How to remove root/re-lock bootloader AFTER installing custom ROM - T-Mobile, Samsung Galaxy SIII

I am sick of the laggy, crappy stock T-Mobile 4.1.2 ROM and would like to install something faster, smoother and better like Wicked ROM.
My employer mandates that no rooted phones can be used if they are used to access corporate network - and they are a global company that are experts in intrusion detection etc. so they can probably detect a phone that is not compliant.
Is there any way to remove root/ensure the boot loader is locked after installing a custom ROM to ensure compliance?
Thanks.

Globespy said:
I am sick of the laggy, crappy stock T-Mobile 4.1.2 ROM and would like to install something faster, smoother and better like Wicked ROM.
My employer mandates that no rooted phones can be used if they are used to access corporate network - and they are a global company that are experts in intrusion detection etc. so they can probably detect a phone that is not compliant.
Is there any way to remove root/ensure the boot loader is locked after installing a custom ROM to ensure compliance?
Thanks.
Click to expand...
Click to collapse
The bootloader on this phone is not locked.
You can unroot with SuperSU or a billion other apps from the store. But you will cripple Wicked if you unroot it. Maybe stock rooted (debloat it yourself, then unroot it) would be the appropriate choice for you.

Aerowinder said:
The bootloader on this phone is not locked.
You can unroot with SuperSU or a billion other apps from the store. But you will cripple Wicked if you unroot it. Maybe stock rooted (debloat it yourself, then unroot it) would be the appropriate choice for you.
Click to expand...
Click to collapse
Thanks for the reply. Any recommendations for a good stock ROM that's a better option than the chunk of turd from T-Mobile?

Globespy said:
Thanks for the reply. Any recommendations for a good stock ROM that's a better option than the chunk of turd from T-Mobile?
Click to expand...
Click to collapse
1: without physically having the phone, there is no way for your IT department to know if you're rooted. If the carrier that provides voice and data service can't differentiate a rooted phone from a not rooted phone, I very much doubt that the it department of your company can.
2: using the rooted stock ROM, then debloating it (better known as removing the tmo crapware), then unrooting, is the best option. Most custom ROMs rely on root access for the customizations they make to the framework, system apps, etc. Stock ROMs do not.
Sent from my T999L on PACman

I am one who believes the carrier and/or manufacturer are able to tell if you're rooted. Or they have the ability to anyway. Things such as sysscope make this possible. And if they can check your imei they can check more, if they want to. Lots of info gets sent back to google, sammy, T-Mobile, etc via check-ins and such.
Sent from my SGH-T999 using xda premium

DocHoliday77 said:
I am one who believes the carrier and/or manufacturer are able to tell if you're rooted. Or they have the ability to anyway. Things such as sysscope make this possible. And if they can check your imei they can check more, if they want to. Lots of info gets sent back to google, sammy, T-Mobile, etc via check-ins and such.
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
This was my thinking, and the company that I work for is one of 5 on the planet that does what they do - they essentially provide the entire physical backbone that allows companies like Microsoft, IBM, major banks etc actually HAVE internet. I'm certain they know exactly what's going in the network and have an array of tools designed to ensure full security.
I think the stock ROM, debloated and then root removed is best. I don't mind twiz, would just like my phone to run smoother.
I heard the sgs3 will get 4.3 but lord only knows how long it will take T-Mobile to release it, if ever!
Thanks.

I work for tmobile & im not from store. And theres no tool other than a physical inspection in store to tell if the device is rooted.
Even the so cal updates comes directly from manufacture they just have the provider crap the provider request.
I can see who you call, and who call you & for how long. Not hear the call. Text same **** we have no acess to the content. As far as what in your phone thats for you to know and for carriers & your company to find out.
Theres a lot of myths...now theres a few selectec engineers that will have access to the cells & repeater or the switch and if they want to they can see info. But they are not suppose to its against federal laws.
Sent from my LG-E980 using xda app-developers app

Related

So why root?

