DeGoogle Yourself

17468 readers

121 users here now

A community for those that would like to get away from Google.

Here you may post anything related to DeGoogling, why we should do it or good software alternatives!

Rules

Be respectful even in disagreement
No advertising unless it is very relevent and justified. Do not do this excessively.
No low value posts / memes. We or you need to learn, or discuss something.

Related communities

!privacyguides@lemmy.one !privacy@lemmy.ml !privatelife@lemmy.ml !linuxphones@lemmy.ml !fossdroid@social.fossware.space !fdroid@lemmy.ml

founded 6 years ago

MODERATORS

CrypticCoffee@lemmy.ml

CrypticCoffee@lemm.ee

Byereddithellolemmy@lemmy.world

chevy9294@monero.town

Just got a degoogled CalyxOS phone but can I leave the bootloader unlocked? (lemmy.zip)

submitted 2 weeks ago by wingnut@lemmy.zip to c/degoogle@lemmy.ml

18 comments fedilink hide all child comments

I got this Moto g84 with CalyxOS from ebay but had to update it to the 7.2.2.0 release. Now the thing is, the seller specifically said if I relock the bootloader the phone will be bricked. I used the web installer for the g84 model and left it unlocked, but that g84 installer says its safe and a different part of the CalyxOS site also says don't relock any Motorola phones. Do any of you guys know more about this or what the consequences of leaving it unlocked could be?

you are viewing a single comment's thread
view the rest of the comments

[–] Tehdastehdas@piefed.social 5 points 2 weeks ago (1 children)

Not just "evil maid". Malware could flash a backdoored OS too. Source: https://kevinboone.me/lineage-eos-graphene.html (the comment from GrapheneOS team at the end)

Bootloader locked = Verified boot = Secure boot = only OSs with valid signature can boot.

[–] Hund@feddit.nu 3 points 2 weeks ago (1 children)

That's exactly what I said? A ROM with a backdoor is a malicious ROM.

[–] Tehdastehdas@piefed.social 4 points 2 weeks ago

Bootloader locking stops web-caught malware from modifying the OS and thereby making itself persistent (reset-resistant).

People with physical access is a different threat.