Cellebrite Premium July 2024 documentation
Alllus what is is the 2022 SPL?
- Edited
Pixelpioneer88
It's GrapheneOS not updated from 2022 year.
Alllus oh awesome. So any current update is good?
I assume that Cellebrite needs a usb/data connection to get in to phones, couldn’t a non data port be installed on a device? A port that only charges and gives no data access just wondering
All attacks I thought went through the usb port if it couldn’t handle data it would be safer at hardware level
Stayjuice USB-C port is a non-data port on GrapheneOS when configured that way. It disables USB-C data at a hardware level when set to "Charging-only" mode. The default is "Charging-only when locked" which immediately blocks new USB-C connections at both a hardware and software level after locking followed by disabling USB-C data when existing connections end. It's implemented by setting the USB controller to act in a certain way. There's even support for fully disabling it while booted into the regular OS mode to block charging including USB-PD too.
GrapheneOS I wasn’t very clean sorry, I mean on the apple devices that Cellebrite can attempt to get in to. I’m weaning myself off of apple anyway. I will use the pixel as my main and I might invest in a pixel tablet to replace my iPad mini and sell that as it doesn’t get used rarely anymore.
not sure if someone posted it already but here is an article that contains the celebrite support matrix from February 2025
Stayjuice How are we supposed to install GOS on thos devices?
Stayjuice rumour has it that future devices may not have a data port at all and just wirelessly charge then they couldn’t solder one on
"Rumor" indeed. That seems unlikely given the amount of work Google has been putting in on getting desktop environments to display over USB-C. I think it will be a while before it's feasible to transmit monitor-quality display output without a physical connection. I guess in theory UWB might do it, but I'm not aware of monitors supporting UWB input.
My Pixel 6 was confiscated by the German police after a political rally. I was recently able to pick it up again. From an inquiry with my lawyer, the following emerged: The authorities tried to read the device with both UFED4PC and Cellebrite Premium Touch. In addition, software from other forensic providers was used without success. The software did not succeed in breaking the system. The device was in BFU mode and had a 30-digit PIN. USB port was deactivated. As of March 2025, I can therefore say that it is not possible for Cellebrite to break a secured GrapheneOS.
unrealnegan Very good news. I suggest to not bring your electronic devices to public rally next time to avoid seizure.
There is no democracy in our world, we have to defend ourselves against such abused situations. Google hardware and GrapheneOS code hardening is helping us to stop them.
Thanks for sharing. Is it even legal to try these things on a phone which you just ceased from a protestor?
And also for high threat model I suggest remote attestation verification just to make sure.
someone27281 The police like to connect the device to a Cellebrite device while you are giving fingerprints. I have also seen the police carry mobile Cellebrite devices. The police call a judge and he orders it. Unfortunately, this is legal for the police.