RetroFed Forum
Your home away from modern life.
GrapheneOS Defends Data-Wiping Function That Blocked US Border Search
Post Reply
AuthorMessage
Auli lemmy.ca Auli@lemmy.ca
Joined: 2023-06-17
#52 · Quote Reply

This is a very common complaint, and the main reason is that it's way more complicated than it sounds. The duress feature is designed to immediately erase any chance to recover the unencrypted data from the phone by destroying part of the data used to derive the decryption keys (the other part being your pin/password, which can't be destroyed for obvious reasons). Any attempt to boot into a fak...

Wouldn't he have been better off to just refuse to unlock it?

0
Auli lemmy.ca Auli@lemmy.ca
Joined: 2023-06-17
#53 · Quote Reply

i mean they should it's a good feature and the person accused of using it didn't do a single thing wrong.

O guess we well find out. I can see both sides. Since they where doing an investigation the user destroyed evidence. It well depend in the courts.

-2
Psychadelligoat lemmy.dbzer0.com gamermanh@lemmy.dbzer0.com
Joined: 2023-06-14
#54 · Quote Reply

Because if using the feature as designed will land you in jail, it might not be a very useful feature.

It's legal to wipe your phone though kiddo

The jail part is the fascism

22
Psychadelligoat lemmy.dbzer0.com gamermanh@lemmy.dbzer0.com
Joined: 2023-06-14
#55 · Quote Reply

Because it was an active search and he destroyed the "evidence". Well be interesting how this plays out I can see both sides.

It's fully legal to have a wipe set on your device

3
InternetCitizen2 lemmy.world InternetCitizen2@lemmy.world
Joined: 2023-06-16
#56 · Quote Reply

And if you don't know why Pixel is the only phone supported that is on you. They are the only phone that allows you to relock the boot loader with a custom ROM. And since grapheme OS is all about security why would you want to run a phone with a unlocked boot loader. That is a point of weakness.

Lemmy is a place of idealism. Which don't get me wrong is great, but it does mean no practically and often detriment to the changes they want to see in society.

-2
Psychadelligoat lemmy.dbzer0.com gamermanh@lemmy.dbzer0.com
Joined: 2023-06-14
#57 · Quote Reply

Because there is a specific exemption for border officials in the 4th Amendment. Until he was allowed to proceed and enter the county, CBP had the full legal authority to search everything on his person and in his possession. Edit: y'all some have to like it for it to be true. https://www.law.cornell.edu/constitution-conan/amendment-4/border-searches It's a well-known exemption. https://www.bro...

No, no they do not.

Constitution still applies at border crossings and without a warrant your phone isn't searchable

5
Psychadelligoat lemmy.dbzer0.com gamermanh@lemmy.dbzer0.com
Joined: 2023-06-14
#58 · Quote Reply

O guess we well find out. I can see both sides. Since they where doing an investigation the user destroyed evidence. It well depend in the courts.

They were not engaged in an investigation

No warrant, no phone

7
LaMouette jlai.lu LaMouette@jlai.lu
Joined: 2023-08-15
#59 · Quote Reply

Nothing to do with bloat as pixels have ton of bloat but has to do with security. You can relock boot loaders.

I want to try to do this on a lineage os on a one plus 5t, with me luck as it involves rebuilding everything

1
MacN'Cheezus lemmy.today MacNCheezus@lemmy.today
Joined: 2023-11-29
#60 · Quote Reply

It's legal to wipe your phone though kiddo The jail part is the fascism

Well, if the feature was supposed to protect you from fascism but it didn't, how is working as advertised?

-10
Psychadelligoat lemmy.dbzer0.com gamermanh@lemmy.dbzer0.com
Joined: 2023-06-14
#61 · Quote Reply

Well, if the feature was supposed to protect you from fascism but it didn't, how is working as advertised?

Did they get his data? No?

Then it worked as advertised

18
rainbowbunny slrpnk.net rainbowbunny@slrpnk.net
Joined: 2024-11-30
#62 · Quote Reply

yup, already tried to find phones with GrapheneOS installed. I don't want a from Google, so no pixel Motorola made plans only a compatibility list :(

I'm so hopeful for the Motorola. I really hope it turns out to be great

7
Hiro8811 lemmy.world Hiro8811@lemmy.world
Joined: 2023-11-16
#63 · Quote Reply

yup, already tried to find phones with GrapheneOS installed. I don't want a from Google, so no pixel Motorola made plans only a compatibility list :(

Buy used pixel with cash

5
VitoRobles lemmy.today VitoRobles@lemmy.today
Joined: 2025-01-26
#64 · Quote Reply

yup, already tried to find phones with GrapheneOS installed. I don't want a from Google, so no pixel Motorola made plans only a compatibility list :(

Pixel phones are actually really good. You can buy them used/not directly from Google. Then reformat it to GrapheneOS.

