News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

kicksecure and GrapheneOS encryption secure? : OpSec | Torhoo darknet markets

Is the kicksecure and GrapheneOS system encryption secure? Can it be cracked by the police?
/u/DirectorGosnell
1 points
3 months ago
should be fine for now, just make sure to keep it BFU if you ever have to hand it over.
/u/royce34 📢
1 points
3 months ago
What is BFU?
/u/DirectorGosnell
1 points
3 months ago
Before first unlock

phones that have been rebooted but not unlocked are still fully encrypted and cannot be accessed without the password, compared to an afu state where the key is already loaded into memory, so it can be accessed by an exploit if law enforcement were to obtain it while it was in an AFU state, so make sure to reboot your phone if you ever hand it over.
/u/royce34 📢
1 points
3 months ago
Thanks!
/u/ringct
1 points
3 months ago
It all comes down to your passwords. There are no known vulnerabilities or weaknesses as of now.
Use a strong passphrase for your LUKS (6/7 words), disable fingerprint unlock on your pixel and use a strong pin/password.
That's all you can do.
The encryption is still not cracked. The weak point is still the user, password strength, fingerprint unlock, pick you favorite.

Also note that a smart phone is packed with tons of sensors spying on you 24/7. You should never carry with you any sensors powered ON during your sensitive operation. You cannot know what it leaks and how your the usage of the device already provided an intelligence against you.

If you cannot rice the device heavily SW & HW, if you were not trained in proper security procedures and routines, don't use it. It is a serious OpSec failure that should be avoided.
/u/restless0
1 points
3 months ago
Yea it is, but avoid phones at any cost that's the best advice I can give to you.