my question is two fold,
are there any apps out that help keep your device secure after you root?
And how much leeway do I give when I am using my rooted device....should I not use certain functions like logins and stuff or is all that not something I should be worried about.
It depends.
If you're sideloading apps then some kind of virus checker that covers these would be wise, or just make sure they are from a trusted source.
Otherwise the same security measures apply, dont just install stuff willy nilly, use trusted sources, dont give permissions (including root) to apps youre not sure of and keep security patches up to date.
Adding to what Oblox has typed, you don't need any type of virus checker for an Android device what you want is an MD5 hash checker to make sure that the apps that you want to sideload (if you ever plan on sideloading) are from its correct source and haven't been tampered with.
It's not really an issue since SuperSU manages root permissions, only give it to trusted apps. As far as I know, all regular apps run the same as if you are not rooted.
Does lucky patcher count ? been using it as a file manager and I works pretty well for enhancing battery life.
Related
How can you unroot a rooted tablet, without doing a factory reset?
Does leaving a tablet rooted increase virus and malware risks?
That's in part what you use the superuser app from market for, it allows you control access writes for su/root.
Your device and every other stock device can be exploited without it being rooted if anyone wanted to badly enough anyway honestly. So it doesn't make much difference. Those exploits are how you get the device rooted in the first place.
If you decide to root your device just be careful of the sources for the files you use, and try to understand what you are doing first as best you can. That and use superuser.apk and such. You can also temp root if you just want to make a small change.
As for malware etc, I would worry more browsing the internet with cookies, flash, and javascript enabled. That's how most of those are transmitted, other then fake apps and such.
So I downloaded the new Android Pay app last night, but it doesn't seem to work if you have a custom ROM installed. I'm currently on Resurrection and it gives me the error "Google is unable to verify that your device or the software running on it is Android compatible".
This needs to change.
UPDATE - I found a workaround that *may* help out. Go into SuperSU and disable root (or disable however you want), try adding your cards again, and then go re-enable root. This has worked for many people on other phones with this error, but it didn't help on my T-Mobile S4
Let me know if you get it to work on another ROM (or even if it works at all on stock right now)
Dowload - http://www.mediafire.com/download/1bvbsouwtcz9mx2/Android_Pay_1.0.102576552_930000657.apk
deke997 said:
So I downloaded the new Android Pay app last night, but it doesn't seem to work if you have a custom ROM installed. I'm currently on Resurrection and it gives me the error "Google is unable to verify that your device or the software running on it is Android compatible".
This needs to change.
UPDATE - I found a workaround that *may* help out. Go into SuperSU and disable root (or disable however you want), try adding your cards again, and then go re-enable root. This has worked for many people on other phones with this error, but it didn't help on my T-Mobile S4
Let me know if you get it to work on another ROM (or even if it works at all on stock right now)
Dowload - http://www.mediafire.com/download/1bvbsouwtcz9mx2/Android_Pay_1.0.102576552_930000657.apk
Click to expand...
Click to collapse
Disabling SuperSU worked for me. It allowed Android Pay to verify my phone.
Not sure I like that I HAVE to have a Lock Screen setup. And, why can't Android Pay have a lock screen built into it like the new Google Wallet does. Wouldn't we want two part authentication?
Rob
I just installed Danvdh's new 5.1 GPE rom and I'm pretty sure Android Pay was already installed. Haven't tested it yet, though. Looking forward to seeing if Xposed will work alright to keep root enabled while using Pay.
HampTheToker said:
I just installed Danvdh's new 5.1 GPE rom and I'm pretty sure Android Pay was already installed. Haven't tested it yet, though. Looking forward to seeing if Xposed will work alright to keep root enabled while using Pay.
Click to expand...
Click to collapse
I re-enabled SuperSU after the install, and it seems to be working. However, it looks like updating also checks root. So, I had to disable root again to have the update to Android Pay take. But, re-enabled root after the update, and things seem to be working.
Rob
You all that state you have it working on T-MO SGH-M919, must be running the T-MO 4.4.4 software. I had it working too - even on a ROOTED 4.4.4. device. Once I install a CyanogenMod Custom LOLLIPOP ROM - and re-installed the AndroidPay, it no longer works. You get the message that ANDROID CANNOT BE VERIFIED (or some crap like that).
Phone works perfect for everything but that...and of course my GoogleWallet was upgraded and no longer has the TAP TO PAY feature...and you cannot get that one back either.
So I guess I need to find out how to get my phone back to STOCK T-MO 4.4.4, none of the downloads anywhere can actually be downloaded any more (unless anyone has a valid link one of those).
Thanks,
*BH*
I'll give you fair warning, as I participated in the lengthy discussion thread over at the Nexus 5 forum (the thread that had the Google developer participating). Here's the lowdown.
