The foundation behind the ultra-secure Android-based OS is speaking out after an activist was indicted for using a 'duress password' to prevent federal agents from searching his phone.

top 96 comments

sorted by: hot top controversial new old
[–] 183 points 3 months ago (28 children)

So puzzled why it even needs defending in a country that is constantly screaming about free speech and rights, it is your data and no one has the right to it but you

  • source
  • hideshow 28 child comments
  • [–] [S] 119 points 3 months ago* (9 children)

    The US thinks it's a lot of things it isn't, and really has never been. A democracy for example.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 39 points 3 months ago (8 children)

    Yes unfortunately with each passing year another piece of the facade that holds this noodle house together falls and reveals it's wobbly spineless innards

  • source
  • parent
  • hideshow 8 child comments
  • [–] 27 points 3 months ago (7 children)

    All societies are flimsy

    Held up one generation at a time by the educational and cultural matrix in which the new generation form their reality

  • source
  • parent
  • hideshow 7 child comments
  • [–] 15 points 3 months ago (3 children)

    Mmm I was just talking about this, when people are so wrapped up in their own lives and don't care about each other or look out for each other, what's the point any more, society is gone. It's like people don't see it? I know it's not that bad all over but it's not a good trend and it doesn't seem to be fading

  • source
  • parent
  • hideshow 3 child comments
  • [–] 14 points 3 months ago (2 children)

    You do realize that as recently as the 1800's the average household had at least one member infected with tapeworm at any given time?

    Science and technology have brought such riches

    Fuck MAGA, religion, and Trump-Orban

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 3 months ago* (last edited 3 months ago)

    We can have advanced medicine without all this bullshit surveillance machinery technology, it is possible, people just have to set aside their greed but they are not willing to

    I have no idea how my lament of the lack of socialism inspired your technology rant

  • source
  • parent
  • [–] 17 points 3 months ago (6 children)

    Came here to say this. It's like taking a note out of your own pocket and ripping it up. What's actually the criminal offence?

    The police just want to go on a fishing expedition on your data. Just try kicking in the doors of their house to do the same thing.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 3 months ago (4 children)

    It's definitely an unlawful search though right? I mean what crime are they looking for they can't just say they have some suspicion in order to dig through someone's personal life, that's unacceptable

  • source
  • parent
  • hideshow 4 child comments
  • [–] 14 points 3 months ago (1 child)

    Unfortunately in the US, it is legal for border searches.

    Thank our corrupt supreme Court

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago* (last edited 3 months ago) (4 children)

    Because there is a specific exemption for border officials in the 4th Amendment. Until he was allowed to proceed and enter the county, CBP had the full legal authority to search everything on his person and in his possession.

    Edit: y'all some have to like it for it to be true.

    https://www.law.cornell.edu/constitution-conan/amendment-4/border-searches

    It's a well-known exemption.

    https://www.brownulr.org/blogposts/the-border-search-exception-to-the-fourth-amendment

    Well-studied

    https://yalelawjournal.org/essay/customs-immigration-and-rights

    Legal arguments against the exemption including phone data are tenuous at best.

    https://harvardlawreview.org/print/vol-132/the-border-search-muddle/

    Y'all her your heads outta your collective butts and let's change the shit law.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 3 months ago (1 child)

    Sure, but I see it as "is the data on your phone a possession?"

    Hypothetically, I could have my phone geofenced so that when I was within a certain distage of a border, it would wipe part or all of my data, and then automatically restore my data when I get a certain distance from the border. Is it illegal to wipe my data? Definitely not. Can I be compelled to download data to my phone? Definitely not. Can I be prosecuted for things on my phone that I was compelled to download to my phone? Also definitely not.

    So border patrol can search the phone without a warrant, but can they compell you to give up your cloud account passwords and 2FAs? What about your Bank account credentials? What if you genuinely can't remember them in that instance?

    Can they even prove that the phone was wiped in response to CBP trying to access it with a duress password? Is it illegal now to bring a wiped phone over the border?

    So many questions!

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago

    Did you even read the article in the last link? This is well-worn territory.

    Questions? Have you read anything about this case? The guy told the officer what happened. Told him! Hadn't even been Mirandized FFS! And volunteers that the officer entered the code to wipe the phone.

    It's SO boneheaded.

