Live data from Hacker News

GrapheneOS and forensic extraction of data (2024)

discuss.grapheneos.org

131–140 of 208 posts

Re: GrapheneOS and forensic extraction of data (2024)

#131

Those considering a switch from iOS to GrapheneOS might be interested in this migration guide and review: https://blog.okturtles.org/2024/06/the-ultimate-ios-to-graph...

Slightly off-topic: how many people are maintaining GrapheneOS? Suppose Daniel Micay suddenly disappeared from planet earth - is there someone who has the knowledge, access and keys to continue immediately?

Re: GrapheneOS and forensic extraction of data (2024)

#132
post #4

There is no such thing like "bad government" and "good government". I mean - it really depends on people's views, therefore we must not blissfully put our data into govt hands because "they will protect us from terrorists and child rapists". What they will do, actually, is that for sure they will abuse innocent citizens at some point of time. They will. Even if they don't, they will. Or maybe they are doing it right…

No. When the government fails to delivery what people need (not necessarily wants), you have a bad government. When gangs and bandits (or drugs, or diseases, or whatever) takes on the street, it's not about people's view, it's just bad stuff that the government need to address or there's no point on having a government.

> there's no point on having a government

Can we just use this as our point of agreement?

Re: GrapheneOS and forensic extraction of data (2024)

#133

Those considering a switch from iOS to GrapheneOS might be interested in this migration guide and review: https://blog.okturtles.org/2024/06/the-ultimate-ios-to-graph...

Slightly off-topic: how many people are maintaining GrapheneOS? Suppose Daniel Micay suddenly disappeared from planet earth - is there someone who has the knowledge, access and keys to continue immediately?

https://www.reddit.com/r/PrivacyGuides/comments/13spm4d/dani...

He stepped down as lead dev 2 years ago !!

Re: GrapheneOS and forensic extraction of data (2024)

#135
post #57

This kinds of make me want to get a pixel and install GrafeneOS there. I'll admit that big companies may have some incentive to protect their users' privacy; but they are an easy legal target. If tomorrow the US or EU pass legislation that mandates a backdoor in all mobile devices, the entire world is screwed.

FWIW, the UK recently cited the Investigatory Powers Act of 2016 in an attempt to force Apple to create a backdoor, but Apple refused

> ...but as far as we know Apple refused.

Fixed that for you.

Re: GrapheneOS and forensic extraction of data (2024)

#136

>...because it is doing far more hardening than iOS against these attacks. iPhones also have security element, but the companies developing attacks, had successfully bypassed secure element throttling from Apple for years (and are doing the same with Samsung and Qualcomm Is it true that Pixels are more hardened against brute forcing the security module and that iphones (and other phones) are easily bypassesed by thes…

Yes, except for "easily".

Re: GrapheneOS and forensic extraction of data (2024)

#137
post #83
post #24

Earlier quoted context omitted.

Aside from the fact that there's a subjective definition problem here (how do we decide what people "need"?), I think this an unrealistic view. By this definition, every government that has ever existed or ever will exist is a "bad" government because no government can ever tackle every single problem 100% of the time. Many problems are extremely difficult to solve (e.g. global warming), and others simply cannot be s…

There is no man-made global warming crisis. The earth is in fact one of the coldest periods in history. Thoroughly explained here: https://youtu.be/KDwCUAueLUU What the "man-made global warming crisis" is , is an example of how a corrupt/captured state will overreach and control the people for its own gain through manipulation. Many governments are captured by the now global financial system that has almost unlimited…

Thoroughly debunked here: https://www.lse.ac.uk/granthaminstitute/news/fake-graphs-and... And here: https://science.feedback.org/review/review-climate-the-movie...

That film is full of misleading nonsense. Like, charts that have been altered to apparently suit a narrative.

Re: GrapheneOS and forensic extraction of data (2024)

#138

Earlier quoted context omitted.

Slightly off-topic: how many people are maintaining GrapheneOS? Suppose Daniel Micay suddenly disappeared from planet earth - is there someone who has the knowledge, access and keys to continue immediately?

https://www.reddit.com/r/PrivacyGuides/comments/13spm4d/dani... He stepped down as lead dev 2 years ago !!

Thanks, good to know. I was asking because the commit histories of some of the GrapheneOS components scream "mostly one man show".

https://github.com/GrapheneOS/Auditor/commits/main/

Re: GrapheneOS and forensic extraction of data (2024)

#139
post #69

Earlier quoted context omitted.

Very affordable to do. I bought a cheap refurbished Pixel 7 Pro off eBay for $250 and installed GrapheneOS on it. Threw an eSim $20/m plan on it and use it as my phone when I leave the house and go IRL. If I ever lose it or it gets taken while traveling, who cares, its secure af. I just cancel my eSim and buy another phone to install GrapheneOS on all while my main phone Pixel 10 Pro is still safe and at home.

What's your threat model for this kind of security?

1 - My main phone has a bunch of work stuffs on it and all my authenticator stuffs and etc

2 - I've been raided by the FBI before in my past (used to be blackhat in my 20s but now im whitehat :))

3 - I lose my phone sometimes. far better to lose a dinky burner phone VS my main phone.

Re: GrapheneOS and forensic extraction of data (2024)

#140
post #53

I am probably the only one but the geek in me would love to see an article where digital forensics are used against the most common operating systems in their most secure configuration - just to see how they compare with one another.

> most common operating systems in their most secure configuration

Air-gapped and turned off?

Post reply on HN