Due to liability pressure from Visa, MasterCard, and the others, Android Pay is very...uptight about its operating environment. It basically won't accept any environment it can't trust, and that basically boils down to a system that is stock and unaltered. Anything that can undermine Android's security model (root, custom ROMS, Xposed Framework, etc.) is red-flagged and the app will break. Now, before anyone begins moaning about how Google Wallet worked before, that will be going away soon under pressure from MasterCard. The new system is tokenized and closer to Chip transactions, which is where everyone will be going over the next few months, and under these new rules, if Google can't show due diligence in trying to maintain a chain of trust throughout the transaction (IOW, try their best to ensure a clean environment with no exploitable features), Google faces the bill for instances of fraud. Any attempt to address this problem simply cannot be done the way Android is setup now. Since anything with root access can do anything to the OS, there's just no way to corral this, not even with Marshmallow. Anyone who has used Samsung Pay will notice they take precautions, too. They're a little more lenient with root because they can protect the chain with Knox. Trip Knox and Samsung Pay balks.
Odds are, this development may make phone manufacturers turn back to things like Secure Elements (or some other system outside Android's scope) to provide a way to ensure a chain of trust even with root present. That's likely why Apple isn't too concerned with Apple Pay working with jailbroken phones (all Apple Pay-ready iPhones carry Secure Elements). Until further development, that's just the way it is with Android Pay.
Hello,
Yesterday, I successfully rooted my Samsung Galaxy S10+. But since I still had some questions about it, I went on and posted a thread here. User Spaceminer then pointed out that my original post was in the wrong subforum and linked me here. Naturally, I looked at some of the most popular posts in hopes to find answers to my questions. But what I found confused me more than it gave me answers.
Since 2014 with the Samsung Galaxy S5 I got used to rooting in order to disable bloatware, protect my data and customize my phone. I continued doing that with the S8+ until I recently got my hands on the S10. Now, my main reason for rooting are still the same; I want disable (not necessarily uninstall) bloatware, protect my privacy and customize my phone (such as changing the background of the dial when calling someone). But that thread made me wonder if it is even essential to root. I also found a similar post on reddit and most answers seem to agree that it is not necessary to root your phones.
Now, my situation is a bit different. For one, I already rooted my phone. Second, I don't care about warranty nor custom ROMs. But I do want to install a banking app. Also, it is a bit cumbersome to not only have to manually update your phone with every update but the booting requirements with the warning screen are also a bit annoying. So, my question is the following:
What are the advantages of rooting that are not possible without? I have 3 main concerns: Bloatware, Privacy and Customization.
The reason why I posted this in a separate threat is that I was not able to come to a definitive conclusion on my own and most discussion threads are over a year old. By now, the whole process of rooting and what is possible changed since then, so I want to get a more recent insight. I hope you can help me out.
With kind regards,
DasMalzbier
Tbh root is not needed, unless you want to use a custom rom. Most things are already in the android now.
Calyx os not make for samsung Galaxy series and 12 update also comes this year so i think rooting is unnecessary for s10 series
Root is 100%, absolutely necessary for using the phone. I cannot use any phone without it. Critical root-only capabilities:
full system backups (in twrp)
titanium backup
disable updates permanently (update ONLY when want to)
app freezers (app quarantine)
disable/remove bloatware
disable google play services/google play
automate/tasker
cf lumen
adblockers
wifi tether
busybox
superuser
ssh tunnel
update android to later version / install custom roms
optimize system
button mapper
custom theming / substratum
nav gestures
tidypanel
xposed
root explorer
app privacy customizations
3c all-in-one toolbox
more
Without root, the phone is unusable to me. I will never buy any phone without root capability. I am willing to go to different carriers just to get root on the device, or go to different manufacturers if root is blocked. For example, I will never buy a huawei device - they are locked.
I would like to say yes but I can't. the stock apps are very well designed.
The biggest concern is that custom Roms are released faster than modded apps.
For example I tried about ten GCAMs and all of them have a bug... and it becomes more complicated with Exynos.
OpenGcam is not worth samsung app.
Unable to get voice match to work.
Alarms that you can't set to a specific day with the google app.
And so on.
Root is useful when the manufacturer no longer updates the devices.
I regret having Root mine because I lost Samsung Pay and other things.
DemotionFR said:
I would like to say yes but I can't. the stock apps are very well designed.
The biggest concern is that custom Roms are released faster than modded apps.
For example I tried about ten GCAMs and all of them have a bug... and it becomes more complicated with Exynos.
OpenGcam is not worth samsung app.
Unable to get voice match to work.
Alarms that you can't set to a specific day with the google app.
And so on.
Root is useful when the manufacturer no longer updates the devices.
I regret having Root mine because I lost Samsung Pay and other things.
