Securing xiaomi with unlocked bootloader - Redmi Note 9S / Note 9 Pro (Indian Model) Question

Hello
I am enjoying the life with Redmi note 9 pro, unlocked bootloader and custom rom.
However, I was thinking, if someone gets physical access to the phone he could boot in fastboot or recovery and get inside, right?
So if this is possible, what do we do to protect our information? Is it possible to password protect the booting?

Not if you use encryption. That's why it's there. If you have unlocked phone they can get to bootloader abd for example reinstall whole system a basically make their stolen/found phone working, but that is not possible without full wipe, which means also your data.

Gajdalf said:
Not if you use encryption. That's why it's there. If you have unlocked phone they can get to bootloader abd for example reinstall whole system a basically make their stolen/found phone working, but that is not possible without full wipe, which means also your data.
Click to expand...
Click to collapse
Hi,
Is there a guide for how to enable encryption after unlocking the bootloader on the Note 9 Pro?
Thanks!

Gajdalf said:
Not if you use encryption. That's why it's there. If you have unlocked phone they can get to bootloader abd for example reinstall whole system a basically make their stolen/found phone working, but that is not possible without full wipe, which means also your data.
Click to expand...
Click to collapse
If that's the case then I am ok. My primary objective is the data to be secured.
And do you know why there is no option to encrypt the SD card? I am at MIUI 11 V11.0.4.0.QJZMIXM

BuzzyMind said:
Hi,
Is there a guide for how to enable encryption after unlocking the bootloader on the Note 9 Pro?
Thanks!
Click to expand...
Click to collapse
Hi. The easiest way to accomplish this is to go to settings and search for "encrypt". Activate the "Encrypt device using lock screen password".
Just remember that if you forget this password there is no way to get your data back, and also the microSD card is not encrypted.

BuzzyMind said:
Hi,
Is there a guide for how to enable encryption after unlocking the bootloader on the Note 9 Pro?
Thanks!
Click to expand...
Click to collapse
Unlocking has nothing to do with encryption. These 2 things are not connected in any way. So if you have encrypted system (which is usually by default) unlocking bootloader will not change that.
I don't know where exactly it is on MIUI system, but if you search for encryption in setting you should be able to find it (exactly like Smartie083 said).
If I remember correctly some systems were able to encrypt also sd-card (not sure tho). If your system allows it (you will need to have such option somewhere in security), keep in mind that this will render such sd-card usable only in that device, not anywhere else. So taking it out and connecting to PC will not work etc.
Also if you are interested in security of your system, you might be interested in ditching MIUI, installing clean rom without gapps and if you need G-services then using it through microG (although interesting, I consider this as valid option just for total paranoia people, or people which are running away from law).
Also avoiding root and ensuring that selinux is enabled is helpfull.

