• sunzu2@thebrainbin.org
    link
    fedilink
    arrow-up
    5
    arrow-down
    9
    ·
    8 hours ago

    Rooting is no longer required and is a security risk

    Or do you mean flashing custom privacy respecting rom

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      14
      arrow-down
      1
      ·
      edit-2
      8 hours ago

      No, I exactly mean rooting, and it is a hard requirement for me when choosing phones.

      If you know what you’re doing, there is no security risk involved, since every app requesting for root access needs to be granted individually, and you can opt to do so for a limited time or permanently. Or not grant it at all, obviously.

      Tools like AppOps (advanced permission management), Storage Isolation (prevent access to certain folders even if “file access” permission is granted to some app), Ice Box (keep certain apps in a permanent state of hibernation unless you explicitly launch them) are absolute core essentials.

      Other apps that enable you to fully remove system apps, system level adblockers, VPN sharing etc. might be optional, and there are no-root workarounds, but they all come with serious limitations.

    • dai@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      8 hours ago

      Granting blanket root to all programs on an android phone sure that’s a risk; but who the fuck does that on any system…

      From memory individual apps would be able to request root which could be denied, approved once, approved always or ignored.