  • source
  • parent
  • [–] -5 points 3 months ago (3 children)

    Because it was an active search and he destroyed the "evidence". Well be interesting how this plays out I can see both sides.

  • source
  • parent
  • hideshow 3 child comments
  • [–] [S] 73 points 3 months ago* (25 children)

    This is what happens when you try to maintain your rights in a fascist country: you risk five years in the slammer.

    I wonder why GrapheneOS makes a big flashy rebooty show when using the duress password instead of quietly unlocking to an empty phone though...

  • source
  • hideshow 25 child comments
  • [–] 24 points 3 months ago* (16 children)

    Not sure there's a realistic way they don't notice. It takes time to wipe things and then the phone is empty. I feel like they'll figure it out.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 31 points 3 months ago (6 children)

    Less than a second to make a new partition, unmount the old one, and have a background process start wiping

  • source
  • parent
  • hideshow 6 child comments
  • [–] 21 points 3 months ago* (4 children)

    I just realized there are ways you could do plausible deniability.

    What if we keep a decoy partition ready to go? Pre-populate it with some AI-generated slop Facebook account, photos, etc. Keep A small random sample of music files. etc. Something that looks as plausible and bland as possible.

    This is a feature that could get better & better over time. Don't just wipe my old data; make my adversary unaware that there was anything worth wiping.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 3 months ago (1 child)

    I could absolutely see this being a thing, veracrypt has an option to create a hidden volume, and the two different passwords open up to two different encrypted volumes. Also if you start writing information to the non-hidden volume, it will start overwriting the hidden volume and corrupting files without any guardrails which is nice

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago (1 child)

    What if you were able to pick apps/accounts that mirrors to the decoy partition? Then you have real data, but all the private stuff stays locked away.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 3 months ago

    You can already make hidden spaces in graphene!

    Although I think this guy should've just had an alt user active during the search and turned off usb data transfer.

    He shouldn't have been searched, but he should've realized that he probably would be and prepared his device better.

  • source
  • parent
  • [–] 18 points 3 months ago (6 children)

    Android supports multiple user profiles. They could have a duress code login to a more sanitary profile while data get wiped in the background. This has been discussed on the forums I believe.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 3 months ago (4 children)

    The wiping in the background is very fast, and would in turn take out the profile. The only thing a decoy profile would achieve in that case would be a slight splash of color before the phone shuts down.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 3 months ago (3 children)

    Yes, how it currently works. But you could do a targeted wipe of the profile and leave the rest of the phone untouched with a secondary profile. Here's one such discussion from a year ago warning of basically exactly this happening: https://discuss.grapheneos.org/d/21122-setting-up-a-secondary-passcode-that-opens-a-dummy-profile

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 3 months ago (2 children)

    That would reduce the security of the duress pin significantly, and would require rewritting how the feature works in the first place.

    The duress pin shreds the decryption keys to the entire OS, which is much much faster than erasing the data itself, and arguably more secure. If you're worried about getting caught wiping the device, just don't wipe it. There is no known way to get into a phone running an up to date GrapheneOS install (or anything post Q3 2022) unless you have significantly reduced the security of the phone.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 3 months ago (1 child)

    Android supports per profile encryption. You can just erase the encryption keys for the other profile.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago

    That's not the point of the duress pin.

    Deleting the owner profile in the first place would make the device unusable for the same reasons you can't end the owner session and go to another profile. If your data is in a secondary profile, so you can delete it without compromising the integrity of the OS, you can make your own profile duress feature by using an app with device admin to wipe the device (which will only wipe the profile) when you trigger it. There are plenty of duress keyboards with this feature.

  • source
  • parent
  • [–] 5 points 3 months ago (1 child)

    If the phone is encrypted already you really just need to destroy the key. Of course then it needs to be reimaged to be used again which isn't very user friendly.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 11 points 3 months ago (4 children)

    This is a very common complaint, and the main reason is that it's way more complicated than it sounds. The duress feature is designed to immediately erase any chance to recover the unencrypted data from the phone by destroying part of the data used to derive the decryption keys (the other part being your pin/password, which can't be destroyed for obvious reasons). Any attempt to boot into a fake OS would be obvious to anyone familiar with the OS, thus making it effectively security theater. Not to mention the waste of space maintaining a fake OS, which would require fully featured apps and settings, all of which would have to be designed to pass verified boot, which means you can't actually destroy the original OS the way they do.