I rooted my GN2 the day I bought it but now with OTA update rolling out I have to unroot. Wonder why I rooted in the first place...
The only good thing about rooting so far is being able to remove bloatware (flipboard, etc.). What are other benefits? No wireless tether yet (and I'm sure there will be a non-root solution to this coming), no access to google wallet, tweaking CPU or other settings is not really a concern since phone is so snappy with stock rom unrooted. I don't think the benefits of rooting justify the hassle and disadvantages (such as not being able to receive OTA update) of rooting.
What do you think?
For the fun of tinkering?
Sent from my SPH-L900 using xda premium
mrcrptguy said:
For the fun of tinkering?
Sent from my SPH-L900 using xda premium
Click to expand...
Click to collapse
This.........
And knowing you can restore from backup if something goes wrong. Everyone has their own reasons for root. But just knowing if you want to tinker around with your device, you can.
kg1128 said:
I rooted my GN2 the day I bought it but now with OTA update rolling out I have to unroot. Wonder why I rooted in the first place...
The only good thing about rooting so far is being able to remove bloatware (flipboard, etc.). What are other benefits? No wireless tether yet (and I'm sure there will be a non-root solution to this coming), no access to google wallet, tweaking CPU or other settings is not really a concern since phone is so snappy with stock rom unrooted. I don't think the benefits of rooting justify the hassle and disadvantages (such as not being able to receive OTA update) of rooting.
What do you think?
Click to expand...
Click to collapse
You can be rooted and still receive the OTA update. As long as you dont remove any system apps or install a custom recovery you are good to go! If you would like to keep root during OTA you can enable SuperSU survival mode also.
mrcrptguy said:
For the fun of tinkering?
Sent from my SPH-L900 using xda premium
Click to expand...
Click to collapse
If your asking yourself why root then why did you choose to root? Root is awesome for people who love to play around with their devices and make changes to them to fit their needs. If you think the device is awesome the way it is then the only reason to root would probably be for backing up your apps.
To proper answer this question. "So why root?". Because we want to. Not everyone shares our joy of rooting but this is XDA and most of what we do here revolves around having a rooted device.
If u dont want to root then the question should be why android ? U like being limited to what the company gives u dont u ?
Sent from my GT-I9300 using xda premium
With rooting you can customize your device as you like
Sent from my LG-P500 using xda premium
kg1128 said:
I rooted my GN2 the day I bought it but now with OTA update rolling out I have to unroot. Wonder why I rooted in the first place...
The only good thing about rooting so far is being able to remove bloatware (flipboard, etc.). What are other benefits? No wireless tether yet (and I'm sure there will be a non-root solution to this coming), no access to google wallet, tweaking CPU or other settings is not really a concern since phone is so snappy with stock rom unrooted. I don't think the benefits of rooting justify the hassle and disadvantages (such as not being able to receive OTA update) of rooting.
What do you think?
Click to expand...
Click to collapse
There is a laundry list of benefits to rooting your device, too many to list here, but the main reason IMO is so you can make your device YOUR own!
Eventually the DEVs will have the OTA built into their ROMS and tweeks. You also benefit from adding the BEST features and tweeks that often are not included in Stock builds, or are actually screwed up by Stock builds and updates. You can also just root your device and stay mostly stock, then add features, mods, and tweeks at your liking.
So, for me, its all about having options and being able to set up the device how I like it best. I think you'll find most people on here feel the same way. For me, I don't even activate a device unless its rooted first... Not rooting is kind of like having a Sports car and not being able to do any mods to it,- no air cleaners, no wheels, no gauges, no upgrades, just having to leave it the way you bought isn't ANY fun!
Thanks to all the people who work hard to make the good stuff happen!
ROOT IT :good:
It's not that complicated to un root and takes 60 seconds. ..
Full App+Data backup/restore and tethering.
---------- Post added at 10:48 AM ---------- Previous post was at 10:46 AM ----------
BigJPNut said:
You can be rooted and still receive the OTA update. As long as you dont remove any system apps or install a custom recovery you are good to go! If you would like to keep root during OTA you can enable SuperSU survival mode also.
Click to expand...
Click to collapse
That's not been my experience with my GS3. I've attempted to install the few OTA's that have come for the phone and while you can hit the Install now button, it fails to actually install it. Only once I unrooted did it actually complete.
I root cause its there.
Actually, its for the Ad Block and Titanium Backup and then Tether whenever that comes along.
I did it so I could meet and date supermodels
to get rid of ads, I also plan on putting the perseus kernal on it so I can charge my phone with a car charger. and as everyone else stated, to be able to make it how I like it.
Sent from my Ubuntu Note II
epicnoob66 said:
Sent from my Ubuntu Note II
Click to expand...
Click to collapse
In 8bit color?
kg1128 said:
I rooted my GN2 the day I bought it but now with OTA update rolling out I have to unroot. Wonder why I rooted in the first place...
The only good thing about rooting so far is being able to remove bloatware (flipboard, etc.). What are other benefits? No wireless tether yet (and I'm sure there will be a non-root solution to this coming), no access to google wallet, tweaking CPU or other settings is not really a concern since phone is so snappy with stock rom unrooted. I don't think the benefits of rooting justify the hassle and disadvantages (such as not being able to receive OTA update) of rooting.
What do you think?
Click to expand...
Click to collapse
Its still a relatively new device and dev support hasn't REALLY taken off yet IMO. Go look at the S3 forum for example and there are threads all over the place with ROMs, kernels and MODs.

