Security implications of rooting Nexus 6P - Nexus 6P Q&A, Help & Troubleshooting

I have a 6p, and I've had many issues with it. I joined the Android beta program hoping the beta might help, and it did somewhat, then broke it again.
I'm considering rooting the phone so I can adjust noise cancellation and switch to a power optimized kernel, to fix the two major problems with the device.
Can anyone suggest the best way to do this while minimizing security risks, and what are the risks compared to just keeping stock unrooted? FYI I have rooted and flashed ROMs on phones before, so not a total noob.
Thanks!

sashby said:
I have a 6p, and I've had many issues with it. I joined the Android beta program hoping the beta might help, and it did somewhat, then broke it again.
I'm considering rooting the phone so I can adjust noise cancellation and switch to a power optimized kernel, to fix the two major problems with the device.
Can anyone suggest the best way to do this while minimizing security risks, and what are the risks compared to just keeping stock unrooted? FYI I have rooted and flashed ROMs on phones before, so not a total noob.
Thanks!
Click to expand...
Click to collapse
Hello...
Working method:
Unlock bootloader
Flash TWRP.img : https://dl.twrp.me/angler/twrp-3.1.0-0-angler.img
Boot into TWRP
Install SuperSU: https://download.chainfire.eu/1021/SuperSU/SR3-SuperSU-v2.79-SR3-20170114223742.zip
Reboot. Done.
From here you can install the kernel of your choice. Recommended kernels: ElementalX or Franco's Kernel.
Well, rooting a phone always.involve risks. Depending what you do with your phone. As long as you don't install apps from bad sources and don't allow root access before you know what it does.
Also, you don't need Root to install a custom kernel if you want.
Just fastboot boot TWRP.img and install kernel zip from TWRP. It may lack some features that need Root to work though...
Good luck...

sashby said:
I have a 6p, and I've had many issues with it. I joined the Android beta program hoping the beta might help, and it did somewhat, then broke it again.
I'm considering rooting the phone so I can adjust noise cancellation and switch to a power optimized kernel, to fix the two major problems with the device.
Can anyone suggest the best way to do this while minimizing security risks, and what are the risks compared to just keeping stock unrooted? FYI I have rooted and flashed ROMs on phones before, so not a total noob.
Thanks!
Click to expand...
Click to collapse
If you unlock your bootloader and root you will get a nag screen saying Android can't ensure that your device is safe. It isn't really dangerous as long as you only download apps from trusted sources and are careful about what apps you give root access to. However, Android Pay and some banking apps won't work on a rooted phone unless you use Magisk and PhilsSu which are currently able to pass Androids Safety Net security measures by hiding root from those apps.

I should add that a handful of games like Pokemon Go require the device to pass safety net to work so again you would need to use the Magisk and PhilsSu combo to play them. If you are going to go to the trouble of rooting I would consider trying a custom rom (other than Pure Nexus) as well as flashing a custom kernel like ElementalEx or The Flash's kernel. It's easy enough to go back to stock of you want to. Cortex is a very good stock based Rom with Pixel features, a responsive developer and very few bugs. I'm currently on Dirty Unicorns (which is not on XDA) because I wanted OMS support for Substratum theming. The Rom is fast and smooth and all my apps work perfectly on it--unlike PN where I encountered some problem or another every time I tried it.

Hello,
No issues at all with Pure Nexus here... :good:
Cheers...

5.1 said:
Hello,
No issues at all with Pure Nexus here... :good:
Cheers...
Click to expand...
Click to collapse
I ran Pure Nexus 5 separate times, always a completely clean install and never once did I not have issues with it. I think the people who use that Rom have been brainwashed.

jhs39 said:
I ran Pure Nexus 5 separate times, always a completely clean install and never once did I not have issues with it. I think the people who use that Rom have been brainwashed.
Click to expand...
Click to collapse
Hello,
Thank you very much, have a nice day to you too... :good:
Cheers...

Thank you everyone for your input. I think I'm going to need to do this soon, as the phone is almost unusable sometimes - and battery life is downright awful on stock with this phone. It's now dozing correctly again, but when I'm actually using it I can literally watch the battery gauge drop, even with screen brightness turned way down.

It used to be that when flashing a ROM you were wiping the entire phone - i.e. even personal data has to be reloaded on the phone. Is that still true, or are they on separate partitions?

sashby said:
It used to be that when flashing a ROM you were wiping the entire phone - i.e. even personal data has to be reloaded on the phone. Is that still true, or are they on separate partitions?
Click to expand...
Click to collapse
Hello,
To install a custom ROM you need to unlock the bootloader. When unlock it, the userdata partition is entirely wiped. The internal storage (personal data's: photos,, videos, etc...) is part of it.
So be sure to backup your photos, videos, etc... Before you do it...
Good luck...

sashby said:
I have a 6p, and I've had many issues with it. I joined the Android beta program hoping the beta might help, and it did somewhat, then broke it again.
I'm considering rooting the phone so I can adjust noise cancellation and switch to a power optimized kernel, to fix the two major problems with the device.
Can anyone suggest the best way to do this while minimizing security risks, and what are the risks compared to just keeping stock unrooted? FYI I have rooted and flashed ROMs on phones before, so not a total noob.
Thanks!
Click to expand...
Click to collapse
The full risk is this.
If I can boot your phone into TWRP and you don't have encryption enabled, I can unlock your phone by deleting the correct files.
Once the correct files are deleted I own the phone and your data.
So I've come to the conclusion in the last day while restoring my phone that encryption is a must with an unlocked bootloader.

Related

Need a little confirmation....

