this post was submitted on 07 Jul 2025
585 points (100.0% liked)
Cybersecurity - Memes
3093 readers
1 users here now
Only the hottest memes in Cybersecurity
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Just saw the mentaloutlaw video. Graphene OS has a “duress pin” that wipes the phone when given a certain pin.
fun fact, in the UK the offence is “failing to decrypt the device when required to do so” making these measures quite dangerous.
That said, unless you are being charged under a national security crime, the maximum sentence for “failing to decrypt the device when required to do so” is up to two years, so the game’s the game.
Wow the UK is a turd too.
Yeah, go to the UK and say "I support Palestine Action" and see what happens. They're having a rough time of it right now.
I always thought that they were a worse police state than the US. Cameras everywhere, jail time for letter openers and keychain swords let alone fucking knives. Absolutely a lack of free speech. US has the camps now do we’re definitely worse atm but the UK hates being free.
You know about brexit right? Turd move right before the US went full turd on Trump a few months later.
Russian troll farms paid off big at that point.
I wonder how they'd look at it if previous cracking attempts wiped the device. Is that "failure" to unlock punishable or not? The phone was wiped already - the user can't unlock it even if he wanted to.
Similarily, is it possible to make it impossible to prove the device was wiped due to the PIN and not beforehand?
I had the same question. The best would be to consult a lawyer and see if there's any precedent already set.
I could imagine police could easily film the process and a video would be enough proof for any judge. The phone shows a pin entry, a reboot, and then a welcome screen just like a factory reset has been done. Right?
I thought of it as two seperate problems:
The first one is legal - if the person asked to surrender credentials surrenders them, and the device turns out to be reset (assuming no foul play), does this constitute the crime of not surrendering the credentials?
If the answer to one is "yes", the technological question begs itself: How to make a duress pin indistinguishable from the real one?
What the fuck. When are you required to do so?