Related

Decrypt pixel Experience Poco F1

I am using Pixel experience on my Poco F1 and I enabled encryption on my phone...now I want to decrypt it..but cannot decrypt by using the method that I used to encrypt my phone...please help
You need to wipe data from TWRP
Adyatan said:
You need to wipe data from TWRP
Click to expand...
Click to collapse
i wiped all data then flashed the rom again but it still says device encrypted
Why do you even want to use a decrypted device? You realize that using a decrypted device is the same as using a public device. Although android smartphones can be hacked easily, but it's easier when using a decrypted device. Moreover, device becomes vulnerable to malwares quite easily. A decrypted device doesn't increase the performance of the modern device.
I had the same problem than yours. To solve it, I flashed the MIUI (stock) ROM, gone to recovery, wiped everything - only *this* wipe method successfully removed recovery, TWRP did not -.
Tell me if this works for you
ClementNerma said:
I had the same problem than yours. To solve it, I flashed the MIUI (stock) ROM, gone to recovery, wiped everything - only *this* wipe method successfully removed recovery, TWRP did not -.
Tell me if this works for you
Click to expand...
Click to collapse
gigishan said:
i wiped all data then flashed the rom again but it still says device encrypted
Click to expand...
Click to collapse
After flashing the ROM you need to flash Force Encryption Disabler[FED]
You can find it in the POCO Telegram Channel.
What @Adyatan said! And if you don't wanna flash the whole rom again, you can just factory reset. Just remember to flash that file before first boot, you won't see miui encrypting the device during first boot. You can get the universal version of the file here https://forum.xda-developers.com/android/software/universal-dm-verity-forceencrypt-t3817389 I hope your problem is solved @gigishan
Rowdyy Ronnie said:
Why do you even want to use a decrypted device? You realize that using a decrypted device is the same as using a public device. Although android smartphones can be hacked easily, but it's easier when using a decrypted device. Moreover, device becomes vulnerable to malwares quite easily. A decrypted device doesn't increase the performance of the modern device.
Click to expand...
Click to collapse
What kind of question is that even to ask? His device, his choice.
If he keeps his device to himself, how does it becomes public?
Oh really I didn't knew that, you must be great in hacking android devices "easily"!?
Depends on what your definition of easier is.
Yeah, that I may agree to, that it won't affect the performance that much.
In theory using a locked, non-rooted, encrypted device is safer, but practically NO. You may be preparing the argument well in general use a 'normal' device will be secure rather than 'other'. But that isn't true either 'normal' devices receives ads. pop ups, spam etc just like any 'other'. So you could become a victim of a simple scam on 'normal' device. BUT if you're smart you'd know how to get rid of the junk whether on 'normal' or 'other' device.
So the device factor can be variable i.e. normal/other but it's YOU who matter i.e. smart or stupid. And when you become a victim of dedicated attack i.e. a hacker, either you take a bait or not, the person on other side would be much smarter. And doesn't matter how hard you try, if you in anyway fall into the trap, you're done, whether you're smart or not.
So what is it all about then? Security is not a software/constant, it's the state of your mind. The more aware you are(of what the threats are) the more secure you are. This may all sound very dramatic, but this is the reality.
Shame
Rowdyy Ronnie said:
Why do you even want to use a decrypted device? You realize that using a decrypted device is the same as using a public device. Although android smartphones can be hacked easily, but it's easier when using a decrypted device. Moreover, device becomes vulnerable to malwares quite easily. A decrypted device doesn't increase the performance of the modern device.
Click to expand...
Click to collapse
I wonder how you became senior member with this bul**** knowledge ?
People want use decrypted device because they change roms often, and lets say your kinda veteran in android and its not your first phone. Then your device before propably didn't need to flash DFE so you didn't have to do backups of your storage every single time (just data)

