[Q] Security of rooted android devices - Security Discussion

Hello!
I have some basic questions about the security of rooted android devices. I'm running Cyanogenmod 11 actually on my SGS3. Of course I rooted it to install custom Recovery and ROM. So is there any possibility for an App to get Root Access without recognition?
I dont need the Root access anymore, I only wanted to install Cyanogenmod and thats it. What to do to fully unroot Cyanogen?
Another question:
If i have enabled "only install from trusted sources" am I safe? Or could there be sort of drive-by-downloads for example on this site sometimes i get the pop-up "your phone has (13) viruses, click ok ...".
Yeah thats it, I'm a little bit paranoid especially according to my passwords, are they safe!?
Thanks a lot and Greets from Germany!

Can anyone help me?

RedMr said:
Hello!
I have some basic questions about the security of rooted android devices. I'm running Cyanogenmod 11 actually on my SGS3. Of course I rooted it to install custom Recovery and ROM. So is there any possibility for an App to get Root Access without recognition?
I dont need the Root access anymore, I only wanted to install Cyanogenmod and thats it. What to do to fully unroot Cyanogen?
Another question:
If i have enabled "only install from trusted sources" am I safe? Or could there be sort of drive-by-downloads for example on this site sometimes i get the pop-up "your phone has (13) viruses, click ok ...".
Yeah thats it, I'm a little bit paranoid especially according to my passwords, are they safe!?
Thanks a lot and Greets from Germany!
Click to expand...
Click to collapse
First, how do you define 'safe'? Nothing is ever really 'safe'.
I'm not sure if it is possible for an app to get root permissions without having the device 'rooted' first.
If you see your device restart(ed), it could have been done by some exploit in an app. But you have to have downloaded and run that app first. But don't rely on my answer on this one, my knowledge of this is not enough to give you an proper satisfying answer.
To unroot your phone just bring the phone back to factory state. This will reset everything on your phone back to normal.
If you want to be really sure, flash the original rom with KIES, which will restore your phone back to it was when you bought it.
Then put some recovery on it like TWRP or CWM and install CyanogenMod with it.
Maybe you could even use the stock Samsung recovery to install CyanogenMod, but I've never tried this so I am not sure this will work.
For the 2nd question:
The popups you are referring to are probably just advertisements. The same crappy things you get on a pc without an adblocker.
But for an adblocker to work, you probably need root.
From my perspective, there is no really being 'safe' without taking the necessary security precautions, but in most cases they require root access to work properly.
About your passwords:
If you are really paranoid about them being stolen from your phone, don't store them, period.
I would suggest AFWall+, which is a firewall based on IPTables (which are fully configurable to your own liking) and don't give any apps internet that don't need it.
Hope I could be of some assistance.

Related

[Q] Nexus S: Root & more

Probably tons of questions like these, but I couldn't find the right answers, sorry.
1) What makes the Nexus S easier to root than other devices?
2) When you root, you can install custom roms. What else can you do with root acces?
3) Do you need root to overclock your device, and do you need a custom rom? I saw a video of the Nexus S overclocked to 1.3ghz, and it looked like a custom rom (boot screen was different).
4) Can you receive OTA-updates when rooted? And when having a custom rom installed? And when overclocked?
5) Do you need to root to install home screen replacements like Launcher Pro and ADW Launcher?
6) I saw that rooting 'wipes' all your data? What does that mean exactly?
Thanks in advance!
Androyed said:
Probably tons of questions like these, but I couldn't find the right answers, sorry.
1) What makes the Nexus S easier to root than other devices?
2) When you root, you can install custom roms. What else can you do with root acces?
3) Do you need root to overclock your device, and do you need a custom rom? I saw a video of the Nexus S overclocked to 1.3ghz, and it looked like a custom rom (boot screen was different).
4) Can you receive OTA-updates when rooted? And when having a custom rom installed? And when overclocked?
5) Do you need to root to install home screen replacements like Launcher Pro and ADW Launcher?
6) I saw that rooting 'wipes' all your data? What does that mean exactly?
Thanks in advance!
Click to expand...
Click to collapse
1. Other devices rooting is quite an extensive process on the NS its just fastboot oem unlock and then flash a recovery and then a rom. Google isnt trying to lock you out
2.you can do just about anything that isnt allowed in stock, i know thats vague but true
3. yes you need root, custom rom no, custom kernel yea
4.you can receive OTA on stock rooted roms but it will remove root and replace recovery with stock, most roms remove the OTA ability so you dont lose root
5. no
6. what whipes your data is fastboot oem unlock it does this for security purposes and it does what it means gets rid of everything on the "SD card" and "internel memory" you can just copy stuff off the SD portion but as far as everything else like app data game saves and what have you your pretty SOL
So if you've rooted your device, you have to un-root it when a OTA-update comes, and then when you root it again, it will wipe all your data again?
A normal android user like me, would he have a good reason to root his/her device, or is just installing a homescreen replacement enough excitement?
This custom kernel, does it install more than just a different bootscreen? I am going to buy a Nexus S because there isn't messed with Android, but I am interested in overclocking so that I will not get jealous at other dual-core devices. If a custom kernel changes the interface, it is a no-go for me.
Rooting, is it like jailbraking on the iPhone/iPod Touch? All my friends have jailbroken their iPod's and iPhone's, so that they can download most apps for free and install other cool stuff. Is there a way (with or without rooting) to download apps for free on your Android?
^ This question is probably going to stay unanswered. I can say that I'm just asking, and that I will not use it, but then I would lie. I could also say that I haven't got that much money, but then I would also be lying. I could say that I don't have a creditcard, which is true, but there are a lot of creditcard 'simulators'. And I'm probably saying this all to pretend that I'm a super intellegent guy, so that you would think: 'Oh, he doesn't deny he is going to use it, he is smart, I will answer the question', but I'm not intelligent. And I probably said that out of self-pity, in the hope someone will answer the question.
Androyed said:
So if you've rooted your device, you have to un-root it when a OTA-update comes, and then when you root it again, it will wipe all your data again?
A normal android user like me, would he have a good reason to root his/her device, or is just installing a homescreen replacement enough excitement?
This custom kernel, does it install more than just a different bootscreen? I am going to buy a Nexus S because there isn't messed with Android, but I am interested in overclocking so that I will not get jealous at other dual-core devices. If a custom kernel changes the interface, it is a no-go for me.
Rooting, is it like jailbraking on the iPhone/iPod Touch? All my friends have jailbroken their iPod's and iPhone's, so that they can download most apps for free and install other cool stuff. Is there a way (with or without rooting) to download apps for free on your Android?
^ This question is probably going to stay unanswered. I can say that I'm just asking, and that I will not use it, but then I would lie. I could also say that I haven't got that much money, but then I would also be lying. I could say that I don't have a creditcard, which is true, but there are a lot of creditcard 'simulators'. And I'm probably saying this all to pretend that I'm a super intellegent guy, so that you would think: 'Oh, he doesn't deny he is going to use it, he is smart, I will answer the question', but I'm not intelligent. And I probably said that out of self-pity, in the hope someone will answer the question.
Click to expand...
Click to collapse
Just going to stop you right there, rooting is not about piracy, if you wanna pirate apps please do look somewhere else
slowz3r said:
Just going to stop you right there, rooting is not about piracy, if you wanna pirate apps please do look somewhere else
Click to expand...
Click to collapse
That's what I thought. Thanks for answering the other questions anyway!
slowz3r said:
Just going to stop you right there, rooting is not about piracy, if you wanna pirate apps please do look somewhere else
Click to expand...
Click to collapse
Not that I condone piracy or anything but you can pirate apps without being rooted.... unless you're on AT&T.
I know this because certain applications who are being beta tested (e.g. Trillian Beta) was in .apk format... all you needed was Unknown Sources. Root isn't required to do that
just saying.
zephiK said:
Not that I condone piracy or anything but you can pirate apps without being rooted.... unless you're on AT&T.
I know this because certain applications who are being beta tested (e.g. Trillian Beta) was in .apk format... all you needed was Unknown Sources. Root isn't required to do that
just saying.
Click to expand...
Click to collapse
I can not use this information, but you and I know I will. So, thanks, I guess.

Root it or not.

I am in big dilemma; either to root my tab or not.
There is no bloatware to remove and I dont want to play with it with custom roms like I do in my phone.
But I want to install different launcher which need su power to fix widgets.
So should I root it or not I am soooo much confused.
Sorry I can't answer that for you. I was about to ask the same question but in a slightly different form. This is my first tab ( a tab isn't worth getting if it doesn't have an active digitizer ), and I would like to know whether or not to root. The way I see it is that it breaks down into two lists: pros and cons, which I think is also the way you want to look at it. So aside from a custom rom, what are the pros and cons of rooting your Note?
All I want is different launcher with su power. . Touch wiz is silly. Dont let me resize all widgets and eat my all space.
With out root I cant place widgets on home screen in different launcher.
bikrame said:
I am in big dilemma; either to root my tab or not.
There is no bloatware to remove and I dont want to play with it with custom roms like I do in my phone.
But I want to install different launcher which need su power to fix widgets.
So should I root it or not I am soooo much confused.
Click to expand...
Click to collapse
I'm in the same dire dilemma...
Root Pros:
Many very useful apps require root to access the inner system settings
It allows to see what's behind the curtains of one's Android device (browse and see system files and settings) and (slowly) learn how does it work
Root Cons:
The device can loose its immaculate "official" status, loose the warranty and the OTA updates.
Some app (mainly apps dealing with media contents and concerned with possible copyright infringements) may stop working if they detect a rooted device, by means of the binary counter, that could anyhow be zeroed with "Triangle Away", or by the mere presence of the SuperUser (SuperSU) app.
The ideal way would be to root but, at the same time, being able to completely hide the rooted status of the device; both for Samsung warranty and Ota updates and for those apps that stop working if they "sniff" a rooted device... but I think that's not possible yet...
I find rooting a device also plugs a lot of security exploits too...
If you're able to, taking back to stock is fairly easy but that can be a BIG if sometimes....
Overall I find having root is a big "+". It allows me touse my device how I want and plugs those holes left by Google/Samsung in their OS.
Each person should evaluate if they need to or not but I find it a lot better to root simply for peace of mind... at least if I get a virus that destroys my tab , I'm the one who gave it root access... The blame is mine other than the tab dies mysteriously one day..
Rooting was super simple with the exynos exploit apk, if you didn't update. I rooted using that apk, then used the same developer's MobileOdin app to update while keeping root. For me, I'd say that rooting is very useful on this tablet because you can also enable multiwindow for every single app, something you won't have without rooting..
asdfuogh said:
For me, I'd say that rooting is very useful on this tablet because you can also enable multiwindow for every single app, something you won't have without rooting..
Click to expand...
Click to collapse
I thought you got that with JB?
JB only have a few apps added to have multiwindows then ICS...but if you root you can use multiwindow manager to add multiwindows ability to all apps.
Also adds the ability to freeze unwanted apps, backup OS in case of bad things happening (settings, OS and user data) and to truly set things up as you, the owner and user, want...
Allows 3rd party tracking apps like cerberus to track and remotely wipe sensitive data in case tablet goes missing not to mention turn on GPS to track and get pics of person using it.
In my view worth it for Titanium Backup Pro and Nandroid backup .
Warranty void easy enough to put that right .
OTA updates don't work not a problem this is after all XDA .
jje
I don't see the confusion on your part. It's a simple decision imo. You want an ability to do something that can only be done with root. Just because you root, doesn't mean you have to customize in any other way.
As far as OTA's go that should be a non–issue as well since they are mostly a joke as far as improvement in any significant way. Everything they have is readily available here on XDA and more often than not sooner.
bikrame said:
All I want is different launcher with su power. . Touch wiz is silly. Dont let me resize all widgets and eat my all space.
With out root I cant place widgets on home screen in different launcher.
Click to expand...
Click to collapse
Forgive me if I haven't totally understood what you want.....but you can install any launcher you want without rooting. I have Go Launcher, it allows me to resize Widgets etc.
Sent from my GT-N8010 using xda app-developers app
Markhypnosis said:
Forgive me if I haven't totally understood what you want.....but you can install any launcher you want without rooting. I have Go Launcher, it allows me to resize Widgets etc.
Sent from my GT-N8010 using xda app-developers app
Click to expand...
Click to collapse
Yeah. Do u really need root just to change launcher?
Unless u need it for other reason, I don't think root is needed just for changing the launcher.
But if u want root access, then yes, ur device need to be rooted.
Sent from my GT-N7105 at the corner of this rounded earth
Yup I got that guys. Thank you.
I tried long time ago and it didnt work. Now it does
Sent from my GT-N8013 using xda premium
sphere314 said:
...The ideal way would be to root but, at the same time, being able to completely hide the rooted status of the device; both for Samsung warranty and Ota updates and for those apps that stop working if they "sniff" a rooted device... but I think that's not possible yet...
Click to expand...
Click to collapse
A new possible solution for some Samsung devices is here.
I haven't tried it yet, but, according to the thread posts it seems that:
it can preserve the official status and the binary counter
there's an "unroot" option, so that, if some apps sniffs the rooted status and stops working, you can temporarily unroot and have it work again
If anyone has actually tried it on the GNote 10.1, his comments will be appreciated.
Backup apps and data without root
JJEgan said:
In my view worth it for Titanium Backup Pro and Nandroid backup .
Warranty void easy enough to put that right .
OTA updates don't work not a problem this is after all XDA .
jje
Click to expand...
Click to collapse
You all know that there is a new backup program that does not need root to backup apps and app data.
Its called "Carbon - App Sync and Backup" by ClockworkMod
Here is the link https://play.google.com/store/apps/details?id=com.koushikdutta.backup
It works great.
sphere314 said:
A new possible solution for some Samsung devices is here.
I haven't tried it yet, but, according to the thread posts it seems that:
it can preserve the official status and the binary counter
there's an "unroot" option, so that, if some apps sniffs the rooted status and stops working, you can temporarily unroot and have it work again
If anyone has actually tried it on the GNote 10.1, his comments will be appreciated.
Click to expand...
Click to collapse
kkretch said:
You all know that there is a new backup program that does not need root to backup apps and app data.
Its called "Carbon - App Sync and Backup" by ClockworkMod
Here is the link https://play.google.com/store/apps/details?id=com.koushikdutta.backup
It works great.
Click to expand...
Click to collapse
I've tried them both and I'm really satisfied with the results.
1) before trying the Framaroot app I used Carbon backup to make a full backup of all my apps data (without root).
2) after that, being confident enough I could restore back my tablet apps data (in case something went wrong), I used the Framaroot app to get root.
Result:
1) I could backup my app's data before rooting
2) With Framaroot I have now root access. Anyway, the most important thing is that my device status has remained "Official" (1) and the binary counter is "unchanged" as well!
I wouldn't ever think that it was possible to root a device without having to change the recovery and, by doing so, change the device status/binary counter.
Now I know it's possible
(1) EDIT feb-17-2013
Update: the device status is now "Custom". Yet, after the rooting, I checked and rebooted more than one time. There must be some Android service that checks the presence of root periodically and finds out, sooner or later, if the device is rooted
sphere314 said:
I've tried them both and I'm really satisfied with the results.
1) before trying the Framaroot app I used Carbon backup to make a full backup of all my apps data (without root).
2) after that, being confident enough I could restore back my tablet apps data (in case something went wrong), I used the Framaroot app to get root.
Result:
1) I could backup my app's data before rooting
2) With Framaroot I have now root access. Anyway, et hemost important thing is that my device status has remained "Official" and the binary counter is "unchanged" as well!
I wouldn't ever think that it was possible to root a device without having to change the recovery and, by doing so, change the device status/binary counter.
Now I know it's possible
Click to expand...
Click to collapse
Thank you for the info on framaroot. I read the thread you had linked earlier and decided to try it out on my old Archos 101 gen 8 (since the developer indicated he was able to root this device with framaroot) before attempting to install it on my note. Needless to say, it didn't work on the Archos (tried it twice) and I ended up having to reformat both times because the tablet got stuck in a boot loop. Was installation really that smooth on your note and can you confirm that you're running JB 4.1.2 not 4.1.1 (saw your post in the framaroot thread).
mke1973 said:
Thank you for the info on framaroot. I read the thread you had linked earlier and decided to try it out on my old Archos 101 gen 8 (since the developer indicated he was able to root this device with framaroot) before attempting to install it on my note. Needless to say, it didn't work on the Archos (tried it twice) and I ended up having to reformat both times because the tablet got stuck in a boot loop. Was installation really that smooth on your note and can you confirm that you're running JB 4.1.2 not 4.1.1 (saw your post in the framaroot thread).
Click to expand...
Click to collapse
As I said in the other thread I'm not 100% sure about JB 4.1.1 or 4.1.2.
All I'm sure of is that the firmware code is N8000XXCLL3-N8000ITVCLL1
According to Sammobile it is 4.1.1 but according to Samsung-updates it is 4.1.2. In the tablet, in the "Settings - About device" page the Android version reported is 4.1.2.
Since I'm now rooted maybe I could find out the real Android version (beneath Samsung's touchwiz) by having a quick look at some of the system file... if anyone could tell me where to look .
Anyway I can confirm that my rooting process was really smooth, that it took less than a minute and that my Note's Status has stayed "Official". (1)
Probably I was just lucky or the firmware I had on the GNote 10.1 is one of those with which Framaroot works ok.
(1) EDIT feb-17-2013
Update: the device status is now "Custom". Yet, after the rooting, I checked and rebooted more than one time. There must be some Android service that checks the presence of root periodically and finds out, sooner or later, if the device is rooted
sphere314 said:
As I said in the other thread I'm not 100% sure about JB 4.1.1 or 4.1.2.
All I'm sure of is that the firmware code is N8000XXCLL3-N8000ITVCLL1
According to Sammobile it is 4.1.1 but according to Samsung-updates it is 4.1.2. In the tablet, in the "Settings - About device" page the Android version reported is 4.1.2.
Since I'm now rooted maybe I could find out the real Android version (beneath Samsung's touchwiz) by having a quick look at some of the system file... if anyone could tell me where to look .
Anyway I can confirm that my rooting process was really smooth, that it took less than a minute and that my Note's Status has stayed "Official".
Probably I was just lucky or the firmware I had on the GNote 10.1 is one of those with which Framaroot works ok.
Click to expand...
Click to collapse
Thank you. I may wait to see if other note users with JB 4.1.2 report success with Framaroot before I try it on my note since I had issues with a device that the developer had been able to root with his program. Even though I've backed up with Carbon, I don't care to deal with my note stuck in a virtual boot loop. I appreciate you pointing out Framaroot I hadn't seen the thread on it.

installing custom ROM CM11

Hello. Im new here and I have Motorola Photon Q with SIM mod and custom ROM Mokee (Android 6.0.1).
I want to know if I want to instal CM11/12 (or CM13) on my phone i need to get back to Stock ROM and than do all of the rom stuff?
Also i trying playing PoGO with Mygisk but when i turn off root it gets back on. Any solution?
And one more, is there a big chance to I change my phone to a ussles brick?
Thanks for help.
There's always the potential to brick a device, if you do something incorrect.
While the chances are less likely nowadays, the issue is still possible. If you are afraid of this potential, stop now.
Otherwise, you can flash any ROM you want - no need to go back to stock.
As for the root comment, no clue - I'm guessing you didn't truly disable root (perhaps you can't disable it in Mokee? Never used it myself. Never wanted to disable root either...).
Good luck.
arrrghhh said:
There's always the potential to brick a device, if you do something incorrect.
While the chances are less likely nowadays, the issue is still possible. If you are afraid of this potential, stop now.
Otherwise, you can flash any ROM you want - no need to go back to stock.
As for the root comment, no clue - I'm guessing you didn't truly disable root (perhaps you can't disable it in Mokee? Never used it myself. Never wanted to disable root either...).
Good luck.
Click to expand...
Click to collapse
I sucessly upgrade my phone to CM12, its nightly in fact but everything is ok for now. :good:
In Mokee I have a option to dislabe root in developer options but this didn't give anything, PoGO still won't start.
I was wondering about it and I think I shouldn't risk to brick my phone for one silly game.
Thank You very much for help
I realize this is way old so you probably figured out a way, but to play PoGo one easy way (that works for me) is to use TWRP to rename the 'su' binaries to something else. There are a couple of them and I don't recall exactly where they are but I found the info on this site. Of course then you won't have root automatically, but can still run your renamed su from a terminal if needed, or use twrp to rename them back to su. Every time you update builds su gets restored, so have to rename again for PoGo.

[ROOT][TUTORIAL] How to root your SM-T337A with SuperSU (Temporary root)