KNOX and 4.3 upgrade options

There have been lots of questions about KNOX like upgrading/rooting methods, warranty status etc etc on 4.3 and information is scattered over multiple forums (development, general and questions)
I am creating this thread to cover the following topics or at least to guide you to the right forum.
1) What is KNOX ?
2) How KNOX affect us ?
3) How do I verify if Warranty BIT on my phone has tripped ?
4) What trips the KNOX counter ?
5) Is it possible to reset the KNOX counter/Warranty Bit ?
6) KNOX counter has been tripped, now what ? What about warranty ?
7) How to root ?
8) Upgrade options for users on 4.1.2.
9) Thoughts
1) What is KNOX.
Samsung KNOX is a new security feature implemented in Samsung Phones.
You can get more information about KNOX here
2) How KNOX affects us ?
In the latest 4.3 update KNOX has implemeted a secure boot technology that prevents unauthorized boot loaders and kernels from being loaded during the startup process.
So, if you flash this bootloader via (OTA or PC ODIN) then you cannot flash older 4.1.x firmwares.
To further illustrate how this works, the “KNOX Warranty Void” bit (or simply KNOX bit) is used to detect if a non-KNOX kernel has been loaded on the device. It is a one-time programmable bit in e-fuse, which can only be turned from “0” to “1” (i.e. burned). If a non-KNOX boot loader or kernel has been put on the device, KNOX can no longer guarantee the security of the KNOX Container. As a result, this KNOX bit will be burned to “1”, indicating that this device can no longer use the KNOX Container service. There are two possible scenarios: first, a new KNOX Container can no longer be created on such a device; and second, the data encrypted and stored in an existing KNOX Container can no longer be retrieved. Everything else should work just as before.
Reference link
3) How do I verify if Warranty BIT on my phone has tripped ?
You can go in download mode (Home+Volume Down) then power,then on prompt press Volume UP.
If you see KNOX or Warranty Bit set to 0x1 that means the counter has tripped.
4) What trips the KNOX counter ?
Rooting, flashing custom ROMS and kernels trips this counter.
5) Is it possible to reset the KNOX counter/Warranty Bit ?
Not as of now, per Samsung it is impossible as this is a one way process but you never know someone might discover a way to reset it.
6) KNOX counter has been tripped, now what ? What about warranty ?
As of now you cannot revert back to 4.1.x firmwares if you do not like 4.3.
You may or may not have issues with your warranty, it all varies at different service centers.
For those who brought this phone at launch, its over a year and warranty as already expired.
There is an interesting thread here which covers this topic.
7) How to root ?
For those who updated via OTA:
Rooting via CF flashes the KNOX Warranty Counter, further information here
You can flash MrRobinson's (Rooted and KNOX free) ROM but a user reported that flashing this tripped his counter.
Switch to page: 45 and Post# 446.
Make sure you download the v2 ROM. http://www.androidfilehost.com/?fid=23252070760975435
There are few other methods but I do not know much about them so if anyone knows please feel free to post or let me know so I can add it to the OP.
8) Upgrade options for users on 4.1.2.
If you DO NOT CARE about KNOX or warranty just update however you like:
1) Via OTA, if system status is modified or if binary count is not 0: a) Flash Mrrobinsons root 66 b)Use triangle away to reset counter c) full unroot via super user d) factory reset, if this does not work then flash stock via odin after step c. Please note this method will only update to 4.3, you will have to root the phone if you want.
If you DO CARE about warranty status then you can try this method.
1) Flash MrRobinsons v2 ROM via mobile ODIN from here, original thread, Switch to page: 45 and Post# 446.
2) I was able to pack together a stock ROM which is rooted, debloated and includes the 4.1.2(UVMBD1)bootloader.
Link here.
Please note: Mobile Odin does not flash the bootloader, you will still have the updated 4.3 firmware but with an old bootloader, the idea here is to avoid the KNOX bootloader altogether.
WIFI does not work but there is a fix.
To fix WIFI you can either flash the Devil Kernel from here
or
You can flash this WIFI patch compiled by DrKetan. Page 21 post 204.
Special thanks to DrKetan for compiling this patch, MattLowry for working with him to get this done, MrRobinson for stock rooted and KNOX free ROM and DerTeufel1980 for Devil Kernel.
9) It will be awesome if there is a stock ROM with old bootloader, newer system/modem image, root injected, KNOX free and integrated with this wifi patch.
- I was able to pack such ROM but without wifi patch here.
Update: 02/05/2013
Downgrading of ROM's from 4.3 to 4.1.x is possible by flashing the ROM using mobile odin.
4.3 bootloader cannot be downgraded, the work-around is to flash 4.1.x ROMs excluding the older bootloader.
You will end up with a 4.1.x rom on a 4.3 bootloader.
Update: 02/10/2013
User esdwa reported that he successfully rooted his phone using Saferoot method described here.:
Rooting phone via this method does not trip the KNOX counter. Se posts 52 through 55.
Please note: These methods I have listed are the only ones which I know, there might be more options and if you let me know I can add it to the post.
Thank you so much man... my buddy accepted the OTA (without listening to me when I told him to wait) and has been hounding me to get JMX on his phone since it was released... your guide answers so much and provides adequate links... if I can buy you a beer let me know how
Sent from my SGH-T889 using xda app-developers app
Funny thing about Knox...
