Security Concerns with Rooting/Custom ROM's - Nexus 5 Q&A, Help & Troubleshooting

Hi everyone, I hate to ask this question since I've been rooting and flashing ROM's for a good 3 years now.
I recently accepted a promotion at my work and I am now being given access to my work's email (through the app called "Good"). My fear is that my security is extremely important where I work because my employer is a financial institution. My question is if running anything other than stock presents any kind security risk whatsoever. I love running custom ROM's, but it's not worth losing my job.
Thanks and sorry if this is the dumbest question you've ever read.

mjs2011 said:
Hi everyone, I hate to ask this question since I've been rooting and flashing ROM's for a good 3 years now.
I recently accepted a promotion at my work and I am now being given access to my work's email (through the app called "Good"). My fear is that my security is extremely important where I work because my employer is a financial institution. My question is if running anything other than stock presents any kind security risk whatsoever. I love running customer ROM's, but it's not worth losing my job.
Thanks and sorry if this is the dumbest question you've ever read.
Click to expand...
Click to collapse
"Good for Enterprise" won't run on a rooted phone..
there are ways to bypass the root detection (google xda+good+hide+root, but if the app updates, you might have to re-hide it
with a rooted nexus 5... you could buy a really cheap used phone (with wifi), don't root it, install good and tether via your nexus 5... but you'll have to carry around two phones

if you're worried about security, stock rom, no root, stock everything, locked bootloader.

By rooting your phone as you may or may not already know, you are bypassing certain security measures in order to make manufacturer level changes such as installing roms. I personally believe because of that, your rooted phone will never be as secure as a non-rooted one. If i were you i would go back to stock and use androids built in security features (data encryption, password/pin) because no matter what app you use to protect yourself, because you are rooted there will always be a risk
Hope this helps

Great thanks for the responses. Yeah, I was a little worried about that. As much as I love rooting/custom ROM's, my job means 10x more. I'll go back to stock unrooted and locked bootloader.
Thanks again!

My opinion as a corporate email administrator and IT security and compliance policy writer.... (edit - and experienced android rooter)
Although I would always ensure my policy dictates rooted phones are not used, the risk doesn't lay within root itself. Nothing can get root without your say so and applications are sandboxed meaning they cannot Install themselves without user intervention.
So long as you follow simple rules, you should be fine
1) Use reputable custom roms. Stay away from betas, tests and leaks
2) only install reputable applications from reputable sources. Stick to play and xda. Don't be an early adopter.
3) use a secure kernel. Do not opt for insecure ones (Insecure adb)
4) keep the device password protected at all times.
5) ensure the strictest settings in the supersu app. Monitor it regularly
6) use flashify to flash stock recovery and bootunlocker to lock your bootloader - your everyday state MUST be stock recovery and locked bootloader. Unlock bootloader and flash recovery to flash roms and kernels but ensure you flash stock recovery and re lock
7) exercise common sense
Although that said:
1) if your company IT /AUP policy dictates no root, you'd better comply. I've worked in similar places where they have blanked out camera plates on blackberrys and check your messages
2) if the app doesn't work with root anyway..
Personally, if you really want corporate email on your phone AND freedom, get a second phone
Sent from my Nexus 5 using Tapatalk

rootSU said:
My opinion as a corporate email administrator and IT security and compliance policy writer.... (edit - and experienced android rooter)
Although I would always ensure my policy dictates rooted phones are not used, the risk doesn't lay within root itself. Nothing can get root without your say so and applications are sandboxed meaning they cannot Install themselves without user intervention.
So long as you follow simple rules, you should be fine
1) Use reputable custom roms. Stay away from betas, tests and leaks
2) only install reputable applications from reputable sources. Stick to play and xda. Don't be an early adopter.
3) use a secure kernel. Do not opt for insecure ones (Insecure adb)
4) keep the device password protected at all times.
5) ensure the strictest settings in the supersu app. Monitor it regularly
6) use flashify to flash stock recovery and bootunlocker to lock your bootloader - your everyday state MUST be stock recovery and locked bootloader. Unlock bootloader and flash recovery to flash roms and kernels but ensure you flash stock recovery and re lock
7) exercise common sense
Although that said:
1) if your company IT /AUP policy dictates no root, you'd better comply. I've worked in similar places where they have blanked out camera plates on blackberrys and check your messages
2) if the app doesn't work with root anyway..
Personally, if you really want corporate email on your phone AND freedom, get a second phone
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
Thanks! Yeah, I think the key here is that our policy does state that the phone being used can't be modified, so it's better that I just follow the rules.
Plus, stock Android has improved so much over the years that this is a much easier decision than it would have been back in the day when I had my LG Optimus running Froyo.

mjs2011 said:
our policy does state that the phone being used can't be modified,
Click to expand...
Click to collapse
Then its best not to. Financial companies take this sort of thing very seriously and can often see breach as gross misconduct
Sent from my Nexus 5 using Tapatalk

Thankfully a lot of the stock ROM is pretty good out of the box and just needs a few minor tweaks.

