Android phone bricked by "security feature"?

All my apps have a Linux equivalent or already have been compiled for Linux, web browser, media player, telegram, file explorer, ftp server etc. so I won't have any issues in that respect.

It's not simply about FRP I want to move away from Android because what was once a really open platform is becoming more closed and controlling of your device that it becomes a pia when trying to do some basic things.
Good luck! I genuinely hope you succeed. Unfortunately I would be lost without things like Android Pay, Sky Q, Ring Doorbell and my other smarthome apps (quite a lot of these) so it's not an option for me.
 
Joe blogs shouldn't have root access to his phone. That's crazy, that's saying all phone should be shipped with no security in place. That is so, so wrong.

That's a false analogy, everyone knows that banks block failed logins or pin numbers as a security feature. No standard user knows about FRP being installed on the phone and therefore does not take the necessary precautions.

I think your want to move away from android is really a separate issue. Your problem here in this thread is a corperate phone that wasn't managed properly and apparently was set up by somebody who cant remember their own gmail address. Somebody there is responsible for this, it's not FRPs fault. Nobody should be setting anything up if they cant handle basic requirements like that.
 
Joe blogs shouldn't have root access to his phone. That's crazy, that's saying all phone should be shipped with no security in place.

No it isn't, what an authoritarian attitude!

I think your want to move away from android is really a separate issue. Your problem here in this thread is a corperate phone that wasn't managed properly and apparently was set up by somebody who cant remember their own gmail address. Somebody there is responsible for this, it's not FRPs fault. Nobody should be setting anything up if they cant handle basic requirements like that.

Yes the corporate phone should have been managed differently in hindsight, but with no warning about FRP, how was the end user supposed to act appropriately?

The simple fact of the matter is that there is simply no excuse for installing FRP with no warning and without the users consent.
 
Last edited:
IT should know about it. Listen to the guys telling you when they say they manage their corporate phones.

No it isn't, what an authoritarian attitude!

Root access from the go is giving everything running under your account access to everything else. It's absolutely crazy to suggest that's how phones should ship. This isn't authoritarian all and I'm puzzled why you are now trying to attack my views on FRP rather than concentrate on the real issue. I'm not playing this game with you, been there and done that before so good luck sorting this for your IT department but I'm bowing out.
 
Last edited:
No it isn't, what an authoritarian attitude!

Yes the corporate phone should have been managed differently in hindsight, but with no warning about FRP, how was the end user supposed to act appropriately?

The simple fact of the matter is that there is simply no excuse for installing FRP with no warning and without the users consent.

FRP was introduced with Android 6 so been around for 3 years, it's not a new thing. Is there no mentioned in the T&Cs when setting up a device?

As mentioned above if reset correctly in settings the primary account should be removed. If the phone was reset through recovery then you need to enter the primary account during setup.

@jsmoke flashing a ROM doesn't remove the FRP.
 
That's a false analogy, everyone knows that banks block failed logins or pin numbers as a security feature. No standard user knows about FRP being installed on the phone and therefore does not take the necessary precautions. Furthermore when we are talking about a bank we are dealing with their systems, in the case of FRP we are talking about a personal device that the user should have master/root control over.

I wouldn't say it's a false analogy as forgetting your login details in both scenarios results in lost access. As mrk said, you are also instructed to remove your accounts when performing a factory reset. I reset my phone about a month or so ago and was presented with a list of accounts on the device that the phone prompted me to remove before resetting, including the Google account.

I agree with you that Android has become more closed but I personally don't believe that to be a bad thing. I used to root all my devices back in the day as Android was missing a lot of functions that have become part of the OS as stock features over the time. Don't get me wrong, it's still not perfect - Android's backup feature is still woefully inept as I believe restoring after a device refresh should result in the phone being as was before the reset itself.
 
It's not a stupid security feature at all. It's stop people from stealing phones and then just being able to wipe them and use them. If your colleague logs into the account they used on the phone then they can remove the device and it will work. This is purely the fault of your colleague for not doing things correctly.
 
Root access from the go is giving everything running under your account access to everything else. It's absolutely crazy to suggest that's how phones should ship. This isn't authoritarian all and I'm puzzled why you are now trying to attack my views on FRP rather than concentrate on the real issue. I'm not playing this game with you, been there and done that before so good luck sorting this for your IT department but I'm bowing out.

There are manufacturers like OnePlus which ship phones rooted, hasn't caused a doomsday scenario yet.

It's not a stupid security feature at all. It's stop people from stealing phones and then just being able to wipe them and use them. If your colleague logs into the account they used on the phone then they can remove the device and it will work. This is purely the fault of your colleague for not doing things correctly.

I never said it was a stupid security feature, it's potentially a great feature for those that want it, the issue is that it's slipped in through the back door and the user only finds out about it when they forget the random gmail account they created at startup 3 years ago.

It is not purely the fault of my colleague, there is an obviously bad software design choice here of not informing the user of FRP when setting up the device.

There is some fault on the user side yes, but you can't pass this off as just user error when that user was never informed about FRP and the need to keep a record of the account details.
 
