Post #4209174
2026-07-29 11:26 UTC
Replies (2)
-
@GrapheneOS@grapheneos.social 2026-07-29 15:07
@Dima812@mastodon.de It's possible to reliably delete specific profiles due to each having per-profile encryption keys with their own Weaver slots in the secure element. However, a lot of data about the profiles is stored globally and cannot be reliably deleted without wiping the device as a whole. It will be easily detectable by standard forensic software if there were any previously deleted profiles and the timestamps those were deleted. Bear in mind data can't be reliably deleted at a fine granularity.
-
@tranquil_cassowary@infosec.exchange 2026-07-29 19:36
@Dima812@mastodon.de @GrapheneOS@grapheneos.social Even though a profile can be reliably deleted, there is globally stored data on Android out of which forensic tools can easily conclude other profiles existed. Only way to properly wipe evidence of the other profiles is by wiping the entire device.