Hacker News new | ask | show | jobs
by gtklocker 4430 days ago
The idea of freeing your phone is cute, however, there are some considerable dangers.

* The software that you give access to your phone (be it drivers or the recovery images themselves) isn't signed by anyone. Some of the software isn't even available via HTTPS. I think it's a bad idea to trust some HTTP and unsigned executable more than Google, who are making all they can to ensure the integrity of anything that runs on your phone.

* Unlocking your bootloader is a bad idea. Google erases all your data whenever you unlock your phone[1]. They don't hate you, they've just realized the security issues that come from having an unlocked phone. Take this for example: You're at the airport and ready to leave. However, TSA stops you for a "random" check. They have your phone for about 5 minutes and there's nothing you can do about it. Now, they could ask you for your passcode but then you'd know something's wrong. Now, your bootloader is unlocked, which means they can see your device at firmware level and alter it to their liking it. Nothing can stop them from plating a backdoor in there or just making a copy of all your files and you wouldn't know. That's why Google does [1].

[1]: http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlockin...

1 comments

* I claim no such thing. Installing apps through f-droid come from a secure channel, mot http.

* There is a way to lock your bootloader again.

* I'm not talking about F-Droid. I'm talking about CM as a whole and the recovery someone may use.

* There is a way, however it's common practice to leave it unlocked and I'm not sure you mention that in your article.