[Q] Best privacy rom/kernel - Galaxy Note GT-N7000 Q&A, Help & Troubleshooting

Hi everybody!
Among so many stock and custom roms and kernels, which would you recommend as the best one from the point of view of securing privacy, i.e giving best protection against rootkits like Carrier IQ, Google rootkits or any unauthorised intrusion?
Any good hint will be highly appreciated, thank you!

All roms/ kernel are vulnerable to such attacks. If you're afraid it's probably better not to root your phone. But then, without root access you cannot use LBE to control the rights your apps are granted. Maybe best tipp is to use common sense, don't use cracked software, do not click on anything only because it's shiny, don't download from dubious sources... And in the end I would also say that the threat malicious software poses to smartphones isn't that big. Use common sense and a good anti virus software and you should be fine.
Sent from my Galaxy Note running ICS

altae said:
All roms/ kernel are vulnerable to such attacks. If you're afraid it's probably better not to root your phone. But then, without root access you cannot use LBE to control the rights your apps are granted. Maybe best tipp is to use common sense, don't use cracked software, do not click on anything only because it's shiny, don't download from dubious sources... And in the end I would also say that the threat malicious software poses to smartphones isn't that big. Use common sense and a good anti virus software and you should be fine.
Sent from my Galaxy Note running ICS
Click to expand...
Click to collapse
Thank you altae! I was mainly refering to rootkits installed on purpose by the manufacturer on the (phone) carrier's request (CIQ) or on Google request that installing illegit software recording every move on the phone and sending the information back home via internet. There were a lot of discussions on this topic in the press between December 2011 and March 2012, I'm sure that you've read about that. But I have no idea on how serious this threat is or if it is still going on. Therefore I am looking for a safe rom from the privacy point of view. Other threats can be solved with an antivirus probably.