I've made this thread to teach T337A owners how to root their device with SuperSU. Please note that this is a system-less root, meaning it's temporary, but can be re-applied. Rooting only takes about 5-7 minutes and brings numerous tweaks and advantages to your device. Just remember that every time you reboot or shut the device down, you will need to repeat the rooting process. This tutorial was designed for Lollipop 5.1.1, but it should work on KitKat as well.
Before beginning, you will need to download the following file, unzip it on your pc, then transfer it to your device's internal storage/external sd card.
T337AUCU2BOH4 (Lollipop) firmware can be found here
Root Files can be found here
Lets start!
1) Install both the APK files in the file on your device, If prompted, allow installation from unknown sources.
2) Make sure your device is connected to WiFi, then open Kingroot.
3) Once Kingroot is "Done searching for the best root strategy", click the "Try Now" button and wait about 3 minutes for KingRoot to give you a "Root Successfully" message.
4) This is where it gets kinda tricky, immediately after receiving the root success message, go into SuperSU-me, and grant root permissions when prompted.
5) Click on the big blue button in the middle of the frame and wait about 1 minute for the process to complete. DO NOT UPDATE THE SUPERSU BINARY, IT WILL CAUSE YOUR DEVICE TO BOOTLOOP.
6) IMMEDIATELY after the process has completed, go into Settings and make sure KingRoot or Purify is not installed! This is an important step because Kingroot and Kingroot adware tends to install itself in the system partition which can cause problems and frustration.
7 - Recommended) Download a root file explorer (such as ES File Explorer) and search "King" under /data and /system to ensure that the KingRoot app and its bloatware has been wiped from the system. This is to ensure that Kingroot still works properly after a reboot.
8) Enjoy root access!
If this tutorial helped you please be sure to hit the :good: button. If you had any issues or troubles during this process please feel free to let me know down below.
Cheers!
@KingOfTheNet
will flashfire work? bc it wont with kingroot
also, could itit.d be enabled and run these off of a script for example on startup so we don't have to do this after each reboot/shutdown
but i believe you would have to capture kingroots data somehow in the process of rooting
toolhas4degrees said:
@KingOfTheNet
will flashfire work? bc it wont with kingroot
also, could itit.d be enabled and run these off of a script for example on startup so we don't have to do this after each reboot/shutdown
but i believe you would have to capture kingroots data somehow in the process of rooting
Click to expand...
Click to collapse
FlashFire does work on SuperSU, I've tested that for myself. It does not work with KingRoot.
For the second question, I'm not sure. I haven't looked through that file myself and I might look through it later but right now, I would just avoid rebooting the tablet if you wanna keep root without repeating the process over and over again. It's what I do, repeating the process over and over again can get very tedious and annoying.
Cheers!
I assume you're talking about 5.1.1? It won't work with kingroot versions higher than 4.8. Also, flashfire will load, but if you try to flash a zip you're screwed. You can actually use replace kingroot with supersu zip in terminal emulator on any version kingroot. Same deal with su binary, don't update it. Wish I could figure out how I had permanent for with kingroot. I had to go messing with things and lost it. Nothing really special about this method, unless there's a dev out there that can do something with it.
xjimmy said:
I assume you're talking about 5.1.1? It won't work with kingroot versions higher than 4.8. Also, flashfire will load, but if you try to flash a zip you're screwed. You can actually use replace kingroot with supersu zip in terminal emulator on any version kingroot. Same deal with su binary, don't update it. Wish I could figure out how I had permanent for with kingroot. I had to go messing with things and lost it. Nothing really special about this method, unless there's a dev out there that can do something with it.
Click to expand...
Click to collapse
Sorry for the late response. Yes, somethings I forgot to mention in the original post:
1)Updating the SU Binary will put your device in a bootloop
2)Flashing anything with flashfire (based on what I've seen) results in a soft brick
3) I know you can replace kingroot with SuperSU in terminal, but when you reboot, you're unrooted again.
4) I'm trying to figure out how I could altar the boot.img so we can get permanent SuperSU on this thing the same way Chainfire did it with the US and Qualcomm Samsung Galaxy S7's.
Cheers!
Hi, @KingOfTheNet, thanks for helping out with this device, i rooted my device on KK nk2 build and now updated to 5.1.1, thanks to you! now i would like to root 5.1.1 (am aware it is a temp. root)
i have superSu Pro, do i need Super Sume for this to work?
KingOfTheNet said:
Sorry for the late response. Yes, somethings I forgot to mention in the original post:
1)Updating the SU Binary will put your device in a bootloop
2)Flashing anything with flashfire (based on what I've seen) results in a soft brick
3) I know you can replace kingroot with SuperSU in terminal, but when you reboot, you're unrooted again.
4) I'm trying to figure out how I could altar the boot.img so we can get permanent SuperSU on this thing the same way Chainfire did it with the US and Qualcomm Samsung Galaxy S7's.
Cheers!
Click to expand...
Click to collapse
Somehow I had it permanently rooted with kingroot a while back. I had the 4.9.6 apk on my tab at the time, is all I know. I could've updated from an earlier version, and maybe that was the cause. I've tried so many different versions of kingroot with no luck, but one peculiar occurrence; if I open kingroot, get into the settings and uninstall kingroot without saving a backup of root, then delete all the files in the tablet's main directory, and reinstall kingroot version 4.8.0, it somehow retains a partial permanent root. At least on my T337A running 5.1.1 BOH4 it will, as long as I get a fresh install of 4.8.0, let it root, then hit the optimize button right after. Then wait until it finally tells me that kingroot has been deployed as a system app. After that, when I try to open any root apps, the screen will darken as it does when the root permission tab pops up, but it never pops up. The app just freezes. I can kill it in the task manager screen to just go back to using my tablet. After I restart the tab, sometimes it'll tell me an app has been granted superuser permissions. If I open up terminal emulator, type in the 'su' command and hit enter, the screen will turn dark again like it's going to ask me to allow or deny superuser permission, but it just freezes like that again. I've tried all kinds of stuff with 4.8.0, but I still can't get it to stick. If you don't hit the optimize button in kingroot right after rooting, and just wait for kingroot to install as a system app, the allow/deny prompt comes up without freezing, but the partial permanent root glitch doesn't remain. ugh, tired of messing with it though. lol
Edit: I may be wrong. It might need to be rooted with 4.8.0, optimized, then rebooted right away for the partial root. I'll try to do it again and let you know what I find.
bklyndiaz said:
Hi, @KingOfTheNet, thanks for helping out with this device, i rooted my device on KK nk2 build and now updated to 5.1.1, thanks to you! now i would like to root 5.1.1 (am aware it is a temp. root)
i have superSu Pro, do i need Super Sume for this to work?
Click to expand...
Click to collapse
I'm happy to help out! You'd need king root installed, root the tab with king root, then use SuperSU me to replace the kingroot binaries with the SuperSU ones. It is an automatic process and should only take about 30 seconds or less. Pro version of SUPERSUme is not required, free version should work just fine.
Cheers!
xjimmy said:
