Promote custom ROMs usage to support older android devices

[emanuelb]

See related issue at Hamagen repo:
MohGovIL/hamagen-react-native#281

This app currently require Android >= 7, see:
#13

People with devices that run older versions of android won't be able to use it, but many devices can upgrade the OS using Custom ROMs:

Official Roms:

LineageOS https://wiki.lineageos.org/devices/
Replicant https://www.replicant.us/supported-devices.php
/e/ EELO OS https://doc.e.foundation/devices/
CalyxOS https://calyxos.org/get/

More unofficial ROMS are available at xda-developers forum.
https://forum.xda-developers.com/all-forums-by-manufacturer

So it's possible to raise awareness such as to write about the issue in ramzor-website, minimum version requirements, and suggest people with older Android OS to replace it with Custom ROM (They can ask someone with the technical expertise to help them)
Moving from older OS to newer one also increase the security & privacy of the device, so it's recommended even if the device is supported but not using a modern android OS (which is >= 10)

[TheYarin]

I think it's a bad idea to promote fiddling with custom ROMs to the general public.

[emanuelb]

@TheYarin why?! it's very good idea!!! the alternative is users running old android version which doesn't support modern apps and has many known security issues (android provide updates only for latest 3 versions, which currently the oldest supported is android 9)
basically if the android version provided by the custom ROM is higher by at least 2 versions then the one available from the phone manufacturer, replacing the OS should be done.
Regarding the ramzor app it doesn't support devices with android < 7, many such devices can have the OS upgraded by using LineageOS or /e/ or other ROMS, which is a solution that doesn't require buying new phone.
if you read the linked issues you see people complain that the app won't work on their phone, upgrading the OS via official alternative OSS ROM is a good solution! and should be promoted!

[TheYarin]

Of course the problem of "old phones running an unsupported android version" can be solved by installing a custom ROM.
But, installing a custom ROM can be a very tricky process, and involves the risk of bricking the phone, especially if you're not a technical person. It's just too complicated for the average person, and by promoting it to the masses, you'll end up with a lot of angry people with bricked phones.

[emanuelb]

@TheYarin you wrong, I installed custom ROMs many times on different devices and never bricked a device, it's not tricky at all, everyone who I installed lineageos on their phone was thanking me, and said their device started to work better, especially longer battery life, etc..
Some common sense steps that should be done to avoid brickage:
*. backup all the data from the phone before the flashing process (to restore it after installation)

1. using a "good" usb cable (not broken, trashed, not-low-quality, better be official cable, etc...)
2. the phone need to have nearly full battery (>80%) during the flashing process.
3. the connected computer must pass unlikely power outage so flashing process won't be aborted (either UPS connected to desktop or laptop with nearly full battery)
4. flashing the correct variant (both OS and recovery if needed) for the device
5. using latest versions of related tools (heimdall/fastboot) or recovery (TWRP/LineageOS)

There is WEBUSB installer that flash device from browser and is more safer for newbies (don't need knowledge with command-line) like:
https://flash.android.com/
https://grapheneos.org/install/web
But currently this is available only for pixels devices that already receive updates.

Regarding bricking the device, soft-brick is ok, you just re-flash! hard-brick or broken device are very very rare.
average person will not be able to complete the official steps of installing Lineageos, he will ask for help from people like me who can.

By not installing custom ROM and Updating the OS on the device there is greater security risk of having the phone compromised and being part of botnet..

[TheYarin]

Almost every advantage of custom ROMs you mentioned is correct, but that doesn't make me wrong. The process you described is, in my estimation, too complicated for atleast 85% of the population. Most people don't even know how to properly backup their phone.
Installing a (good, official) custom ROM on an old phone can make the phone significantly better, I agree, but it's not the responsibility of the Ramzor app to recommend it to people, especially with the risks and technical difficulties involved. I mean, people can't even follow simple instructions like keeping a mask on their face, so installing a custom ROM on an old android device? 😆

Regarding security: Custom ROMs are not necessarily more secure. Most custom ROMs that are not developed by a reputable organization such as LineageOS, so they might pose even a bigger security risk than the original, old ROM.
But that's beside the point.

[emanuelb]

it's less concern for ramzor app as there is a good alternative by printing the needed data on paper, or having a screenshot of the document, etc.
for hamagen app and other contact tracing projects (like the one based on GAEN which require android >= 6) it's much more concern as it's works better if more people use it.
People will complain that the app won't work on their device, we should tell them that there is a solution for older devices by upgrading the OS, not just to waste money on newer phones.
The responsibility of the Ramzor app (and governments apps as well) is to open-source the source-code of the app, see related issue #4 which will also enable us to see why its require android >= 7 and maybe improve the situation.

regarding unofficial ROMS, yes a lot more need to be done to verify it's come from trusted place (source-code available, the publisher is known in the android community, etc..) and also that it's working (some unofficial ROMs are partially broken and some functionality of the device won't work), either way it's a trade-off between using newer android version from "unknown" provider or using old android version... for many devices there a supported official releases by LineageOS which is recommended! and no such risk exists and they are much better & trustworthy then the original OS.