What are the security implications of flashing a ROM?
I came across this question (posted by robned) in another forum and wasn't sure how to answer this...
"Hey,
Maybe a noob question. I have searched and searched without greater success... so please be kind.
I'm in need to do something about low RAM and lousy battery life. Thus flashing a cooked ROM is starting to surface.
However, how safe is this? I mean, I'll probably pick one of the well-known builders like LEEDroic or Ace's, but how would you rate the risks for spoofing, hacking or other malware incorporated in these builds?
I know just being connedted is a risk .- but this takes it one step further. I'm not paranoid, but I do have some sensitive data like Ewallet/Flexwallet with Credit Card info for reminders...
All you guys flashing - ROM's that is - do you have any sensitive data at all?
Many thanks.
Your humble noob"
Any thoughts? Thanks!
I've been an XDA user for a few years now, and for the most part I have found it to be a great source of help and information across a wide range of devices and platforms... up until recently.
I have always had a strong interest in mobile phones/devices. And when I got my first smart phone in 2008 my interest was piqued further. I am not a developer, and I don’t intend on becoming one. I am a user. I love customization, apps, games and everything about smart phones (started on Winows Mobile, and I now use Android).
The way I understand it… XDA was started as a developer’s site/forum… for developers. Over the years it began to evolve into a non-exclusive community. Anyone could ask for help on any range of smart phone topics – which I thought was great.
Lately it seems that XDA has been trying to get back to their roots… that is to say, they are trying to make the forums more developer exclusive. I can only say that is a bad thing from a selfish stand point. Of course if I were a developer I might take issue with my forums being flooded with non-developer related (and therefore… irrelevant) threads and posts. I am in no position to criticize the site managers about what type of site they wish to run and how they want to run it. But XDA is becoming useless to me. It is becoming increasingly difficult to find help on non-development related topics.
So… Can someone please recommend another (more user-orientated) site? I like to ask questions on a range of topics; some device specific, some about how to use apps, some game hints, some general android queries, app recommendations, etc. Is there a better forum for a user like me?
Thanks for any help.
I used to frequent http://www.teambamf.net/ when I had my HTC Thunderbolt, Yea, it was my first smart phone.
They do a lot with Samsung phones, you might want to take a look and see what they have to offer.
CharlesTheMan is willing to help anyone who asks, they're good guys.
If you can't find what you want there, just ask, they can tell you what you need to do and recommend where to go if they can't answer your questions.
It always pays to search for different alternatives, I work in an IT department as a programmer, systems network analyst and a webmaster.
Don't always use the same search engine, change up, use Bing or Dogpile or many others to find what you need.
I can spend hours researching for what I need, there is so much out there now you just need to learn "Where To Look", per say.
Good luck and remember, if you don't find what you are looking for, look somewhere else!!
G.
Hi G,
Thanks for taking the time to reply. I almost always do a pretty extensive google search before coming hear to post. I rarely use bing or anyother search engine before coming here to ask... will certainly give it a go.
Thanks again.
I don't think there's another forum as great as XDA
but if you could be more specific or if you like MIUI rom, you can find everything about it here miuiandroid[dot]com
retslagoon said:
I don't think there's another forum as great as XDA
but if you could be more specific or if you like MIUI rom, you can find everything about it here miuiandroid[dot]com
Click to expand...
Click to collapse
hi retslagoon,
I do not have any particular question at this time. But thanks for your reply.
One issue I have with 'being specific' (and I think I might find this hard to explain) is that I can spend quite a bit of time typing out a questing/post (and trying to be clear and specific), while wording correctly; only to have it be ignored - for whatever reason. So the entire exercise ends up being a waste of time.
I do not know why so many simple questions get ignored on these forums, there could be a range of reasons (either because people don't know the answers to them, or because people don't bother to read them; I also wonder if it is due to the fact that some of these unanswered questions are not at all development related and therefor are intentionally ignored to teach the poster a lesson about posting on a development forum).
Eitherway, XDA is not satisfying my search for help/advice and information.