Somehow I had it permanently rooted with kingroot a while back. I had the 4.9.6 apk on my tab at the time, is all I know. I could've updated from an earlier version, and maybe that was the cause. I've tried so many different versions of kingroot with no luck, but one peculiar occurrence; if I open kingroot, get into the settings and uninstall kingroot without saving a backup of root, then delete all the files in the tablet's main directory, and reinstall kingroot version 4.8.0, it somehow retains a partial permanent root. At least on my T337A running 5.1.1 BOH4 it will, as long as I get a fresh install of 4.8.0, let it root, then hit the optimize button right after. Then wait until it finally tells me that kingroot has been deployed as a system app. After that, when I try to open any root apps, the screen will darken as it does when the root permission tab pops up, but it never pops up. The app just freezes. I can kill it in the task manager screen to just go back to using my tablet. After I restart the tab, sometimes it'll tell me an app has been granted superuser permissions. If I open up terminal emulator, type in the 'su' command and hit enter, the screen will turn dark again like it's going to ask me to allow or deny superuser permission, but it just freezes like that again. I've tried all kinds of stuff with 4.8.0, but I still can't get it to stick. If you don't hit the optimize button in kingroot right after rooting, and just wait for kingroot to install as a system app, the allow/deny prompt comes up without freezing, but the partial permanent root glitch doesn't remain. ugh, tired of messing with it though. lol
Edit: I may be wrong. It might need to be rooted with 4.8.0, optimized, then rebooted right away for the partial root. I'll try to do it again and let you know what I find.
Click to expand...
Click to collapse
Kingroot does allow your device to retain permanent root after a certain time. However, Kingroot is not as powerful as SuperSU, is very limited in terms of what It can do, and has it's own 'bloatware' titled Purify. I'd honestly stick with SuperSU because it's (probably) the most powerful and efficient way to root your phone. I'd also suggest avoiding having to reboot the tablet at all with temp root because you would have to take 5 minutes to install it again, which was a pain in the butt for me.
As for the kingroot app freezing, that's usually the result of a bad download or a bad root. Plus kingroot is very limited in terms of what you can do on your kingrooted device. SUPERSU is the equivalent of an IOS jailbreak. SUPERSU gives you full control of your device, with no bloatware and limits, unlike kingroot.
Kingroot does sometimes delete the su binaries upon rebooting, which is another reason I don't like it all that much.
Another theory I thought of is that it's not Kingroot that's deleting the binaries, it's actually something that's set to happen when the device boots up. Either the actual Android os or the bootloader searches for and deletes the su binaries to prevent root.
I don't know for sure, I've kinda slowed down work on this device mainly because of a project I've been working on with the Samsung Galaxy S7 AT&T (SM-G930A). I'll look into these things when I get the chance.
Cheers!
I understand the limitations of Kingroot, and certainly supersu by all means is better. In the case of flashfire with supersu in this scenario, it's merely the difference of being able to open and run it just enough to work improperly and brick your device vs. Kingroot not being able to open it at all. I posted in a thread long before this one, how to replace kingroot with supersu, only I use the zip file in terminal emulator. Pretty sure I went over flashfire as well. The terminal emulator method works with new versions of kingroot, unlike supersu me. Are you suggesting that the T337A running 5.1.1 BOH4 can achieve permanent root via kingroot after "a certain amount of time"? Because I'm the only one I've seen on xda who's ever posted that they had permanent root from kingroot, but I didn't know how I did it. After I messed with things, i softbricked and had to flash back to stock, which, no offense, the stock file was available way before you posted it. Anyway, it's not the kingroot app freezing per se, i was talking about after rebooting, and without re-rooting, when trying to use rooted apps, they actually start to engage in the kingroot request superuser permissions pop-up. So, no, it's not a bad download, etc. I believe an older version of kingroot somehow permanently rooted my tab, perhaps with the help of something I was messing with at the time, perhaps not. I've intentionally rebooted my tab an unimaginable amount of times, testing to see if I possibly regained permanent root to no avail, so I know how that works. And it's not about having a hard time deciding on kingroot or supersu for a temproot, it's the interest in permanent root, the possibility off something like safestrap, and/or flashing custom roms, etc. When people say temproot is better or safer, i say boo. How many custom roms include a root toggle in the settings? Anyway I wish I could've gotten hold of a developer while I had permanent root. Maybe I could've done a system dump, or even try replacing the permanent kingroot with supers and drying out that could've stuck. You say you slowed down on this device, do you mean you were pursuing permanent root for it? Are you a developer? I have the AT&T S7 Edge (G935A). What's your project on the 930? Is it something for rooted S7's? I still have my edge running the engboot with the echoRom. Anyway, thanks for your reply.
---------- Post added at 01:01 AM ---------- Previous post was at 12:51 AM ----------
https://forum.xda-developers.com/tab-4/help/t337a-temp-root-bootlp-fix-tar-official-t3473737
*https://forum.xda-developers.com/tab-4/general/permanent-root-t337a-5-1-1-kingroot-t3518334
A couple of threads I started a long time ago that may be of interest to you.
xjimmy said:
I understand the limitations of Kingroot, and certainly supersu by all means is better. In the case of flashfire with supersu in this scenario, it's merely the difference of being able to open and run it just enough to work improperly and brick your device vs. Kingroot not being able to open it at all. I posted in a thread long before this one, how to replace kingroot with supersu, only I use the zip file in terminal emulator. Pretty sure I went over flashfire as well. The terminal emulator method works with new versions of kingroot, unlike supersu me. Are you suggesting that the T337A running 5.1.1 BOH4 can achieve permanent root via kingroot after "a certain amount of time"? Because I'm the only one I've seen on xda who's ever posted that they had permanent root from kingroot, but I didn't know how I did it. After I messed with things, i softbricked and had to flash back to stock, which, no offense, the stock file was available way before you posted it. Anyway, it's not the kingroot app freezing per se, i was talking about after rebooting, and without re-rooting, when trying to use rooted apps, they actually start to engage in the kingroot request superuser permissions pop-up. So, no, it's not a bad download, etc. I believe an older version of kingroot somehow permanently rooted my tab, perhaps with the help of something I was messing with at the time, perhaps not. I've intentionally rebooted my tab an unimaginable amount of times, testing to see if I possibly regained permanent root to no avail, so I know how that works. And it's not about having a hard time deciding on kingroot or supersu for a temproot, it's the interest in permanent root, the possibility off something like safestrap, and/or flashing custom roms, etc. When people say temproot is better or safer, i say boo. How many custom roms include a root toggle in the settings? Anyway I wish I could've gotten hold of a developer while I had permanent root. Maybe I could've done a system dump, or even try replacing the permanent kingroot with supers and drying out that could've stuck. You say you slowed down on this device, do you mean you were pursuing permanent root for it? Are you a developer? I have the AT&T S7 Edge (G935A). What's your project on the 930? Is it something for rooted S7's? I still have my edge running the engboot with the echoRom. Anyway, thanks for your reply.
---------- Post added at 01:01 AM ---------- Previous post was at 12:51 AM ----------
https://forum.xda-developers.com/tab-4/help/t337a-temp-root-bootlp-fix-tar-official-t3473737
*https://forum.xda-developers.com/tab-4/general/permanent-root-t337a-5-1-1-kingroot-t3518334
A couple of threads I started a long time ago that may be of interest to you.
Click to expand...
Click to collapse
No offence taken on the firmware post, I was simply trying to spread the fact that the firmware for the device does exist but is very hard to find and is often posted on shady websites for money, unless you're looking in the right places. It only took me 5 minutes on Google to find one of those sites.
