YoumuChan
Joined 3 years ago
Joined 3 years ago
For a corporate using an OS in work phones. The threat model is state/corp-sponsored actors. Trade secret leak is unacceptable. When in doubt, data should be wiped. Now wiping PIN makes total sense and is the only sensible option.
An ordinary person, on the other hand, often deals with non tech-savvy ordinary people. The threat model is different. Most likely plausible deniability is enough. The threat level is low. Those users may accept to trade some data security for a more friendly feature.
The ultimate question is whether Graphene envisions itself an opinionated OS that always follows the "best practice" or a generic OS that allows users to define their own threat models.
If the threat model is hiding from random people, I think a hidden profile works very well.
Now let's talk about motivated adversary as you put it. Hidden profile and wiping are not either-or, they can coexist. If one is really targeted by a motivated adversary, it should be apparent in most cases, and the targeted person can choose to enter the wiping PIN instead of the secondary profile PIN.
Now if one is targeted by a really motivated and threatening adversary, I don't think wiping PIN is any better than secondary profile PIN. The moment one chooses to wipe the phone, the adversary could be triggered by the action and harm the victim anyway.
[1] https://9to5google.com/2023/11/20/lineageos-number-of-device...
It has all the flavor of CRDT, but adds a leader and a different way for the total ordering (basically using leader's local lamport clock to break tie).
Throw in leader reelection and some ledger syncing and then give everything some other names, I bet you can have "collaborative text editing on one page".
One interesting question from audience was whether the ratio between the largest polygon piece and the smallest piece can be made bounded, as the current construction has unbounded ratio.
Material: stainless steel is much cheaper
Percentage of reusability: boosters of shuttle cannot be reused, maintenance of shuttle itself is also very expensive (heat shields were pricey). whereas the starship stack has higher reuse percentage and allegedly cheaper to maintain.
I don't think gov.uk would admit that they want to exclude those users.
This also means, you can use any LPA implementation to manage and install profiles on your own!
Some examples:
https://github.com/Truphone/LPAdesktop Needs a smart card reader and a pc to work
https://github.com/estkme-group/lpac Could either use a smart card reader or an actual modem with AT-support
https://gitea.angry.im/PeterCxy/OpenEUICC Needs a root on Android
Furthermore, I believe you could manage it via Windows settings if your window laptop has a WWAN card.