Related

[Q] Why root/unlock this device?

Hi everyone,
I just arrived here from the world of Nook Color where for 20 months I have been rooting and installing CM roms. For the Nook that was essential since out of the box it was not an Android tablet.
I have had the tf700 for only 4 days, and I am delighted with it. Upgraded it to JB and have no complaints. My question is - what is the rationale for rooting and unlocking my new toy? Are there some issues with stock that need addressing, or is it just to satisfy the innate hacker that lives in all of us?
I'll do it if there is a point to it, but I am pretty happy with everything I see right now...
Derek
Sent from my ASUS Transformer Pad TF700T using xda premium
derekr said:
Hi everyone,
I just arrived here from the world of Nook Color where for 20 months I have been rooting and installing CM roms. For the Nook that was essential since out of the box it was not an Android tablet.
I have had the tf700 for only 4 days, and I am delighted with it. Upgraded it to JB and have no complaints. My question is - what is the rationale for rooting and unlocking my new toy? Are there some issues with stock that need addressing, or is it just to satisfy the innate hacker that lives in all of us?
I'll do it if there is a point to it, but I am pretty happy with everything I see right now...
Derek
Sent from my ASUS Transformer Pad TF700T using xda premium
Click to expand...
Click to collapse
If you are happy, I think no reason to. I have mine rooted because I wanted to buy things from Japanese Market i.e. needed to use Market Enabler. Another benefit is Browser2ram. Though browser on JB is so much better, browser2ram can make even better. Having said this, the gain to me is not as noticeble as it was with ICS. So yes. not much reason to root unless you need to use root only application.
As far as unlocking, I think main reason is to use custom rom but I am personally satisfied with stock rom so have not unlocked personally.
My reasons:
1. Titanium Backup (ease of restore after factory reset)
2. Ad Away (Ads drain my battery)
3. Cerberus, device tracker (root users can make app a system app then remotely enable GPS)
4. Orbot, useful for encrypting traffic on unsecured wireless networks (Only with root can you enable "transparent proxy")
Just to name a few reasons. Not as many reasons as why I need root on my phone but ill edit if I remember more.
TeCKNeiC said:
My reasons:
1. Titanium Backup (ease of restore after factory reset)
2. Ad Away (Ads drain my battery)
3. Cerberus, device tracker (root users can make app a system app then remotely enable GPS)
4. Orbot, useful for encrypting traffic on unsecured wireless networks (Only with root can you enable "transparent proxy")
Just to name a few reasons. Not as many reasons as why I need root on my phone but ill edit if I remember more.
Click to expand...
Click to collapse
1. Titanium Backup is a biggie for me. Couldn't do without it.
2. Total Commander needs root access to be able to manage the external memory cards. I use them for storing large files (movies, documentaries, etc.).
3. AdAway -- they not only waste bandwidth and battery, but they burn my retina away. (I'm so thankful for donation versions, so I can kick the ads out and support the dev in the meantime.)
4. BetterBatteryStats
Those are the few that are currently listed with SuperSU -- I do have browser2RAM installed, but to be honest I didn't notice any tangible improvement.
It's worth the root
Great post!
I'm happy with no root for now.
Lost it when the 4.1 update showed up.
I was running a few apps needing root, yet I don't really miss them...well except for b2ram.
Can't answer about unlocking...I don't want to do that until I buy another tablet.
I'll probably mess with rooting eventually when I get really bored or when quick and easy solution appears if ever.
For now like yourself the hacker in me is taking a break
Thats OK said:
For now like yourself the hacker in me is taking a break
Click to expand...
Click to collapse
I believe the saying goes something like "the bow cannot always stand bent." ; )
My reasoning was that my stock experience was real glitchy (launcher crashes, freezing, random reboots, stuttering from bloat running in the background)... wanted a streamlined ROM and the ability to use AutoStarts. And TB and Ad Away are never bad things to have, either.
Sent from my ASUS Transformer Pad TF700T using Tapatalk 2
at this point, as stated above, is about the apps you want to use. I suggest rooting since it doesn't void warranty. There are plenty of good apps that make use of it. Unlocking, that does void warranty. I would wait till your satisfied with the build of your Infinity In addition, wait till there is that must have rom or kernal. Since you mentioned Cyanogenmod, it hasn't officially been released yet. There is some work being done, but as usual with early builds, not everything is working yet.
I rooted mine so I can set up a chroot environment running a real GNU/Linux distro in order to do things like connecting to my home networked filesystems over a VPN service that I pay for in addition to accessing that machine for development purposes while travelling away from home using software that I trust and know has a good reputation within a wider, respected community of developers (openvpn, openssh-client, vim, etc etc).
I unlocked mine so that I can experiement with building Yocto-based filesystems which I eventually plan to flash to my device, and also so I can contribute testing/development effort to Debian's armhf architecture. Also, I want to learn what free AND copyleft touchscreen input translation layers are available that allow one to emulate traditional mouse pointers when using applications not originally intended for touchscreen interfaces.
I am not particularly happy with Android or the contortions that its developers push themselves through to restrict what can be done with it "out-of-the-box"; though I do recognize it as a preferred alternative to other systems that disrespect user freedoms such as iOS and WE. I also understand that there are arguments to be made in favor of Android's disrespect of user freedoms such as the need to protect consumer devices that are difficult to fix after hard bricking.
So yeah, I guess it boils down to is, I want to use the software I prefer and am familiar with as well as satisfying my desire to learn and contribute to the free software community.
help help!!!
pls i just go my tf700 2 days ago. with building number IML74K.US_epad-9.4.5.26-20120720,. i want to root and need jelly bean on it, but i dont know how to go about it. also i have no memory card yet, pls someone enlighten me on the steps:crying:
I was also fine with mine stock but I needed root to connect to my university's wifi which has a proxy, theres an app called proxyfier that enables system-wide proxy access, but it needs root... As some others said, if there's no specific reason why you'd want to root/unlock... don't.
My opinion is, UNLOCKING your device is something you need to think about. It's void your warranty and if you don't plan on playing with custom rom then don't do it. However, rooting is a great benefit to your device and you always can un root if you like.
buhohitr said:
My opinion is, UNLOCKING your device is something you need to think about. It's void your warranty and if you don't plan on playing with custom rom then don't do it. However, rooting is a great benefit to your device and you always can un root if you like.
Click to expand...
Click to collapse
+1 Listen to this man - he knows what he is talking about. :fingers-crossed:

