Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

US Government targets Cop City protester over phone operating system

theguardian.com

Post reply on HN
Print view View original

61–70 of 99 posts

Re: US Government targets Cop City protester over phone operating system

#61

Post by Andromxda »

cherryteastain wrote: post #31
woodruffw wrote: post #30

Earlier quoted context omitted.

I don’t think a judge would be impressed by this. If anything it actually makes the legal case easier: there’s a legitimate use for a wiping feature on a phone (e.g. for theft or tampering), but actively producing false information demonstrates an intent to deceive or mislead.

Easier solution: phone wipes itself if passcode is not entered every X hours

GrapheneOS already has an auto-reboot feature that can be set to time intervals ranging from 10 minutes to 72 hours. Rebooting puts the device back in before first unlock (BFU) state. This wipes all memory contents, including the encryption keys. Any unlock attempt will have to go through the secure element, which is basically impossible to tamper with (no successful attacks on the Titan M2 so far, or the Apple SEP for that matter), and includes substantial security mechanisms, such as throttling key derivations (through the Weaver API), or insider attack resistance (requiring user authentication before new firmware can be flashed to the secure element).

Leaked documents from mobile forensics companies, such as Cellebrite or XRY confirm this. It's impossible to crack a Pixel with GrapheneOS in BFU state. See https://grapheneos.social/@GrapheneOS/112462758257739953 and https://grapheneos.social/@GrapheneOS/112826067364945164

Re: US Government targets Cop City protester over phone operating system

#62

Post by Andromxda »

pstuart wrote: post #55
unethical_ban wrote: post #47

Earlier quoted context omitted.

Or turn your phone off while transiting airports. Not a catch-all solution in life, but considering the extra-lack of rights we have there, it makes sense. No need for them if you write down your confirmation number before arriving for departure, in order to get your ticket printed. On landing, have it off until you clear TSA and Customs. It shouldn't be this way, but oh well.

At least disable biometric login.

And fully disable the USB port (GrapheneOS-exclusive feature). This will make it impossible to extract data with mobile forensics software/devices (such as the Cellebrite UFED).

Re: US Government targets Cop City protester over phone operating system

#63

Post by x79p12gz »

bonkusbingus wrote: post #42

This is a good article, and it brings much-needed attention to this case, which so far has not received the level of public awareness that is consummate with seriousness with which the federal government intends to weaken or undermine the First, Fourth, and Fifth Amendment rights of every American in prosecuting these bogus charges against Sam. However, it makes an erroneous equivocation that, I believe, has profound…

Yeah I saw that. What do you mean 30 years in prison solely for the so called

"Corrupting and concealing documents, interfering with their ability to be used in grand jury and criminal proceedings; Conspiracy to conceal documents that would implicate Maricela Rueda"

By removing people from the Signal group?

Re: US Government targets Cop City protester over phone operating system

#64

Post by HybridStatAnim8 »

m463 wrote: post #24

This is a technical problem. Instead of wiping and rebooting, it should wipe while showing a lame spreadsheet application, or possibly a grocery list.

That would be a bad idea. GrapheneOS operates under the assumption that every attacker has encyclopedic knowledge of GOS at all times. This is by far not an unreasonable assumption. GrapheneOS does not add features relying on ignorance that they exist.

The duress wipe feature shuts the device down to let RAM discharge, this is an important step to remove any components of decryption before they can be lifted.

Re: US Government targets Cop City protester over phone operating system

#65

Post by ragall »

cherryteastain wrote: post #31
woodruffw wrote: post #30

Earlier quoted context omitted.

I don’t think a judge would be impressed by this. If anything it actually makes the legal case easier: there’s a legitimate use for a wiping feature on a phone (e.g. for theft or tampering), but actively producing false information demonstrates an intent to deceive or mislead.

Easier solution: phone wipes itself if passcode is not entered every X hours

There's a problem with that too: it would often force the owner of the phone to input the code when outside a secure environment, so a simple video surveillance could obtain the code.

Re: US Government targets Cop City protester over phone operating system

#66

Post by HybridStatAnim8 »

verdverm wrote: post #10
ImJamal wrote: post #3

It looks like there are a lot of issues here on the government side, but it also appears like the protestor intentionally gave them a password that, when used, wipes the phone? That seems like a clear example of destruction of evidence.

You do not have to give them your pin, by law. They can use biometrics to open your device, which is why you should not use biometrics for device unlocking. GraphenOS has a couple of settings, a distress pin that wipes the device, and a number of failed attempts that will wipe the device. If the person handed over their "pin", they didn't need to

GrapheneOS does not offer a feature to wipe the device based on failed attempts.

Re: US Government targets Cop City protester over phone operating system

#67

Post by verdverm »

HybridStatAnim8 wrote: post #66
verdverm wrote: post #10

Earlier quoted context omitted.

You do not have to give them your pin, by law. They can use biometrics to open your device, which is why you should not use biometrics for device unlocking. GraphenOS has a couple of settings, a distress pin that wipes the device, and a number of failed attempts that will wipe the device. If the person handed over their "pin", they didn't need to

GrapheneOS does not offer a feature to wipe the device based on failed attempts.

I thought I read about it in their docs, but perhaps I'm hallucinating that from a forum post requesting the feature.

Re: US Government targets Cop City protester over phone operating system

#68

Post by Cider9986 »

HybridStatAnim8 wrote: post #64
m463 wrote: post #24

This is a technical problem. Instead of wiping and rebooting, it should wipe while showing a lame spreadsheet application, or possibly a grocery list.

That would be a bad idea. GrapheneOS operates under the assumption that every attacker has encyclopedic knowledge of GOS at all times. This is by far not an unreasonable assumption. GrapheneOS does not add features relying on ignorance that they exist. The duress wipe feature shuts the device down to let RAM discharge, this is an important step to remove any components of decryption before they can be lifted.

What about a duress timer working as the reboot timer but it wipes if you don't unlock within the time period. Would that have any advantages for destruction of evidence or deniability?

Re: US Government targets Cop City protester over phone operating system

#70

Post by UmYeahNo »

pstuart wrote: post #50
bdcravens wrote: post #12

"federal authorities had put him on a terrorism watchlist because of his alleged association with the movement against Cop City" Talk about burying the lede

Note that "antifa" is now recognized as a terrorist organization by the current federal government. It will get much worse if they aren't stopped.

which they are you referring to? Antifa or the gov't?
Post reply on HN