IIRC one of the mobile operating systems has a duress pin that instead of deleting all your shit, it just opens up basically a different user profile. So you can throw a few random apps and photos etc until it looks convincing, and just have that on standby. Put in your normal pin and you get the profile you actually use.
Cop demands to see your phone, and it’s just a “sure - it’s 4022” and they get to scroll through some uninteresting bs.
Go home and put the real pin in and it’s back to normal - nothing’s deleted.
It’s kinda like carrying a throw-wallet with a few bucks and expired credit cards… get mugged, hand em that, and be on your way with your real wallet in another pocket.
It’s gonna be sus when your browsing history and other stats on that profile doesn’t collate with how a normal person uses their phone.
They might confiscate the phone.
My point is that you shouldn’t assume your phone is secure.
They might confiscate the phone.
If you have something worth hiding on your phone that isn’t hidden when they look at it, they are DEFINITELY going to confiscate your phone
You must enforce the principle of least prilevelege.
Not by just using SELinux in your PC, but IRL.
“it’s new”
That’s a good point. I wonder if there’s a way to combine the throw-wallet duress pin with the delete-everything duress pin.
Like, enter the duress pin, get the fake profile AND start a timer: if the real pin isn’t entered within 1 hr (or whatever timeframe the user set it to), then it factory resets.
Best of both worlds.
Definitely would be pretty easy to figure out a fake phone profile. Unless you are constantly updating it, any photo/emails/texts call logs will have timestamps from like months/years ago. Might fool a few, but even less if it becomes a widespread thing and authorities become aware of how it works.
Any google phone, you can use you “wrong” thumb two or three times (fast), then you are required to enter pin. Easy, quick way to lock you phone more securely if you encounter police.
You can also just hold the power button to bring up the power menu which includes a Lockdown button. This disables biometrics and will require a PIN to unlock.
This should work on any Android device, but definitely works on my Pixel. The shortcut might be different for different devices, though.
Better to hit the reboot though, then it’s completely locked.
Also locks the sim card if you have a lock on that
It also happens all the time to me because the fingerprint sensor on my 6A is garbage heh
And Samsung devices have a “Lockdown Mode” that can be triggered by holding down the power button which does the exact same thing (also disabling lockscreen notifications if they were on until you enter your pin)
The feature I want is a specific fingerprint that triggers a lockdown, perhaps requiring a long password rather than a short PIN to exit.
Graphene does that if you use the wrong finger 5x in a row, I do wish you could lower the number though.
Why not make one fingerprint the erase button?
Like left index finger causes a factory reset.
Same on Lineage, so that’s presumably an Android default. It’s slow.
I feel like this is one of those situations where you might be able to use something like an NFC tag to force your phone into a locked state where it would require the pin to unlock.
I think an SOS style pin input is great in theory but I don’t know that most people will use it because it’s not necessarily going to help in places where you might be required or forced to give up biometric unlocking credentials (some countries make it so there is not a legal way to refuse to give up your fingerprint or face scan etc). This isn’t any easier than setting a lockdown key combination etc. Currently on my phone the lockdown is set to enable if I press the power button and volume up key at the same time and I think it’s similarly easy to do on iphones.
I feel like this is one of those situations where it also might be a workable idea to use something like an NFC tag to force your phone into a locked state where it would require the pin to unlock. If of course lockdown mode can’t be enabled on your device using a key combo and you have NFC available.
It would be nice if there was a way to use 2FA to unlock a phone. Using a password in combination with biometric or NFC token. That would also allow for the use of an emergency pin as well.
GrapheneOS has 2FA implemented with fingerprints. When enabling it, you choose a 2nd factor pin you have to enter every time you want to unlock using your finger
(Allowing you a reasonable compromise between convenience, as in not having to put in a long password every time, and having more protection against physical abuse or coersion, OFC not the serious kind, but it helps with e.g. the coppers)
That’s nice. I wish a security token was also an option, but it doesn’t appear they have any intention of implementing that. I don’t like the idea of using biometrics for anything specifically because of law enforcement and how there I can be compelled to provide biometric data. A security dongle is almost the same, but with the “advantage” that a little bit of security through obscurity can be implemented since they not only have to know a token is required, but also which one.
Technically that’s also a disadvantage in that a security token can be lost vs biometric, but that’s the risk profile I would personally prefer.
I have a similar take on biometrics, but love their convenience (plus I don’t have to type out my passphrase in public, which IMO is a huge plus) and with GrapheneOS I get to have my cake and eat it too :>
Only one problem.
Graphene OS only runs on 16 models of phone, Google Pixels. I’ve bought a dozen or so Google hardware devices over the years and I refuse to go through that abysmal experience ever again.
Graphene OS might be amazing for all I know, but only supporting Google hardware makes it a joke in the real world outside of the Google fanboy bubble.
As for deleting all the content of your phone, what makes you think that border security or law enforcement won’t access your data directly from your backup on Google’s cloud?
As far as I can tell, this post is an advertisement for Graphene OS. In real world terms, in my opinion, it adds nothing of substance to the privacy or security landscape.
Because hardcore graphene OS users would not have any data on Google’s clouds because they know the danger of having cloud data and would not accept it.
Hell, I don’t even have a Google account and haven’t for several years.