Lot's Of Root Questions

Okay, so I've got into the Android ecosystem with Nexus 5 as my first device, after ditching my iPhone 5S.
I wanted to root it, but have a few questions:
1) Will my 3rd-party apps get deleted [Phone Is Non-Contract if it helps]
2) Will I be getting OTA updates, like the upcoming Android KitKat 4.4.3?
3) Will my phone become slow/prone to viruses/malwares?
4) What are these "ROMs and Kernels" I'm hearing/seeing a lot, and which one is the best after a root?
deepak2001 said:
Okay, so I've got into the Android ecosystem with Nexus 5 as my first device, after ditching my iPhone 5S.
I wanted to root it, but have a few questions:
1) Will my 3rd-party apps get deleted [Phone Is Non-Contract if it helps]
2) Will I be getting OTA updates, like the upcoming Android KitKat 4.4.3?
3) Will my phone become slow/prone to viruses/malwares?
4) What are these "ROMs and Kernels" I'm hearing/seeing a lot, and which one is the best after a root?
Click to expand...
Click to collapse
Better start reading first, read the first 4 threads in the General Section so you learn something about unlocking the bootloader. rooting, flashing, adb, custom recovery`s etc etc before you start doing stuff and ending up bricking your phone
deepak2001 said:
Okay, so I've got into the Android ecosystem with Nexus 5 as my first device, after ditching my iPhone 5S.
I wanted to root it, but have a few questions:
1) Will my 3rd-party apps get deleted [Phone Is Non-Contract if it helps]
2) Will I be getting OTA updates, like the upcoming Android KitKat 4.4.3?
3) Will my phone become slow/prone to viruses/malwares?
4) What are these "ROMs and Kernels" I'm hearing/seeing a lot, and which one is the best after a root?
Click to expand...
Click to collapse
1) Yes. Part of rooting is unlocking the bootloader which wipes all personal data from the phone.
2) Read here
3) Root has nothing to do with speed or performance. Its just elevated privileges. Its up to you what you choose to do with that. As for viruses, I have been rooted for a long long time and never come across any virus issues. The only times I've seen people get their phones infected is when they try to download pirated apps off sketchy, bootleg websites.
4) ROMs are basically the firmware/OS that runs on your phone. Kernels are what connect the software to hardware. There is no best rom/kernel. It a choice that you make for yourself.
deepak2001 said:
Okay, so I've got into the Android ecosystem with Nexus 5 as my first device, after ditching my iPhone 5S.
I wanted to root it, but have a few questions:
1) Will my 3rd-party apps get deleted [Phone Is Non-Contract if it helps]
2) Will I be getting OTA updates, like the upcoming Android KitKat 4.4.3?
3) Will my phone become slow/prone to viruses/malwares?
4) What are these "ROMs and Kernels" I'm hearing/seeing a lot, and which one is the best after a root?
Click to expand...
Click to collapse
1. It resets everything back to default the first time you unlock the bootloader.
2. You won't get OTA updates/they'll glitch, but it isn't hard to upgrade regardless through flashing the update (usually from XDA) rather than getting it OTA.
3. Common misconception, rooting does NOT make your phone slow, it simply allows access to your phone's root, which can possibly (not always) pave the way for malicious software asking for root access to your phone. You have to grant or deny root access for an application through SuperSU/Superuser so it's up to you to keep your phone safe.
4. ROMs are android builds, the one that comes with your phone is referred to as the stock ROM. Custom ROMs usually add a variety of new features/customization options to android, and sometimes increased performance (not always, sometimes worse). Kernels are the software/firmware that lets the system communicate with the hardware, and are a factor in battery life and performance, as well as (to some degree), personalization (eg swipe/tap2wake).
Edit: @Chromium beat me to it
Read through the threads for your phone. Make sure it's your specific phone model when modding. Another great idea is to watch YouTube Videos so you get a sort of hands on approach. YouTube really helped me out back in the day. Make sure you know what to do if something doesn't go as planned during the flashing process. Rooting & flashing custom roms is highly addictive and you may find yourself checking out XDA several times a day for the latest mods for your phone. Good luck and Godspeed!
NEXUS 5