Huawei p30 lite root

Hello everybody.
I have a simple Question about root on this model, is it possible to do?
And if it is possible, tell me how Please.
Best regards
Wojtek
I am looking for the same too
Me too... Looks like it is still impossible
Only paid method and who knows it will be work on my p30 lite......hmm
Hello ppl,
I know this might be a little old.. any way just for the knowledge lets bring this thread back.
I had the same concern for a while, and kind of eager to get mine rooted.. until now.
I managed to unlock mine, and root it succesfully. Latest version of magisk, safty net passed, root essentials running like a charm, I can ADB in to it and su yey!
How? main issue here is my p30 lite MAR-LX3A was already in emui10, and somehow this little sucker wont allow the unlock of the bootloader regardless. I used a unlock tool that is advised to work for this model using testpoint short. how ever it was not working for me, until I read the EMUI had to be downgraded to 9.1.
Once runnig EMUI9.1 I didnt had to re-run the tool it was already unlocked. weird.
Any how the unlocker tool I used was not the ABD/fastboot tools, it was a paid app in case you are still interested in getting it done I can tell you how. Just keep in mind you will need to Open the back cover of the device.
Think is there is no custom recovery image available that works, neither a custom ROM, so all you have is pretty much root access.
I beleive this to be a pretty decent phone so I dont want just to ditch it, I am working to get a TWRP image, if I a managed to so I will get a ROM done as well. Think the whole device has been off the track for dedicated modders and devs, so it has just not been worked on.
which me luck. I'll keep you posted
I used an unlock bootloader service for 15$. First i had to downgrade my emui from 10 to 9.
I can run magisk without problem. My only problem is that i wan't super su. I was able to flash TWRP Recovery 3.2.1.0 (HiSilicon Kirin 710). But i couldn't use it because the folder are encrypted. So if anyone has any idea how to decrypt this let me know
aka_max said:
I used an unlock bootloader service for 15$. First i had to downgrade my emui from 10 to 9.
I can run magisk without problem. My only problem is that i wan't super su. I was able to flash TWRP Recovery 3.2.1.0 (HiSilicon Kirin 710). But i couldn't use it because the folder are encrypted. So if anyone has any idea how to decrypt this let me know
Click to expand...
Click to collapse
I'm gonna look for that TWRP img, I didnt find a working one acutally. is there a specific reason why you rather use super su ?
about encryption you usually need to make sure there is no password configured, I read somewhere about a guy that had his Face recognition still configured, and that was the reason he was unable to unencrypt. there are some zips you can flash somwhere around, but never tried them
blzbh said:
I'm gonna look for that TWRP img, I didnt find a working one acutally. is there a specific reason why you rather use super su ?
about encryption you usually need to make sure there is no password configured, I read somewhere about a guy that had his Face recognition still configured, and that was the reason he was unable to unencrypt. there are some zips you can flash somwhere around, but never tried them
Click to expand...
Click to collapse
I deactivated all passwords etc. But it didn't work for me. The only reason i need supersu is because i wan't recover some deleted contacts and mails after factory reset. And those Windows applications with real deep scan not works with magisk.
aka_max said:
I deactivated all passwords etc. But it didn't work for me. The only reason i need supersu is because i wan't recover some deleted contacts and mails after factory reset. And those Windows applications with real deep scan not works with magisk.
Click to expand...
Click to collapse
why dont you try getting an image of the partition with DD, convert it and mount it in the PC directly, I beleive using the scan software directly against the phone is more complicated than just scanning a directly attached block device.
Hello
Is there any way to decrypt the Huawei P30 Lite?I haven't found anything anywhere.
i have twrp on it but the system is encrypted :-(
i have read some posts about wipe data.. use stock rom etc... But i am to lazy to test it. Let me know if it will works. Be sure to make a backup before playing around
nominator64 said:
Hello
Is there any way to decrypt the Huawei P30 Lite?I haven't found anything anywhere.
i have twrp on it but the system is encrypted :-(
Click to expand...
Click to collapse
there are a few things to try... you can go to wipe menu in TWRP then use the fix/repair option against the system encrypted partition..
-try reparing it
-try changing the partition from ext4 (check first the type usually ext4) to ext2, then change it back to what it was, ext4
last resource:
-wipe all data/factory reset ***** You WILL loose all your personal data if you do this **** just make a backup MANUALLY before doing this.. if you use TWP backup pbby your back will be encrypted too...
I manage to get mine unencrypted with this last step, took a few attempts, but had to reflash Stock so its back to encryption
Maybe we should create our own TWRP version for the p30 lite. There are many tutorials ^^
aka_max said:
Maybe we should create our own TWRP version for the p30 lite. There are many tutorials ^^
Click to expand...
Click to collapse
agreed I have been working on one that truely works, but there are a few blanks about how TWRP really works.. and its boot process. I have learned a little this past week, but still think gonna have to reverse engineer a working img to get some answers.... I was actually thinking on building a orange fox image better not sure what would be easier..
I have lots of work so I do this in my free time, but let me know if you want a help perhaps we can get something and port a nice ROM that's worth the device
.
blzbh said:
there are a few things to try... you can go to wipe menu in TWRP then use the fix/repair option against the system encrypted partition..
-try reparing it
-try changing the partition from ext4 (check first the type usually ext4) to ext2, then change it back to what it was, ext4
last resource:
-wipe all data/factory reset ***** You WILL loose all your personal data if you do this **** just make a backup MANUALLY before doing this.. if you use TWP backup pbby your back will be encrypted too...
I manage to get mine unencrypted with this last step, took a few attempts, but had to reflash Stock so its back to encryption
Click to expand...
Click to collapse
thank you for the suggestions. unfortunately does not work :-(
Please keep us posted, really excited to see a custom rom for this phone, also could you elaborate on the process of unlocking the bootloader? My back cover is already broken so I have to open it up anyways
k.r.o.o.k said:
Please keep us posted, really excited to see a custom rom for this phone, also could you elaborate on the process of unlocking the bootloader? My back cover is already broken so I have to open it up anyways
Click to expand...
Click to collapse
Sure, ive been busy but will try my best.. about the unlock process I end up paying 19 euros... But try using fastboot unlock first.. may save you the money not sure...
1. Downgrade to emui 9.1 .. just plug the p30 lite to PC, install hsuite... Go for the firmware/software update... A pop up screen will show up with some small letters buttom rigth.. older releases or revert to older firmware something like that.. you will get too choose 9.1 only ... Choose that and apply.. Keep an eye out.. this will delete everything in your phone... Next boot you will be in 9.1.. avoid the automatic upgrade.
2. Turn the phone off, take the back cover and locate the testpoints.. short by using metal wire... The small aluminium wire wraps that come with bread and other bags for easy close are usefull just remove some plastic in each side... connect the usb cable to PC.. leave the phone side unplugged.. Touch test point with the wire while the other side touches a metal cover in the phone.. while doing it plug the phone to the USB cable.. the charging animation should not appear . . . Screen must stay black.. otherwise do it again.. if done right the device manager will detect COM port for your device
Identify the point with this video
3. use either app you want to detect testpoint mode and unlock... I managed to do it with a 3 day unlimited license for HCU client.. that did the trick their website have some tutorials easy to follow.
Hi all,
I have the same problem like a few other people. I unlocked the phone with HCU, and after I tried to root with magisk (by trwp) But the main issue, the phone is encrypted and the installation proccess of the magisk by the trwp got failed. How can I root this phone? Anybode has success with this?
Thank you!
huawei p30 lite device root support please