Lets say an employee isnt rooted or custom and has knox-provided accessvto company/enterprise material... how is that more safe than a person who roots/mods their phone with processes/roms that are provided through xda which monitors (these downloads/processes with advanced moderators/users) more frequently and just as fast as even microsoft can inhibit billions of porn site "foul play".
Honestly... if I invested in Knox for my company, would I feel more protected from a closet porn fanatic than someone who was intelligent enough to root and flash custom roms through proven methods?? Moreover, why flag the "flasher" and make his device "null", while allowing the "porn-surfer" continual access to my companies "sacred data"...
Nothing against porn surfing just my analogy of how foolish businesses are too buy into this... ultimately I think knox isnt just an enterprise security for any any company outside of samsungs own personal interest... they are probably receiving "knox flag" info from every phone "tripped" and will increase device pricing accordingly
Sent from my SGH-T889 using xda app-developers app
PhxDroid86 said:
Funny thing about Knox...
Lets say an employee isnt rooted or custom and has knox-provided accessvto company/enterprise material... how is that more safe than a person who roots/mods their phone with processes/roms that are provided through xda which monitors (these downloads/processes with advanced moderators/users) more frequently and just as fast as even microsoft can inhibit billions of porn site "foul play".
Honestly... if I invested in Knox for my company, would I feel more protected from a closet porn fanatic than someone who was intelligent enough to root and flash custom roms through proven methods?? Moreover, why flag the "flasher" and make his device "null", while allowing the "porn-surfer" continual access to my companies "sacred data"...
Nothing against porn surfing just my analogy of how foolish businesses are too buy into this... ultimately I think knox isnt just an enterprise security for any any company outside of samsungs own personal interest... they are probably receiving "knox flag" info from every phone "tripped" and will increase device pricing accordingly
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
Because with Knox the access is limited. so let's say you have access to financial documents. In the Knox environment you can't copy it and send it to a competitor. Read the
Containers & App Wrapping section from the link in op. There's also protection from key logging apps, etc. To your porn addict analogy with Knox regardless of the morals of your employees they can't physically compromise any data.
Knox really is great for corporations and a brilliant move by Samsung to try and take some of the corporate market from apples locked up devices. The problem is carriers using it to deny warranty claims (which there seems to be mixed reports if they do or not) and most of us dunt need it
Sent from my SGH-T889 using xda app-developers app
kintwofan said:
Knox really is great for corporations and a brilliant move by Samsung to try and take some of the corporate market from apples locked up devices. The problem is carriers using it to deny warranty claims (which there seems to be mixed reports if they do or not) and most of us dunt need it
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
I think it's good for corporations who provide cell phones to their employees, this does not fit well in BYOD environment.
Samsung should have released an enterprise firmware altogether and the developers at each company can update/modify as per their policies.
On a funnier side: Whats next - Verifying the device status or KNOX via download mode at gates?
kintwofan said:
Because with Knox the access is limited. so let's say you have access to financial documents. In the Knox environment you can't copy it and send it to a competitor. Read the
Containers & App Wrapping section from the link in op. There's also protection from key logging apps, etc. To your porn addict analogy with Knox regardless of the morals of your employees they can't physically compromise any data.
Knox really is great for corporations and a brilliant move by Samsung to try and take some of the corporate market from apples locked up devices. The problem is carriers using it to deny warranty claims (which there seems to be mixed reports if they do or not) and most of us dunt need it
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
I think the point is for the BYOD system because they know your phone is untouched since Knox can't run if you've ever rooted your device. I would be all for enterprise firmware though.
Sent from my SGH-T889 using xda app-developers app
Doesnt root access on any device get exploited by "holes" that the device already has in place prior to any dev taking advantage of?.. yes by having Knox, a company can "potentially" know when they've "potentially" been compromised but those same holes are being exploited by "foul play" (whether that be porn sites or the like) and most of these exploits dont need root access established by the device holder in order to gain access... to single out the rooter is totally irrelevant
Sent from my SGH-T889 using xda app-developers app
PhxDroid86 said:
Doesnt root access on any device get exploited by "holes" that the device already has in place prior to any dev taking advantage of?.. yes by having Knox, a company can "potentially" know when they've "potentially" been compromised but those same holes are being exploited by "foul play" (whether that be porn sites or the like) and most of these exploits dont need root access established by the device holder in order to gain access... to single out the rooter is totally irrelevant
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
I think you're a little confused on what Knox is (and possibly a porn addict). Knox in its most simple definition is basically a dual boot in Android. It is it's own environment, separate from your other apps and only certain apps and programs can run within this Knox environment. The reason root is"singled out"is because your device is no longer secure and you could potentially gain unauthorized access to the Knox sector now. Yes there may still be potential to access information from Knox without being rooted, but it would be very difficult and your average person would have no idea how. There's a reason it is the only DOD approved mobile security system.
So basically Knox isnt just a number on your download screen that says if your phone is rooted.
By the way joking about the porn addict thing.
Sent from my SGH-T889 using xda app-developers app
kintwofan said:
I think the point is for the BYOD system because they know your phone is untouched since Knox can't run if you've ever rooted your device. I would be all for enterprise firmware though.
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
Yes, I do understand but again asking an employee to have his personal phone in compliance with company policy does not go well. Yes, you can have them not bring their phones if it's a requirement.
From security standpoint, it helps to save encrypted company data if phone is lost, maintain system integrity and detect tampered devices.
But pushing this type of update without informing the customers that there is no going back is not a good move.
This is a broad topic for discussion !
Sent from my SGH-T889 using xda app-developers app
ciphercodes said:
Yes, I do understand but again asking an employee to have his personal phone in compliance with company policy does not go well. Yes, you can have them not bring their phones if it's a requirement.
From security standpoint, it helps to save encrypted company data if phone is lost, maintain system integrity and detect tampered devices.
But pushing this type of update without informing the customers that there is no going back is not a good move.
This is a broad topic for discussion !
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
Ya I didn't explain my point very good. I agree with you. Knox is designed for BYOD however it would make more sense for a corporation that requires that level of security to provide a phone to their employee, the they can put as much security on it as they deem necessary.
Sent from my SGH-T889 using xda app-developers app
kintwofan said:
Ya I didn't explain my point very good. I agree with you. Knox is designed for BYOD however it would make more sense for a corporation that requires that level of security to provide a phone to their employee, the they can put as much security on it as they deem necessary.
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
It only makes sense (when talki mm g byod) if an employee has to turn their phone in at the end of the day (not exactly byod at that point)... when it comes to addicts (whether that be porn or anything else) the bottom line falls on integrity, not encryption... for a company to trust an employee to do things with their device (beyond their control) is a matter of integrity. Encryption is irrelevant. My dad is a senior IT manager for one of the 5th largest cities, by brother in law is an IT manager for one of that cities najor metropolis's and I have many friends capable of programming things in manners not in accordance with benefiting the whole as a group... I know both sides of the equation... what doesnt add up is samsungs "Knox" being out to to protect anything outside of its own personal interest
Sent from my SGH-T889 using xda app-developers app
Couldn't agree more.
Naddict please come on in and shut this 4.3 thread down,remember you need to keep it all in one place
Macklessdaddy said:
Naddict please come on in and shut this 4.3 thread down,remember you need to keep it all in one place
Click to expand...
Click to collapse
I apologize for things getting off topic but for the op to provide so much perspective regaurding the early stages of the 4.3 update is more important than "consolidating" threads
Sent from my SGH-T889 using xda app-developers app
PhxDroid86 said:
I apologize for things getting off topic but for the op to provide so much perspective regaurding the early stages of the 4.3 update is more important than "consolidating" threads
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
No bro I was just messing with the super powerful mod who keeps shutting down any thread that has to do with 4.3
dude is merging every damn thread in sight
Im so ready to just root and flash a custom rom on my buddies OTA'd rom but im seriously hoping that Mr. R or Matt L. Can cimetgrough in the clutch to save us all from knox being tripped while engaging in the root process... reseting it is one thing but if we dont have to reset it than that would be ideal... patience is such q virtue at this point
Sent from my SGH-T889 using xda app-developers app
Since this is about Knox -- it includes SE Android as part of it which is from SE Linux --- The key concepts underlying SELinux can be traced to several earlier projects by the United States National Security Agency. With what the NSA has been caught doing recently.... anybody looked at the basecode for their backdoor which is probably in there?
I tripped my know already.
Cab i go back 4.1.2?
Sent from my SGH-T889 using xda app-developers app
Mynameisbruce said:
I tripped my know already.
Cab i go back 4.1.2?
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
No.
Sent from my GT-N7105 using xda app-developers app
From my understanding you can go back to 4.1.2
I saw someone post the instructions in the Galaxy Note 2 community on Google+

