Is GrapheneOS the most secure OS in the world?

dhhdjbd

phone turned on and unlocked
-> power button press / standby
-> it is locked and in AFU (after first unlock)

-> power off / restart / empty battery..
-> it is in BFU (before first unlock) (and locked)
(Until you unlock it, then AFU)

edit: grapheneOS is not "faking" a shutdown like windows does

K8y

dhhdjbd so if our gos phones are in AFU mode/standby, they are still vulnerable to Cellbrite and Pegasus?

userofgos

K8y No, GrapheneOS phones are not vulnerable in AFU.

K8y

userofgos No, GrapheneOS phones are not vulnerable in AFU

so what's the advantage of BFU over AFU?

K8y

userofgos No, GrapheneOS phones are not vulnerable in AFU

so what's the advantage of BFU over AFU?

userofgos

K8y See here for more information: https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

Glossary:

BFU: Before First Unlock exploitation of OS
BF: Brute Force password after BFU exploitation, which requires bypassing secure element brute force protection if implemented
AFU: After First Unlock exploitation of OS
FFS: Full Filesystem Extraction from an unlocked device

BF capability does not bypass hardware-bound key derivation, so a brute force is still rate limited but no longer has an extremely small number of attempts. Cellebrite Advanced Services may be able to bypass this through extracting data from hardware, but it would be difficult.

BF implies ability to bypass random 6 digit PINs. It does not imply ability to bypass a decent passphrase where hardware-bound key derivation slows them down too much. A truly strong passphrase is safe even if they bypass hardware-bound key derivation and use a huge server farm.

K8y

Xtreix apparently, the only phone to compete, or to have competed, with GrapheneOS on a Google Pixel is the Cryptophone from GSMK

is the OS very good with this alternative, and receives updates as often as GOS?

phone-company

K8y this phone is based on Android. We do not know what Version, what kernel, what CPU.... So i do not think it's tbe most secure phone in the world....

freebsd-user

phone-company No. OpenBSD is

gMan

gk7ncklxlts99w1 Murena One, which uses /e/OS, a fork of LineageOS. More privacy than security focused?

garbage - not security focused at all

Xtreix The GrapheneOS project account or a project developer are the best members to answer this question

are they? not dissing the GOS devs here, at all, but i would think that a 3rd party may be better suited to answer that question

Xtreix I can say that many mobile devices sold “for security and privacy” are overpriced scams

absolutely! the Brax3 immediately comes to mind

andrej567 I wonder what top politicians use, if it is something a regular person can buy or something proprietary

my opinion? probably ('probably' = 'likely') an OS with an Israeli backdoor

The Israelis know what is going on all the time. I got to the point where I wasn't writing anything down. If the American people understood what a grip these people have got on our government, they would rise up in arms. Our citizens certainly don't have any idea what goes on." -- Thomas H. Moorer, US Navy Admiral (ret.) and Chairman of the Joint Chiefs of Staff, in an interview with Mordecai Gur, quoted in They Dare To Speak Out, by Paul Findley, 1973, p.161

gk7ncklxlts99w1 How is NordVPN a scam?

here's why...

Navigating the VPN Hellscape

While i find it encouraging that more people are becoming concerned with their on-line privacy, i find it equally disturbing that so many are turning to highly unethical companies which have no intention of protecting the privacy of their customers and, in fact, are purposely violating and profiting from that trust.

ps: @gk7ncklxlts99w1 - thanks for asking the question! this thread is a very interesting read

pss: thanks to @GrapheneOS for jumping in on this thread

K8y

gMan gk7ncklxlts99w1 How is NordVPN a scam?

here's why...

Navigating the VPN Hellscape

Is Proton VPN better?

If not, which vpn do u recommend?

userofgos

K8y Mullvad is the most recommended

gMan

K8y Mullvad or Azire (i use the latter)

phone-company

freebsd-user again, it based on an old Android Version with older Kernel....

andrej567

what about openbsd based phone, terminal only.

joke of course

« Previous Page