Kinda like buying a Windows laptop to install Linux on it.

18
Regrettable_incident lemmy.world Regrettable_incident@lemmy.world
Joined: 2024-02-14
#65 · Quote Reply

Why is the phone owner being accused? It was the border guard that put in the code and wiped the device. He should be the one prosecuted, if anyone.

IKR - if there were genuine concerns that this guy might have something nefarious on his phone, surely they should confiscate it and pass it on to their tech guys to try to backdoor or whatever. Instead, this shit finger just types in whatever he's told and oops, he deleted any potential evidence.

20
VitoRobles lemmy.today VitoRobles@lemmy.today
Joined: 2025-01-26
#66 · Quote Reply

Because it was an active search and he destroyed the "evidence". Well be interesting how this plays out I can see both sides.

A warrant is required to search personal belongings. This was a patdown, no different from a security guard checking your ID.

3
Regrettable_incident lemmy.world Regrettable_incident@lemmy.world
Joined: 2024-02-14
#67 · Quote Reply

yup, already tried to find phones with GrapheneOS installed. I don't want a from Google, so no pixel Motorola made plans only a compatibility list :(

Yeah I'm waiting on the Motorola device, I've been pretty happy with their phones before.

2
coolman lemmy.world coolman@lemmy.world
Joined: 2025-10-21
#68 · Quote Reply

I just realized there are ways you could do plausible deniability. What if we keep a decoy partition ready to go? Pre-populate it with some AI-generated slop Facebook account, photos, etc. Keep A small random sample of music files. etc. Something that looks as plausible and bland as possible. This is a feature that could get better & better over time. Don't just wipe my old data; make my ad...

I could absolutely see this being a thing, veracrypt has an option to create a hidden volume, and the two different passwords open up to two different encrypted volumes. Also if you start writing information to the non-hidden volume, it will start overwriting the hidden volume and corrupting files without any guardrails which is nice

3
VitoRobles lemmy.today VitoRobles@lemmy.today
Joined: 2025-01-26
#69 · Quote Reply

O guess we well find out. I can see both sides. Since they where doing an investigation the user destroyed evidence. It well depend in the courts.

What were they charged with? Investigations require a charge with a crime.

3
Robert_White lemmy.world Robert_White@lemmy.world
Joined: 2026-07-29
#70 · Quote Reply

The reboot isn't cosmetic, it's structural. The duress PIN nukes the key derivation material, and a device with no keys has nothing left to boot into. There's no quiet version of that.

But your instinct is right and worth pushing one step further. An empty phone has the same problem as a rebooting one. Nobody owns a phone with four apps and two weeks of messages, so it just takes them a bit longer to notice.

What you actually want is to quietly unlock into a phone that's full. Real apps, real photos, real history, and the sensitive half behind a second PIN stored so it reads as random noise, same as any unused encrypted space. Nothing gets destroyed, so there's nothing to reboot from and nothing to argue about afterwards.

Catch is the decoy has to be believable, and keeping one believable is a chore most people drop after a month.

(I work on DeniableOS, which does this, so grain of salt. Graphene's own statement this week made roughly your point, that wiping can carry physical or legal consequences.)

16
nymnympseudonym piefed.social nymnympseudonym@piefed.social
Joined: 2025-08-25
#71 · Quote Reply

I could absolutely see this being a thing, veracrypt has an option to create a hidden volume, and the two different passwords open up to two different encrypted volumes. Also if you start writing information to the non-hidden volume, it will start overwriting the hidden volume and corrupting files without any guardrails which is nice

"Oh no! You got my gramma's secret cookie recipe!!"

2
usrtrv sh.itjust.works usrtrv@sh.itjust.works
Joined: 2024-11-20
#72 · Quote Reply

The wiping in the background is very fast, and would in turn take out the profile. The only thing a decoy profile would achieve in that case would be a slight splash of color before the phone shuts down.

