about the safety and security of custom rom - Moto G5S Plus Questions & Answers

Hello members I want to know how safe is our custom ROM .currently I am using aosp ROM .I want to know what safety and security will give this custom ROM.the developer can put a rat or malware while packing and coding the ROM.
Is using custom rom's and kernels safe for my password's, Google Account, credit card's?
Can developer of custom rom/kernel implement badware, or no?

subinsrk said:
Hello members I want to know how safe is our custom ROM .currently I am using aosp ROM .I want to know what safety and security will give this custom ROM.the developer can put a rat or malware while packing and coding the ROM.
Is using custom rom's and kernels safe for my password's, Google Account, credit card's?
Can developer of custom rom/kernel implement badware, or no?
Click to expand...
Click to collapse
Custom ROMs posted here are free from such badwars.
Mostly all ROM / kernel / Mods are open source, you can see what commits/mods/features developers have implemented in their stuff, you can find github links in every ROM/kernel thread.
Besides ROM/kernel,
At the time of unlocking or rooting, you are accepting the risk of what rooted device is...
If you know how and what to install, get unlocked and flash,
And warning: dont install unnecessary mods/hacked apps/cracks (which are considered warez here).. those apps/mods can harm your privacy..

subinsrk said:
Hello members I want to know how safe is our custom ROM .currently I am using aosp ROM .I want to know what safety and security will give this custom ROM.the developer can put a rat or malware while packing and coding the ROM.
Is using custom rom's and kernels safe for my password's, Google Account, credit card's?
Can developer of custom rom/kernel implement badware, or no?
Click to expand...
Click to collapse
What you're running doesn't matter really.
By unlocking a device, ie. bootloader, you negate any and all security checks built into the system that ensure nothing is running at the system level except what should be running.
An unlocked bootloader leaves the system wide open to anything - good or bad.
It's a shame people don't know what it really means to have an unlocked bootloader.

Related

[Q] CyanogenMod on stock kernel

Hi!
I was wondering if it would be possible to run a CM userland on a stock kernel (Yes I am one of those fools who bought a device with "bootloader unlock allowed: no").
This has been done in the past for other phones and apart from delivering a CM experience to locked phones this would also allow for a working Bravia engine on CM. Sure there would be some limitations when running such a setup (e.g. because of certain kernel modules not being available), but Sony seems to update the official firmwares at a acceptable pace, so there are fairly recent official kernels available: Most recent stable CM is based on 4.2.2 as is Sony's most recent firmware.
I can hardly estimate how problematic other aspects (ABI version mismatches, etc..) might be when trying this, but I remember CyanoSpaceMod for the XU which worked for devices with locked bootloaders. It was a working CM9 and implemented CWM in the same manner as the dual recovery on the XZ for locked bootloaders running on the stock kernel.
All in all it seems to me that all the building blocks are there, but I have no experience in building CM, so I cannot do this on my own, I need some guidance.
Would it be enough to simply build CM for the prebuilt stock kernel as outlined here, even if it meant that tehre would be no CWM support initially? The kernel itself can easily be extracted from a stock rom...
Any help -- even just an educated guess -- would be appreciated.
Not possible matey.
DrKrFfXx said:
Not possible matey.
Click to expand...
Click to collapse
Could you point me to somewhere, where I can find an elaboration on the subject so I can educate myself?
Why is the XZ so much different than other Sony phones? Or is it simply because Sony was so forthcoming in open sourcing everything they legally can, fostering kernel hacking so that the CM kernel now differs greatly from the stock kernel?
In that case I can fully understand that major changes in the CM base would be required to make it run on the stock kernel...
(I am actually just asking out of curiosity, since I got an unlockable device yesterday )