has there ever been a security breech on a custom Rom?

So yes basically I know things on xda are supposedly safe in terms of security and roms. But have there ever been a case of a Rom having something like a keystroke logger or any type of hack to gather information or gain access to your personal stuff? And if it had never happened on xda maybe from one of the other sites?
I suppose I'm just trying to address how safe custom roms are I have been using various ones recently so I do trust them some what of course and I assume if a roms been on xda for months and has many posts it's been checked but I still wonder if someone was clever they could wait for the right moment to strike if you know what I mean. Thanks.
Yea, in a way, you are trusting that the devs have no added anything sinister to their custom ROMs. But in the time I've been here (a long time!) I haven't seen anything like this added to any ROMs. You could always do a full scan of the ROM before flashing it to be sure.
the_scotsman said:
Yea, in a way, you are trusting that the devs have no added anything sinister to their custom ROMs. But in the time I've been here (a long time!) I haven't seen anything like this added to any ROMs. You could always do a full scan of the ROM before flashing it to be sure.
Click to expand...
Click to collapse
What would you scan it with though? Pc viruses and malware different to mobile no? And anyway surely a clever hacker would make there own hack etc. And maybe they just add it to the update add well . Anyway good to hear no ones reported one yet!
Well I will try a pc scanner...phone scanners seem to just check.apk's so that's useless...done some full scans all the same just for the hell off it. Guess I don't have any money anyway so I'm safe . But like I say if they are clever they will write their own code so the scanners won't find it .
Still no one reported ok that's given me more confidence...a bit :s ...
Only thing I new of was start of the year I had a xperia z ultra and the mostly only way to gain root at the time was to use kingo root. It wasn't a XDA developed root tool is was from a Chinese website and it was suspect as it took your phone details like imei number. Not sure what happened in the end. But if you get a phone and you trust the recognised devs you should be OK.
Golly, I sho hope not!
:good::good::good:
How about as of late and the security involved when you have a rooted phone? I have not been able to locate any substantial info concerning the legitimacy of or about the claim. Do I need to UN root my phone after the new flash or no? Or, am I way of base here and obviously don't fully understand the weekness of having a rooted phone? In other words, a rooted phone is just as safe as a non rooted phone?
Thanks in advance
Edit
Randy L said:
How about as of late and the security involved when you have a rooted phone? I have not been able to locate any substantial info concerning the legitimacy of or about the claim. Do I need to UN root my phone after the new flash or no? Or, am I way of base here and obviously don't fully understand the weekness of having a rooted phone? In other words, a rooted phone is just as safe as a non rooted phone?
Thanks in advance
Click to expand...
Click to collapse
No, a rooted phone is not as secure as an unrooted phone. You've opened up access to the system when you rooted, and therefore made it vulnerable.
Not that an unrooted phone is completely secure either, but with root access, a malicious app could do much damage.
What would you suggest since I plan to flash a newer, stable ROM with a newer radio binary? I need to ensure my phone is locked up right as possibly allowable without over taxing the system.
Thanks again
Randy L said:
What would you suggest since I plan to flash a newer, stable ROM with a newer radio binary? I need to ensure my phone is locked up right as possibly allowable without over taxing the system.
Thanks again
Click to expand...
Click to collapse
It's all a trust and common sense game. If you flash a rom you are putting the trust in others hands. No way around that. As for keeping it locked down. Your best bet would be to stay on stock. Root is a security hole and that's why Google is starting to allow apps to check for root and if found disable the app or features of the app.
Luckily most of our ROMS don't come from people stand to gain anything from that info and are probably like-minded when it comes to how we want our phones to work.
To answer some of these questions, it might help to fully understand what we're talking about.
What kind of security issues face an Android phone?
Well, for one, there are network-level attacks. This are fake cell towers (sometimes called Stingrays) that can collect the sort of data a cell tower might be able to collect, your location, your messages, and your data.
A third-party ROM or a rooted phone is not intrinsically more vulnerable to this. In fact, there are some apps that help detect this kind of attack, and those apps will generally require root access. This kind of attack is less likely to be a random skiddie, and more likely to be the police or a government.
Another kind of attack is a malicious app. Think of it like a trojan horse, something you willingly let into your phone, and it has a secret malicious payload. Maybe it's a browser that actually skims all your activity to sell to marketers. Maybe it's a widget that shows a neat clock on your lock screen, but it actually collects all of your contacts so they can be spammed later.
Since this would be an app that you've willingly downloaded, a third-party ROM doesn't make you much more susceptible, but granting this app Root could make it much more damaging, since it could hide itself from uninstallation or even modify other apps to do bad things.
Note, though, that certain third-party ROMs and apps that require root can help protect against this. If you download an app, and it says it needs permissions that don't make sense (why does a clock app need access to my camera, or my contact list?), that should be a red flag to not install it. But some ROMs actually let you revoke/block individual permissions., so if a baddie app was trying to access stuff it shouldn't, you can stop that from happening.
But there's a slightly more insidious kind of malicious app. Imagine third-party app that accesses Twitter, or Snapchat, or Instagram. Now this app actually saves all of the things you're doing elsewhere before it punts them off to the service you're trying to access. This app could be appearing to function completely honestly, hoarding your Snaps and your snapchat password, until one day they decide to leak all your snaps, or upload all the images you sent to your private Instagram to a public site.
You're not intrinsically more vulnerable to this kind of attack with a third-party ROM or a rooted phone. These apps will likely be come from a non-Play store source, which can happen even stock/unrooted. An app like this with root access can do more bad stuff, but their wheelhouse is in doing bad things with the data you've already willingly given them, so it's moot.
Then there's the issue you seem to be most worried about, which is malware baked into a ROM. This is by far the biggest danger in terms of risk, because it could be doing all sorts of nasty stuff relatively invisibly. What prevents someone from doing this, though? Well, for one, with an open source project, everyone can see the code. If there is something flagrantly wrong, it could be spotted by other people. It's possible to try to hide it, though, and some smaller ROMs don't attract a ton of eyeballs, so not that many people might be looking.
Then again, plenty of major ROMs could have the same thing going on, just in very clever or subtle ways. Look at how pervasive the Heartbleed issue was, and that was in code that tons of very smart people had the chance to look over.
Third-party ROMs do present more danger in this regard. What do we consider third-party, though? Major carriers lay tons of extra code on top of vanilla Android. And plenty of them may be doing unseemly things with your data, either for marketing reasons or at the behest of someone like the NSA. In that case, you're best but would be to stick strictly to AOSP ROMs, but even then, it's not a sure thing.
Truth be told, the best thing you can do for security is just pay attention to what you're letting onto your phone, and what you're letting those apps do. Your choice of ROM and root status is a part of it, but being generally aware is by far the most important thing.

