Root android 11-12 for bypassing security - General Questions and Answers

I need to root and install 2 important things: (these are important for me not everybody)
1-Root Call Blocker from farhbot (https://fahrbot.online/apps/rcb/)
2-install call recorder (no matter witch one , just can record my incoming and outgoing call)
Is it possible in new android?
I'm moving to purchase new phone , now I have sony zultra with android 5 and thats fine but the phone is too old and need to purchase new one.
Thoes questions are important to me.
Thanks

Love XDA Developers said:
I need to root and install 2 important things: (these are important for me not everybody)
1-Root Call Blocker from farhbot (https://fahrbot.online/apps/rcb/)
2-install call recorder (no matter witch one , just can record my incoming and outgoing call)
Is it possible in new android?
I'm moving to purchase new phone , now I have sony zultra with android 5 and thats fine but the phone is too old and need to purchase new one.
Thoes questions are important to me.
Thanks
Click to expand...
Click to collapse
Short answer: Yes, root is possible on Android 11 and 12.
Long answer: Magisk is now the preferred avenue for root as it is systemless - the kernel itself is patched to enable root access and to interface with the Magisk Manager. The method for rooting your particular device may vary, depending on the manufacturer.
As far as getting a new phone, I'm pretty fond of my Pixel 5. It's no longer available, but the 5a has the same SoC with a larger screen and battery. Just make sure you get an unlocked non carrier specific version.
Lastly, as a word of caution, make sure you are aware of privacy laws that may apply where you are. In the United States, many states have single party consent, where if at least one person who is part of the conversation consents to recording, it's legally permitted, regardless of whether the other parties are aware they're being recorded. However, other states explicitly require consent from all parties. Don't do anything that could get yourself into legal trouble, and whatever you do, don't get US in trouble.

Thanks for information
I'm not in US right now , I'm in Argentina and would like to purchase Xiaomi Redmi note 11 (there are lots of model and I don't know the exact model number)
Its so importatnt to me to use thoese application I mention before , after rooting my devices , am I able to use them?

Related

Root, ROMs, Android Pay, Tmobile WiFi Calling & Google Fi, and choosing a new phone

Root, ROMs, Android Pay, Tmobile WiFi Calling & Google Fi, and choosing a new phone
I wish I could see all of this info together, so I thought I'd ask the question and see what we can come up with.
1. In my experience, if you root a stock rom, sooner or later an update comes that un-roots it. Is this still usually true?
1.a. And sometimes the new stock rom will make the rooting process more difficult than previously, or even impossible. Right?
1.b. Thus, the most reliable way to get a root that doesn't go away, is to use a custom ROM. Right? Is there something I'm missing here?
With a custom ROM, one can typically disable/enable root at will.
2. Android pay.... will I ever get it working on a custom ROM? Easy or difficult? Does it work with only a few select phones / ROMs? Does one have to reboot the phone after disabling root, in order to get Android Pay to work? What does the space look like, and how practical is it to use on a daily basis?
3. How about T-Mobile Wi-Fi calling? There are a few things I've read on this topic...
3.a. I've read that some non-Tmobile phones have WiFi calling enabled, which will work on Tmobile's network. Is that pretty common or is it only a small number of select phones?
3.b. Does LineageOS or some other custom ROM support WiFi calling on ALL phones, which works on Tmobile's network?
3.c. One guide I read recommended getting some software off of stock before installing the custom ROM, and then installing that stock software onto the phone; is this a standard practice, and does it generally work?
3.d. one resource that is fueling some of these questions: http://www.spectrumgateway.com/compatible-phones
4. What about Google Fi? They officially only support a handful of phones. What's that about? Is the space similar to Tmobile WiFi calling, or is it completely different in practice?
5. Ok, you know what, maybe I could get by without root? But how would I find substitutes for these features I find indispensable?
5.a. view stored WiFi passwords; 5.b. emoji switcher; 5.c. properly removing bloatware; 5.d. Backing up app data that is stored in /data/ (wifi passwords, contacts, few other things)
I'm shopping for a new phone, and not knowing about the above makes it really difficult: do I need to go with a Tmobile branded phone? If I choose right is it possible I could be able to move the phone to Google Fi? Will I be able to use a custom rom, root + android pay without rebooting, and wifi calling, all in concert with minimal friction? Is there one magic phone or custom ROM that does it all, or are there a number of them? Or none of them?
Thanks y'all!
David
Info on T-Mobile VoLTE and WiFi calling here: http://www.spectrumgateway.com/compatible-phones
It appears that "SafetyNet" is the name and branding for android's system that monitors the system and reports root status and other modification to different apps, disabling Android Pay as well as netflix and others. Here is an article about using Magisk to fool SafetyNet:
https://android.gadgethacks.com/how-to/magisk-101-switch-from-supersu-magisk-pass-safetynet-0177578/
Magisk has modules, a few of which are described in the above article.
One that I didn't see there, but which I saw described elsewhere, was "Universal SafetyNet Fix / Univeral Hide" - a Magisk module.
Lots of information still not figured out -- it would be great to collect some more of this information here!