Related

New Member / New User questions

Hi all
I am reasonably versed in computers, having read Electronic Engineering at uni, but haven't dabbled with unix (Andriod's base O/S?) since - a decade ago.
This is also my first smartphone, as my aging work BB is no good for personal email etc.
I therefore have a range of questions, that I could not find the answer to in the main thread that gregbradley runs or on the next 5 pages of threads. These questions range from the very basic, so please forgive me!
how do you stop free apps installing their advertising engines, or at least access the same information that you permit the app to access (I remember reading privacy issues related to this)
apart from allowing you to tinker with the phone what is the benefit of rooting (which I assme means gaining admin access df. unix)
what are the additional features on the xperia t of the popular customer ROMS and do they alway require rooting to apply?
If you have to apply an earlier firmware to be able to root the phone, what are you loosing (does Sony publish a changelog?) and sure firmware updates tend to be a good thing, so isn't this a problem?
So firstly, is there some documentation I should be reading:
a) about basic good practice on an andriod phone?
b) about the benefits of custom roms
c) about the benefits of rooting, apart from being about to install custom roms?
d) about what are the most common alternative settings ppl make to a stock Xperia T?
many thanks,
icstm
icstm said:
Hi all
I am reasonably versed in computers, having read Electronic Engineering at uni, but haven't dabbled with unix (Andriod's base O/S?) since - a decade ago.
This is also my first smartphone, as my aging work BB is no good for personal email etc.
I therefore have a range of questions, that I could not find the answer to in the main thread that gregbradley runs or on the next 5 pages of threads. These questions range from the very basic, so please forgive me!
how do you stop free apps installing their advertising engines, or at least access the same information that you permit the app to access (I remember reading privacy issues related to this)
apart from allowing you to tinker with the phone what is the benefit of rooting (which I assme means gaining admin access df. unix)
what are the additional features on the xperia t of the popular customer ROMS and do they alway require rooting to apply?
If you have to apply an earlier firmware to be able to root the phone, what are you loosing (does Sony publish a changelog?) and sure firmware updates tend to be a good thing, so isn't this a problem?
So firstly, is there some documentation I should be reading:
a) about basic good practice on an andriod phone?
b) about the benefits of custom roms
c) about the benefits of rooting, apart from being about to install custom roms?
d) about what are the most common alternative settings ppl make to a stock Xperia T?
many thanks,
icstm
Click to expand...
Click to collapse
1) You must root the phone and install an add blocker
2) A vast amount of extra access that allows you to uninstall unwanted bloatware and generally customise your phone as you want.
3) Custom roms need at least root privilage and a recovery installed. Some roms require an unlocked bootloader as they need a custom kernel to work.
4) After downgrading to root, you can upgrade and keep root, there are plenty of threads about it
The best place to start reading is the all in one thread, its the very first thread in the Q&A section. Posts 2 and 3 explain all you need to know. If you need any further questions answering please ask in that thread.
Greg
EDIT, Just read that you have already seen my thread. Please feel free to ask in that thread if anything is not clear, however, you can also use the search function in order to find answers. Its nice to see new users and people here will be happy to help, especially as you seem to know to ask questions in the Q&A thread, unlike many others
Mental (and virtual) note: post excessive answer tomorrow after a good nights sleep and clear things up which greg did not fully answer, as I think.
Piece of cake.
@schaggo
looking forward to it! :fingers-crossed:
icstm said:
...unix (Andriod's base O/S?)
Click to expand...
Click to collapse
Kernel (and some ported tools) only, but of course the philosophy behind the thing. Yes.
how do you stop free apps installing their advertising engines, or at least access the same information that you permit the app to access (I remember reading privacy issues related to this)
Click to expand...
Click to collapse
Theres a couple of ad providers which apps use to display in-app ads. If there's no free version as in freely free, that's the distribution model a dev choses. Either pay and give the dev a compensation, or use the free ad-supported version from where the dev gets compensation. If you're not ok with either of the latter two, then most common ad providers can be blocked by using a modified hosts file, redirecting server requests for known ad-providers servers to the local loop. You need root access to your device to do that though. More on that later.
apart from allowing you to tinker with the phone what is the benefit of rooting (which I assme means gaining admin access df. unix)
Click to expand...
Click to collapse
Rooting your device is not strictly comparable in running your desktop box with root. Yes, it's running (certain) stuff with superuser rights, but that's not exactly the point. Rooting basically means - among other things - obtaining write access to the otherwise user-inaccessible system partitions (/system, /data et al.) and mess around with them. This is needed for certain things a user might wants to do, sneaking in a modified hosts file, for example. I don't know what you'd describe as "tinker" but I guess yes, tinker it is.
what are the additional features on the xperia t of the popular customer ROMS and do they alway require rooting to apply?
Click to expand...
Click to collapse
It's usually the same as with every other device: basically theres modified stock ROMs or "real" custom ROMs. The first being for example slimmed down ROMs, with "useless" manufacturer or telco provider added junk-/crap-/adware and -services. Then theres "enhanced" stock based ROMs with added or modified stuff. Instead of 5 notification area toggles you can have up to 14, freely modifiable toggles. Or skin and theme the user interface, or use modified kernels with support for additional services or so. And then there's the "real" custom ROMs which you'll find under "Original Android Development". This is user generated code which you'll find in AOSP or Cyanogenmod ROMs. These kind of ROMs do not base on stock code at all, except for the parts which are highly device specific as closed-source device driver blobs etc, but the system as such is completely open source, comparable to how the Linux/Unix universe works. The benefit of such ROMs is usually that they are quite "barebones" and as such perform much better in terms of interface fluidity etc. But you may miss out on cool manufacturer added stuff specifically tailored for the device at hand, if theres no compatible open source alternative. A great example for this is the Samsung Galaxy Note: the S-Pen is supported in Cyanogenmod, but there's cool S-Pen features CM cant offer, you'll only find them in Samsungs stock ROM. You may find a comparable analogy for the Xperia T, or any other device.
If you have to apply an earlier firmware to be able to root the phone, what are you loosing (does Sony publish a changelog?) and sure firmware updates tend to be a good thing, so isn't this a problem?
Click to expand...
Click to collapse
There's no detailed changelog for stock firmware updates. This is the case for most if not all manufacturers. Samsung doesn't release a changelog at all, for example. And updates can be a good thing, or a bad thing. A good thing is added functionality, a bad thing is closing an exploit to root the device, for example. You get the idea.
For the device at hand: there's no big differences between .3.195 and 3.223 or even the "old" .1.303 (or so) so in case you want root but not unlock your device, go ahead, you won't lose much especially if you don't know about it
d) about what are the most common alternative settings ppl make to a stock Xperia T?
Click to expand...
Click to collapse
Well, modern mobile operating systems offer a ton of settings to play around with, you'll find [number of users]*[number of features]^(numbers of features) of recommendations regarding best settings. Basically it's always the same: the more you do, the more you try to get out of your device, the higher the energy consumption will be, the shorter your battery time will be. Apply some common sense and you'll find your own best settings. Probably not what you wanted to hear, but, well, that's the way it works

No more root after 4.3......????

