254

Duh i take my phone out to the protest (sh.itjust.works)

submitted 1 month ago by einfach_orangensaft@sh.itjust.works to c/cybersecuritymemes@lemmy.world

32 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] hodgepodgin@lemmy.zip 67 points 1 month ago

Just saw the mentaloutlaw video. Graphene OS has a “duress pin” that wipes the phone when given a certain pin.

[-] thr0w4w4y2@sh.itjust.works 17 points 1 month ago

fun fact, in the UK the offence is “failing to decrypt the device when required to do so” making these measures quite dangerous.

That said, unless you are being charged under a national security crime, the maximum sentence for “failing to decrypt the device when required to do so” is up to two years, so the game’s the game.

[-] 5in1k@lemmy.zip 8 points 1 month ago

Wow the UK is a turd too.

[-] NikkiDimes@lemmy.world 1 points 1 month ago

Yeah, go to the UK and say "I support Palestine Action" and see what happens. They're having a rough time of it right now.

[-] Capricorn_Geriatric@lemmy.world 1 points 1 month ago

I wonder how they'd look at it if previous cracking attempts wiped the device. Is that "failure" to unlock punishable or not? The phone was wiped already - the user can't unlock it even if he wanted to.

Similarily, is it possible to make it impossible to prove the device was wiped due to the PIN and not beforehand?

[-] einfach_orangensaft@sh.itjust.works 6 points 1 month ago

I still dont know if i would trust Google hardware. Call me paranoid but what are the chances of mentaloutlaw beeing a psyop "get this very specific hardware and software setup so the police cant hack you" sounds a lot like encrochat.

[-] pulsewidth@lemmy.world 4 points 1 month ago

For awareness you can achieve the same on CalyxOS by setting it to automatically wipe the phone after either 5 or 10 failed unlock attempts. Though this does mean a child (or childish friend) could do it accidentally. I'd prefer a duress PIN, but then I'd probably forget it if I ever really needed it.

There's also a less nuclear 'panic trigger', that allows you to hide apps or choose to uninstall any apps you like. No PIN needed, simply hold the power button and select 'Panic Trigger', there's then a fullscreen 5 second countdown before your select private/sensitive data is obliterated.. unless you hit cancel. The user can set up in advance what the panic trigger does - eg which apps to uninstall (deleting their data and auth keys), all cloud provider apps with sensitive data such as email apps or cloud storage provider apps are recommended.