Uptime and charging history delete

K8y

I would like to offer up a privacy enhancement request for Graphene to delete the "uptime" data. No one needs to know how much time a phone has been on, especially if someone not the user gets a hold of this information.

Also some phones have charging history, displaying when last charged...if this is shown in Graphene, this too could help privacy if deleted. No one needs to know when/where the last charge was.

All this is to protect people's pattern of life privacy. Thank you if you will consider this.

NetRunner88

K8y

How do you exploit that, it doesn't make sense?
Your concern should be apps that can see if you are using WiFi or not for example.

xuid0

Can i ask is this in relation to an app or service GrapheneOS provides and which specifically?
I could guess but I very much might be wrong.
Thanks.

K8y

xuid0 hi, it's in phone settings actually, not an app...

xuid0

K8y

The reason I ask is I use remote attestation with https://attestation.app and I was kind of wondering what info is being shared back to that website from my device. But I wasn't sure who to ask or whatnot.

Blastoidea

I wasn’t aware that charging history included location.

K8y

Blastoidea I was thinking indirectly by establishing pattern of life. For example if target's phone "battery status" displays charging, it can be assessed she/he is not on the move, and perhaps at residence.

If battery status info is logged in a database it's even worse.

But the "uptime" is the easier one to get rid of first.

K8y

xuid0 The reason I ask is I use remote attestation with https://attestation.app and I was kind of wondering what info is being shared back to that website from my device. But I wasn't sure who to ask or whatnot.

That's a great question. Unfortunately I'm not sure, so I hope someone more knowledgeable than I can jump in and shed light on it. The attestation app seems very useful - thanks for sharing about it.

SBMe25

xuid0 Just ran across this website also. Haven't used it, but your points are for what it can do and gather over time are very valid. Especially since you never know who will purchase said site in 5 yrs, 7 yrs or 10+ yrs. It does look very, very interesting though, forgot to bookmark from before.

xuid0

K8y

Ping @GrapheneOS for attention (Apologies if I'm attention the wrong account).

Could myself and the other community members question be addressed? Just specifically how the data is stored & captured and where it goes? I'm trying to write quickly apologies if this seems direct.

K8y

NetRunner88 yes certainly this too.

xuid0

NetRunner88

I feel you want a blueprint of how to ./exploit this?
Not all things are considered exploits, some are concept some maybe potential issues say with the hosting if it was breached and it was storing data not correctly?