The duress pin is so polished!

[deleted]

I tried the duress pin out on a different phone and wow! There was a brief flash that said “wrong password” in the usual spot before the entire screen turned black and wiped the device. No ifs ands or buts. No shenanigans whatsoever? You can absolutely depend your life on this thing.

other8026

[deleted] No shenanigans whatsoever?

No shenanigans. The developers spent a lot of time on the feature because they do things right. Once the duress PIN or password is entered, the phone wipes itself.

[deleted] You can absolutely depend your life on this thing.

Please use your best judgement when using or relying on the feature. All personal data will be wiped, for sure, but after being wiped someone in possession of the phone can still figure out that GrapheneOS is installed, and can easily figure out that duress pin/password is a GrapheneOS feature if they put their mind to it.

GrapheneOS

[deleted] It wipes the device before shutting down so it's actually already fully wiped when the screen turns black. The tiny delay before that is due to it wiping the hardware keystores, wiping encryption metadata on the SSD via special commands and fully wiping the rest of the secure element. Wiping a single one of those 3 things prevents recovering any of the data, but it does all 3 for redundancy. The process of shutting down wipes nearly all the OS memory via zero-on-free rather than depending on RAM degrading while powered off.

[deleted]

other8026 haha I did not mean to put a question mark after shenanigans. But you’re absolutely right and that was something I did notice when testing it. My line of reasoning is that any case you decide to use your duress pin has worse consequences upon them seizing your data than merely knowing your operating system and that you destroyed evidence.

This is honestly why I think having an utterly simple duress pin that anyone could guess is the best bet. That way you don’t have to purposefully destroy evidence. Birth year is something anyone would try and there’s goes all your data. Sorry for the rambling, this whole project has just captivated me for a while.

[deleted]

GrapheneOS Yes I read about the implementation because I was impressed by how fast it was. The delay if anything feels like a software bug, not out of place for a phone at all. You wouldn’t even be able to tell what happened. Great work by the team.

Famous

Yes sir the duress password is such a fantastic feature and in many situations can be an actual lifesaver. In my opinion who cares weather or not its legal in your country its best to get rid of everything no matter what if there's something bad on your phone that needs to remain hidden.

[deleted]

Famous Agreed, any situation th

Jojojo Malware scanners on mobile platforms if anything seems like snake oil. Downloading trusted apps from trusted sources and not giving excess permissions seems to be enough, and GrapheneOS excels at preventing remote exploits (or at least making them much more difficult) so that’s out of the question for ordinary people.