In my opinion a duress code should wipe the phone invisibly. So the cops shouldn’t even know it wiped the real data off the phone. Like if you type a duress code it should open the phone with an alt account on a different data partition and hide the partition of the other account and delete it in the background and then zero out the storage drive of that partition so they can’t retrieve the data with forensic tools. You use one account for normal everyday stuff. And the other account for shit the fascists will hang you for.
A phone that is empty when they unlock it is sus as fuck.
The way profiles work right now makes a decoy profile not work properly. GrapheneOS developers don’t add features that can be defeated by basic training.
Last I heard, the way the developers want to do it is add an early boot passphrase and then a decoy setup would be possible without leaving a way for attackers to be able to know for sure that a decoy feature was used.
Do all your non-sus stuff on one phone, do all your sus stuff on the other phone.
You’re going to sell your old phone and start using this one. You just hadn’t gotten around to it yet.
As much as I don’t trust Samsung, they have an encrypted profile and you can put all of your social media over there and just wipe knox if you need it, having empty knox on Samsung was probably the default.
In my opinion a duress code should wipe the phone invisibly. So the cops shouldn’t even know it wiped the real data off the phone. Like if you type a duress code it should open the phone with an alt account on a different data partition and hide the partition of the other account and delete it in the background and then zero out the storage drive of that partition so they can’t retrieve the data with forensic tools. You use one account for normal everyday stuff. And the other account for shit the fascists will hang you for.
A phone that is empty when they unlock it is sus as fuck.
The way profiles work right now makes a decoy profile not work properly. GrapheneOS developers don’t add features that can be defeated by basic training.
Last I heard, the way the developers want to do it is add an early boot passphrase and then a decoy setup would be possible without leaving a way for attackers to be able to know for sure that a decoy feature was used.
Submit a PR
Carry a second phone.
Do all your non-sus stuff on one phone, do all your sus stuff on the other phone.
You’re going to sell your old phone and start using this one. You just hadn’t gotten around to it yet.
As much as I don’t trust Samsung, they have an encrypted profile and you can put all of your social media over there and just wipe knox if you need it, having empty knox on Samsung was probably the default.