    There's currently no known way to extract data from a locked GrapheneOS device, especially once it's in BFU, unless you've heavily reduced the default security measures, so the duress pin/password is likely unnecessary unless the danger of someone accessing the data is greater than the punishment for destruction of the data.

    Also, the "big flashy rebooty show" is less of a feature and more of an unintended happenstance caused by the device immediately losing critical data and being forced to restart. The articles make it sound flashier than it is. It looks more like the device is powering on but the screen keeps disconnecting for a second, before going black.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 3 months ago (1 child)

    This is a very common complaint, and the main reason is that it’s way more complicated than it sounds. The duress feature is designed to immediately erase any chance to recover the unencrypted data from the phone by destroying part of the data used to derive the decryption keys

    Sure, but IIRC that does not help if the attacker can retain the device or clone it, yes? Once they have a copy of the raw data they can just throw a datacenter at it, for any future amount of time.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago

    Let's assume they successfully extract all the remaining data after you enter the duress pin. Which, while not impossible, extracting the data on most GrapheneOS devices would require physically desoldering the SSD from the phone and dumping the data.

    With the data extracted, assuming they attempt brute force, they're not brute forcing your password, they're brute forcing the entire decryption key, which is a mix of your password and a key generated when you first set up the OS (the latter of which was destroyed when the duress pin was entered). At that point, the phone owner, their entire lineage, and realistically the entirety of the universe itself will be long dead unless some breakthrough in cryptanalysis weakens AES256 such that it can be brute forced before all of humanity dies. That is to say, after the duress pin is entered, no one on Earth, even the device owner, can decrypt the data on the device.

  • source
  • parent
  • [–] 1 point 3 months ago

    my understamding is the phone is bricked when you do this. the key used to read the os itself is lost so you have to install a new one. the harddrive might as well be random noise.

  • source
  • parent
  • [–] 72 points 3 months ago (22 children)

    Hello people, you realize THAT this is the best free advertising that our dear graphene organization can get.

  • source
  • hideshow 22 child comments
  • [–] 8 points 3 months ago* (21 children)

    yup, already tried to find phones with GrapheneOS installed.

    • I don't want a from Google, so no pixel
    • Motorola made plans
    • only a compatibility list :(
  • source
  • parent
  • hideshow 21 child comments
  • [–] 10 points 3 months ago* (last edited 3 months ago) (14 children)

    If you reject the only supported hardware platform your priorities clearly lie elsewhere.

  • source
  • parent
  • hideshow 14 child comments
  • [–] 2 points 3 months ago (13 children)
    • I want to avoid Google!
    • Graphene: here you go
    • Nice, now what phone?
    • Obviously a Google phone!

    Come on, there gotta be many people who want to avoid buying a fucking pixel, even if second hand.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 15 points 3 months ago (2 children)

    Afaik Pixels come with the least bloat to work around amd also have some security features the GOS people like. Buying used or refurbished Pixel is currently the best you can do, so Google doesn't get any more money.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 17 points 3 months ago (2 children)

    And if you don't know why Pixel is the only phone supported that is on you. They are the only phone that allows you to relock the boot loader with a custom ROM. And since grapheme OS is all about security why would you want to run a phone with a unlocked boot loader. That is a point of weakness.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 3 months ago*

    I get it, there are reasons, but the point stands that I(and apparently others) preferably would have nothing to do with a Google product, how is that an unreasonable opinon?

    I'm currently stuck on a phone that I can't even root (afaik), but I am also not eager to buy a new one while this one works perfectly (and isn't ginormous like most newer phones). I might be more willing to swich to a new non-G phone but how it is now I try to sandbox as much shit as i can (or know of) or use alternatives where possible.

    It also feels like an incredibly complicated topic on what you could and should do. And I consider myself at least somewhat tech literate. It feels frustrating and some of the elitism around it doesnt help.

  • source
  • parent
  • [–] 0 points 3 months ago (5 children)

    If these people's priorities are to wait for for years until an expensive phone from Motorola is supported I think they need their heads examined, but that's just me.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 2 points 3 months ago (4 children)

    Some people simply can't afford to buy an extra phone, not even a used one. And some people don't even have a Pixel option in their market.