Customization w/o custom roms

Are there any other mod packs, similar to MCR, that enables custom ROM customizations to the stock ROM?
toledodj said:
Are there any other mod packs, similar to MCR, that enables custom ROM customizations to the stock ROM?
Click to expand...
Click to collapse
Mods or apps that make changes to system settings/files always require root. Try for instance custom launchers to add some features if you don`t want to root.
I am rooted
toledodj said:
I am rooted
Click to expand...
Click to collapse
You haven`t mentioned that But MCR should work if its compatible with your build. I advice to make a TWRP nandroid backup before you go flashing just in case.
gee2012 said:
You haven`t mentioned that But MCR should work if its compatible with your build. I advice to make a TWRP nandroid backup before you go flashing just in case.
Click to expand...
Click to collapse
Lol I already have MCR installed. I'm looking for more customization options
toledodj said:
Lol I already have MCR installed. I'm looking for more customization options
Click to expand...
Click to collapse
Could you give some more info next time you ask for help? Like what rom you`re running, rooted or not, mods installed, custom/stock kernel etc etc :silly:
gee2012 said:
Could you give some more info next time you ask for help? Like what rom you`re running, rooted or not, mods installed, custom/stock kernel etc etc :silly:
Click to expand...
Click to collapse
Sorry, I assumed the fact that I was even mentioning customizations would indicate that I was rooted. But yeah, I'm running rooted stock, stock kernel, and using the MCR mod pack. I'm wondering if there are other mod packs similar to MCR?
toledodj said:
Sorry, I assumed the fact that I was even mentioning customizations would indicate that I was rooted. But yeah, I'm running rooted stock, stock kernel, and using the MCR mod pack. I'm wondering if there are other mod packs similar to MCR?
Click to expand...
Click to collapse
There are no other mod packs that I am aware of, though there is always Xposed, but it is in Alpha stage so if you're not a confident modder, probably stay away.
Why not use a custom ROM though?
rootSU said:
There are no other mod packs that I am aware of, though there is always Xposed, but it is in Alpha stage so if you're not a confident modder, probably stay away.
Why not use a custom ROM though?
Click to expand...
Click to collapse
Stock is better and more stable. Custom roms are fine, but a hassle to install and the easiest way to end up with a bricked phone. I have installed a custom ROM before, stock is a better experience.
Sorry, before I answer, my question was to find out your reasons and see if there was anything I could help you overcome. My intention is to help set your mind at ease, but given the reasons you've given, I apologise in advance of my answers seem like I'm just being a git.
toledodj said:
Stock is better and more stable.
Click to expand...
Click to collapse
I think that would be a sweeping generalisation and mostly the opposite of my experience. There is a nack to choosing roms though.
toledodj said:
Custom roms are fine, but a hassle to install
Click to expand...
Click to collapse
a hassle how? Download rom and gapps to sdcard, flash via recovery, wipe data, restore user apps. Don't forget you can't get OTA updates with root, mod packs and custom recovery so that's even more of a hassle imho.
toledodj said:
and the easiest way to end up with a bricked phone.
Click to expand...
Click to collapse
I think that is another sweeping generalisation. I haven't ever seen anyone brick their phone with a custom rom.. Assuming you're using the correct definition whereby phone must be sent to the manufacturer for repair... The most I've seen is someone flashing a kernel or bootloader from the wrong device, or disconnecting mid-flash which can all be fine as stock too.. Though there was that time when cyanogen tried to downgrade the bootloader, though we tend to stay away from them anyway.
Maybe your reasons are born of a lack of confidence and that's understandable. The reasons you have however aren't really reasons though.
I would agree that it's mostly lack of confidence. I mean who would be confident in installing a custom ROM when there's always that warning about bricking and damaging the device. Why risk it? In my experience, it's not installing the ROM that's a hassle, but switching roms or returning to stock. And also having to factory reset the device constantly is very tedious.
toledodj said:
I would agree that it's mostly lack of confidence. I mean who would be confident in installing a custom ROM when there's always that warning about bricking and damaging the device. Why risk it?
Click to expand...
Click to collapse
The warnings are a general disclaimer so there is no come back on the dev. Ever wonder why some packs of nuts say "may contain nuts"? Its the same sort of thing.
There's no more risk flashing custom roms than flashing stock roms or OTA updates. In fact I think there is less risk. And by flashing mod packs, you're already taking the exact same risk as flashing a custom ROM, so I don't understand the logic.
toledodj said:
I would agree that it's mostly lack of confidence. I mean who would be confident in installing a custom ROM when there's always that warning about bricking and damaging the device. Why risk it?
Click to expand...
Click to collapse
Mostly people with none or very low understanding of rooting, flashing, adb and such are a high risk for bricking their phone.
The big picture is:
- make sure the fastboot drivers are installed correctly
- Enable adb debugging and enable oem unlock, both in developer options
- Unlock the bootloader in fastboot
- Flash TWRP recovery and make a nandroid backup
- Flash a custom rom and Google apps
- Optional flash a custom kernel
- Flash superSU.zip
- Reboot and thats it
rootSU said:
The warnings are a general disclaimer so there is no come back on the dev. Ever wonder why some packs of nuts say "may contain nuts"? Its the same sort of thing.
There's no more risk flashing custom roms than flashing stock roms or OTA updates. In fact I think there is less risk. And by flashing mod packs, you're already taking the exact same risk as flashing a custom ROM, so I don't understand the logic.
Click to expand...
Click to collapse
True. Don't get me wrong. I have no problem with installing roms and, admittedly, I enjoy the rush while going through the process. Okay, say I did want to install a custom ROM, what's the best one for N6?
toledodj said:
True. Don't get me wrong. I have no problem with installing roms and, admittedly, I enjoy the rush while going through the process. Okay, say I did want to install a custom ROM, what's the best one for N6?
Click to expand...
Click to collapse
He he bit of a loaded question. My favourite ROM is in alpha so I can't recommend that but a couple with good functionality and stability
Chroma
Terminus
I really hope i havent bullied you into flashing a ROM
rootSU said:
He he bit of a loaded question. My favourite ROM is in alpha so I can't recommend that but a couple with good functionality and stability
Chroma
Terminus
I really hope i havent bullied you into flashing a ROM
Click to expand...
Click to collapse
No not at all. A while ago, I always installed custom roms, but I wanted to see how much can be customized with the stock ROM. Now I'm pretty sure I've done all I can w/ stock. I've heard Euphoria is pretty good also. Is that true?
toledodj said:
No not at all. A while ago, I always installed custom roms, but I wanted to see how much can be customized with the stock ROM. Now I'm pretty sure I've done all I can w/ stock. I've heard Euphoria is pretty good also. Is that true?
Click to expand...
Click to collapse
Best way to find out? Try it for yourself. Also, returning to stock on a Nexus is the easiest thing, just a basic understanding of fastboot. There's a guide for that, in the general forum. Look in the sticky roll up thread.
That's the beauty of a Nexus, the simplicity of modification. The amount of development.
Evolution_Freak said:
Best way to find out? Try it for yourself. Also, returning to stock on a Nexus is the easiest thing, just a basic understanding of fastboot. There's a guide for that, in the general forum. Look in the sticky roll up thread.
That's the beauty of a Nexus, the simplicity of modification. The amount of development.
Click to expand...
Click to collapse
Ikr. That's why I chose N6. Thanks for the input.
toledodj said:
No not at all. A while ago, I always installed custom roms, but I wanted to see how much can be customized with the stock ROM. Now I'm pretty sure I've done all I can w/ stock. I've heard Euphoria is pretty good also. Is that true?
Click to expand...
Click to collapse
I cant comment on that because I haven't tried it or seen it recommended anywhere. That's not to say it's not good, I'm sure it is.
Best way to find a ROM in my opinion, look at the feature set and find one you like, then read a bit of the early pages of a thread them a few at the end to get a feel about what the users think.
Hopefully soon, Xposed will become stable and a whole world will open up to 5.1 users.

