yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] Revontheus:
Rooting itself is not dangerous, it's the user with root access that's dangerous. If the person is stupid, he/she may grant root access to a malicious application. It's the same as a car. The car itself is not dangerous, but in the hands of a stupid person, it becomes a deadly weapon.
[General Questions and Answers] ElmondII:
I get that, https://en.wiktionary.org/wiki/PEBCAK

So how about software running on the phone, for example the browser, say the user becomes infected with a virus and doesnt notice, could the virus gain root access without explicit user consent?
[General Questions and Answers] blackhawk:
Is your bootloader locked?

If not that's a huge security hole.

PC's are infected easily. A stock Android running on 9 or higher is near bulletproof if you don't do stupid things.

I won't root mainly because I have a Snapdragon and also because by running it stock it is fulfilling its mission with no malware or crashes in over 3.5 years. Extremely stable and reliable in spite of heavy usage with minimal maintenance.

Less down time means more play time.
[General Questions and Answers] ElmondII:
Why is unlocking the bootloader a security risk?

I have the bootloader unlocked.

Had to unlock it or else i would be stuck with the disgusting google android spyware.

Seriously, googles stock rom is EXTREMELY privacy invasive, i don't see how malware is any worse or better, in my eyes google is no better than malware.

I'm runnng twrp/lineageos.

How would i relock the bootloader? By installing stockrom? Is there another way?

If there's a way to relock the bootloader and keep a custom rom+recovery, what consequences will that have?
[General Questions and Answers] HippoMan:
I'm willing to take total responsibility for the security of my handheld device. I have more than 50 years experience in software development, and lots of that relates to security.

I don't want some paternalistic organization that has a bunch of self-important but under-educated fools who work there implementing policies to allegedly "protect" me from myself.

That's like someone putting obstacles in the way of my living in my house if I don't install a security alarm system that the person approves of.

I'd be willing to sign a legally enforceable waiver saying that I will hold no one but myself responsble for any losses I might suffer as a result of my mobile device being modded and rooted. However, the paternalistic fools will never accept any plan like that. They'd rather just impose their poorly-thought-out values on others. It's cheaper and easier for them that way.
[General Questions and Answers] ElmondII:
Agree 100% very well written!

I have no history in IT security whatsoever, but i sure am convinced that free liberte open source software will always be my choice over propietary BS!.

Organizations saying they want to protect the people actually want to enslave them.

The agenda has become very obvious. They abuse the term secuirty to increase surveillance.
[General Questions and Answers] V0latyle:
The function of the bootloader (besides literally loading something to boot) is to verify the authenticity of system images, and prevent flashing of protected partitions. The first prevents persistent rootkits, and the second prevents unauthorized images.

The bootloader should be locked ONLY if the firmware has been signed using the installed root of trust key. This is obviously true of factory firmware, but it can be done using custom firmware signed by a custom key. CalyxOS and GrapheneOS are two examples of projects that follow this scheme; when the OS is flashed, a custom key is installed that the bootloader can use to verify the images that have been flashed.

Unfortunately this means losing root.

Well, as Ben Franklin pointed out, many are willing to give up liberty for a sense of security. People like us who value our freedom are outliers, unfortunately. You are absolutely correct in your assertion of the corporate agenda. It's all about control.

Back to the matter at hand: From a security perspective, a rooted phone has been compromised. If you granted permissions to the wrong app, said app could then gain privileged access to app data or working memory.

Root, or superuser access, is not the same as admin privileges on a Windows device. Su is basically God mode - you can do anything and access anything, including things that would be otherwise protected. Even an admin user on Windows can't delete critical system files or access protected memory.

The problem is, security professionals don't really understand the difference between a compromised device, and an intentionally rooted one...nor do they care. To absolve themselves of any liability, they try to ensure their software can only run on a phone/tablet that meets all the security check boxes.
[General Questions and Answers] HippoMan:
Every Mac and Linux box has a root account that the machine owner can log into.

And any such machine owner (or anyone with the root password) can do this ...

% sudo -s
# chown root:root /path/to/executable
# chmod og+sx /path/to/executable

From this point forward, any non-root user who invokes that executable will be running it as user "root" with full root privileges.

