The Anti-Feature of the Day – #34 FRP

It has been a long time since I posted tiny rants about things I classify as anti-features in my profile. The last one was on 6th December in year 2022. I stopped using profile messages for various reasons and this isolated episode wouldn’t fit there anyway. It needs way more room than a series of 420char posts.

Since this January I’m active in another, German language forum about Android devices. My hatred for the closed nature of the Android ecosystem hasn’t declined the least, but my knowledge has improved greatly since my first rants about it in my blog. In fact the more I get to know, the more I get angry about Android. It is such a missed opportunity to build a free and open system helping us to partially get rid of Windows. Many Stock ROMs qualify as malware for me, while free and maintained open source alternatives such as LineageOS are considered to be unsafe: *Gasp!* Unlocked bootloaders!

While android-hilfe.de generally seems to be a great forum, containing much valuable information, the atmosphere of communication is completely different compared to GBAtemp. I neither feel valued nor really appreciated for trying to help there. Being “the new one” isn’t as easy as it was here in 2018. These remarks about android-hilfe.de are needed for this isolated episode in the Anti-Feature of the Day series. I’ll come back to that later.

Now: FRP – Factory Reset Protection

Supposedly this is a security feature to prevent theft (actually to prevent stolen devices from being usable). Access to the operating system is protected by a pin/password/pattern and if you don’t know this, you can’t access data (normal and very good!).

But if you choose to erase all data by force (factory reset the device through recovery aka "hard reset"), because you forgot your pin, the device is still locked afterwards if a Google account¹ had been linked to it. You have to sign in with the same Google account again to unlock the device. This is a mandatory feature for all devices shipped with Android 5 or higher.

Why do I think it is an anti-feature?
  • It doesn’t stop thieves from grabbing my phone and doesn’t bring back my stolen phone
    • Yeah, find my mobile exists for a while… I can't cover everything in detail here.
  • Countless not tech-savvy people make a grave mistake in this regard: They sign up on Google – no matter if they actually need it – and don’t write down their credentials. anywhere. Neither password nor mail address get noted. Years later devices end up being reset because:
    • Grandpa sadly died, a year later somebody wanted to use his old tablet again
    • Unused for long time… don’t remember pin
    • Complete crash of the OS requiring reflashing and factory reset (it happened to me)
    • Device gets sold via eBay or flea market
    • Kid plays around
    • … not hard to imagine more…
  • It is a nightmare for people buying used stuff. @Alexander1970 knows. And he knows where to put FRP. :evil:
  • The old, locked phones get scrapped. Manufactures are happy, our environment not so much.
Hey, Sinchen, stop it! This is an important security feature, not an anti-feature!
Thieves will know snatching phones will do no good and therefore will refrain from doing it. Only the baddies dislike such necessary features.
You can’t reduce safety™ and security™ to zero because some people are incautious!

Lol, recovery even states Google credentials may be needed!”

It is not a direct quote (or translation of a quote), but I have been told things like this.​

:rofl2::rofl2:Yeah, think again!:rofl2::rofl2:
Fact is, depending on the patchlevel of a device, FRP removal literally takes seconds and is free. For newer devices a license for shady, paid software might be needed.
secret.png

The Legal Stuff

On android-hilfe.de it is not allowed to assist people in circumventing FRP because it could be abused by thieves. It would be promoting illegal activity. Any information in this regard is banned from the forum. I completely understand this decision and would do the exact same if this was my forum! Linking to things, which can be abused(!) for criminal activity, is a big no-no in Germany.
Heise Verlag, a well-known publisher of computer magazines got in big trouble with the music industry for news coverage about software being able to circumvent copy protection – AnyDVD, formally produced by Slysoft, now RedFox.
Heise didn’t advertise anything, they did not endorse piracy, but they merely mentioned the existence of Slysoft and their products with the little known information, that AnyDVD can also remove some protections form CD-DA (which violate the Redbook standard anyway) and linked to Slysoft. The music industry sued Heise and won in the first instance. It took many years until the Federal Court of Justice (Bundesgerichtshof) came the conclusion that the press was allowed to cover such topics and link to sources – leaving the music industry with nothing but a huge example of the Streisand effect bringing the case and Slysoft into the mainstream media.