    But if you think money and phones simply grow out of trees in all of the places of the world that the US has fucked, maybe it's you who needs your head examined.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 3 months ago (2 children)

    Unfortunately Graphene has a reason for this, Pixels are (for now) the only phones with the HW security requirements list Graphene has, they're just the most secure (HW wise) phones on the market.

    They also share your sentiment, but realistically they have to work with what exists, not what is fantasy. They are taking steps with Moto to get off of that dependency however and that phone should be just as secure (where their current ones lack something on the list.)

    If you just want to get away from google, try LineageOS, if you need it to be secure then you're just as stuck as Graphene is, I'm afraid.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 3 months ago (1 child)

    This sums up perfectly what I think about it, thanks.

    Why all the elitism hurrdurr, the topic is frustrating enough to keep up with

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 months ago

    They used to have a saying about that: if wishes were horses, every beggar would ride. Some haven't gotten the memo, and prefer to bitterly complain to bystanders instead.

  • source
  • parent
  • [–] 1 point 3 months ago

    If you don't have the money for a used Pixel nor can DIY a secure libreboot used Thinkpad you need to go lowtech.

    If you can't or won't you're simply screwed. Try finding a lamp with a helpful genie, because the universe sure as hell won't accomodate your wishes.

  • source
  • parent
  • [–] 46 points 3 months ago (9 children)

    Why do you have to defend against what is advertized as a feature and is working as advertized? The fascists can stuff it right up their arse.

  • source
  • hideshow 9 child comments
  • [+] -9 points 3 months ago (8 children)

    Because if using the feature as designed will land you in jail, it might not be a very useful feature.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 22 points 3 months ago (6 children)

    It's legal to wipe your phone though kiddo

    The jail part is the fascism

  • source
  • parent
  • hideshow 6 child comments
  • [+] -10 points 3 months ago (5 children)

    Well, if the feature was supposed to protect you from fascism but it didn't, how is working as advertised?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 3 months ago (3 children)

    If a phone could protect you from fascism, shouldn't we be conquering outer space now with how many people have phones?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 3 months ago (2 children)

    protect you from fascism

    conquering outer space

    Hmmmmmmmmmmmmmmmmmmmmm

  • source
  • parent
  • hideshow 2 child comments
  • [–] 45 points 3 months ago (1 child)

    Those fascist fucks didn't have a right to confiscate his phone, nor any probable cause.

    He was well within his rights to do with his property as he saw fit.

  • source
  • hideshow 1 child comment
  • [–] 30 points 3 months ago

    The whole thing is just for show, I don't believe they expect to win this, it's a message to anyone who wants to try on the future "we will try to destroy your life if you resist even slightly"

    They are claiming he destroyed evidence.

    Evidence of what? What crime did he commit that you are searching the phone for evidence? If you don't believe a crime occurred, not only do you not have a reason to search the phone, but it doesn't matter if he took out a hammer and smashed it to little bits, it's his own property and he's free to do with it what he likes. He wanted to wipe it, and he got it wiped. What you wanted in that moment didn't matter in the slightest since you have no probable cause to search, no crime committed, no reason to baselessly charge someone for destroying something that doesn't exist.

    It sounds exactly as ridiculous as someone being charge only with resisting arrest. If the person had provably done a crime worth arresting, that charge would be there as well.

  • source
  • parent
  • [–] 37 points 3 months ago (1 child)

    Why is the phone owner being accused? It was the border guard that put in the code and wiped the device. He should be the one prosecuted, if anyone.

  • source
  • hideshow 1 child comment
  • [–] 20 points 3 months ago

    IKR - if there were genuine concerns that this guy might have something nefarious on his phone, surely they should confiscate it and pass it on to their tech guys to try to backdoor or whatever. Instead, this shit finger just types in whatever he's told and oops, he deleted any potential evidence.

  • source
  • parent
  • [–] 33 points 3 months ago (3 children)

    i mean they should it's a good feature and the person accused of using it didn't do a single thing wrong.

  • source
  • hideshow 3 child comments
  • [–] -2 points 3 months ago (2 children)

    O guess we well find out. I can see both sides. Since they where doing an investigation the user destroyed evidence. It well depend in the courts.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments
    view more: next ›
    7 comments in c/hackernews@lemmy.bestiver.se view that post