yashsingh1/xdaforums huggingface dataset:
[BlackBerry Priv] Artemis-kun:
Not quite a deal breaker for me, since we'll figure out a way to get it eventually, I'm sure, but it certainly is a disappointment, considering how likely it is that this will be BB's final handset. If they were a bit more flexible to the needs of the people that seriously and truly want this device, they'd stand a better chance of staying afloat in the market. But with this kind of attitude, all they'll do is alienate the people that want it most, and placate the tiny minority of people who appreciate this sort of locked down nonsense, and aren't already on an iOS device.

Honestly, if they'd at least entertain the option for those of us that want this sort of thing, and know what we're doing and able to accept the risk, that would make it okay. Maybe once this all goes down and BB exits the handset market, they'll provide some method of unlocking the device anyway.
[BlackBerry Priv] RRuszczyk:
Exactly. I'm not using it for an enterprise environment, so while privacy is important, there are other needs that preempt that. While a bootloader lock is a terrible thing, especially if they stop support if it fails, a failure to root means huge amounts for me. I use adblock, plus a combination of greenify and amplify to get the battery life I need. If it's running close to stock already, which RIM says it is, then I don't need something like CM. This is making me lean towards a 6P, which I'm super disappointed about as the physical keyboard is something I'm dying for. I wouldn't even consider a purchase until a root method is discovered. TWRP would be such a great thing to get the Xposed mods for greenify and amplify working, but that's secondary to adblock and just basic greenify (which may not even be needed with marshmallow)
[BlackBerry Priv] :
I hope it will be possible soon...
[BlackBerry Priv] dcwiker05:
The only thing is if they cater to us, then that exploit is there and completely undercuts the security for enterprise. While I think it would be awesome if they just dropped the enterprise idea and went like OPPO or one plus and became a niche phone for people who like to tweak them. But I mean even the nexus are getting more security and limiting exploits. It seems the says of modding may be past their prime... Think about it, we haven't had a phone like the HTC HD2 ,ever and I really don't think anything will ever fill that void again, at least in Android. I mean I have the lg g4 its been out for ages but stable cm just showed up a week ago. Which I'm glad for it, especially if the Priv turns out to be unrootable because no cm for the g4 was a large reason I wanted the Priv, it's closer to stock. But I need root for things like Xposed since no one seems to feel the need to integrate the features CM and Xposed add. If someone would do that, I wouldn't need root. If I could change themes, hide unwanted icons, customize my lock screen and all that crap, the only thing I'd loose out on is root file manipulation which isn't huge for me. But these manufacturers don't seem to want to allow the end user to personalize their phone the way they want not the way the builder or carrier want.
[BlackBerry Priv] nanosp:
With the monthly updates, I hope so too
[BlackBerry Priv] brashmadcap:
lol yeah ok dude
[BlackBerry Priv] dcwiker05:
You say this like that wouldn't or hasn't worked...look at the AFTV, people are cracking them open for root, it's been done and if you have the technical know how, I don't blame you for doing it lol.
[BlackBerry Priv] varun.gid:
Spoiler: Yes the Developer Options can be Enabled the usual way. just my phone and enabled it. Now i just hope even Temp root is possible!
[BlackBerry Priv] 3Talk:
I think it is possible
[BlackBerry Priv] TPMJB:
I used a JTAG connection to mod my 360 and then further soldering with the Reset Glitch Hack. I am not a novice for this kind of work.

Shouldn't you be in school?
[BlackBerry Priv] brashmadcap:
I wasn't suggesting you're incapable of following directions and using a soldering iron, I'm just saying this isn't going to be that kind of hack.
[BlackBerry Priv] TPMJB:
Don't rule anything out. The bootloader is locked and supposedly each device has cryptographic keys injected, implying some sort of hardware check. The 360 had efuses to prevent downgrading or booting unsigned code, but we found a way around that. One of the DVD drives for the 360 was released to curb piracy, and it was found that by drilling into the drive, you could cut a wire and make it so the dvd drive could be written to, enabling a custom firmware.

