Safety of USB Flashdrives

jacquiturquoise

I recently bought a new USB flashdrive for phone backups and I'm just posting to sanity check that Grapheme won't try to execute any of the preinstalled software on the USB, as windows tends to do on occasion.

any other security implications to consider would also be helpful.

thanks.

fid02

jacquiturquoise I recently bought a new USB flashdrive for phone backups and I'm just posting to sanity check that Grapheme won't try to execute any of the preinstalled software on the USB, as windows tends to do on occasion.

No, GrapheneOS doesn't do that. It's silly behaviour to do that.

You can also format the stick to get rid of those silly files. I think GrapheneOS can format it to exFAT if I recall correctly.

Watermelon

secrec Even if it did, it would be sandboxed and have to ask for explicit user approval before being granted any permission.

jacquiturquoise any other security implications to consider would also be helpful.

Not yet implemented:
https://github.com/GrapheneOS/os-issue-tracker/issues/32

geko

jacquiturquoise
I favour the use of Apricorn 3NX USB drives.
Pincode access, pincode self destruct data, and I also LUKS encrypt the partition. You have to miss the LUKS encryption if using the 3NX or 3NXC to connect to a phone.

secrec

Not only will it not try to run any of the crap on the usb disk, it couldn't. That junk is strictly for windoze and x86 CPU. Not Android and ARM CPU.

Hesao

How do you encrypt the backups? Or do you use something like Kingston IronKey?

Did you consider the fact that usb flash drives are often not reliable enough for long term storage?

Murcielago

Hesao

How do you encrypt the backups?

You could use Cryptomator which runs on Android, Linux, Windows, macOS and iOS.

You create an encrypted vault on your USB-drive, backup your files and can access the vault from your computer too.

Hesao

Cryptomator for Android isn’t free though, is it?

Murcielago

Hesao ,

Free in the sense of open source - yes. Free in the sense of free of charge - depends:

Cryptomator is free to use on Windows, macOS, Linux, and iOS, but not Android (yet). However, the free version on iOS is read-only. If you purchase a license key for one platform, it is not valid for another. A bundle license does not exist.

source: https://cryptomator.org/downloads/

You can find the exact pricing models in their FAQ.

Hesao

Thanks. It’s possible to buy anonymously through Proxystore, which is good enough for me.
Also, it’s possible to download on Accrescent App Store.

locked

Cryptomator for android requires license. I use it because it can be downloaded from accrescent.