Can I prevent my new Pixel 2 / XL from being rooted?

All of the discussions I am seeing are about people trying to root their new Pixel 2 devices. They are worried they won't be able to root due to the Verizon locking and/or lack of images. My question is simple. If I buy a Pixel 2 / XL from google's site, is there anyway I can prevent the phone from being rooted and/or flashed with another (custom or google) bootloader? Can the FRP help me here? I'm just getting ramped on how google's phones work and I want to know if I can prevent evil maid attacks (someone temporarily gets access and loads malicious software on it). If someone has rooted it, is there anyway I would know? Would it have been erased? If I set the OEM unlock to disabled in the developer's options, would that prevent it, or is there a way to disable that in the recovery boot environment? I know the blackberry prevents root and I'm wondering how to achieve similar security with Pixel 2 devices.
Thanks in advance
brainysmurf said:
All of the discussions I am seeing are about people trying to root their new Pixel 2 devices. They are worried they won't be able to root due to the Verizon locking and/or lack of images. My question is simple. If I buy a Pixel 2 / XL from google's site, is there anyway I can prevent the phone from being rooted and/or flashed with another (custom or google) bootloader? Can the FRP help me here? I'm just getting ramped on how google's phones work and I want to know if I can prevent evil maid attacks (someone temporarily gets access and loads malicious software on it). If someone has rooted it, is there anyway I would know? Would it have been erased? If I set the OEM unlock to disabled in the developer's options, would that prevent it, or is there a way to disable that in the recovery boot environment? I know the blackberry prevents root and I'm wondering how to achieve similar security with Pixel 2 devices.
Thanks in advance
Click to expand...
Click to collapse
If you let people spend inordinate amounts of time with your phone, there's not much you can do to prevent someone from rooting your phone... except putting a password on it and not letting people spend inordinate amounts of time with your phone.
Sent from my Pixel 2 using Tapatalk
ajrty33 said:
If you let people spend inordinate amounts of time with your phone, there's not much you can do to prevent someone from rooting your phone... except putting a password on it and not letting people spend inordinate amounts of time with your phone.
Sent from my Pixel 2 using Tapatalk
Click to expand...
Click to collapse
Thanks for the answer. However this has not been true for many phones, namely the blackberry, and even some models of the Pixel (verizon). I noticed you mentioned "putting a password on it". Assuming my phone is entirely feature protected (password, encryption, oem unlock disabled...), will this prevent the the standard rooting procedures? I understand exploits may be found, but I'm not considering those seeing as they will be patched. It's the standard rooting procedures I'm concerned about. I don't want rooting my phone (without me knowing) to be an enabled feature (or possible at at all if that is feasible). My only goal here is to stop that.
Thank you
brainysmurf said:
Thanks for the answer. However this has not been true for many phones, namely the blackberry, and even some models of the Pixel (verizon). I noticed you mentioned "putting a password on it". Assuming my phone is entirely feature protected (password, encryption, oem unlock disabled...), will this prevent the the standard rooting procedures? I understand exploits may be found, but I'm not considering those seeing as they will be patched. It's the standard rooting procedures I'm concerned about. I don't want rooting my phone (without me knowing) to be an enabled feature (or possible at at all if that is feasible). My only goal here is to stop that.
Thank you
Click to expand...
Click to collapse
To root you need to have an unlocked bootloader. Unlocking the bootloader requires the OEM unlocking switch to be flipped. Getting to that point requires you to enter your password twice (unlocking the phone and enabling developer options). You also need a computer with a functional fastboot setup. Unlocking the bootloader wipes the phone and all of your personal information with it. After unlocking the bootloader you have to push some files to the phone via adb or with mtp after you have logged back into your phone. Then you have to flash twrp via fastboot and in turn flash magisk. (This is all of the to of my head. You can read the root threads for the exact details.)
The point is your phone can't be rooted without you knowing it.
Sent from my Pixel 2 using Tapatalk
PiousInquisitor said:
To root you need to have an unlocked bootloader. Unlocking the bootloader requires the OEM unlocking switch to be flipped. Getting to that point requires you to enter your password twice (unlocking the phone and enabling developer options). You also need a computer with a functional fastboot setup. Unlocking the bootloader wipes the phone and all of your personal information with it. After unlocking the bootloader you have to push some files to the phone via adb or with mtp after you have logged back into your phone. Then you have to flash twrp via fastboot and in turn flash magisk. (This is all of the to of my head. You can read the root threads for the exact details.)
The point is your phone can't be rooted without you knowing it.
Sent from my Pixel 2 using Tapatalk
Click to expand...
Click to collapse
Excellent. That is what I was looking for. If that is true, this phone meets my security needs.
brainysmurf said:
Excellent. That is what I was looking for. If that is true, this phone meets my security needs.
Click to expand...
Click to collapse
You don't need to be rooted for malicious software to be loaded on to your phone. Just stick with installation of apps from the play store and check the reviews/ratings and if something sounds to good to be true then it's probably best to avoid it unless you have valid sources authenticating it.
flunk03 said:
You don't need to be rooted for malicious software to be loaded on to your phone. Just stick with installation of apps from the play store and check the reviews/ratings and if something sounds to good to be true then it's probably best to avoid it unless you have valid sources authenticating it.
Click to expand...
Click to collapse
right, we already have those principles down. we're just trying to understand how vulnerable we are to specific attacks that are out there, namely the evil maid attacks. our team is extremely conservative on the basics that you are speaking of. we're just filling in the blanks for some more sophisticated attacks that are possible on the pixel, which is a new platform to us.
Thanks
brainysmurf said:
right, we already have those principles down. we're just trying to understand how vulnerable we are to specific attacks that are out there, namely the evil maid attacks. our team is extremely conservative on the basics that you are speaking of. we're just filling in the blanks for some more sophisticated attacks that are possible on the pixel, which is a new platform to us.
Thanks
Click to expand...
Click to collapse
The workflow that @PiousInquisitor stated is true for, AFAIK, every modern Android device in existence.
brainysmurf said:
right, we already have those principles down. we're just trying to understand how vulnerable we are to specific attacks that are out there, namely the evil maid attacks. our team is extremely conservative on the basics that you are speaking of. we're just filling in the blanks for some more sophisticated attacks that are possible on the pixel, which is a new platform to us.
Thanks
Click to expand...
Click to collapse
So far all the above answers are correct. I'll add a couple more. Evil maid attacks are not being used on phones/android afaik. My understanding is that a computer must be booted with a USB stick while you're not looking, installing software onto your computer/laptop and then hijacking it. So I wouldn't worry about that. Even so, keeping OEM lock in the disabled state in dev options will prevent root on your device. Also do not install unapproved software and if you are that worried you might want a scanning program that will root (no pun intended) out malicious software. I think there are a few out there.
As for FRP, it's a good idea but it can be bypassed. There are people out there that can take a stolen phone and bypass FRP for a fee of around $30. Also searching for FRP bypass will give you some ways as well. So I would not rely on that. Nonetheless they would need to wipe the device to do that and by that time you would have blacklisted the IMEI and rendered the phone useless to the thieves. You and your company seem aware and cautious. I don't think you'll run into any issues with the Pixel 2. You made a good choice.
The device software is rarely the vulnerability, it's the people using the device.
If your threat model is such that the ultimate question is "what can someone do with physical access to the device", you're dealing with zero day exploits that aren't publicly known and all of our feedback is out the window.
Telperion said:
The device software is rarely the vulnerability, it's the people using the device.
If your threat model is such that the ultimate question is "what can someone do with physical access to the device", you're dealing with zero day exploits that aren't publicly known and all of our feedback is out the window.
Click to expand...
Click to collapse
The op is gone. Not sure if she was trolling but this thread is over.
Sent from my Pixel 2 using XDA-Developers Legacy app

Is there any real advantage of unlocking bootloader and rooting HTC U11?

