US accuses American of allegedly wiping his phone using a 'duress' password during border search | TechCrunch
techcrunch.com
A U.S. citizen has asked a court to throw out the government's claim that he gave over a passcode to border authorities that wiped his phone's data, opening up fresh questions about a person's constitutional rights at the U.S. border.

cross-posted from: https://lemmy.world/post/49853131

Feels to me like GrapheneOS did exactly what it should, passing the US border test with flying colours!

Funny part about this lawsuit: “With a little planning ahead of time, you can always download the data you need once you get to where you’re going,”

  • Robert_WhiteEnglish
    1·
    3 hours ago

    That exists. The thing to watch is the difference between separate profiles and a hidden one.

    Graphene gives you multiple profiles with their own passwords, but profiles are enumerable. Anyone poking at the device sees that profile 2 is there, so “open that one too” is the obvious next sentence.

    The version you’re describing works when the second environment can’t be shown to exist at all, so it reads as encrypted random noise, which is what empty encrypted space looks like anyway. One PIN gets you a full boring phone, the other gets you your real one.

    Only holds up if the boring phone is actually convincing though. Six apps and no photos fails on the spot.

    (I work on DeniableOS, which does the hidden version, so weigh that how you like.)