Thanks again.
[email protected] said:
hi retslagoon,
I do not have any particular question at this time. But thanks for your reply.
One issue I have with 'being specific' (and I think I might find this hard to explain) is that I can spend quite a bit of time typing out a questing/post (and trying to be clear and specific), while wording correctly; only to have it be ignored - for whatever reason. So the entire exercise ends up being a waste of time.
I do not know why so many simple questions get ignored on these forums, there could be a range of reasons (either because people don't know the answers to them, or because people don't bother to read them; I also wonder if it is due to the fact that some of these unanswered questions are not at all development related and therefor are intentionally ignored to teach the poster a lesson about posting on a development forum).
Eitherway, XDA is not satisfying my search for help/advice and information.
Thanks again.
Click to expand...
Click to collapse
My experience is that often threads are unnecessarily started: A quick Google-search before in most cases would have given the answer(s) requested. At least if the issue(s) is/are device independent. So you must not wonder a post istn't replied.
Hi, I'm no stranger to rooting my android phones etc but have had an iPhone for a couple of years now and want to make the change back to Android. My question is which phone(s) do heavy rom'ers and rooters recommend to switch to at this present time? I would like a decent camera as the iphone has one and one that isn't known to drop GPS signal like the Samsung phones have had issues with in the past. Also pretty decent battery life would be nice. My main concern is the developer support with the already mentioned hardware advantages. I want to be able to change my phone to my liking and to be able to use wireless tethering (can't get fast internet where I live) so the most 3rd party developer support is my goal. It used to be that anything Nexus was the way to go for that but they didn't always come with quality hardware. So any recommendations would be highly appreciated. Thanks!
Please review the forum rules and search before posting. Use this thread for your question. Thread closed.
Nathan
Forum Moderator
Forgive me if this isnt the proper forum. Im making the switch back to an android for my next phone in hopes of better privacy and security. Without getting into conspiracy theories and unfounded suspicions, is there a specific manufacturer that is superior to others when is comes to limiting unauthorized access? From my limited research it seemsas though the Cryogen rom is what i want to flash for anonymity and security. I apologize in advance if this has been covered elsewhere. I was unable to locate the info.
here is a very good thread on securing your device if youve not seen it yet.
http://forum.xda-developers.com/showthread.php?t=2960077
as far as manufactures are concerned i believe there are some more secure than "off the shelf" but prices start in the thousands of dollars.
hopefully someone more knowledgeable than i will chyme in with more information.
err on the side of kindness
I have recently purchased a second hand Samsung Galaxy Tab E (SM-T377W) from kijiji in Canada, but, to my dismay the FRP has been tripped. I have tried to follow ashyx and rootJunkie but even with an otg cable I am not able to access the settings/browser.
I have searched everywhere (I can think of) but am unable to find a stock firmware. any assistance would be appreciated.
Device:
Name: Samsung Galaxy Tab E
Model: SM-T377W
F/W: MMB29K.T377WVLU2API2 (gtesltebmc)
Country: Canada
I'm not sure what other info is useful, so I will reply as prompted.
Thanks in advance
IridianDesigns said:
I have recently purchased a second hand Samsung Galaxy Tab E (SM-T377W) from kijiji in Canada, but, to my dismay the FRP has been tripped. I have tried to follow ashyx and rootJunkie but even with an otg cable I am not able to access the settings/browser.
I have searched everywhere (I can think of) but am unable to find a stock firmware. any assistance would be appreciated.
Device:
Name: Samsung Galaxy Tab E
Model: SM-T377W
F/W: MMB29K.T377WVLU2API2 (gtesltebmc)
Country: Canada
I'm not sure what other info is useful, so I will reply as prompted.
Thanks in advance
Click to expand...
Click to collapse
Hello and welcome to xda-assist,
FRP is a justified security measure to protect a stolen device, you surely know that..
XDA doesn't provide any help with bypassing security measures, best advice we can provide is to find a way to contact the original owner. Sorry but nothing we can do here to help.
