Daniel McNaughton

@GrapheneOS Would you consider adding a sort of 'self wipe timer' config? Where I can set it on a 2-hour delay and if I fail to enter my unlock pin it'll trigger the same mechanism as the duress pin? That might be a cleaner legal option as an end user vs giving a cop a duress pin.

x.com/niemerg/status… This proposal wouldn't hide that a wipe occurred and would help adversaries exploit and recover data from the device. It isn't a new idea and people have proposed variations of this hundreds of time for years. These proposals wouldn't hold up against widely available forensic software. Giving an attacker access to a decoy profile would make it far easier for them to exploit the device. Without a shut down or reboot, a device was previously in After First Unlock state would be very vulnerable to having data extracted. GrapheneOS has strong protection against data extraction without depending on a duress PIN/password. The default enabled protections combined with a strong passphrase and 2nd factor fingerprint PIN would have provided fantastic protection for the data on the device. Reducing the device auto-reboot timer would be even better. The secure element would have protected the data with only a random 6 digit PIN instead of a passphrase in practice too. All of our features are designed to work against adversaries aware of GrapheneOS. Our duress PIN/password is no different. Adversaries aware of GrapheneOS face a dilemma about whether a PIN/password provided by the user is going to unlock the device or wipe it. It wasn't designed around being a secret resulting in an unpleasant surprise for an adversary. We also plan to provide it as part of secure element rate limiting on future devices built to run GrapheneOS to prevent bypassing it with an OS exploit. Triggering our duress PIN/password feature wipes both hardware keystores, the secure element as a whole and disk encryption metadata. Each of these 3 steps is enough on their own to reliably wipe material needed to obtain the key encryption keys for disk encryption. It happens nearly instantly and it wouldn't be secure if it took a bunch of time or depended on actually erasing any of the encrypted data. Shutting down the device triggers clearing sensitive data from RAM and registers to complete the process. It's necessary to clear a lot of sensitive data from memory and registers including decrypted encryption keys in TEE memory. Giving an adversary access to a profile on the device instead of shutting down or rebooting would be very problematic. It would give them an immense amount of attack surface for exploiting the device to recover sensitive user data. If the Owner user is in After First Unlock state, the adversary has given massive attack surface for exploiting the device to obtain all of the data from the main user. It would be the extreme opposite of the attack surface reduction and exploit protections provided by GrapheneOS. GrapheneOS and apps running on it could continue to function indefinitely after the key derivation material is wiped. It already has disk encryption keys loaded into Trusted Execution Environment memory and is using those for inline disk encryption via wrapped keys. Only functionality depending on hardware keys would be broken. If there were profiles in After First Unlock state those would still be available. An attacker exploiting the device would recover the same data as before wiping the key encryption keys. Forensic data extraction companies have access to GrapheneOS and we don't have access to their software. We cannot rely on security through obscurity or knowing how their software works including which vulnerabilities they exploit. Fooling widely available forensic software into believing a decoy profile is the Owner user isn't feasible. It would need to provide a fully functional Android Debug Bridge (ADB) environment which is completely impractical. People should consider the fact that they likely haven't thought about this nearly as much as us. There are good reasons for why we designed this feature the way we did and it's working as intended in the real world. The feature becoming widely known about is a requirement for it to work as intended by creating a dilemma for adversaries. The main thing we need now is secure element support for it which we can get implemented for future devices as part of our Motorola Mobility partnership and future OEM partnerships.

@trash196053474 @KC_Invests This is my read, they're waiting till it's close enough to the election both in the US and Israel (October). Best time to put the political squeeze via oil prices and desal plants is the week or two leading up to Israeli Knesset election. I hope I'm wrong and this all ends soon.

@KC_Invests My concern is that they are waiting about eight weeks out to do something Trump cannot fix by the election.

If Iran knows that oil prices are the breaking point for the US admin, due to rates, bond yields, etc. Why are they allowing the oil prices to be so suppressed by jawboning and social media posts? Their focus should be on increasing oil beyond an imaginable level

@calvinfroedge I just wish I had bought more USO today.

If oil is down 7% again tomorrow I'm flying to West Texas

@MashteryYT @tenyearsnow No way he'd beat McCain or Flake in a matchup, AZ won't flip blue for at least a generation.

@tenyearsnow Mark Kelly seems like a cool guy. I wish he would run for office, but I honestly don’t think a Democrat could win statewide in Arizona. I could see him returning to NASA in a few years.

Former representative and gun violence victim advocate Gabby Giffords and her husband astronaut Mark Kelly speak at the 2016 DNC

@Le_happy_can @rekdt Use data backups or personal sync tools to push your data off the device and onto a secure remote storage system. Whether that's a NAS or an S3 bucket. Mobile phones are not durable storage systems for critical data, too much risk of total loss or damage.

@rekdt That also risks a random person wiping your phone, or someone who hates you. In my freshman year of highschool, kids would decide to guess my pin for absolutely no reason

GrapheneOS should really add a time wipe feature if a pin is not entered within a defined amount of time, the device is wiped Hypothetically this takes the burden of allegedly destroying evidence away from the defendant

@EWess92 They're fundamentally different elections. The governor's primary election happened already. This special nomination is happening later this month for the November election.

Maine has a "sore loser" law that says a candidate that runs for one office and loses cannot run for another office in the same cycle. After Graham Platner dropped out, Maine Dems are poised to nominate Troy Jackson. But Jackson ran for Governor (and lost the primary). Eligible?

@katagious2 @ediblesticker @JamesSurowiecki @5suomynona It's pretty simple, this is for a different election. He filed to run on the primary election earlier this year for governor, this is an entirely different election since it's a different election day. He never filed for the November election so nothing stopping him.

@ediblesticker @JamesSurowiecki @5suomynona It doesn't seperate the two in the law, but that may be the argument they attempt. He's filed as a candidate twice. "A person may not file as a candidate for more than one federal, state or county office at any election." 21-A M.R.S. §331(3)(A)

GOP Rep. James White (Maine) points out that Troy Jackson may not legally be eligible to be the nominee for Senate.

@IkeNotabot @realtimsharp Most wireless protocols like WiFi and Bluetooth use static identifiers they broadcast in the clear to connect to other devices. Think of it as walking around always shouting your social security number. These scanners pick that up and build a database to track you.

Someone please help me understand more. When these devices identifies a key finder, phone, headphones, etc. are they finding "generic" signals of technologies commonly used in those devices... or is it more specific?Can it determine that a person is using headphones vs other bluetooth devices? Brand? Make/model? A single specific device?

THIS image is an image of Signal Trace from a company called Leonardo. SignalTrace is not separate from license plate reader surveillance, it is built to work with license plate readers. By pairing plate reads with signals from phones, watches, headphones, vehicles, key finders, and other electronics, it can create an “electronic fingerprint” tied to a vehicle or person and continue identifying them even when a plate is hidden, changed, missing, or unreadable. That means a Flock, Motorola, Axon network can become a people tracking network capable of revealing where someone travels, who they travel with, and which homes, workplaces, protests, churches, medical offices, or political events they visit. 6 degrees of separation track EVERYONE. In the wrong hands, this is not just traffic enforcement, it is the infrastructure for warrantless mass surveillance, guilt by association, and a permanent record of innocent people’s movements. There needs to be an ordinance with steep fines with criminal penalties for adding devices onto public power poles or poles without labeling. Right now, any company, private or public can come in and put sniffing devices on anything and get away with it. They can track the Mayor, track The police Chief, sports figures or other dignitaries that come to town, including all of us.

@secretised @joeymeere u256 is a ploy by Micron to make you use more RAM.

@joeymeere Why would you ever need u256????

your unit tests, sir

@ericlaw Offboarding a BYOD device should involve a reinstall of the OS. Just better for both parties.

This came up twice today, so it gets a blog post. Recently-departed MSFT employees who used BYOD devices might want to read this one. textslashplain.com/2026/07/22/off…

@ckumral_ @jealkeja The guy who used the LLM to solve it was a mathematician. Not a random non-expert asking ChatGPT to "solve quantum mechanics."

@jealkeja Read it yourself. The chat is available for one x.com/ckumral_/statu…

watched a youtube video on the voynich manuscript where he explained that academics are getting hounded by dimwits who are being told by their LLMs to harass people with their LLM developed theories

@Zoya_ki_batein Plenty of people with illnesses like cancer and Huntingtons who are serving lengthy sentences for drug possession, but this actual predator and danger to society basically walks free. Insanity.

A 36 year old man named Shaun Mckenna who violently raped a 13-year-old girl at a Highlands campsite, has been spared jail due to his life-limiting medical condition. He was diagnosed with the degenerative condition Huntington's Disease in 2022. The 13-year-old child was on holiday with her family in 2020. She was alone when he came in and pinned her down, lay on top of her, and raped her. The girl tried to fight him off, but he told her, "to stop crying and screaming as well as to shut up.” He said if she told anyone, “he would do it worse." McKenna also committed sex crimes against two other children before that. The judge said each offence on its own was a reason to go to jail, but did not feel prison would meet McKenna's specialised needs. He will instead be supervised at his care home in Kinross, where he is not allowed to leave on his own. This is beyond fucked up. Every man who rapes a child deserves to spend his life in prison

@ziotimscabin @JakeSherman Which itself is a new thing, previously it was a GOP trifecta.

@JakeSherman You cover the House, admittedly, but Arizona currently has a Dem governor and two Dem senators

Republicans have won Arizona in every presidential election since 1952 with the exception of 1996 and 2020.

@trustless_nyc @calvinfroedge Safer to have a day or two of downtime for a production rig than to risk damage from severe weather which could cause longer downtime.

@calvinfroedge Is this intentional sabotage by the admin or what? Trying to see the silver lining

"it's just a tropical depression and will only impact refineries"

@ScooterCasterNY It's a yellow curb, get the car towed.

Not sure who's press car keeps parking on top of the blood stain that's part of the vigil in Biddeford

@2nd_zoeyy You're right to push back.

I need to know who here is still an actual human. Say something human.

@AmazonMGMStudio Dr. Daniel Jackson from Stargate SG1

Drop a TV show character that is your idol.

@MichaelDavLange @nikicaga You'd need 3/4 vote of all Senators to eject a sitting senator.

@nikicaga I think Trump’s (tenth % baked) plan is to try to get enough dem senators removed from office, and replaced by republicans who would vote to get rid of the filibuster to pass the SAVE Act?

Unless they like, arrest them, what does this achieve except fire up Ossoff voters

@stupidtechtakes There's transport encryption and then there's actual E2E encryption. They're not the same.

"E2E encrypted via HTTPS"

@HunterEKozak This sort of thing was common as hell in the 90s/00s. Kids read a ton of books. Sad to see how a 300 page book is seen as crazy for a kid to read now.

I read the seventh Harry Potter cover to cover the same day I got it. I was 11. This isn’t to say I’m some savant. Kids are fully able to grasp and read and think on their own if you don’t clip their wings.