Post #4215856

2026-07-29 21:27 UTC

Exploiting the OS becomes drastically easier after being granted access to a profile. USB becomes available, every radio can be turned on and an app can be installed with every permission granted. Developer options and ADB would need to be available to pretend to be Owner...

Replies (2)

@GrapheneOS@grapheneos.social 2026-07-29 21:36

Forensic extraction software without exploits for locked device is common and not closely guarded. Users of these tools only need to follow simple on-screen instructions. Developers of the tools are aware of alternative operating systems. GrapheneOS features have to work when known.

Open ##4215855
@gabu@social.linux.pizza 2026-07-29 22:09

@GrapheneOS@grapheneos.social But everyone's threat model is different. Maybe it wouldn't fool the NSA, but it could do the trick for victims of domestic violence or against muggers who demand that you unlock your phone. Implementing such false bottom mechanisms feels outside the scope of the project, but it wouldn't hurt with proper UX (perhaps with a short explanation followed by a quick test to make sure the user understands the risks and knows when to use the feature).

Open ##4334228