One more phone, same questions. Despite being a developer myself, I am quite a bit far from Android development. However I prefer having something from SlimRoms rather than stock bloatware. But the question arises:

Is there any sensible reason to trust my credentials and privacy to popular software like SuperSU, TWRP, ClockworkMod, custom CyanogenMod builds and so on?

I am also aware that TWRP is open source. Though I have no clue how to build it, and who did it for me with which modifications.

Sorry if the question sounds a bit unethical for somebody.

  • The "price" you'll have to pay if you want their advantages. I weigh that far heavier than privacy. Besides, it's still better than trusting app developers (you don't know what it feels to be a Chinese Android user).
    – Andy Yan
    Nov 27, 2016 at 2:28

1 Answer 1


The same reason that people trust already-compiled builds of Ubuntu, LibreOffice, Linux kernels and mainstream-compiled builds of thousands of other open-source efforts.

Namely that they are being backed by large organisations of people, the code or patch file used to build it is required to be submitted (and is most likely diff'ed against the original build, making the insertion of malicious code extremely hard to hide), and the maintainer is usually a trusted member of the community around said program.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .