3 ms·
> Without a secure element, a 6 digit PIN is no longer secure and can be bruteforced. Thanks for providing an actual example which we can use as a realistic re
by WhyNotHugo 1y ago
> Without a secure element, a 6 digit PIN is no longer secure and can be bruteforced.
Thanks for providing an actual example which we can use as a realistic reference.
Right now such device can run OSs which ship first party spyware. If GrapheneOS supported those devices, they’d be usable with an OS without that spyware, which is a net improvement. The security issue of “a PIN can be brute-forced” exists regardless of OS.
- mbananasynergy 1y agoIt has always been the goal of the project to provide security and privacy features while maintaining usability. People are expected to acquire a device to use GrapheneOS rather than us supporting as many devices as possible where we cannot offer the same protections. We're hoping to have a non-Pixel device that actually meets the projects requirements in the near future, potentially. Our requirements aren't exotic and OEMs are confirming that they're well within their capabilities. We'll focus on working with OEMs interested in shipping secure devices in order to expand our offerings, which should offer more choices for potential users as well.