Is there a security oriented ROM? - Redmi Note 8 Pro Questions & Answers

Hello,
I never unlocked or rooted my note 8 pro but I have security concerns after I found some odd behavior. I also have reasons to believe it's happening and experienced previous hacking. Is there any ROM that improve security, or that let you improve security by installing other apps (e.g. firewaill apps requiring root etc...).
Thanks

cliffreich said:
Hello,
I never unlocked or rooted my note 8 pro but I have security concerns after I found some odd behavior. I also have reasons to believe it's happening and experienced previous hacking. Is there any ROM that improve security, or that let you improve security by installing other apps (e.g. firewaill apps requiring root etc...).
Thanks
Click to expand...
Click to collapse
Generally I would recommend these alternatives:
CalyxOS
GrapheneOS
LineageOS
Resurrection Remix OS
/e/ Foundation
But as what I find there are really just two options for you:
Resurrection Remix OS​Resurrection Remix OS is an Android-based OS which focuses on security and stability. It is very customizable and contains many personalization options out-of-the-box. Uses so called OTA-updates which makes it very easy to update to new version and therefore enables you to always be up to date with security updates.
Read more: https://resurrectionremix.com/
/e/ FOUNDATION​/e/ is the “unGoogled” version of Android. It ships without any Google apps or Google services accessing your personal data. It has high compatibility for apps. It do automatically decipher the app code, so that you can see which and how many trackers are in the app. It also shows all the permissions the app is using and gives you an easy-to-read scoring for whether an app seems safe or not.
Read more: https://e.foundation/

TrulyPain said:
Generally I would recommend these alternatives:
CalyxOS
GrapheneOS
LineageOS
Resurrection Remix OS
/e/ Foundation
But as what I find there are really just two options for you:
Resurrection Remix OS​Resurrection Remix OS is an Android-based OS which focuses on security and stability. It is very customizable and contains many personalization options out-of-the-box. Uses so called OTA-updates which makes it very easy to update to new version and therefore enables you to always be up to date with security updates.
Read more: https://resurrectionremix.com/
Download for your device: https://sourceforge.net/projects/resurrectionremix-ten/files/ginkgo/
/e/ FOUNDATION​/e/ is the “unGoogled” version of Android. It ships without any Google apps or Google services accessing your personal data. It has high compatibility for apps. It do automatically decipher the app code, so that you can see which and how many trackers are in the app. It also shows all the permissions the app is using and gives you an easy-to-read scoring for whether an app seems safe or not.
Read more: https://e.foundation/
Installation instructions: https://doc.e.foundation/devices/ginkgo
Click to expand...
Click to collapse
It isn't ginkgo. It's begonia. And all are unofficial.

cliffreich said:
Hello,
I never unlocked or rooted my note 8 pro but I have security concerns after I found some odd behavior. I also have reasons to believe it's happening and experienced previous hacking. Is there any ROM that improve security, or that let you improve security by installing other apps (e.g. firewaill apps requiring root etc...).
Thanks
Click to expand...
Click to collapse
* Method 1
1/Backup your data
2/Unlock bootloader
3/Use Mi flash tools to flash (fastboot rom) and lock again
* Method 2
1/Backup your data
2/Bypass
3/Use SP flash tools to flash fastboot rom
Don't download random apps from Google Play Store and click on random links on Internet. And Miui is more security than other custom roms. It asks for permissions everytime you install apps or do anything (That make me sick and change to custom rom). So don't blame rom for your fault. Time to change your password and anything. If you dont use China phone, I suggest flash Indonesia rom for Miui Dialer + Gapps.

