The foundation behind the ultra-secure Android-based OS is speaking out after an activist was indicted for using a ‘duress password’ to prevent federal agents from searching his phone.
You must log in or register to comment.
- 3 hours
So puzzled why it even needs defending in a country that is constantly screaming about free speech and rights, it is your data and no one has the right to it but you
2 hoursThe US thinks it’s a lot of things it isn’t, and really has never been. A democracy for example.
- 2 hours
Yes unfortunately with each passing year another piece of the facade that holds this noodle house together falls and reveals it’s wobbly spineless innards
- 2 hours
All societies are flimsy
Held up one generation at a time by the educational and cultural matrix in which the new generation form their reality
- 2 hours
Mmm I was just talking about this, when people are so wrapped up in their own lives and don’t care about each other or look out for each other, what’s the point any more, society is gone. It’s like people don’t see it? I know it’s not that bad all over but it’s not a good trend and it doesn’t seem to be fading
- 1 hour
You do realize that as recently as the 1800’s the average household had at least one member infected with tapeworm at any given time?
Science and technology have brought such riches
Fuck MAGA, religion, and Trump-Orban
- 41 minutes
We can have advanced medicine without all this bullshit surveillance machinery technology, it is possible, people just have to set aside their greed but they are not willing to
- 1 hour
Its spelled ‘freeze peach’ and its delicious. Common misconception.
i mean they should it’s a good feature and the person accused of using it didn’t do a single thing wrong.
- 2 hours
Those fascist fucks didn’t have a right to confiscate his phone, nor any probable cause.
He was well within his rights to do with his property as he saw fit.
The whole thing is just for show, I don’t believe they expect to win this, it’s a message to anyone who wants to try on the future “we will try to destroy your life if you resist even slightly”
They are claiming he destroyed evidence.
Evidence of what? What crime did he commit that you are searching the phone for evidence? If you don’t believe a crime occurred, not only do you not have a reason to search the phone, but it doesn’t matter if he took out a hammer and smashed it to little bits, it’s his own property and he’s free to do with it what he likes. He wanted to wipe it, and he got it wiped. What you wanted in that moment didn’t matter in the slightest since you have no probable cause to search, no crime committed, no reason to baselessly charge someone for destroying something that doesn’t exist.
It sounds exactly as ridiculous as someone being charge only with resisting arrest. If the person had provably done a crime worth arresting, that charge would be there as well.
This is what happens when you try to maintain your rights in a fascist country: you risk five years in the slammer.
I wonder why GrapheneOS makes a big flashy rebooty show when using the duress password instead of quietly unlocking to an empty phone though…
- 2 hours
Not sure there’s a realistic way they don’t notice. It takes time to wipe things and then the phone is empty. I feel like they’ll figure it out.
- TipRing@lemmy.worldEnglish39 minutes
If the phone is encrypted already you really just need to destroy the key. Of course then it needs to be reimaged to be used again which isn’t very user friendly.
- 22 minutes
From the gOS website description of the feature, thats exactly what happens. It also says that reimaging isnt needed, only the initial setup
- 2 hours
Less than a second to make a new partition, unmount the old one, and have a background process start wiping
- usrtrv@sh.itjust.worksEnglish2 hours
Android supports multiple user profiles. They could have a duress code login to a more sanitary profile while data get wiped in the background. This has been discussed on the forums I believe.
- 2 hours
The wiping in the background is very fast, and would in turn take out the profile. The only thing a decoy profile would achieve in that case would be a slight splash of color before the phone shuts down.
- Lytia @lemmy.todayEnglish2 hours
This is a very common complaint, and the main reason is that it’s way more complicated than it sounds. The duress feature is designed to immediately erase any chance to recover the unencrypted data from the phone by destroying part of the data used to derive the decryption keys (the other part being your pin/password, which can’t be destroyed for obvious reasons). Any attempt to boot into a fake OS would be obvious to anyone familiar with the OS, thus making it effectively security theater. Not to mention the waste of space maintaining a fake OS, which would require fully featured apps and settings, all of which would have to be designed to pass verified boot, which means you can’t actually destroy the original OS the way they do.
There’s currently no known way to extract data from a locked GrapheneOS device, especially once it’s in BFU, unless you’ve heavily reduced the default security measures, so the duress pin/password is likely unnecessary unless the danger of someone accessing the data is greater than the punishment for destruction of the data.
Also, the “big flashy rebooty show” is less of a feature and more of an unintended happenstance caused by the device immediately losing critical data and being forced to restart. The articles make it sound flashier than it is. It looks more like the device is powering on but the screen keeps disconnecting for a second, before going black.
- 2 hours
It probably wipes the encryption key and reboots to clear anything lingering in memory.