Hi all,
It's been a few yrs since I've flashed a phone (the last being my SGS1 variant) and I'm very out of practice. That being said, I just need a little help in understanding how to flash my SGS4. So far, I've had this phone for yrs and I would've jumped to custom roms as I did normally but there was the whole KNOX debacle and I didn't want to do anything to damage my phone - while within warranty. I've been out of the loop for awhile, so I need a little help in my choices here.
My phone is still running on it's original software (that's right, I completely haven't updated in yrs), so it's a 4.2.2 and the build is I9505XXUBM4 (pre-KNOX). If I am going to root, I was thinking that I should use the method from this thread: [GT-I9505 + GT-I9505G] CF-Auto-Root. Would I be right in using this method or is there something better?
Secondly, I've only ever used CWM. I'm assuming the recovery to use currently is TWRP since I've seen it brought up in a good number of threads. Can I make a nandroid with TWRP the same way it was done with CWM or do I need to find another way to backup my data?
Lastly, this is the rom I'm leaning towards; [JDCTeam][6.0.1][9 July] The Android Open Source Project MOB30M. Could I just flash this on top of my stock or do I have to update first and then flash this?
TIA for your responses.
Oniyuri said:
Hi all,
It's been a few yrs since I've flashed a phone (the last being my SGS1 variant) and I'm very out of practice. That being said, I just need a little help in understanding how to flash my SGS4. So far, I've had this phone for yrs and I would've jumped to custom roms as I did normally but there was the whole KNOX debacle and I didn't want to do anything to damage my phone - while within warranty. I've been out of the loop for awhile, so I need a little help in my choices here.
My phone is still running on it's original software (that's right, I completely haven't updated in yrs), so it's a 4.2.2 and the build is I9505XXUBM4 (pre-KNOX). If I am going to root, I was thinking that I should use the method from this thread: [GT-I9505 + GT-I9505G] CF-Auto-Root. Would I be right in using this method or is there something better?
Secondly, I've only ever used CWM. I'm assuming the recovery to use currently is TWRP since I've seen it brought up in a good number of threads. Can I make a nandroid with TWRP the same way it was done with CWM or do I need to find another way to backup my data?
Lastly, this is the rom I'm leaning towards; [JDCTeam][6.0.1][9 July] The Android Open Source Project MOB30M. Could I just flash this on top of my stock or do I have to update first and then flash this?
TIA for your responses.
Click to expand...
Click to collapse
For first you MUST update your phone, if you have root, update with odin on the latest firmware version and then flash flash recovery(cwm, twrp, philz) and flash the rom, because firmware request of the rom is android lollipop stock. Try cyanogenmod 13 nighty for this smartphone
Alessandro's said:
For first you MUST update your phone, if you have root, update with odin on the latest firmware version and then flash flash recovery(cwm, twrp, philz) and flash the rom, because firmware request of the rom is android lollipop stock. Try cyanogenmod 13 nighty for this smartphone
Click to expand...
Click to collapse
Ok, so after I root the phone, can I go straight onto CM13 or do I still have to get lollipop first and then flash CM?
I'm still trying to avoid getting KNOX on the phone.
Oniyuri said:
Ok, so after I root the phone, can I go straight onto CM13 or do I still have to get lollipop first and then flash CM?
I'm still trying to avoid getting KNOX on the phone.
Click to expand...
Click to collapse
Then you install lollipop stock, make root , flash recovery and then flash cm13
Oniyuri said:
Ok, so after I root the phone, can I go straight onto CM13 or do I still have to get lollipop first and then flash CM?
I'm still trying to avoid getting KNOX on the phone.
Click to expand...
Click to collapse
Knox does matter once you're on a custom ROM.
Most content creators recommend to use the latest modem and bootloader in order to avoid problems.
You don't necessarily have to update the whole ROM to have the newest modem and bootloader, there are Odin flashable packages.
I don't know if CF-Auto-Root works with 4.2. I know it works for 4.4 and above.
As long as you do your wipes (this means system, data, cache, dalvik) you can flash anything over anything.
Yes, you can do nandroid backups, but TWRP and CWM backups are not compatible with each other. Also, TWRP has a problem with TouchWiz backups, meaning you can make and restore a TouchWiz backup, but it either won't boot or will give you lots of errors.
GDReaper said:
Knox does matter once you're on a custom ROM.
Most content creators recommend to use the latest modem and bootloader in order to avoid problems.
You don't necessarily have to update the whole ROM to have the newest modem and bootloader, there are Odin flashable packages.
I don't know if CF-Auto-Root works with 4.2. I know it works for 4.4 and above.
As long as you do your wipes (this means system, data, cache, dalvik) you can flash anything over anything.
Yes, you can do nandroid backups, but TWRP and CWM backups are not compatible with each other. Also, TWRP has a problem with TouchWiz backups, meaning you can make and restore a TouchWiz backup, but it either won't boot or will give you lots of errors.
Click to expand...
Click to collapse
Ok, so is there a way that I could at least get to lollipop w/o getting KNOX and have a nandroid that would work or should I just OTA all the way up to current and then root and flash?
Oniyuri said:
Ok, so is there a way that I could at least get to lollipop w/o getting KNOX and have a nandroid that would work or should I just OTA all the way up to current and then root and flash?
Click to expand...
Click to collapse
Why are you so obsessed with Knox? I just told you that it won't be an issue on custom ROMs. There is no knox on custom ROMs. Knox is a Samsung thing. So, unless you plan on staying stock, there is no reason to be concerned about it. Even if you stay stock, there still is no reason to be afraid of it, it's just some security crap, and it won't affect you in any way. Why are you so afraid of it?
My device came with Knox pre-installed and it didn't do jack.
Just update if you want to update or flash a recovery (flashing custom ROMs doesn't require root, just a custom recovery) and flash your desired ROM.
GDReaper said:
Why are you so obsessed with Knox? I just told you that it won't be an issue on custom ROMs. There is no knox on custom ROMs. Knox is a Samsung thing. So, unless you plan on staying stock, there is no reason to be concerned about it. Even if you stay stock, there still is no reason to be afraid of it, it's just some security crap, and it won't affect you in any way. Why are you so afraid of it?
My device came with Knox pre-installed and it didn't do jack.
Just update if you want to update or flash a recovery (flashing custom ROMs doesn't require root, just a custom recovery) and flash your desired ROM.
Click to expand...
Click to collapse
Well, I've been out of the loop for a while (the last time I was active was circa late 2013/ early 2014), but I do remember there was a lot of concern regarding warranty and the flags. I do admit that there was a lot of speculation from losing a section of memory from tripping the flag to actually burning the motherboard. I originally decided to wait until the dust settled but life took over and I ended up only sporadically checking the forums before disappearing for long periods of time. I actually don't know what the end of the story is to be honest.
Oniyuri said:
Well, I've been out of the loop for a while (the last time I was active was circa late 2013/ early 2014), but I do remember there was a lot of concern regarding warranty and the flags. I do admit that there was a lot of speculation from losing a section of memory from tripping the flag to actually burning the motherboard. I originally decided to wait until the dust settled but life took over and I ended up only sporadically checking the forums before disappearing for long periods of time. I actually don't know what the end of the story is to be honest.
Click to expand...
Click to collapse
The only concern is about the warranty. Since your phone is some years old, I doubt that is an issue for you anymore.
By losing memory you mean losing data or actually losing storage space?
Either way, I haven't heard of anyone with such a problem around here.
Nor about somebody with a fried motherboard.
There might have been some unfortunate cases, but this is to be expected when you modify your device. There always is a risk of damage, it doesn't matter if it's by rooting or by flashing a ROM.
I meant lose storage. As I understood it, KNOX worked like a container and once the flag was tripped, you'd lose whatever it contained - as in never being able to access that bit ever again.
Oniyuri said:
I meant lose storage. As I understood it, KNOX worked like a container and once the flag was tripped, you'd lose whatever it contained - as in never being able to access that bit ever again.
Click to expand...
Click to collapse
You have to use the knox app first for that to even be considered a risk.
Knox will not put anything in that container without user input.
GDReaper said:
You have to use the knox app first for that to even be considered a risk.
Knox will not put anything in that container without user input.
Click to expand...
Click to collapse
Ok, so to get the steps straight:
1. I'd need to get a lollipop bootloader & modem
2. root + nandroid (CWM) + titanium for app data (non-system app data)
3. change recovery to TWRP
4. flash rom + gapps
....and then I should be ready to go, correct?
Oniyuri said:
Ok, so to get the steps straight:
1. I'd need to get a lollipop bootloader & modem
2. root + nandroid (CWM) + titanium for app data (non-system app data)
3. change recovery to TWRP
4. flash rom + gapps
....and then I should be ready to go, correct?
Click to expand...
Click to collapse
1) Is not mandatory, it's just recommended. The only exception is if your device is a Verizon or AT&T phone, then don't - and I repeat - don't update or you risk losing the possibility of any custom ROM flashing or rooting due to the locked bootloaders.
2) and 3) CWM and TWRP backups do not have cross-compatibility. If you backup with CWM you have to restore with CWM.
Please tell me you haven't flashed anything yet. I can help with the entirety of the procedure.
robcore said:
Please tell me you haven't flashed anything yet. I can help with the entirety of the procedure.
Click to expand...
Click to collapse
No I haven't done anything yet. I found something else to occupy me for the last few nights - a chromecast that seems to hate me.
Oniyuri said:
No I haven't done anything yet. I found something else to occupy me for the last few nights - a chromecast that seems to hate me.
Click to expand...
Click to collapse
Haha I hear ya. I've been building a kernel for about a year now and finally (knock on wood) arrived at something I'm happy with. Lesson learned, electronics are definitely conspiring against us.
That said, please feel free to pm me when you're ready for the flashing process. Though it's a silly skill, it's become second nature to me and something about your situation flipped a helpful switch in me : P what's the Chromecast like?
robcore said:
Haha I hear ya. I've been building a kernel for about a year now and finally (knock on wood) arrived at something I'm happy with. Lesson learned, electronics are definitely conspiring against us.
That said, please feel free to pm me when you're ready for the flashing process. Though it's a silly skill, it's become second nature to me and something about your situation flipped a helpful switch in me : P what's the Chromecast like?
Click to expand...
Click to collapse
Well, so far, the chromecast is only plugged into my tv and basically did the setup by itself only for the google cast app on my phone to not recognize it when it said that it's ready to cast. I've ran out of things to do aside from going to the google forums (which I've already done). I'm starting to wonder if it's my phone that's causing all the issues.

