Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • I've set up GrapheneOS on my Pixel with 2FA fingerprint + PIN unlock. No way will anyone be getting into it without my cooperation.

    My only issue was less compatibility with my local emergency services, since they can't see me on a map for some reason if I call from a GOS phone.

    My solution to that was a second Pixel as an emergency phone - one with the stock OS, that I'll swap sims with and take with me when hiking, stand up paddle bording and doing other activities that carry risk. This phone has no sensitive information in it. I also have a PLB for added protection.

  • One super simple usability v. security tradeoff that Graphene made is that if you plug a new device into the USB while the screen is locked, it just won't work until you unlock the screen. This is kinda annoying the three times a year I want to use wired earbuds, but it's a major impediment for any kind of AFU hacking.
  • Testament to GrapheneOS' competence and commitment to it's purpose that it's called out by name by Cellebrite.
  • A ~dozen programmers are shipping a demonstrably more secure version of a multi-billion-dollar corporation's own operating system on that company's own hardware. That's incredible.
  • Here's the full document without the blurriness: https://www.documentcloud.org/documents/24833831-cellebrite-...

    (it's been available since 2024 -- found by searching for "android os access support matrix" on documentcloud)

  • > https://signal.org/blog/cellebrite-vulnerabilities/

    There’s always the hope they are hit back: Cellebrite can develop solutions to automate the hacking of target phones, but in doing so their physical devices are exposed to being hacked as well.

  • They couldn't answer the question most on my mind: "We’ve reached out to Google to inquire about why a custom ROM created by volunteers is more resistant to industrial phone hacking than the official Pixel OS. We’ll update this article if Google has anything to say."

Explore Birbla archives