4 ms·

Then you'd need to first pay for a phone that isn't bootlocked to a certain OS. Not many phones are. Once your Android phone is boot-unlocked, it's actually pr

by brnt 5y ago

Then you'd need to first pay for a phone that isn't bootlocked to a certain OS. Not many phones are. Once your Android phone is boot-unlocked, it's actually pretty straightforward to flash a LineageOS rom. It could be streamlined, sure, but since the hard part is unlocking and tends to require some tech skills, not many need the flashing to be any simpler than it is.

authorityofnil 5y ago
This is highly dependent on where you live. For example there are pretty much no bootlocked phones in Finland
- brnt 5y ago
  Are you sure you're not referring to simlock? If not, is that mandated by law in Finland?
hef19898 5y ago
Google Pixel line is, funny enough, not boot-locked. And it offers quite decent hardware. Being build for Googles non-bloatware versions of Android the Pixel phones also offer a high degree of compatibility with de-googled versions of Android out there.
- brnt 5y ago
  Hmm, I surely had to unlock my Pixels; get a nice big fat warning on every boot too. Don't remember how exactly though.
- fomine3 5y ago
  Because it's also for developers.
stragies 5y ago
Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel? Because without that, aren't all (modded to unlocked_boot-loader) Android devices susceptible to an Evil-Maid attack? Even if the device/user uses FDE, the evil maid could just spoof the key-entry frontend, no? (1) or whatever other ALT-Android/Linux FW.
- jdiez17 5y ago
  > Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel? You may want to check out https://grapheneos.org/ https://grapheneos.org/
  - stragies 5y ago
    Only supports the Pixel devices, no? `fastboot flashing lock` is available on some phones, but is there a comprehensive list somewhere of devices, where you can freely/add remove signing keys?

by brnt 5y ago

authorityofnil 5y ago

This is highly dependent on where you live. For example there are pretty much no bootlocked phones in Finland

brnt 5y ago
Are you sure you're not referring to simlock? If not, is that mandated by law in Finland?

hef19898 5y ago

Google Pixel line is, funny enough, not boot-locked. And it offers quite decent hardware. Being build for Googles non-bloatware versions of Android the Pixel phones also offer a high degree of compatibility with de-googled versions of Android out there.

brnt 5y ago
Hmm, I surely had to unlock my Pixels; get a nice big fat warning on every boot too. Don't remember how exactly though.
fomine3 5y ago
Because it's also for developers.

stragies 5y ago

Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel? Because without that, aren't all (modded to unlocked_boot-loader) Android devices susceptible to an Evil-Maid attack? Even if the device/user uses FDE, the evil maid could just spoof the key-entry frontend, no? (1) or whatever other ALT-Android/Linux FW.

jdiez17 5y ago
> Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel? You may want to check out https://grapheneos.org/ https://grapheneos.org/
- stragies 5y ago
  Only supports the Pixel devices, no? `fastboot flashing lock` is available on some phones, but is there a comprehensive list somewhere of devices, where you can freely/add remove signing keys?