[LG V20 Questions & Answers] runningnak3d:
So, software and security, how can you eat your cake and have it too?

By default, the phone will come locked. It will use an RSA key that is kept under lock and key. There will be no traditional download mode, or recovery. There will be no adb, no fastboot.

When you boot the phone, the only thing you will get is the OS. So let's say a kernel exploit comes along, or something like Janus that allows you to modify a signed app -- there is no way to install it because you won't even have a terminal. All thanks to SELinux. But OK, someone finds some exploit to modify system -- it is write protected at the hardware level.

I have had a LOT of time to think about how to seal every last hole in Andorid, but, I will be consulting with actual security experts to make sure nothing is missed. I mean look at the Switch, if you have the right hardware you can use attack vectors that you might not think of from a "closed box" mentality -- I want to avoid those as well.

So, how do you get control of YOUR phone?

When the phone boots, you will be required to input a PIN, password, key (I am not sure about the technical details on this one yet) that will give you access to an unlock port. In the future, if you want to unlock your phone, you will go to a website just like you do to unlock carrier free LG phones, and download a file that is unique to your phone. This will NOT void your warranty. You will then use this file, along with your (pin, password, key) to unlock your phone.

It will be done this way for a couple of reasons. Before getting the file, you will be made aware that your phone's security is now YOUR responsibility. If you leave it unlocked, then anyone that has physical access to it can install pretty much whatever they want.

Once unlocked, you will have access at the PBL level. If you just want root, you can flash a vendor supported version of TWRP (no point in reinventing the wheel), you will then be able to flash a vendor supported kernel that will allow you to modify system. Viola -- you have root.

So how do you secure your phone again? You will have the ability to install your own RSA key. There will be three modes that the phone will run in:

* Fully secure stock from factory

* Fully unlocked

* Relocked with YOUR key.

This last mode will have two modes:

* Hybrid - all the firmware is still verified by the factory key, but boot and system are verified with your key.

* Developer - all the firmware needs to be signed with your key.

Tools will be provided to make this very easy, but at the end of the day, if you have an unlocked phone, security is up to you.

So how about OTA updates? They will only be available on a factory locked phone. Once the phone is unlocked, you will have to download updates yourself. If you have installed your own keys, then you will be able to sign the updates. This allows you to keep your phone locked. If you have a fully unlocked phone, then you can just flash the unsigned updates.

By updates, so far I have been referring to just the firmware, not the OS. So what about the OS?

From the factory, the phone will ship with bone stock Android. As long as you don't install another ROM, you will be able to update your OS as well.

So what if you want to install another ROM? Have at it, but you can no longer take OS updates -- but you can take firmware updates.

So what about third party ROMs? It is always a bit of a pain to get a ROM running a new phone because vendors don't want to help -- we will. We will have a development community run by our programmers for the specific purpose of helping to get a ROM ported.

So you don't want to run Android? Fine, again, you will be able to have access all the way from the PBL. You can't modify the PBL -- that is on the CPU, but the first thing that the PBL loads is the XBL, and you will be able to run whatever you want.

So how do we get this past the FCC? Modem firmware will be the one no no. Sorry, that is just life. Take it up with the FCC. The thing is, you will have no reason to modify, or install different modem firmware. From the factory, all bands will be available, so you gain nothing.

If all of this sounded to technical, then I can sum it up with -- the phone will be yours. Do as little or as much as you want with it. Just know that from the factory, it will be the most secure phone ever made -- but also, even if you modify it, YOU can KEEP it secure.

-- Brian