[ROM] DivestOS 18.1 for hammerhead

[SkewedZeppelin]

to recompile your kernel do i simply remove "optionsNo+=("KEXEC" "KEXEC_FILE");" and add it to the "optionsYes+=(" section ?

Yes, but you need the full workspace setup first.

You can just use `mka bootimage` to only compile the kernel.

 

[c0mr@d3]

no.

That would require compiling every kernel twice.

would EFIDroid also require a recompile of the kernel?
im trying to find a balance to use your OS and be able to test other OS with out wiping or having to purchase other devices, that adds to more junk... in multirom i am also able to install OS to an OTG for testing, this makes your OS a prime candidate for a removable stealth setup.

Update: nevermind EFIdroid does not support encryption

 

[c0mr@d3]

Yes, but you need the full workspace setup first.

You can just use `mka bootimage` to only compile the kernel.

one more question sir, i have tried all your location suggested apps and none of them give a lock to the GPS. I've tried all the GPS settings checked the physical devices connections, and even reverted back to Stock to verify the hardware works, all works with google services.
Is your OS not built to have working location?

 

[SkewedZeppelin]

one more question sir, i have tried all your location suggested apps and none of them give a lock to the GPS. I've tried all the GPS settings checked the physical devices connections, and even reverted back to Stock to verify the hardware works, all works with google services.
Is your OS not built to have working location?

Location does work. Please test using this app and wait up to 12.5 minutes: https://f-droid.org/en/packages/com.android.gpstest.osmdroid

Ensure it has accurate time, clear line of sky, having it not in airplane mode can help too, and wifi or cell so it can download the almanac also helps.

I tested my hammerhead working GPS on this latest build before release.

 

[SkewedZeppelin]

location suggested apps

DivestOS doesn't support UnifiedNlp, such location providers won't do anything.

 

[c0mr@d3]

Location does work. Please test using this app and wait up to 12.5 minutes: https://f-droid.org/en/packages/com.android.gpstest.osmdroid

Ensure it has accurate time, clear line of sky, having it not in airplane mode can help too, and wifi or cell so it can download the almanac also helps.

I tested my hammerhead working GPS on this latest build before release.

i have tried the GPS test app, it did not work for me. i will attempt it again and wait for a non cloudy day.
Do you suggest inserting a SIM card form a carrier? that's is the only thing i don't do because the device then is highly trackable and cell tower network is easy to compromise due to it have no encryption (huge attack surface, ex. SimJackin, IMEI Spoofing, Etc...)

 

[SkewedZeppelin]

i have tried the GPS test app, it did not work for me. i will attempt it again and wait for a non cloudy day.
Do you suggest inserting a SIM card form a carrier? that's is the only thing i don't do because the device then is highly trackable and cell tower network is easy to compromise due to it have no encryption (huge attack surface)

a SIM shouldn't be necessary, and the device connects to towers regardless of SIM inserted for emergency calling support.

also 3g and 4g *do* have encryption. 4g is even e2ee to the tower itself.

 

[c0mr@d3]

a SIM shouldn't be necessary, and the device connects to towers regardless of SIM inserted for emergency calling support.

also 3g and 4g *do* have encryption. 4g is even e2ee to the tower itself.

ok maybe i should enable data in my phone dialpad provisioning settings, yes i was aware of it communicating with towers is why i disable via dialpad *#*#

i will re-enable and restest.

 

[c0mr@d3]

a SIM shouldn't be necessary, and the device connects to towers regardless of SIM inserted for emergency calling support.

also 3g and 4g *do* have encryption. 4g is even e2ee to the tower itself.

sorry what i meant was once your are in the cell tower network, there's no authentication, you see all device info that are connected to it, you could even see the make and model of the vehicles connected to it.

in the US there are legal interception requirements there for end to end does was not implemented.

 

[SkewedZeppelin]

sorry what i meant was once your are in the cell tower network, there's no authentication, you see all device info that are connected to it, you could even see the make and model of the vehicles connected to it.

there is client authentication, that is what the SIM card is for
and they can derive make/model from your IMEI alone, no backdoor or anything

any traffic that is encrypted from your phone like https or encrypted dns cannot be inspected by them

but yes, the tower itself isn't authenticated and it is possible for an attacker to spoof a tower

 

[c0mr@d3]

there is client authentication, that is what the SIM card is for
and they can derive make/model from your IMEI alone, no backdoor or anything

any traffic that is encrypted from your phone like https or encrypted dns cannot be inspected by them

but yes, the tower itself isn't authenticated and it is possible for an attacker to spoof a tower

be a pal and post a boot.img with hardboot enabled. im having a time trying to compile your kernel. just for the stable 15 version

 

[c0mr@d3]

DivestOS doesn't support UnifiedNlp, such location providers won't do anything.

tested three N5 with your most recent OS and also tested your Oldest one (downloaded them before you (divestos.sny.sh) was taken down. then i also tried with a modified gps.conf file that i verified working on a normal OS, still no lock. would like to at least get hardboot or a working gps lock on your OS.
I would love to have your OS as a daily driver.

