• girsaysdoom@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    17
    ·
    4 days ago

    In the image they posted it showed GrapheneOS AFU (after first unlock) and Unlocked. Brute force methods are not viable and the filesystem is only accessible while the device is unlocked and is running a certain version apparently.

    So, pretty secure while it’s locked but seems resilient even unlocked.

    • krooklochurm@lemmy.ca
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 days ago

      Yeah that aligns with what I know about it.

      It’s great that a phone is secure when it’s locked but issues while the phone in use seems to get talked about less.

      I’ve used graphene before and it does a great job of implementing some robust security measures that are active during regular use - just saying I wish there was more of a focus on this from this POV.

      • mmmac@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 days ago

        What do you mean here? If a digital forensics team, police etc gets their hands on your phone while it’s unlocked there really is nothing that can be done, unless you have some sort of killswitch attached to the USB port lol

        • krooklochurm@lemmy.ca
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 days ago

          Sorry if I was unclear - I meant accessing/exfiltrating data / C&C type shit while you’re using the phone through whatever means.

          • mmmac@lemmy.zip
            link
            fedilink
            English
            arrow-up
            4
            ·
            4 days ago

            They do though. Here’s a couple off of the top of my head:

            • Granular permissions
            • enhanced sandboxing
            • hardware memory tagging and other memory corruption related explotation attempts
            • lockscreen pin scrambling
            • and I’m pretty sure graphene was the first to have the auto reboot feature to trigger BFU