Can I update with Dec 2016 security patch if my phone is rooted?

Or do I need FlashFire?
I believe that this is the same update as the one in this post
https://forum.xda-developers.com/moto-x-style/general/maintenance-release-dec-2016-security-t3557903
You need full unroot, stock kernel, stock recovery and no system partition modification
lukas77 said:
You need full unroot, stock kernel, stock recovery and no system partition modification
Click to expand...
Click to collapse
could you tell me how I can do this? Is there a general guide?
Wow... how many times are we going to answer this question every single time an update comes out?!?!
A phone must be 100% stock to take an OTA... stock recovery, stock system partition, stock boot partition... or the update will fail.
You need to either restore your pre-root backup (you did one with TWRP, right?) or flash a factory image that is the same version or newer than you have installed. Period, those are the proper answers to how to go back to stock so you can get an OTA.
acejavelin said:
Wow... how many times are we going to answer this question every single time an update comes out?!?!
A phone must be 100% stock to take an OTA... stock recovery, stock system partition, stock boot partition... or the update will fail.
You need to either restore your pre-root backup (you did one with TWRP, right?) or flash a factory image that is the same version or newer than you have installed. Period, those are the proper answers to how to go back to stock so you can get an OTA.
Click to expand...
Click to collapse
I apologize, this was my first time rooting my phone so I don't know a lot. I was able to root my phone, thanks to your thread on rooting.
I plan on using this thread by you to go back to stock.
https://forum.xda-developers.com/mo...de-return-to-stock-relock-bootloader-t3489110
ThanuTK said:
I apologize, this was my first time rooting my phone so I don't know a lot. I was able to root my phone, thanks to your thread on rooting.
I plan on using this thread by you to go back to stock.
https://forum.xda-developers.com/mo...de-return-to-stock-relock-bootloader-t3489110
Click to expand...
Click to collapse
I hope it helps... Just remember to search around the forums or Google a bit before asking a question. I apologise if I sounded a little snappy, I had just answered some very dumb PM's that frustrated me and then this was the first open thread I saw, sorry if I was a bit abrupt.
This question has been answered a whole lot so it gets a little frustrating sometimes to see a new thread pop up for this issue. That being said and you being new to rooting, I can't stress this enough: please search and read through the threads (and know the XDA rules of course). This device has been out for a while and by now, a large majority of the questions, issues, and whatever else you may have is addressed in these forums. If you do run across anything that there is no answer for, by all means ask away.
Guys there is any chance of volte update because jio expanding their services to next one year
Can it is possible that after nought update it is possible
Suri149 said:
Guys there is any chance of volte update because jio expanding their services to next one year
Can it is possible that after nought update it is possible
Click to expand...
Click to collapse
Possible? Yes, but it isn't likely and I certainly don't expect it to happen. Lenovo has shown no interest in updating the Pure/Style to support Jio, or even fixing the current VoLTE issues on supported carriers for that matter.
Hey could you also tell me how important the android security updates are? are they critical ? without it would my phone be vulnerable?
ThanuTK said:
Hey could you also tell me how important the android security updates are? are they critical ? without it would my phone be vulnerable?
Click to expand...
Click to collapse
Well on this I have a pretty strong opinion, and it isn't always well liked... I work in the IT industry with networks, so security is kind of a big deal to me... but Android security updates are essentially worthless, and are only a marketing ploy to make the company look better.
For example, lets look at some major vulnerabilities that have supposedly affected MILLIONS of Android devices... Dirty Cow is a good one, I am in a group here on XDA that is trying to use this vulnerability for something, anything really, but mainly for rooting difficult devices, and in a modern device it is almost impossible because of all the other parts of Android that help keep it secure like DM-verity and SELinux, end result is no usable exploit in almost all cases, although we have some results in cases where we are in complete control of the device with hands on adb access, but even then it is very rare and device specific, not something that you could just download a random malware app and have it affect you, I would need the device in hand. Then there are the terrible ones like Quadrooter, Stagefright, and Towelroot that affected millions, no tens of millions of devices, but have you ever heard of anyone being actually effected by a real exploit of that vulnerability? Nope, me neither, because for the most part these have only been exploited in a lab and not in real life... Because in a modern (I am talking Marshmallow or maybe even Lollipop) there are other things that protect the device, application sandboxing, DM-verity, SE Linux, and IntentFirewall, are all things that would likely protect the device even IF (and that's a big IF) one of these vulnerabilities did happen to be exploited on a device.
So are security updates important... no, not from a technical perspective in real life for the average user, but I certainly wouldn't reject them if they are easy to apply. I accept and apply every single one, even though I know the chances of something happening if I don't are probably less than that of me winning the Powerball Lottery Jackpot twice in two consecutive weeks, or about the same as being stuck by lightning while being bitten by a shark.
Now, none of what I am saying applies to other updates which are often bundled with security updates, or upgrades.
My thoughts exactly on the security updates. The only "evidence" I have heard about has been a couple of individuals who do not appear to understand why an app from some unknown source or dodgy websites along with crazy permission requirements might infect their phone. I acknowledge this as a human exploit though and not on the part of Android.
If I make current twrp backup, wipe, restore original Stock unrooted twrp backup, flash Stock recovery, take ota, reflash twrp and restore only data from the backup in first step would that essentially preserve user apps/data? Otherwise I will just freeze Moto update apk and wait for 7.0 to full wipe.
Update: Nm, I guess at that point without restoring system to preserve settings I may as well just use Titanium Backup :silly:
I'm rooted and using Xposed, but got the Dec update using a completely stock TWRP backup of system and boot posted here. Afterwards I simply had to reroot and reinstall my Xposed framework in TWRP, but all my modules which were still installed worked and maintained their settings. Couple of other minor cosmetic things I had to redo, but for me this worked very well without having to fully return to stock and reinstall everything from scratch. YMMV, and also do your own TWRP backup first just in case.
roaming4gnome said:
If I make current twrp backup, wipe, restore original Stock unrooted twrp backup, flash Stock recovery, take ota, reflash twrp and restore only data from the backup in first step would that essentially preserve user apps/data? Otherwise I will just freeze Moto update apk and wait for 7.0 to full wipe.
Update: Nm, I guess at that point without restoring system to preserve settings I may as well just use Titanium Backup :silly:
Click to expand...
Click to collapse
Dahenjo said:
I'm rooted and using Xposed, but got the Dec update using a completely stock TWRP backup of system and boot posted here. Afterwards I simply had to reroot and reinstall my Xposed framework in TWRP, but all my modules which were still installed worked and maintained their settings. Couple of other minor cosmetic things I had to redo, but for me this worked very well without having to fully return to stock and reinstall everything from scratch. YMMV, and also do your own TWRP backup first just in case.
Click to expand...
Click to collapse
This is actually a valid way of doing it, but with so many variables to the state of your device prior to doing this the possible outcomes vary a lot.
But @Dahenjo has pretty much the proper procedure... if I was going to try it I'd do it that way... backup, restore stock, take OTA, reroot, reflash Xposed, restore user data... 99% of everything should be intact.
acejavelin said:
Well on this I have a pretty strong opinion, and it isn't always well liked... I work in the IT industry with networks, so security is kind of a big deal to me... but Android security updates are essentially worthless, and are only a marketing ploy to make the company look better.
For example, lets look at some major vulnerabilities that have supposedly affected MILLIONS of Android devices... Dirty Cow is a good one, I am in a group here on XDA that is trying to use this vulnerability for something, anything really, but mainly for rooting difficult devices, and in a modern device it is almost impossible because of all the other parts of Android that help keep it secure like DM-verity and SELinux, end result is no usable exploit in almost all cases, although we have some results in cases where we are in complete control of the device with hands on adb access, but even then it is very rare and device specific, not something that you could just download a random malware app and have it affect you, I would need the device in hand. Then there are the terrible ones like Quadrooter, Stagefright, and Towelroot that affected millions, no tens of millions of devices, but have you ever heard of anyone being actually effected by a real exploit of that vulnerability? Nope, me neither, because for the most part these have only been exploited in a lab and not in real life... Because in a modern (I am talking Marshmallow or maybe even Lollipop) there are other things that protect the device, application sandboxing, DM-verity, SE Linux, and IntentFirewall, are all things that would likely protect the device even IF (and that's a big IF) one of these vulnerabilities did happen to be exploited on a device.
So are security updates important... no, not from a technical perspective in real life for the average user, but I certainly wouldn't reject them if they are easy to apply. I accept and apply every single one, even though I know the chances of something happening if I don't are probably less than that of me winning the Powerball Lottery Jackpot twice in two consecutive weeks, or about the same as being stuck by lightning while being bitten by a shark.
Now, none of what I am saying applies to other updates which are often bundled with security updates, or upgrades.
Click to expand...
Click to collapse
Real good explanation. Good balance of technological and practical
Sent from my iPhone using Tapatalk Pro
acejavelin said:
Well on this I have a pretty strong opinion, and it isn't always well liked... I work in the IT industry with networks, so security is kind of a big deal to me... but Android security updates are essentially worthless, and are only a marketing ploy to make the company look better.
For example, lets look at some major vulnerabilities that have supposedly affected MILLIONS of Android devices... Dirty Cow is a good one, I am in a group here on XDA that is trying to use this vulnerability for something, anything really, but mainly for rooting difficult devices, and in a modern device it is almost impossible because of all the other parts of Android that help keep it secure like DM-verity and SELinux, end result is no usable exploit in almost all cases, although we have some results in cases where we are in complete control of the device with hands on adb access, but even then it is very rare and device specific, not something that you could just download a random malware app and have it affect you, I would need the device in hand. Then there are the terrible ones like Quadrooter, Stagefright, and Towelroot that affected millions, no tens of millions of devices, but have you ever heard of anyone being actually effected by a real exploit of that vulnerability? Nope, me neither, because for the most part these have only been exploited in a lab and not in real life... Because in a modern (I am talking Marshmallow or maybe even Lollipop) there are other things that protect the device, application sandboxing, DM-verity, SE Linux, and IntentFirewall, are all things that would likely protect the device even IF (and that's a big IF) one of these vulnerabilities did happen to be exploited on a device.
So are security updates important... no, not from a technical perspective in real life for the average user, but I certainly wouldn't reject them if they are easy to apply. I accept and apply every single one, even though I know the chances of something happening if I don't are probably less than that of me winning the Powerball Lottery Jackpot twice in two consecutive weeks, or about the same as being stuck by lightning while being bitten by a shark.
Now, none of what I am saying applies to other updates which are often bundled with security updates, or upgrades.
Click to expand...
Click to collapse
So i recovered and now wifi is not working. From the other thread i see that others have this issue as well. What are my options now?
ThanuTK said:
So i recovered and now wifi is not working. From the other thread i see that others have this issue as well. What are my options now?
Click to expand...
Click to collapse
Its a radio version issue... your radio firmware doesn't a match what the kernel wants. You need to flash the right ones. You will have tell me more details of how you recovered.
acejavelin said:
Its a radio version issue... your radio firmware doesn't a match what the kernel wants. You need to flash the right ones. You will have tell me more details of how you recovered.
Click to expand...
Click to collapse
I used XT1575 to update and then just followed the directions. Does that answer your question? if not could you please clarify your question ?
https://androidfilehost.com/?fid=745425885120703327
In the other thread i see people using MPH24.49-18-4 FIRMWARE to fix this issue, but you stated that this might cause issues in the future, so i dont know what to do. Thanks again for helping me and understanding my lack of knowledge with all of this.
https://forum.xda-developers.com/mo...bootloader-t3489110/post69432451#post69432451
ThanuTK said:
I used XT1575 to update and then just followed the directions. Does that answer your question? if not could you please clarify your question ?
https://androidfilehost.com/?fid=745425885120703327
In the other thread i see people using MPH24.49-18-4 FIRMWARE to fix this issue, but you stated that this might cause issues in the future, so i dont know what to do. Thanks again for helping me and understanding my lack of knowledge with all of this.
https://forum.xda-developers.com/mo...bootloader-t3489110/post69432451#post69432451
Click to expand...
Click to collapse
The only difference in your links is one is a later build than the other one. Either one should work fine but if I had my choice, I might pick the first update and then use OTA to get to present. NOTE: I had to restore my September 1 backup with TWRP as the December 1 security patch broke my Bluetooth and I use Bluetooth all the time, it is too important to me to lose over a stupid security patch. I have since frozen the updater to avoid being nagged to death install the December 1 update again. When the next "real" OTA comes along, I will thaw the updater so I can take it and *hope* that the Bluetooth issue is solved. I will of course *always* make a TWRP backup prior to doing *any* update so I always have a way to back out of it in the event something is broken over the latest security patch OTA. HTH

