alt.hn

7/26/2026 at 6:16:42 AM

GrapheneOS duress PIN could land a man in prison

 https://www.androidauthority.com/grapheneos-duress-pin-us-prosecution-3691271/

by kitd

7/26/2026 at 7:57:57 AM

If he hadn't given the authorities the duress pin, and presumably they had seized it, would the encryption/protection GrapheneOS provides have been enough to keep them from accessing it's contents? I've never used Graphene so I'm unfamiliar with all it's features.

My Samsung phone has a feature to automatically format the device if the wrong code is entered X number of times, and I have security software that would let me wipe it remotely (if it still had internet access) so this whole situation brings up a lot of questions about features like this.

EDIT More discussion about it here, but it's quite technical. I was a bit confused about the rate limiting stuff and etc.

GrapheneOS protections against data extraction from locked devices - HN Post https://news.ycombinator.com/item?id=49055169

by pogue

7/26/2026 at 11:28:30 AM

Providing a duress PIN to wipe your phone when they ask for the passcode? Any realistic person can predict that could have major legal repercussions. Cypherpunks have pondered the legal consequences of blatantly doing things like that for decades.

Props to the defendant for volunteering as a test case. He should've powered off his phone before he went through customs, or better yet traveled with a burner phone.

It doesn't matter if the feds are doing something wrong... if you interfere or destroy potential evidence, rather than simply recite your 5th and 6th amendment rights, you've put yourself in a whole new ball game.

He probably would've been fine if he'd maintained his refusal contingent on talking to a lawyer first. They might not have even attempted to crack the phone, and if they had, he'd have a better chance of getting the contents thrown out than he has now of fighting the destruction of evidence charge. The two issues are largely separate, unless a court decides the detention and attempted search were so egregious that they negate his separate, intentional act of wiping his phone when he was being detained.

We might wish for a mobile device to be a mobile castle immune from any [request for] search or seizure without a warrant, but that hasn't been established in case law, and everything else crossing the border (except what's diplomatically immune) is subject to some warrantless scrutiny.

by harshreality

7/26/2026 at 5:53:05 PM

> ... if you interfere or destroy potential evidence,

So everything is potential evidence, even any memory in your brain, were're soon be at Johnny Mnemonic situation here.

by type0

7/26/2026 at 3:32:08 PM

Maybe as a middle ground it could be that the duress pin is simply easier to brute force. And when the cracker gets to a 4 digit pin before the 6 digit one it triggers the erasure. Maybe wouldn't help an online attack but also wouldn't implicate a willful destruction of evidence

by halJordan

7/26/2026 at 6:15:08 PM

he also told them something to the effect of ‘is my phone acting weird? the password i gave you wiped it lol’ during the process. doesnt help for a case that can set a precedent

by eggn00dles

7/26/2026 at 9:43:59 AM

Doesn't make sense to me to undermine the right to refuse information. From my POV dictatorships try to do that, not a rule of law.

by GuestFAUniverse

7/26/2026 at 10:08:57 AM

[flagged]

by inigyou

7/26/2026 at 1:45:19 PM

Try living in a country under a real dictatorship, one where there's no elections, where online posts will get you thrown in prison for years. Trump haters have no clue how good you have it.

by prisondroid

7/26/2026 at 3:22:33 PM

That is the country in question. I'm not going to travel there, thanks.

by inigyou

7/26/2026 at 10:12:44 AM

Just like when India banned Bitchat, this proves GrapheneOS works and you should use it.

by inigyou