626
Duh i take my phone out to the protest (sh.itjust.works)
submitted 1 year ago by to c/cybersecuritymemes@lemmy.world
58 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 131 points 1 year ago (21 children)

Just saw the mentaloutlaw video. Graphene OS has a “duress pin” that wipes the phone when given a certain pin.

  • permalink
  • fedilink
  • source
  • hideshow 21 child comments
    •
  • [–] 69 points 1 year ago (11 children)

    fun fact, in the UK the offence is “failing to decrypt the device when required to do so” making these measures quite dangerous.

    That said, unless you are being charged under a national security crime, the maximum sentence for “failing to decrypt the device when required to do so” is up to two years, so the game’s the game.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 11 child comments
    •
  • [–] 51 points 1 year ago (4 children)

    Wow the UK is a turd too.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 17 points 1 year ago (2 children)

    Yeah, go to the UK and say "I support Palestine Action" and see what happens. They're having a rough time of it right now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 1 year ago

    BBC: “As demonstrators held up placards reading, "I oppose genocide, I support Palestine Action", some 522 of them were arrested on suspicion of breaking terrorism laws - more than double the total such arrests in 2024. Their average age was 54, said the police. Some 112 of them were over 70 years old.”

    It’s bloody ridiculous. Like me getting arrested for demanding Maggie (Thatcher) out of Parliament back in my CND days. Didn’t happen, but imagine the chilling effect on the wider populace if this existed then.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 1 year ago

    I always thought that they were a worse police state than the US. Cameras everywhere, jail time for letter openers and keychain swords let alone fucking knives. Absolutely a lack of free speech. US has the camps now do we’re definitely worse atm but the UK hates being free.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 10 points 1 year ago (4 children)

    I wonder how they'd look at it if previous cracking attempts wiped the device. Is that "failure" to unlock punishable or not? The phone was wiped already - the user can't unlock it even if he wanted to.

    Similarily, is it possible to make it impossible to prove the device was wiped due to the PIN and not beforehand?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 1 year ago (3 children)

    I had the same question. The best would be to consult a lawyer and see if there's any precedent already set.

    I could imagine police could easily film the process and a video would be enough proof for any judge. The phone shows a pin entry, a reboot, and then a welcome screen just like a factory reset has been done. Right?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 1 year ago*

    I thought of it as two seperate problems:

    The first one is legal - if the person asked to surrender credentials surrenders them, and the device turns out to be reset (assuming no foul play), does this constitute the crime of not surrendering the credentials?

    If the answer to one is "yes", the technological question begs itself: How to make a duress pin indistinguishable from the real one?

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (1 child)

    The phone shows a pin entry, a reboot, and then a welcome screen just like a factory reset has been done. Right?

    It does, but it's pretty obvious that something unusual has happened.

    The phone boots into Google's "Someone is fucking around" boot screen and waits there for a response.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 14 points 1 year ago (2 children)

    For awareness you can achieve the same on CalyxOS by setting it to automatically wipe the phone after either 5 or 10 failed unlock attempts. Though this does mean a child (or childish friend) could do it accidentally. I'd prefer a duress PIN, but then I'd probably forget it if I ever really needed it.

    There's also a less nuclear 'panic trigger', that allows you to hide apps or choose to uninstall any apps you like. No PIN needed, simply hold the power button and select 'Panic Trigger', there's then a fullscreen 5 second countdown before your select private/sensitive data is obliterated.. unless you hit cancel. The user can set up in advance what the panic trigger does - eg which apps to uninstall (deleting their data and auth keys), all cloud provider apps with sensitive data such as email apps or cloud storage provider apps are recommended.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • load more comments (1 reply)