Relocking bootloader

Hey guys.
Really sorry for having to post this again :/
Tried posting my issue in this thread but I think that thread's gone cold.
----
I have a Moto G5 Plus US, Model XT1687
Current ROM Info:
Software channel: retus
Build #: NPN 25.137-33
Security patch: Jan, 1 2017
Baseband: M8953_02.03.07.06R POTTER_NA_CUST
On a whim, unlocked the bootloader. Now id like to lock it back.
I haven't updated my phone / installed any OTA's, phone keeps asking to update to NPNS25.137-33-5, haven't done it.
Does this procedure work for me?
Which ROM should I use?
Id like to relock the bootloader and receive OTA updates as normal on my US variant phone!
Many thanks!
I'm pretty sure Motorola hasn't released stock firmware for the retus version.
Cats_PJs said:
I'm pretty sure Motorola hasn't released stock firmware for the retus version.
Click to expand...
Click to collapse
So, there's no way for me to relock my bootloader unless motorola releases it?
Can't I use another firmware that's available here at XDA?
What would you do?
Not update OTA and wait for motorola to release the firmware, or should just leave it unlocked?
Thanks
seed_87 said:
So, there's no way for me to relock my bootloader unless motorola releases it?
Can't I use another firmware that's available here at XDA?
What would you do?
Not update OTA and wait for motorola to release the firmware, or should just leave it unlocked?
Thanks
Click to expand...
Click to collapse
I don't think there's a way to relock the retus version, but maybe I'm wrong.
As far as what I would do. I always run a custom ROM, so I'd flash twrp, make a backup and try a few roms..
seed_87 said:
So, there's no way for me to relock my bootloader unless motorola releases it?
Can't I use another firmware that's available here at XDA?
What would you do?
Not update OTA and wait for motorola to release the firmware, or should just leave it unlocked?
Thanks
Click to expand...
Click to collapse
To relock the phone, you must flash a complete factory image that is the same or newer than what you have installed... Only way, not that it gains much except the ability to pass SafetyNet checks on pure stock, which you can do with some root magic anyway, but the bootloader will change to a state of 2 (Relocked), your warranty will still be void, and you will still get the bootloader unlocked warning screen (unless you flash a custom logo).
Cats_PJs said:
I don't think there's a way to relock the retus version, but maybe I'm wrong.
As far as what I would do. I always run a custom ROM, so I'd flash twrp, make a backup and try a few roms..
Click to expand...
Click to collapse
Well, I originally wanted to just root the stock ROM and install a couple of things like: Adaway, some Xposed modules (Like the Youtube ad remover one), WiFi ADB (which requires root, allows one to wirelessly debug apks)
acejavelin said:
To relock the phone, you must flash a complete factory image that is the same or newer than what you have installed... Only way, not that it gains much except the ability to pass SafetyNet checks on pure stock, which you can do with some root magic anyway, but the bootloader will change to a state of 2 (Relocked), your warranty will still be void, and you will still get the bootloader unlocked warning screen (unless you flash a custom logo).
Click to expand...
Click to collapse
Wow relocking the BL sounds really useless once you realize what you're getting from it. I really don't care much for SafetyNet as (this model has no NFC). I don't use Android Pay either.
Honestly, I unlocked the BL but finally didn't root mainly because I read some issues when rooting. Please see this post
Thanks for the enlightenment!
seed_87 said:
Well, I originally wanted to just root the stock ROM and install a couple of things like: Adaway, some Xposed modules (Like the Youtube ad remover one), WiFi ADB (which requires root, allows one to wirelessly debug apks)
Wow relocking the BL sounds really useless once you realize what you're getting from it. I really don't care much for SafetyNet as (this model has no NFC). I don't use Android Pay either.
Honestly, I unlocked the BL but finally didn't root mainly because I read some issues when rooting. Please see this post
Thanks for the enlightenment!
Click to expand...
Click to collapse
If you do decide to root, I would suggest using magisk instead of SuperSU. I switched a few months ago, and it works perfectly
Safetynet isn't just for nfc, other companies and apps have used it in their software as well ie: Snapchat, and Pokemon go are 2 I can think off the bat.
Installing and/or rooting with magisk is fairly easy and painless, and it will have superSU which will give you root.
How to:
Must have twrp recovery, or some other custom recovery, although these days I would recommend twrp, as it works and is more widely used than say cm recovery is, since cm project was taken over by lineage now. Anyways, flash a custom recovery and use it. (note: I haven't used cm recovery or any other recovery in years, so I do not know it this works with antyhing else, aside from twrp, which I know it works fine with). There are also tutorials all over xda on how to install/flash twrp, as well as youtube videos if you prefer that better.
Go grab magisk.zip, (do a google search or look on xda, it's all over the place just do a search for like magisk zip, you'll find it).
The latest as of right now I think is 14.0 and you will also (if I recall correctly) need magisk manager, (and just like the zip file you can do a quick search it's also all over the place).
Once you have that, reboot into recovery, then flash the magisk.zip file, and reboot, it should give you magisk manager app in your app drawer and you should be rooted. (Note: You may need to update magisk manager.)
To check root grab an app called root checker on the plays store. (it's free)
It's that easy.
Short summary:
1: Install custom recovery (if you haven't already)
2: Boot to recovery, flash magisk.zip
3: reboot to system, and profit from root + safetynet hide.
Quick and painless root method.
I do all my rooting now this way, in fact I recently re-flashed my nexus 5x rom and instead of flashing superSU I flashed the magisk way instead, and it cover 2 things,
1: gives you root
2: it hides root from safetynet and lets you use nfc, pokemon go, snapchat, and other apps that use safetynet as well.
Cats_PJs said:
If you do decide to root, I would suggest using magisk instead of SuperSU. I switched a few months ago, and it works perfectly
Click to expand...
Click to collapse
Oh, wow, I had the (wrong) idea that the SuperSU method was the better one and superseeded magisk. If that works great then awesome I will root using magisk, thanks @Cats_PJs !
easyrider77 said:
Safetynet isn't just for nfc, other companies and apps have used it in their software as well ie: Snapchat, and Pokemon go are 2 I can think off the bat.
Installing and/or rooting with magisk is fairly easy and painless, and it will have superSU which will give you root.
How to:
Must have twrp recovery, or some other custom recovery, although these days I would recommend twrp, as it works and is more widely used than say cm recovery is, since cm project was taken over by lineage now. Anyways, flash a custom recovery and use it. (note: I haven't used cm recovery or any other recovery in years, so I do not know it this works with antyhing else, aside from twrp, which I know it works fine with). There are also tutorials all over xda on how to install/flash twrp, as well as youtube videos if you prefer that better.
Go grab magisk.zip, (do a google search or look on xda, it's all over the place just do a search for like magisk zip, you'll find it).
The latest as of right now I think is 14.0 and you will also (if I recall correctly) need magisk manager, (and just like the zip file you can do a quick search it's also all over the place).
Once you have that, reboot into recovery, then flash the magisk.zip file, and reboot, it should give you magisk manager app in your app drawer and you should be rooted. (Note: You may need to update magisk manager.)
To check root grab an app called root checker on the plays store. (it's free)
It's that easy.
Short summary:
1: Install custom recovery (if you haven't already)
2: Boot to recovery, flash magisk.zip
3: reboot to system, and profit from root + safetynet hide.
Quick and painless root method.
I do all my rooting now this way, in fact I recently re-flashed my nexus 5x rom and instead of flashing superSU I flashed the magisk way instead, and it cover 2 things,
1: gives you root
2: it hides root from safetynet and lets you use nfc, pokemon go, snapchat, and other apps that use safetynet as well.
Click to expand...
Click to collapse
Awesome explanation @easyrider77 I will definitely try to root using magisk. Thanks for the warning, don't play Pokemon go and haven't used Snapchat in years so i'm good! I'll try flashing the latest Magisk (v14.0)
One thing tho:
I think I want to (for now anyways) stay stock-ish (stock rom + stock kernel + twrp + magisk).
If I understand it correctly, flashing a custom recovery renders the phone unable to get OTA's (Not that I'd want to apply an OTA update on a modified rooted phone and risk a brick anyways) So, how would one eventually update Android? (Keeping in mind that Motorola hasn't released any retus firmware) Can I flash other non-retus firmwares? (Which wouldn't flash over twrp I think, I would then just loose root and have to flash magisk again, right?)
Thanks a ton guys :good::good::good:
EDIT:
Short xda search pointed me to this official TWRP link, will follow fastboot method to install TWRP.
I'm not sure what exactly stops ota from coming in. I've heard unlocking the bootloader is what causes it, and I've also heard that flashing a custom recovery is what causes it, and I've also heard a custom rom is what does it.
There are options as far as ota goes though, and work the same way, but you'd jsut have to wait. People release flashable ota files all the time, and can be flashed via twrp.
If you want to keep stock, and root that's fine too, but I personally wouldn't worry much about the ota issue at all, because eventually every phone will not get ota as it will lose support, but you can still get the latest and greatest up to date rom with it's features.
Prime examples would be:
Oneplus One,
Oneplus 3
some of the samsung devices like s4
These are just a few, and although they don't receive support officially, they are sporting the brand new android 8 oreo.
Even the samsung s4 has N for it and it came out in 2013 (that's near 5 yrs ago now) and started on Android 4.2.2 (Jelly Bean) and said it was upgradable to 5.0.1 (Lollipop), and now here we are running android 7.1.x.
https://forum.xda-developers.com/galaxy-s4-tmobile/development
(not sure if there were any unlocked variants of that phone at the time as it wasn't a common thing like it is now, that's why I chose the tmobile thread but there are other variants that get it as well)