More Peace of mind

Hi guys, so obviously is much better to root our phone, and I have it rooted, and I also have cerberus installed as a system app and hidden, BUT let's say that tomorrow someone steals my phone, I want to be prepared to block it or track it in more than just one way, and I have read that using the miui account block is also a very good way, but I dont know, since the bootloader is unlocked, isn't it very easy for the thief to just flash any rom and have it working well?, I know that much of the thiefs dont know anything about all this, but as I said I wanna take every precaution possible.
What would you recommend me to keep my phone more secure in case anything bad happens? Maybe I don't know, keep it rooted but still lock the bootloader, maybe this statement is very dumb haha Im no expert.
Just dont let your phone get stolen.
Modern problems require modern solution.
xjudexiii said:
Just dont let your phone get stolen.
Modern problems require modern solution.[/QUO
Click to expand...
Click to collapse
Lock your recovery is the only security you have. Lol. But like he said take good care of your device youl be just fine.
I have unlocked bootloader, custom recovery with PIN and Cerberus with fake shutdown in lockscreen. but I know that all this is just to make the thief's life a little difficult, because either the locked or unlocked bootloader is possible to bypass and format the phone.
now your question / scenario begs for little details!
on Unlocked bootloader,
1. you can always flash stock recovery (found in fastboot rom of beryllium) and replace twrp or
2. never flash recovery on unlocked bootloader and always boot it via fastboot command for security sake
HOWEVER
1. lets assume some one steal your device and boot is unlocked and he/she can flash twrp then what you should never flash DFE (disable force encryption treble) (via twrp) so that your internal storage stays ENCRYPTED and any recovery will be unable to MOUNT IT
2. use digit screen lock method so that any recovery will ask for password
The idea is, since hardware is stolen but the theif won't able to access your peronal information! and if he tries to boot up, he won't able to unlock by the digits you set as screen lock, wrong screen locks eventually trigger miui mechanism to give warning to wait few hours before retrying and until you reach a point where miui will NOT even allow you to unlock the fone. miui will consider it stolen.

Kepps restarting after Update Android 11. Help please.

Hello everyone.
My note 9 pro keeps restarting after update android 11. I can not take my photos/videos from phone because it restarts like every 1-2 minute even without touching the phone :/
So, my questions.
1. Can I take my files from phone not rooted/not unlocked/no twrp?
2. Can I flash the same stock ROM without losing data? (via recovery or Fastboot? (Not downgrading or updating. Just same ROM)
*Safe Mode not working too. Tried.
Exactly this ROM :
V12.0.1.0.RJZMIXM​
Indian Note 9 Pro carries codename Curtana which is rebranded global Note 9S. Global Note 9 Pro is Joyeuse and the ROM you're mentioning belongs to the latter. So my question is, Is your Note 9 Pro Indian or Global?
Global NOTE 9 PRO
THanks for Reply
If you can boot to bootloader mode, maybe first of all try to unlock the bootloader. I remember once I had bricked my phone and my bootloader got locked but I was able to unlock bootloader. Then I flashed TWRP and flashed ROM.
I had the same problem and I took my phone to a guaranteed shop and they said I should back up before and it is the bootloader problem.
I am waiting for the fixed phone to see I loosed my data or not but I think I lost all of my data
yasamankh02 said:
I had the same problem and I took my phone to a guaranteed shop and they said I should back up before and it is the bootloader problem.
I am waiting for the fixed phone to see I loosed my data or not but I think I lost all of my data
Click to expand...
Click to collapse
Most likely it's lost. Sorry.
Always backup your critical data redundantly to at least 2 hhds that are physically and electronically isolated from each other and not attached to the PC. Best to time stagger backups to the various hdds... and you can never have too many. Do not encrypt the data.
When buying a phone get one with an SD card slot. Use the SD card as a data drive, all critical data and everything needed after a factory reset goes there including copies of apps so Playstore isn't needed. Only the OS, apps and the temporary download folder go on internal memory. Then backup the SD card regularly.
I've lost a whole data base... learn from it and move on.
Bootloader works but I can not adb pull :/ anyway. Is unlocking bootloader will erase data? And adb can not see phone while fastboot mode. Is that can be because of locked bootloader?
xxrashadxx said:
Bootloader works but I can not adb pull :/ anyway. Is unlocking bootloader will erase data? And adb can not see phone while fastboot mode. Is that can be because of locked bootloader?
Click to expand...
Click to collapse
Yes, unlocking bootloader erases data
blackhawk said:
Most likely it's lost. Sorry.
Always backup your critical data redundantly to at least 2 hhds that are physically and electronically isolated from each other and not attached to the PC. Best to time stagger backups to the various hdds... and you can never have too many. Do not encrypt the data.
When buying a phone get one with an SD card slot. Use the SD card as a data drive, all critical data and everything needed after a factory reset goes there including copies of apps so Playstore isn't needed. Only the OS, apps and the temporary download folder go on internal memory. Then backup the SD card regularly.
I've lost a whole data base... learn from it and move on.
Click to expand...
Click to collapse
yes I back up some of my data
I thought it was right But it still has the same problem
do a wipe data and delete your mi account
I did this and my problem solved

