10 ms·

Well, there is a problem - root exploits give people control of their device, but are also, by definition, a security hole which can be exploited by malicious a

Well, there is a problem - root exploits give people control of their device, but are also, by definition, a security hole which can be exploited by malicious apps to break the sandboxing and do bad things (tm). The right solution to the issue of user control is to convince manufacturers (which many already do) to make their devices open without needing exploits, not purposefully making the OS less secure.

drdaeman 13y ago
Another point to consider. Android 4.3 now includes Digital Restrictions Management framework. In order to prevent users from accessing their data (or running apps) in a ways they're not allowed (copying files, advertisement blocking, tethering and so on), Google (and vendors) certainly wouldn't like users to have unrestricted access to their phones. I really think tightening security with nosuid and SELinux is at least partially due to DRM introduction.
- nileshtrivedi 13y ago
  'fastboot oem unlock' will still work on Nexus devices, right?
  - aray 13y ago
    Yes. And not only will it continue to work, it should (hopefully) be the only way of getting a custom image. http://source.android.com/source/building-devices.html#unlocking-the-bootloader http://source.android.com/source/building-devices.html#unloc... IMO promoting 'security holes' as a mechanism of freeing your device is counter-intuitive. What everyone needs is a safe way of running their own software; security bugs are toxic to the entire ecosystem.
    - nileshtrivedi 13y ago
      I agree. Just that the parent's point that "Google (and vendors) certainly wouldn't like users to have unrestricted access to their phones" doesn't make sense in light of this fact.
      - drdaeman 13y ago
        Unlocking the phone does a factory reset, right? So you won't have access to any data that your phone holds (unless you were able to export it or store on SD card). And, if I understand things correctly, custom ROMs do not have Google Play. Well, in reality they do, but I believe Play .apk's floating around are just warez. Maybe I'm wrong on this matter, though (please correct me if I am). But if I'm right, then, legally, phones flashed with custom ROM should not have access to Google Play. So you're certainly allowed to put whatever software you want (if you can write, build or find one, huh) on your hardware. But, at the same time, you're not welcomed to tinker with Android as provided out of box, except in a way you're allowed by vendor. I'm not advocating hacks to get root by any means, though. They're security holes that are exploited in a lack of better ways.
        cookiecaper 13y ago
        Google authorizes distribution of their apps through a separate channel. This issue was resolved when CM was present a C&D in early 2011 (iirc) for distributing Google apps with the ROM image. My understanding is that as long as Google apps are in a separate file, Google consents to the distribution, at least in the case of CM. IANAL.
        aray 13y ago
        Unlocking does a factory reset by design. If someone was to steal your (locked, password-protected) device, and could unlock it without wiping, they could just flash an update that bypassed the password and dump all of your data. Or even worse flash an update that silently gave attackers remote access and put the device back in your possession. Not wiping when unlocking the bootloader is a security hole.
        dsr_ 13y ago
        ...which is why the first thing I did when I bought my Nexus was fastboot oem unlock. No worries about a factory reset when I hadn't put anything on it to begin with.

drdaeman 13y ago

Another point to consider. Android 4.3 now includes Digital Restrictions Management framework. In order to prevent users from accessing their data (or running apps) in a ways they're not allowed (copying files, advertisement blocking, tethering and so on), Google (and vendors) certainly wouldn't like users to have unrestricted access to their phones. I really think tightening security with nosuid and SELinux is at least partially due to DRM introduction.

nileshtrivedi 13y ago
'fastboot oem unlock' will still work on Nexus devices, right?
- aray 13y ago
  Yes. And not only will it continue to work, it should (hopefully) be the only way of getting a custom image. http://source.android.com/source/building-devices.html#unlocking-the-bootloader http://source.android.com/source/building-devices.html#unloc... IMO promoting 'security holes' as a mechanism of freeing your device is counter-intuitive. What everyone needs is a safe way of running their own software; security bugs are toxic to the entire ecosystem.
  - nileshtrivedi 13y ago
    I agree. Just that the parent's point that "Google (and vendors) certainly wouldn't like users to have unrestricted access to their phones" doesn't make sense in light of this fact.
    - drdaeman 13y ago
      Unlocking the phone does a factory reset, right? So you won't have access to any data that your phone holds (unless you were able to export it or store on SD card). And, if I understand things correctly, custom ROMs do not have Google Play. Well, in reality they do, but I believe Play .apk's floating around are just warez. Maybe I'm wrong on this matter, though (please correct me if I am). But if I'm right, then, legally, phones flashed with custom ROM should not have access to Google Play. So you're certainly allowed to put whatever software you want (if you can write, build or find one, huh) on your hardware. But, at the same time, you're not welcomed to tinker with Android as provided out of box, except in a way you're allowed by vendor. I'm not advocating hacks to get root by any means, though. They're security holes that are exploited in a lack of better ways.
      - cookiecaper 13y ago
        Google authorizes distribution of their apps through a separate channel. This issue was resolved when CM was present a C&D in early 2011 (iirc) for distributing Google apps with the ROM image. My understanding is that as long as Google apps are in a separate file, Google consents to the distribution, at least in the case of CM. IANAL.
      - aray 13y ago
        Unlocking does a factory reset by design. If someone was to steal your (locked, password-protected) device, and could unlock it without wiping, they could just flash an update that bypassed the password and dump all of your data. Or even worse flash an update that silently gave attackers remote access and put the device back in your possession. Not wiping when unlocking the bootloader is a security hole.
      - dsr_ 13y ago
        ...which is why the first thing I did when I bought my Nexus was fastboot oem unlock. No worries about a factory reset when I hadn't put anything on it to begin with.