Edit: even stock firmware won't reset the FRP, that's no option
Sam Nakamura said:
FRP is a justified security measure to protect a stolen device, you surely know that..
Click to expand...
Click to collapse
Sam,
Thank you for your reply. I do understand the reasoning behind FRP and its role in the security measures related to the theft of devices. I have checked the IMEI with the blacklist maintained by the network providers here. The device has not been reported lost or stolen, I can provide the IMEI in a pm, if independent verification would allay your concerns.
As I'm sure you're no doubt aware, any security measure implementation invariably imposes restriction on legitimate use cases. Whilst I'm sure the boffins at Samsung and related manufacturers went to great lengths to minimise the impact, it would appear that the scenario I find myself in was not one of them.
I essentially purchased the phone from an online classified ad system. Your advice to contact the original owner was, funnily enough, one of the first I explored. Unfortunately, the ad has since been removed along with the contact information. Since I, myself, was unaware of FRP until this, I can believe that the seller was unaware also, so I don't suspect nefarious intent.
I was not familiar with FRP when I purchased the phone, and believed that checking the IMEI would ensure it hadn't been stolen. I have since researched the topic and now have a passing understanding of its strengths and shortcomings. I have not in my research found an official method to disable it. If you are aware of one I would appreciate a link.
Sam Nakamura said:
XDA doesn't provide any help with bypassing security measures, best advice we can provide is to find a way to contact the original owner. Sorry but nothing we can do here to help.
Edit: even stock firmware won't reset the FRP, that's no option
Click to expand...
Click to collapse
I find your claim that XDA doesn't provide any help with bypassing security measures a tad hypocritical, as a simple search of XDA's own forums for 'FRP bypass' will yield at least 10 pages of results and anything more than a cursory glance at the threads will demonstrate that hypocrisy.
Thank you for letting me know that the firmware avenue I was pursuing would be fruitless, at least I can stop chasing that particular white rabbit.
I shall continue to research and at worst, I will become the victim of an actual theft.
P.S. On a side note, XDA IS a valuable resource. Thanks for all your efforts Dev's, keep up the great works
IridianDesigns said:
Sam,
Thank you for your reply. I do understand the reasoning behind FRP and its role in the security measures related to the theft of devices. I have checked the IMEI with the blacklist maintained by the network providers here. The device has not been reported lost or stolen, I can provide the IMEI in a pm, if independent verification would allay your concerns.
As I'm sure you're no doubt aware, any security measure implementation invariably imposes restriction on legitimate use cases. Whilst I'm sure the boffins at Samsung and related manufacturers went to great lengths to minimise the impact, it would appear that the scenario I find myself in was not one of them.
I essentially purchased the phone from an online classified ad system. Your advice to contact the original owner was, funnily enough, one of the first I explored. Unfortunately, the ad has since been removed along with the contact information. Since I, myself, was unaware of FRP until this, I can believe that the seller was unaware also, so I don't suspect nefarious intent.
I was not familiar with FRP when I purchased the phone, and believed that checking the IMEI would ensure it hadn't been stolen. I have since researched the topic and now have a passing understanding of its strengths and shortcomings. I have not in my research found an official method to disable it. If you are aware of one I would appreciate a link.
I find your claim that XDA doesn't provide any help with bypassing security measures a tad hypocritical, as a simple search of XDA's own forums for 'FRP bypass' will yield at least 10 pages of results and anything more than a cursory glance at the threads will demonstrate that hypocrisy.
Thank you for letting me know that the firmware avenue I was pursuing would be fruitless, at least I can stop chasing that particular white rabbit.
I shall continue to research and at worst, I will become the victim of an actual theft.
P.S. On a side note, XDA IS a valuable resource. Thanks for all your efforts Dev's, keep up the great works
Click to expand...
Click to collapse
As much as understand your frustration, I only have your words and can't verify if true
About hypocrisy, remember that xda is huge and there might be the threads you mentioned but xda is more than one person, some do have no issues with this or some threads might be just unreported to the mods..