This is totally equivalent to using Magisk under Android to mark an app as being able to run as root.

Windows offers similar facilities to set up any executable to run as the "Administrator" user with full Administrator privileges.

Every Linux, Mac, and Windows machine in the world has these capabilities. In other words, every one of those machines is rooted. And this is nothing new.
[General Questions and Answers] HippoMan:
Given that every Linux, Mac, and Windows machine is rooted (see my previous post here), many people routinely choose to run anti-virus software and other security software on these machines.

They don't have self-important fools in paternalistic organizations like Google and many banks *forcing* that kind of security on them against their will.

IMO, Google and many app developers (such as those who develop banking software) should take a similar stance with Android: offer or suggest *optional* security services to users who *choose* to make use of those services, and not try to force those security services down the throats of the rest of the users who don't want them.

Of course, it will be a cold day in hell before Google and most of those developers would ever take such a position.
[General Questions and Answers] blackhawk:
Even with patches for every hole they can find, endless security safeguards and Playstore most Android users have no clue how to securely use their phone. It would be a dumb bunny blood bath to make stock devices more configurable. That said after Android 9 and the introduction of scoped storage they went too far. A deliberate move to kill legacy apps and hardware.

Aside from that Gookill and most Android device manufacturers are like sharks that need to constantly feed and be moving... or die.

They are predatory like in their behavior.

Gookill is following MS's game plan to shove cloud apps down our throats and have total control. It's no coincidence that google doesn't want expandable storage as they corral you into cloud storage dependency. Like Orcas herding schools of prey. More "food" for the killer whales to play with; easy pickins'.

It's much worse than you thought...
[General Questions and Answers] Oswald Boelcke:
Did they try (and failed) already once with Kitkat when "write access was disabled for user-installed applications on external storage (i.e. MicroSD), except for their own directories"? I remember this very well but here's my source.
[General Questions and Answers] HippoMan:
The users of desktop computers are generally no more knowledgable about how to secure their machines.

Lots of them just purchase anti-virus software and stick with that.

The option of a rooted Android device running anti-virus software is not supported by the Googlefrinchians nor by many app developers. They will still cripple theiir apps and in many cases the device in general whenver root or modding is detected, irrespective of the presence of any anti-virus software running on the Android device.
[General Questions and Answers] HippoMan:
I just now ran this on my Mac. There definitely is root on the Mac ...

% sudo -s
# whoami
root
# touch /tmp/testfile
# ls -Flas /tmp/testfile
0 -rw-r--r-- 1 root wheel 0 Nov 30 11:56 /tmp/testfile

Also, the chown/chmod code I posted in my message above also works perfectly on the Mac.

As for Windows, I don't have a Windows machine handy to test an actual example (because I don't recall the details), but I've done that recently, and there indeed is a way to set any executable to run as the Administrator user with Administrator privileges, no matter who runs it, and such an executable has access to all files written by all other users.

Yes, there are no bank-specific apps available for Linux, nor do I believe I've seen any for the Mac or for Windows.

However, the same HTTPS browser security that is available via desktop browsers is available with Android browsers, and banks make no attempt to block that under Android, as long as the browser is configured in "desktop" mode with a desktop-compatible User Agent string.

So ... people can access banking software (at least for all the banks I've tried it on) via such Android browsers under HTTPS with the same capabilities as if the banking software is being run on a desktop machine. Therefore, requiring the Android device to be crippled in order for people to access their bank accounts under Android is totally useless, unless the person refuses to access the bank via anything other than a banking *app*.

Also, selinux is present under Android as much as it's present under Linux and MacOS.

As for contactless payments, all my banks have issued me totally unprotected debit cards that I can use for contactless payments everywhere that anyone can use a mobile device for that.