Click to expand...
Click to collapse
The only one that would have any consequence of rooting is Samsung Pay.
xbt- said:
Root is 100%, absolutely necessary for using the phone. I cannot use any phone without it. Critical root-only capabilities:
full system backups (in twrp)
titanium backup
disable updates permanently (update ONLY when want to)
app freezers (app quarantine)
disable/remove bloatware
disable google play services/google play
automate/tasker
cf lumen
adblockers
wifi tether
busybox
superuser
ssh tunnel
update android to later version / install custom roms
optimize system
button mapper
custom theming / substratum
nav gestures
tidypanel
xposed
root explorer
app privacy customizations
3c all-in-one toolbox
more
Without root, the phone is unusable to me. I will never buy any phone without root capability. I am willing to go to different carriers just to get root on the device, or go to different manufacturers if root is blocked. For example, I will never buy a huawei device - they are locked.
Click to expand...
Click to collapse
can you carrier /network unlock with the root >?
NickosD said:
Tbh root is not needed, unless you want to use a custom rom. Most things are already in the android now.
Click to expand...
Click to collapse
No, even if you wanna use custom rom you don't need to root. Just pick the rom with the apps you want or just use the gapps packages you want, if want essential to work gapps then use pico or nano. If there is still something you want to remove and the romdoesn't allow, just use adb shell commands and thats it. Less issues with banks not working because of Magisk (root). I know Magisk has a feature to hide itself, change its name but depending on the app, the libs can be found and know that is Magisk, so for security purposes some apps don't work and some aren't even shown in the Google Play Store just because you rooted the device.
logandavid said:
maybe now the root is not needed but later down the road when your phone will get obsolete and newer android OS updates will be halted for S10+ then you'll be more attracted towards custom roms. Actually it is just personal preference.
Click to expand...
Click to collapse
It's happening right now, I doubt S10+ will receive Android 13 and now just security and bug fix updates are being shipped by Samsung.
Haknor said:
It's happening right now, I doubt S10+ will receive Android 13 and now just security and bug fix updates are being shipped by Samsung.
Click to expand...
Click to collapse
It won't get any new Android upgrades AFAIK.
But appart from tripping knox, what else do I lose if I unlock my bootloader? I read once, quite a while ago, that the battery is limited to 80% of its full capacity. Is that true?
io_gh0st said:
It won't get any new Android upgrades AFAIK.
But appart from tripping knox, what else do I lose if I unlock my bootloader? I read once, quite a while ago, that the battery is limited to 80% of its full capacity. Is that true?
Click to expand...
Click to collapse
Depending on the version, you'll notice stock camera to be limited or not work as expected, secure folder, dual messenger either not working, it can trigger some banks or payment apps (especially if you root), no more ota updates (if you keep using stock rom), drm content can stop working, samsung pay, Play Store might limited the apps you see and so on... Not sure about the battery, for me unlocking the bootloader and switching to another rom made my battery last more than stock, but it depends on the rom, the device, it's not a rule of thumb.
Can i modify my g988u from verizon in anyway? And if so how? Im new to this kind of stuff. I know i should probably leave verizon
You might be able to disable some packages with ADB , but beyond that, if your phone has been receiving OTA updates, it's likely hopeless. Substantial customization requires root, and that is precluded by locked bootloaders. There are paid services that can unlock bootloaders in S20s with older software, but my understanding is this isn't an option for devices with newer software
I actually just switched to Verizon, entirely motivated by AT&T's hostiliity towards most unlocked devices (that they don't sell). So, if you leave, who are you going to go to? T-Mobile is the most permissive of the big 3, but tends to lag in infrastructure.
Right didnt even look into that. Probably going to stay with verizon now that ya said that lol. Just curious What do people get out of from rooting their phone? I want to learn how and dont know where to start.
CainD5 said:
Right didnt even look into that. Probably going to stay with verizon now that ya said that lol. Just curious What do people get out of from rooting their phone? I want to learn how and dont know where to start.
Click to expand...
Click to collapse
A lot. Android phones have come a long way in past decade and change that they have been available, but root access, which is typically associated with at least an unlocked bootloader and possibly also a custom ROM, remains the single most powerful customization tool. A short non-exhaustive list of what you can do:
Use Magisk (See Magisk Module Repo for ideas of capabilties).
Use EdXposed or LSPosed (See Xposed Module Repo for ideas of capabilities).
Install a custom kernel (natively mount CIFS/NFS filesystems, overclock your device, and all sorts of other options).
Permanently debloat your ROM (survives hard reset).
Enjoy the best ad blocking experience.
View/backup/edit private application data.