So when it comes to ota, I personally would not an do not worry about that when I root, that's the last of my worries.
I prefer functionality and customization over ota myself, because most times someone comes out with either an official link to an ota or makes an flashable ota you can flash via twrp, although my semi-educated guess would be if you decide to install the official/stock ota, then it will erase everything you have anyways which can be a pain.
DO keep in mind once you unlock the bootloader, it "officially" voids any warranty and moto does have the option to refuse service if anything goes wrong with the phone, but I have heard some people had no issues and moto took the phone back even when rooted, but that is something you would have to make a choice and live with IF you decided to unlock the bootloader, as there is no way to undo that process.
I have re-locked the bootloader on a moto phone so yes it CAN be re-locked, but........it still gets triggered and moto will know that it's been unlocked even if you re-lock it, because that part is irreversible and cannot be undone, aside from you locking and unlocking it on your side.
As for flashing firmware and all that, make DOUBLY sure you know your phones model number and/or codename, this is key in flashing most anything you do with your phone, because even though a phone may have multiple variants, ie: tmobile, sprint, at&t versions, and even European versions, and the phones are identical in EVERY way hardware wise, you can't just simply pick a rom of choice and use it, it's a matter of knowing what your phones info is.
Example: you cannot take a t-mobile phone rom and flash it's official firmware or it's roms, and updates on a at&t variant, or a metroPCS on a tmobile variant, even though they use the same network, and are the exact same phone and hardware, there are subtle differences and can most likely brick the phone, either hard or soft.
So if I had the US variant of the g5 plus that would be codenamed the same "potter" like the rest, but, the number is different which is XT1687, so I would use that number as my reference, as apposed to the potter name, because there are 3 other variants of that phone which are Amazon Edition and the consumer cellular and of corse the European variants as well, I'm not exactly sure what numbers go with what phones other than the US unlocked variant, but on a quick look the other numbers are XT1684 and XT1685, perhaps someone else with more experience than I have can tell you what those number match up with said phone.
As far as the US variant goes though, I do not want to take a rom or firmware meant for the XT1684 XT1685 and use it on the XT1687 US variant, as it will most likely have bad results, ie: brick of some sort.
That's the main thing you have to worry about, other than that, there isn't much worry. Just do some major research and goggling and read and re-read and read again the directions on the threads at xda as most generally all of them are pretty simple to follow, if you do it step by step.
I recently bought an lg k20 plus phone from metroPCS, have never rooted that phone before and came to xda and followed the rooting thread and rooted it the first time. In a matter of 30 mins I had full root with stock rom (since there are no roms for that phone as of yet) but it is a metroPCS variant, (mp260) and in the case above, this phone is also sold by tmobile, is the exact same phones specs hardware, etc....I could not use the tmobile rom or firmware on this phone.
Hope this helps clear it up some.
Update:
I just bought a 64gb storage/4gb ram US variant of the g5 plus. It brought back some older memories of when I had my other moto, X I think it was, not sure anymore, but I DO remember you can unlock the bootloader as well as re-lock it, but, do keep in mind it still triggers something internally that can't be reveresed, so if moto did decide to check into things, they can tell if it's been bootloader unlocked.
So while you can unlock and lock the bootloader on our side, moto can still tell it's been unlocked, even when re-locked. Just hope if you send it back in they just don't check it and even if they do, hope they don't bother sending it back saying your warranty is void sorry.
Thanks @easyrider77
I used to install custom ROMs on my older phones. Recently though, stock android has gotten pretty good so maybe when this phone loses support I'll try some ROMs. Out of curiosity, what ROM/hacks/kernel do you use?
So, how does this sound:
- Install the OTA my phone's been prompting me to update to (upgrading from NPN25.137-33 to NPNS25.137-33-5 and I think it will then try to update to NPN25.137-83 with an August 1 security patch)
- Install TWRP via fastboot, make a nandroid backup!
- Root with Magisk v14.0
- Looking into maybe changing the boot.img "Your device is not trustworthy" thing
- Adaway! Xposed! Other goodies yay!
- Any other recommendations?
PS: Can Magisk root every firmware released by Motorola for the Moto G5+?
I've used it on my nexus 5x, and a lg k20 plus phone to root. I'm not sure if it has any limits when it comes to phones, but to my knowledge it should work fine.
Be careful with the boot.img file, if its not the correct size it will brick the phone too.
easyrider77 said:
I've used it on my nexus 5x, and a lg k20 plus phone to root. I'm not sure if it has any limits when it comes to phones, but to my knowledge it should work fine.
Be careful with the boot.img file, if its not the correct size it will brick the phone too.
Click to expand...
Click to collapse
WIll do, many thanks for all your help guys!
@easyrider77 @Cats_PJs @acejavelin
:good::good::good:
Every rom I've tried on this phone works well, with only minor bugs. Right now I'm using the Pixel ROM. Elemental x is my kernel of choice because it's stable and has a sound option to increase volume. I use Kernel Adiutor for settings. The viper magisk module by ahrion works great, and ad away is a must. Good luck
Cats_PJs said:
Every rom I've tried on this phone works well, with only minor bugs. Right now I'm using the Pixel ROM. Elemental x is my kernel of choice because it's stable and has a sound option to increase volume. I use Kernel Adiutor for settings. The viper magisk module by ahrion works great, and ad away is a must. Good luck
Click to expand...
Click to collapse
Nice to hear cat.
I'm holding off on rooting just yet, although the temptation is really really great and pulling at me right now ina bad way . I just want to make doubly sure the phone isn't going to have issues, and hardware glitches. Anytime you mass produce a product, inevitably there will always be a bad batch(s) so I am just watching and waiting patiently on stock non-root (yes I said non-root LOL) but it's not as bad of an experience as I thought it would be.
I have to give this phone props, this phone is simply great. I bought the 64gb storage/4gb ram US variant, and have been nothing but happy with it, even on stock.
Camera isn't exactly your top tier phone camera but it certainly stands out as one of the not bad at all cameras. I see many saying the camera sucks, well if your zooming in and expect to get a good picture, good luck with that, simply put as I read in an article, two things 1: just don't use zoom, it's a digital zoom as apposed to an optical zoom, and simply will give you fuzzy and blurry pics a alot 2: if your after a good picture taking experience, for crimeny sake, buy a dang camera, these are phones people, NOT cameras. If they were meant for that, photographers around the world would be using phones, but guess what, news flash, they are using things called "cameras" wow what a concept LOL.
Anyways, if you just use very little zoom (I'd say 1.5 - 2.0x at most) but mostly just get closer to the subject or item you are takeing pics of, you'll have a much more pleasant experience with picture taking, trust me.
Ok of my soap box and tangent, sorry .
I will eventually root this bad boy, as I cannot resist the urge. For now I am just making sure the phone has no hiccups or glitches hardware wise, so glad to know roms are working well.
I did have a question about the sound though. I see people saying low sound volume with this phone, and I personally do not see (or hear in this case) the problems. I watched a few youtube videos last night and honestly I had to turn it down some because it was plenty loud, at least from this side.
Does the sound get lower with roms? (in wich case I can use viper) but I'm just curious.
easyrider77 said:
Nice to hear cat.
I'm holding off on rooting just yet, although the temptation is really really great and pulling at me right now ina bad way . I just want to make doubly sure the phone isn't going to have issues, and hardware glitches. Anytime you mass produce a product, inevitably there will always be a bad batch(s) so I am just watching and waiting patiently on stock non-root (yes I said non-root LOL) but it's not as bad of an experience as I thought it would be.
I have to give this phone props, this phone is simply great. I bought the 64gb storage/4gb ram US variant, and have been nothing but happy with it, even on stock.
Camera isn't exactly your top tier phone camera but it certainly stands out as one of the not bad at all cameras. I see many saying the camera sucks, well if your zooming in and expect to get a good picture, good luck with that, simply put as I read in an article, two things 1: just don't use zoom, it's a digital zoom as apposed to an optical zoom, and simply will give you fuzzy and blurry pics a alot 2: if your after a good picture taking experience, for crimeny sake, buy a dang camera, these are phones people, NOT cameras. If they were meant for that, photographers around the world would be using phones, but guess what, news flash, they are using things called "cameras" wow what a concept LOL.
Anyways, if you just use very little zoom (I'd say 1.5 - 2.0x at most) but mostly just get closer to the subject or item you are takeing pics of, you'll have a much more pleasant experience with picture taking, trust me.
Ok of my soap box and tangent, sorry .
I will eventually root this bad boy, as I cannot resist the urge. For now I am just making sure the phone has no hiccups or glitches hardware wise, so glad to know roms are working well.
I did have a question about the sound though. I see people saying low sound volume with this phone, and I personally do not see (or hear in this case) the problems. I watched a few youtube videos last night and honestly I had to turn it down some because it was plenty loud, at least from this side.
Does the sound get lower with roms? (in wich case I can use viper) but I'm just curious.
Click to expand...
Click to collapse
I really don't have a problem with the sound volume, except when I plug it into my truck. If there's a good song on, and I really want to crank it up, I run out of volume, so I usually turn up the headphone gain in the kernel settings by 3.
I haven't noticed variance between ROM volumes on this phone, but I know on my old note 3 there was definitely fairly large variance between ROMs.

