<![CDATA[Android has USB data and a large number of USB drivers available including while locked.]]>Android has USB data and a large number of USB drivers available including while locked. Plug in a mouse, keyboard, external drive or other USB accessory and you'll see that's the case. When Android says charging-only, it means not allowing file transfer.

]]>https://forum.fedi.dk/topic/c35c4178-c6ce-4a54-8087-56c2bb017558/android-has-usb-data-and-a-large-number-of-usb-drivers-available-including-while-locked.RSS for NodeMon, 24 Aug 2026 19:34:15 GMTTue, 11 Aug 2026 22:58:50 GMT60<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 23:52:08 GMT]]>isn't shutting down or restarting the phone safer option?

]]>https://forum.fedi.dk/post/https://cyberfurz.social/users/Polixgen/statuses/117085223545965322https://forum.fedi.dk/post/https://cyberfurz.social/users/Polixgen/statuses/117085223545965322Wed, 12 Aug 2026 23:52:08 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 14:47:11 GMT]]>@GrapheneOS
"but we convinced Google to eliminate most of that attack surface for Pixels."

Do you mean to say, someone on the GrapheneOS team reached out to someone at Google, and asked them to fix a known backdoor actively exploited by law enforcement, and google just complied?

This seems like a completely out of character move for Google.

Why would they help the GOS foundation in any way?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/libreovergratis/statuses/117083080725722574https://forum.fedi.dk/post/https://mastodon.social/users/libreovergratis/statuses/117083080725722574Wed, 12 Aug 2026 14:47:11 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 12:48:58 GMT]]>@c_th1 Yes, this disables all data transfer capabilities in the USB controller. Unless you're worried about forensics companies somehow exploiting the firmware of the USB controller itself, which is unlikely, but not impossible, considering that some companies seem to specifically hire people with knowledge and understanding of the USB protocol/hardware, as well as GrapheneOS.

https://grapheneos.social/@GrapheneOS/117005499941456851

If you're really worried about these kinds of things, you can disable USB completely and use wireless charging to charge your device. Or you can at least disable USB completely when you're at an airport, or crossing a border.

]]>https://forum.fedi.dk/post/https://infosec.space/users/Andromxda/statuses/117082615872301211https://forum.fedi.dk/post/https://infosec.space/users/Andromxda/statuses/117082615872301211Wed, 12 Aug 2026 12:48:58 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 11:18:46 GMT]]>@mancube @GrapheneOS @AndyGravesGrimeSoul yes an USB mode tile is a nice idea

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/xav/statuses/117082261187916766https://forum.fedi.dk/post/https://fosstodon.org/users/xav/statuses/117082261187916766Wed, 12 Aug 2026 11:18:46 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 08:57:43 GMT]]>@GrapheneOS
❌️ charging only
✅️ charging mostly

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116782131040590223/statuses/117081706555031384https://forum.fedi.dk/post/https://mastodon.social/ap/users/116782131040590223/statuses/117081706555031384Wed, 12 Aug 2026 08:57:43 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 02:33:47 GMT]]>@a53bdb @AndyGravesGrimeSoul Note they lost their ability to extract data from GrapheneOS devices when provided with the PIN/password in late 2024. It took months for the documentation to be updated to clarify the capability had been lost for newer versions. We don't expect that to remain the case since the attack surface for an unlocked device where they can use developer options including Android Debug Bridge is massive.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117080196859866504https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117080196859866504Wed, 12 Aug 2026 02:33:47 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 02:17:47 GMT]]>@GrapheneOS
could this become a tile like WiFi, location, hotspot etc? it'd be nice to be able to toggle USB settings more easily than digging for it in menus

the couple times a month that I drive and want to use android auto I have to go digging 😥
@AndyGravesGrimeSoul

]]>https://forum.fedi.dk/post/https://pnw.zone/users/mancube/statuses/117080133964517632https://forum.fedi.dk/post/https://pnw.zone/users/mancube/statuses/117080133964517632Wed, 12 Aug 2026 02:17:47 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Wed, 12 Aug 2026 02:02:59 GMT]]>@AndyGravesGrimeSoul @GrapheneOS

When the Cellebrite Premium support matrix is leaked in 2024, they can only exploit a specific version of GrapheneOS that is released in 2022. When it’s leaked again in 2025, they had no progress. And GrapheneOS has internal access to support matrix, it is said that it still has no progress.

https://discuss.grapheneos.org/d/27698-new-cellebrite-capability-obtained-in-teams-meeting/

https://discuss.grapheneos.org/d/20968-grapheneos-still-not-vulnerable-to-cellebrite-device-exploitation-as-of-feb-2025/

https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation/

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/115708520941968066/statuses/117080075744415451https://forum.fedi.dk/post/https://mastodon.social/ap/users/115708520941968066/statuses/117080075744415451Wed, 12 Aug 2026 02:02:59 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:41:00 GMT]]>@GrapheneOS @AndyGravesGrimeSoul thanks for the clarification, I didn't know about all those different modes it could charge in. The off setting has a string that mentions charging the device while powered off, I forgot to mention that.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/UninterestedNerd/statuses/117079517468885481https://forum.fedi.dk/post/https://mastodon.social/users/UninterestedNerd/statuses/117079517468885481Tue, 11 Aug 2026 23:41:00 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:36:26 GMT]]>@GrapheneOS @snosrapkungfu just curious, could GrapheneOS ever get Argon2id for the KDF? I know it's be no small task but it'd be amazing somewhere down the road.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079499514703250https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079499514703250Tue, 11 Aug 2026 23:36:26 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:31:20 GMT]]>@snosrapkungfu @AndyGravesGrimeSoul GrapheneOS has a duress PIN/password feature:

https://grapheneos.org/features#duress

It can be entered anywhere the PIN/password is requested by the OS across every profile on the device. It can also be entered as a 2nd factor fingerprint PIN which is another feature added by GrapheneOS.

