Global Feed Post Login
Replying to Avatar MetropleX [GrapheneOS] ⚡🟣

GrapheneOS has been working on a duress PIN/password feature for a while, and as part of that we already implemented our own wipe-without-reboot system. We care a lot about doing things properly and the way this was done in existing apps and operating systems was highly insecure.

Can see the announcement of these being exploited in the wild at https://source.android.com/docs/security/bulletin/pixel/2024-04-01#Announcements.

In addition to them working on our proposal to implement wipe-without-reboot, we've spotted work on our other suggestions such as wiping key derivation results from memory after unlocking.

f4
Nomad 1y ago

This is amazing. You guys are awesome.

Reply to this note

Please Login to reply.

Discussion

No replies yet.