5,594,805 Members 36,944 Now Online
XDA Developers Android and Mobile Development Forum

[Q] Encryption, custom recoveries, unlocked/relocked bootloader and security

Tip us?
 
himgil
Old
#1  
Junior Member - OP
Thanks Meter 0
Posts: 7
Join Date: Nov 2013
Info 2 [Q] Encryption, custom recoveries, unlocked/relocked bootloader and security

Rather technical and controversial topic but I got something really bothers me. I'm about to root my nexus 5 and have checked on xda, reddit, and various forums regarding to possible threats to unlocked bootloaders and security concerns for custom recoveries.

I will certainly encrypt my phone, but not sure how custom recoveries will react to that. Will they work? If so, will they compromise my security? Should I bother with installing stock recovery and re-locking my bootloader? This guy* seems to know what he's talking about, and there are some apps** to ease this process. However, there are loads of forum posts by senior posters assuring that one shouldn't bother with all those.

Being new to android, what advice can you give to me?

ps. sorry for the links. being new to forums, I'm not allowed to embed links into my posts.

*android.stackexchange.com/questions/36830/whats-the-security-implication-of-having-an-unlocked-boot-loader
**play.google.com/store/apps/details?id=net.segv11.bootunlocker
 
himgil
Old
#2  
Junior Member - OP
Thanks Meter 0
Posts: 7
Join Date: Nov 2013
Quote:
Originally Posted by himgil View Post
Rather technical and controversial topic but I got something really bothers me. I'm about to root my nexus 5 and have checked on xda, reddit, and various forums regarding to possible threats to unlocked bootloaders and security concerns for custom recoveries.

I will certainly encrypt my phone, but not sure how custom recoveries will react to that. Will they work? If so, will they compromise my security? Should I bother with installing stock recovery and re-locking my bootloader? This guy* seems to know what he's talking about, and there are some apps** to ease this process. However, there are loads of forum posts by senior posters assuring that one shouldn't bother with all those.

Being new to android, what advice can you give to me?

ps. sorry for the links. being new to forums, I'm not allowed to embed links into my posts.

*android.stackexchange.com/questions/36830/whats-the-security-implication-of-having-an-unlocked-boot-loader
**play.google.com/store/apps/details?id=net.segv11.bootunlocker

In case anyone come across the same problem in the future, I wrote my first impressions on the issue.

First and foremost, I easily rooted my phone by following this: forum.xda-developers.com/showthread.php?t=2507905

Installed ClockworkMod (CWM) and Koush's Superuser (because it's a free software in Stallman terms), then encrypted my phone.

Later on, installed following trio:

Bootlocker: to allow me to change the state of my bootloader's locking situation
Flashify: to flash the stock recovery by replacing CWM
Cryptfs Password: to change my encrypted partition password.

I don't have any problem whatsoever regarding the performance or stability. Everything is great so far. So, for those who concern for their security of their data, I'd recommend it.
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes