view the rest of the comments
Android
DROID DOES
Welcome to the Android community on Lemmy. Here you can participate in amazing discussions and events relating to all things Android.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules
1. All posts must be relevant to Android devices/operating system.
2. Posts cannot be illegal or NSFW material.
3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.
4. Non-whitelisted bots will be banned.
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Community Resources:
Could you explain further please?
What is so bad about the unlocked bootloader? Can't you relock it?
Unlocking the bootloader makes the entire system compromised - an adversary can install malware that persists through reboots or even factory resets, since the security regarding verified boot is disabled; they can decrypt the storage and read, copy it; it is relatively easy for a system to experience privilege escalation, and run admin commands - if the user is aware of it or not.
There's a few other things, and some of it needs an additional step or two, but most things go from 'impossible' to 'trivial'. And when you're facing an adversary (be it a rootkit in an apk, law enforcement, or government agencies) that expect you to be knowledgeable about tech, they will take advantage of the potential holes users might make along the way.
Relocking the bootloader is incredibly rare on custom roms; I know of only one that supports it (gos). Every other rom I've ever used, so in the 50+ range, doesn't worry about it. So usually the only way to relock is to revert to factory.
LineageOS via avbroot, CalyxOS and iodéOS all support bootloader relocking.
Even /e/os supports relocking.
Rocking it rn.
Is calyx still a thing? I used to use it years ago. iode is a new one to me :o
Yeah CalyxOS just came back from a hiatus due to some internal drama, and iodéOS is a French based ROM that is based on LineageOS.
CalyxOS has made some pretty nice QoL changes in the last few years that I really appreciate (Seedvault backups, Per-app, per connection type firewalling, Work profile ootb, VPN sharing over all profiles)
iodeOS offers bootloader relocking on devices that support it, and they support devices longer than Calyx & Graphene for Eco. sustainability, but you do still run the risk of the proprietary hardware drivers having vulnerabilities. I tried it out for a bit but it wasnt for me.
Thank you!
No problem :)
Yes, you can relock it. There is quite a bit of misinformation in this thread, I'm not sure why. As you can see from this chart, bootloader locking is available with iodéOS across multiple devices (including Fairphones), not just Pixels.
Yes, you can relock the bootloader, though only with official builds
https://doc.e.foundation/os/learn/bootloader-relocking#relocking