I get the sense this is sarcastic lol. I’m my opinion though, privacy without security isn’t very useful. Yes I can avoid corporate or government spying when I’m in physical control of a device like this, but what if I get arrested on some false pretenses and they use cellebrite to gain access? Or the same at an airport when traveling? If you’re any form of political dissident, activist, or a member of a marginalized group, being targeted this way is a very real possibility. And as soon as that insecure but “private” device is out of your hands, all that data is free game for the govt.
political dissident, activist, or a member of a marginalized group
or a journalist or a politician. Vast majority of people aren’t any of those and don’t have to worry about cellebrite. Most people here that talk like Graphene OS is their only option really just need deGoogled device, not the most secure phone in the world.
but what if I get arrested on some false pretenses and they use cellebrite to gain access?
Chances are they can clone the eMMC and wait for a CVE. Or threaten or hold you until you cave. If a lawsuit is your only recourse, I would expect any constitutional barriers to be ignored in practice. Your best bet is to never end up being an explicit target, which may be more difficult for certain individuals.
My threat model considers dragnet surveillance as the primary threat, so I’d compromise on surviving dirty maid type attacks in favor of reducing the information my device gives out.
Obviously if your device is being actively exploited, you cannot be private. But your security requirements increase greatly if your data footprint indicates to them that you warrant targeted scrutiny.
Yeah, same for me. I’m sure I’m on top of CIA’s list of “people to hack” so no security compromises for me.
I get the sense this is sarcastic lol. I’m my opinion though, privacy without security isn’t very useful. Yes I can avoid corporate or government spying when I’m in physical control of a device like this, but what if I get arrested on some false pretenses and they use cellebrite to gain access? Or the same at an airport when traveling? If you’re any form of political dissident, activist, or a member of a marginalized group, being targeted this way is a very real possibility. And as soon as that insecure but “private” device is out of your hands, all that data is free game for the govt.
or a journalist or a politician. Vast majority of people aren’t any of those and don’t have to worry about cellebrite. Most people here that talk like Graphene OS is their only option really just need deGoogled device, not the most secure phone in the world.
Or you have a funny picture of Vance on your phone and immigration doesn’t allow you in
This is why threat modeling is important.
Chances are they can clone the eMMC and wait for a CVE. Or threaten or hold you until you cave. If a lawsuit is your only recourse, I would expect any constitutional barriers to be ignored in practice. Your best bet is to never end up being an explicit target, which may be more difficult for certain individuals.
My threat model considers dragnet surveillance as the primary threat, so I’d compromise on surviving dirty maid type attacks in favor of reducing the information my device gives out.
Obviously if your device is being actively exploited, you cannot be private. But your security requirements increase greatly if your data footprint indicates to them that you warrant targeted scrutiny.