| bigbiff | a00051a | 2020-05-01 10:45:14 -0400 | [diff] [blame] | 1 | --- |
| 2 | layout: post |
| 3 | title: "Unofficial TWRP Downloads" |
| 4 | date: 2020-05-01 10:30:00 |
| 5 | categories: unofficial |
| 6 | --- |
| 7 | |
| 8 | It has recently come to our attention that there are sites that publish "unofficial TWRP" images. |
| 9 | These are versions of TWRP that are being distributed out of our authority based on forks and |
| 10 | internal unpublished sources from people not associated with our site. Unfortunately we don't |
| 11 | have a lot of time to police these sites and images. Some are forks of our project that are not |
| 12 | forwarding back patches to our gerrit site, or they just cherry-pick open commits and release |
| 13 | them before the patchsets can be vetted and merged to the baseline. Some sites just scrape images |
| 14 | from our download sites and post them as their own. |
| 15 | |
| 16 | We try to pride ourselves on the security and established chain of repudiation by using GPG |
| 17 | signatures and publishing SHA2 hashes to show the images haven't been modified from the original |
| 18 | build on our jenkins server. Our jenkins build logs are able to be seen by anyone wanting to verify |
| 19 | how their image was built. Our sites are using Let's Encrypt for end-to-end TLS encryption. We are |
| 20 | not serving any pages or images outside of this TLS end-to-end encryption. |
| 21 | |
| 22 | We are receiving much community support but unfortunately the aforementioned unofficial versions of |
| 23 | TWRP can never meet any type of veracity from TeamWin. Please consider your security before |
| 24 | installing any unofficial TWRP to your device. |