What do I really gain by segregating apps in profiles?

littlerack

schklom I doubt

If that's all you rely upon, then ...

schklom

littlerack If that's all you rely upon, then ...

Well, a deep inspection and suspicion of crime isn't the same threat as a quick check.

The only truly safe option is to wipe your phone, mail it (or carry it in your suitcase and keep a blank one on you), and restore it after, but that's a bit expensive and time-consuming.

Also, for a quick check i simply wipe the daily profile and keep the others. I don't care if border control sees that I have e.g. some headset and earbud apps on another profile and my partner's phone number on Owner profile.

It's all about threat models.

littlerack

schklom Also, for a quick check i simply wipe the daily profile and keep the others

Ok, I'll elaborate. If all you rely upon is "I doubt" and "quick check", then don't you see a contradicion?
Private space is lockable and hide-able from app list, so for "quick check" it's even better than multi-user setup, assuming such "no-threats" model.

But you still claim the contrary.

Novalissoide

littlerack Private space is lockable and hide-able from app list, so for "quick check" it's even better than multi-user setup, assuming such "no-threats" model.

The quickest way to check both whether there is a Private Space on the phone, as well as a list of every app installed in the space is going;
Settings > Notifications > Notification read, reply and control > tap 'Launcher'

Tap 'See all apps'

A list is shown with every app present in both Owner and Private Space, even if the PS is hidden by the 'Hide private space'-setting, locked or has not been opened since reboot.

So, handing an unlocked device over to an adversary runs the risk of the Private Space being immediately found.

The description under the 'Hide private space'-setting says:
"To stop other people knowing that you have a private space on your device, you can hide it from your apps list", yes, from one instance of apps list, not from all apps lists unfortunately.

littlerack

Novalissoide So, handing an unlocked device over to an adversary runs the risk of the Private Space being immediately found.

You skip the part where @schklom described "no-threats" model, where all it's based on is "I hope ... quick check", so your action doesn't fit "quick check" of a normie BC person.
What I say is that under such a "model" PS is even more benefital that extra profile. If you have real TM, then they're not that different, and you can wipe both relatively easily if you need to.

Novalissoide

littlerack normie BC person

Please tell me who this is, what's BC? Before Christ? Yes, Private Space would be highly ninja.😊

I use PS myself, it has its utility indeed. With some easy to miss 'tells'.

schklom

littlerack described "no-threats" model

I'd love to see where I mentioned "no-threats", especially since you quoted it. Please link it. Surely you wouldn't put words in my mouth?

littlerack

Novalissoide what's BC

https://discuss.grapheneos.org/d/29801-what-do-i-really-gain-by-segregating-apps-in-profiles/14 @schklom talked about assumed border control in the scenario

Novalissoide

littlerack got it, thanks. I wouldn't dare relying on anyone being unable to reveal the PS, or other profiles. But I do see your point. 🫤

Novalissoide

littlerack by the way, what would be your fastest way to delete PS in a really stressful moment? 'User widget'?
Edit
The fastest I could do with the PS 'hidden' is making a shortcut to settings activity 'SecurityDashboard' with ActivityManager but there might be faster ways.

littlerack

Novalissoide that's why it's no-threats model)

littlerack

Novalissoide The fastest I could do with the PS 'hidden' is making a shortcut to settings activity 'SecurityDashboard' with ActivityManager but there might be faster ways.

Haven't specifically looked for it, don't see any widgets etc for lock screen, but thanks for the idea)

littlerack

schklom I'd love to see where I mentioned "no-threats",

Here:

schklom You can only have one profile available on your screen at any given time. If you have 5 profiles, I doubt a border agent will ask you 5 times to unlock a profile and wait 5 minutes for them to plug it in their machine. They want to be quick.

"I !hope they don't care" is a "no-threats" model, be it border control or any other entity.

But it's not a topic, the context is that PS is even better for such a model comparing to separate profile as I've explained above.

schklom

littlerack "I !hope they don't care" is a "no-threats" model, be it border control or any other entity.

Being a regular non-suspicious person != no-threat. My point is more nuanced, but since you like twisting my words I can't stop you.

In a reality where the only valid threat models are "being chased by government agencies" and "no one wants anything from me", I guess you'd be correct. But that's a pretty wild take on reality.

PS is even better for such a model comparing to separate profile as I've explained above

It's an alternative, not objectively better as it has its downsides. If you keep Owner pretty blank, you can just use the second profile as daily, and delete it without having to factory reset. To do the same with Private Space, you'd either miss out on notifications or never close the Private Space, so it is very inconvenient to use and unlikely for anyone to be comfortable doing.

RandByte

littlerack Can it be resolved by revoking SMS and Call log Permissions from respective system apps in owner profile? Don't know if they can handle it properly though. Maybe worth a try unless you've already merged into owner)

I really don't know and pure speculation on my part, I doubt it would work properly. And yes, by the time I wrote the post, I already merged back into owner.

« Previous Page