The case was more exciting than any crime thriller.
https://www.heise.de/Dokumentation-Heise-versus-Musikindustrie-437717.html
(German language, copy it into deepl.com if you don’t read German)

Yeah, sue GBAtemp for news coverage about Yuzu and allowing links to Luma3DS boot.firm! That would be the German way. In view of these possibilities, Nintendo's lawyers are probably already getting their panties wet from excitement.
Heise won the (pretty obvious) case just because they also have good lawyers and were willing to fight until the end. Something a small blogger or non-profit forum or a homebrew developer could never do.

Fighting for your right needs money!💸
More often than not help requests in this regard coming in are about Samsung phones not receiving updates for quite some time. The solution for this is on samfw.com, which ironically got linked often on android-hilfe.de as a source for downloading official firmware files in different context: “I need stock ROM.”
Like a text module, every question about FRP is answered by "Contact Samsung with proof of ownership. It will cost you 70€."
Case closed. 🤮


Empathy? Hell, no!

There is nothing that can be done about the inability to help people there for legal reasons, but the arrogant and condescending way “forum veterans” (not even mods!) deal with the topic is plain stupid. I got made fun off for being empathic a few times and for mentioning the very obvious downsides of FRP. Well. I’m objectively wrong for having an opinion deviating from theirs while even being able to provide reasons for it.

Those long-term members surely aren’t perfect in their life regarding all topics. Hopefully they will make some grave mistake in a non-technical field and get ridiculed for the “obvious-anybody-knows-to-avoid-this”-blunder.

I have been dealing almost three decades with computers in a pretty intense and interested way. I’m not a developer or a hacker or any of those half-gods, but I made my homework regarding backups. Such a thing would never happen to me as all data gets backed up multiple times and distributed across different type media including encrypted online backup for the most important stuff. And despite that I would never approach somebody in a condescending manner. My cynical signature is aware of it’s cynicism and I tried to mitigate it with an explanation.



Summary

  • FRP is a pain in the ass for the legitimate owners (including people like me trying to give old things a second life)
  • FRP doesn’t stop thieves from stealing.
  • FRP gets circumvented in seconds by “the baddies”.

I could not resist and made a meme picture based on Castlevania – Symphony of the Night ("Die Monster. You don't belong in this world!")
I'm not good at picture editing, but it should be good enough despite somehow the "a" at the end of Kumatora got lost somehow in the text at the bottom.
Die Monster_FRP.jpg




_______________________
¹ Maybe additionally manufacturer account. Samsung, Xiaomi, Huawei… have their own rubbish

Comments

I heard this being used (probably Louis Rossmann video?), and I 100% agree with it:

Thieves will not check if your phone is bootloader-locked, or if it has FRP. They will grab it for good luck, and hope for the best.
The average thief also has no knowledge by looking at the phone. They will just grab it and run.

Yeah, it sounds like exactly what happens in the real life (and not just theoretical ifs and buts and "think of the children"s).
At best they have a good and usable phone, and at worst they will sell it off for parts (assuming not paired, though you can just reprogram the serial number with reflashers...), or they will be left with a brick, and that's the end of the story.
 
This is why I treat my android phones as toys and don't use them for anything important other than casual texting. I get why you want you devices to do everything that they should be able to do but it just isn't worth the headache when I have a pc at home.
 
Not using Google services is key to bypassing FRP. I stopped doing it starting with my S7 Edge, and I haven't missed it since. To be honest, I've never activated "Find My Phone" because I'm wary of it invading my privacy.

I've also been fortunate to never lose my phone completely or have it stolen; I know it's happened to some folks, especially in major cities, but I live in a remote-enough area that such activity is unheard of.
 
(probably Louis Rossmann video?
:creep: That would be a rant worth watching. He's cool.

This is why I treat my android phones as toys and don't use them for anything important other than casual texting.
Sadly smartphones are becoming more and more mandatory. A question of time until law demands carrying a locked phone all the time (first indirectly, later explicit law)

Not using Google services is key to bypassing FRP.
I've yet to use Google Services for the first time. Google is a privacy nightmare regardless of "Find My Phone"
==========

Thanks for the comments.