Related

Simple current ROM

What would be the best ROM to use that is as close to stock as possible but running android 7.1 or 8.1 etc.
I don't want or need any mods or custom features, just simple stable with maybe root.
jebise101 said:
What would be the best ROM to use that is as close to stock as possible but running android 7.1 or 8.1 etc.
I don't want or need any mods or custom features, just simple stable with maybe root.
Click to expand...
Click to collapse
The best, most current is LineageOS and here is yesterday's 20181208 build available. LOS provides a native root solution which you activate in the developer options. If you are concerned with privacy and battery drain, then either do not install the Gapps spyware at all, or install LineageOS for microG with great FOSS alternatives.
Please read more on the microG and on The NO GAPPS Initiative websites.
:good:
Currently using Lineage 14.1 microg (7.1.2). Not having google services really make the tablet excel in battery life. Currently getting 9+hours sot with youtube watching/reddit/twitter

looking for a good non-google custom rom.

hi everyone,
I have recently bought a mi max 3. Miui is far from my favourite however, and i am looking for a good non-google custom rom. There are so many choices for roms that i find it difficult to decide, and trying every single one seems a tedious task that is hardly worthwile. I have a week to decide, as xiaomi made me wait to unlock the bootloader. Obvious sidenote: I intend to root the device as well.
The custom rom i am looking for should support the following features (in order of importance)
- works without Gapps
- strong encryption (password different from lockscreen)
- decent battery performance (longer lasting battery has preference)
- fast and smooth (the more lightweight the better)
- gesture support (should be standard anyway (the screen is huge, i can't be bothered to reach for the navbar )
- due to rollback protection, it needs to be at least android pie/ android 10(?) - is it worth waiting for android 10 custom rom releases?
I know many of these requirements can be met by using apps as well, but if it is included or easier with the custom rom it certainly has my preference.
I am currently looking at:
- lineage OS (has been my driver for the past years)
- AEX
- Syberia OS
- evolution X
- havoc OS
- resurrection remix
additions are more than welcome
note: i assume TWRP recovery and Magisk for root are still decent options. if not, please let me know
Burningman92 said:
hi everyone,
I have recently bought a mi max 3. Miui is far from my favourite however, and i am looking for a good non-google custom rom. There are so many choices for roms that i find it difficult to decide, and trying every single one seems a tedious task that is hardly worthwile. I have a week to decide, as xiaomi made me wait to unlock the bootloader. Obvious sidenote: I intend to root the device as well.
The custom rom i am looking for should support the following features (in order of importance)
- works without Gapps
- strong encryption (password different from lockscreen)
- decent battery performance (longer lasting battery has preference)
- fast and smooth (the more lightweight the better)
- gesture support (should be standard anyway (the screen is huge, i can't be bothered to reach for the navbar )
- due to rollback protection, it needs to be at least android pie/ android 10(?) - is it worth waiting for android 10 custom rom releases?
I know many of these requirements can be met by using apps as well, but if it is included or easier with the custom rom it certainly has my preference.
I am currently looking at:
- lineage OS (has been my driver for the past years)
- AEX
- Syberia OS
- evolution X
- havoc OS
- resurrection remix
additions are more than welcome
note: i assume TWRP recovery and Magisk for root are still decent options. if not, please let me know
Click to expand...
Click to collapse
Don't worry about Anti Rollback because it's only for miui first.
Arb lvl need to be the same to rollback on miui but never go to an older one. But since a while on miui we're still on lvl 5.. but on custom ROM it's useless.
For root as always.
Unlock bootloader
Flash orange fox (only recovery supporting encryption)
Flash magisk
Reboot
And if I were you I'll try crdroid or aosip. On my side I'm the actual maintainer of aosio derpfest and stay on it since months. RR is a bit heavy and Cerberus is very clean if you want less. For those I build or builded... For the others Evolution x and havoc are very featured. And aex is lighter than oreo version if you already tried it in past.
You got others ROMs for that consider to join my channel @Nitrogencloud on telegram. Gismobe post more there than xda.
For nogapps just don't flash any gapps. Most of the ROM are provided without any
Regards
Sent from my MI MAX 3 using XDA Labs
Skyllery said:
Don't worry about Anti Rollback because it's only for miui first.
Arb lvl need to be the same to rollback on miui but never go to an older one. But since a while on miui we're still on lvl 5.. but on custom ROM it's useless.
For root as always.
Unlock bootloader
Flash orange fox (only recovery supporting encryption)
Flash magisk
Reboot
And if I were you I'll try crdroid or aosip. On my side I'm the actual maintainer of aosio derpfest and stay on it since months. RR is a bit heavy and Cerberus is very clean if you want less. For those I build or builded... For the others Evolution x and havoc are very featured. And aex is lighter than oreo version if you already tried it in past.
You got others ROMs for that consider to join my channel @Nitrogencloud on telegram. Gismobe post more there than xda.
For nogapps just don't flash any gapps. Most of the ROM are provided without any
Regards
Sent from my MI MAX 3 using XDA Labs
Click to expand...
Click to collapse
Thanks for the reply.
I got an error trying to check arb on my device, but if it does not matter for custom roms that's peachy af.
Q1: I remember encrypting my previous phone which had TWRP on it, that seemed to work fine. Did not know about orange fox previously, will look into that. How is Orange fox different from regular TWRP (specifically with encryption)?
Q2: In terms of built-in app permission control, how do cerberus, AEX, crdroid and aosip compare?
Q3: and (last question, promise) with regards to updates, I noticed aosip derpfest does not support ota updates, and crdroid seems to support ota. my previous experience with dirty flashing updates, is best summarized as: "chugging down coffee at midnight trying to unbrick my phone". Not looking forward to that -again, so i prefer the possibility of OTA updates. what would you recommend?
Thanks for your quick reply, appreciate it.

