Hello, I’m new to GrapheneOS and wondering how is it more/less secure than a BlackBerry Key 2?
Conversation
Replying to
BlackBerry Key 2 isn't even close to matching the security of a Pixel running the stock OS. It has far worse hardware / firmware security and runs an outdated version of Android without all the optional security features. It's only branded as being private and secure. That's it.
1
1
GrapheneOS takes AOSP and makes substantial privacy and security improvements beyond the baseline. It also doesn't bundle Play Services, which is itself a massive privacy improvement. What does the BlackBerry Key 2 have other than bundling dubious apps with encryption backdoors?
1
2
BlackBerry builds in encryption backdoors to their services - in cases where they even offer E2E encryption at all. They use legacy cryptography too.
Anyway, TCL makes the Key 2, not BlackBerry. They just licensed their branding and apps to them.
It's not at all comparable.
1
2
Replying to
Thank you for the detailed response. Any thoughts on how resistant GrapheneOS is to Cellebrite? In other words, how secure is my data when I cross an international border or get stopped by the police and have my phone seized?
1
Replying to
It has substantial hardening against exploitation along with attack surface reduction such as disabling adding new USB peripherals after the device has been unlocked. There are per-profile encryption keys and strong hardware/firmware protections for encryption. Won't find better.
1
3
If you set a strong passphrase for the profile and reboot the device first, you aren't depending on any of that aside from defending against a persistent compromise. Not sure what any of this is going to accomplish for you if they simply coerce you into unlocking your device.
Aside from perhaps using profiles and claiming that one of the secondary profiles had the passphrase set by someone else so you can't unlock it. Each profile has separate keys so unlocking one doesn't enable decrypting the other profiles. Hardware support is per-profile too.
2