There are also downsides to root, such as tripping the warranty void bit (and disabling Knox-related functionality like Samsung Pay, likely losing filesystem encryption, and greatly increasing your odds of a malware infestation. That said, the XDA site is largely powered by the modding/root access community, so those risks aren't discussed much.
(Please don't vote before reading the whole thread!)
I have recently acquired a second hand A52s, and I'm looking into rooting it as well as it's drawbacks.
The phone's Knox Warrany Bit is not triggered yet, so I'm looking for some advice on wheter I should cross the rooting Rubicon, or if going with an unrooted phone is sufficient for my threat model.
My percieved threats are as follows:
- Security: I want total security should anyone get a hold of my phone, even if they have advanced tools. I know in older android versions the whole partition could be encrypted so that no-one could access any of the data without the password if the phone was turned off. However in the current Android 13 I haven't found a way to do this.
- Privacy: I want some control over what information corporations are getting about me. I wouldn't consider going as far as to disable Google Play Services, but some level of control would be preferable.
- Anonymity: I want to be able to hide my identity occasionally. Tor will mostly take care of my needs, but having multiple cloned social media apps is desired too.
- Usability: I want to get rid of the useless bloatware Samsung and Google include in the stock android. Extending battery life would be preferable too. I also have a Samsung Galaxy Watch5 and I would like to use it's ECG feature.
From this arrises the question: Is rooting what I'm looking for? Will rooting negatively impact my security should anyone take my phone and plug it into a computer (can the bootloader be re-locked after rooting)? Are there any other drawbacks specific to this model that I should be aware of (camera, Samsung vendor apps, etc)?
cluckduck said:
- Security: I want total security should anyone get a hold of my phone, even if they have advanced tools. I know in older android versions the whole partition could be encrypted so that no-one could access any of the data without the password if the phone was turned off. However in the current Android 13 I haven't found a way to do this.
Click to expand...
Click to collapse
Recent Android versions automatically encrypt your data partition, so doing it manually is kinda not needed.
cluckduck said:
- Privacy: I want some control over what information corporations are getting about me. I wouldn't consider going as far as to disable Google Play Services, but some level of control would be preferable.
Click to expand...
Click to collapse
The latest Android version (13) has been getting better at limiting what access your apps get like location. I think by default all apps have no permissions until you manually give it to them so I think you should be good here.
cluckduck said:
- Anonymity: I want to be able to hide my identity occasionally. Tor will mostly take care of my needs, but having multiple cloned social media apps is desired too.
Click to expand...
Click to collapse
Secure Folder is a good option to do this. It sandboxes an environment that has all accounts (including Google's) unlinked so I think this is a good option
cluckduck said:
- Usability: I want to get rid of the useless bloatware Samsung and Google include in the stock android. Extending battery life would be preferable too. I also have a Samsung Galaxy Watch5 and I would like to use it's ECG feature.
Click to expand...
Click to collapse
You can debloat with adb commands without an issue
cluckduck said:
From this arrises the question: Is rooting what I'm looking for? Will rooting negatively impact my security should anyone take my phone and plug it into a computer (can the bootloader be re-locked after rooting)? Are there any other drawbacks specific to this model that I should be aware of (camera, Samsung vendor apps, etc)?
Click to expand...
Click to collapse
You're covered with stock, no need to root imo.
What root apps are you going to use? I just root my alt phone for the sake of adblocking and revanced.
chocowilliam said:
What root apps are you going to use? I just root my alt phone for the sake of adblocking and revanced.
Click to expand...
Click to collapse
I hadn't considered that those aren't an option without a rooted phone. I might consider rooting just for these.
No root ! Benefits are much under android native functionality at least on latest android OS . More then that is considerably sure to brake , bootloop , freeze etc the system , lack of system updates , loose garanty , not mentioning the bank payments which are blocked by the safety permissions . Long time ago on android 5...6...7 root was for fun and improvement the system apk and battery but now I don't see the point .... Regarding the tracking features , you can minimize this but not eliminate cause of Google policy
muppetz said:
No root ! Benefits are much under android native functionality at least on latest android OS . More then that is considerably sure to brake , bootloop , freeze etc the system , lack of system updates , loose garanty , not mentioning the bank payments which are blocked by the safety permissions . Long time ago on android 5...6...7 root was for fun and improvement the system apk and battery but now I don't see the point .... Regarding the tracking features , you can minimize this but not eliminate cause of Google policy
Click to expand...
Click to collapse
Are you saying stock Android 13 won't receive OTA updates if it's rooted?
cluckduck said:
Are you saying stock Android 13 won't receive OTA updates if it's rooted?
Click to expand...
Click to collapse
Is not a rule but certainly there are some problems with manually update especially under major updates where you need to flash stock.img , then stock.img patched and so on . Somehow Magisk is not perfect , modules installed also so all the process will lead to a broken phone (maybe) .