So again, the same banks that want to cripple our Android devices in order for us to make contactless payments via our accounts at these banks are completely wasting that effort by also issuing us unprotected debit cards.
[General Questions and Answers] V0latyle:
FWIW debit cards still require PINs, and you can also put a PIN on most credit cards

Granted a 4 digit PIN is less secure than a lot of other options

Anyway I've just been trying to put this into perspective, I don't think Google or anyone else is trying to cripple Android devices for rooted users; a lot of this is basically side effect of the security requirements they're implementing, although some are just plain ridiculous as I'm sure we can agree. Example: my wife and I have an account with a small rural Kansas bank that we use only for cash withdrawls because our main bank's closest branch is more than 60 miles away. I'm not sure how many branches this small bank has but they aren't a credit union and I think it's less than 20 branches across Kansas and Missouri. Anyway, I tried to use their app....and found that it won't work unless:

You are using a device that's on their approved list

Your screen lock is an actual password, can't use pattern, PIN, fingerprint, etc

USB debugging and Developer Options must be disabled

Bootloader must be locked (obviously)
[General Questions and Answers] HippoMan:
My debit cards are "VISA Debit" which work like credit cards and don't require a PIN.

Each of my banks offer such debit cards.

And with regard to using a normal PIN-enabled debit card:

on a non-rooted/non-modded Android device that permits contactless payments, a PIN is also necessary to access the Wallet (i.e., the PIN for unlocking the screen).

So, there is no difference between a debit card with a PIN and using a non-crippled Android device for contactless payments.

But banks require the Android device to be crippled even when a PIN would also be required in order to use the wallet.

I agree that Google isn't *trying* to cripple the use of Android, and I have never attempted to make that assertion. I've always agreed that it''s just a side effect of the fact that many banks (like your local bank that you described) do indeed require a crippled version of Android in order for their banking services to be utilized via an Android app. And Google simply wants to make it easy for these banks to detect a modded device.

But as I've mentioned, most of these same banks offer us debit cards which give us no more hoops to jump through than what we have to do in order to make contactless payments on a non-rooted/non-modded Android device.

So, I use debit cards instead of crippling my Android device, simply in order to make contactless payments. If a bank will not offer me such a debit card, then I'll take my business to one of the many other banks who do offer this.

And if in some rarely occurring event I need to perform any other banking functions via my device, I'll just use an Android browser via HTTPS in desktop mode to access my bank account.
[General Questions and Answers] V0latyle:
True, in the sense that a skimmer could be installed on whatever terminal you swipe/tap at to capture the card number, vs the NFC payment app potentially being compromised on the phone

Yeah, and while I don't know the actual statistics, I am fairly certain that terminal skimmers are a much bigger problem in reality than hacked apps on compromised mobile devices

Not necessarily cripped, just "bone stock". Which, to modders like you and me, basically means neutered, lol. I still think Google is just trying to "improve" their product because we've obviously found some flaws in it. After all, there's always good money for hackers in security - they pay you to find and patch exploits, and the only difference between a "white hat", "grey hat" and "black hat" is what you're using the exploits you find for

Yeah

And I don't know that much about how the tap to pay thing works with NFC chips but I have to wonder how hard it would be to use a NFC app to simply read the NFC tag on your card, then use that in lieu of the physical card? I imagine there's some kind of encryption hardcoded into the chip...But I can't imagine it would be much harder than simply cloning the magnetic stripe

I get your point though. It does kinda seem like they're going after the less likely avenues and in so doing making it harder on power users
[General Questions and Answers] HippoMan:
I'm with you. Going after rooted Android devices is simply going after low-hanging fruit. Then, the bank executives can go to the stockholders and investors and say, "See! We're really strong on security, because we're blocking rooted Android devices!" ... without mentioning anything about unprotected debit cards. And none of their audience is the wiser.

For me "bone stock Android" is totally equivalent to "crippled Android". :)

I'm pretty sure that this sort of NFC stealing is already going on. That's why companies are able to sell NFC-protected wallets.
[General Questions and Answers] V0latyle:
Convince anyone of anything and you have a customer. Remember, people used to think there was a medical benefit to radon therapy, while others are paying for oxygenated water, and yet others are paying for electrically grounded beds. One of the guys I work with has one of those EMP modules on his truck's battery even though I tried to explain to him that it's snake oil
[LG G7 ThinQ  ROMs, Kernels, Recoveries, & Other De] V0latyle:
If you are asking a question, DO NOT post in Development.

