Unsubstantiated claims about compromised devices based on carrier or OS bugs

boredfridge

Just a heads up, I too have experienced the double call activity bug. I'm using the standard graphene phone app, volte, no vowifi. I'm in Europe, pixels are supported by my carrier.

ryrona

boredfridge Just a heads up, I too have experienced the double call activity bug. I'm using the standard graphene phone app, volte, no vowifi. I'm in Europe, pixels are supported by my carrier.

Does it always happen for you? Only when you make calls, or only when you receive calls, or both? Can you provide steps to reproduce the issue?

Kjgraph Recently my Graphene OS pixel starts having ghost touches as well

Yeah, wipe off the screen with a damp cloth and the ghost clicks should be gone again. I have that issue a lot. Fat on the screen.

Kjgraph Ok I don't really wanna argue but for starters I ran a netscan and found over 500 open ports... I have never connected to wifi on my graphene os.

You mean you did a netscan of the IP address assigned to you for cellular connectivity? That IP address is shared by thousands other devices simultaneously. So it might actually be ports that are open on other devices, not yours. It is rare to have your own IP address today, especially on cellular. It is much cheaper for the carrier to let many devices use the same public IP address using NAT technology.

Connect to a local Wifi network, and redo the netscan from a computer on the same local Wifi network directly against your phone LAN IP address. Or flash a userdebug build, and run netstat to list open ports on the phone itself, of course with all the same apps installed. Since it is usually apps you have installed that open ports, not the system.

Kjgraph

@"blob" I am facing the same issue!!! Being listened to. And the screen being remotely controlled. Calls get redirected or cut off for no reason. Happened on mg iPhone and android. Recently my Graphene OS pixel starts having ghost touches as well and get locked out of some accounts so I'm still monitoring

userofgos

Kjgraph Being listened to. And the screen being remotely controlled.

Highly unlikely, and unfounded claims.

Please provide proof in the form of a video uploaded to a file hosting service. Also provide a detailed step by step on how to reproduce the issues.

Calls get redirected or cut off for no reason.

Mostly likely a bug. Again, what does this look like in practise. Please provide a screen recording of what happens during a call.

Way too many people jump straight to claiming they have been hacked or their phone is compromised without even considering it being a bug or hardware issue. Get your facts straightened out, examine the actions that lead to these bugs, try to reproduce it, find what is causing it, when it happens, when it does not happen, etc.

userofgos

Kjgraph @"userofgos hmm are you a CS major or PHD in engineering? Trained in reverse engineering, malware analysis etc.. If not providing more info isn't gonna help very much IMO. I've done my research

Huh? I'm confused on your reasoning. Me not having a CS major or PHD in engineering is irrelevant. This is a public forum, with users of varying degrees of knowledge, skills, education. I may not be able to reverse engineer what's going on with your phone, but someone else might, so you providing more info on the issues you're facing will help them to help you. Isn't that how a public forum is supposed to function?

Also, back to your @Kjgraph post, maybe I misunderstood your comment. To clarify, the issues you described here:

Kjgraph Being listened to. And the screen being remotely controlled. Calls get redirected or cut off for no reason. Happened on mg iPhone and android.

Where you meaning that you only experienced these issues on iPhone and Google StockOS on Android? Or also/strictly on GrapheneOS?

I was under the impression that you were experiencing this in GrapheneOS. So if I'm wrong, please correct me. :)

W1zardK1ng

@blob seems like a bug, but if you are concerned move to a voip provider like jmp.chat. they also provide data only sim with no phone number attached to it.

secrec

DeletedUser495 As far as I know under normal circumstances you can't run two instances of the same app on one profile (what you see in the video of the recents screen above suggests that).