Who knows what the future will bring? With enough interest, there will be someone creative enough to get by this.
[BlackBerry Priv] gaya4:
Also in for the no root=dealbreaker. I mean, the Priv is not a cheap phone I would be ok being unsatisfied with. The last good was the Xperia Mini Pro, but it was performance wise very slow. For 140$ you can try something. But 800 is another story.

For my Galaxy Note 3 I evaluated many phones and rooting capability and finally got it, except the HW keyboard and the FM-radio it does the job nicely.

The HW-keyboard is a huge plus, but for double the price of the Galaxy Note that phone has to be perfect in order to buy it.

Reports of a permanently warm and somewhat loose backplate leave me a bit disappointed. Remember: 800$. The Galaxy S6 seems to be comparably stable.

Batterylife seems to be so-so; I would never forget my second phone LG G2 which I got with Lollipop. By using it like twice per day for emails only and some settings, apps, the battery told me at 75% that it would remain for 245hours on. That was 5 days ago and it is now at 40%. HW-Design can be done nicely :)
[BlackBerry Priv] zelendel:
We have to remember that the average consumer is not the target for the priv. It's targets are big companies that have to have this security and buy devices by the thousands.
[BlackBerry Priv] jonny_mako:
For me, the reason to have root is adblock. If Blackberry had implemented adblock, I'd buy the Priv like now.
[BlackBerry Priv] varun.gid:
Battery life is great. i can easily get 6 hrs SOT with 18 hrs of use.
[BlackBerry Priv] umasood:
To enable developer options on Priv: http://crackberry.com/how-enable-developer-options-blackberry-priv

---------- Post added at 05:16 PM ---------- Previous post was at 05:14 PM ----------

Sure sideloading is disabled?... check http://crackberry.com/how-enable-app-sideloading-your-blackberry-priv
[BlackBerry Priv] weezul:
mate, totally. I had AdBlock on so long on my S5.... I feel like i'm drowning in adverts on my PRiv!
[BlackBerry Priv] woodicw:
That's really my only reason for wanting root as well. I can not stand youtube ads and haven't seen any non-root implementation of a youtube adblock.
[BlackBerry Priv] mercurialone:
Anyway to block google services pinging their servers or to remove them completely if root cannot be achieved? I don't see how it can be called a phone for Privacy if you can't stop the data mining that google does.
[BlackBerry Priv] zelendel:
Not without root. The phone is not meant for privacy, that is the Blackphone. This one is meant to be secure in that it can't be modified. Two very different target audiences.
[BlackBerry Priv] brashmadcap:
You know what, you're right. I shouldn't always be such a skeptic. High hopes for a slick solution (where we don't have to use a drill!).
[BlackBerry Priv] GAPY427:
Usually someone will come up with a root process. After all, this is XDA! ;)
[BlackBerry Priv] mercurialone:
That's almost criminal false advertising then- Priv for the "privilege of privacy". Do you think firewalls that do not use iptables (hence no root) can block play services connections? Any recommendations? Seems to be only reasonable solution without root...
[BlackBerry Priv] siani_8:
Edit: Wrong thread
[BlackBerry Priv] hrheim:
Developer options on Priv

Just enabled Dev options on my Priv.....
[BlackBerry Priv] dcwiker05:
Okay? This means quite literally nothing, and has been established. Lol
[BlackBerry Priv] tyrien:
Try going into the apps and disabling google service framework.

Though this will break google apps.

Unfortunately google is a bit of a jerk with google services.

If you're very worried about google then you can just not use a google account.

I'd assume the guy just got the Priv and started looking here and read the first few pages then replied.
[BlackBerry Priv] whowatchlist:
Well, If temp. root was possible, you might be able to use flashfire(beta) to flash superSU...

but, this presents a few challenges.

1.Obviously, geting root even temporarily will be hard.

2.Flashfire may or may not work.

3.This will probably trip a few things.