New OP7Pro to replace my Pixel2XL: Questions & seeking advice/tips on process

It's been a while since I rooted an Android device. And I've never rooted a phone. So, questions. I'd like to do everything possible to have the phone ready before contacting Verizon to get on their network. I'm guessing my steps should be:
a) root
b) TWRP
c) Magisk
d) latest Oxygen
e) all Play Store updates
f) move SIM (there are two slots?? which one??)
g) work w/Verizon to get voice & messaging working
h) use OP's app to migrate apps & data from Pixel2XL
i) figure out a VOWIFI and 3g calling option
I've found the great thread on steps a) - d) and assume all will be straightforward and easy. All of the Google Play Store updates will be easy, I've done all of that already just to test a favorite game (a primary reason I wanted to upgrade the phone to begin with).
I understand there are two SIM slots. Does it matter which I put the SIM in from my P2XL? Am I better off going to the Verizon store and having them put a new SIM in? If I remove the SIM from the P2XL can it still perform emergency calls?
Working with Verizon seems the trickiest part. I know I want to make certain it's activated for CDMA-less (found a great thread here on this, too). Are there any other things I need to request or make sure I test before assuming I'm good to go with Verizon? I won't have any issues because the phone is rooted, will I?
Is the right time to use the OnePlus app to migrate apps and data after successful Verizon activation? I'm not opposed to installing all (there are a LOT) of my apps one by one if it's going to work better and/or has some benefit.
I understand voice won't work over 3g (when LTE's not avialable). Is that correct? And I'm thinking this is related to VOWIFI? I'm sorry if I'm conflating two issues. But a workaround, at least for the latter, has been mentioned here that uses Google Hangouts and some Google app that acts like a phone, but it requires a number? Can someone shine some more light on this for me?
Otherwise, this is my current impression of what needs to be done. Please let me know if you agree, disagree, have suggestions, etc.! Thank you!
... anyone?
Based on your first sentence, you should really, really do some research before attempting any modifications at all.
dr_rick13 said:
Based on your first sentence, you should really, really do some research before attempting any modifications at all.
Click to expand...
Click to collapse
Are you saying that the guides here aren't adequate? I've had great success with Android tablets in the past following what's here. Perhaps you could be a bit less vague?

Remove T-mobile (pre-install) App?

Is there any way to remove the pre-install T-mobile app from the OnePlus 8? This app has some insane permission requirements, and they removed the options to disallow the permissions (like access to SMS, LOCATION!, Call Logs, Phone..) and you can't even disable the app.
The device is supposedly unlocked (I requested a SIM unlock from T-mobile, due to "military" travels) but not sure if it actually went through..
Also, preferably don't want to root the device, and not sure if I can root it if its still locked..
Its been a while since I had an Android device. Ive been an iPhone user for the last 5-6 years (upgrading every year).. so I'm out of the loop about changes to unlock/lock, rooting, etc when it comes to Android.
Having these types of apps forced on me, was my main reason for switching away from Android, as apple doesn't allow carriers to pre-install these kind of apps on iPhone.
Yes kind of,
Check this thread out
https://forum.xda-developers.com/oneplus-8/how-to/quick-guide-debloat-adb-shell-t4092465
matteosaeed said:
Yes kind of,
Check this thread out
https://forum.xda-developers.com/oneplus-8/how-to/quick-guide-debloat-adb-shell-t4092465
Click to expand...
Click to collapse
Works for me, thanks.
I removed the other .tmobile.xxx related items as well (except the one that mention Qualcomm, figured I should leave that one)

How to enable Call recording in calls, in Europe?

