[andrewflnr]

Why the hell doesn't the "duress PIN" just open up a sanitary profile? Bonus points for letting you set it up with plausible data before designating it as the duress profile that, when opened, wipes your real profile in the background.

> "the screen went blank, flashed several times, and the phone appeared to restart,"

How about flash some red lights and play an airhorn sound effect, too.

[Cider9986]

They would like to but it's not possible to make a robust feature like that because of low-level architecture of SSDs. Implementing a detectable solution would give people a false sense of security.

Also they can plant evidence if you unlock the phone.

https://nitter.net/GrapheneOS/status/2081471477174456340#m

[itake]

Just a guess… but they would just go back and ask him for the real pin if they saw the profile was empty.

My understanding is phone’s security model aren’t designed for multiple user accounts

[jeroenhd]

Android has had multiple users for many years, though it's a feature most smart phone brands turn off for some reason.

You can switch users just fine, you just cannot hide the primary user from the secondary user. Opening up the device also makes it a lot more vulnerable to attacks to dump the keys and storage.

Having multiple users is quite handy but it's not going to do anything at a border checkpoint that'll save you.

[ButlerianJihad]

Recent Android releases have a Private Space feature, where you can hide not just files, but entire apps, their data, notifications, etc.

https://support.google.com/android/answer/15341885?hl=en