• 6 Posts
  • 11 Comments
Joined 1 year ago
Cake day: July 15th, 2024
  • mazzilius_marsti@lemmy.worldtoAndroid@lemmy.world•How big of a *security* risk is using a Custom ROM (like Lineage) that leaves the bootloader unlocked? (as opppsed to Graphene which re-locks the bootloader under a custom key)English
    0·
    8 days ago

    Its been a while since I used LineageOS on my OG Pixel (sailfish). I remember you have to install the custom bootloader like TWRP to flash the ROM and there was this thing with A and B partitions. Not sure if things change…

    With an unlocked bootloader, whoever gets your phone can do the weird Vol Up + Power button combos to flash enter the TWRP bootloader. I couldnt recall correctly, but it is possible they can view / delete your data right within the TWRP screen. Not sure about transferring them off of your device.

    OTOH, a locked bootloader wouldnt allow you to do this. There is no way to enter a flash a different ROM.

    The thing with unlocked bootloader like LineageOS, especially in my case an OG Pixel, is that you can still flash the official Pixel OS in case Lineage starts to mess things up. LineageOS leaves the bootloader unlocked, so you can still flash.

    I’m talking about the case where your phone is completely bricked, i.e. cannot open phone. So you can just use platform-tools to reflash. With Graphene, i guess it is more difficult in this case?