Secure ROM? - Xiaomi Redmi Note 7 Pro Questions & Answers

Hello,
I want to install a privacy focused rom like GrapheneOS on my phone. I hope there is an alternative for xiaomi. Most important to me is the disk encryption and sensors permission. It would also be nice if magisk manager would run on it. Is there a ROM that can offer me some of these features?

seppitm said:
Hello,
I want to install a privacy focused rom like GrapheneOS on my phone. I hope there is an alternative for xiaomi. Most important to me is the disk encryption and sensors permission. It would also be nice if magisk manager would run on it. Is there a ROM that can offer me some of these features?
Click to expand...
Click to collapse
You can look for CalyxOS, it is one of the most secure ROM.

Related

Why should i root/flash rom on my already OnePlus 6?

Hey folks,
Firstly my question is not from noob point of view but right now I'm sensing there is no great reason to flash custom rom or root. Am i wrong?
I know that we can get ad blocking benefits. But except that can you guys tell your reasons for going beyond the comfort of living with op6 with:
stock os
Good enough & Needed options
Updates via otas and
a complete all feature working rom.
Use block this app to block ads, this is the first phone in 9 years I have had no reason to root. Just enjoy it ?
AdAway
Firewall to restrict curious/annoying apps
Full backup via TiBackup
Automization with Tasker on Screenlock
Backup of App Data to NAS
Access to Logcat
And it's easy to keep on OTA... Apply OTA, before rebooting reinstall Magisk, reboot
So why not?
AdBlock via VPN does not help me as I use VPN permanently already and only one VPN is supported.
harigavara said:
Hey folks,
Firstly my question is not from noob point of view but right now I'm sensing there is no great reason to flash custom rom or root. Am i wrong?
I know that we can get ad blocking benefits. But except that can you guys tell your reasons for going beyond the comfort of living with op6 with:
stock os
Good enough & Needed options
Updates via otas and
a complete all feature working rom.
Click to expand...
Click to collapse
The custom roms have added back a few things OP took out like always on display and better do not disturb settings.
Root and custom roms don't break OTA updates. I rooted on day 1 and I've successfully taken every OTA.
Custom kernels also add a few things that matter to some people, like Wireguard VPN integration.
For me i need root because of themes, diffrent emoji's, adblocker, doze for google play services, diffrent font and for a custom kernel so i get the most out of my device and get it to my liking.
Titanium backup.. Some good modules in Magisk,... Custom kernels.. Some reasons to root
harigavara said:
Hey folks,
Firstly my question is not from noob point of view but right now I'm sensing there is no great reason to flash custom rom or root. Am i wrong?
I know that we can get ad blocking benefits. But except that can you guys tell your reasons for going beyond the comfort of living with op6 with:
stock os
Good enough & Needed options
Updates via otas and
a complete all feature working rom.
Click to expand...
Click to collapse
If you root and use a custom rom then you can make a backup and I notice a MASSIVE speed increase, I've put xxNoLimitxx on my op6 and its just not compareble to stock...soooooo faast!!
Also I haven't come across any bugs at all yet!! Also you have Viper4Android and can increase the sound dramatically which helps big time. I find it in stock alittle soft.
Trust me you'll be so flabbergasted with the speed its crazy when the op6 is rooted. I had a op5 before this for a year and didn't notice such a increase in speed. Aps are sooo quick its nutz.
Anyways tootally up to you but if you do your homework you'll be fine, For me it went super quick rooting and chucking the custom rom on, was already done in 30min after all my shizzle was move over from my op5.
Anyways goodluck with deciding whatch gonna do.
oem android os must be root that you can turn on/off in developers settings !!
Root rights is extremely important feature on my phone and I do not even need a new phone that does not have it.
For now I have to use third party mod to be able to get right rights.
Shame on Google and Oneplus for it !!
I haven't needed to put a Custom ROM on my OP5 or again with my OP6 but I have to have root and recovery. EX Kernel is a must with Blocking Wakelocks, Titanium Backup for backups and freezing apps I don't want, Magisk Modules like YouTube Vanced, AOD, eventually Google Camera, Changing system sounds, adding more fonts, and for Nova Launcher Prime to be fully working needs root for things like double tap to sleep gestures and pull down notification from anywhere on screen.
I may not really need a custom ROM these days but I want the option, but I will never buy a phone I can't get ROOT and TWRP on.
djrocks said:
Titanium backup.. Some good modules in Magisk,... Custom kernels.. Some reasons to root
Click to expand...
Click to collapse
Good modules are?
Eric214 said:
I haven't needed to put a Custom ROM on my OP5 or again with my OP6 but I have to have root and recovery. EX Kernel is a must with Blocking Wakelocks, Titanium Backup for backups and freezing apps I don't want, Magisk Modules like YouTube Vanced, AOD, eventually Google Camera, Changing system sounds, adding more fonts, and for Nova Launcher Prime to be fully working needs root for things like double tap to sleep gestures and pull down notification from anywhere on screen.
I may not really need a custom ROM these days but I want the option, but I will never buy a phone I can't get ROOT and TWRP on.
Click to expand...
Click to collapse
Cheers!
Returned the lg v30+for the standalone reason that i can't unlock the bootloader and root it in my entire life.
harigavara said:
Good modules are?
Click to expand...
Click to collapse
Google framework if needed for Google dialer, YouTube Vanced, always on display just to name a few I'm using.
---------- Post added at 03:28 PM ---------- Previous post was at 03:27 PM ----------
harigavara said:
Cheers!
Returned the lg v30+for the standalone reason that i can't unlock the bootloader and root it in my entire life.
Click to expand...
Click to collapse
Ha ha, amen brotha! Root is a way of life!
In my honest opinion if you need to ask users to give yourself reasons why you should root then you maybe shouldn't *I don't mean to sound sarcastic or a ***** but in this case anyway a few pointers to root would be modules with magisk for many things stock cant provide, titanium or root explorer etc for backups freezing apps and getting access to system files if need be, custom roms *as many have great mods added that stock cant do for example Reno rom has many features unique that stock and other roms can't provide*, kernels *can be tweaked to your liking and also modded for many other things to do that stock can't*, you can still get the official updates rooted so basically if they are allowing you to access it unlike many companies that don't why not take advantage?
harigavara said:
Good modules are?
Click to expand...
Click to collapse
Sysconfig patcher, youtube Vanced, xxx no limits rom (which is a module), google dialer, etc
Flash twrp, magisk, a custom kernel, xposed, xposed gravitybox, YouTube Vanced and Adaway and you'll have tons of mods on the stock ROM and you won't have to flash those stock based custom Roms that will make you want to pull your hair out.