Xiaomi Scandal

Hey guys, I suppose some of you have had a xiaomi in the past and I have two questions for you and maybe someone that has some knowledge about xiaomi.
1) Currently how's Xiomi dealing with privacy? I remember 1 or 2 years ago Xiaomi has hit with strong reports of leaking information to their government (chinese) and everything we did on the phone would be seeded to their servers, even SMS's and other stuff..
2) How's the ROM support usually for Xiaomi? Do they usually get a stock based ROM, which has no bloatware and some nice tweaks?
Thanks everyone!
Afaik, being a mi3 user, they had a "data sharing" option on by default in miui which is now changed to be off. Personally i never considered it much as there were already devs who had made custom rom for the device, i think over the last two years i might only have used miui for about 4 to 8 months.
No bloatware, but if u r not a previous user, u might find some apps useless (it has its own clean master replacement app). So yeah, there are a lot of options for tweaks n stuff by default too. Hopefully this answers your questions. (and add a question mark to the title, it looks like u r going to rant about Xiaomi by reading the title, lol)
arnabbiswasalsodeep said:
Afaik, being a mi3 user, they had a "data sharing" option on by default in miui which is now changed to be off. Personally i never considered it much as there were already devs who had made custom rom for the device, i think over the last two years i might only have used miui for about 4 to 8 months.
No bloatware, but if u r not a previous user, u might find some apps useless (it has its own clean master replacement app). So yeah, there are a lot of options for tweaks n stuff by default too. Hopefully this answers your questions. (and add a question mark to the title, it looks like u r going to rant about Xiaomi by reading the title, lol)
Click to expand...
Click to collapse
Do you think there will be much custom rom/kernel support for the Mi 5 (or does this depend on Xiaomi allowing for an unlocked bootloader together with release of kernel sources) ?
SlyUK said:
Do you think there will be much custom rom/kernel support for the Mi 5 (or does this depend on Xiaomi allowing for an unlocked bootloader together with release of kernel sources) ?
Click to expand...
Click to collapse
There will sure be support for custom roms even when the kernel source isn't there, my device had custom roms even before kernel source was released, although there were a bit bugs due to it and only a few (like 5 to 10) custom roms were there, bit with the release of sources, it jumped to 50+. And my device had the bootloader unlocked by default, which even i didn't knew until i rebooted to it. Although the fastboot wasn't able to get the info about the bootloader (like version, etc). IDK if any new devices require to unlock it but i don't think it should be hard as they support it, so that won't be a barrier for development.
TL;DR- less n buggy roms w/o kernel source, floods of roms and custom kernels after source, nothing to concern about bootloader.
There maybe some rom development from a few people that get the device and maybe from cm. But that's about it. Non of the big name team roms will have official versions, just maybe ports.
As for the security and privacy. That is up in the air as it seems even on custom roms they some how have managed to still keep track of the devices. One person on the MI note found that even while not on miui for months that they still had a current backup of all his apps and info.
Website signature
zelendel said:
There maybe some rom development from a few people that get the device and maybe from cm. But that's about it. Non of the big name team roms will have official versions, just maybe ports.
As for the security and privacy. That is up in the air as it seems even on custom roms they some how have managed to still keep track of the devices. One person on the MI note found that even while not on miui for months that they still had a current backup of all his apps and info.
Website signature
Click to expand...
Click to collapse
With regards to porting an official rom, I suppose these would be regarded as Unofficial versions. If that is the case is there any real disadvantage in having the "Port" as opposed to have the "Official" version ?
Ports normally will have some bugs as this happens due to not having some things for device built into the code.
Data leak & Software development
Yes I also heard that even with a custom ROM on the device they still found a way to make the device connected and synching information with their servers, which I don't find that funny..
I wanted to know if this data leak is still present in the previous flagship, anyone tested it recently?
It's good to know that it has nearly no bloatware from what you are saying me, but if it has something I don't find useful I may just freeze the app.
Also does anyone know if Xiaomi usually takes long times to update the software of their devices (I heard that they were an exception in relation to other Chinese manufacturers) and release the kernel sources for the ROM developing community or are they pretty good on this area?
Thanks!
:good: :good: :good:
No they are terrible about it. Normally when they post the kernel source it is incomplete and broken.
As for updating. Until very recently they based their os on 4.4 and when asked why they said they didn't care about official android versions.
As for bloat that depends on how you look at it. Miui is about as bloated as TW or HTC Sense.
@zelendel In terms of big name team roms having official versions, would kindly give a few examples ?
SlyUK said:
@zelendel In terms of big name team roms having official versions, would kindly give a few examples ?
Click to expand...
Click to collapse
The biggest are the one or two devices (cant remember their names off the top of my head) that were able to get/fix the kernel source and device trees which CM picked up. So some of the teams that use CM source as a base like AICP also picked up Official versions for the devices.
Then you have the Roms that are based on AOSP instead of CM. As they dont use CM as a base ( Maybe some parts) These roms like Slim or Dirty Unicorns seldom see official versions of the rom. Normally you might get a port here and there. It all depends on if the one of the devs gets the device as most teams don't offer official support for devices they do not own.

