@ryrona You have a word list with 7776 short simple nouns? Please share a link to it in that case. Because all word lists with 4000+ words I ever seen have adjectives and verbs too, and complicated words, and I found that to make the passphrases hard to visualize and remember.

I have been using https://github.com/passhelp/passhelp to generate passphrases & would be interested in your thoughts -- the wordlist uses 12dicts package's 3esl list and contains approximately 11.5k simple words, according to the documentation.

    that_guy I have been using https://github.com/passhelp/passhelp to generate passphrases & would be interested in your thoughts -- the wordlist uses 12dicts package's 3esl list and contains approximately 11.5k simple words, according to the documentation.

    From src/generators/words.ts:

    ...,bird,birdseed,birth,birthday,...

    This list is not prefix-free and thus not safe for password generation. In the sense that it is not possible to analyze the level of security the list provides. (Unless you yourself add a separator between each word, like a dash or space. But I usually don't have that, so rely on the list being prefix-free)

    It also has a lot of adjective and verbs inflected in various ways, so from my perspective it would be hard to memorize passphrases generated using it, because adjectives and verbs cannot easily be visualized, certainly not their tense.

      GrapheneOS Thanks for this version, I have already set it from Alpha Channel, it works fine.
      Since the batteries touched, I would like to express several wishes that the rest of the users will probably like it

      1. The opportunity to choose the level of maximum charge yourself, it seems that this is already in the plans of GOS (thanks)
      2. The ability in the same section the switch is set to turn off (or vice versa - turn on and activated by default) the fast charging function. This will help to avoid overheating of the battery and some simply does not make sense to rush to charge the device

        Hello
        First post here, but been reading for a long time
        I updated my pixel 9 to this build today. When restarting the phone and after entering the pin code for the sim card
        I was told to enter a password. I can't remember to have made a password, but not sure.

        I thought I would just reset the phone and start from scratch. But I can't reflash it since bootloader is locked and recovery mode just shows a dead Android and nothing else.

        Would appreciate any help you can give

          Riasroc recovery mode just shows a dead Android and nothing else.

          From there, push and hold the power button and the volume up button at the same time, or power then volume up (if I remember correctly.. maybe volume down?) and a menu should appear where you can perform a factory reset.

            GrapheneOS
            Awesome! I can confirm that the second factor PIN works like a charm on my Pixel 6a, Pixel 7 and Pixel tablet on 2024123000.
            You have my gratitude!

            Also; best wishes for 2025 to the GrapheneOS dev team and the forum members, have a good new year everyone!

              ryrona Most people could easily afford to break a 4 word passphrase ($1 000), if they believe there is anything of value at all on your phone

              Depends, are the 4 words in any dictionary in the first place?

              Not that you're still better off using more words though ;p

                  • fid02

                    • Post #39

                    phone-company you can switch it of easily if you don't want Vibration??!!

                    I actually wasn't aware that one could finetune the touch vibration level generally. Thanks!

                      Ammako Depends, are the 4 words in any dictionary in the first place?

                      They definitely are if you were able to select them randomly in a secure way to begin with. Whether the list is published or not is another thing, but keeping it secret actually add very little extra entropy per word, so no real reason to keep the list secret either.

                      Remember, the brain is the worst random number generator ever made. So you need a word list.

                        ryrona It starts with scrypt in the OS but it finishes with a device-dependent key derivation algorithm in the TEE. We can't modify the final phase of key derivation at the end since it's done in the Trusty-based TEE. We could increase the scrypt parameters but we want to determine precisely what happens across each device generation. It would be best if we filed an issue report requesting specific improvements to the TEE key derivation after putting research into it and got them to improve things there. It would be far better if it spent 100ms there using a good hardware accelerated algorithm with a hardware-bound key instead of 100ms in the OS with scrypt, but we can raise what the OS does in the meantime. However, anything we do will need to be a supported encryption format until the end-of-life of each of the devices since users may be upgrading from a very old version to the latest one over 6 years from now for devices with 7 years of support. That's a huge long term support commitment. That's why we haven't been fiddling with this. If we're going to change it, maybe we should replace scrypt instead of tuning it to take longer and use more memory.

                            Where is the charge limit toggle? I do not see it in Battery Settings nor by searching "limit" in settings

                              phone-company
                              Not completely.
                              I'm not a beginner. Of course, I have already deactivated vibration and haptic feedback.
                              But it doesn't help when switching on, it still vibrates.

                                  My device has rebooted by itself after the install but I have configured to do not autoreboot after install

                                  Do I understand correctly that bypass charging is enabled automatically when charging limit is enabled?
                                  It would make sense, though I expected a separate toggle or at least a mention of this on settings page.