MicroG supported ROMs?

So, I have installed various Xposed modules along with various magisk modules that says to allow signature spoofing without success, I'm now looking for a rom with signature spoofing support to enable MicroG services and just replace some of my Google apps. YouTube vanced for example requires MicroG to work, but for some reason I just can't find anything at all that allows me to enable signature spoofing. Any one who could point me in the right direction? I just received my op6 today and bootloader unlocking, twrp install and rooting went fine. So figured why not change rom as well when I'm in it all ready xD
mattish.91 said:
So, I have installed various Xposed modules along with various magisk modules that says to allow signature spoofing without success, I'm now looking for a rom with signature spoofing support to enable MicroG services and just replace some of my Google apps. YouTube vanced for example requires MicroG to work, but for some reason I just can't find anything at all that allows me to enable signature spoofing. Any one who could point me in the right direction? I just received my op6 today and bootloader unlocking, twrp install and rooting went fine. So figured why not change rom as well when I'm in it all ready xD
Click to expand...
Click to collapse
HavocOS is aLOS based ROM that includes the "signature spoofing" patch. I haven't tried it with MicroG, but it is supported. IIRC, some folks have used Vance d though. You could search the ROM's thread for more info.
Omni, LiquidRemix, and Havoc all support signature spoofing, however I've had issues with certain parts of MicroG compatibility out the box and required a few tweaks to get going. I'm up and running with MicroG and LiquidRemix right now.
Can you tell me what the major benefits of microg are? Does it really increase battery life a lot? Or is it more of a privacy thing?
itsdan313 said:
Can you tell me what the major benefits of microg are? Does it really increase battery life a lot? Or is it more of a privacy thing?
Click to expand...
Click to collapse
huge battery savings, huge privacy benefits
mdl054 said:
huge battery savings, huge privacy benefits
Click to expand...
Click to collapse
To install you just flash nanodroid?