I've added a picture to the entry (last spoiler in text)
 
👍❤️👏

Bravo,Sinchen.

A prime example of how today's society works in this world...
....and to be honest, I'm finding it more and more difficult to cope with this society and the people in it.
Certain “attitudes to life” keep telling me that you are only a part of something Bigger / Overall...
Yes, yes....I hear you anyway....
That no longer works in this society either...unfortunately, it's a shame...
What else can you say about an operating system and the devices on which it runs?

91% of (Android) Google Smartphone/Tablet Users do this here -> istockphoto-1058507506-612x612.jpg
(..Does anyone actually still use the TELEPHONE FUNCTION to call someone?)


End of comment...
 
91% of (Android) Google Smartphone/Tablet Users do this here -> View attachment 427757
(..Does anyone actually still use the TELEPHONE FUNCTION to call someone?)


End of comment...
I use the the phone function for work mostly, and talking to one particular friend. Almost everyone else I talk to is on discord.

Sadly smartphones are becoming more and more mandatory. A question of time until law demands carrying a locked phone all the time (first indirectly, later explicit law)
There are places that make it a requirement to use a phone to pay for parking here in the us. Technically, you could use any phone since you can call the number instead of using their stupid app, but it's not like there's any payphones anymore.
One time my brother and I tried to use public transit. My brother was in charge of getting us tickets, and the website said that you could buy tickets online and print them out. So my brother, not wanting to use the phone app or use cash (since they don't give change for cash) decided to do just that. The bus driver had never seen them before, and when he radioed into his headquarters they had never heard of it either. When we were trying to get back home at the end of the day, the next bus driver thought we were ripping him off, and headquarters still hadn't figured out what these "paper tickets" were despite it being right on their website! (We got home just fine in the end, but we were a little worried they might kick us off at first!)
This whole story to say, they probably won't need to make any laws requiring you to have a cell phone, because regular everyday people will make it annoying enough not to have one for most of the population.
 
  • Like
Reactions: KleinesSinchen
I currently have a samsung A7 tablet from someone that is being held hostage by FRP! It's from a 12yo that set it up on her own and forgot both the pattern and gmail password! So now I got asked to fix it cheaper than sending it to samsung for a reset! ;)all I could find was sketchy tools...that might install mallware or who knows what on that tablet while unlocking it! Tried a few methods but had set all hopes through resetting the gmail account, but...she did not enter enough information to go through the reset process!

I agree with FRP as a theft deterrent..since thieves get a worthless device if they take it. But...for legitimate purposes like this...a forgotten password/pattern...there should be a similar security code to a PUK code on simcards! Just include a card or code on the inside of the original box holding this code! Probably most people will loose this or throw it away...but then at least it's there! Now it's a couple 100's worth of a paperweight! :(
 
  • Like
Reactions: KleinesSinchen
I agree with FRP as a theft deterrent..since thieves get a worthless device if they take it.
Well I don't. If there is no easy way around this anymore in the future as the loopholes get closed, the baddies will upgrade from pickpocketing to robbery:
"Give me your phone and say the unlock pin!" *Holds a sharp knife in your direction*
Currently a license for a shady tool is the easier and less risky variant for criminals. I prefer that over even more violence.
=====

Weakest link in your current case could be the pattern, especially if it is a small one. It could be bruteforced manually in reasonable time (unless she set it to self-deletion after a few failed attempts, which will trigger the FRP trap).
If the Tab A7 is on latest patchlevel there is probably no public weakness, which leaves paid methods like SamFw FRP tool. If you decide to do that, please share the result.

Highly unlikely for a bypass tool to succeed in infecting an Android device. That would mean compromising the complete AVB chain of trust thing. That would actually be… awesome, since it would allow rooting with closed bootloader.
 
