• dotslashme@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    When you buy something you should have the right to repair it and modify it.

    Currently, everything is basically a renters agreement, where you pay for something you have zero rights to modify or opt out of.

  • Deemo@bookwormstory.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Few problems:

    1. Safteynet (play integrity) and root detection

    There are magisk tweaks to help combat this but its a annoying game of cat and mouse. Some apps like chase have particularly annoying root detection to deal with. Also regaring safteynet once google fully enforces hardware attestation passing safteynet with tweaks will be borderline impossible (most tweaks try to spoof older phones that don’t support safteynet hardware attestation).

    1. Widevine

    Many streaming services (Netflix, Hulu, Disney, etc) will downgrade your video quality to 480p-540p due to L3 from unlocking the bootloader (a step thats usually required before you can root).

    1. Physical security (potential risk)

    Unlocking the bootloader is the first step to allowing for rooting and custom roms. One pro/con is when you unlock the bootloader you are partially at risk to a evil maid attack (some one with physical acess to your phone can compromise it). While difficult to do automatically (and probably very very rare) some one could hypothetically place a malicious bootloader that could steel data. The risk of this is mostly low but does exist.

    • lemmyvore@feddit.nl
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      once google fully enforces hardware attestation passing safteynet with tweaks will be borderline impossible

      Never gonna happen. Full hardware attestation would give Google all the cards and too much power over manufacturers. Samsung is the largest Android manufacturer and they’re making people jump though hoops to unlock bootloader precisely because they don’t want to end up with full attestation.

      Samsung and Google have been locked into a power struggle for many years now and they’re both careful about keeping the armistice. Samsung maintains a set of apps that mimic Google’s, ready to go in case Google ever pulls a Huawei and kicks them off Play.

    • NightAuthor@beehaw.org
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      You can do things to improve security with root access. Better yet, with boot loader access you can make your phone much much more secure with graphene os

      • Big P@feddit.uk
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        I don’t know if flashing a random ROM from xda because there’s no official builds available for my phone is considered a security improvement

  • bug@lemmy.one
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    Strange that the focus point of this article is rooting, you can modify your device to install custom firmware etc without needing root exploits anymore!

  • Big P@feddit.uk
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    I’ve owned an android phone for over 10 years and have rooted most of them. To be honest, in that time I’ve rarely come across something that I’ve wanted to do but been unable to do without rooting. Generally anything I want to do also isn’t possible through rooting either. Same with custom ROMs, recently it seems you end up losing features rather than gaining them.

    • TheFriendlyArtificer@beehaw.org
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      I would trade every half-assed Google feature update for a hosts based adblock capability.

      That’s the sole reason that I root every device that I own.

      And NO. A PiHole is not, repeat NOT a silver bullet. Nor is a local VPN with custom DNS.