Can I sleep peacefully after this?

user0

It is impossible to sleep calm if your fingerprint unlock is enabled. To unlock your phone structures only need to touch sensor with your finger

julia

DeletedUser203 Thank you friend, but this 30 minutes doesn't bother you, for example, if an important call suddenly hangs up, I'm going to adopt your practices, but I'm going to increase it to about 2 hours. Does this harm the system, make it slow, crash or something like that?

DeletedUser237

julia it's 30 minutes of inactivity not every 30 'clock' minutes

DeletedUser203

julia
Sorry I may have miss led you. Its 30 minutes of inactivity, if I don't unlock my phone for 30 minutes it will reboot etc

K8y

DeletedUser237 oh OK I was thinking the same thing as Julia. Yes that would be difficult!

How does one set up no USB/c/other port access and the reboot every night at 4am?

DeletedUser237

K8y Settings -> Security & Privacy -> Exploit Protection

Thou you can't choose an hour when the phone would be rebooted, you can pick an amount of time that needs to pass after last unlock for the device to auto reboot to BFU

trashaccount

julia if you have 90+ entropy password youre safe. Microwave is better than hammering it though but i suggest duress password for a better method of destroying data

secrec

trashaccount Microwave is better than hammering it though

If you used a microwave, it would be quite effective at destroying itself and not your data. The flash memory in the phone is shielded.

A hammer would be FAR more effective, as long as you actually crush the flash memory chip and not just break the screen and/or battery like most idiots would manage.

trashaccount

Strong password is mathematically not crackable if the algorithm is good, but the titan m2 could be cracked one day. So use a strong password

K8y

DeletedUser237 and there's no harm in having it reboot every day? No battery reduction...

other8026

K8y julia No. They can't. Use a 6+ digit PIN or a passcode, combine that with an auto reboot timer, and the device will reset and put encrypted data at rest.

Use profiles and end the profiles' sessions after use if that's more convenient.

As far as I know, no company can pull data off a locked phone running an up to date version of GrapheneOS.

Edit: helpful info here: https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

K8y

So what's the reason then for the "disable/turn off" USB C port if supposedly hackers cannot just plug a cable into phone and extract its data?

GrapheneOS

K8y They can't do that even without our USB-C port control feature but rather they need to exploit vulnerabilities on the device and USB is a huge attack surface for exploiting the device. The whole point of our feature is eliminating that attack surface. The default of "Charging-only while locked" provides most of the protection. Turning off charging including USB-PD is for reducing attack surface even more by having it fully disabled while the OS is booted.

trashaccount

secrec While im not sure about the microwave destroying itself, im thankful for you pointing this out, as i didn't know:

The flash memory in the phone is shielded.

secrec

trashaccount im not sure about the microwave destroying itself

https://microwaveshub.com/does-putting-metal-in-a-microwave-damage-it/