0
  • galaxy nexus
  • unlocked bootloader
  • no adb enabled
  • rooted
  • device encryption on with 10+ characters (Cryptfs Password - Google play)
  • PIN screen lock with 6 characters

Am I safe if someone wants to extract data from my phone with phone on and off ? what should I do improve ? Did I miss anything ?

  • Your phone is as only as safe provided you do not lose it! Also, recommended to install a firewall, such as AFWall+ and appropriately block certain apps. Other than that. – t0mm13b Feb 3 '13 at 16:55
  • Thanks, I think I am already pretty safe on software thanks to openpdroid and DroidWall. Thing I really worried was thieves. – John Feb 3 '13 at 18:09
1

The combination of encryption, PIN lock, and having ADB turned off should protect your data pretty well. It could still be compromised if someone finds a security flaw that can be exploited through the network or the MTP USB connection, but that risk exists in any case.

However, with your bootloader unlocked, someone could take your phone, flash a malicious ROM that contains keystroke loggers or something, and then return the phone to you and wait for you to type your PIN or decryption password. It'd be better to keep the bootloader locked whenever you don't actually need to flash things via fastboot.

You can use BootUnlocker to lock and unlock the bootloader from within the running Android system. Unlike fastboot oem unlock, this doesn't wipe your data when you unlock.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.