Question about buying a used rooted phone

[KeithP]

I am thinking about buying a used Nexus 6 on Swappa. If someone has rooted their phone, will a factory restore completely wipe it clean?

I am specifically worried about how secure the phone is after it has been rooted. Would it be possible for someone to install something that would remain after a factory restore and compromise the device?

-KeithP

 

[paperwastage]

I am thinking about buying a used Nexus 6 on Swappa. If someone has rooted their phone, will a factory restore completely wipe it clean?

I am specifically worried about how secure the phone is after it has been rooted. Would it be possible for someone to install something that would remain after a factory restore and compromise the device?

-KeithP

factory restore isn't secure

If I flash/install something into the system partition, factory restore won't remove it (factory restore RESETS just the /data partition, not the /system or /boot or /recovery partitions)

https://android.stackexchange.com/q...set-exactly-the-same-as-wiping-data-and-cache

you could boot to fastboot, and flash the factory ROM that you downloaded directly from google....


note: you'll need to unlock bootloader before you attempt to flash via fastboot. otherwise, you could end up with an expensive paperweight

 

[sweenish]

As paperwastage said, unlock bootloader and flash factory image to get a completely fresh phone.

Then it's up to you if you want to re-lock bootloader again.

 

[KeithP]

Okay...thanks for the feedback. It is appreciated. :thumbsup:

-KeithP

 

[dawheat]

Yeah I wouldn't worry about security after a full factory image but does the Nexus 6 have an e-fuse? If so and if the phone has been rooted, you may not be able to use Android Pay or some enterprise apps that check.

 

[monkey333]

https://developers.google.com/android/nexus/images?hl=en

 

[Chocu1a]

I would not worry about buying a rooted phone. It is extremely easy to do a full factory wipe in recovery.

 

[postmortemIA]

I would not worry about buying a rooted phone. It is extremely easy to do a full factory wipe in recovery.

not really - all modifications to system partition cannot be removed without reflash.

 

[looper]

Interesting thread.

This rookie wonders if Tor were installed on a N6 or N6P, could it be removed without any trace remaining? Same situation, sort of?

 

[paperwastage]

Interesting thread.

This rookie wonders if Tor were installed on a N6 or N6P, could it be removed without any trace remaining? Same situation, sort of?

you should enable encryption before using <insert whatever XYZ you want to do>

when you're done, do a full low-level write/wipe/shred 5-7 times, probably in TWRP/CWM

(same reason why it's recommend to use shred at least 5-7 times on a desktop)
http://fsckin.com/2008/01/09/using-shred-to-wipe-hard-drives-dod-uses-it-you-should-too/




obviously for better opsec, you shouldn't register any email/fingerprints on the phone, don't use it on your local wifi etc. poor opsec = bad

http://arstechnica.com/tech-policy/...-poor-opsec-pleads-guilty-to-importing-molly/
http://arstechnica.com/tech-policy/...-hacker-swatter-fails-at-opsec-pleads-guilty/

 

[DealODay]

Could you ask the user to deroot the phone and factory wipe it?