You asked if I was saying that the Tab 4 BOH4 firmware allows you to retain permanent root after some time, and yes, that's exactly what I was saying. I rooted my tablet with Kingroot 4.8.0 a while back and after about 4 - 5 reboots (I counted how many times I rebooted it, but the numbers could vary), It retained root. All I do today is avoid rebooting the tablet at all costs. I prefer SuperSU because, like we've said, there are almost no limitations of what you can do in terms of being rooted. I'm trying to find out how I can make root permanent on the tab with SuperSU by using the eng-boot method used to root all Qualcomm variants of the Galaxy S7, but that may take a while. Since my S7 has the eng-boot root method, I can reboot it all I want and it stays rooted with SuperSU. But at this point, It's just an Idea. I mainly need to find out whether or not the bootloader or the os is wiping the binaries on boot. Some older and newer versions of kingroot can retain root after reboot, but I have yet to find a version of the app that can do so.
Actually, some versions of Cyanogenmod and other custom roms had root pre-installed (not like SuperSU, but close enough), and like CM specifically, there was a section in the settings app for this pre-baked root. Even if I still used CM today, I still would've flashed SuperSU. But on a small number of devices, temp root really is better. However, most of those devices that would be on that list have very little to no development on them. Thus, they are not yet (and may never be) supported for permanent root.
I am partially on the road to becoming a developer, but I don't know how far that's gonna go (my prediction is not that far at all). I was doing research on how I could make an eng-boot for the Tab 4, but I became interested in my Galaxy S7 (AT&T). By that, I mean I wanted to make my own custom version of the stock Marshmallow rom ("Custom but stock OS"). To shorten it up, I wanted to create a .zip flashable "super package" which included SuperSU v2.79, Viper4Android, Overclock tools, and other stuff. I've kinda been on and off in terms of motivation to make this idea a reality, primarily because most of the things I wanted to include in this "package", can easily be installed by you in like 3 minutes, or maybe less. The original motive behind the idea was to lessen the work for power users who wanted to free their device "from the shackles". I've been on and off on work between both devices, but It's hard for me to continue the work without proper motivation. These projects are merely just an Idea at this point, but some drafts and copies do exist on my computer.
Creating a custom Android rom straight from my own head is basically an impossible task for me, considering most of the devices I work with have locked bootloaders. I am still learning Java and other Android programming languages in some of my free time but, again, the motivation to continue is something I struggle to find.
Cheers!
Upgrading OS and rooting
I am currently running my t337a on 4.4.2 with build NK2. I was able to root with towel root awhile ago. I want to upgrade my os to 5.1.1 and root after but would like to make sure I go about it the right way.
Any help would be greatly appreciated. Thanks in advance!
loc626 said:
I am currently running my t337a on 4.4.2 with build NK2. I was able to root with towel root awhile ago. I want to upgrade my os to 5.1.1 and root after but would like to make sure I go about it the right way.
Any help would be greatly appreciated. Thanks in advance!
Click to expand...
Click to collapse
You can root on the latest Lollipop firmware, but it's systemless supersu/temporary, meaning it will go away if you shutdown or reboot the device (you can re-root it, of course, but It can be annoying). The option to upgrade is up to you, and once you do upgrade, you can't downgrade (Locked bootloader & different bootloader versions. Lollipop has the new bootloader.) If you are going to upgrade, you can flash the Lollipop firmware via Odin or upgrade via OTA. If upgrading, I recommend taking it over the air, mainly because I'm still working up Odin packages for them. The Odin packages that I do have available are the BOH4 (the previous and the initial Lollipop update) ones, so if you upgrade OTA, it'll take away one step in the upgrade process, making your life a tad bit easier. Reply back if you need further help or have any more questions.
Cheers!
KingOfTheNet said:
You can root on the latest Lollipop firmware, but it's systemless supersu/temporary, meaning it will go away if you shutdown or reboot the device (you can re-root it, of course, but It can be annoying). The option to upgrade is up to you, and once you do upgrade, you can't downgrade (Locked bootloader & different bootloader versions. Lollipop has the new bootloader.) If you are going to upgrade, you can flash the Lollipop firmware via Odin or upgrade via OTA. If upgrading, I recommend taking it over the air, mainly because I'm still working up Odin packages for them. The Odin packages that I do have available are the BOH4 (the previous and the initial Lollipop update) ones, so if you upgrade OTA, it'll take away one step in the upgrade process, making your life a tad bit easier. Reply back if you need further help or have any more questions.
Cheers!
Click to expand...
Click to collapse
I'm highly considering an upgrade for the feel and hopefully a better performance. Also, a few apps I have need updates but only compatible on Android 5 and up. I have the OTA ready to go. Would I need to unroot before upgrading the OS?
loc626 said:
I'm highly considering an upgrade for the feel and hopefully a better performance. Also, a few apps I have need updates but only compatible on Android 5 and up. I have the OTA ready to go. Would I need to unroot before upgrading the OS?
Click to expand...
Click to collapse
It would be best to unroot before installing to avoid any issues during the installation. Other then that, you're in the clear! Just remember, you cannot downgrade after the install!
Cheers!
KingOfTheNet said:
4) I'm trying to figure out how I could altar the boot.img so we can get permanent SuperSU on this thing the same way Chainfire did it with the US and Qualcomm Samsung Galaxy S7's.
Click to expand...
Click to collapse
I have always been under the assumption that the boot.img for the locked BL on the s7 was literally an engineering kernel from Samsung, and not something Chainfire created. The reason Im saying this is because if Chainfire created a boot image that can get around a locked bootloader, then logic should state that he cracked Sprint/ATT's signature for the BL. So my way of thinking is the success of even one locked boot loader ... it should apply across the board for all, correct? Or am I waaaaay off? lol
leeboski44 said:
I have always been under the assumption that the boot.img for the locked BL on the s7 was literally an engineering kernel from Samsung, and not something Chainfire created. The reason Im saying this is because if Chainfire created a boot image that can get around a locked bootloader, then logic should state that he cracked Sprint/ATT's signature for the BL. So my way of thinking is the success of even one locked boot loader ... it should apply across the board for all, correct? Or am I waaaaay off? lol
Click to expand...
Click to collapse
(1st question) Actually yeah, lol. It was an engineering kernel, he didn't make it . I'm assuming that was used during the development of the phone so Samsung and AT&T could construct the OS without running into any issues with the phones locked bootloader. At the time, I thought that Chainfire thought of some "mad science" to altar the boot.img so that it wont check the signatures of any of the files on boot.
Now I'm thinking:
1) He found a way to obtain all the phones signatures so that way he knows what signature the desired files (like a build of TWRP, or instance) would have to have so it can flash and boot properly.
--OR--
2) He somehow obtained or reproduced the engineering kernel that, like I said, was most likely used during software development for the phone (constructing the OS and the rest of the software).
I've done a little research on what engineering kernels actually do and why they are so useful now (to most people, the name is enough, lol). Apparently, they completely skip some of the signature checks on boot, primarily for /SYSTEM (The OS), which is why we were able to achieve permanent root the Qualcomm Galaxy S7 & S7 edge models. I do not think they skip signature checks for /RECOVERY or /BOOT, but we know that if we either reproduce or obtain the engineering kernel for this tablet, we can achieve permanent root the exact same way. I could be wrong, as I do not know for certain the Ins and outs of engineering kernels and how to get them, but It is very possible.
(2nd question) Now, I do not have much knowledge of bootloaders and signature checks, but I would go to the best assumption that since Sprint & AT&T, for example, are 2 completely different companies and are not affiliated (as of writing this), their bootloaders and updates would not have the same signatures. If they did, then Sprint would have to go to AT&T to sign their updates and such, and AT&T would have to do the same thing for Sprint. It just wouldn't really make sense. Lets think of it this way, If Target wants to sell a product in their stores that's already sold at Walmart, then should Target have to go to Walmart to get that approved? Or if Walmart wanted to sell something that's already sold at Target, then should Walmart have to go to Target for approval? Absolutely not, that wouldn't make any sense. Once again, I could be wrong, but it would make the most sense.
Please, anyone, correct me if I'm wrong.
Cheers!
KingOfTheNet said:
(1st question) Actually yeah, lol. It was an engineering kernel, he didn't make it . I'm assuming that was used during the development of the phone so Samsung and AT&T could construct the OS without running into any issues with the phones locked bootloader. At the time, I thought that Chainfire thought of some "mad science" to altar the boot.img so that it wont check the signatures of any of the files on boot.
Now I'm thinking:
1) He found a way to obtain all the phones signatures so that way he knows what signature the desired files (like a build of TWRP, or instance) would have to have so it can flash and boot properly.
--OR--
2) He somehow obtained or reproduced the engineering kernel that, like I said, was most likely used during software development for the phone (constructing the OS and the rest of the software).
I've done a little research on what engineering kernels actually do and why they are so useful now (to most people, the name is enough, lol). Apparently, they completely skip some of the signature checks on boot, primarily for /SYSTEM (The OS), which is why we were able to achieve permanent root the Qualcomm Galaxy S7 & S7 edge models. I do not think they skip signature checks for /RECOVERY or /BOOT, but we know that if we either reproduce or obtain the engineering kernel for this tablet, we can achieve permanent root the exact same way. I could be wrong, as I do not know for certain the Ins and outs of engineering kernels and how to get them, but It is very possible.
(2nd question) Now, I do not have much knowledge of bootloaders and signature checks, but I would go to the best assumption that since Sprint & AT&T, for example, are 2 completely different companies and are not affiliated (as of writing this), their bootloaders and updates would not have the same signatures. If they did, then Sprint would have to go to AT&T to sign their updates and such, and AT&T would have to do the same thing for Sprint. It just wouldn't really make sense. Lets think of it this way, If Target wants to sell a product in their stores that's already sold at Walmart, then should Target have to go to Walmart to get that approved? Or if Walmart wanted to sell something that's already sold at Target, then should Walmart have to go to Target for approval? Absolutely not, that wouldn't make any sense. Once again, I could be wrong, but it would make the most sense.
Please, anyone, correct me if I'm wrong.
Cheers!
Click to expand...
Click to collapse
No that makes perfect sense and thanks for clearing it up.
The whole thing about the signature being the means by which the bootloader is locked is important. Atleast to me it is, so thank you for clearing that up. :good: And so, it makes sense that the System partitions Signature check being skipped IS what allows access to root. But where my opinion differs on this is the Boot and Recovery implementation of the Signatures. I believe that it IS the carriers implementation that does not allow the Recovery and Boot partitions to be modified. If it were Samsungs then how is Samsung going to incorporate a Universal bootloader that knows how to load all carriers data, policy, etc?
And possibly this is what you were saying above and I am misreading it...
***EDIT*** I see you said that the signatures would NOT be the same between carriers, so I am in line with your theory there as well.
leeboski44 said:
No that makes perfect sense and thanks for clearing it up.
The whole thing about the signature being the means by which the bootloader is locked is important. Atleast to me it is, so thank you for clearing that up. :good: And so, it makes sense that the System partitions Signature check being skipped IS what allows access to root. But where my opinion differs on this is the Boot and Recovery implementation of the Signatures. I believe that it IS the carriers implementation that does not allow the Recovery and Boot partitions to be modified. If it were Samsungs then how is Samsung going to incorporate a Universal bootloader that knows how to load all carriers data, policy, etc?
And possibly this is what you were saying above and I am misreading it...
***EDIT*** I see you said that the signatures would NOT be the same between carriers, so I am in line with your theory there as well.
Click to expand...
Click to collapse
I'm glad I could be of help, however I don't see where I stated that the signature implementations on the BOOT and RECOVERY partitions was Samsung's idea not the carriers, if you could point that out for me that would be great.:good:
The engineering kernels skip SOME signature checks, both when flashing and booting into partitions, but I do not know exactly which ones they skip. We know it skips some of the signatures for /SYSTEM, but it does not do the same for the 2 other main ones, those being /BOOT & /RECOVERY. We know because "one of our own" attempted to flash their own build of TWRP recovery to the device (SM-G930A to be specific) only to get a signature check fail when booting the phone, which of course means that the phone has a locked bootloader and that the signatures for the /RECOVERY partition are still checked, but I do not know for certain about /BOOT. If I had to assume I'd say that /BOOT isn't checked, given the fact that if your phone is rooted then you would have had to flash the engineering kernel, which, like I said, skips some signature checks.
I hope I've cleared most things up for you.
Cheers!
KingOfTheNet said:
I've made this thread to teach T337A owners how to root their device with SuperSU. Please note that this is a system-less root, meaning it's temporary, but can be re-applied. Rooting only takes about 5-7 minutes and brings numerous tweaks and advantages to your device. Just remember that every time you reboot or shut the device down, you will need to repeat the rooting process. This tutorial was designed for Lollipop 5.1.1, but it should work on KitKat as well.
Before beginning, you will need to download the following file, unzip it on your pc, then transfer it to your device's internal storage/external sd card.
Root File: https://mega.nz/#!74Jl0ZqY!knlHuexbYGFkk1f4wHxq16u3L38EtfR9scQ0H7hISTA
Lets start!
1) Install both the APK files in the file on your device, If prompted, allow installation from unknown sources.
2) Make sure your device is connected to WiFi, then open Kingroot.
3) Once Kingroot is "Done searching for the best root strategy", click the "Try Now" button and wait about 3 minutes for KingRoot to give you a "Root Successfully" message.
4) This is where it gets kinda tricky, immediately after receiving the root success message, go into SuperSU-me, and grant root permissions when prompted.
5) Click on the big blue button in the middle of the frame and wait about 1 minute for the process to complete. DO NOT UPDATE THE SUPERSU BINARY, IT WILL BOOTLOOP.
6) IMMEDIATELY after the process has completed, go into Settings and make sure KingRoot or Purify is not installed! This is an important step because Kingroot and Kingroot adware tends to install itself in the system partition which can cause problems and frustration.
7 - Recommended) Download a root file explorer and search "King" under /data and /system to ensure that the KingRoot app and its bloatware has been wiped from the system.
8) Enjoy root access!
If this tutorial helped you please be sure to hit the :good: button. If you had any issues or troubles during this process please feel free to let me know down below.
Need T337A firmware? Check out my thread here: https://forum.xda-developers.com/tab-4/general/download-sm-t337a-lollipop-firmware-t3536509
Cheers!
Click to expand...
Click to collapse
The firmware you provided saved my sm-t337A tablet from being soft bricked. Although I was able to gain temp root from this method, king root tried to disable the SELinux on my device and after trying to temp root again caused the app to implant itself as bloatware into the /systems folder and was non functional when using the app. Do you happen to know of a custom recovery (TWRP or CWM) which would work for this device?