  • Like
Reactions: Archerite
Well I don't. If there is no easy way around this anymore in the future as the loopholes get closed, the baddies will upgrade from pickpocketing to robbery:
"Give me your phone and say the unlock pin!" *Holds a sharp knife in your direction*
Currently a license for a shady tool is the easier and less risky variant for criminals. I prefer that over even more violence.
Now that you put it that way, yeah it does sound more dangerous to have FRP and have those scumbags threaten your life for the code!
Weakest link in your current case could be the pattern, especially if it is a small one. It could be bruteforced manually in reasonable time (unless she set it to self-deletion after a few failed attempts, which will trigger the FRP trap).
They had already tried a factory reset before I got it, so I am stuck at the initial setup demanding the original google account that was used. or the pattern. Both are lost...unfortunately. But knowing this impatient little girl, she would have left anything at defaults and "next, next finish" kinda ways to get into the games she wanted to play. So if self-deletion is the default, that's probably on. The unlock patern locks for minutes while it's in this state, so manual brute force is going to take a very long time!
If the Tab A7 is on latest patchlevel there is probably no public weakness, which leaves paid methods like SamFw FRP tool. If you decide to do that, please share the result.
I have no idea what pathlevel it's on, I do think it's more recent than jan 2023 which I saw would be a free unlock. my "biggest fear" of using some shady tool is that I get viruses or malware on either the computer running the software or on the samsung tablet! Do you think samfw FRP tool is legit? And trustworthy...enough? I am willing to try if it's the only option and report back if it works. But I first need a reasonable hint that it's somewhat trust able. you know. :)
Highly unlikely for a bypass tool to succeed in infecting an Android device. That would mean compromising the complete AVB chain of trust thing. That would actually be… awesome, since it would allow rooting with closed bootloader.
This is my fear, since it does "things" on the tablet and needs to run on a PC...it can do whatever it wants basically on either device! A PC I can put whatever OS it needs in a VM and discard it after I am done. But the tablet...if it puts something in there it's kinda hard to revert back. Firmware flash maybe?
Well, I guess it won't be injecting stuff over ADB while it's doing the FRP unlocking...but after that is done. Does it not have full access to the device? And can it then not install any APK it wants? And just do that in the last 2% of it's unlock progress?

I have searched for the tool and it seems to cost 22 dollars for the unlock service. they use a thirdparty service and they get a little compensation too. or something. Looking better I see there is a windows application and a WEB version. It does require an account there...

It's at least an option if it really works.
 
  • Like
Reactions: KleinesSinchen
For the computer I'd use a physical PC with fresh Windows 10 installed to an empty SSD while not having any other SSD/HDD connected. No Windows license required for that. After all MS wants us to test Windows.
Physical PC because USB passthrough on virtual machines didn't reliably work for me.

As for infecting the tablet: Again, I very much doubt it and would be glad to buy the girl a new and better device if somebody tells me how the f… we can circumvent AVB!

I'm still new at this despite trying to be active in a German android forum (android-hilfe.de). As far as I understand Android in newer iterations it works like this:
  • Bootrom starts bootloader from eMMC and verifies it is signed (manufacturer private key).
  • Bootloader starts from "boot" partition after verifying it is signed. Same for "system" partition and maybe more.
If something is changed on the (normally read only) partitions there is a mismatch and the phone/tablet goes red state → no boot. Android verified boot 2.0, vbmeta and all that crap.

All the normal user (including adb) can do is write to "data" partition, which is formatted in factory reset procedure.
The FRP is an exception. Google Services (and other, manufacturer specific processes) might have higher privileges and probably write to some hidden partition containing the Google account name. It can be seen that for some MTK/MediaTek devices some flash file exists to overwrite the location with flashing tools.
Regular factory reset from the main OS, requires knowing your pin/password/pattern, deletes the Google data as the user was authorized. Factory reset via recovery leaves the Google data arming the trap.

A normal factory reset removes all APKs, including malicious. If you don't think that is enough you could re-flash the tab with Odin/Heimdall after removing FRP… but I don't think that is needed.

Do you think samfw FRP tool is legit? And trustworthy...enough?
From all that fishy offerings it looks like the least fishy. But I have no idea if it is legit and no idea what the service from samfw does. Never used it. Supposedly it isn't even permanently online. It sounds like Samsung insider knowledge since mentioning no security loophole is used.
Please don't laugh: I've already considered trying it just for finding out if it works. But all of my devices had already de-googled and flashed to LineageOS.
 
  • Like
Reactions: Archerite

Blog entry information

Author
KleinesSinchen
Views
456
Comments
10
Last update

More entries in Personal Blogs

More entries from KleinesSinchen

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Lol rappers still promoting crypto