Rule #15:
[General Questions and Answers] It's Asad:
I Have Sky Phone Model Elite G63. I am unable to find It's Firmware/Flash File. I want to root this phone but don't have flash file to extraxt boot.img file. Can Anyone Help Me with getting firmware file or Is their any possibility to extract stock rom directly from the phone? Build Number is > Elite_G63_V6.0_20230713_1949
[General Questions and Answers] mvikrant97:
May I know the chipset type of your phone?
[General Questions and Answers] It's Asad:
Already requqested but they are not replying

I think it's qualcom i am not sure
[General Questions and Answers] mvikrant97:
Open device manager.

Turn off your phone.

Press and hold both volume buttons and see the Ports section show.

Let me know.
[General Questions and Answers] It's Asad:
Okay Currently i am away from pc will tell you soon. Thank you for your response :)

Bro Is there anyway to unlock samsung frp lock without data loss?
[General Questions and Answers] mvikrant97:
Without resetting the device right frp lock won't trigger.
[General Questions and Answers] Unixity:
ok whats the boot image?

btw its a mediatek
[General Questions and Answers] Droidriven:
Can you tell me what series of Mediatek cpu/chipset it has?
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] triforcesoup:
<ID:0/003> Added!!

<OSM> Enter CS for MD5..

<OSM> Check MD5.. Do not unplug the cable..

<OSM> Please wait..

<OSM> Checking MD5 finished Sucessfully..

<OSM> Leave CS..

<OSM> Enter CS for MD5..

<OSM> Check MD5.. Do not unplug the cable..

<OSM> Please wait..

<OSM> Checking MD5 finished Sucessfully..

<OSM> Leave CS..

<OSM> Enter CS for MD5..

<OSM> Check MD5.. Do not unplug the cable..

<OSM> Please wait..

<OSM> Checking MD5 finished Sucessfully..

<OSM> Leave CS..

<OSM> Enter CS for MD5..

<OSM> Check MD5.. Do not unplug the cable..

<OSM> Please wait..

<OSM> Checking MD5 finished Sucessfully..

<OSM> Leave CS..

<ID:0/003> Odin engine v(ID:3.1401)..

<ID:0/003> File analysis..

<ID:0/003> Total Binary size: 10980 M

<ID:0/003> SetupConnection..

<ID:0/003> Initialzation..

<ID:0/003> Set PIT file..

<ID:0/003> DO NOT TURN OFF TARGET!!

<ID:0/003>

<ID:0/003> Re-Partition operation failed.

<OSM> All threads completed. (succeed 0 / failed 1)

i was trying to root my tab and i forgot to backup my files and i messed up and flashed the wrong firmware and now i cant find the right firmware for my tab and i dont know what to do? its a SM-T875
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] V0latyle:
What guide did you follow to root your device?
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] triforcesoup:
hehehe update now i locked the boot loader and it factory reset so not whenever i try to boot the tab it boots into a weird download mode that reads

<!>

partition vbmeta

reason vbmeta: Error verifying vbmeta image: 0_0_INDIVLDUNT_EDRHS_IMTHSGAUEMSAC

and the reg download mode stuff like Downloading... korean... do not turn off target korean do not disconnect usb cable during the software update vol down key + side key for more than 7 seconds... and when i try that it just boots back to that same screen please man :(
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] V0latyle:
You shouldn't do things when you don't know what the outcome will be. You must NEVER lock the bootloader on modified firmware. At this point the only thing you can try to do is flash the stock firmware using Odin. If that doesn't work, I don't think you'll be able to fix it.
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] triforcesoup:
can you please attach a link to the stock firmware because i have no clue what to download idk if its the lte or the wifi and i dont know the csc
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] triforcesoup:
also when i try to flash a BL file it says secure check fail : abl
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] V0latyle:
CSC doesn't matter, model number between LTE and WIFI model should be different.

