• General
  • Can I sleep peacefully after this?

If I disable the USB connections and enable the reboot daily, if the cell phone is seized by the state, am I safe or is it better to put it in the microwave and destroy it or would a hammer also work?

    If these two options are activated I'm fine, automatic reboot and blocking of USB data transfers

    I have my phone auto reboot every 30 minutes and my USB is default, charge only when locked, when my phone reboots to BFU, and my phone is not in my possession any longer, nobody, no agency, LE, criminal etc is getting into my device and looking at my data... nobody, that's not to say in the future it may happen, but that's a forlorn hope of every 3 letter agency on the planet.

      It is impossible to sleep calm if your fingerprint unlock is enabled. To unlock your phone structures only need to touch sensor with your finger

      • K8y likes this.

      area51 Thank you friend, but this 30 minutes doesn't bother you, for example, if an important call suddenly hangs up, I'm going to adopt your practices, but I'm going to increase it to about 2 hours. Does this harm the system, make it slow, crash or something like that?

        0xsigsev oh OK I was thinking the same thing as Julia. Yes that would be difficult!

        How does one set up no USB/c/other port access and the reboot every night at 4am?

          julia
          Sorry I may have miss led you. Its 30 minutes of inactivity, if I don't unlock my phone for 30 minutes it will reboot etc

          julia if you have 90+ entropy password youre safe. Microwave is better than hammering it though but i suggest duress password for a better method of destroying data

            Strong password is mathematically not crackable if the algorithm is good, but the titan m2 could be cracked one day. So use a strong password

            K8y Settings -> Security & Privacy -> Exploit Protection

            Thou you can't choose an hour when the phone would be rebooted, you can pick an amount of time that needs to pass after last unlock for the device to auto reboot to BFU

              0xsigsev and there's no harm in having it reboot every day? No battery reduction...

              K8y julia No. They can't. Use a 6+ digit PIN or a passcode, combine that with an auto reboot timer, and the device will reset and put encrypted data at rest.

              Use profiles and end the profiles' sessions after use if that's more convenient.

              As far as I know, no company can pull data off a locked phone running an up to date version of GrapheneOS.

              Edit: helpful info here: https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

              So what's the reason then for the "disable/turn off" USB C port if supposedly hackers cannot just plug a cable into phone and extract its data?

                K8y They can't do that even without our USB-C port control feature but rather they need to exploit vulnerabilities on the device and USB is a huge attack surface for exploiting the device. The whole point of our feature is eliminating that attack surface. The default of "Charging-only while locked" provides most of the protection. Turning off charging including USB-PD is for reducing attack surface even more by having it fully disabled while the OS is booted.

                trashaccount Microwave is better than hammering it though

                If you used a microwave, it would be quite effective at destroying itself and not your data. The flash memory in the phone is shielded.

                A hammer would be FAR more effective, as long as you actually crush the flash memory chip and not just break the screen and/or battery like most idiots would manage.

                  secrec While im not sure about the microwave destroying itself, im thankful for you pointing this out, as i didn't know:

                  The flash memory in the phone is shielded.