 

[c0mr@d3]

Tested DOS 15.1-20230508 with all radios, no GPS. doesn't even detect a single sat.

 

[c0mr@d3]

there is client authentication, that is what the SIM card is for
and they can derive make/model from your IMEI alone, no backdoor or anything

any traffic that is encrypted from your phone like https or encrypted dns cannot be inspected by them

but yes, the tower itself isn't authenticated and it is possible for an attacker to spoof a tower

fixed the GPS by injecting UAR, Dalvik, cache, from a working rom, then i had to edit two files "apns-conf.xml" and "gps.conf" entirely for my side of the planet. I also went the extra mile to tighten up the browser security. (screen shots).
now all i have left to do is tackle your kernel so i could dual boot and get pass safetynet.
over all im loving the setup with systemless spoofing modules for IMEI, serial, device ID, etc, but more importantly i was able to get Kali nethunter running with internal wifi monitor mode, and injection.

thanks

 

[c0mr@d3]

View attachment 5326005
DivestOS is a more private and more secure aftermarket system.

Nexus 5 Notes:
- 16.0 is quite buggy, 15.1 should be stable
- Bluetooth may or may not work on 16.0

Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included
- hardened system WebView with rapid updates: https://divestos.org/misc/ch-dates.txt

Extra Features (not installed by default & also compatible with all systems):
- Mull, our hardened fork of Fenix with rapid updates: https://divestos.org/misc/ffa-dates.txt
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser

Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-hammerhead
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#hammerhead
- Screenshots: https://divestos.org/index.php?page=screenshots
- Security Patching Overview: https://divestos.org/index.php?page=patch_levels
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]

Device Specific Links:
- Device Tree: https://github.com/LineageOS/android_device_lge_hammerhead
- Kernel: https://github.com/LineageOS/android_kernel_lge_hammerhead
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...CVE_Patchers/android_kernel_lge_hammerhead.sh

Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.

Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this OS.
- This OS has userdata encrypted by default
- You are intended to relock your bootloader with this OS (if your device is marked supported for that).

DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)

All downloads are GPG signed with the following key:

#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----

where is Mulls bookmark file located? don't really want to use a third party app also don't want to give away my bookmark info to mozilla sync service.

P.S. what's up with the mozilla telemetry tracker in Mull browser?

 

[SkewedZeppelin]

where is Mulls bookmark file located? don't really want to use a third party app also don't want to give away my bookmark info to mozilla sync service.

P.S. what's up with the mozilla telemetry tracker in Mull browser?

Mull does not support bookmark import/export as Firefox doesn't either: https://github.com/mozilla-mobile/fenix/issues/417

Mull does not have any functional trackers, they're either stubbed out or entirely disabled.

 

[c0mr@d3]

Mull does not support bookmark import/export as Firefox doesn't either: https://github.com/mozilla-mobile/fenix/issues/417

Mull does not have any functional trackers, they're either stubbed out or entirely disabled.

nevermind i got it, importing bookmarks CSV file into "moz_place" table that's in ".../files/places.sqlite"

 

[crimss]

Hi, i wanted to try divestOS in my hammerhead (previously with lineageOS) and followed the specific steps for that model.
I tried divested-18.1-20230809-dos-hammerhead.zip. I have a problem after sideload the zip.
Sideload stops at 47%, which i undestand is the spected behavior.
In the phone side im getting:

E1001: Failed to update system image
E:Error in /sideload/package.zip (status 1)
W:failed to read uncrypt status: No such file or directory

in the logs i also see before
/cache/recovery/last_command doesnt exists.

BLKDISCARD ioctl failed: Invalid argument
failed to execute command [erase 6,....]

 

[crimss]

Hi, i wanted to try divestOS in my hammerhead (previously with lineageOS) and followed the specific steps for that model.
I tried divested-18.1-20230809-dos-hammerhead.zip. I have a problem after sideload the zip.
Sideload stops at 47%, which i undestand is the spected behavior.
In the phone side im getting:

E1001: Failed to update system image
E:Error in /sideload/package.zip (status 1)
W:failed to read uncrypt status: No such file or directory

in the logs i also see before
/cache/recovery/last_command doesnt exists.

BLKDISCARD ioctl failed: Invalid argument
failed to execute command [erase 6,....]

Im answering this to save some time to SkewedZeppelin who point me to the solution via XMPP

Looks like i was wrong, sideload shouldn´t stop at 47%, after the fix it went to 94%.

In the news (https://divestos.rg/pages/news.html) there is a note specific for hammerhead on 18.1:

"Newly added 18.1 hammerhead needs repartitioning via this guide. This process wipes the device, you MUST backup first".

I went and downloaded twrp (twrp-3.7.0_9-HH.R.17.img), ran

fastboot flash recovery twrp-3.7.0_9-HH.R.17.img

, followed the steps to resize the partitions (-m parameter) and restarted the steps for hammerhead and im up and running.

Thanks again SkewedZeppelin for your quick support and for this great project.

 

[LegendOcta]

I do acknowledge this is unsupported but is there a way to disable encryption?
I plan to use this phone only at home for lightweight usage and encryption is pointless for me.