← Back to context

Comment by andrewflnr

15 hours ago

Why the hell doesn't the "duress PIN" just open up a sanitary profile? Bonus points for letting you set it up with plausible data before designating it as the duress profile that, when opened, wipes your real profile in the background.

> "the screen went blank, flashed several times, and the phone appeared to restart,"

How about flash some red lights and play an airhorn sound effect, too.

Just a guess… but they would just go back and ask him for the real pin if they saw the profile was empty.

My understanding is phone’s security model aren’t designed for multiple user accounts

  • Android has had multiple users for many years, though it's a feature most smart phone brands turn off for some reason.

    You can switch users just fine, you just cannot hide the primary user from the secondary user. Opening up the device also makes it a lot more vulnerable to attacks to dump the keys and storage.

    Having multiple users is quite handy but it's not going to do anything at a border checkpoint that'll save you.