Remix.run Logo
microtonal 3 hours ago

citing the 18-hour auto-reboot feature that returns the device to Before First Unlock (BFU) mode, where keys cannot be extracted.

Also worth mentioning that you can set auto-reboot to a shorter period (down to 10 minutes). So if you anticipate situations where your phone can be seized (border crossings, demonstrations), it's worth temporarily setting this to a short time period (or rebooting your phone yourself to get to BFU).

msh 2 hours ago | parent | next [-]

I dont understand why people like a journalist working on things they dont want seized would carry this kind of data on their device at a situation like this (border crossing), I see it as more useful to remove that kind of data from the device first.

dugite-code an hour ago | parent | next [-]

Probably because everything seems to be an "app" these days. Even when it has no business being one.

inigyou 43 minutes ago | parent [-]

Exactly. Everything must be switched to Service as a Software Substitute. It's for your own safety, you see.

choo-t an hour ago | parent | prev [-]

Because you may need the data in the data during/after your travel and lack clean way to access safely, securely and anonymously remotely.

podocarp an hour ago | parent | prev [-]

What about using decoy profiles? Say before the border crossing you switch to another user. Does that expose keys or anything for other users?

0-_-0 an hour ago | parent [-]

You would need to hide the existence of the original profile while in the decoy profile for this to work, which GrapheneOS considers too complex to implement