My GrapheneOS was cracked by Belgian police

Maketrades

Guys please are you serious thinking this might be true?? A suspect of a murder won't be invited for a chat at a police station they will be arrested right away its not a neighbouring fight with some screaming!!

r134a

Maketrades According to him he was arrested and held in custody for 7 months, but then was let go because there wasn't enough evidence at that time.

Doesn't mean the investigation stopped, and perhaps now some more potentionally incriminating facts are obtained, hence the interrogation request. This might sound weird in some jurisdinctions, and actually is quite weird, but not in Belgium...

I still believe that person believes himself that what he is saying is true, but not making it true as already explained above.

In my opinin it is too dumb and low effort to be a smearing campaign, it wouldn't make any sense.

Hathaway_Noa

I analyzed his twitter posts and OP posted the following:

"I was not under pressure, and I certainly didn't provide the wrong pin.

The USB duress also failed."

This reveals a lot! Firstly: GrapheneOS doesn't have native USB duress feature! This is exclusively to the app called: "wasted" which indeed is unreliable and tend to not work when not configured good! So this makes me thing the guy in question relied on both Normal and USB duresss trough the wasted app and not through the native Duress feature of GrapheneOS itself.

indigomadelin

Hathaway_Noa or it could be this
https://discuss.grapheneos.org/d/26200-zerotrace-phone-another-shady-con-operation
Their docs
https://zerotrace.org/kb/emergency-factory-reset/
https://zerotrace.org/kb/features/

Tandara

Hathaway_Noa That's what I noticed too. As soon as I saw it I was like 'this dude clearly doesn't know what he is talking about"

b8r2

Hathaway_Noa The daita pin & password on the phone for it to activate and format itself but the functionality didnt work as intended wich resulted in a decryption of the files on the phone

Hathaway_Noa

Also something which bothers me, this guy has a telegram channel where he openly showcases his illegal activities (spamming phishing panels where he's looting people's bank accounts).

b8r2

r134a What do I get out of smearing a campaign. They clearly go past a bunch of information i provided and only hear what they want to hear

phone-company

I know a little about German, Dutch and Belgian justice. If I am a defendant in a murder case, with proof, I go to jail. If I am accused in a murder case and post about the content of the case if it is not yet closed, my lawyer would kill me. "Cracking" a phone can happen in many ways. One of them is the recording of the PIN entry. At the police, in the parking garage, in the city, even in front of the court during the break

I don't think anything about this story is true

gta3

phone-company recording the pin entry then entering it isn't "cracking" at all lol...

And this is my original point.

OP is trying to defame G.O.S

gta3

This thread is a proven smear campaign, can't the mods fully.delete this?

grayway2

b8r2 deleted post ?

b8r2

grayway2 https://x.com/b8r200/status/1997107927841144989?t=zHnr6m6-6Igf9DNeMx1IPA&s=19

NetRunner88

Amazing story I have read during the time I have spend where it belongs too
...
Toilets

Can an admin flush it away ?

Thx

Regards 💩

mmobder

The downside of the thread deletion is a opportunity to claim "GoS are afraid of the truth and wipes all accusations, so it's a proof of vulnerability!"

hemingway

mmobder The downside of the thread deletion is a opportunity to claim "GoS are afraid of the truth and wipes all accusations, so it's a proof of vulnerability!"

Thread deletion would raise an eyebrow as people would ask why it was necessary if GOS is confident in its security.

Locking the post with an explanation as to why the post is without merit would work if done correctly. But if it isn't a "nail in the coffin" level of explanation addressing absolutely every question a reader might want to pose, a locked thread could backfire. Much easier to leave it as is and let the post live or die on its own merit.

phone-company

I often see reports from the court or public prosecutor's office. As a rule, they state how the device was extracted, otherwise it is not legally admissible. The lawyer should have access to these reports. It still depends on which device and which software version.

b8r2

phone-company Lawyer is not allowed to send those files as the case is still open

b8r2

r134a The daita pin & password on the phone for it to activate and format itself but the functionality didnt work as intended wich resulted in a decryption of the files on the phone

phone-company

b8r2
The lawyer may inform the defendant of this. At least, that is the case in Germany.

Byteang3l

b8r2 this is either severe user error, nonsense, or both. New account, username pronounced as baiter2, go away dude. Cellebrite and common police tools couldn't crack open a beer, let alone a properly configured GrapheneOS setup. Not even laser fault injection and baseband exploits are likely to work, and definitely don't just happen in a period of days. None of this adds up.

b8r2

Byteang3l b8r2 stands for something else, but if you want to believe it means that you do you

Byteang3l

b8r2 if this really isn't nonsense then you should know we need more than an extreme and anecdotal story that you can't back up, so please share proof, if not now then when it's available to share, we'll wait but nobody's going to believe a claim like this without evidence, that's just now how it works. Obviously if GrapheneOS has a vulnerability, we'd love to know about it, but we need to know exactly what happened. Assuming you're being honest, we need to know what was used and exactly what happened for it to be patched, without an actual breakdown there's nothing the devs can do, they can't patch a ghost. We get nonsense claims like this all the time, we can't just take them at face value. You say a friend helped you with the install, if this is all true then you should consider the possibility that you friend is either a bad actor or made a major mistake that crippled the integrity of GrapheneOS.

Hathaway_Noa

b8r2 bro, you used the wasted app
I bet you bought the phone from some reseller and you didn't install everything yourself.

Novalissoide

b8r2 may I ask how you can be so sure about the duress code being typed correctly?

« Previous Page Next Page »