[Q] Lollipop or KitKat with root/bootstrap

Lets just say we get root before L is released for the AT&T Note 4. What would you do? Hold off and hope for a bootstrap so you can put a custom variation of L or any other rom, or just bite the bullet and take the update knowing you may never have root again? I think this is a dilemma that a lot of us will be facing soon.
CAN A MODERATOR MOVE THIS TO GENERAL SECTION?
Root is more important. I'd rather have adblock and tibu than lollipop.
papashex said:
Root is more important. Id rather have adblock and tibu than lollipop.
Click to expand...
Click to collapse
I absolutely agree! Xposed, tibu, and Adaway!
With some user experience with a locked phone.
If you ever want to root never update officially as any chances of safely rooting becomes exponentially harder than before the update.
Stay away from those tempting lolipops when they arrive...
papashex said:
Root is more important. I'd rather have adblock and tibu than lollipop.
Click to expand...
Click to collapse
That's what I thought until I actually searched.
Adblock plus is a non-root version that works just as well (you just have to set your wifi and APN to proxy localhost port 2020) and there are about a billion backup alternatives...
Honestly stock rom is so smooth I might just upgrade and forget about it, custom roms always need tweaking and have some little thing I can't get perfect that bugs me.
v3ngence said:
That's what I thought until I actually searched.
Adblock plus is a non-root version that works just as well (you just have to set your wifi and APN to localhost proxy port 2020) and there are about a billion backup alternatives...
Honestly stock rom is so smooth I might just upgrade and forget about it, custom roms always need tweaking and have some little thing I can't get perfect that bugs me.
Click to expand...
Click to collapse
I completely agree with you. Without an unlocked bootloader, we would just get stock Touchwiz roms anyways.
I've had many rooted Samsung phones over the past few years so I know the song and dance. The only difference between stock and a custom rom is the custom rom will be debloated, possibly have baked in extra features (which are usually alternatively achieved with xposed modules) and possibly a theme.
Take those things away, and it performs no different than stock Touchwiz. Believe me, any perceived performance difference is pure placebo. I've done many of my own tests to confirm this.
But to sum up my rant, I'm completely happy with this phone without root. It's overrated to be honest.
What version of adblock doesn't require root? Can you put up a link?
Just want to get rid of the bloat they stuff down our throats. I hate it and that really irritating ATT logo. I doubt I'll miss Lollipop, just as I never missed any of the updates that came after I rooted my Note 2 on day one.
WizeGuyDezignz said:
I completely agree with you. Without an unlocked bootloader, we would just get stock Touchwiz roms anyways.
I've had many rooted Samsung phones over the past few years so I know the song and dance. The only difference between stock and a custom rom is the custom rom will be debloated, possibly have baked in extra features (which are usually alternatively achieved with xposed modules) and possibly a theme.
Take those things away, and it performs no different than stock Touchwiz. Believe me, any perceived performance difference is pure placebo. I've done many of my own tests to confirm this.
But to sum up my rant, I'm completely happy with this phone without root. It's overrated to be honest.
Click to expand...
Click to collapse
I agree that a custom rom seems less and less needed. I've been OK with the stock rom so far but do wish we had a root for xposed and be able to write to microsd
Sent from my SAMSUNG-SM-N910A using Tapatalk
The only big drawback for me and not having root is the SD card lockdown. I mean really, it is external storage and any app I chose should be allowed to wright to it when I request it.
adblock plus website...
adblock works without root by routing apps through it this does not require root.
If you have root it automatically changes the settings etc but if you don't it tells you what settings you have to manually input to get it to work just the same no root required but root preferred.
I'm in the middle... I've always rooted my phones... Just like the different customizations, but with this phone, I'm completely happy with it as is.. I just put different themes on it to spice up whatever I feel I want... But I'd at least like the option to root, if I wanted, but to answer the question, of L comes out before root is acquired, I'm definitely upgrading
Really rather have root but if it doesn't then I wouldn't mind. So far I'm really enjoying the note 4. I'm not even seeing TouchWiz stutters everything is smooth and even the stock keyboard which I usually change anyway I'm liking more and more.
But I do have to agree don't get me wrong the devs I respect for all their time and work, but I'm not into stock custom rom. It also feels nice to just use the phone for what it is. With me I was always tweaking and doing so much I never really fully enjoyed the phone.
I'd rather have root. I was wondering if I'm going to keep the note or use my rooted and safestrapped s5. But something about the note makes it hard to put down.
AndroiderM said:
What version of adblock doesn't require root? Can you put up a link?
Click to expand...
Click to collapse
I like this one:
https://play.google.com/store/apps/details?id=com.stulchik.adblock.reklama&hl=en
JudgeDredd67 said:
The only big drawback for me and not having root is the SD card lockdown. I mean really, it is external storage and any app I chose should be allowed to wright to it when I request it.
Click to expand...
Click to collapse
It was a minor annoyance for me, the camera app defaulted to sd storage and I can save pics but not edit or delete, so I just changed default storage to phone.
Also it's nice to have a really clean, organized sd card IMO I didn't like all the app data folders...
v3ngence said:
I like this one:
https://play.google.com/store/apps/details?id=com.stulchik.adblock.reklama&hl=en...
Click to expand...
Click to collapse
Unfortunately I get this when I click on it:
"This item isn't available in your country" (usa)
You wouldn't by chance have a link to an apk I could side load?
Sent from my SM-N910T using XDA Free mobile app
Dumbo53 said:
Unfortunately I get this when I click on it:
"This item isn't available in your country" (usa)
You wouldn't by chance have a link to an apk I could side load?
Sent from my SM-N910T using XDA Free mobile app
Click to expand...
Click to collapse
I actually found out it was causing network lag, so I switched to the real ABP: https://adblockplus.org/en/android-install
But it works the same way, the app tells you how to set up your wifi proxy, but you can just add proxy "localhost" port 2020 to your apn and its works on 4g too!
ViperAudio would be nice