Hi there,
I have been rooting all previous samsung and pixel phone but i dont know if rooting or unlocking bootlaoder is needed for HTC U11.. I mean software is fast and fluid, battery is exceptional (7 hour screen on time), not much bloatware out there, sound is alo great unless we have some sound mods out there who improve it further
so is there any advantage of rooting and going after custom ROMs/Mods ?
secondly i am using HTC phone after long time so this S On/OFF is confusing. If we have unlock bootloader and root/Twrp then can we flash all custom ROMs ? or we must need to do S-OFF in order to flash some custom ROMs ?
Thanks
S-off is protection for system turned off so anything written to root is permanent.
Unlocking bootloader is what protects the phone from loading software that isn't official.
Yes you can flash roms etc without s-off. S-off is dangerous but can offer extra methods of recovery should your phone die unexpectedly. It is highly recommended to buy s-off via sunshine app if you plan on rooting.
Rooting has its uses but it has more disadvantages. Some apps won't run, ie banking apps, you can easily cheat games but it makes things boring, you can block adverts but you can get rootless options too.. Swings and roundabouts. Personally I don't root anymore.
Rajaasim1980 said:
Hi there,
I have been rooting all previous samsung and pixel phone but i dont know if rooting or unlocking bootlaoder is needed for HTC U11.. I mean software is fast and fluid, battery is exceptional (7 hour screen on time), not much bloatware out there, sound is alo great unless we have some sound mods out there who improve it further
so is there any advantage of rooting and going after custom ROMs/Mods ?
secondly i am using HTC phone after long time so this S On/OFF is confusing. If we have unlock bootloader and root/Twrp then can we flash all custom ROMs ? or we must need to do S-OFF in order to flash some custom ROMs ?
Thanks
Click to expand...
Click to collapse
You dont need to be S Off to install a custom ROM. Although there are more and more apps and theming engines that pretty much do what the old rooting used to, I have been rooting since the old school evo days. You can always go back to stock in most cases, but its nice to see what the different custom roms developers have to offer and experience the different user interfaces. The installation of a different kernel is the the best advantage to me if you are looking to tweak battery usage and certain functions. Plus you van back up and dirty flash most roms without much hassle or loss of data. I currently am S On and have used a few different daily driver roms with no issues for years now. Just read up on firmware updating and the Rom requirements before loading.
shivadow said:
S-off is protection for system turned off so anything written to root is permanent.
Unlocking bootloader is what protects the phone from loading software that isn't official.
Yes you can flash roms etc without s-off. S-off is dangerous but can offer extra methods of recovery should your phone die unexpectedly. It is highly recommended to buy s-off via sunshine app if you plan on rooting.
Rooting has its uses but it has more disadvantages. Some apps won't run, ie banking apps, you can easily cheat games but it makes things boring, you can block adverts but you can get rootless options too.. Swings and roundabouts. Personally I don't root anymore.
Click to expand...
Click to collapse
Not the best advice or info.
You don't need s off unless you plan on changing your u11 firmware from one cid to another (Google it). Why spend the $$ unnecessarily?
IF you root with Magisk you can use magisk Manager to hide root from banking and other apps and they'll work just fine.
It's 101...
jhill110 said:
Not the best advice or info.
You don't need s off unless you plan on changing your u11 firmware from one cid to another (Google it). Why spend the $$ unnecessarily?
IF you root with Magisk you can use magisk Manager to hide root from banking and other apps and they'll work just fine.
It's 101...
Click to expand...
Click to collapse
My explanation for s-off is valid. S-off has more uses than just changing the cid. Google it. I recommend s-off in all instances where the phone will be rooted. Otherwise you leave it s-on.
As for magisk, it doesn't always work. Google it. It's 101.
S off S on
Personally I've only ever used S off to downgrade stock, never needed to change cid, it makes tasks easier but a lot of the security is missing, it's swings & roundabouts soff
only temporary on the u11
jhill110 said:
Not the best advice or info.