You can have multiple activities within the same instance of the same application show up in the recents menu simultaneously. Its not even a bug for this to happen, its just a change in the recents menu behavior that was introduced a while ago.

having to press power button more than once to bring up the lockscreen,

That is actually just a bug for the display switching back on. If you press the button once and it doesn't light up, try tapping around the screen for a bit and it eventually WILL light up without having to hit the power button twice more.

secrec

The unfortunate thing I've become aware of is that there is a certain portion of the population with mental health issues leading them to be driven by extreme paranoia. This paranoia often leads them to seek out more secure systems (like GrapheneOS) in order to address their imagined threat. Of course since there is no ACTUAL threat, the more secure system isn't going to help them in any way at all.

Kjgraph

@"userofgos hmm are you a CS major or PHD in engineering? Trained in reverse engineering, malware analysis etc.. If not providing more info isn't gonna help very much IMO. I've done my research.. Will continue pen testing that's all I can say.

Kjgraph

Ok I don't really wanna argue but for starters I ran a netscan and found over 500 open ports... I have never connected to wifi on my graphene os. Doubt its a isp problem.. Even if so how do they force open the ports? I figured it's a device problem but cant be sure. Any thoughts?

GrapheneOS

Kjgraph

Ok I don't really wanna argue but for starters I ran a netscan and found over 500 open ports

Not clear exactly what you're doing, but it wasn't done correctly. This is also not a useful way to detect anything. You think you're being targeted by sophisticated exploits but yet you think they're thoroughly incompetent and unnecessarily going out of the way to break a bunch of stuff and leave blatant signs of it. It doesn't make sense. Your device has almost certainly not been remotely compromised and nothing you've raised is a sign of it. You can factory reset the device to remove any weird stuff you changed or installed.

n3t_admin

Kjgraph for starters I ran a netscan and found over 500 open ports

without concrete information on how you performed the scan (and of what? The whole network? Just the GOS phone?), this information is useless.

Kjgraph

@"Kjgraph wondering if they can brute force or hack the routers (which would be the telecom side) then squeeze the exploits in. Currently I do face some issues with my phone like not being able to log into certain accounts or keypad not working from time to time.

NetRunner88

Kjgraph

There is a small bug in keyboard/keypad sometimes
It is already documented and there is an issue opened already.

You can't log on some apps because of secure spawning used by the OS, or the use of a VPN with an IP address that become blacklisted for some times or the fact some services require a mail from a big tech company

How did you find opened ports ? That's mean nothing..

There is huge amount of resources in this forum and in Gos dev communication.

You speak about pen test but you don't even read basic stuff lmao

orydeatemi

GrapheneOS

I'd like to take a second to express my appreciation and admiration for the patience it takes to deal with cases like this.

blob

https://drive.proton.me/urls/S0JTCDA1CW#d6Fd1uMdE565

This video I have linked above, includes the phone numbers so that it is possible to experience more closely what it is that I am seeing. The number is a burner phone.

I have concluded on much further investigation, that the issue lies most likely with the cellphone carriers and more specifically the call service, which runs separate and independent to the data network. e.g. I have made calls with wifi and data disabled, it is still happening.

There are no additional apps or accounts installed on the phone, in this video. It has recently been factory reset to the default operating system and it had a new sim card installed.

The new video I have posted shows what happens when the person I am calling hangs up.

It is clear from the other 10 or more videos I have, which I'm not sharing, because they contain private numbers, that the second call app is acting connected but independent of the call I make.

It is still happening on my girlfriends phone. She is simply swiping it up to close the second call to eliminate any concerns she has. She also has limited outside exposure to what ever is going on.

I have run the GrapheneOS audit, the phones appear completely untouched. The firmware is fine. I have no other issues, as long as I am not connected to a cellular network.

GrapheneOS is great. I am having a blast with it. I don't believe this compromise is related to GrapheneOS. GrapheneOS also works perfectly fine in New Zealand, despite not having a New Zealand version of the pixel phones. I would however suggest getting an Australian specific model of the pixel phones, because we share a lot of the same standards in relation to the technical stuff in the background.

« Previous Page