Has anyone tried modstrings in towelroot?
[BlackBerry Priv] MedicStuder:
Just FYI as I came from Nexus 6 to this device, I believe ChainFire was able to get root on 6.0 without touching system files. It was a beta approach as you needed to apply root after each boot. It's been a little bit since I read the post but it is hope.<br />

<br />
[BlackBerry Priv] MedicStuder:
I just want to add these 2 links for reference. I sent Chainfire a PM to get his input. Will report if I hear anything:

Systemless Root

SuperSU Beta
[BlackBerry Priv] Viperlin:
FYI I have busybox, and su binarys executing on the Priv over adb, local user (connectbot/terminal) on the phone has different permissions and cannot execute these.

busybox is fully functional, su does nothing. but posts no errors.

currently sat in /data/local/tmp as I have not yet found a way to correctly execute the su binary, you also cannot disable verity via adb.

Guessing we have to find a way to exploit a bug in an app that has elevated permissions.

*pokes priv with stick* ... nope that didn't work :)

edit: to be clear, dev options exist and have plenty of choices, hidden menu like all new androids

booting into recovery does not work - it does not appear to have one.

fastboot does not work so far. bootloader has the option but it does nothing.
[BlackBerry Priv] meltbox360:
Maybe I don't understand exactly what the priv does on startup but doesn't it verify all the files making an untethered root not really possible unless you have some app start with the phone and re-root it at boot by exploiting some api or something?
[BlackBerry Priv] CDB-Man:
[MENTION=1613590]Viperlin[/MENTION]'s findings are quite disappointing. :(

> booting into recovery does not work

> fastboot does not work so far

Already, it sounds like a major pain to do anything (untethered) to this device. I guess time will tell if someone finds any exploits.
[BlackBerry Priv] zelendel:
With Blackberries rep for security I wouldnt hold your breath. If someone exploits it then BB will most likely push an update within the day to patch it. This device would be the death of BB if they cant keep it completely locked down.,
[BlackBerry Priv] nbreight:
late to the feast...

i'm very interested in the Priv (whatever that is supposed to mean...) mostly for its hardware QWERTY keyboard.

Consider having a COLD backup of my device a basic requirement thus short of root + ClockWorkMod, nothing goes...

Downloaded the book «PRIV-by-BlackBerry-latest-Security-Guide-en.pdf» (linked earlier in this thread) and came across...

From

«The primary boot loader is part of the CPU and is write-protected. It validates the BlackBerry security shim using a key that's provisioned during processor manufacturing (using RSA-2048 with SHA-256). PRIV locks the boot media and locks the primary boot loader to load only the BlackBerry security shim.»

to

«The boot image is the actual system kernel, located in the user partition of eMMC, on the boot partition. Before the boot image mounts the dm-verity protected read-only file system, it's validated with the dm-verity key (RSA-2048 using SHA-256). It then starts the Android OS.»

the whole boot-chain is validated with high encryption keys - i don't know the technical intricacies of the Android boot process but i wonder how one might get around those... (?)

As to su / root priviledge

«BlackBerry Integrity Detection continuously monitors for events or configuration changes that could indicate a compromise to the security of PRIV. These include validating that unauthorized apps haven’t acquired escalated privileges (for example, rooting), performing checks on the integrity of the kernel, monitoring file system mounting permissions, unauthorized changes to the SELinux policy, and the disabling of security sensitive applications such as pathtrust.»

Just noticed on my Motorola Photon Q LTE that the developer option has a Root option. Is that a CyanogenMod feature (only)?
[BlackBerry Priv] hollywood084:
Wish I would have read this thread before I bought the phone.
[BlackBerry Priv] unfaix:
Was going to get one but now, no so much.
[BlackBerry Priv] Armazia:
The phone is still 100% worth it in my opinion :>
[BlackBerry Priv] nbreight:
«execute ‘root’ privileged malware»

from bgr.com/2015/11/06/blackberry-priv-android-security-updates/

«“Some critical Android vulnerabilities – for example, one that can be easily and remotely exploited with a publicly disclosed method to execute ‘root’ privileged malware – simply can’t wait for a monthly update cycle,” BlackBerry explains. “Depending on the severity of the problem, complexity of the fix, and timing relative to the monthly update cycle, BlackBerry will opt to perform a hotfix, where the code to address only the specific critical problem is pushed to customers.”

BlackBerry goes on to say that while it will work with carriers on the approval and delivery of hotfixes, it’s not going to wait around if they’re dragging their feet, which [...] happens all too often with Android updates.»