Yes, how it currently works. But you could do a targeted wipe of the profile and leave the rest of the phone untouched with a secondary profile. Here's one such discussion from a year ago warning of basically exactly this happening: https://discuss.grapheneos.org/d/21122-setting-up-a-secondary-passcode-that-opens-a-dummy-profile

2
Mossheart lemmy.ca Mossheart@lemmy.ca
Joined: 2023-08-13
#73 · Quote Reply

The reboot isn't cosmetic, it's structural. The duress PIN nukes the key derivation material, and a device with no keys has nothing left to boot into. There's no quiet version of that. But your instinct is right and worth pushing one step further. An empty phone has the same problem as a rebooting one. Nobody owns a phone with four apps and two weeks of messages, so it just takes them a bit lon...

Your first two paragraphs read like they were LLM output in tone and language. I need to know if that's true or are you just was your writing style the source training material?

4
eleitl lemmy.zip eleitl@lemmy.zip
Joined: 2025-06-05
#74 · Quote Reply

Because if using the feature as designed will land you in jail, it might not be a very useful feature.

Living in fascist countries is dangerous to your health. The phone is just a pretext.

7
Juice midwest.social Juice@midwest.social
Joined: 2024-04-24
#75 · (edited) Quote Reply

Boy this story sure is getting a lot of publicity. Makes you wonder why. I forgot about this feature on Graphene phones, I'm gonna turn it on right now

13
eleitl lemmy.zip eleitl@lemmy.zip
Joined: 2025-06-05
#76 · Quote Reply

I want to avoid Google! Graphene: here you go Nice, now what phone? Obviously a Google phone! Come on, there gotta be many people who want to avoid buying a fucking pixel, even if second hand.

If these people's priorities are to wait for for years until an expensive phone from Motorola is supported I think they need their heads examined, but that's just me.

0
Robert_White lemmy.world Robert_White@lemmy.world
Joined: 2026-07-29
#77 · Quote Reply

Your first two paragraphs read like they were LLM output in tone and language. I need to know if that's true or are you just was your writing style the source training material?

No, it was me. I use ai to make corrections to my english because i'm not native speaker

8
Robert_White lemmy.world Robert_White@lemmy.world
Joined: 2026-07-29
#78 · Quote Reply

No, it was me. I use ai to make corrections to my english because i'm not native speaker

I really want people to know more about ways to preserve their privacy. We even built this product with our team.

7
NRay7882 lemmy.world NRay7882@lemmy.world
Joined: 2023-06-12
#79 · Quote Reply

I had read one source that stated they wanted to search his phone for possession of CP but I haven't found other stories with details suggesting that. It seems they went about it all wrong but I'd like to know the reasoning for why they wanted to search his phone in the first place.

1
Jakeroxs sh.itjust.works Jakeroxs@sh.itjust.works
Joined: 2023-07-03
#80 · Quote Reply

Pixel phones are actually really good. You can buy them used/not directly from Google. Then reformat it to GrapheneOS. Kinda like buying a Windows laptop to install Linux on it.

^bought mine on swappa, immediately installed GOS

4
skarn discuss.tchncs.de skarn@discuss.tchncs.de
Joined: 2023-06-24
#81 · Quote Reply

And if you don't know why Pixel is the only phone supported that is on you. They are the only phone that allows you to relock the boot loader with a custom ROM. And since grapheme OS is all about security why would you want to run a phone with a unlocked boot loader. That is a point of weakness.

No, they are not the only phone that lets yoy relock the bootloader.

They are the only phone to do that the proper way, while also including a TPM.

8
Venia Silente lemmy.dbzer0.com veniasilente@lemmy.dbzer0.com
Joined: 2025-06-09
#82 · Quote Reply

Well, if the feature was supposed to protect you from fascism but it didn't, how is working as advertised?

If a phone could protect you from fascism, shouldn't we be conquering outer space now with how many people have phones?

3
Venia Silente lemmy.dbzer0.com veniasilente@lemmy.dbzer0.com
Joined: 2025-06-09
#83 · Quote Reply

If these people's priorities are to wait for for years until an expensive phone from Motorola is supported I think they need their heads examined, but that's just me.

Some people simply can't afford to buy an extra phone, not even a used one. And some people don't even have a Pixel option in their market.

But if you think money and phones simply grow out of trees in all of the places of the world that the US has fucked, maybe it's you who needs your head examined.

2
Venia Silente lemmy.dbzer0.com veniasilente@lemmy.dbzer0.com
Joined: 2025-06-09
#84 · Quote Reply

Because it was an active search and he destroyed the "evidence". Well be interesting how this plays out I can see both sides.