OK3: any modifications at all possible?

Hello,
A few months ago, I was able to successfully root my AT&T S4 (SGH-I337, builld LRX22C.I337UCSGOK3) using KingRoot. The KNOX warranty bit was not set at the conclusion of the root process.
After wrestling with storage problems, including the "system memory" taking up 6.29 GB out of the meager 16 GB that is on this phone (preventing practically any Google Play updates from occurring, as the available space would always dip below 500 MB periodically), as well as performance problems (very long delays for some touch events and a general resentment of TouchWiz), I decided that enough was enough, and I decided to change my ROM/OS out for LineageOS.
LineageOS offers builds for jfltexx, which is reported to work for jflteatt since they are similar enough. I am not really willing to try "older" builds, as one of my goals is also to bring the security of the operating system up to date, so I am not exactly inclined to go for old CyanogenMod builds. The LineageOS install guide stipulates that I install TWRP to successfully install the OS via a supported recovery; however, the message SECURE MAGICCODE FAIL: recovery appears, as the upgrade process seems to be expecting something signed by Samsung (right?). Other guides warn that the stock recovery only allows stock OS installation and not custom operating systems, so I decided not to try that route. This effectively prevents me from installing LineageOS due to a problem that is inherent in OK3.
Why did I make the mistake to install OK3? More than a year ago, I decided to do the final update that AT&T pushed out for this phone. Thinking that it would be something significant, I went for it, only to find out months later that it was a minor update whose purpose was also to add an additional lock to the bootloader. As this phone is "fairly old" (is 2013 already considered ancient times?), I have not found many guides that cover OK3, and those that do pertain to either rooting the S4 (already done) or something about downgrading (but I can't really do that, seemingly due to the OK3 lock-in). Oops.
That said, is there any hope to bring more life out of my phone, or is it time to throw the phone out and buy a Pixel or related product like any typical consumerist would do? My goal is to move to another OS to end the storage problems and other quirks of this phone that I have grown to deplore; that is all I wish to attain.
The phone is relatively reliable: it had ~1200 hours of uptime before I had to reboot it a few days ago to fix a data connectivity problem. The battery is also very manageable and can last a day and a half in regular use, but it can last 2-3 days under maximum power-saving mode.
I have read the rules and done some research on this forum, among some others. Thank you for your assistance.
Upgrading the phone to 4.3 locked the boot loader which prevents the installation of TWRP.
audit13 said:
Upgrading the phone to 4.3 locked the boot loader which prevents the installation of TWRP.
Click to expand...
Click to collapse
I see; so I was already screwed when I had OK2?
oldmud0 said:
I see; so I was already screwed when I had OK2?
Click to expand...
Click to collapse
Yes, anything past MDL has the bootloader flaw patched. MDL firmware and below have a flaw in the bootloader that allows loki doki to be installed bypassing the bootloader lock so you can install TWRP recovery and custom AOSP ROMs.
Since you're on OK3, you're forced to use safe strap recovery and can only install custom touchwiz ROMs like golden eye and albe95.
If you want to read up on the MDL bootloader, I have written a guide here: https://forum.xda-developers.com/galaxy-s4-att/general/how-to-one-guide-to-mdl-bootloader-t3584122
My wish is to escape TouchWiz, so I suppose I have hit a dead end.
Thank you for your help anyway.
oldmud0 said:
My wish is to escape TouchWiz, so I suppose I have hit a dead end.
Thank you for your help anyway.
Click to expand...
Click to collapse
If you want away from touch wiz, I think there's a Google play edition ROM for the galaxy s4 that you can use with OK3, but I am not too sure. I would just check the galaxy s4 ROM section for it. I'm on the MDL bootloader which allows me to use TWRP, so I don't know too much about safe strap recovery.
Even if one wanted to do a TouchWiz-based ROM, I don't think we on OK2/OK3 even have the option to install SafeStrap, so far as I can gather
Hold the phone, I think I've found something. Evidently we can Odin back down to NB1 and go from there! Experiments, here we come.
Yes, NB1 is as far back you can go I believe without bricking your phone.