Any question?
[BlackBerry Priv] Shani Ace:
Do you have a link or other kind of proof on this? I know the old Blackberry phones did that, but it would surprise me (and maybe even be a reason not to buy it) if it would be same with Android.
[BlackBerry Priv] zelendel:
Why would it surprise you? Apple does as does Google. You can do a trace route to see, if it can be done on a device this locked down. I wouldn't worry to much about it. Sooner rather then later all androids will be locked down with the minor exception being the nexus line.
[BlackBerry Priv] Shani Ace:
Ah, I didn't know that. I mean, I knew that Android phones call home to Google servers and IOS phones call home to Apple servers. But I never would've thought the whole internet traffic would be routed through their servers first before it reaches its destination. I always assumed Blackberry was the only manufacturer who did this on their old OS to keep their alleged security image (although everybody knows that BB isn't and never was secure).

As a European user, it concerns me that all my traffic will be routed directly to the NSA first (although I know that European secret services aren't much better in that regard).

But what concerns me even more in Blackberry's case is that if BB should ever cease to exist as a company, the Priv would become useless.
[BlackBerry Priv] zelendel:
That is something to keep in mind but it's the same if Google ever went out of business. (well for most devices, won't effect aosp as much but would still lose most things like app store and gmail) apple is well known to do this. Their servers were hit not to long ago and their imessage went down. All Internet goes through a ton of servers before it hits the destination. First your carrier then Google's, and then the server that controls the page you are going to.

I'll be honest privacy is an illusion when you use anything connected to the Internet. Be it the NSA (not even the worst of them) or any other of the world's governments.
[BlackBerry Priv] Shani Ace:
Ah yeah, forgot to mention the carrier.

Of course it's the first stop for your data. And you're right, the same could happen with Google, but I trust them to be around for a long time since - despite their might and data gathering - they produce really useful (software) products and always have an eye for the future. I don't see Google going away in the foreseeable future. Apple on the other hand could be dying a lot sooner, they never contributed anything good and now their sales numbers are finally declining. And BB, who knows, they could go extinct in a few years or even one year.

That's true... the only thing for us left to do is making it harder for them to collect our data. But still, there is no way to be absolutely secure.
[BlackBerry Priv] nbreight:
Would guess that the going specifically through the BB servers is limited to the BB services.

Most of the rest goes through Ggl's nets, obviously unless one installs some AOSP derivative and minimal (or no) GApps.

And there are always unknown sources like Yandex, fdroids and what not.

Even though without Ggl's underpinning a lot of the "smart" is gone. Would we really want that?

Maybe HTC devices will remain unlocked as well?
[BlackBerry Priv] zelendel:
I wouldnt count on it. Android is not secure enough in its current state to be used in the corp arena.

I would trust the NSA before I trusted Yandex or the other options really. Nor do I fully trust fdroid. People should not be in a rush to install software that is not checked. Heck there are even apps there that contain keyloggers and such. You just have to be careful.

Even without gapps it has been shown that without some of googles stuff many things just wont work. Like GMS and SMS this is due to the way the OS was made.
[BlackBerry Priv] zelendel:
I wouldnt count on Apple going anywhere any time soon. They are still the Go to OS for most of the corp world and places that need security.

You are right. There is no way to be sure. That is why I never do anything on line that I am worried about being disclosed. Things like banking apps and such are just a bad idea.
[BlackBerry Priv] Shani Ace:
You're right, at least with the NSA you know they are loggin you input. ;) No but seriously, what makes you say that? Of course you can send SMS without gapps on Android.

You must be joking, right? Apple and security? That's like calling a tank peaceful. Not only does Apple collect a lot of data about their customers (more than their competitors do), they also had several icloud leaks and even the US government was able to crack that terrorist's iphone without Apple's help. Additionally, Mac OS is also not secure. There are still a lot of Apple users out there who think there is no malware on Mac OS (but there is) and that's what makes them vulnerable. Nothing about Mac OS is more secure than any other OS. Also, where are you getting that about Mac OS being the go-to-OS for the corp world? I know Apple devices are popular among some - but not all - artists (graphic, video, music). But I've never seen or heard of corporations using stricly Mac OS in their offices. And honestly, I wouldn't know a reason why they should.