Question Installing Custom ROM on OnePlus 9 Pro / degoogled / Restore from Stock ROM

Hello everyone,
since my OnePlus 9 Pro doesn't work as fast as I expect, I'm wondering if installing a custom operating system would make it faster. I want degoogled phone, and I would like to be able to restore WhatsApp Chats from OxygenOS backup.
Which Custom ROM do you recommend? LineageOS?
Will Android be faster after installing Custom ROM and is it even necessary to install Custom ROM for speed? Or do you have a suggestion of what to do with OxygenOS to make it fast?
Thank you!
I would find a aosp rom most pute source if you want speed. Also if I were you I would use swift backup to save and restore my apps and data if going to other roms
toolhas4degrees, can you explain how can I do that? at least the first thing you mentioned?​
hello,
Long story short:
1. CustomRom: Carbon Rom because battery life is good but for bugs you need to check for yourself
Optional for Battery-Life improvement and issue tracking:
1. "MinMicroG" as a flashable option instead of Gapps ( Skip this if you don't want microG and use Google apps)
2. app "Warden" to analyize apps which are using "Trackers, Google Analytic Services and Ad services" (Some Apps are extreme battery hogs probably because of some Services, Receivers and Wakelocks as i recognized)
3. use app like Servicely or similiar to disable receivers and services (as mentioned above)
4. Use Gsam Battery Monitor for Wakelocks and an advanced battery-usage-Statistic
5. Tasker for Automation for turning things off like Wifi etc. (only for experienced or "willing to learn" users, not necessary)
Note: Custom Rom with MicroG support is needed for MicroG to work (CarbonRom, LineageOS)
Note: For OSS Backups i have no experience, normally Whatsapp makes a backup to Google Drive or atleast local on your phone.
@AndroiduserBlaze​If you need some guidance trough the mentioned procedures, i will try to guide you through.
Ps: if you are still OSS with all your data in place, you can backup and restore via Android Debug Bridge
Best Regard's
Alex1911
Is Carbon ROM faster than LineageOS?
It is difficult to say, I think CarbonRom and LineageOS are close up but not really similar.
I would prefer CarbonRom (android 11) because you can customize your experience a little bit more than LineageOS. I have ran and still run CarbonRom with issues of course but a battery life way better then OSS in my experience.
The other Customroms with Android 12 are not really stable.
I had similar problem with my Huawei P8 LITE 2017 PRALX1, since the last emui update my phone was slow and soft crashing every time and battery wouldnt last long (screen turns black and i'm back at the unlock screen) so I decided to at least try to fix it, after somes adventures I unlocked the bootloader and installed LineageOS 17.1 with android 10 (recent version dont work very well yet, think it comes from the kernel)
My phone was running as new, battery was lot more better, and everything worked except the back camera, I think I broke it when I was opening the phone (tbh not a big deal since I never use cameras anyways)
I opted for LineageOS though. Can anyone tell me how to restore WhatsApp (because it is the only application I want to restore) on the newly installed Custom ROM? Can this chat database be found in Google's drive and just copied to the new Whatsapp on LineageOS?
Thanks in advance!
Can someone tell me why this error appears by trying to flash LinegeOS;
"error: cannot load 'lineage-18.1-20220308-recovery-lemonadep.img': No such file or directory"? Where do I need to put the image file so that he recognise it? I use linux
EDIT: I got it. Problem solved. I just gone into the Downloads folder where I downloaded the image file. Now I´m trying out my new LineageOS ond my One Plus 9 Pro

CALYX - Graphene - /e/

What is the best choice for the pixel 2 xl??? , i was reading about 3 different rooms that try to focus on user privacy and security. I don't need google apps, i love lineage but seems more for customize and get the last android version.
Graphene seems not longer mantained ...... so there are not many choices ......
Any advice???
Graphene --> No support yet
CalyxOS --> Maybe not updates anymore, maybe with the efforts of porting Android 12 but reading documentations seems depends of an old kernel. Bootloader relock is great and default apps are greats, microg has problems with some apps.
/E/ --> Seems active support but not bootloader relock.

How To Guide A Complete Guide to Unlocking and Flashing for the A52s 5G.

Disclaimer​
Your warranty will be void
Some carriers' Terms of Service prohibit device modifications
Modifying will trip Samsung Knox and SafetyNet, so be aware that some apps will cease to work
I AM NOT RESPONSIBLE FOR BRICKED DEVICES, FAILED ATTEMPTS AND OTHER CAUSES OF IMPROPER USAGE OF THIS GUIDE!​Now that we got that out of the way, we can continue.
Unlocking the Bootloader​UNLOCKING THE BOOTLOADER WILL ERASE ALL OF YOUR DATA!​
Go into Settings > About Phone > Software Information
Find Build Number and quickly tap it 7 times. This will enable Developer Options
Find OEM Unlocking and USB Debugging options and enable them
Turn off the phone
Hold Volume Up and Volume Down while connecting your phone to a PC to boot into Download Mode
Read the Warning carefully to understand it and then if you want to continue press Volume Up
On the Unlock Bootloader screen, press and hold the Volume Up button one more time (This is the step that erases all of your data, if you don't want to do it, now is the time to turn back!)
After the automatic reboot, repeat steps 1. - 3. and make sure that OEM Unlocking is greyed out and enabled
Congratulations! You bootloader is now unlocked.
Flashing a Custom Recovery​Credit to @BlackMesa123 for this guide.
Rooting your Phone​
Download the latest version of Magisk on your Computer
Follow the Official Installation Guide from Magisk developers
Flashing a GSI (Generic System Image)​
Choose a GSI from this List
Power Off your phone and connect it to your Computer
Hold Volume Up and Power buttons, after the logo appears, release only the Power button, this will boot you into TWRP
Do a Wipe and transfer the GSI file from you Computer to your Phone
Click Install >Image Flashing, find your transferred GSI file and tap on it.
Toggle the System Image option and flash the file.
After flashing Format Data to be able to boot into your new System.
I know your Camera doesn't work, don't worry check out this Post to get it to work again.
Useful Resources​
A52s bootloader/modem collection repository
OrangeFox Recovery
SafetyNet Fix for Magisk (Zygisk)
Custom ROMs: RayOS (One UI 4.1), NcX (One UI 5.0)
Mesa's Custom Kernel
Credit to @BlackMesa123 @Ryzen5950XT @ShaDisNX255 for the additional resources.
That's it! Thank you for following the guide and enjoy your unlocked Samsung.
This is very helpful thanks
Thank you for the guide. Here's some additional resources/changes that can be added in the post:
- A52s bootloader/modem collection repository
- OrangeFox Custom Recovery, same as TWRP but with a different UI
- SafetyNet and (some) Knox features can still work with the correct adjustments. See the SafetyNet fix for Magisk (Zygisk) or custom ROM's such as RayOS (One UI 4.1), NcX (One UI 5.0)
- Mesa's Custom Kernel, greatly improves device's performance
Hoping to see the list enhanced soon.
BlackMesa123 said:
Thank you for the guide. Here's some additional resources/changes that can be added in the post:
- A52s bootloader/modem collection repository
- OrangeFox Custom Recovery, same as TWRP but with a different UI
- SafetyNet and (some) Knox features can still work with the correct adjustments. See the SafetyNet fix for Magisk (Zygisk) or custom ROM's such as RayOS (One UI 4.1), NcX (One UI 5.0)
- Mesa's Custom Kernel, greatly improves device's performance
Hoping to see the list enhanced soon.