Hi, because of some stupid privacy law in europe we are not allowed to record OUR calls (WTF is that, its MY call, why not if I do not do anything wrong with it).
I use this function A LOT, because I tend to forget things, do not have at handy a pencil or something, so I simply record the call when needed, and this has been of GREAT help.
Now I ordered the Galaxy Fold 2, because of its great fold functionality (I use phone for business) but I forgot to check before ordering, if this call recording "hack" is available for this model or not.
I had Oneplus and Xiaomi, and with both, with a hack, is possible to get the (official) call recording work in Europe, now I hope I did not do a terrible mistake in buying the Fold 2 if this possibility is not there.
Thanks
Please search the forum there is already a thread discussing this
https://forum.xda-developers.com/sa...to/change-csc-z-fold-2-5g-f916b-call-t4170761
Use this:
Hey check out my app at: https://play.google.com/store/apps/details?id=com.lma.callrecorder
^RotteN^ said:
Use this:
Hey check out my app at: https://play.google.com/store/apps/details?id=com.lma.callrecorder
Click to expand...
Click to collapse
Does this record the other party while using a Bluetooth-connected comm device?
claudioita said:
Hi, because of some stupid privacy law in europe we are not allowed to record OUR calls (WTF is that, its MY call, why not if I do not do anything wrong with it).
I use this function A LOT, because I tend to forget things, do not have at handy a pencil or something, so I simply record the call when needed, and this has been of GREAT help.
Now I ordered the Galaxy Fold 2, because of its great fold functionality (I use phone for business) but I forgot to check before ordering, if this call recording "hack" is available for this model or not.
I had Oneplus and Xiaomi, and with both, with a hack, is possible to get the (official) call recording work in Europe, now I hope I did not do a terrible mistake in buying the Fold 2 if this possibility is not there.
Thanks
Click to expand...
Click to collapse
Samsung OneUI always had Call Recording integrated, however, it's disabled for EU and other regions.
You can re-enable it with Root.
You have to replace the file /system/omc/[XXX]/cscfeature.xml because it's a cryptic placeholder file.
You will have to replace "XXX" in the folder path with your country-code. For me Germany was DBT.
You create a new cscfeature.xml in Text editor with the following content:
Code:
<?xml version="1.0" encoding="UTF-8" ?>
<SamsungMobileFeauture>
<FeatureSet>
<CscFeature_VoiceCall_ConfigRecording>RecordingAllowed</CscFeature_VoiceCall_ConfigRecording>
<CscFeature_Camera_ShutterSoundMenu>true</CscFeature_Camera_ShutterSoundMenu>
</FeatureSet>
</SamsungMobileFeauture>
Like I said, you put that file into /system/omc/[XXX]/ and you have Call Recording Settings in Samsung's Phone-App.
You can also do research about cscfeature.xml for yourself, it's widely known for customisations. You can also allow disabling Shuttersound for Camera-App etc.
dreamytom said:
Samsung OneUI always had Call Recording integrated, however, it's disabled for EU and other regions.
You can re-enable it with Root.
Click to expand...
Click to collapse
With rooting you can enable this.
But you PERMANENTLY disable Samsung Pass, Google Pay, Samsung Health and multitude of other important features. 3rd party / banking apps will nag you (and the next owner) about the rooted phone.
You can record calls on unrooted phone with a 3rd party app, there are plenty (I'm using the one from Lucky Mobile Apps).
You can disable camera shutter sound by bixby a routine (app launched - camera, then "do not disturb" mode on).
vratnik said:
With rooting you can enable this.
But you PERMANENTLY disable Samsung Pass, Google Pay, Samsung Health and multitude of other important features. 3rd party / banking apps will nag you (and the next owner) about the rooted phone.
You can record calls on unrooted phone with a 3rd party app, there are plenty (I'm using the one from Lucky Mobile Apps).
You can disable camera shutter sound by bixby a routine (app launched - camera, then "do not disturb" mode on).
Click to expand...
Click to collapse
Samsung Pass & Samsung Pay yes forever. Samsung Health too, but can be reinstated with a build.prop mod.
If bootloader is unlocked, but not rooted, Google Pay & other apps (like Netflix) wouldn't work, due to Google SafetyNet showing the status "Fail".
But if you root the phone with Magisk & enable MagiskHide (or the new Zygisk), you can spoof Google SafetyNet-Status, and all apps work again, because they don't know the phone's been unlocked & rooted.
This is how I use my phone. Magisk spoofing SafetyNet.
There are also Custom ROMs that have Passing SafetyNet out-of-the-box, so no Magisk Root needed in those cases.
njan_ivide said:
Please search the forum there is already a thread discussing this
https://forum.xda-developers.com/sa...to/change-csc-z-fold-2-5g-f916b-call-t4170761
Click to expand...
Click to collapse
I just looked at this thread and it is absolute gibberish to me. If anyone can help me figure out specifically what I have up do that would be a huge help.
claudioita said:
Hi, because of some stupid privacy law in europe we are not allowed to record OUR calls (WTF is that, its MY call, why not if I do not do anything wrong with it).
I use this function A LOT, because I tend to forget things, do not have at handy a pencil or something, so I simply record the call when needed, and this has been of GREAT help.
Now I ordered the Galaxy Fold 2, because of its great fold functionality (I use phone for business) but I forgot to check before ordering, if this call recording "hack" is available for this model or not.
I had Oneplus and Xiaomi, and with both, with a hack, is possible to get the (official) call recording work in Europe, now I hope I did not do a terrible mistake in buying the Fold 2 if this possibility is not there.
Thanks
Click to expand...
Click to collapse
which trick did you use with xiaomi? (sorry for the notification, i know you are waiting an useful reply)