Graphene OS might be amazing for all I know, but only supporting Google hardware makes it a joke in the real world outside of the Google fanboy bubble.
You should probably read about the subject a bit more before sharing your opinions on this.
People install GrapheneOS because they are NOT fans of Google. The Pixel is simply the only phone with the hardware to support a secure, non-Google OS.
As for deleting all the content of your phone, what makes you think that border security or law enforcement won’t access your data directly from your backup on Google’s cloud?
I don’t know anyone who takes the effort to install an aggressively de-Googled OS and then uses Google cloud services.
Do you see the irony associated with buying hardware from the same company who’s software you actively want to remove?
I can see how there would appear to be irony if someone doesn’t distinguish software from hardware.
You don’t need Google software to use a Pixel and Google’s software is the privacy/security concern. Their hardware isn’t bad and it has unique features that make it the best consumer device for security.
I won’t buy an ATV from Yamaha, but I would buy a Yamaha Saxophone. Because they’re two completely distinct things, made by completely different groups of people despite being under the same company name.
Technically all Android is Google software but yeah
It’s all Linux software, technically
Technically only the kernel is Linux, but the userspace is all Google!
Okay technically technically it’s a modified kernel, and I’m sure there are plenty of parts of userspace that Google just imported without modification.
Software is complicated.
The separation between software and hardware is not nearly as distinct as your comment suggests. Beyond (sometimes replaceable) firmware there’s microcode and embedded systems with their own software inside modules like the modem that allows your phone to actually talk to the network.
Those things are technically true but largely irrelevant.
The concern about Google’s software is that the software that they produce which is targeted at consumers binds the user with a restrictive TOS which allows them access to all of your personal data. Their Play Services gives Google very low level access to the operating system and their cloud services are being constantly enshittified.
So I avoid that software and those services.
That doesn’t mean that every piece of software that Google produces is implicated. The teams writing low level firmware for optical fingerprint readers are not the ones developing consumer spyware.
I’m concerned about security, I’m not an anti-Google zealot.
That said, I personally would love to see the day that fairphone or another company is able to support graphene.
Oh definitely.
I don’t WANT to support Google, but unfortunately their hardware is superior for this purpose.
The GrapheneOS devs have a public list of hardware requirements for any manufacturer that wants to support real security, so far only the Pixel checks all the boxes
There’s a reason it only supports Pixel phones: none of the other manufacturers produce phones that are suitable for it. All the other ones either don’t let you unlock the bootloader, won’t let you relock it with your own keys, or disables other security featurea. Meaning anyone can just flash whatever code they want to the phone and completely nullify the security model.
For a bit, OnePlus did support this but they quietly removed that feature with the Android 12 bootloader update, and otherwise cut you off from the TEE anyway so the OS can’t even verify the boot chain.
The GrapheneOS team said they would happily support other devices if any met their criterias for support. None do. Pixels are the only phone where you can properly flash a custom OS on, and relock the bootloader and disable OEM unlocking like it’s the official OS with all the security features functional.
This is helpful.
Have you ever used GrapheneOS? It doesn’t support backups via Google’s service at all, provides no Google services by default, and sandboxes them heavily if you choose to install them. Aside from the hardware, it has very little to do with Google.
The main idea on a device running something like Graphene OS is that you are already in a state of using minimal, if not at all using Google Cloud services, including data backups. It’s intended in tandem with modifications like GMS, GPS (if optionally installed into a given user, work profile) running as an unprivileged, permission-based application. If someone is taking their data privacy and security seriously enough to consider using a duress PIN and flashed their phone with something along the lines of Graphene OS, would they be likely to have heavy reliance to Google’s Cloud offerings?
deleted by creator
Most other phone brands don’t unlock their bootloaders anymore, so GrapheneOS can’t support them, even if they want to.
What backup on Google cloud?
Graphene add nothing of substance to the privacy or security landscape
Hahahahaha, your whole comment is laughable, it’s the very definition of hubris (that is the combination of being arrogant and incorrect).
I,for one, haven’t used Google as a backup since 2010. Anyone with any awareness of privacy doesn’t use it.
I run Lineage, with no Google services, no Google connectivity. I actively block connections to known-untrustworthy domains and IP addresses.
Graphene is the high-water mark in privacy and security on Android.
You should probably actually understand what’s going on before prognosticating in ignorance.
I’m going to guess most people that use Graphene OS don’t use any Google product unless it’s encrypted using something like Cryptomator.
I’m happy for you to quote me, but it does require that you actually quote what I said rather than what you think I said.
Specifically I said:
As far as I can tell, this post is an advertisement for Graphene OS. In real world terms, in my opinion, it adds nothing of substance to the privacy or security landscape.
I did not state that Graphene OS didn’t add to the security landscape, though that’s how you interpreted it. Using “it adds nothing”, I was referring to the article linked in the OP. Could I have worded this better, sure. Did I say what you think I said, no.
What didn’t you like? I’ve had multiple Pixels and no major issues.
Border agents are unlikely to have access to cloud data. Police definitely do, but I just don’t have a cloud backup of my phone ¯\_(ツ)_/¯
I use Grapheneos’ seedvault backups to USB. It’s not a very smooth process, so they’re planning on replacing it. I’ve tested backups and restores, though, and they definitely work.
