Post #4044018

2026-07-23 19:09 UTC

GrapheneOS has a "duress code" feature that will wipe the device if it is used in an attempt to unlock it. A potentially useful feature, but the US is now trying to prosecute somebody for having given the duress code to an officer demanding the unlocking of his phone. https://www.theguardian.com/us-news/2026/jul/23/cop-city-protester-phone

Replies (4)

@Epic_Null@infosec.exchange 2026-07-23 20:41

@corbet@social.kernel.org What's extra fun is how this means they were not following procedure. Cause if they were, they would have already had a backup of the device, making the durress code a big nothingburger.

Open ##4045799
@SpaceLifeForm@infosec.exchange 2026-07-23 21:14

@corbet@social.kernel.org Should have never given up any code in the first place without a warrant.

Open ##4046436
@Andres4NY@social.ridetrans.it 2026-07-24 02:42

@corbet@social.kernel.org Love how federal agents can break the law with impunity but then turn around and prosecute someone for something that *they* ultimately caused by doing something illegal..

Open ##4058999
@molytov@infosec.exchange 2026-07-24 09:38

@corbet@social.kernel.org One tactic to combat this kind of authoritarian persecution is to make an encrypted back up hosted remotely, wipe the device before crossing the border, and then restore the data when it's safe. If you're threatened into unlocking it, there would be a much lower risk of anything useful to the authorities being found, but you should always consider a device that's been seized or searched completely compromised and replace it. But then you have to ask, will pigs start treating devices without your entire life on them as "evidence of criminal activity" because "only a criminal would factory reset their device"? There will always be tools and tactics like this, but the actual solution to this shit is to abolish the institutions and structures that enable people to impose this "authority" over others.

Open ##4059509