Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS and forensic extraction of data (2024)

discuss.grapheneos.org

Post reply on HN
Print view View original

31–40 of 208 posts

Re: GrapheneOS and forensic extraction of data (2024)

#31

Post by megaloblasto »

keerthiko wrote: post #27
megaloblasto wrote: post #26

I've always found it strange that GrapheneOS only runs on Google hardware. Can anyone explain this choice?

most of the explanation from the horse's mouth will be found here: https://grapheneos.org/faq#device-support

Thanks

> These devices meet the stringent privacy and security standards and have substantial upstream and downstream hardening specific to the devices

It still seems strange. A big part of GrapheneOS is to provide a safeguard from Googles data hoarding, yet it works primarily on Google phones.

Re: GrapheneOS and forensic extraction of data (2024)

#33

Post by megaloblasto »

AlgebraFox wrote: post #29
megaloblasto wrote: post #26

I've always found it strange that GrapheneOS only runs on Google hardware. Can anyone explain this choice?

They've clearly explained here. I'm not sure how many people would keep asking the same question without even doing a simple web search. https://grapheneos.org/faq#future-devices

Someone clearly replied with the same link. I'm not sure how many people would keep replying the same thing without even doing a simple thread search.

Re: GrapheneOS and forensic extraction of data (2024)

#34

Post by reactordev »

As long as the USB port of your phone is used, you can not stop it. This is the backdoor the governments want without having to be tethered. Vote for privacy. Vote against the police state. Vote for freedom.

Libertarian rant aside. Governments fund these kinds of operations in secret so they can "effectively do their jobs". There's a ton of subcontractors working on AWS platforms that do analysis of this UFED "dump". (just a zip file of your phones directories). Emails, Phone logs, Carrier settings, Browser History, Text Messages, Cookies, Apps, App Logs, App Data, if it's on your phone, it's in the zip.

Re: GrapheneOS and forensic extraction of data (2024)

#35

Post by danans »

jbstack wrote: post #24
marcofloriano wrote: post #5

Earlier quoted context omitted.

No. When the government fails to delivery what people need (not necessarily wants), you have a bad government. When gangs and bandits (or drugs, or diseases, or whatever) takes on the street, it's not about people's view, it's just bad stuff that the government need to address or there's no point on having a government.

Aside from the fact that there's a subjective definition problem here (how do we decide what people "need"?), I think this an unrealistic view. By this definition, every government that has ever existed or ever will exist is a "bad" government because no government can ever tackle every single problem 100% of the time. Many problems are extremely difficult to solve (e.g. global warming), and others simply cannot be s…

> Sure, you can tax more up to a point, but eventually that tap runs dry and you're forced to reallocate existing resources.

Since the 1980s, we have been consistently taxing less. If the tap is dry, it isn't because of over-taxation - it's because there's a reservoir of wealth hoarded by the relatively few.

A even cursory glance at the trajectory of wealth distribution will make that clear.

Re: GrapheneOS and forensic extraction of data (2024)

#36

Post by nixgeek »

This feels like countering insinuations on the Internet with insinuations on the Internet.

Cellebrite doesn't publicly publish the latest support matrix so we have no real idea what progress if any they've made against recent iPhones and iOS versions, nor any real detail on how something like Lockdown Mode influences outcomes for their software.

Nor does this show anything about Pixel 9 or Pixel 10 and the newest variants of Android OS (which for Pixel 10 makes sense given (2024), but for Pixel 9 does it?).

What we do know as both companies disclose this is that Apple implements particularly with Advanced Data Protection enabled significantly more E2EE than Google, and both companies invest significantly through i.e. Apple's SEAR into the security of their hardware, software and platforms.

That GrapheneOS exists is great but I don't think this post helps much.

Re: GrapheneOS and forensic extraction of data (2024)

#37

Post by dizhn »

marcofloriano wrote: post #5
p0w3n3d wrote: post #4

There is no such thing like "bad government" and "good government". I mean - it really depends on people's views, therefore we must not blissfully put our data into govt hands because "they will protect us from terrorists and child rapists". What they will do, actually, is that for sure they will abuse innocent citizens at some point of time. They will. Even if they don't, they will. Or maybe they are doing it right…

No. When the government fails to delivery what people need (not necessarily wants), you have a bad government. When gangs and bandits (or drugs, or diseases, or whatever) takes on the street, it's not about people's view, it's just bad stuff that the government need to address or there's no point on having a government.

"people" being their own citizens. Many governments do not limit their activities to their own people and they have almost opposite rules for their own people vs others. Not that the picture is so clear for their own people either.

Re: GrapheneOS and forensic extraction of data (2024)

#38

Post by subscribed »

azalemeth wrote: post #10

I really love Graphene OS but I _wish_ there was a version in which you could get a root shell and extract private data of apps you install when verified as the user. The developers are on record as saying that root blows a hole in their security model (it does!) but if there was _some_ way of doing it safely, so I can modify applications I as the user wish to, it would be my ideal OS. I know I could download and sel…

You can't have a cake and eat it. A root access is a big hole, there's no way mainline will support it.

As for the possible way, you answered yourself already (custom keys and images) :)

Re: GrapheneOS and forensic extraction of data (2024)

#39

Post by WithinReason »

reactordev wrote: post #34

As long as the USB port of your phone is used, you can not stop it. This is the backdoor the governments want without having to be tethered. Vote for privacy. Vote against the police state. Vote for freedom. Libertarian rant aside. Governments fund these kinds of operations in secret so they can "effectively do their jobs". There's a ton of subcontractors working on AWS platforms that do analysis of this UFED "dump".…

> As long as the USB port of your phone is used, you can not stop it.

According to TFA GrapheneOS can disable the USB port too

Re: GrapheneOS and forensic extraction of data (2024)

#40

Post by fdsfdsfdsaasd »

megaloblasto wrote: post #31
keerthiko wrote: post #27

Earlier quoted context omitted.

most of the explanation from the horse's mouth will be found here: https://grapheneos.org/faq#device-support

Thanks > These devices meet the stringent privacy and security standards and have substantial upstream and downstream hardening specific to the devices It still seems strange. A big part of GrapheneOS is to provide a safeguard from Googles data hoarding, yet it works primarily on Google phones.

Yes, a situation that Google is steadily fixing.
Post reply on HN