this post was submitted on 26 Jul 2026
617 points (98.3% liked)

Technology

86682 readers
3183 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
617
GrapheneOS duress PIN could land a man in prison (www.androidauthority.com)
submitted 2 days ago by sanitation@lemmy.today to c/technology@lemmy.world
268 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] GMac@feddit.org -1 points 2 days ago* (last edited 2 days ago) (2 children)

Loading any profile allows the operating system access to root privileges, and opens potential for user privilege escalation.

[–] FauxLiving@lemmy.world 16 points 2 days ago

The profiles are independently encrypted with a key derived from the user's profile PIN. If the other profiles are not logged in then their keys are not in RAM (and they get zeroed beforehand so they can't be read out of unallocated memory).

Even if the bad guys get root via a LPE in a dummy account there are no keys to find and the profiles' storage are not mounted.

You couldn't trust the device after that however, who knows what kind of persistent spyware they could have installed.

[–] iopq@lemmy.world 10 points 2 days ago (1 children)

Then it should delete the data while loading a dummy profile

[–] GMac@feddit.org 12 points 2 days ago* (last edited 2 days ago) (1 children)

That would be an interesting proposition... under duress load profile x and delete all other profiles, apps, settings and keys.

[–] grrgyle@slrpnk.net 2 points 2 days ago (2 children)

Or maybe a lighter version of the duress pin that just loads the fake profile (or alternate profile) but leaves the other(s) intact.

If you're just handing your phone over for a border pig to swipe through before waving you through that might be adequate.

[–] GMac@feddit.org 2 points 1 day ago

Border pigs have cellebrite, assume they can access anything left intact.

If it botherw you, wipe it, if it doesnt, you dont really need a duress pin. But login to one profile and cellebrite can get the rest.

[–] iopq@lemmy.world 5 points 2 days ago (1 children)

It depends on whether you believe forensics can recover the data when handed over. So make it a setting

[–] grrgyle@slrpnk.net 2 points 2 days ago

Yeah I was thinking of this as a half measure. But less secure than just wiping