I'm confused, rooted OnePlus 8 Pro can or can't use fingerprint security

Hello Guys,
I'm about to buy the OnePlus 8 Pro, as I haven't had a root-able phone for a few years and greatly miss it. In choosing the phone to buy, and to save you guys time answering repeated questions, I of course have read many threads related to rooting, which versions can me rooted, issues with rooting, etc. Mind you most of my rooting was with HTC and I never once had an issue.
I'll be buying the US market unlocked variant, rooting it, and I'll likely use Magisk during the process.
1. Do we actually need to flash a bootloader, or can I just load it with the bootloader without flashing to maintain the stock bootloader?
2. What things are broken from root? I'm assuming the google pay features will break, but will I not be able to use the fingerprint scanner? Or is it a hit and miss, intermittent problem for some and not others? This is the question that seems to lack a consolidated, concise explanation.
3. Is it better to use the international version, or the US version, or does it matter?
I rarely use custom roms, but when I do, I prefer to run pure Android. I prefer speed over animations. When I don't, I remove every app I can without breaking the phone. How friendly is this phone to trial and error, and re-flashing to start over while I'm learning?
Camboozle said:
Hello Guys,
I'm about to buy the OnePlus 8 Pro, as I haven't had a root-able phone for a few years and greatly miss it. In choosing the phone to buy, and to save you guys time answering repeated questions, I of course have read many threads related to rooting, which versions can me rooted, issues with rooting, etc. Mind you most of my rooting was with HTC and I never once had an issue.
I'll be buying the US market unlocked variant, rooting it, and I'll likely use Magisk during the process.
1. Do we actually need to flash a bootloader, or can I just load it with the bootloader without flashing to maintain the stock bootloader?
2. What things are broken from root? I'm assuming the google pay features will break, but will I not be able to use the fingerprint scanner? Or is it a hit and miss, intermittent problem for some and not others? This is the question that seems to lack a consolidated, concise explanation.
3. Is it better to use the international version, or the US version, or does it matter?
I rarely use custom roms, but when I do, I prefer to run pure Android. I prefer speed over animations. When I don't, I remove every app I can without breaking the phone. How friendly is this phone to trial and error, and re-flashing to start over while I'm learning?
Click to expand...
Click to collapse
Previous HTC rooter here. Had the 10, then the 12+
This phone is slightly more root friendly. And no, there is no custom bootloader. You will not need to go and get a token from a website to unlock the bootloader. As far I can tell at a glance, S-OFF isn't a thing.
If you set up magisk properly, google pay will work (for now). I use it every other day. Widevine certification will default to L3, so you can't root and keep that in L1 like you could with HTC. I don't get it myself.
Do: backup persist partition (and modem1 and modem2 I guess? Someone recommended it) For sure. While rare, and particularly an issue with magisk canary, if you want any chance of the fingerprint sensor to last, backup the persist partition. Otherwise, you're technically sitting on a ticking time bomb and it can pop at any time and no longer function. Haven't heard anything too recent, but better safe than sorry. Only other solution is RMA.
HTC phones, least the ones I used, used LCD panels. I love LCD, because it seems more protection from burn in and screen retention, and less issues for screen problems. That said, this is a newer screen and amazing, just not as amazing I feel as an LCD screen (although this is a better screen, via tech upgrades and more). Keep in mind there are rampant reports of green tint or burn in right away, black crush, and other screen issues. If you do go with the phone, I recommend giving that a thorough once over.
Customer service is in par to that famous thing of kids going, "Are we there yet? Are we there yet? Are we there yet?" Type stuff. Do not expect anything from customer service outside what directly is stated to contact them (such as RMAs), and then be prepared to fight tooth an nail for it, and prepare for any additives that arise from it. I would have better odds of customer service with comcast (as weird it sounds) than with oneplus' customer service. They will not honor anything outside what you can do on the website yourself.
What I mean by that, is if you have a coupon for a 10 dollars off accessories, and you accidentally "place" an order and forgot something, and want to add it again? Either wait for your current order to expire to then allow for the coupon, or you're SOL. And to add: By far, the oneplus 8 launch was the worst I ever experienced from any industry, especially as it comes to ordering it. So if you stay, keep that in mind.
A lot of people recommend to just forgo the warranty and get your own via other means (my renters insurance provides it for like, 6 bucks a year) as it's literally the same boat as customer service, with reports of people being charged erroneously like, 500 dollars for some incompency from the warehouse.
If you're in the US the global model I believe is the one you want. UK, INDIA, and CHINA have their own model. While it can be possible to use these, keep that in mind that you most likely want the phone to be compatible with the bands of your country. I believe the india / chinese model is the only one who now has the photochrom filter disabled, thus if you do go with one of these, you'll want to either install a magisk rom, or fix it yourself with one of the many guides available.
You can convert the phone to different models more easily. Such as chinese to global, as compared to HTC phones. You don't need to do superCID like you did or similar I believe, and it's very tolerant of that. In fact, the first oneplus phone even shipped with CyanogenMod installed, now more or less known as lineageOS. This device is very customizable friendly. In fact, some roms will even allow you to uninstall practically anything you want.
Speed is the name of the game, and if you like fast devices, this will blow you out of the water most likely. I personally run .5 on all animation speeds myself.
And of course, if there is issues and you really messed stuff up, you can use the MSM tool or whatever it is to correct the issue. (Again, keep that persist backup in case)
The device will detect if you're rooted and installed either the small OTA package, or the full package in case. I used to always have TWRP installed, but I don't even use it anymore myself so much. The full package can flash through the system update too, btw. Only upon unlocking the bootloader will the data partition be wiped that one time.
There is the hole punch camera, and that was a significant selling feature for me for HTC, but... I figured I'd deal with it this once. Keep that in mind if this feature bugs you as it does me.
Ok, this was my tidbit of info. If you need more clarification or something, ask. Otherwise, enjoy.
Great response, thank you!!! I think it'll be fun to pay with. But really, worse customer service than COMCAST!!! Wow. I guess you get the device and nothing more. Hard to justify 800 bones and no customer service though.
Truant_Luce said:
This phone is slightly more root friendly. And no, there is no custom bootloader. You will not need to go and get a token from a website to unlock the bootloader. As far I can tell at a glance, S-OFF isn't a thing.
Click to expand...
Click to collapse
What do you mean by "need to go and get a token from a website"?
Can't I just simply unlock the bootloader like on my Oneplus 5t?
I am getting my 8Pro this week and plan to install the global ROM instead of the Chinese ROM it will come with, then root it and finally install TWRP.
Do I need to install TWRP to both slots? What are those "slots" anyway? My old phone was a 5t so it had no "slots" .
The instructions I have read are a bit confusing, seems like it is more difficult to install TWRP than it was on the 5t.
Thanks.
Camboozle said:
Hello Guys,
I'm about to buy the OnePlus 8 Pro, as I haven't had a root-able phone for a few years and greatly miss it. In choosing the phone to buy, and to save you guys time answering repeated questions, I of course have read many threads related to rooting, which versions can me rooted, issues with rooting, etc. Mind you most of my rooting was with HTC and I never once had an issue.
I'll be buying the US market unlocked variant, rooting it, and I'll likely use Magisk during the process.
1. Do we actually need to flash a bootloader, or can I just load it with the bootloader without flashing to maintain the stock bootloader?
2. What things are broken from root? I'm assuming the google pay features will break, but will I not be able to use the fingerprint scanner? Or is it a hit and miss, intermittent problem for some and not others? This is the question that seems to lack a consolidated, concise explanation.
3. Is it better to use the international version, or the US version, or does it matter?
I rarely use custom roms, but when I do, I prefer to run pure Android. I prefer speed over animations. When I don't, I remove every app I can without breaking the phone. How friendly is this phone to trial and error, and re-flashing to start over while I'm learning?
Click to expand...
Click to collapse
Docomoco said:
What do you mean by "need to go and get a token from a website"?
Can't I just simply unlock the bootloader like on my Oneplus 5t?
I am getting my 8Pro this week and plan to install the global ROM instead of the Chinese ROM it will come with, then root it and finally install TWRP.
Do I need to install TWRP to both slots? What are those "slots" anyway? My old phone was a 5t so it had no "slots" .
The instructions I have read are a bit confusing, seems like it is more difficult to install TWRP than it was on the 5t.
Thanks.
Click to expand...
Click to collapse
Yes, you can. So HTC was the exact process, except you had to go to HTC dev, upload a string that was copied from bootloader, it would then create a token file that only your device could utilize and when you pushed it back to the device, that unlocked the bootloader. Oneplus, you just tell it you wanna unlock the bootloader and done. Since they are coming from HTC, why I said that.
Truant_Luce said:
Yes, you can. So HTC was the exact process, except you had to go to HTC dev, upload a string that was copied from bootloader, it would then create a token file that only your device could utilize and when you pushed it back to the device, that unlocked the bootloader. Oneplus, you just tell it you wanna unlock the bootloader and done. Since they are coming from HTC, why I said that.
Click to expand...
Click to collapse
Thanks.
How about installing TWRP? Would you have any suggestions as to how to go about it?
Also, I read that I better wipe /data before installing anther ROM.
However it seems TWRP still can't format partitions which means I can't wipe data.
Docomoco said:
Thanks.
How about installing TWRP? Would you have any suggestions as to how to go about it?
Also, I read that I better wipe /data before installing anther ROM.
However it seems TWRP still can't format partitions which means I can't wipe data.
Click to expand...
Click to collapse
Think mostly it's boot, but there is a way to install it if you must. I personally haven't touched twrp since moving to oneplus. If you're moving between AOSP or oxygen or hydrogen, yes, wipe data. This can be done via factory reset, without need of twrp. Now, don't quote me too closely for AOSP, but as oxygen or hydrogen builds go (Assuming magisk) you don't need to wipe data so much. I'd recommend consulting the individual device threads.
Thanks, will do.
Is there no way to retain L1? I've come from a Mi 9T where as long as your persist wasn't corrupted, L1 was fine. Do oneplus store the widevine certs in the boot partition or something strange?

Categories

Resources