You don't need s off unless you plan on changing your u11 firmware from one cid to another (Google it). Why spend the $$ unnecessarily?
IF you root with Magisk you can use magisk Manager to hide root from banking and other apps and they'll work just fine.
It's 101...
Click to expand...
Click to collapse
I rooted an old Motorola phone (Verizon) years ago and I didn't have any problems then. I could flash all these different ROMs and it was cool and interesting to do. Later phones I owned from Verizon didn't let me root so that was that. This year I decided I wanted to get a phone directly from HTC, the U11. I got the version that I could unlock and it didn't have all the bloatware like from the other carriers. I got the phone in April of this year and did the unlock process using the HTC Dev website. All went well and I loaded up a few apps that only worked with an unlocked phone. I installed Magisk and TWRP but I never did install a custom ROM because the phone was working well - fast and long battery life and the apps that required an unlocked phone played well.
Then a couple weeks ago there was a notification on my phone that there was an OTA update. The OTA notification nag screen was constantly coming up and of course I couldn't update while the phone was unlock. Or at least that's what I thought. So I went and used ADB and gave the the command to OEM lock. That was it, my phone got corrupt and long story short my phone is headed back to HTC to be revived.
When I do get the phone back I'll leave it as is, factory stock. I really didn't see the need to flash any new ROMs after I got the phone in April. It is a hard lesson to learn but oh well. It is what it is. If I do decide to unlock again, I will make sure I know what I am doing. Obviously I didn't.
Good luck OP on what you decide.
Tethering Without Root?
I'm moving from an S7 to the U11. I've always rooted my phones in the past, mainly to get tethering and remove bloat. Is there a tether option without rooting the U11? From what I hear there isn't a ton of bloat on the U11, so if I can tether without root, I might just do that.
hunteditor said:
I'm moving from an S7 to the U11. I've always rooted my phones in the past, mainly to get tethering and remove bloat. Is there a tether option without rooting the U11? From what I hear there isn't a ton of bloat on the U11, so if I can tether without root, I might just do that.
Click to expand...
Click to collapse
https://www.htc.com/us/support/htc-u11/howto/sharing-data-connection-with-usb-tethering.html
Well there isn't much of bloatware on the U11 and that is one of the reasons I wanted that phone. Another reason was that I wanted the latest HTC phone (got my U11 in April before the U12+ came out). I don't care for Samsung and Apple phones and I've just gravitated toward HTC since the HTC Incredible.
I've rooted a couple phones before and they were so easy to do. No issues and it was not so complicated as it is now. I really screwed my U11 (or at least I couldn't figure out the right procedures to get it out of trouble).
I root because I want youtube adaway (Which to be fair does have a no root option) and, more importantly, adaway.
Adaway has no alternative if you aren't rooted, which sucks. I don't care for adgaurds VPN or DNS666. An App like Adaway, I would pay for that on a non-rooted phone to make it happen. Bonus, I also get to install other ROMs Once my phone stops being updated by HTC, which seeing their track record, will be around January of 2019.
KOAO said:
I root because I want youtube adaway (Which to be fair does have a no root option) and, more importantly, adaway.
Adaway has no alternative if you aren't rooted, which sucks. I don't care for adgaurds VPN or DNS666. An App like Adaway, I would pay for that on a non-rooted phone to make it happen. Bonus, I also get to install other ROMs Once my phone stops being updated by HTC, which seeing their track record, will be around January of 2019.
Click to expand...
Click to collapse
it can't work on rooted phones because google doesnt want to happen.
Adaway removes the reveneue of big corporations, and thats affect google, thats why google, banking apps, and even pokemon don't like rooting.
you can acess your bank in your windows PC (windows have admin mode)
but you can't in android..
F** logic..
I don't know what people are doing on this site that say we don't need root. It's like atheists on eclesiastical meeting
I often think putting a custom rom in more secure due to the security patches being updated, however obviously you need to mask it for bank apps. So how important are security updates? Banking apps like google pay dont check that condition yet they check the latter.