How to trick MS Intune app about mobile encryption

HI,
I have installed Pixel Experience Plus on starlte(galaxy9)
I need to install work profile with MS Teams (that's said)
It requires MS Intunes what require system encryption
1. Is there any way to trick Intune about mobile encryption (I don't want encrypt my mobile)
2. Even if I try encrypt - encrypt process was taking more than 4 hours so I stopped it and wipe in TWRP
duo_pendulum said:
HI,
I have installed Pixel Experience Plus on starlte(galaxy9)
I need to install work profile with MS Teams (that's said)
It requires MS Intunes what require system encryption
1. Is there any way to trick Intune about mobile encryption (I don't want encrypt my mobile)
2. Even if I try encrypt - encrypt process was taking more than 4 hours so I stopped it and wipe in TWRP
Click to expand...
Click to collapse
I don't have any experience with any MS product and never will. Did you already check if this Magisk module could solve your problem?
[MODULE] Microsoft Intune Company Portal Hider (Intune Hider)
Introduction: Simple Module To Hide The Root From Microsoft Intune Company Portal. - After The Installation & 1st Reboot, It Hides The Rooting & Disables Itself [P.S. Disabling Itself For Some Versions] - Enabling This Module From Magisk Manager...
forum.xda-developers.com
Yes I have my galaxy9 rooted with Magisk. I flashed recovery to TWRP 3.6.0_9-0. Works perfect.
I think the problem is not related to MS Intune. It is more related 'Settings -> Security -> Encrypt Phone' in my Pixel Experience Plus custom rom.
If I want to encrypt directly from settings encryption progress bar is never ending (after 4 hours I reboot)
I have ROM from here:
[ROM][11][S9/S9+] PixelExperience Plus [AOSP/UNOFFICIAL]
PixelExperience Plus for S9/S9+ [starlte/star2lte] What is this? PixelExperience Plus is an AOSP based ROM, with Google apps included and all Pixel goodies (launcher, wallpapers, icons, fonts, boot animation) it has some extra additions over...
forum.xda-developers.com
I know there is more fresh version of Pixel Experience Plus:
[ROM][10.0][NOTE 9] Pixel Experience Plus [AOSP/UNOFFICIAL][2020/12/12]
hi, I installed it, but when I rebooted the phone again I went to download mode, help me, thanks
forum.xda-developers.com
but download link doesn't work :-(
I also flashed DisableForceEncryption.zip but it also didn't help.
Maybe because Android 11 uses FileBaseEncryption(FBE) instead of FDE
Oswald in the link you attached there is about Magisk Hidden so far I see now it is Magisk feature and application (MS Intune) didn't complain about "hey your phone is rooted" because Magisk is hidden.
BTW. Thx for answer
duo_pendulum said:
Oswald in the link you attached there is about Magisk Hidden so far I see now it is Magisk feature and application (MS Intune) didn't complain about "hey your phone is rooted" because Magisk is hidden.
BTW. Thx for answer
Click to expand...
Click to collapse
Hi, did you get your problem solved ? I am facing the same issue.

