Graphene18

  • Jul 7, 2023
  • Joined Jul 3, 2023

  • Access to your phone is access to your mind. Your phone isn't just a gadget; your phone is you. You're a cyborg. Protect yourself with GrapheneOS.

  • In Best screen lock password practices for all the devices and operating systems

    BackdoorsNRats However, I do disagree with your standpoint it should be used (im assuming this is that you think based on your post). It's too easy to compromise through exploits or force. Use the built-in PIN scrambler instead. Be aware of your surroudings to not have a camera being close enough to see the numbers you type. Thanks to the scrambler, as long as it can ser your screen in high res, no way you can get the passcode by watching where you press on screen.

    Imo, its a big security risk to use biometrics and I would advice everyone to not use it.

    GrapheneOS only gives 5 attempts for unlocking with biometrics, so it's more secure than any other phone or OS.

    BackdoorsNRats With that out of the way I also want to say thanks for input and after your post I have upgraded my passcode from 12 digits to 18.

    You should use a 6 digit passcode.

    You need a password that consists of 18 random letters and numbers for it to be unbreakable, not the 18 numbers passcode.

        • In is grapheneOS 'worth it'?
        • In Best screen lock password practices for all the devices and operating systems

          GrapheneLover 128 bits of entropy is the absolute maximum overkill of what's even reasonable to use and that's what's used for designing encryption algorithms and your recommendation is 210 bits. So yeah, I have nothing more to add.

          • In Best screen lock password practices for all the devices and operating systems

            GrapheneLover It's like saying that if you truly care about your privacy and security you need to use Whonix in Qubes and nothing less, LMAO.

            Believe in whatever you want, but don't make people believe that they need this to be secure, that's just harmful.

              • In is grapheneOS 'worth it'?

                It is worth it, it's the best that you can use, nothing even comes close. If something really important doesn't work for you, then just use stock OS on a Pixel.

                The best advice that I can give you is to not go into a next level of copium and get an iPhone for privacy. Just use Pixel devices.

              • In Hardening Windows for privacy and security

                I already got my answer, this thread can be marked as solved, or, even better, locked.

                This thread became a mix of misinformation and copium.

              • In Best screen lock password practices for all the devices and operating systems

                [deleted] The best practice is a password of between 15 and 20 characters.

                You need at least 90 bits of entropy for an unbreakable password, which is 7 random diceware words or 18 random letters and numbers, which both have over 90 bits of entropy.

                [deleted] Android and iOS can't be compared to Windows or other systems, because they contain a Titan or SE chip and have their own clocks.

                I know, that's why I'm asking.

                GrapheneLover In any case where you value your security it is best to use a password of more than 32 characters with numbers, letters, and symbols with and without dictionary words in it. If you truly value your security do not use a pincode.

                That's not correct at all. I already mentioned above that unbreakable password is considered 90 bits, which is 7 random diceware words or 18 random letters and numbers.

                The part about not using a PIN is incorrect too. Pixel devices with GrapheneOS have aggressive throttling which makes 6 digits pin code unbreakable unless someone has an exploit that could bypass Weaver throttling.

                For anyone who has found such an exploit, Google would pay a stupid amount of money which means that countless people that want that cash are looking for a way to exploit this and even Google has security researchers behind this.

                Conclusion: nobody will ever use such exploit on you and almost all of us.

                BackdoorsNRats My lawyer told me you need at least a 10 digit PIN or they will be able to crack it. This was 2 years ago though. EU country.

                This is if they bypassed Weaver throttling.

                BackdoorsNRats A friend of mine used pattern-lock and they had no problems unlocking it.

                Pattern unlock is such a garbage way to secure your phone that GrapheneOS has even removed it as an option.

                BackdoorsNRats I also know fingerprint/face scan is easily breached with the right tools.

                That's true, but biometrics are necessary, not only they're much faster and convenient, but they allow you to securely unlock your phone even in a place where your password could be recorded by a security camera or where someone could see it over your shoulder.

                One cool upcoming feature to GrapheneOS is an ability to have 2FA for fingerprint unlock, which means that you can set a secure seven word diceware passphrase for your main unlocking method and then setup biometrics with a combination of short PIN as a 2FA.

                            • In Best screen lock password practices for all the devices and operating systems

                              For Pixel devices with GrapheneOS the best practice for the big majority of us is to use a random generated 6 digit pin code. 

                              Meanwhile, a seven-word diceware passphrase is used by people with extreme threat models (or by people who don't know how to properly threat model and have overkill security for no good reason)

                              But what about other devices like Windows, Linux and macOS computers?

                              • In Hardening Windows for privacy and security

                                Relaks FYI, you will need at least the Pro version of Windows 10/11 to be able to turn off telemetry and data collection through Group Policy Editor. As far as I know only Windows Enterprise allows for turning off telemetry completely. (Correct me if I'm wrong on that part).

                                [deleted] Use windows enterprise or education, then use GPO.

                                I already use Windows 11 Enterprise.

                                [deleted] https://github.com/beerisgood/Windows11_Privacy
                                https://github.com/beerisgood/Windows11_Hardening

                                Thanks, will take a look.

                                    • In Hardening Windows for privacy and security
                                    • In Yor favorite closed source apps?
                                    • In is keyboard the most secure?

                                      SoulKeeper That's just your opinion.

                                      There is no factual evidence that would show GBoard collecting data after opting out in the settings, and especially there is no factual evidence of Google doing something shady even without network permission.

                                      • In is keyboard the most secure?
                                      • In is keyboard the most secure?
                                      • In Hardening Windows for privacy and security

                                        Are there any good guides on hardening Windows for privacy and security?

                                        • In is keyboard the most secure?

                                          Shawnn The default keyboard that comes with GrapheneOS is the best option for security because it already comes with the OS and is battle tested. 

                                          Adding a different keyboard would require you to trust a developer of that keyboard and that their keyboard isn't riddled with security vulnerabilities.

                                          Unless you need a different keyboard for one reason or another, you should stick with the default one.