Why you shouldn't install banking apps on rooted phones

The latest type of hack, something I always thought was not possible, is to infect someone's phone with a mere phone call. You can read about it here.
There are very good reasons why banking apps refuse to work on phones with an unlocked bootloader. Installing random tools/ mods from unknown developers (XDA is no exception) to bypass built-in security to make them work is a very bad idea.
If you absolutely must root your main device (although I don't see too many benefits of rooting in 2023), it is advisable that you buy a 2nd phone and use that for your banking (or anything to do with money and other important things) needs. Even a super budget Android phone, COMPLETELY STOCK, will be fine.
Here's an analogy:
It is very important to follow speed limits on roads. The limits have a scientific basis and anyone who follows it will mostly be able to avoid a fatal accident. Just because accidents won't necessarily happen if the speed limit is breached, doesn't mean it is a safe thing to do.
The single biggest reason responsible for 99% of fatal accidents is overspeeding! If speed was under control, it is very highly likely that there won't be fatalities.
Applies to some Exynos models only. Details are vague. Banking, shopping and social media apps should never be installed anyway. You are what you load...
blackhawk said:
Applies to some Exynos models only. Details are vague. Banking, shopping and social media apps should never be installed anyway. You are what you load...
Click to expand...
Click to collapse
That is only in this case. Snapdragon models are not immune.
TheMystic said:
That is only in this case. Snapdragon models are not immune.
Click to expand...
Click to collapse
Documentation please...
Even if you were to post and reply about it daily in threads, there would still be similar questions about non-working apps with root or unlocked bootloader.
It's sad.
blackhawk said:
Documentation please...
Click to expand...
Click to collapse
Documentation in support of what? That Snapdragon phones are not immune? Are you implying Snapdragon phones are immune?
I'm not talking about this particular vulnerability specifically.
TheMystic said:
I'm not talking about this particular vulnerability specifically.
Click to expand...
Click to collapse
Exactly my point. This isn't a Snap vulnerability at all. Not all unpatched Exynos are vulnerable to it either.
There are multiple workarounds for most vulnerabilities for Android 9. Last time this phone was updated was 11/2019. It's current load will be 3yo in June. Zero malware so far.
Upgrades would've caused me far more lost time and inconvenience than any malware could even if the load only lasted 1 year or less.
The newest firmware isn't immune and may bring new huge vulnerabilities with it. Not doing stupid things is the best protection there is; most victims inadvertently install the malware themselves.
blackhawk said:
This isn't a Snap vulnerability at all.
Click to expand...
Click to collapse
This post isn't about this vulnerability either. It was referenced just as an example of zero day vulnerabilities that any connected tech can be a victim to.
blackhawk said:
Not doing stupid things is the best protection there is
Click to expand...
Click to collapse
Receiving a phone call isn't stupid in any way. Something like this shows that the tech we use everyday isn't as safe as we assume it to be
TheMystic said:
This post isn't about this vulnerability either. It was referenced just as an example of zero day vulnerabilities that any connected tech can be a victim to.
Click to expand...
Click to collapse
No shopping, banking, social media apps mean none multi vector vulnerabilities they bring. None of these apps are needed.
TheMystic said:
Receiving a phone call isn't stupid in any way. Something like this shows that the tech we use everyday isn't as safe as we assume it to be
Click to expand...
Click to collapse
It's a very hardware specific vulnerability. Data bandwidth over the VoLTE is limited. Just hang up. Block unknown numbers, which you should be doing anyway. Delete unknown or untrusted texts without opening.
Google is more hype than fact... wholesale purveyors of disinformation and lying by omission. It's rampant.
blackhawk said:
Block unknown numbers, which you should be doing anyway. Delete unknown or untrusted texts without opening.
Click to expand...
Click to collapse
Not a practical suggestion for most users.
TheMystic said:
Not a practical suggestion for most users.
Click to expand...
Click to collapse
That means numbers with no attached caller ID are blocked...
I'm more tolerant to play with spam in Gmail but not with texts. They are at a much higher risk level.
blackhawk said:
That means numbers with no attached caller ID are blocked...
Click to expand...
Click to collapse
I'm not sure what you mean here. Does your SIM provider have any caller ID service? Mine doesn't. I don't use Google Dialer and certainly not Truecaller, which I consider a spyware.
I do receive lots of calls from unknown numbers, and though many of them are useless marketing calls, some are indeed useful. So I block numbers after attending calls when I know I don't want to hear from them again.