Out of warranty thinking of using a Custom ROM but...

Hi Folks,
I hope you guys can shed some light into this, sorry if this is long and if this has been asked I'm sorry but I could not find the answers I was looking for, as some results they sound almost the same and some had not specified enough. So I hope the clever people here can explain a few things before I go ahead.
Background on my Phone (don't know if its relevant or not)
I own an Exynos SM-G970F, on One UI 3.1, June 2021 Update, this was purchased in Australia. Now that my phone is out of warranty I was thinking of installing a custom ROM. The main motivation was to reduce CPU usage and improve battery life.
I have installed a custom ROM and rooted my tablet for practice and it was easy to follow. I gotta say it was phenomenal how it brought back ancient hardware to buttery smooth performance of newer android versions. I wanted this same experience on my daily driver phone and there are some security based questions I would like to know.
Questions
1. First off unlocking the bootloader, I have read that it reduces your security of the phone as this allows hackers to gain access to your phone unlike a locked bootloader. As far as I understand the bootloader is to check if the system partition is a Samsung ROM. So in an unlocked state it will still load the kernel and run the system regardless if the ROM is Samsung or not, am I correct in this?
1a. If that's the case and if I installed the custom ROM and then locked the bootloader I would brick my phone right? as the bootloader is looking for a Samsung ROM but since it can't recognize the ROM it will boot loop.
1b. So in this case how would an unlocked bootloader make it vulnerable apart from accessing the OS? I'm thinking in a real word scenario if I were to lose my phone and someone found it, they could have means of access from an unlocked bootloader? but then again they could have access through custom recovery?
1c. Would it be necessary to lock a bootloader once you install a custom ROM? Do some custom ROM support signing bootloaders?
2. SafetyNet, as far as I understand this is a Google thing? like the app from Play store will check your system for any tampered software before functioning or at least warning the consequences of using the app in a custom ROM, is this right?
2a. So this could lead to some banking apps not working as it requires a SafetyNet pass on your device. But this only happens if you end up rooting your device? I understand Magisk is systemless root so the SafetyNet should pass in theory?
Primarily I'm concerned of the security and privacy of the phone but nothing is perfect, so there has to be some give and take with privacy and security? Though I will lose some privacy as I will install OpenGApps for some applications to work. So security would be the most important thing. What would be some best practices for a daily driver phone on custom ROM?
I imagine that hackers are not interested attacking an individual as this takes a lot of time and energy, unless they are bored or something like that.
Thanks for taking the time to read all this and if you can shed more information that would be great! I would like to learn more before giving the green light for custom ROM on my Samsung S10e.
With the caveat that I'm really bad at Samsung, I'll try to give a couple of answers. Sounds like you have the gist of it though...
Unlocking the bootloader is necessary to install anything custom, yes, and it does reduce the security of the device but mainly if someone has physical access to it. Keeping the device encrypted can help protecting your data though. There are some devices that allow locking the bootloader with custom firmware installed, but those are few. General rule: don't even try. I've seen some talk from people at Google about letting custom ROMs be certified, so that you could lock the bootloader with them, but currently there's nothing like that (that I know of). Once in a while I see people talking about trying to sign their images to lock the bootloader, but IMHBCO it's not worth the effort (if it's possible). If you're going custom, keep the bootloader unlocked.
About SafetyNet, it's an API provided with Google's play services and can be used by apps to check if a device's security has been compromised. Far from all bank apps will be using this and many instead have their own ways of detecting a "tampered" device (more on that below). SafetyNet will trigger from a number of things:
Unlocked bootloader
Custom ROM
Root
Etc...
So, as you see it's not only rooting that will cause you problems. There are ways around it though, mainly with the help of Magisk.
When it comes to what bank apps will detect, that could include a custom ROM, root apps, files on your device, Magisk, etc. They're often much more picky than SafetyNet even...
If you need help with getting SafetyNet and banking apps working on a custom ROM, with Magisk, I've got a few resources and tips collected here:
https://www.didgeridoohan.com/magisk/HomePage
Regarding security and custom ROMs it's pretty much the same as on a stock device. Don't install weird apps from outside the Play Store, don't click links in emails, etc. On to of that, another thing to look out for is SELinux. Don't use a ROM that has it disabled. It's quite important for the security of the OS... And if you do root, be careful with what apps you give root access, since an app with root access can do whatever it wants.
No idea if this cleared anything up or just created more questions. If there are Samsung specific stuff I've gotten wrong or missed I hope that someone that actually knows what they're talking about shows up...
Didgeridoohan said:
With the caveat that I'm really bad at Samsung, I'll try to give a couple of answers. Sounds like you have the gist of it though...
Unlocking the bootloader is necessary to install anything custom, yes, and it does reduce the security of the device but mainly if someone has physical access to it. Keeping the device encrypted can help protecting your data though. There are some devices that allow locking the bootloader with custom firmware installed, but those are few. General rule: don't even try. I've seen some talk from people at Google about letting custom ROMs be certified, so that you could lock the bootloader with them, but currently there's nothing like that (that I know of). Once in a while I see people talking about trying to sign their images to lock the bootloader, but IMHBCO it's not worth the effort (if it's possible). If you're going custom, keep the bootloader unlocked.
About SafetyNet, it's an API provided with Google's play services and can be used by apps to check if a device's security has been compromised. Far from all bank apps will be using this and many instead have their own ways of detecting a "tampered" device (more on that below). SafetyNet will trigger from a number of things:
Unlocked bootloader
Custom ROM
Root
Etc...
So, as you see it's not only rooting that will cause you problems. There are ways around it though, mainly with the help of Magisk.
When it comes to what bank apps will detect, that could include a custom ROM, root apps, files on your device, Magisk, etc. They're often much more picky than SafetyNet even...
If you need help with getting SafetyNet and banking apps working on a custom ROM, with Magisk, I've got a few resources and tips collected here:
https://www.didgeridoohan.com/magisk/HomePage
Regarding security and custom ROMs it's pretty much the same as on a stock device. Don't install weird apps from outside the Play Store, don't click links in emails, etc. On to of that, another thing to look out for is SELinux. Don't use a ROM that has it disabled. It's quite important for the security of the OS... And if you do root, be careful with what apps you give root access, since an app with root access can do whatever it wants.
No idea if this cleared anything up or just created more questions. If there are Samsung specific stuff I've gotten wrong or missed I hope that someone that actually knows what they're talking about shows up...
Click to expand...
Click to collapse
Hi Didgeridoohan,
Thank you for taking the time to comb through my queries and I believe you have answered what I was looking for. So it has dispelled any myths and misconceptions of custom roms.
Personally I use the phone most and my significant other uses my phone for some games. So physical access is not likely to fall in the hands of someone else unless I lost it. Encrypting the phone is a good safety measure, I assume this is something that can be done in the settings of the OS?
With banking I guess I will have to install and see if it works out, otherwise I don't mind going to a phone web browser and do it that way.
I appreciate your link for further info of Magisk, I will be reading through the page to get better insight.
Regarding SELinux, I had seen this on my phone though it says SE for Android Status and says 'Enforcing' and on the Custom ROM on my tablet in the settings it also says 'Enforcing'. So I can assume that its ensuring the security of the OS.
I didn't have the intention of rooting as I thought I can root at any point in time but if its good practice to do it when flashing the custom ROM please let me know.
I had planned on installing TWRP and use either Lineage or crDroid (kinda leaning to this one). They both are supported on their website so I don't think I will run into issues.
Once again thanks for your help and advice on the custom ROM, I think my questions were broad and it may not be Samsung specific as there are features I know I will lose but have never used when I had the original ROM.
dude777 said:
Encrypting the phone is a good safety measure, I assume this is something that can be done in the settings of the OS?
Click to expand...
Click to collapse
Yes. Just make sure that any ROM you choose is compatible with encryption. And remember that if you ever want to remove the encryption you'll have to wipe the device.
Regarding SELinux, I had seen this on my phone though it says SE for Android Status and says 'Enforcing' and on the Custom ROM on my tablet in the settings it also says 'Enforcing'. So I can assume that its ensuring the security of the OS.
Click to expand...
Click to collapse
Correct. That's the way it should be if you want to keep some security on your device.
I didn't have the intention of rooting as I thought I can root at any point in time but if its good practice to do it when flashing the custom ROM please let me know.
Click to expand...
Click to collapse
You can wait with rooting. If you don't have any need for it, why bother? I use Magisk to hide the fact that I have an unlocked bootloader (and to hide Magisk from some apps), to use a custom hosts file (for adblocking) and for app backups (I use Swift Backup, works great).
Once again thanks for your help and advice on the custom ROM, I think my questions were broad and it may not be Samsung specific as there are features I know I will lose but have never used when I had the original ROM.
Click to expand...
Click to collapse
There are some things you'll lose when unlocking the bootloader on a Samsung, due to the tripped Knox fuse. I can't say much about that though, since I don't do Samsung...
Have fun!
Thanks Didgeridoohan,
This has given me some confidence in going forward with custom ROM. I will make some backups and take measures and if it doesn't work out I can go back but I probably wont .
I've been running LineageOS on my Exynos S10e for a few days now and it's great, better battery life than on Samsung's firmware too from what I can see.
Settings say encryption is enabled. I'm assuming on /data only, I'll have to poke around as I've been away from Android for a while and I haven't been keeping up with what's going on.
I had to use the Magisk props module (selected the same phone model) to pass SafetyNet and enable Google Pay. Banking apps here in Australia don't seem to care, at least CommBank, Bendigo, AMP by I did select them in MagiskHide just in case.
If you decide to go for it, remove all your accounts before flashing the LineageOS recovery. I didn't and wasn't able to flash recovery until I re-added and removed them (Factory Reset Protection kicked in apparently). Smooth ride after I did this.
If you don't like the LOS gestures use Fluid (FNG), I love how customizable it is. You can hide the navigation bar in Termux by running:
su
props qemu.hw.mainkeys 1
Good luck and feel free to ask me questions if you have any!

Categories

Resources