Latest Samsung Galaxy Tab S7 firmware

Download the latest Samsung firmware for Galaxy Tab S7 with model code SM-T870. Check out our free download or super fast premium options.

www.sammobile.com

Any one of those
[Samsung Galaxy Tab S7 / S7 Plus Questions & Answer] triforcesoup:
tysm i was flashing the T875 not the T870 it worked tysm
[Samsung Galaxy Tab A series Questions & Answers] mikehd1959:
I just got this tablet and was hoping to install TWRP and a custom ROM but cannot find any guides to the process. I suspect since it is a Verizon model it wasn't popular for this type of activity.

Has anyone done this successfully?

thanks
[Samsung Galaxy Tab A series Questions & Answers] V0latyle:
The process is the same as any other Samsung device.

Unlock bootloader. Flash TWRP using Odin. Boot to TWRP immediately after flashing.
[Xiaomi Poco X5 Pro] DiogoSva:
I have an AMD nitro 5 with Windows 11, my Poco I did the test on a PC with Windows 7 and it connected normally to file transfers, from what I saw, the problem is in W11, could anyone help?
[Xiaomi Poco X5 Pro] ReverseFlash343:
did u find a way?
[Xiaomi Poco X5 Pro] ReverseFlash343:
ahh found a solution...deleting all unknown usb drivers then connecting device solved it for me( while on miui) ...also while using OS other than miui doesn't cause any problem
[General Questions and Answers] m0han:
The 3-in-1 screenshot is of GBoard Google Keyboard. The 2-in-1 screenshot is of (my favourite) keyboard Multiling O Keyboard.

ML-O-KB is highly customisable with ways to make layouts, keys, shortcuts, text (primary, secondary), colour etc. to one's liking.

Sadly, ML-O-KB is not developed anymore and does not have the 'translate as you type' feature I'm looking for.

So, now I'm looking for a customisable keyboard with 'translate as you type' handling

text typing and voice typing while using that feature

.

Both kinds of typing should be possible in the languages of my choice. Can anybody give suggestions, preferably with links? Thanks.
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] yucellmustafa:
​

crDroid for Xiaomi Mi Note 10 Lite [toco]

What is this?

crDroid is a customized fork of Android based on LineageOS.

crDroid is maintained by a small group of developers.

Those developers donate their free time towards the project.

Our project will always be open source so that others can build and contribute also. We do encourage everyone to contribute on our GitHub.

Features

https://github.com/crdroidandroid/crdroid_features/blob/13.0/README.mkdn

Known issues

None? Tell me!

Info

Kernel: Linux 4.14.328-perf

Created: 2023-11-30

Last Updated: 2023-11-30

Download [Vanilla]

https://sourceforge.net/projects/yucellmustafa-builds/files/toco/

Sources

ROM: https://github.com/crdroidandroid

Kernel: https://github.com/crdroidandroid/android_kernel_xiaomi_sm6150/tree/13.0-toco

Maintainer

yucellmustafa

Credits

iGOR121
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] Chris7375:
hey first of all thx for the port, but what exactly do i need to flash ? Do i need to flash the boot_20231130.img ?
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] yucellmustafa:
fastboot flash recovery recovery_20231130.img

reboot recovery

adb sideload crDroidAndroid-13.0-20231130-toco-v9.11.zip

Boot files are for the kernel. Boot-ksu.img supports "kernelsu". Boot.img is without root (So default).
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] cieciu89:
Thank you for this build. I'm currently using cr9.8, and it works well, but it has some minor issues. Hopefully, the newer version will eliminate them. I'm downloading it now and give you a fedback

Cr droid is one of the most customizable a13 rom, i can't stand those large qs switches from standard android and CR is one of the few that can make qs usable for humans xD
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] yucellmustafa:
I am using a different infrastructure than cr 9.8. I have been using it myself for 1 week. I haven't encountered any problems so far. I'm waiting for your feedback. Enjoyable uses.
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] cieciu89:
I think that everything works fine, the only bug i encountered is double tap to wake but it starts to work after setting fingerprint and after that you can disable secure lockscreen and dt2w remain working but I belive that is not a bug from this build since i encountered this in all other a13 roms.
[Xiaomi Mi Note 10 Lite ROMs, Kernels, Recoveries, ] dystopianvoyager:
Do I need to install gapps? and also do I need to sideload the boot.img as well?