Last edited:
There are manufacturers like OnePlus which ship phones rooted, hasn't caused a doomsday scenario yet.
Which phones do they ship rooted? I didn't get that option with my OnePlus 6T.

A lot of my most used apps would stop working if I had a rooted phone, and I haven't felt the need for root access for years now. What do people use it for now? It was handy with custom ROMs for updating drivers and other things, but that was back in the days when custom ROMs were a lot better than standard ROMs. I can't see what OnePlus would gain by selling phones pre-rooted? Is FRP disabled too?
 
Does not matter if the phone came with a 12foot high neon sign warning new owners of loosing there details, every single one that looses them would do so again - its the nature of idiots.

95% of folk out there are simply to simple to remember passwords and email accounts - the number of displays i see with post it notes containing passwords and such... (which is the very best way to get this BOFT to come down hard on you like a ton of horse muck) god it ****** me off.
 
Which phones do they ship rooted? I didn't get that option with my OnePlus 6T.

A lot of my most used apps would stop working if I had a rooted phone, and I haven't felt the need for root access for years now. What do people use it for now? It was handy with custom ROMs for updating drivers and other things, but that was back in the days when custom ROMs were a lot better than standard ROMs. I can't see what OnePlus would gain by selling phones pre-rooted? Is FRP disabled too?

When I got my OnePlus 3 it was pre rooted out of the factory. I don't see why your apps would stop working, certainly none of mine have a problem with a rooted phone.

Having a rooted phone is very useful for removing the spyware-esque crap most manufactures put onto the phone, and I need it for certain folder access.
 
When I got my OnePlus 3 it was pre rooted out of the factory. I don't see why your apps would stop working, certainly none of mine have a problem with a rooted phone.

Having a rooted phone is very useful for removing the spyware-esque crap most manufactures put onto the phone, and I need it for certain folder access.
Are you sure your OnePlus 3 had root access from the factory? It wouldn't have been certified by Google.

Apps I use that check for root:
Santander (and all banking apps)
Sky Go (and most streaming apps)
Any kind of NFC payment app
Many smarthome apps

Loads of everyday apps check for root access these days.

What folder access do you need out of interest and why? I'd call myself quite a power user but I've not needed su access for years now.
 
Are you sure your OnePlus 3 had root access from the factory? It wouldn't have been certified by Google.

Apps I use that check for root:
Santander (and all banking apps)
Sky Go (and most streaming apps)
Any kind of NFC payment app
Many smarthome apps

Loads of everyday apps check for root access these days.

What folder access do you need out of interest and why? I'd call myself quite a power user but I've not needed su access for years now.

It uses Oxygen OS so google certification is not really an issue.

Banking apps work fine if you use things like Magisk or RootCloak. I'm shocked people use SkyGo, but hey whatever floats your boat.

I do development work so I need access to all the folders on the device, I also want to remove the bloatware that is shipped with Android.
 
It uses Oxygen OS so google certification is not really an issue.
It's definitely an issue. The OnePlus 3 was actually the first phone to be properly sold via a mainstream mobile operator in the UK. It was absolutely certified by Google or they wouldn't have been able to sell it with any Google apps on there via any channel. If it was rooted from the factory, then that's a pretty big security issue and a massive certification issue, where did you buy it from?
 
Oneplus phones do not come pre-rooted at all. If you've bought a phone that's been rooted then it's not brand new.
 
It's definitely an issue. The OnePlus 3 was actually the first phone to be properly sold via a mainstream mobile operator in the UK. It was absolutely certified by Google or they wouldn't have been able to sell it with any Google apps on there via any channel. If it was rooted from the factory, then that's a pretty big security issue and a massive certification issue, where did you buy it from?

I bought it from the OnePlus website.

In any case this is digressing somewhat from the original issue. Google made a change to the OS that they didn't tell users about, so a users expectation from previous versions of android would naturally be that remembering the google account didn't matter. Google then did not warn the user upon setup or provide an option to turn FRP off so it resulted in a nearly bricked phone in this case that thankfully I was able to recover with an APK, Google have a lot to answer for, it's not simple "user error".

I just want an easy life where I know how my phone is going to function and behave and Android no longer fits the bill when it's slipping in "features" via the backdoor. So it's definitely something I will be moving away from, never mind the privacy concerns surrounding Google at this point in time.
 
Last edited:
I bought it from the OnePlus website.
If that's the case there is a bigger issue and you should send it back, because that isn't an official or certified OnePlus firmware you have. Who knows what else could be installed on there if someone rooted it before it went out. As a Linux user you should probably understand and be a bit worried that someone has had root access to your device and done god knows what.
 
If that's the case there is a bigger issue and you should send it back, because that isn't an official or certified OnePlus firmware you have. Who knows what else could be installed on there if someone rooted it before it went out. As a Linux user you should probably understand and be a bit worried that someone has had root access to your device and done god knows what.

That phone has since been wiped had multiple custom OS's on it and was recently sold on Ebay so I'm not concerned. :p
 
Back
Top Bottom