News for hackers. Stuff that matters.

A comment on Leaker reveals which Pixels are vulnerable to Cellebrite phone hacking.

Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by aussieguy1234 on Thursday October 30, 2025 @11:49PM (#45768219)
I've set up GrapheneOS on my Pixel with 2FA fingerprint + PIN unlock. No way will anyone be getting into it without my cooperation.

My only issue was less compatibility with my local emergency services, since they can't see me on a map for some reason if I call from a GOS phone.

My solution to that was a second Pixel as an emergency phone - one with the stock OS, that I'll swap sims with and take with me when hiking, stand up paddle bording and doing other activities that carry risk. This phone has no sensitive information in it. I also have a PLB for added protection.

[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by fluidcruft on Friday October 31, 2025 @06:54AM (#45770609)
Is there anything actually preventing Samsung or another vendor from adopting GrapheneOS's security innovations?
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by immibis on Friday October 31, 2025 @05:15PM (#45776786)
Probably their legal obligation to comply with secret government orders (FISA, NSL etc - the government probably already said don't make unhackable phones or else) and their informal wish to remain on the regime's good side.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by astrange on Sunday November 02, 2025 @11:39PM (#45795937)
Samsung is not an American company and what you're claiming would conflict with other countries' laws, namely EU Cyber Resilience Act.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by joemazerino on Friday October 31, 2025 @05:47PM (#45777068)
The hardware Samsung provides is not up to spec.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by russianGuy83829 on Friday October 31, 2025 @05:50PM (#45777093)
GrapheneOS is seemingly working with an OEM to make a GrapheneOS smartphone. Its probably not samsung, but would still be an established vendor
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by DANmode on Friday October 31, 2025 @07:25PM (#45777825)
It better not be Samsung...
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by Andromxda on Saturday November 01, 2025 @12:02PM (#45782715)
It isn't Samsung
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by preisschild on Saturday November 01, 2025 @03:12PM (#45784439)
They are not making a "GrapheneOS smartphone", they are just helping providers make their new devices compatible with the security requirements, so GrapheneOS can be installed on it. But GrapheneOS will not come by default AFAIK.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by Andromxda on Tuesday November 04, 2025 @03:47PM (#45815701)
It's totally possible that there will be an option to buy the device with GrapheneOS preinstalled https://grapheneos.social/@GrapheneOS/114749924008111970
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by chopin on Sunday November 02, 2025 @03:38AM (#45788782)
I'd love this for a Fairphone.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by Andromxda on Tuesday November 04, 2025 @03:43PM (#45815676)
It definitely won't be Fairphone. See https://discuss.grapheneos.org/d/24134-devices-lacking-stand...

https://grapheneos.social/@GrapheneOS/115379774100353715 and

https://grapheneos.social/@GrapheneOS/114874684738751793

[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by DANmode on Friday October 31, 2025 @07:28PM (#45777842)
Willingness to pay great developers and engineers to build secure hardware,

understanding sec,

them observing actual demand for security.

History says don't hold your breath.

We get lucky once in a while, like with Google's hardware (without their software).

[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by usdogu on Friday October 31, 2025 @05:03PM (#45776669)
Obligatory https://xkcd.com/538
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by throawayonthe on Friday October 31, 2025 @05:27PM (#45776893)
https://grapheneos.org/features#duress :D
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by IncreasePosts on Friday October 31, 2025 @05:46PM (#45777064)
Use that and you'll get charged with destruction of evidence
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by falleng0d on Friday October 31, 2025 @06:09PM (#45777233)
if you're relying on such feature, you'll probably serve less time being charged with destruction of evidence...
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by ifh-hn on Friday October 31, 2025 @07:04PM (#45777687)
How would they know? Genuine question, I don't run GOS.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by aussieguy1234 on Friday October 31, 2025 @10:00PM (#45778668)
If the Duress PIN is an obvious one, it may be one of the first ones your adversaries try. Like 1111 for example. So you may not even have to tell them the Duress PIN for them to attempt it.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by ThePowerOfFuet on Saturday November 01, 2025 @03:14AM (#45779793)
They'll have to prove it.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by matheusmoreira on Saturday November 01, 2025 @12:40PM (#45783081)
Surely that's better than being charged with whatever crime they're trying to pin on you?
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by aftbit on Saturday November 01, 2025 @03:33PM (#45784589)
It depends, often the cover up is worse than the crime. See: Enron, Watergate, Trevor Jacob
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by Stefan-H on Friday October 31, 2025 @05:05PM (#45776691)
Cooperation under duress is still cooperation.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by DANmode on Friday October 31, 2025 @05:04PM (#45776670)
First I’m hearing Graphene causes issues with E911 - is this a setting?
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by ranger_danger on Friday October 31, 2025 @11:45PM (#45779092)
Is it E911 or an A-GPS issue?
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by Andromxda on Saturday November 01, 2025 @02:43AM (#45779687)
GrapheneOS provides PSDS, SUPL (which are enabled by default IIRC) and an optional Wi-Fi based location provider, so there shouldn't be any positioning issues with E911
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by DANmode on Saturday November 01, 2025 @06:15AM (#45780552)
Thought so.

I do wonder what this guy’s on about, hope he comes back.

[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by tredre3 on Friday October 31, 2025 @05:33PM (#45776947)
> My solution to that was a second Pixel as an emergency phone

Picking a Pixel specifically as an emergency phone is quite the choice, given years of on and off 911 issues.

[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by DANmode on Friday October 31, 2025 @07:24PM (#45777817)
...with the Google software.
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by sigio on Friday October 31, 2025 @08:08PM (#45778083)
Don't know if/how this works in the US, but the EU emergency number can always be called without a simcard/subscription, so no need to swap simcards. (And sometimes even from a locked phone)
[ Parent | on HN ]
Re:Leaker reveals which Pixels are vulnerable to Cellebrite ... by danielhep on Saturday November 01, 2025 @02:04PM (#45783842)
US is the same. I dialed 911 once as a child from an American phone in Indonesia without a SIM card in it. Freaked out and hung up.
[ Parent | on HN ]