I got this Moto g84 with CalyxOS from ebay but had to update it to the 7.2.2.0 release. Now the thing is, the seller specifically said if I relock the bootloader the phone will be bricked. I used the web installer for the g84 model and left it unlocked, but that g84 installer says its safe and a different part of the CalyxOS site also says don’t relock any Motorola phones. Do any of you guys know more about this or what the consequences of leaving it unlocked could be?
AFAIK. The only security risk with this is that anyone with physical access to your phone could flash a malicious ROM on it.
This shouldn’t be an issue for most people. And I’m pretty sure that those who cares about this runs GrapheneOS anyway.
Sorta assumed this was the only thing to worry of, thanks Hund.
Not just “evil maid”. Malware could flash a backdoored OS too. Source: https://kevinboone.me/lineage-eos-graphene.html (the comment from GrapheneOS team at the end)
Bootloader locked = Verified boot = Secure boot = only OSs with valid signature can boot.
That’s exactly what I said? A ROM with a backdoor is a malicious ROM.
Bootloader locking stops web-caught malware from modifying the OS and thereby making itself persistent (reset-resistant).
People with physical access is a different threat.