Dim or switch off hardware buttons backlight on custom rom

What's up everybody?
I think I need some help.
I'm running a custom rom, apparently without any setting around the possibility to switch off or dim the hardware buttons backlight.
I'm wondering if it was possible to use a third party app, if it exists, or to modify any build.prop line or some more stuff like that, waiting for my rom developers to add this feature.
Please don't talk to me about xposed modules, I don't want to install xposed.
What custom rom are you using? Cause I'm using RR and I have this option right in the configurations part of settings.
se7ensde said:
What custom rom are you using? Cause I'm using RR and I have this option right in the configurations part of settings.
Click to expand...
Click to collapse
I know. I'm running Reaper OS (what was Broken OS up to few weeks ago). You can't find anything on XDA about it, that community doesn't want their rom to be discussed here.
I already asked in their community what was to be asked.
What I'm asking here, is a workaround on any android 7.1.1 custom rom. It can also help few other people with the same problem and not necessarily the same rom.
bigo72 said:
I know. I'm running Reaper OS (what was Broken OS up to few weeks ago). You can't find anything on XDA about it, that community doesn't want their rom to be discussed here.
I already asked in their community what was to be asked.
What I'm asking here, is a workaround on any android 7.1.1 custom rom. It can also help few other people with the same problem and not necessarily the same rom.
Click to expand...
Click to collapse
well if that's a feature you want I would say you should switch ROMs. I don't know of any workaround for this. Or you might try requesting it to be added in by the Dev.
@se7ensde I thank you very much for your time and efforts, but you are telling me obvious things.
This rom simply rocks on this device and, as I said, I'm already asked this feature on the right channels.
I'm asking a workaround, not another rom, I tried all of them already.

Question Custom roms

So im looking into ROMs for my 10s and sad to see no resurrection remix ROM available. What ROMs are you guys using and do you ever think we will see RR on the 10s?
Actually using Miui 13,
Waiting for a custom rom that won't get blocked
I'm content to simply debloat for the moment, though I am keeping track of the ROMs that are available.
LesGirauds said:
I'm content to simply debloat for the moment, though I am keeping track of the ROMs that are available.
Click to expand...
Click to collapse
I'm not bothered too much about bloat. My main "issue" is just wanting to use touch gestures with a 3rd party launcher and I thought if I'm going to have to go though the effort to flash something I might as well go full out flashing a new ROM but I've learnt that there's not much in the way of ROMs on Mediatek devices which is sad so time to start thinking about a new device I guess
X i i K said:
I'm not bothered too much about bloat. My main "issue" is just wanting to use touch gestures with a 3rd party launcher and I thought if I'm going to have to go though the effort to flash something I might as well go full out flashing a new ROM but I've learnt that there's not much in the way of ROMs on Mediatek devices which is sad so time to start thinking about a new device I guess
Click to expand...
Click to collapse
im using FNG application with gestures for nova launcher or stock rom
im using using corvus os from this
works fine , of course there are bugs but fixable.
the guide
How to flash custom rom AND revert Miui
Hey there, first post here, Got several higs with my RN10S playing a bit. How to flash a custom rom in Xiaomi phones? -First unlock your BL with MiFlashUnlocker. MiFlashUnlocker -assuming you're on 12.5.16.eu and wants to go to custom rom...
forum.xda-developers.com
all data will be lost.
just some notes.
if you soft bricked your phone just download from here:
Xiaomi Firmware Updater
The ultimate script that provides firmware packages for Xiaomi devices.
xiaomifirmwareupdater.com
download the fastboot type then extract , ready fastboot on your phone then use (double click) flash_all and it should be back to MIUI. You can also downgrade using this method

Categories

Resources