To root or not to root

I've had my Pixel 2 XL for 2 weeks now and am very impressed with all of the customizations. Quick question: is it worth it to root it? My bootloader is unlocked, BTW. What are some additional benefits it I choose to root it?
t4duzan said:
I've had my Pixel 2 XL for 2 weeks now and am very impressed with all of the customizations. Quick question: is it worth it to root it? My bootloader is unlocked, BTW. What are some additional benefits it I choose to root it?
Click to expand...
Click to collapse
The "worth it" part is up to you. What is it you want to achieve? If you want to....
Flash custom roms and kernels..
Use add blocking and themes..
Install sound mods...
Or just customize the crap outa it.....then yes.
However, a word of caution, do your research into flashing procedures, and become very familiar with fastboot just in case something goes wrong, and you need to recover your device.
Also, if you use certain banking apps, they may not work if your rooted. If you have anymore questions, feel free to ask. There are bunches of helpful people on XDA that are happy to help you. :good:
Badger50 said:
The "worth it" part is up to you. What is it you want to achieve? If you want to....
Flash custom roms and kernels..
Use add blocking and themes..
Install sound mods...
Or just customize the crap outa it.....then yes.
However, a word of caution, do your research into flashing procedures, and become very familiar with fastboot just in case something goes wrong, and you need to recover your device.
Also, if you use certain banking apps, they may not work if your rooted. If you have anymore questions, feel free to ask. There are bunches of helpful people on XDA that are happy to help you. :good:
Click to expand...
Click to collapse
Thanks for the advice and info Badger50. I think I'll do as you recommend and research it for awhile.
Also insurance apps detect root also and some games
Magisk is a great app for hiding root from these apps most of the time.
If you want to keep up to date on the monthly Google updates it can be a bit of a pain as you have to replace your boot image and kernel and even then can have issues with the way pixel handles the rom.
But with that said it's good to at least do it learn a bit about what goes into it see if it is good for you.
Good to have a backup phone and or know your restore procedures.
Pretty hard to brick a phone with the pixel phones.
Just have to follow some steps exactly the way they tell you.
I stay stock now because of the updates some times it takes me a day to get time to fix the phone to accept the update and work properly and I like having accu battery have history from start of the phone
Sent from my Pixel 2 XL using Tapatalk
Taimen_#1
Without a doubt, hands down, currently I need Root. If the device has no solution then it's the last one I would pick. Currently I'm running Havoc with Magisk 18. I have the viper/Dolby sound benefits with my favorite Sony features & apps. Also I'm running lawnchair w/ quickswitch module. All in all I guess you could say I have a problem. Every since I learned I could update to KitKat instead of being stuck on stock gingerbread I've been rooting. Thanks:good:
If you have a warranty (sounds like you bought it used) or you have have insurance they will be void if you are unable to restore to stock.
That's why I don't root.
Just something to be aware of.
One of the best and ultimate reasons to root is to be able to take a nandroid backup that's better than any non-rooted backup method! It will literally backup and remember everything (due to all of this residing in the /data partition)! Your homescreen, settings, app and its data,down to every little thing!
Being able to move the clock back to the right, modify so it's better on battery life and cpu quickness, enjoy extra features in apps, and many other "tweaks" are secondary but very enjoyable and satisfactory...
it's an interesting question to me, because this is the first phone that I have decided not to bother rooting. It is also my first pixel/Nexus which I think is part of the reason. In the past getting rid of bloat and many of the controlling aspects from carriers was important to me. With the pixel, there is very little of that. Plus it just works, I'm not working around issues.
maybe I'm getting old, but to me the phone is now something I want to use not something I want to play with. When I root the phone, I have to keep up with security updates and I'm usually also fixing and patching things from trying different mods. So far the pure Android experience from Google has proven reasonably reliable and stable, and it just doesn't seem worth the hassle anymore. I will continue to buy phones I can root, how's that may change at some point.
Right now, my opinion is, for me, there is no need to root
I haven't unlocked my bootloader or rooted since the first pixel. I use adguard premium and YouTube vanced. Currently, absolutely no need for root anymore. Just my two cents.
simplepinoi177 said:
One of the best and ultimate reasons to root is to be able to take a nandroid backup that's better than any non-rooted backup method! It will literally backup and remember everything (due to all of this residing in the /data partition)! Your homescreen, settings, app and its data,down to every little thing!
Being able to move the clock back to the right, modify so it's better on battery life and cpu quickness, enjoy extra features in apps, and many other "tweaks" are secondary but very enjoyable and satisfactory...
Click to expand...
Click to collapse
Everything related to apps and app data. Anything on the internal sdcard, not so much.
Sent from my [device_name] using XDA-Developers Legacy app

Categories

Resources