this post was submitted on 08 Jul 2025
11 points (100.0% liked)
techsupport
2880 readers
5 users here now
The Lemmy community will help you with your tech problems and questions about anything here. Do not be shy, we will try to help you.
If something works or if you find a solution to your problem let us know it will be greatly apreciated.
Rules: instance rules + stay on topic
Partnered communities:
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Device integrity is important, but in the sense that I don't want police to be able to get in if they take my phone while it's locked. The phone should not be trying to protect itself from me, the owner.
I'm not planning on running any banking apps, nor any other proprietary apps that need any sort of remote attestation. For sensitive data, nothing like "other people's social security numbers". Just my own data, which I would prefer remain private.
Seedvault uses Android's built-in backup infrastructure, so it won't back up things like Signal, or proprietary apps that resist being backed up. Only a rooted app (or rooted adb) can properly backup an Android device.
By "mess with apps' internal states", I want to see what data proprietary apps are storing about me, and selectively delete it. I want to replace their certificate authorities with my mitmproxy's certificate authority, and intercept their connections to understand them. I want to try modifying apps' code -- for example, call recording doesn't work on my current phone, because there's supposedly some XML file somewhere that marks all the US as "recording is illegal". GrapheneOS claims to fix this, but there may be future problems in that same style, which could be fixed by modifying just one file.
Appreciate the info & context, and I agree with your overall sentiment WRT device protection against authorities.
I'll be moving to grapheneOS for my next phone (which unfortunately may be another from the pixel series). I suppose I can try my hand at magisk and other things (I'd still prefer to use MicroG on GOS). If it writes a custom boot image then there's a chance it'll prevent boot entirely. I'm not sure if there are other methods for installation or temporary use of root?