We have this interesting feature proposal for /e/OS: a second "panic" PIN code that can fully erase the device in case of emergency. It's been rejected by Google for Android.

Do you think we should implement it?

#degoogled #android #privacy #security

gitlab.e.foundation/e/backlog/

@gael that will land you in jail for destroying evidence. it's different from not giving out a crypto password

@bonifartius @gael

Depends on jurisdiction. Do not assume all the world is like US or EU. The ticket describes a specific use cases in specific countries, where people are not legally protected from self-incrimination and are literally beaten to reveal the password, which results in further incrimination of themselves and other people.

@kravietz haven't read the ticket, maybe just extracting some recipes, cat pictures and sms from mom to the empty device would be a better decoy :)

Follow

@kravietz i mean.. if i know that there will be rubberhose cryptanalysis, it's better to present a decoy with some really non-incriminating things than a completely empty device.

from what i've heard, some western countries already want you to show them your social media accounts when traveling to them, "i don't have one" doesn't count as excuse as well.

_maybe_ the best thing would be to not store anything which could be used against you on the device but online in another country. just removing the traces of these accounts from the device, while leaving said messages from mom and kitten pictures in place.

it's easy to think that these things have a technical solution, but i fear there isn't one.

· · 1 · 0 · 0

@bonifartius

> it's better to present a decoy

That's a great feature, and it has been suggested in the original ticket, but way more complex to implement than a simple "panic PIN" wipe.

> the best thing would be to not store anything

If you are on a demonstration against authoritarian regime and make photos of police abuse, it's hard not to store photos or videos if the very point of you being there is to witness them.

@kravietz @bonifartius have you heard of "cryptocam" its an app from fdroid that has a public key stored and encrypts every picture/video taken immediately.
then back at a safe place you have the private key to encrypt later after the chaos is over.

@glowl @bonifartius

I did and actually installed it just a week ago after reading about it here on Mastodon!

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.