Question Unsupported Countries and Root

Hey guys i need your advice.
Tomorrow my Pixel 7 pro arrives and i am living in an unsupported county. I have read a lot of guides about the root etc. i just want to verify that i will be able to use the full features of the device if i rooted....like call screening, 5g etc. and how risky is to be rooted nowdays because last time i root my phone was 10 years ago....if after the mandatory things i don't install any app outside of the store and don't grant access root will my device be safe ? thank you
try hentaios In the latest update it was activated 5g in unsupported countries
m3ath said:
try hentaios In the latest update it was activated 5g in unsupported countries
Click to expand...
Click to collapse
HentaiOS for Pixel 7 Pro? Is it on Telegram or another third-party place?
ekin_strops said:
HentaiOS for Pixel 7 Pro? Is it on Telegram or another third-party place?
Click to expand...
Click to collapse
yes for 7 pro and 7
They have a channel in Telegram
I am certainly not an expert. I remember the days of flashing roms. I used to sometimes flash multiple roms a day.
Now most of the features I used to use custom roms for are already in Android.
Also if you have a Pixel you have a pretty clean version of Android.
So I don't really see the point. Maybe in your situation because you are using the phone in an unsupported country you might be able to enable some features but I would think the network bands are hardware based and either your carrier is compatible with the Pixel or not?
IMHO I would not root or install custom software on a brand new phone like a Pixel or other flagship. It generally voids your warranty and if you soft brick the device and can't revive it what do you do? Also with root you have huge security vulnerability. Pixel is supposed to be one of the most secure Android phones so why would you get rid of that benefit?
Also updates would be a pain.
If I had a free cheap phone from a carrier with a crappy version of Android that I would risk rooting and maybe installing a custom ROM but I just don't see the need on a Pixel??
robbbzilla said:
IMHO I would not root or install custom software on a brand new phone like a Pixel or other flagship. It generally voids your warranty and if you soft brick the device and can't revive it what do you do? Also with root you have huge security vulnerability. Pixel is supposed to be one of the most secure Android phones so why would you get rid of that benefit?
Click to expand...
Click to collapse
1) It doesn't void your warranty on the Pixel.
2) Root isn't a security vulnerability in and of itself but the unlocked bootloader can be if someone gets ahold of your phone. Seeing how the filesystem is encrypted though, it's not so much a risk to your data as it is to the person being able to steal the phone easier.
3) Most other phones have largely been locked down so a lot of us get the Pixel *because* it can be rooted.
robbbzilla said:
Also updates would be a pain.
Click to expand...
Click to collapse
Not too bad. Pixel Flasher makes the whole process easy. Plug into the computer, launch Pixel Flasher, download the update, click the patch image button so it makes a Magisk image, select that image, flash. It's all done with a user friendly GUI. While it's not as straightforward as updating directly on the phone, it also installs faster, so it's a worthwhile trade off.
EtherealRemnant said:
1) It doesn't void your warranty on the Pixel.
2) Root isn't a security vulnerability in and of itself but the unlocked bootloader can be if someone gets ahold of your phone. Seeing how the filesystem is encrypted though, it's not so much a risk to your data as it is to the person being able to steal the phone easier.
3) Most other phones have largely been locked down so a lot of us get the Pixel *because* it can be rooted.
Not too bad. Pixel Flasher makes the whole process easy. Plug into the computer, launch Pixel Flasher, download the update, click the patch image button so it makes a Magisk image, select that image, flash. It's all done with a user friendly GUI. While it's not as straightforward as updating directly on the phone, it also installs faster, so it's a worthwhile trade off.
Click to expand...
Click to collapse
Good to know. I thought enabling root level privileges would cause system wide insecurity.
As I prefaced my comments I am no expert and it has been a long time since I rooted my phones.
That is why it is good to ask questions and learn about the state of things now.
I didn't know that you could root a Pixel device and not void the warranty. I am used to the Samsung lock down.
Also with Pixel or with previous Nexus device it was always fun to see what new features Google would add in a new update/feature drop so I never felt the need to root a Pixel phone.
However if you like rooting and can do so without much risk then why not? I can see the fun in trying different software and gaining better control over your device.
robbbzilla said:
Good to know. I thought enabling root level privileges would cause system wide insecurity.
Click to expand...
Click to collapse
Seeing how you still have to authorize the use of root and Magisk even has added support for fingerprint verification to do so, it's not much more of a risk than having an unrooted device really.
robbbzilla said:
Also with Pixel or with previous Nexus device it was always fun to see what new features Google would add in a new update/feature drop so I never felt the need to root a Pixel phone.
Click to expand...
Click to collapse
You still get this stuff when you're rooted and even on most custom ROMs for Pixel. The only downside comes from apps that don't want to play nice. As long as I can use Google Pay, which I'm able to do after using the SafetyNet fix mod, I don't mind having to use the web browser for a banking app here and there (and right now there's only one that flat out won't work, Security Service FCU, so I'm not too put out by it).
It's a pain in the ass to enable carrier features like VoLTE, VoNR, etc. Pixel features like call screening require phenotype edits, which are also a pain in the ass.
G_Vasi said:
Hey guys i need your advice.
Tomorrow my Pixel 7 pro arrives and i am living in an unsupported county. I have read a lot of guides about the root etc. i just want to verify that i will be able to use the full features of the device if i rooted....like call screening, 5g etc. and how risky is to be rooted nowdays because last time i root my phone was 10 years ago....if after the mandatory things i don't install any app outside of the store and don't grant access root will my device be safe ? thank you
Click to expand...
Click to collapse
One bit of warning/caution, I've seen/found a lot of users on this forum who are in other countries (maybe unsupported) biggest issue would be NFC pay & banking apps not working. I personally have only seen a few select apps stated on this forum that can't be launched due to root detection that SafetyNetFix and Zygisk DenyList/Shamiko wasn't able to successfully hide, but there are some -- I myself have Wallet, Gpay, 4 banking apps, Xfinity apps, working while I've discussed with some other users the same banking app not working for them -- that, no matter how much users tried, they were unable to get it working. Supposedly there are combinations of root hiding methods and modules that have blocked mostly all of the stubborn apps, but then there seems to be some apps that merely just having an unlocked bootloader is enough to restrict their use.
So if this might be your situation where you have certain apps (most likely banking) that you can't really live without and/or use daily/frequently but they are known to not run on a rooted & unlocked bootloader device, that's the only real downside to rooting.
Other than that, I believe obtaining root on our device benefits so much far outweighing the risks. If certain things stop working, usually there are workarounds to get them to work or alternatives. If anything, particularly in your case, I don't believe you can get those features of 5G and call screening and camera sound and VPN and whatever other feature is restricted in an unsupported country without root....
So there are them pros & cons...
Thank you for your answers guys.....I also think that pros are more than cons....as far as I know and from the ways I found here my Bank apps will work normally.....and also I found a tutorial here that say it will enable all the Pixel features in unsupported countries so hopefully it will work...if by any case anyone tried it I would like to hear the feedback especially for google screening.

Categories

Resources