TheMystic said:
I'm not sure what you mean here. Does your SIM provider have any caller ID service? Mine doesn't. I don't use Google Dialer and certainly not Truecaller, which I consider a spyware.
I do receive lots of calls from unknown numbers, and though many of them are useless marketing calls, some are indeed useful. So I block numbers after attending calls when I know I don't want to hear from them again.
Click to expand...
Click to collapse
Unless the caller blocks their caller ID I can see their number. If they block caller ID they are automatically blocked; the call is registered in call history but it doesn't ring.
More over if they phlish a number and get through they generally regret it. I rather enjoy that. Sometimes I take spam calls for sport.
Been doing that for decades
blackhawk said:
Unless the caller blocks their caller ID I can see their number. If they block caller ID they are automatically blocked;
Click to expand...
Click to collapse
You mean calls where we see 'Unknown number' on screen? I think that is a thing of the past now. Today, tech allows such scammers to make internet calls that show up as real numbers (which actually don't exist) complete with country code and city code. And the same tech also allows them to call from different number each time.
TheMystic said:
You mean calls where we see 'Unknown number' on screen? I think that is a thing of the past now. Today, tech allows such scammers to make internet calls that show up as real numbers (which actually don't exist) complete with country code and city code. And the same tech also allows them to call from different number each time.
Click to expand...
Click to collapse
I covered that. Excepting unknown callers is unacceptable today.
blackhawk said:
I covered that. Excepting unknown callers is unacceptable today.
Click to expand...
Click to collapse
That's true. I haven't received a call like that for a very long time now. May be 5 years or more.
TheMystic said:
There are very good reasons why banking apps refuse to work on phones with an unlocked bootloader.
Click to expand...
Click to collapse
My banking app needs minSdkVersion={R.0x18} or let's say min. Android 7. When using an older device with Android 7 for my banking app, would it be unsecure to unlock my bootloader to install a more secure firmware?
WoKoschekk said:
My banking app needs minSdkVersion={R.0x18} or let's say min. Android 7. When using an older device with Android 7 for my banking app, would it be unsecure to unlock my bootloader to install a more secure firmware?
Click to expand...
Click to collapse
Just login online instead using Brave.
blackhawk said:
Just login online instead using Brave.
Click to expand...
Click to collapse
And my TAN app?
An unlocked bootloader isn't unsecure at all. An attacker has got no benefits regarding banking apps on an unlocked or rooted device. Sensitive app data is stored encrypted by the app itself and even root access wouldn't help to read it. Transactions need a TAN that is only valid for the current transaction and only for a very limited time. You can't generate TANs for future transactions.
However, an attacker cannot gain access to your device via an unlocked bootloader. He gains access via an unpatched vulnerability.
Regarding the day-0-exploits: This is almost in every case a very, very theoretical construct and not executable in real life. All patches since 2015 are documented very detailed. You can download the patched and also the unpatched source code for this. It's like a instruction that tells you how to do it. But it seems that no one is able to implement it. Since 8 years Google releases every month new patches for new vulnerabilities. There are hundreds of it but they have never been used.
WoKoschekk said:
My banking app needs minSdkVersion={R.0x18} or let's say min. Android 7. When using an older device with Android 7 for my banking app, would it be unsecure to unlock my bootloader to install a more secure firmware?
Click to expand...
Click to collapse
What do you mean by 'a more secure firmware'? The most secure firmware is what your OEM released for your device. If your device is old and is no longer updated by the OEM, it can still be used safely as long as you keep everything stock and don't install random apps.
WoKoschekk said:
an attacker cannot gain access to your device via an unlocked bootloader. He gains access via an unpatched vulnerability.
Click to expand...
Click to collapse
A device with an unlocked bootloader makes it more vulnerable, and therefore more easily compromised by bad actors.
There should be reasons why banking apps don't want to work on an unlocked device, isn't it? Those apps are developed by professionals who know much more than most of us do. It is better to be safe than sorry.
WoKoschekk said:
There are hundreds of it but they have never been used.
Click to expand...
Click to collapse
Which means we shouldn't take things for granted. And definitely not increase the vulnerabilities even more by breaking the built-in defenses ourselves.

Categories

Resources