Live data from Hacker News

GrapheneOS and forensic extraction of data (2024)

discuss.grapheneos.org

111–120 of 208 posts

Re: GrapheneOS and forensic extraction of data (2024)

#111
post #75

Earlier quoted context omitted.

You can just follow the official build instructions with a single change: when specifying the build target, change it from -user to -userdebug: https://grapheneos.org/build#setting-up-the-os-build-environ...

Hhmm that seems like a hassle, TBH. One of the things I like the most about GOS is the web installer, and how easy it is to use. If I need a custom build, to run my own server, and sacrifice performance for it, it doesn't seem worth it. It would also be good to know what a debug build entails, how exactly it is "less secure", and so on. Since this is unlikely to be documented by the GOS team, a 3rd party guide would…

This is well documented in AOSP, what do you mean?

Re: GrapheneOS and forensic extraction of data (2024)

#112

The only thing that comes to my mind is the so-called blobs, the closed source hardware drivers that are needed to make an Android phone work and that run at high privilege level. If GrapheneOS is not tightly sandboxing them, then chances there are that a capable operator can use whatever backdoor each driver offers, mainly the wifi adapter, the baseband modem and the Bluetooth adapter. No matter what GrapheneOS deve…

> If GrapheneOS is not tightly sandboxing them

It is. HN user strcat has posted extremely detailed comments on the matter.

https://news.ycombinator.com/threads?id=strcat

Re: GrapheneOS and forensic extraction of data (2024)

#113

Earlier quoted context omitted.

What is the threat model when enabling root on a phone and why can't it be mitigated? Root is enabled on most servers and desktops and we are surviving fine.

The way apps behave and the user interface to apps and the way they are used, the level of basic visibility and control that the user has moment to moment, is totally different on a phone than on a pc.

How so?

Re: GrapheneOS and forensic extraction of data (2024)

#114

Earlier quoted context omitted.

GrapheneOS does not have Tor "directly on the operating system". You are terribly misinformed about all of this it seems.

Wrong: https://primal.net/e/nevent1qqsq9lsf88umpdunkdzpdthyffys275z...

Where does it say the app comes with Graphene???

Re: GrapheneOS and forensic extraction of data (2024)

#115
post #69
post #57

This kinds of make me want to get a pixel and install GrafeneOS there. I'll admit that big companies may have some incentive to protect their users' privacy; but they are an easy legal target. If tomorrow the US or EU pass legislation that mandates a backdoor in all mobile devices, the entire world is screwed.

Very affordable to do. I bought a cheap refurbished Pixel 7 Pro off eBay for $250 and installed GrapheneOS on it. Threw an eSim $20/m plan on it and use it as my phone when I leave the house and go IRL. If I ever lose it or it gets taken while traveling, who cares, its secure af. I just cancel my eSim and buy another phone to install GrapheneOS on all while my main phone Pixel 10 Pro is still safe and at home.

What's your threat model for this kind of security?

Re: GrapheneOS and forensic extraction of data (2024)

#117
post #106
post #83

Earlier quoted context omitted.

There is no man-made global warming crisis. The earth is in fact one of the coldest periods in history. Thoroughly explained here: https://youtu.be/KDwCUAueLUU What the "man-made global warming crisis" is , is an example of how a corrupt/captured state will overreach and control the people for its own gain through manipulation. Many governments are captured by the now global financial system that has almost unlimited…

Nonsense. The Earth used to be a boiling lump of magma at once point before it cooled, but guess what -- humans can't live on liquid rock. Warmest or coolest is irrelevant over the lifetime of the Earth. What matters is "modern humans". Global warming is indeed real. Effective change doesn't have to cost a dime. An example is forcing people to buy electric cars at some point. The government spends nothing, people jus…

To clarify I meant over the last 5 million years.

There has been no man-made climate change during the period of "modern humans" either.

It's not a conspiracy as such - it helps to think of government and corporations as an AI. A hive intelligence with constraints and goals. The constraint is to operate within legislation and keep the people on board, the reward/goal is to acquire money/power.

At this stage the financial system (which we gave a money printer!) has obtained enough power to steer legislation in its favour and keep the people on board though manipulation of the mainstream media and education.

Show me the incentives and I'll show you the outcome.

I completely agree that there's no reason why we can't replace power plants with more environmentally friendly ones as they are retired, but ask yourself why Germany then has shut down it's fully operational nuclear power plants. Even with energy shortage and the many of the plants ready to be turned back on tomorrow, the state refuses to.

Re: GrapheneOS and forensic extraction of data (2024)

#118
post #57

This kinds of make me want to get a pixel and install GrafeneOS there. I'll admit that big companies may have some incentive to protect their users' privacy; but they are an easy legal target. If tomorrow the US or EU pass legislation that mandates a backdoor in all mobile devices, the entire world is screwed.

I want to get a Pixel just for GrapheneOS as well but Google is incapable of selling those things worldwide despite being a trillion dollar corporation.

Re: GrapheneOS and forensic extraction of data (2024)

#119
post #83

Earlier quoted context omitted.

There is no man-made global warming crisis. The earth is in fact one of the coldest periods in history. Thoroughly explained here: https://youtu.be/KDwCUAueLUU What the "man-made global warming crisis" is , is an example of how a corrupt/captured state will overreach and control the people for its own gain through manipulation. Many governments are captured by the now global financial system that has almost unlimited…

I disagree strongly with you on this, but nonetheless I think you've proven the point that the original comment was making i.e. that what constitutes a "good" or a "bad" government is subject to people's views. In my view, a government that does nothing to tackle global warming is "bad". In your view, a government that spends resources on something you think is a fraud, is also "bad". We can't both be right.

We can both be right - when man-made global warming isn't actually a thing.

I agree that

> a government that does nothing to tackle global warming is "bad"

and I think you would likely also agree that

> a government that spends resources on something you think is a fraud, is also "bad"

The only difference is that it has managed to convince you that man-made global warming is real, just like it did me for a long time.

Re: GrapheneOS and forensic extraction of data (2024)

#120

Earlier quoted context omitted.

most of the explanation from the horse's mouth will be found here: https://grapheneos.org/faq#device-support

Thanks > These devices meet the stringent privacy and security standards and have substantial upstream and downstream hardening specific to the devices It still seems strange. A big part of GrapheneOS is to provide a safeguard from Googles data hoarding, yet it works primarily on Google phones.

That doesn't seem odd to me. Google's data hoarding is done in software, not hardware. Remove Google's add-on software and you have a more or less blank slate to work with. I don't see why we'd expect any different.
Post reply on HN