[Security Discussion] ezrawk:
Sorry if I posted this thread in the wrong place, but after searching here and there, the only place appropriate for my thread seems like in here. If I posted in the wrong place feel free to delete my thread or to move my thread to the right sub-forum. Sorry if this feels like I'm ranting or complaining, but this issue of mine just seems so cruel, evil, and unfair, especially done by such a big brand like Xiaomi.

So here's the deal, I bought a Xiaomi Redmi 5A (2GB RAM and 16GB's of storage) in mid of January. I bought the 5A because it had great specs even with it's low price and it's because my current daily driver can't handle the latest of what Android offers (I was using an ASUS Zenfone 5 with an Intel Chipset, very fast battery drainage, low compatibility with latest apps, and very poor signal reception plus dying support on XDA).

I bought my 5A online from a Official Store, but it was manufactured in my country (Indonesia) that was under a certain brand of smartphone warranties (TAM). I checked the device via Mi-Verify and the results showed up seeing my 5A is an official device supported by Xiaomi.

When the device was in my hands I proceeded to try to unlock it's bootloader, so I can gain root access and start restoring right away every Titanium Backup backup I had so I can use the 5A as my daily driver. I logged in to my Mi-Account and because my account had already been approved of Mi bootloader unlocking since 2016. I thought everything would turn out smooth, I expected that I had to wait for 72 hours or something (which I didn't mind about and was willing to patiently wait for). I proceeded to enable Developer Settings (in which is required to be able to bind my account to the device and unlock it using Mi-Unlock Status). I turned on USB debug & OEM unlock then I proceeded to get permission (bind Mi-Account) from Mi-Unlock status. This is were things went downhill.

First, it showed me an error code 10008 (in which could be fixed by using a Chinese based VPN server), then after using a VPN, it showed me another error code which is now my current nightmare: code 86023 hardwareId abnormal (<- originally Chinese fonts which I translated via google translate). I started searching for guides here and there to fix this issue with no luck at all. I tried every guide out there and even destroyed my warranty in process (I had to open the back case and use the test point methods) because I was followed a guide that said I had to flash via QFIL/Mi-Flash a China Developers ROM to be able to unlock my bootloader (which didn't change a thing, it still failed to unlock and still showed those 2 error codes: 10008 & 86023).

I even posted a thread in MIUI forums about error code 86023 in the complaints/advice sub-forum (in which now has the highest views and replies), and was surprised to see that I wasn't the only one with this UBL issue. It affected lots of Xiaomi devices that were manufactured or distributed in the near end of 2017 and early 2018 (especially Asia-Pacific devices). I faced a dead end and was hoping that it'll get fixed in a month.

After waiting for a month or more, it didn't get fixed at all. The only thing that was fixed was error code 10008 (Now it doesn't require a bypass via VPN) but the error code 86023 persisted. I got totally frustrated and tried contacting customer service via online chat and via email. First I tried online chat, and they suggested me to go to a local authorized service center to ask for bootloader unlocking. When I arrived to one of those shops, I was surprised that they said that they don't accept UBL pleas, they say that the user has to do it by their own consent (which pissed me off because I told them my situation and they still refused to help me). Then I emailed my country's customer service (service.id@xiaomi.com). I had 2 sessions of replies in which first they told me that UBL has been disabled by Xiaomi because they fear my device would be vulnerable to virus attacks (SERIOUSLY!?). I told them that I understand the risks of UBL and asked for a better and decent explanation on why UBL has been disabled. Then I received this reply:

[IMG="Email"]https://image.ibb.co/mwrdcn/Xiaomi_email.jpg[/IMG]

"Kami mohon maaf atas kendala dan ketidaknyamanan yang Bapak Ezra alami. Terkait kendala yang terjadi, perihal kebijakan bahwa Unlock Bootloader sudah ditiadakan merupakan wewenang dari pihak Xiaomi Pusat yang berada di Cina."

This translates to:

"We are sorry for these issues and inconveniences that Mr. Ezra has experienced. Regarding to the problems that have occurred, the Unlock Bootloader policy has been removed and it is under the authority of Xiaomi's central headquarters that is in China."

After reading this, I was dumbfounded, totally dumbfounded. I nearly went ballistic. I was super pissed off and disappointed.

So from what I read, it seems like devices for my country, or maybe all of Asia Pacific has been totally locked out of UBL. So now I have no idea on how to unlock my Redmi 5A.

I did read UA of Xiaomi and found that they have total rights on removing a feature of some sort (read Xiaomi's User Agreement):

"The user accepts that in relation to business development, we may change, suspend, restrict, terminate or revoke the rights of our services at any time without notice;"

I understand this very much, but why did they have to terminate UBL? I thought Xiaomi supported developement and modding. But how did it come to this?

Please give me your opinions about this absurdness that Xiaomi has thrown to me and many other users out there.

Thanks.