I'm a private person, I'm not employed by xda-assist or xda-developers so I have to draw my personal line which basically is "can't verify - can't help" that's all, nothing personal..
I mean you just can't expect official xda support from xda for breaking FRP when even the manufacturer denies it.. and deep insight you know that
Anyways, good luck
Sent from my Lenovo A3500-FL using XDA Labs
Sam Nakamura said:
As much as understand your frustration, I only have your words and can't verify if true
About hypocrisy remember that xda is huge and there might be the threads you mentioned but xda is more than one person, some do have no issues with this or some threads might be just unreported to the mods..
Click to expand...
Click to collapse
Again I thank you for your response Sam,
Please don't misinterpret, I am frustrated with the situation, a much deeper conversation than necessary in this venue, not with XDA.
I mentioned in my reply that Canada has a Cellular Blacklist, for precisely the purpose of providing an independent means to verify the legitimacy of a device, thus facilitating private trade with accountability. To address your concerns I offered the IMEI in order for you to conduct your own verification. Cellular Blacklists are not a concept unique to Canada.
Sam Nakamura said:
For myself I'm a private person, I'm not employed by xda-assist or xda-developers so I have to draw my personal line which basically is "can't verify - can't help" that's all, nothing personal..
Click to expand...
Click to collapse
I understand your personal stance and can respect a person who holds to their principles, especially when mine differ. I prefer to begin with trust until proven otherwise. I have been burned by that before though, hence checking the blacklist. I don't take it personally and I mean no disrespect to you.
Sam Nakamura said:
I mean you just can't expect official xda support from xda for breaking FRP when even the manufacturer denies it.. and deep insight you know that
Click to expand...
Click to collapse
As I mentioned in my reply, XDA is an excellent resource, with a great deal of knowledge and guidance from veterans for newbies like myself. I understand that XDA encompasses a much larger community than the official core XDA teams. It was to this community I was directing my question. Perhaps I erred by posting to the wrong forum, if so I apologise. I am aware of how lawsuit-happy many large companies tend to get.
In terms of the posts I mentioned, it was not a critique. As I had intended to address the community, I took your reply to encompass that. I was merely pointing out that whilst 'XDA Official' may disavow assistance, 'XDA Community' appears to embrace it. I in no way am trying to imply XDA endorses it.
IridianDesigns said:
Again I thank you for your response Sam,
Please don't misinterpret, I am frustrated with the situation, a much deeper conversation than necessary in this venue, not with XDA.
I mentioned in my reply that Canada has a Cellular Blacklist, for precisely the purpose of providing an independent means to verify the legitimacy of a device, thus facilitating private trade with accountability. To address your concerns I offered the IMEI in order for you to conduct your own verification. Cellular Blacklists are not a concept unique to Canada.
I understand your personal stance and can respect a person who holds to their principles, especially when mine differ. I prefer to begin with trust until proven otherwise. I have been burned by that before though, hence checking the blacklist. I don't take it personally and I mean no disrespect to you.
As I mentioned in my reply, XDA is an excellent resource, with a great deal of knowledge and guidance from veterans for newbies like myself. I understand that XDA encompasses a much larger community than the official core XDA teams. It was to this community I was directing my question. Perhaps I erred by posting to the wrong forum, if so I apologise. I am aware of how lawsuit-happy many large companies tend to get.
In terms of the posts I mentioned, it was not a critique. As I had intended to address the community, I took your reply to encompass that. I was merely pointing out that whilst 'XDA Official' may disavow assistance, 'XDA Community' appears to embrace it. I in no way am trying to imply XDA endorses it.
Click to expand...
Click to collapse
As xda-assist team we do no technical support, we just help the folks out there to find there way thru the different boards here on xda, we help them to help themselves, to find information and learn how to do things by their own..
As you mentioned you already found different threads referring to FRP it's best to study them and ask questions there..
Maybe you're lucky and find a solution..
Anyways, I appreciated your understanding
Good luck
Sent from my OnePlus 2 using XDA Labs