Question Protect the recovery with a password [TWRP / OrangeFox] - disavle or protect the factory reset

Good morning,
I allow myself to write this message because I have several questions, after having rooted my phone.
1) I would like to know how to protect the recovery with a password. Currently I have TWRP but I couldn't find anywhere how to put a password.
I heard about OrangeFox but I couldn't find any version compatible with the Xiaomi 12T Pro.
2) I would like to know how to disable or password protect the factory reset of the phone or how to have a personalized factory reset.
3) I heard about "EliteROM", what does it add to the phone?
Thanks in advance for your feedback.
Just put a pin code on the lock screen (for example).
TWRP.
Elite Rom
NOSS8 said:
Just put a pin code on the lock screen (for example).
TWRP.
Elite Rom
Click to expand...
Click to collapse
Thank you for your feedback, how to do this? How to put a pin code on the lock screen of TWRP, I did not succeed.
Not on the TWRP but on the phone's lock screen (this will encrypt your data and you will be asked for the code on the TWRP).
Settings/passwords and security
Use the latest version of TWRP.
NOSS8 said:
Not on the TWRP but on the phone's lock screen (this will encrypt your data and you will be asked for the code on the TWRP).
Settings/passwords and security
Use the latest version of TWRP.
Click to expand...
Click to collapse
Ok but I want to have a different code than the phone itself.
Otherwise how to have a factory reset with a custom configuration and applications already installed?
Lukyboy18 said:
Otherwise how to have a factory reset with a custom configuration and applications already installed?
Click to expand...
Click to collapse
Ok but I want to have a different code than the phone itself.
not possible To be checked?
Factory reset will erase your data and configuration, make a backup with Micloud.
NOSS8 said:
Ok but I want to have a different code than the phone itself.
not possible
Factory reset will erase your data and configuration, make a backup with Micloud.
Click to expand...
Click to collapse
It's not possible to create some sort of custom ROM that would become the new factory format with a set configuration?
Lukyboy18 said:
It's not possible to create some sort of custom ROM that would become the new factory format with a set configuration?
Click to expand...
Click to collapse
There is backup with TWRP but not 100% guaranteed.
1) there is no point in protecting recovery with password.
2) not possible to prevent factory reset. everyone with physical access can flash anything.
alecxs said:
1) there is no point in protecting recovery with password.
2) not possible to prevent factory reset. everyone with physical access can flash anything.
Click to expand...
Click to collapse
Ok it's just a matter of security so you can't do a factory reset without a pc. So there is no solution?
Lukyboy18 said:
Ok it's just a matter of security so you can't do a factory reset without a pc. So there is no solution?
Click to expand...
Click to collapse
Nope,do a search in the settings, there is.
Lukyboy18 said:
1) I would like to know how to protect the recovery with a password. Currently I have TWRP but I couldn't find anywhere how to put a password.
Click to expand...
Click to collapse
Why doesn't TWRP have password protection?
I’ve had people ask enough for a protected TWRP that I’m creating this page as a response so I don’t have to retype. If you’re seeing this page, you’re proba...
twrp.me
In short: It doesn't make sense because TWRP can be substituted by another custom recovery without a password protection. And then your protection is deactivated.
for privacy security consider encryption
Some Samsung phones won't start recovery until an USB connection is established. This can be a cable connection to a desktop PC, notebook, TV etc. or some certain usb devices. But it's unique for Samsung devices. Any other Android device only needs the key combo to boot into recovery.

Categories

Resources