Just curious who saw these posts on Google+ the other day. Lets discuss.
Steve Kondik - 22 hours ago
The Death of Root
Android 4.3 introduces some new and much needed security features which not only restrict setuid binaries on the system partition (su), but also limit the capabilities of processes. In the current architecture, even if you could get elevated privileges, you can't do anything out of the ordinary. Root in the shell via ADB is all I use, and it still works just fine.
This isn't a problem for me, since I use CM. When there is a situation that I'd need root, I just modify the system to accomodate what I'm trying to accomplish in a secure way. I can understand the desire to have full root on stock ROMs, since you're severely limited in what you can do and there is no provision for making any sort of real changes or improving the architecture.
+Koushik Dutta and +Chainfire are working hard to permit root in some way on 4.3, but I feel that anything done at this point might severely compromise the security of the system and we should start considering better options. Going forward, I'm interested in building framework extensions and APIs into CM to continue to abolish the root requirement.
A few good use cases for root are:
* Firewalls and network software, potentially requiring raw sockets.
* Managing the DNS resolver
* Tweaking various sysfs nodes to control the kernel
All of these can be done without exposing root, and they can be done in a very secure way.
If you're using CM or another custom ROM, what do you actually use root for?
Brought to you by Sprint and the letters GS and the number 4
Steve Kondik - 21 hours ago
An example to go with my previous post on root..
Let's say that I wanted to write an application that would let me block or rate limit network access for other applications. Seems easy, just run "iptables" as root and add some firewall rules. Calling "su iptables ...." and managing the list is easy. The harder, but much better way would be to extend the framework. This also has the side effect of opening this up for other developers to use.
To do this, you need two things:
1. A way to add the rules (which requires root)
2. An API to add the rules
3. Access control to this API
All Android systems run a daemon, "netd", which runs as root and manages various aspects of the network such as tethering and traffic shaping. The framework has a service, appropriately named "NetworkManagementService" which communicates with netd using a simple protocol over a socket. Applications with the right permissions can get a handle to this service using Binder, and control the network without actually needing root.
So to build a firewall API, it's really easy. You put the pieces that require elevated privileges into netd, then add a few methods to the NMS such as "addRule", "deleteRule", and "listRules". You can create and enforce a new permission, "android.permission.MODIFY_FIREWALL_STATE" that applications would require. You can even pop up a "scary" dialog similar to the newish VPNService when something needs it.
Then of course you upload your patches to the CM Gerrit, we iterate a bit, and ship it. If it turns out to be insanely useful, maybe it will go to Android proper.
Now you can write your app and a whole new class of applications that you couldn't do without using the root sledgehammer before. Yeah, it's harder, and you need to learn the system architecture a bit, but the result is much better and more importantly it's not a gaping security hole.
Of course it's possible to write malware that mirrors all of your packets to a remote site without your knowledge using this API, but Android's VPNService is actually more suited to this and it's already part of the framework
I might be exploiting this as an opportunity to sell the ideas behind CM, but I think it's a powerful concept. If your app needs to do something that normally can't be done, you can easily bend the system to your will and do it right.
If it not more root on 4,3 we keep what we got and add
Sent from my SPH-L720 using xda premium
http://forum.xda-developers.com/showthread.php?t=2376881
I have a nexus 7 and the 4.3 update has already been rooted
Sent from my SPH-L720 using Tapatalk 4 Beta
Did you guys read the article or just the title.
Brought to you by Sprint and the letters GS and the number 4
Why? Are the two not related? Or is the title misleading?
Sent from my SCH-I535 using Tapatalk 2
Probably because the title says AFTER 4.3
I'm no dev, but I have very little attachment to root. I am required to have it if I want to be able to flash ROM's or custom recoveries or mods or what-have-you, but if all of those things could be accomplished without root, I would do it. The reason its so exploited in the dev community is that there is no other framework to do the things they want to do.
If however they were to work with major devs (like Kondik mentions CM) on expanding frameworks to make ROM's and whatnot take without needing root, I would have no problem with it. Hell, I'd welcome losing the step on every new phone of having to master a new rooting technique. It would also make me contemplate trying an HTC phone, as rooting the EVO 3D put an inordinately bad taste in my mouth.
mattkane21 said:
would also make me contemplate trying an HTC phone, as rooting the EVO 3D put an inordinately bad taste in my mouth.
Click to expand...
Click to collapse
+1. That phone was such an unbelievable pain in the a$$. The whole process took forever, with the HTC dev unlock and ridiculous "wire trick" to achieve s-off in order to flash custom kernels. Then, once that crap was all done, always having to think about what hboot you're using with what rom. Especially for someone like me who's constantly switching between stock and AOSP, having to flash another hboot all the time is such a freaking hassle. The ironic part is that there are tons of great roms for that phone.
Sent from my SPH-L720 using xda premium
So jn essence what this is saying is after 4.3 there will be no need for root yet we will still have all the benefits of root?
Am I reading this correctly?
shawn1224 said:
So jn essence what this is saying is after 4.3 there will be no need for root yet we will still have all the benefits of root?
Am I reading this correctly?
Click to expand...
Click to collapse
Yes in a way. It is kind of looking at a different integration of what is possible without needing root, or why would we really need root when running something like CM. And with the new security features rooting might make your device unsecured.
Brought to you by Sprint and the letters GS and the number 4
Ok cool but would this also pertain to standalone mods/extension or are you talkin code baked into CM only
Sent from my iPhone using Tapatalk 2
shawn1224 said:
Ok cool but would this also pertain to standalone mods/extension or are you talkin code baked into CM only
Sent from my iPhone using Tapatalk 2
Click to expand...
Click to collapse
Well, it would work for pretty much any ROM,or could. He is the founder of CM so he talks about it. Many ROMs use CM as a base and build off it though, almost all AOSP ROMs do.
Brought to you by Sprint and the letters GS and the number 4

Hoping to help get root at least

Here are some files I found if there is a specific directory you need to see I'll try to get access to it all you need to do is post the dir here
https://drive.google.com/file/d/0B-k10MX8t9TXN0lsSGpteFRBQnc/view?usp=docslist_api
Best of luck! We T-Mobile S7 owners are crossing our fingers.
Adaway will make this phone perfect.
I've rooted every phone I've had, there's always been a reason I needed it. I got to say though, I can't find an everyday reason to really need it on my edge.
Kris
FatKris said:
I've rooted every phone I've had, there's always been a reason I needed it. I got to say though, I can't find an everyday reason to really need it on my edge.
Kris
Click to expand...
Click to collapse
So you don't want freedom so you don't want Xposed via flashfire so you don't want Titanium Backup those are just some things I need root for idk about you but even if I didn't need those things I would still do it just because I can.....
Ghost Dragon said:
So you don't want freedom so you don't want Xposed via flashfire so you don't want Titanium Backup those are just some things I need root for idk about you but even if I didn't need those things I would still do it just because I can.....
Click to expand...
Click to collapse
I think there's pros and cons to everything...
I love rooting, always have but this is the first time in a long time that I can't root and it's actually not so bad.
Granted I'd love to be able to installing ROMs, remove ads and bloat and have all these tweaks and tricks but it's sort of like... been there, done that.
If you root your phone now, you can NEVER use Samsung Pay... EVER on your device. Even if you restore stock firmware. That's actually a big issue now with mobile payments being a common thing.
I kind of like having my phone much more secure and safe to do important financial transactions and access important accounts (just like I do on my iPhone) without fear of lax security while using rooted/custom software.
I think moving into the future, flagship phones like Samsung's Galaxy line(s) won't risk bad press or the potential for bad press by allowing the modding community to easily gain root access and customize their software.
They have more to lose than gain by doing that, especially with their rivalry with Apple being so neck and neck now.
I think people like us on XDA who love rooting will have to purchase devices from up and coming OEMs if we still want to root, either that or Nexus devices.
HNIC215 said:
I think there's pros and cons to everything...
I love rooting, always have but this is the first time in a long time that I can't root and it's actually not so bad.
Granted I'd love to be able to installing ROMs, remove ads and bloat and have all these tweaks and tricks but it's sort of like... been there, done that.
If you root your phone now, you can NEVER use Samsung Pay... EVER on your device. Even if you restore stock firmware. That's actually a big issue now with mobile payments being a common thing.
I kind of like having my phone much more secure and safe to do important financial transactions and access important accounts (just like I do on my iPhone) without fear of lax security while using rooted/custom software.
I think moving into the future, flagship phones like Samsung's Galaxy line(s) won't risk bad press or the potential for bad press by allowing the modding community to easily gain root access and customize their software.
They have more to lose than gain by doing that, especially with their rivalry with Apple being so neck and neck now.
I think people like us on XDA who love rooting will have to purchase devices from up and coming OEMs if we still want to root, either that or Nexus devices.
Click to expand...
Click to collapse
1. So you would sacrifice freedom for convenience
2. Geohots court session with Apple made it legal to jailbreak aka root phones so why exactly would they get "bad press"
3. Android is open source so what Samsung is doing is kind of breaking the law of Android destroying the very foundation and purpose of it's creation
Ghost Dragon said:
1. So you would sacrifice freedom for convenience
Click to expand...
Click to collapse
I mean that's the thing with security in this day and age. No?
In order to have it, you must sacrifice the freedom (to an extent) to mod and install 3rd party software. While I personally love what XDA stands for, does and has to offer - I mean I love rooting and customizing my phones but I certainly can understand the other perspective in regards to security. XDA might be full of great individuals who are trying to improve the software experience for users, however, there are plenty of other 3rd parties who have ill intent.
It's the same reason why Apple is so strict with system access on iOS.
Samsung is trying to be their equal - in terms of quality, security and everything else.
In order to maintain that level of security in the midst of a global, albeit slow, roll out of Samsung Pay, they have to limit access to their system as well.
Which is why, like I said in my previous comment, if you EVER root a Samsung phone then you can NEVER use Samsung Pay on it.
To a lot of folks, especially those coming from the iPhone, Mobile Payments, Mobile Banking and security in general is a very important feature for them to have.
If not, it furthers the stereotype that Android is less secure than Apple. Which doesn't sit well with the plethora of users who don't care about rooting - we at XDA after all are really a niche group of users when looking at the grand scheme of consumers.
Ghost Dragon said:
2. Geohots court session with Apple made it legal to jailbreak aka root phones so why exactly would they get "bad press"
Click to expand...
Click to collapse
They would get "bad press" if something were to compromise the security of their devices - anywhere in the world. Especially if that compromise impacted the potential safety and security of their Mobile Payment system.
Which rooting or allowing access to certain parts of the system may or may not do. Which is a big deal to them, their investors and most of their consumers (who aren't aware or concerned about rooting).
Android already has an unfair stereotype/label that it is less secure compared to iPhone.
Ghost Dragon said:
3. Android is open source so what Samsung is doing is kind of breaking the law of Android destroying the very foundation and purpose of it's creation
Click to expand...
Click to collapse
Samsung doesn't care about what people like us on XDA think. People like us, who love to root and have the freedom to do whatever it is they want to their phones or to the software on their phones. As much as I hate to say it, we are a niche group.
I would love a developer edition of the S7/S7 Edge, that enables us to do all the wonderful things that the amazing and talented developers at XDA create for us. I would also love to be able to continue to use Samsung Pay and access and carry out important financial transactions through my mobile device.
Alas, that's not the case. So we have to choose between a bootloader locked version of the S7/S7 Edge or no S7/S7 Edge at all.
I think this phone is amazing and after years of nonstop rooting and customizing ROMs I don't mind sacrificing that aspect of customization in order to have a secure phone that I can do all the same things I can do on my iPhone 6s Plus.
Do I miss it sometimes? Sure
However, it's not the end of the world for me and the S7 Edge is still the best Android phone I've ever owned or used (I've owned alot too).
It is the "iPhone" of the Android world in terms of premium look/feel and quality and I think that is exactly the correlation that Samsung wants more consumers to have and think.
I was using Samsung Pay on my S6 Edge, and I decided to root it, unlock the bootloader, and flash a new ROM on it. 2 days later, someone had all of my personal info, all the info for a credit card I had on file and was using on my phone, and ran up $6000. I got a text from the bank to verify a purchase which I didn't make, and I responded that I did not make the transaction, but someone had enough information about me to call the bank, verify all of my information along with the purchase. I'm not saying the unlocking and flashing allowed someone to access this information, but it's a fairly large coincidence. Moving forward, any device that I use for financial transactions and such will remain stock, and if I root a device and flash it, it will be a separate device that doesn't contain any confidential information.
Sent from my SAMSUNG-SM-G935A using XDA-Developers mobile app
Rolldog said:
I was using Samsung Pay on my S6 Edge, and I decided to root it, unlock the bootloader, and flash a new ROM on it. 2 days later, someone had all of my personal info, all the info for a credit card I had on file and was using on my phone, and ran up $6000. I got a text from the bank to verify a purchase which I didn't make, and I responded that I did not make the transaction, but someone had enough information about me to call the bank, verify all of my information along with the purchase. I'm not saying the unlocking and flashing allowed someone to access this information, but it's a fairly large coincidence. Moving forward, any device that I use for financial transactions and such will remain stock, and if I root a device and flash it, it will be a separate device that doesn't contain any confidential information.
Sent from my SAMSUNG-SM-G935A using XDA-Developers mobile app
Click to expand...
Click to collapse
Exactly my point...
This is what makes so many consumers out there trust Apple because, whether true or not, they feel safe with Apple.
Samsung - being Apple's equivalent in the Android world - wants that same recognition and consumer trust.
I can't blame them either.
In this day and age, it is simply the world we live in, security is paramount for businesses and consumers alike.
I been rooting all my phones and my wife's phones for about 5-6 years and can say this phone is perfect jus the way it is. Since launch I had the gs7 edge and not once have I got the urge to root this beautiful device. And I'm sure I speak for most of us here that we can't go 2 days with a new phone without gaining root, flashing roms or xpose etc. For me it's more than jus keeping security. Samsung jus made a phone worth keeping stock, finally.
Sent from my SAMSUNG-SM-G935A using XDA-Developers mobile app
I've rooted every single android phone I've owned. I was one of the first people to run CyanogenMod on my Droid when some crazy no-named guy named Koush appeared out of nowhere and said SPRecovery that we had ALL had wasn't "real" recovery and created his own recovery in order to flash the real CyanogenMod ROM. Later this recovery would be called Clockwork Mod. I remember flashing .sbf files that replaced everything on the phone just for a silly custom boot logo. I used to kang features and themes from N1 threads on here, back when that was really the only phone on XDA. I used to build ROMs and custom themes and all that craziness. I remember when changing the clock color was unbelievably complicated. Google integrated many features first pioneered by devs into their main product that these phones all run on now. Taking away our ability to do that may very well slow the development of Android. It defeats the purpose of open-source. If you wish to forgo the freedom of root for the security of KNOX, or Samsung Pay, or whatever feature that conflicts with root, you're free to do so, even if rooting is possible. And manufacturers have always warned against rooting because it takes away from the security features they worked hard to include, and none have ever been held accountable for someone rooting a device before. It wouldn't be any different now. I guess, in summary, they really have nothing to lose by allowing root. Even if I have no real reason to root, I still would like the option to do on a device that I shelled out $700+ for. Rooting never was for everybody. But because some developers were nice enough to simplify the process to the point a chimp could do it. Literally. People that probably shouldn't root, did it anyways, but then felt that they shouldn't be responsible for their own actions. But for those of us that don't need our hand held throughout the entire process of owning a device, having the freedom to treat our property as we like doesn't seem like it's asking all that much. Especially for a device that runs on open-source software...
(Good God, I rambled a lot longer than intended. Sorry about the novel)
52brandon said:
I've rooted every single android phone I've owned. I was one of the first people to run CyanogenMod on my Droid when some crazy no-named guy named Koush appeared out of nowhere and said SPRecovery that we had ALL had wasn't "real" recovery and created his own recovery in order to flash the real CyanogenMod ROM. Later this recovery would be called Clockwork Mod. I remember flashing .sbf files that replaced everything on the phone just for a silly custom boot logo. I used to kang features and themes from N1 threads on here, back when that was really the only phone on XDA. I used to build ROMs and custom themes and all that craziness. I remember when changing the clock color was unbelievably complicated. Google integrated many features first pioneered by devs into their main product that these phones all run on now. Taking away our ability to do that may very well slow the development of Android. It defeats the purpose of open-source. If you wish to forgo the freedom of root for the security of KNOX, or Samsung Pay, or whatever feature that conflicts with root, you're free to do so, even if rooting is possible. And manufacturers have always warned against rooting because it takes away from the security features they worked hard to include, and none have ever been held accountable for someone rooting a device before. It wouldn't be any different now. I guess, in summary, they really have nothing to lose by allowing root. Even if I have no real reason to root, I still would like the option to do on a device that I shelled out $700+ for. Rooting never was for everybody. But because some developers were nice enough to simplify the process to the point a chimp could do it. Literally. People that probably shouldn't root, did it anyways, but then felt that they shouldn't be responsible for their own actions. But for those of us that don't need our hand held throughout the entire process of owning a device, having the freedom to treat our property as we like doesn't seem like it's asking all that much. Especially for a device that runs on open-source software...
(Good God, I rambled a lot longer than intended. Sorry about the novel)
Click to expand...
Click to collapse
Preach on brotha!
Sent from my SAMSUNG-SM-G935A using Tapatalk
Loving this phone so far. Great battery life! Don't really care about root atm.