Click to expand...
Click to collapse
Thank you for the links, thread is now updated.
Quick question, with MCK, should I wipe everything before/after flashing and will it work with PE+ GSI?
kzyx said:
Thank you for the links, thread is now updated.
Quick question, with MCK, should I wipe everything before/after flashing and will it work with PE+ GSI?
Click to expand...
Click to collapse
You shouldn’t wipe anything when flashing the kernel. If the stock kernel works fine, I don’t see why mine shouldn’t
Everything is working perfectly, thanks for the guide. I installed the PixelExperience GSI but for some reason Fingerprint sensor is not working. The process is stuck on "Touch the sensor" and the sensor is not lighting up. Yes, I set the color of fingerprint sensor to White (and even tried all other colors).
I even have the following options checked
- Enable Extra Sensor
- Enable workaround for broken fingerprint sensor
- Enable workaround for white-ish screen
Any help will be appreciated, thanks.
Mian-786 said:
Everything is working perfectly, thanks for the guide. I installed the PixelExperience GSI but for some reason Fingerprint sensor is not working. The process is stuck on "Touch the sensor" and the sensor is not lighting up. Yes, I set the color of fingerprint sensor to White (and even tried all other colors).
I even have the following options checked
- Enable Extra Sensor
- Enable workaround for broken fingerprint sensor
- Enable workaround for white-ish screen
Any help will be appreciated, thanks.
Click to expand...
Click to collapse
I don't know what could be the issue, maybe try to google or try disabling and enabling the fingerprint lock again.
I have tried few GSI Roms. Here is my summary:
Android 13
- AOSP, Android 13, No image with GAPPs pre-installed and cannot seem to install it. Tried NikGAPPs, and LiteGAPPs, both didn't work
- Google GSI, Android 13, same issue
- Pixel Experience, Android 13, GAPPs pre-installed but Fingerprint sensor won't get detected.
Android 12
- AOSP, Android 12, GAPPs pre-installed, Fingerprint sensor detected (changing color to white). Will stick to it unless there is an issue detected.
Mian-786 said:
I have tried few GSI Roms. Here is my summary:
Android 13
- AOSP, Android 13, No image with GAPPs pre-installed and cannot seem to install it. Tried NikGAPPs, and LiteGAPPs, both didn't work
- Google GSI, Android 13, same issue
- Pixel Experience, Android 13, GAPPs pre-installed but Fingerprint sensor won't get detected.
Android 12
- AOSP, Android 12, GAPPs pre-installed, Fingerprint sensor detected (changing color to white). Will stick to it unless there is an issue detected.
Click to expand...
Click to collapse
Thanks for the feedback, have you tried any ROMs instead of GSIs?
You have links for them in this thread.
kzyx said:
Thanks for the feedback, have you tried any ROMs instead of GSIs?
You have links for them in this thread.
Click to expand...
Click to collapse
Nope, I tried to find a good custom rom for A52s but couldn't find any.
What about volte and hotspot on GSI pixel experience 13?
Mian-786 said:
I have tried few GSI Roms. Here is my summary:
Android 13
- AOSP, Android 13, No image with GAPPs pre-installed and cannot seem to install it. Tried NikGAPPs, and LiteGAPPs, both didn't work
- Google GSI, Android 13, same issue
- Pixel Experience, Android 13, GAPPs pre-installed but Fingerprint sensor won't get detected.
Android 12
- AOSP, Android 12, GAPPs pre-installed, Fingerprint sensor detected (changing color to white). Will stick to it unless there is an issue detected.
Click to expand...
Click to collapse
Thanks for your summary,
Is there any experience with MicroG on this device with AOSP 13?
7slaper said:
Thanks for your summary,
I'm on AOSP 13 now, but perhabs it's better to go back to 12. I'm very interested in the AOSP with the GAPPs pre-installed. Could you share a link to the file?
Click to expand...
Click to collapse
