Recovery mode security - how to set password?
Added by Bruno Henc about 9 years ago
This isn't necessarily directly related to Replicant,
but is there a way to set a password for recovery mode?
Because anyone who has hardware access to the phone can
easily swap out the SD card and load a phony version of
Replicant or anything else.
This could all be prevented by a password.
My question is, is there an implementation of a password
prompt, or should I try modiyfing and building a custom
recovery image?
Thought I'd save myself some time by asking. Search engines
haven't revealed anything useful.
Any guidance where to search, how to implement it and the risks
involved and any info is really appreciated.
Replies (6)
RE: Recovery mode security - how to set password? - Added by Pep tide about 9 years ago
TWRP prompts for a disk encryption password.
RE: Recovery mode security - how to set password? - Added by Bruno Henc about 9 years ago
Pep tide wrote:
TWRP prompts for a disk encryption password.
Thanks. I'll try to see if it works for me, it
seems promising.
RE: Recovery mode security - how to set password? - Added by Thomas Kitchin about 9 years ago
twrp
Is there a compatible version for the i9100!?
RE: Recovery mode security - how to set password? - Added by Paul Kocialkowski about 9 years ago
This might be of interest for you: http://twrp.me/securetwrp/
Note that Replicant is still going to ship with CWM in the future, which doesn't feature password access either.
We simply cannot guarantee that the system can't be altered when physical access to the device is available. One could just as well use ADB and change the system, via USB.
RE: Recovery mode security - how to set password? - Added by Bruno Henc about 9 years ago
Thank you for your replies.
It seems that I'll have to implement a password prompt.
I try to find/develop a way to block certain smartphone features
for people who struggle with internet/video-game addictions.
I know that physical access compromises security, however in this
special case a password prompt would help.
RE: Recovery mode security - how to set password? - Added by My Self about 9 years ago
Because anyone who has hardware access to the phone can
easily swap out the SD card and load a phony version of
Replicant or anything else.
The first thing came into my mind was, to find out a way to disable the sdcard slot, (probably just inside the recovery mode).
This and/or a (password-)protected recovery with a completely disabled ADB, could lead you to a slightly better feeling.
But; if somebody have the reference to put you a "phony version of Replicant" on your device, he/she/it possibly also could replace your password protected recovery by rebooting it into download mode, and make anything else, you name it.
On Samsung devices this step simply needs 3 hardware-buttons pressed at the same time, and IMHO the download mode can't be modified/protected that easily as the recovery.