Question Experience with removing/disabling adds and bloatware

Hello, I did some research and I think this phone has the best performance in it's price class. The only thing that I'm hesitating with is all the spyware and bloatware MIUI comes with.
There are some guides on the internet that show you how to disable most adds by turning it off in the app settings
Then there are guides that use XiaomiADBFastbootTools.jar, article
Then there are the hardcore users that wait a week, root the phone and install a custom Rom.
I'm a bit concerned with option 3 regarding warranty so that why I'm looking into option 1 and 2.
My question:
What apps are safe to remove?
When the phone updates will those apps return, if so how frequent is this?
Will there still be lingering tracking software?
Any other useful information is most welcome, thank you for taking the time to read!
if you are really concern about ads, you should go with opcion 3 without root. AOSP roms (vanilla or with gapps) work are really stable right now
disabling "MSA" in miui also works great but i prefer custom rom without bloatware
d_g_m_2000 said:
if you are really concern about ads, you should go with opcion 3 without root. AOSP roms (vanilla or with gapps) work are really stable right now
disabling "MSA" in miui also works great but i prefer custom rom without bloatware
Click to expand...
Click to collapse
Hi thank you for your reply, could elaborate on what you mean with option 3 without root.
And the disabling "MSA" how does this work and what is MSA, or is that in the guide that I was linking.
Immow said:
Hi thank you for your reply, could elaborate on what you mean with option 3 without root.
And the disabling "MSA" how does this work and what is MSA, or is that in the guide that I was linking.
Click to expand...
Click to collapse
1- if you are really concern about xiaomi following you and your data you should unlock the bootloader, flash a custom recovery and then flash a custom rom (vanilla) with or without root privileges. it's up to you
2- MSA is an app in which xiaomi collect your data, you can use this tutorial to disable it
( https://www.xatakamovil.com/tutoria...d-moviles-xiaomi-notificaciones-anuncios-miui )
3- debloating an stock rom is the passive way to block some functions (like ads) but it's, to me, the fastest way to f*ck up your device (if you don't know what are you doing and blind trust a person that post your linked article)
Everything in the default list of Xiaomi ADBFastboot tool is safe to disable/uninstall and doesn't brick your phone. You just need to check what you really need and what not. All stuff disabled/uninstalled with the tool can be reactivated/installed again with the tool, so you don't need to worry too much about it.
I prefer a debloated MIUI over any custom rom, because everything just works and I don't do privacy related stuff (banking and such) anyways.
I really don't care whether the Chinese or the Americans collect my data. If you are looking for a completely spy free OS for your phone, then you would have to use Linux or a completely Google free custom ROM.
Unlock your bootloader first, there's a thread here just look at it
Then if you still prefer MIUI, but don't want to have ads, Root with magisk, then install a tweak to make your system RW, then install any AdBlock apps, like Adaway.
That's it
Or just install a Custom ROM, no ads, no bloatware, and faster performance.

Question What ROMs passes SafetyNet check?

I want to install custom ROM but I only have one phone right now, I use this X3 Pro for several apps(mostly banking, internet food services, delivery services) that requires SafetyNet.
Read the ROM description and look for safety net, if it's not written then just ask if it supports it. If you've still got no luck, backup your stock system (full twrp backup) and then flash the ROM and test if it supports safety net
ArrowOS 11/12, Pixel Experience.. these im sure of.
CrDroid
PhotonIce said:
Read the ROM description and look for safety net, if it's not written then just ask if it supports it. If you've still got no luck, backup your stock system (full twrp backup) and then flash the ROM and test if it supports safety net
Click to expand...
Click to collapse
yeah... so many questions can be avoid by just reading threads or google it...
Almost all ROMs except for LineageOS.
You can pass SafetyNet with LineageOS.
Just install Magisk, enable MagiskHide, and properly setup "MagiskHide Props Config" module.
komodo os
plskillme said:
I want to install custom ROM but I only have one phone right now, I use this X3 Pro for several apps(mostly banking, internet food services, delivery services) that requires SafetyNet.
Click to expand...
Click to collapse
All of the rom I tried are passing. If it doesn't just install MagiskHide Props Config. Steps are here. If you are using magisk v23 then enable magisk hide. If you using magiskv24 then enable zygisk, enforce list and choose google play service in the deny list then tick com.android.gms and com.android.gms.unstable. If you can't find it then tick show os app in the menu then reboot. It should pass.
tazaga said:
komodo os
Click to expand...
Click to collapse
this thing doesn't exist
gringo80 said:
this thing doesn't exist
Click to expand...
Click to collapse
There is this ROM but just didn't post on xda. Idk why dev don't post it but you can search on Google and go to their source forge folder. You can download there.
Alec Chan said:
There is this ROM but just didn't post on xda. Idk why dev don't post it but you can search on Google and go to their source forge folder. You can download there.
Click to expand...
Click to collapse
rom post in xda need to provide their kernel source code which is something for whatever reason some people find it uncomfortable to do so
zinconnu said:
You can pass SafetyNet with LineageOS.
Just install Magisk, enable MagiskHide, and properly setup "MagiskHide Props Config" module.
Click to expand...
Click to collapse
Actually, some LOS contributors put together a safetynet fix without the need of magisk, obviously not an official thingy.
GitHub - luk1337/ih8sn
Contribute to luk1337/ih8sn development by creating an account on GitHub.
github.com
SafetyNet seems to pass out of the box with most of the ROM's now, unless you flash Magisk.
But the latest version (Magisk 24.1) with zygisk, has a module available called Universal SafetyNet Fixer (by kdrag0n) which seems to fix both CTS Profile and Basic integrity.

Categories

Resources