logoalt Hacker News

Cider9986 • today at 3:46 PM • 6 replies • view on HN

For those who don't know, automatic reboot restarts your device if you haven't unlocked it in a set amount of time. Cellebrite and other digital forensics companies are able to get into AFU devices much more often. The automatic reboot feature was first introduced by GrapheneOS and was later added to iOS and stock Pixels.

GrapheneOS's default is 18 hours and it can be set to between 10 minutes and 72 hours. iPhones and Stock pixels have it non customizable at 72 hours.

On GrapheneOS, for privacy and convenience, it's best to use a long random passphrase [1] for your primary unlock and then a fingerprint with a second factor pin as the secondary unlock. You enter the passphrase every time the device restarts.

If you're encountering someone that's going to seize your phone, try to restart/shut it down yourself so you don't have to trust the AFU protections.

[1] https://strongphrase.net give memorable ones which is cool.


Replies

iamnothere • today at 4:23 PM

Never use a website to generate a password for something important like this. You can print out diceware passwords and roll dice.

➕ show 2 replies
fluidcruft • today at 5:54 PM

Why not automatically power down if any unknown USB device is attached?

➕ show 2 replies
dylan604 • today at 4:11 PM

> On GrapheneOS, for privacy and convenience, it's best to use a long random passphrase

Why do you call out just one OS? It's a good idea for any OS.

➕ show 3 replies
NetMageSCW • today at 9:14 PM

Note that the iPhone also can be set to use a complicated password instead of a PIN and it will require it on first unlock.

burningChrome • today at 7:50 PM

>> then a fingerprint with a second factor pin as the secondary unlock

Unless you have a 4 or 4XL which are pretty popular with graphene os users. The weird thing is the 4 and 4XL are the only models without fingerprint because Google was pushing its #D Face Unlock System at the time.

The funny part is Graphene by default now disables face unlock on newer Pixel models.

23ahGa17 • today at 4:04 PM

People believed the reboot feature last time GrapheneOS was mentioned. It is of course nonsense.

Shut down the phone in areas with a high snatch risk. That means during landing for example, because the aircraft can be boarded covertly if on the ground.

➕ show 4 replies