Profiles, duress, backup, and more

DrantaRAT

Hi everyone! I have a couple of questions regarding GOS and its features. Thank you in advance!

First, I get the point of duress password, but is there a way to erase only selected user profiles instead of the whole system wipe? I think the user gets in more trouble in any scenario by erasing EVERYTHING instead of pre-selected sensitive portions.

Second, by my understanding, the profiles are made purely for restricting apps mutual data sharing (mainly separating invasive apps). Anyone can see a huge “end session” on the bottom of the Lock Screen and that obviously would raise questions. So, is there a way to remove it as well as the profile indicator on top? I found it interesting that if you go the user profile and select Lockdown, it no longer shows the button))

Third, are there any benefits of not using owner profile (security or privacy wise).

Fourth, is there any way to backup the whole system including secondary profiles with Proton? I read somewhere that all the backup options are flawed and it is easier to reinstall everything manually, but what if some banking app has logs or smth saved on device that skips the identity verification.

I also have trouble with apps connecting to internet when they are split tunneled. I believe that is due to the “block connections without vpn” but I’m not sure if it will create ip/dns leaks when connection is changing.

And last, are there any great launchers? No high threat model or anything (though random searches appear time-to-time due to regulations) so I will probably use google at least for push notifications and some other proprietary blob that provides convenience (no google logins though).

Thanks again for reading! I finally made a switch and try to make my setup flawless)

LocaLola

DrantaRAT

Re user profiles, I recently had to switch between two in a very crowded public place, and I was wondering too whether there was any less conspicuous way to switch. If you use a password, you unavoidably have to type it in if you switch, and it will potentially be very long (which is a whole different story), and the screen itself also looks different from what people are used to. There were cameras too, but the whole situation was low-risk luckily. It isn't always, though. I use fingerprint to unlock the screen, and since the sensor is on the back of my 4a 5G, I can use it without making any obvious movement. That at least is great.

I do my best not to switch at all in public spaces, but there may be cases when I'll need to...

Maybe some skin/launcher could work to change the look of GOS, but that's only part of the story.

DrantaRAT

Those are pretty much the questions that don’t let me fully quit iOS for now, unfortunately :(
It is a bit harder to use a system that is less consistent/intuitive in its functionality.

DrantaRAT

grapheine

I'm also curious about the profiles question. I still don't understand what the advantages is of separate profiles of the apps in those separate profiles are still going to talk.

wuseman

grapheine in those separate profiles are still going to talk.

Talk how? As far as the apps are concerned they are on separate cell phones.

grapheine

wuseman the ones within the same profile.

wuseman

grapheine only apps from the same developer can communicate, unless special privileges are given both ways.

grapheine

wuseman thanks! In that case, it doesn't make much sense for me to have the 5 profiles I have. One will do just fine.

de0u

wuseman only apps from the same developer can communicate, unless special privileges are given both ways.

My understanding is that apps can easily restrict IPC to apps signed by the same developer, but that in practice many apps are set up to accept standard "intents" from unknown others, and that control rests with the developer, not the user. So I think the situation isn't "special privileges" as much as "fairly standard privileges".

grapheine

de0u interesting