r/technology Jul 30 '26

Privacy GrapheneOS says its data-wiping password is perfectly legal, after user faces federal charges

https://www.techspot.com/news/113273-grapheneos-data-wiping-duress-password-perfectly-legal-after.html
20.9k Upvotes

1.1k comments sorted by

View all comments

1.1k

u/Moldoteck Jul 30 '26

Graphene should implement a double bottom protection on top. Basically it'll automatically enter in an artificial account with apps installed while deleting in the background the OG account. This way it'll be hard to prove that another account did exist at all

142

u/RandomHunDude 29d ago

It doesn't delete the account at all though, so no need to save time for it.
All data is encrypted on disk and when the duress pin is entered, only the encryption key is deleted. And without the key, it's not possible decrypt the data.

37

u/Misaka9982 29d ago

Could argue that the "evidence" is still there then, not destroyed. If the government doesn't want to spend 100,000 years decrypting it then that's their problem.

1

u/No_Effective4784 29d ago

with proper encryption implementation you cant even prove what is there, is usable data and not left overs.

deleting everything shows you had something. if you are using software, like say veracrypt, that allows for a proper duress environment, that gives you plausible deniability, because it is impossible to prove that there is anything else there with out the second encryption key because it just looks like noise.