You have a word list with 7776 short simple nouns? Please share a link to it in that case. Because all word lists with 4000+ words I ever seen have adjectives and verbs too, and complicated words, and I found that to make the passphrases hard to visualize and remember.
I had already provided the EFF link, but here is the TXT file :
https://www.eff.org/files/2016/07/18/eff_large_wordlist.txt
You can also add words from other languages, numbers, uppercase letters, spaces, and characters :)
One minor regression I noticed is that the haptic feedback for scanning your fingerprint is gone when the Second factor PIN is enabled.
I might be in the minority, but I actually prefer the haptic feedback to be disabled.
gos-users I had already provided the EFF link, but here is the TXT file
Unfortunately there are adjectives and verbs in there, but thank you for sharing anyway. It is hard for me to visualize "concur" and "freely", but easy for me to visualize "fox" and "student". I keep to my own word list for now. Worst that can happen is if I forget my passphrase and permanently lose access to all my data.
@ryrona You have a word list with 7776 short simple nouns? Please share a link to it in that case. Because all word lists with 4000+ words I ever seen have adjectives and verbs too, and complicated words, and I found that to make the passphrases hard to visualize and remember.
I have been using https://github.com/passhelp/passhelp to generate passphrases & would be interested in your thoughts -- the wordlist uses 12dicts package's 3esl list and contains approximately 11.5k simple words, according to the documentation.
that_guy I have been using https://github.com/passhelp/passhelp to generate passphrases & would be interested in your thoughts -- the wordlist uses 12dicts package's 3esl list and contains approximately 11.5k simple words, according to the documentation.
From src/generators/words.ts:
...,bird,birdseed,birth,birthday,...
This list is not prefix-free and thus not safe for password generation. In the sense that it is not possible to analyze the level of security the list provides. (Unless you yourself add a separator between each word, like a dash or space. But I usually don't have that, so rely on the list being prefix-free)
It also has a lot of adjective and verbs inflected in various ways, so from my perspective it would be hard to memorize passphrases generated using it, because adjectives and verbs cannot easily be visualized, certainly not their tense.
GrapheneOS Thanks for this version, I have already set it from Alpha Channel, it works fine.
Since the batteries touched, I would like to express several wishes that the rest of the users will probably like it
Hello
First post here, but been reading for a long time
I updated my pixel 9 to this build today. When restarting the phone and after entering the pin code for the sim card
I was told to enter a password. I can't remember to have made a password, but not sure.
I thought I would just reset the phone and start from scratch. But I can't reflash it since bootloader is locked and recovery mode just shows a dead Android and nothing else.
Would appreciate any help you can give
GrapheneOS
Awesome! I can confirm that the second factor PIN works like a charm on my Pixel 6a, Pixel 7 and Pixel tablet on 2024123000.
You have my gratitude!
Also; best wishes for 2025 to the GrapheneOS dev team and the forum members, have a good new year everyone!
Eagle_Owl you can switch it of easily if you don't want Vibration??!!
phone-company you can switch it of easily if you don't want Vibration??!!
I actually wasn't aware that one could finetune the touch vibration level generally. Thanks!
Thank you for the GOS team for the amazing job what they keep doing! Happy NYE everyone
Ammako Depends, are the 4 words in any dictionary in the first place?
They definitely are if you were able to select them randomly in a secure way to begin with. Whether the list is published or not is another thing, but keeping it secret actually add very little extra entropy per word, so no real reason to keep the list secret either.
Remember, the brain is the worst random number generator ever made. So you need a word list.
ryrona It starts with scrypt in the OS but it finishes with a device-dependent key derivation algorithm in the TEE. We can't modify the final phase of key derivation at the end since it's done in the Trusty-based TEE. We could increase the scrypt parameters but we want to determine precisely what happens across each device generation. It would be best if we filed an issue report requesting specific improvements to the TEE key derivation after putting research into it and got them to improve things there. It would be far better if it spent 100ms there using a good hardware accelerated algorithm with a hardware-bound key instead of 100ms in the OS with scrypt, but we can raise what the OS does in the meantime. However, anything we do will need to be a supported encryption format until the end-of-life of each of the devices since users may be upgrading from a very old version to the latest one over 6 years from now for devices with 7 years of support. That's a huge long term support commitment. That's why we haven't been fiddling with this. If we're going to change it, maybe we should replace scrypt instead of tuning it to take longer and use more memory.
Where is the charge limit toggle? I do not see it in Battery Settings nor by searching "limit" in settings
jumpdeer It is the 4th position under Battery settings
phone-company
Not completely.
I'm not a beginner. Of course, I have already deactivated vibration and haptic feedback.
But it doesn't help when switching on, it still vibrates.