I got the image from AOSP under the official Android 12/12L section. You can find release here. The exact image I got is the system-squeak-arm64-ab-vndklite-gapps-secure.img.xz one since the standard gapps one came with an app called "superuser" which I couldn't seem to uninstall (I tried the scripts to remove supersu). This caused my banking apps to not run. That is why I installed the "secure" one and then installed Magisk and added my banking apps to the defylist.
Zhazhael said:
What about volte and hotspot on GSI pixel experience 13?
Click to expand...
Click to collapse
I think VoLTE was available as an option in one of the ROM I tested but I don't remember exactly. Currently AOSP 12 doesn't support it. Hotspot worked on every ROM just fine.
Mian-786 said:
I got the image from AOSP under the official Android 12/12L section. You can find release here. The exact image I got is the system-squeak-arm64-ab-vndklite-gapps-secure.img.xz one since the standard gapps one came with an app called "superuser" which I couldn't seem to uninstall (I tried the scripts to remove supersu). This caused my banking apps to not run. That is why I installed the "secure" one and then installed Magisk and added my banking apps to the defylist.
Click to expand...
Click to collapse
Hi Mian,
Thanks for your response. When I typed my question I realized that in the end I want to have and de-googled phone. So I changed my question in the direction of MicroG. I didn't expect you to be so quick with answering.
7slaper said:
Hi Mian,
Thanks for your response. When I typed my question I realized that in the end I want to have and de-googled phone. So I changed my question in the direction of MicroG. I didn't expect you to be so quick with answering.
Click to expand...
Click to collapse
I haven't tried MicroG in any of the ROM. I just to have as little Google apps as possible but if you do find a good guide, let me know, I will try to use a de-googled phone.
Thx, all worked.
Mian-786 said:
I haven't tried MicroG in any of the ROM. I just to have as little Google apps as possible but if you do find a good guide, let me know, I will try to use a de-googled phone.
Click to expand...
Click to collapse
I've installed MicroG. But it seems AOSP doen't allaw support system spoofs signature. Play services (GmsCore) is installed but without the spoofed signature it can't do much I guess...
I have been using AOSP Android 12 for the past week or so. Most of the things just plain works but somethings don't. Here is the list of things that are not working so you can decide if the hassle of installing GSI is worth it or not.
- Proximity Sensor is worse than it was in OneUI. Yes, it is a virtual sensor but on OneUI, it worked better. Now, it is worse. More often than not, it turns on the screen during the call. It would have been better if it simply didn't work.
- The viewport of default camera App in the AOSP displays picture in 4:3 but the camera hardware is giving out 16:9, so the viewport was squeezed. After installing GCam everything is good.
- Fingerprint Sensor simply doesn't work in-app like those in banking apps. It works on the lock screen but nowhere else.
- USB Audio Devices don't work. I have a USB-C to A OTG where I used to insert my headphones. On OneUI they used to work but here they don't. Storage devices work.
- 120 Hz felt smoother on OneUI.
Hello everyone
I managed to install LineageOS with working GApps and camera using this guide, so a big thanks to everyone who worked on flashing this phone
If anyone wants to install it, you need to:
Chose a bgN package (I installed this one : https://sourceforge.net/projects/an...UNOFFICIAL-arm64_bgN-vndklite.img.xz/download). It includes the GApps. You won't be able to install GApps after installing a vanilla (bvS / bvN) package. For some reasons, the /system partition is too small.
For unlocking camera and install magisk, just flash this kernel : https://forum.xda-developers.com/t/kernel-12-13-a528b-n-mesas-custom-kernel-r4.4490653/
I also installed magiskhide prop conf module, but I'm not sure it changed anything and the camera fix was probably already in the MCK. You can find it here anyway : https://forum.xda-developers.com/t/...safetynet-prop-edits-and-more-v6-1-2.3789228/

Categories

Resources