PPlamenu
HomeTrendingLive feedsPeopleGroupsRulesStaff
Sign in
PPlamenu
HomeTrendingLive feedsPeopleGroupsRulesStaff
Sign in

posted in Technology

sanitation@sanitation@lemmy.today
⁨20⁩d

GrapheneOS duress PIN could land a man in prison

www.androidauthority.com/grapheneos-duress-pin-us-prosecution-3691271/
Android AuthorityGrapheneOS duress PIN could land a man in prisonA US man is being prosecuted after allegedly using a GrapheneOS duress PIN to wipe his Pixel during a border search.
2910620
Open original page
BoostsQuotesFavs
kaotic@kaotic@lemmy.world
edited⁨20⁩d

Replying to @⁨sanitation@lemmy.today⁩

GrapheneOS should update the duress passcode to load a dummy profile like Only Key’s Plausible Deniability Feature.

docs.onlykey.ioPlausible Deniability Setup Guide - OnlyKey DocsFollow this guide to use the plausible deniability feature of OnlyKey
1000
Open original page
BoostsQuotesFavs
GMac@GMac@feddit.org
⁨20⁩d

Replying to @⁨kaotic@lemmy.world⁩

Loading any profile allows the operating system access to root privileges, and opens potential for user privilege escalation.

2000
Open original page
BoostsQuotesFavs
iopq@iopq@lemmy.world
⁨20⁩d

Replying to @⁨GMac@feddit.org⁩

Then it should delete the data while loading a dummy profile

1000
Open original page
BoostsQuotesFavs
GMac@GMac@feddit.org
⁨20⁩d

Replying to @⁨iopq@lemmy.world⁩

That would be an interesting proposition… under duress load profile x and delete all other profiles, apps, settings and keys.

2000
Open original page
BoostsQuotesFavs
grrgyle@grrgyle@slrpnk.net
⁨19⁩d

Replying to @⁨GMac@feddit.org⁩

Or maybe a lighter version of the duress pin that just loads the fake profile (or alternate profile) but leaves the other(s) intact.

If you’re just handing your phone over for a border pig to swipe through before waving you through that might be adequate.

2000
Open original page
BoostsQuotesFavs
iopq@iopq@lemmy.world
⁨19⁩d

Replying to @⁨grrgyle@slrpnk.net⁩

It depends on whether you believe forensics can recover the data when handed over. So make it a setting

⁨Jul⁩ ⁨26⁩, ⁨2026⁩, ⁨21:07⁩en
1000
Open original page
BoostsQuotesFavs
grrgyle@grrgyle@slrpnk.net
⁨19⁩d

Replying to @⁨iopq@lemmy.world⁩

Yeah I was thinking of this as a half measure. But less secure than just wiping

0000
Open original page
BoostsQuotesFavs