Authenticated transport encryption such as HTTPS for web sites avoids trusting the +
Authenticated transport encryption such as HTTPS for web sites avoids trusting the cellular network. End-to-end encrypted protocols such as the Signal messaging protocol also avoid trusting the servers. GrapheneOS uses authenticated encryption with modern protocols, forward secrecy and strong cipher configurations for our services. We only @@ -711,6 +711,14 @@ (unencrypted communications / data transfer) would be foolish and doomed to failure.
+GrapheneOS does not add gimmicks without a proper threat model and + rationale. We won't include flawed heuristics to guess when the cellular + network should be trusted. These kinds of features provide a false sense of + security and encourage unwarranted trust in cellular protocols and carrier + networks as the default. These also trigger false positives causing + unnecessary concern and panic. The correct approach is avoiding trusting the + network as explained above.
+Connecting to your carrier's network inherently depends on you identifying yourself to it and anyone able to obtain administrative access. Activating airplane mode will fully disable the cellular radio transmit and receive capabilities, which will prevent @@ -726,13 +734,6 @@ intended for attack surface reduction. It should not be mistaken as a way to make the cellular network into something that can be trusted.
-GrapheneOS does not add gimmicks without a proper threat model and rationale. We - won't include flawed heuristics to guess when the cellular network should be trusted. - These kinds of features provide a false sense of security and encourage unwarranted - trust in cellular protocols and carrier networks as the default. These also trigger - false positives causing unnecessary concern and panic. Make good use of authenticated - encryption and airplane mode to avoid needing to depend on an insecure network.
-Receiving a silent SMS is not a good indicator of being targeted by your cell carrier, police or government because anyone on the cell network can send them including yourself. Cellular triangulation will happen regardless of whether @@ -742,6 +743,9 @@ alerts for silent SMS but rather would be ignored with the rest of the spam. Regardless, sending texts or other data is not required or particularly useful to track devices connected to a network for an adversary with the appropriate access.
+ +Airplane mode is the only way to avoid the cellular network tracking your + device and works correctly on the devices we support.