security deficiencies of rooted systems.

    You are right that some of this could be solved if Google exerted more control vis-a-vis apple. But, I am not sure that enforce and open-source really go well together – kind of like oil and water. This was a philosophical approach the Google took and now we are seeing the results of it. A democratic approach to an ecosystem can be a messy thing. But it can also have broad support as many people are able to get involved.

    As you suggest, Apple does seem to enjoy the notion of being a much more secure environment. This is why your experience of being kept on the outside while iOS devices get all the access is fairly common in organizations. It’s ironic though, when it comes to social engineering, as Mat Honan recently found out, no device is secure. (http://www.wonderoftech.com/a-true-and-terrifying-tale-of-a-digital-disaster-and-how-to-avoid-it-happening-to-you/)

    Thumb up 1 Thumb down 0

  3. Posted August 18, 2012 at 15:58 | Permalink

    I have the feeling that something is missing in the discussion. Is the current security paradigm perhaps outdated? Consider your earlier post about the expanding definition of collaboration to include outside parties. The traditional enterprise seurity policies inhibit that type of inclusion more than any technology deficiency ever could. This is evidenced in my job as a consultant by the simple fact that ever client I have gives me a laptop and that is the only device I’m allowed to use for connecting to or working on their environment. I currently have 5 laptops sitting on my desk. If we rethink our approach to security then the concern of the unknown client device could diminish greatly.

    Thumb up 0 Thumb down 0

Post a Comment

You must be logged in to post a comment.