this post was submitted on 28 Jul 2026
283 points (100.0% liked)
Privacy
5940 readers
30 users here now
Welcome! This is a community for all those who are interested in protecting their privacy.
Rules
PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!
- Be civil and no prejudice
- Don't promote big-tech software
- No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
- No reposting of news that was already posted
- No crypto, blockchain, NFTs
- No Xitter links (if absolutely necessary, use xcancel)
Related communities:
Some of these are only vaguely related, but great communities.
- !opensource@programming.dev
- !selfhosting@slrpnk.net / !selfhosted@lemmy.world
- !piracy@lemmy.dbzer0.com
- !drm@lemmy.dbzer0.com
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Not sure there's a realistic way they don't notice. It takes time to wipe things and then the phone is empty. I feel like they'll figure it out.
Less than a second to make a new partition, unmount the old one, and have a background process start wiping
I just realized there are ways you could do plausible deniability.
What if we keep a decoy partition ready to go? Pre-populate it with some AI-generated slop Facebook account, photos, etc. Keep A small random sample of music files. etc. Something that looks as plausible and bland as possible.
This is a feature that could get better & better over time. Don't just wipe my old data; make my adversary unaware that there was anything worth wiping.
I could absolutely see this being a thing, veracrypt has an option to create a hidden volume, and the two different passwords open up to two different encrypted volumes. Also if you start writing information to the non-hidden volume, it will start overwriting the hidden volume and corrupting files without any guardrails which is nice
"Oh no! You got my gramma's secret cookie recipe!!"
What if you were able to pick apps/accounts that mirrors to the decoy partition? Then you have real data, but all the private stuff stays locked away.
You can already make hidden spaces in graphene!
Although I think this guy should've just had an alt user active during the search and turned off usb data transfer.
He shouldn't have been searched, but he should've realized that he probably would be and prepared his device better.
Hmm fair I didn't think of that option.
Android supports multiple user profiles. They could have a duress code login to a more sanitary profile while data get wiped in the background. This has been discussed on the forums I believe.
The wiping in the background is very fast, and would in turn take out the profile. The only thing a decoy profile would achieve in that case would be a slight splash of color before the phone shuts down.
Yes, how it currently works. But you could do a targeted wipe of the profile and leave the rest of the phone untouched with a secondary profile. Here's one such discussion from a year ago warning of basically exactly this happening: https://discuss.grapheneos.org/d/21122-setting-up-a-secondary-passcode-that-opens-a-dummy-profile
That would reduce the security of the duress pin significantly, and would require rewritting how the feature works in the first place.
The duress pin shreds the decryption keys to the entire OS, which is much much faster than erasing the data itself, and arguably more secure. If you're worried about getting caught wiping the device, just don't wipe it. There is no known way to get into a phone running an up to date GrapheneOS install (or anything post Q3 2022) unless you have significantly reduced the security of the phone.
Android supports per profile encryption. You can just erase the encryption keys for the other profile.
Gotcha yeah sounds like it could be improved then.
If the phone is encrypted already you really just need to destroy the key. Of course then it needs to be reimaged to be used again which isn't very user friendly.
From the gOS website description of the feature, thats exactly what happens. It also says that reimaging isnt needed, only the initial setup