News for hackers. Stuff that matters.

A comment on Google is about to make life more difficult for custom ROM fans. Parent comment

Re:Google is about to make life more difficult for custom RO... by kenmacd on Thursday June 29, 2023 @11:07AM (#36521411)
> The real issues are bootloaders which cannot be unlocked

I haven't run in to that lately, but an issue I find much more annoying is the lack of support around re-locking with a custom root of trust. I think a few others support it, but I've only seen mention of it on the Pixel phones (and I won't buy Google hardware after they wouldn't replace my Pixel 3 that was bricked by their EDL hardware issue).

[ Parent | on HN ]
Re:Google is about to make life more difficult for custom RO... by deng on Thursday June 29, 2023 @11:16AM (#36521538)
You are right, this is another issue. With an unlocked bootloader, you'll not be able to fully pass SafetyNet, for instance. I've also seen some forum posts that this should be possible for Motorola Moto G phones, but there were some warnings that if you do that, you might not be able to unlock your phone ever again, so I've never tried...
[ Parent | on HN ]
Re:Google is about to make life more difficult for custom RO... by hollow-moe on Thursday June 29, 2023 @11:51AM (#36522123)
You can bypass safetynet even with an unlocked bootloader. I'm using Lineage 20 with microg and with a bit of work with magisk modules you can get it to work. I just feel like this is again another "security feature" to make it harder for people who don't want google in their phones.
[ Parent | on HN ]
Re:Google is about to make life more difficult for custom RO... by deng on Thursday June 29, 2023 @12:57PM (#36523220)
To my knowledge, there are different levels of passing SafetyNet. I also use Magisk to hide root and use the safetynet-fix-module, but it still detects the unlocked bootloader. However, for instance my banking apps run fine as long as they don't detect root, but I hear stuff like Netflix will not work (which I don't care for).

According to John Wu, author of Magisk, it is not possible anymore to hide the bootloader/safeboot status via Magisk (https://nitter.lacontrevoie.fr/topjohnwu/status/123783055552...). I don't think that situation has changed.

[ Parent | on HN ]
Re:Google is about to make life more difficult for custom RO... by joecool1029 on Thursday June 29, 2023 @01:43PM (#36523897)
> but I hear stuff like Netflix will not work (which I don't care for)

This is Widevine DRM, most devices with the Magisk workarounds will get at least L3, which gives you standard definition netflix. Need L1 for HD and only a few phones unlock bootloader reliably and keep it (my Oneplus 8T does, 9 pro does not)

[ Parent | on HN ]