Optimizing security, privacy, and encryption

I'm looking into getting a new phone and I really want to get a Note 9. However, everything that I see online points to the fact that apple is far better at security & privacy than android platforms are right now (especially with software updates addressing vulnerabilities). My question is, is it possible to root a Note 9 and choose a custom ROM that will offer a level of security & privacy that is on par with, or very close to, security on iOS?
TheloniousDrunk said:
I'm looking into getting a new phone and I really want to get a Note 9. However, everything that I see online points to the fact that apple is far better at security & privacy than android platforms are right now (especially with software updates addressing vulnerabilities). My question is, is it possible to root a Note 9 and choose a custom ROM that will offer a level of security & privacy that is on par with, or very close to, security on iOS?
Click to expand...
Click to collapse
Unfortunately, rooting your device does not provide more security. Rooting your device is in essence, circumventing the built in security of your device.
As far as Apple being more secure than Android, that is very debatable. And I am not just saying that because this is mostly an Android forum. In my humble opinion, the differences really are that Android tells you what apps are using your information, whereas iOS does not in full detail. Everyone keeps saying Apple is all about Privacy which is fine, but apps can still collect your information from within iOS even if you don't grant certain permission, and developers can still use your "app history" to sell you products. Huh?
Android literally collects all your sh...stuff. There's no sugar coating it. Google is a company that uses your data in return for you using their products(not physical items), for free. You can control permissions but unfortunately apps are now seeding information from other apps that have permission to that information already. So you can download an app that says it doesn't need to access anything about you or your device, because it's getting all that information from the other apps on the the device that do already.
Here's a few good reads:
Privacy Ish: https://www.symantec.com/blogs/threat-intelligence/mobile-privacy-apps
Security Ish: https://us.norton.com/internetsecurity-mobile-android-vs-ios-which-is-more-secure.html
If you want less of a chance of getting your stuff stolen hack wise, go with iOS.
Privacy wise though, you're out of luck. But I guess iOS is a little more "ethical" since Apple does not utilize an open source setup with iOS. :good:
(Turns out I can't quote you because I don't have enough posts to post links, and your post had links in it)
I appreciate the response. What makes you say both that you wouldn't consider that Apple is more secure than Android while also recommending if I want to be less likely to be hacked I should go iOS? Wouldn't that recommendation imply that iOS is more secure than even a rooted Android?
There's a helpful video I found on YouTube called "Android vs iOS: Which spies on you more?" (I can't use a hyperlink because I don't have enough posts, sorry) and suggests that iOS is far better. However if I were to root my phone, wipe all google apps, I should be able to avoid the pings to Google's servers right?
TheloniousDrunk said:
(Turns out I can't quote you because I don't have enough posts to post links, and your post had links in it)
I appreciate the response. What makes you say both that you wouldn't consider that Apple is more secure than Android while also recommending if I want to be less likely to be hacked I should go iOS? Wouldn't that recommendation imply that iOS is more secure than even a rooted Android?
There's a helpful video I found on YouTube called "Android vs iOS: Which spies on you more?" (I can't use a hyperlink because I don't have enough posts, sorry) and suggests that iOS is far better. However if I were to root my phone, wipe all google apps, I should be able to avoid the pings to Google's servers right?
Click to expand...
Click to collapse
I couldn't get your message to load on the app so sorry for not responding.
I said both things because they are both "true." iOS has less vulnerabilities that we know of. Android has more vulnerabilities that we DO know of but is often classified as being less secure. It's kind of like how everyone says Mac is more secure than Windows. It's not 100% accurate because Mac is less popular, so there is a lower amount of usages in the market, so less likelyhood a Mac would get hacked or targeted.
As for the which one spies on you more, the argument could be made that Android offers more spying due to being mostly Open Source. I use that term lightly of course. iOS spies on you but as far as we know, ONLY to Apple and the apps in their App store since iOS is closed source.
Rooting the device will help you get rid of everything Google if you want, but you'll have to get your apps from other sources which WILL increase your risk of getting malware/spyware/adware/silverware...all the wares.
If you are really that concerned with privacy and security, iOS is the way to go as you only have to deal with one main evil, Apple's Appstore.
If you do decide to get the Note 9, get the international model as it has root and can be unlocked.

Question Should I Unlock the bootloader?

First off, yes i have searched thru the forums for an answer but none of those that I found are direct to my questions...
I just placed an order for S21 Ultra Exynos. Should be arriving within the next 2 days or so..
My questions are: (this will be my first Samsung phone)
1) Is one UI good enough? or is it worth it to flash a custom from (previously I used to flash custom from for better battery life and also advance customization.
2) If I unlock the bootloader, will I still receive firmware updates?
I'm basically buying this particular phone for its excellent battery life, camera, and performance.
And also because Samsung promised 3-4 years for firmware updates. I believe this phone will last for at least 3 years.
And I'm thinking of unlocking the bootloader on day 1 itself before even setting up anything. That way I would save my time from losing stuff by resetting after unlocking BL.
3) and also, did anyone get the Samsung care+ extended warranty? Is it worth it?
I have never broken a phone before in my life thus far. But since this is gonna be the most expensive phone I have ever bought, I would prefer to secure my investment. (another reason why I'm considering not to unlock bootloader/root as of yet).
Thank you soo much.
Have not done rooting for a long time. Lost touch will all this stuff.
Hence the noobie questions.
1. One UI is quite good. There aren't a ton of custom ROMs out there for this phone. Even the most popular ones that exist are still based on one UI.
2. and 3. contradict each other. If you're bothered about warranty AT ALL, don't unlock your bootloader. You can never return to 100% stock on Samsung. Knox will remain tripped so bye bye warranty. Unless of course your country has laws allowing this and you can fight Samsung. They tend to deny warranty if you've modified your phone software. YMMV. I don't have Samsung Care so I don't know about that.
Since you asked for suggestions, mine would be not to be hasty and play around with the device to see if you need to unlock/root/flash etc.
Rooting on day 1 just so you can avoid having to set up phone again is pretty lazy and dangerous. Especially since you've been out of the game for a while.
Baby steps buddy. Better safe than sorry.
enigmaamit said:
1. One UI is quite good. There aren't a ton of custom ROMs out there for this phone. Even the most popular ones that exist are still based on one UI.
2. and 3. contradict each other. If you're bothered about warranty AT ALL, don't unlock your bootloader. You can never return to 100% stock on Samsung. Knox will remain tripped so bye bye warranty. Unless of course your country has laws allowing this and you can fight Samsung. They tend to deny warranty if you've modified your phone software. YMMV. I don't have Samsung Care so I don't know about that.
Since you asked for suggestions, mine would be not to be hasty and play around with the device to see if you need to unlock/root/flash etc.
Rooting on day 1 just so you can avoid having to set up phone again is pretty lazy and dangerous. Especially since you've been out of the game for a while.
Baby steps buddy. Better safe than sorry.
Click to expand...
Click to collapse
Isn´t it sad, that we spent more than 1000 bucks on a device, that in the end, we will never truly own?
I´ve been thinking about this issue since i got my Note 9 (3 years ago)...
The balance between, what we want the device to do for, and what we are allowed to do in the device, without losing support in case of hardware failure...
I, mainly, used to root for 3 reasons: 1 - Ads removal from software; 2 - Control/modification of the system files and 3 - Easy backup and restore with TWRP
And as we all are aware, a few changes in a system file, can avoid the installation of a third party software (e.g. Call Recording) so it seems to be more efficient to root... but then come the brands claming that we can´t do it because that would ruin the user experience that they planned for the device...
The Knox feature as been buffed up to a point that is increasingly harder to install a custom recovery. Something that a few years ago was a solution for a big number of users, now its just a work for those "geeks" that live for the challenge... The risks of brincking a VERY EXPENSIVE device are becaming bigger than the advantages that we would get with root... I guess we are playing into brands plans...
To be fair, brands also understood that they would have to give what users wanted if they wanted to avoid software alterations (except maybe Apple, who just gives what Apple consideres users should have)...
Customizations and bigger control of the software are trends that are growing up in Android skins (like OneUi).
I got my S21 Ultra a few weeks ago, and normally it would rooted and with a custom recovery by now, but the problems i faced with that in my Note 9, are still present in my mind... and i don´t want to face them again...
I manage to get my basic needs with some non-root software, and with GoodLock and Bixby Routines and can do almost everything i would do with the root... Still can´t avoid to have to install a third party software to record calls, something that could be done better with the native system, but that´s it...
In the end, you do you...
Just keep in mind the risks, and be ready to take responsability when something goes wrong... and the possibility of that happen is getting bigger every time they launch a new device...
RSGI
RSGI said:
Isn´t it sad, that we spent more than 1000 bucks on a device, that in the end, we will never truly own?
I´ve been thinking about this issue since i got my Note 9 (3 years ago)...
The balance between, what we want the device to do for, and what we are allowed to do in the device, without losing support in case of hardware failure...
I, mainly, used to root for 3 reasons: 1 - Ads removal from software; 2 - Control/modification of the system files and 3 - Easy backup and restore with TWRP
And as we all are aware, a few changes in a system file, can avoid the installation of a third party software (e.g. Call Recording) so it seems to be more efficient to root... but then come the brands claming that we can´t do it because that would ruin the user experience that they planned for the device...
The Knox feature as been buffed up to a point that is increasingly harder to install a custom recovery. Something that a few years ago was a solution for a big number of users, now its just a work for those "geeks" that live for the challenge... The risks of brincking a VERY EXPENSIVE device are becaming bigger than the advantages that we would get with root... I guess we are playing into brands plans...
To be fair, brands also understood that they would have to give what users wanted if they wanted to avoid software alterations (except maybe Apple, who just gives what Apple consideres users should have)...
Customizations and bigger control of the software are trends that are growing up in Android skins (like OneUi).
I got my S21 Ultra a few weeks ago, and normally it would rooted and with a custom recovery by now, but the problems i faced with that in my Note 9, are still present in my mind... and i don´t want to face them again...
I manage to get my basic needs with some non-root software, and with GoodLock and Bixby Routines and can do almost everything i would do with the root... Still can´t avoid to have to install a third party software to record calls, something that could be done better with the native system, but that´s it...
In the end, you do you...
Just keep in mind the risks, and be ready to take responsability when something goes wrong... and the possibility of that happen is getting bigger every time they launch a new device...
RSGI
Click to expand...
Click to collapse
Agree. The trend for Android devices aping the Apple philosophy is disturbing. But for lack of good alternatives, we are left without too many choices. OnePlus seemed to be doing well on this front but lately they've also gone rogue. So we have to live with what we have, whether we like it or not...
guyderam said:
I'm basically buying this particular phone for its excellent battery life
Click to expand...
Click to collapse
Okay so who's gonna tell him?
To be perfectly honest, the battery life is the only gripe I have with this phone. It's quite mediocre for a 5000mAh battery. Of course everyone's usage is different, but I expected better battery life. If you're not a "heavy" user you should be fine though!!
As for bootloader unlocking: I've had 2 S21 Ultras. I had the first one unlocked for a dumb reason, wanted to flash some magisk module to enable all lenses in Google Camera ports basically. Which is kinda funny because now with OneUI 4.0 all the lenses are available in GCam
back to the actual topic, now that I have my second S21U, I don't see a reason to unlock the bootloader. From what I've seen there's only one or two Exynos custom ROMs that are regularly updated. That's the first thing. The 2nd thing is, I just don't wanna trip Knox again and void my warranty.
For me unlocking the BL is not worth it (at the moment). You should consider the pros and the cons of unlocking and hopefully it'll be easier to decide then.
With that being said, enjoy your S21 Ultra, man.
jericho246 said:
Okay so who's gonna tell him?
Click to expand...
Click to collapse
Thank you so much for the feedback guys.... got my questions answered. Doubt ill be doing anything for now. Gonna use it as it is and see how it goes.
Sadly yes, androids used to be fully customizable and this was the main reason people used to buy them. Unfortunately, phone companies seem to be making it harder and harder for us to do anything to our phones anymore these days.
Oh well....
guyderam said:
Thank you so much for the feedback guys.... got my questions answered. Doubt ill be doing anything for now. Gonna use it as it is and see how it goes.
Sadly yes, androids used to be fully customizable and this was the main reason people used to buy them. Unfortunately, phone companies seem to be making it harder and harder for us to do anything to our phones anymore these days.
Oh well....
Click to expand...
Click to collapse
But really, what do you want to do with your phone that's not already in-built. I was thinking the same but over the years Android (and it's custom OEMs) have gotten a lot better with companies baking a lot of the magisk modules (their versions) into their ROMs...I didn't root my OnePlus 7Pro, neither the S21U..don't see the need to (at least for the time being)...
A few things, updates are forfeited after root and also be aware Android 12, One UI 4.0 is far from stable. If it hasn't been preinstalled you should consider ignoring the update until the numerous bugs are addressed. I've had a number of S Series devices, only the S8+ was a Exynos variant, all others had the Snapdragon SoC's and never had a warranty issue. I wouldn't buy the Samsung Care+ but it's like any other insurance, you hate paying for it but happy you did if you ever need it. Unless you're a power user battery life shouldn't be an issue but if it is you can review numerous posts for corrective solutions. Based on what you've shared it's probably best you hold off on unlocking the bootloader, to me there aren't many compelling reasons when one considers all the consequences. I think you'll be OK with the stock device.
I consider myself as a relatively advanced user and was always playing rooted with all of the S devices I had. There were always workarounds for root detection by apps and samsung itself BUT now things have changed and I regret having rooted my S21.
As samsung is enforcing its restrictions against root, I find myself (while being rooted) unable to connect my GW4, unable to use latest Samsung Health app, unable to use Samsung Pay and lately even the samsung account keeps disconnecting for "security reasons" several times a day... What a mess !
As previously said, returning to stock with locked bootloader won't give a 100% functional device as the tripped Knox will still be there preventing you from using some samsung apps and features !
If it gets more complicated, I only have 2 choices : get a "virgin" S21 or say goodbye to Samsung.
With that said, you now know where you're going if you choose to go that way

Categories

Resources