It was not an an active search. The phone was seized illegally.

2
Venia Silente lemmy.dbzer0.com veniasilente@lemmy.dbzer0.com
Joined: 2025-06-09
#85 · Quote Reply

Ya know, all this can be avoided by simply not flying in with a phone in the first place. Or just not even going to the US.

Any plane ticket to the US is money given to an airline company that deals in abetting fascism by providing victims.

11
Dionysus leminal.space Dionysus@leminal.space
Joined: 2025-09-13
#86 · Quote Reply

The reboot isn't cosmetic, it's structural. The duress PIN nukes the key derivation material, and a device with no keys has nothing left to boot into. There's no quiet version of that. But your instinct is right and worth pushing one step further. An empty phone has the same problem as a rebooting one. Nobody owns a phone with four apps and two weeks of messages, so it just takes them a bit lon...

That's actually a good use of onboard LLMs imo

Give it a short innocent history, have it generate stuff.

Do what their president does, fill the air with so much shit that you can't tell what's real anymore.

6
Lytia lemmy.today LytiaNP@lemmy.today
Joined: 2025-07-17
#87 · Quote Reply

Wouldn't he have been better off to just refuse to unlock it?

In his case, probably. Depending on how the case plays out, it might be better that the officer wiped the device.

1
hansolo lemmy.today hansolo@lemmy.today
Joined: 2025-06-07
#88 · Quote Reply

No, no they do not. Constitution still applies at border crossings and without a warrant your phone isn't searchable

I'd love to hear what you plan on telling Cornell Law School about how wrong they are.

https://www.law.cornell.edu/constitution-conan/amendment-4/border-searches

2
Lytia lemmy.today LytiaNP@lemmy.today
Joined: 2025-07-17
#89 · Quote Reply

Yes, how it currently works. But you could do a targeted wipe of the profile and leave the rest of the phone untouched with a secondary profile. Here's one such discussion from a year ago warning of basically exactly this happening: https://discuss.grapheneos.org/d/21122-setting-up-a-secondary-passcode-that-opens-a-dummy-profile

That would reduce the security of the duress pin significantly, and would require rewritting how the feature works in the first place.

The duress pin shreds the decryption keys to the entire OS, which is much much faster than erasing the data itself, and arguably more secure. If you're worried about getting caught wiping the device, just don't wipe it. There is no known way to get into a phone running an up to date GrapheneOS install (or anything post Q3 2022) unless you have significantly reduced the security of the phone.

0
Bytemeister lemmy.world Bytemeister@lemmy.world
Joined: 2023-07-29
#90 · Quote Reply

Because there is a specific exemption for border officials in the 4th Amendment. Until he was allowed to proceed and enter the county, CBP had the full legal authority to search everything on his person and in his possession. Edit: y'all some have to like it for it to be true. https://www.law.cornell.edu/constitution-conan/amendment-4/border-searches It's a well-known exemption. https://www.bro...

Sure, but I see it as "is the data on your phone a possession?"

Hypothetically, I could have my phone geofenced so that when I was within a certain distage of a border, it would wipe part or all of my data, and then automatically restore my data when I get a certain distance from the border. Is it illegal to wipe my data? Definitely not. Can I be compelled to download data to my phone? Definitely not. Can I be prosecuted for things on my phone that I was compelled to download to my phone? Also definitely not.

So border patrol can search the phone without a warrant, but can they compell you to give up your cloud account passwords and 2FAs? What about your Bank account credentials? What if you genuinely can't remember them in that instance?

Can they even prove that the phone was wiped in response to CBP trying to access it with a duress password? Is it illegal now to bring a wiped phone over the border?

So many questions!

1
Bytemeister lemmy.world Bytemeister@lemmy.world
Joined: 2023-07-29
#91 · Quote Reply

I just realized there are ways you could do plausible deniability. What if we keep a decoy partition ready to go? Pre-populate it with some AI-generated slop Facebook account, photos, etc. Keep A small random sample of music files. etc. Something that looks as plausible and bland as possible. This is a feature that could get better & better over time. Don't just wipe my old data; make my ad...

What if you were able to pick apps/accounts that mirrors to the decoy partition? Then you have real data, but all the private stuff stays locked away.

1
chortle_tortle mander.xyz chortle_tortle@mander.xyz
Joined: 2025-06-04
#92 · Quote Reply

I had read one source that stated they wanted to search his phone for possession of CP but I haven't found other stories with details suggesting that. It seems they went about it all wrong but I'd like to know the reasoning for why they wanted to search his phone in the first place.