Oh and about Apple declining: I'd bet on that. But I mean in the long run, not in the near future. IOS is already a minority player in the worldwide smartphone market for a long time. The only thing that made Apple big were the ipod, iphone and ipad. Nobody uses an ipod anymore, the iphone is a minority and - I think - even in the tablet market Android and Windows are getting stronger every day. At the same time, Windows is still the most used PC OS by far.
[BlackBerry Priv] zelendel:
Gapps are only part of android. SMS is routed through googles messaging service. We have a googleless set up in the threads and you can see the issues that come from them removing all of googles stuff. Things like GPS, sms and other things have issues.

As to why I said that. Well You were mostly right. I know they are spying on me ( I even made sure of it lol) I just trust the Gov of the country I live in more then one I dont. ITs just a matter of where one lives.

As for the other part. I used to deal with corp orders for a few Carriers and the device of choice for large orders was always IOS. Now we are seeing more for Samsung devices as well due to their completely locked down nature. I never said Mac OS was the choice just the Iphone. While not completely secure it is far more secure then most android devices at this point. If you look around even the most security minded developers here carry an iphone for their everyday device and save their androids for their hobby. When compared to the rest IOS is more secure when compared to the rest. Yes the FBI cracked the iphone but that was expected when every security agency came forward and offered to help crack it for them. But it also cost them millions of $ to do it.
[BlackBerry Priv] nbreight:
Apple doesn't aim to be the biggest, they are making as much money with as useless technology as is only possible... As long as it is only shiny and dummies pay premium for it.

This being said, the risk or safety of a device is not in the device itself but in the use made of it.

downloading FF from Yandex is giving you exactly the same FF as from Ggl play or fdroid.

if one is stupid enough to download games and knows gawd what other useless crap, of course you are ending up with malware all over the place.

The user's choice(s).

Same thing goes for the Android itself. whether one uses Gmail from a browser (Internet Explorer or FF or Chrome or even Ghost...........) Ggl will read one's emails and sGam the user based on it.

worst comes to worst, just install AOSP WITHOUT GApps, install Ghost and do everything in there.
[BlackBerry Priv] Mainscreenturnon:
I believe these phones have never had their bootloader unlocked on verizon: Droid 3 Droid 4 Note 3 Galaxt S5
[BlackBerry Priv] LuH:
I have Droid 4 and confirm the bootloader has never been unlocked - and refuses to boot if file systems / partitions get significantly changed. However, the phone was rooted and a Safestrap system has been developed to circumvent the bootloader lock: as far as I understand it, the boot process is hijacked early on (after the original kernel is loaded from an original ramdisk I think) and second system booted on top of the starting original one, either from main system partition where only bootloader-required files are kept, or from a disk image in the user memory. It acts as another bootloader with TWRP environment for managing other ROMs installations, backup, etc.

AFAIK Safestrap was developed from earlier Bootstrap by [MENTION=4243514]Hashcode[/MENTION] and now most of Droid 4 development including updated Safestrap is maintained by [MENTION=3457922]stargo[/MENTION] – maybe they could help? But for this you need root first.

I'd love to get Priv to replace my aging and recently unbelievably slow Droid 4 and like the HW a lot, but there's no way I buy unrootable phone :rolleyes:
[BlackBerry Priv] zelendel:
I wouldn't count in it. They are locking android down more and more. Sooner or later only the nexus line will be modable at all and that encludes root.
[BlackBerry Priv] nbreight:
Any manufacturer with companies as potential customers has indeed to prevent moding by all means but i think there will be if not a whole OEM dedicated to consumers at least having a couple devices that can be unlocked, rooted and moded as one sees fit.

saw a Android Central article ( www.androidcentral.com/your-privacy-your-fingerprints-and-fifth-amendment ) which points out that law enforcement can request the unlocking of a device with finger print which can not be denied but not with a (PIN) code. Furthermore they thus advice to shutdown one's device if police shows up (and PIN lock the boot).

And conclude that if a device is unlocked (which usually shows on the boot screen) any data can be copied off the device...

obviously also true for anyone finding / stealing the device.