From his lawyers motion to suppress:

The government was investigating Mr. Tunick because of his association with an environmental movement known as Defend the Atlanta Forest, which opposed the destruction of the South River Forest for the construction of an 85-acre, $115 million police training facility known as the Atlanta Public Safety Training Center.

So like right there next to the bomb in Luigi's backpack, they made up a justification to violate his rights because this is a fascist police state.

15
hansolo lemmy.today hansolo@lemmy.today
Joined: 2025-06-07
#93 · Quote Reply

Sure, but I see it as "is the data on your phone a possession?" Hypothetically, I could have my phone geofenced so that when I was within a certain distage of a border, it would wipe part or all of my data, and then automatically restore my data when I get a certain distance from the border. Is it illegal to wipe my data? Definitely not. Can I be compelled to download data to my phone? Definite...

Did you even read the article in the last link? This is well-worn territory.

Questions? Have you read anything about this case? The guy told the officer what happened. Told him! Hadn't even been Mirandized FFS! And volunteers that the officer entered the code to wipe the phone.

It's SO boneheaded.

1
SuperNovaStar lemmy.blahaj.zone SuperNovaStar@lemmy.blahaj.zone
Joined: 2024-11-12
#94 · Quote Reply

It's definitely an unlawful search though right? I mean what crime are they looking for they can't just say they have some suspicion in order to dig through someone's personal life, that's unacceptable

Unlawful, unfortunately no. Immoral, certainly

2
boonhet sopuli.xyz boonhet@sopuli.xyz
Joined: 2025-06-16
#95 · Quote Reply

Ya know, all this can be avoided by simply not flying in with a phone in the first place. Or just not even going to the US. Any plane ticket to the US is money given to an airline company that deals in abetting fascism by providing victims.

That person was literally an American though. I suspect they don't have another country they can legally stay in long term.

10
\\\mr\rnd; lemmy.zip MrRandom@lemmy.zip
Joined: 2026-01-28
#96 · Quote Reply

I'm so hopeful for the Motorola. I really hope it turns out to be great

The edge 50 neo is lots of bang for buck
When this phone retires, I hope they'll have one by then.

3
irelephant [he/him] lemmy.dbzer0.com irelephant@lemmy.dbzer0.com
Joined: 2025-06-04
#97 · Quote Reply

[deleted]
2
ArcaneSlime lemmy.dbzer0.com ArcaneSlime@lemmy.dbzer0.com
Joined: 2023-06-30
#98 · Quote Reply

Some people simply can't afford to buy an extra phone, not even a used one. And some people don't even have a Pixel option in their market. But if you think money and phones simply grow out of trees in all of the places of the world that the US has fucked, maybe it's you who needs your head examined.

Unfortunately Graphene has a reason for this, Pixels are (for now) the only phones with the HW security requirements list Graphene has, they're just the most secure (HW wise) phones on the market.

They also share your sentiment, but realistically they have to work with what exists, not what is fantasy. They are taking steps with Moto to get off of that dependency however and that phone should be just as secure (where their current ones lack something on the list.)

If you just want to get away from google, try LineageOS, if you need it to be secure then you're just as stuck as Graphene is, I'm afraid.

4
Venia Silente lemmy.dbzer0.com veniasilente@lemmy.dbzer0.com
Joined: 2025-06-09
#99 · Quote Reply

That person was literally an American though. I suspect they don't have another country they can legally stay in long term.

legally

There is a process for that.

2
boonhet sopuli.xyz boonhet@sopuli.xyz
Joined: 2025-06-16
#100 · Quote Reply

legally There is a process for that.

Yeah asylum still has to be granted by the country you're applying in. Most countries aren't going to admit that the US is a 3rd world shithole, so his options are going to be Russia, Iran, China and maybe a few others who don't mind antagonizing the US.

4
mathemachristian [he/him] lemmy.blahaj.zone mathemachristian@lemmy.blahaj.zone
Joined: 2025-06-05
#101 · Quote Reply

[deleted]

It depends on the scenario. If someone thinks you gave a dummy profile while the real on is intact then you're in for a rough time. Note that it doesn't matter if you what you actually entered is a distress password and the data is really gone. If there's ambiguity the only variable left is how far the other person is willing to go to get the data they think might still exist.

1
Post Reply Page 2 of 3   Goto page « First 1, 2, 3 Last »
Back to top