It near instantly wipes key material needed to derive key encryption keys. It can't be bypassed by imaging and restoring SSD data due to secure element and hardware keystore integration.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079479476186867https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079479476186867Tue, 11 Aug 2026 23:31:20 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:28:32 GMT]]>USB vulnerabilities are widely exploited. It's used against journalists, activists, dissidents and others at border crossings, protests and elsewhere. Android 16+ has opt-in protection but it's far weaker than our default and blocks installing apps from outside the Play Store.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079468464956042https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079468464956042Tue, 11 Aug 2026 23:28:32 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:28:32 GMT]]>@AndyGravesGrimeSoul @GrapheneOS I think making use of tech like pam duress whereby one can enter a 'trash everything' pin instead of the normal pin, on the lockscreen has mileage. not sure if anyone's tried that with graphene.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/snosrapkungfu/statuses/117079468454240647https://forum.fedi.dk/post/https://mastodon.social/users/snosrapkungfu/statuses/117079468454240647Tue, 11 Aug 2026 23:28:32 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:22:31 GMT]]>@agowa338 You can see many of the replies at https://nitter.net/linuxuser1996/status/2086757738055389637. We wrote several responses and copy-pasted those to dozens of the replies. Most of the people who replied said they have the feature on their standard Android device when they don't. They believe the standard Android USB menu is the same thing when it isn't at all. Android Advanced Protection Mode added in Android 16 is similar to the software part of our feature but not as good and it's missing the hardware-level blocking.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079444766386724https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079444766386724Tue, 11 Aug 2026 23:22:31 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:19:57 GMT]]>@UninterestedNerd @AndyGravesGrimeSoul Setting it to Off disables USB including charging in the regular OS boot mode.

It will still charge in the special OS boot modes: charging, recovery, fastbootd and rescue. Charging mode is what boots when you plug the device into a charger while it's turned off and shows the battery percentage on the screen.

It can also still charge while powered off and in the firmware boot modes: fastboot mode and boot ROM recovery mode.

It can't brick the device.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079434688601850https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079434688601850Tue, 11 Aug 2026 23:19:57 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:18:22 GMT]]>@GrapheneOS I have a question that might not have an answer, in terms of offense and defense in this context, do you think one will eventually gain a mostly permanent lead? Or will it always be a game of cat and mouse?

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079428453816977https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079428453816977Tue, 11 Aug 2026 23:18:22 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:15:37 GMT]]>@GrapheneOS

Also I don't have an X account (anymore) and can't see your reply (nor can I enlarge the picture either).

Wonder if it switches the data from cellular or wifi over to lan automatically though.

]]>https://forum.fedi.dk/post/https://chaos.social/users/agowa338/statuses/117079417675199772https://forum.fedi.dk/post/https://chaos.social/users/agowa338/statuses/117079417675199772Tue, 11 Aug 2026 23:15:37 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:13:50 GMT]]>@agowa338 Yes, it has all of the USB peripheral functionality enabled. You can also plug in a display and it will connect to it, although current Android will prompt before mirroring the screen to it.

Android's main USB menu only controls the USB gadget mode and has nothing to do with the device Android is running on using USB peripherals itself. iOS works similarly.

Many users misunderstand Android's standard approach.

See the replies to https://x.com/linuxuser1996/status/2086757738055389637 for why we posted this thread.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079410633145911https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079410633145911Tue, 11 Aug 2026 23:13:50 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:12:50 GMT]]>@AndyGravesGrimeSoul @GrapheneOS yes, wireless charging works independently from USB regardless of settings. On GrapheneOS, there's an "Off" option for the USBC port that even blocks charging, so wireless would really be the only way to charge your phone while it's booted into the os.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/UninterestedNerd/statuses/117079406726804055https://forum.fedi.dk/post/https://mastodon.social/users/UninterestedNerd/statuses/117079406726804055Tue, 11 Aug 2026 23:12:50 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:11:34 GMT]]>@AndyGravesGrimeSoul Yes, wireless charging still works with the USB-C port mode set to Off. Setting it to charging-only provides most of the security value but we decided to offer the ability to fully disable it in case there are ever USB-PD vulnerabilities in the USB controller. USB-PD is a secondary form of limited data which could be used to exploit the USB controller itself, turn on USB data and then reach the remaining attack surface for USB in the kernel despite drivers being off.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079401714161488https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079401714161488Tue, 11 Aug 2026 23:11:34 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:09:55 GMT]]>@GrapheneOS

Hmm, wonder if you can plug a usb to ethernet adapter in and if the phone will automatically switch over to it while in charging-only mode.

]]>https://forum.fedi.dk/post/https://chaos.social/users/agowa338/statuses/117079395228269615https://forum.fedi.dk/post/https://chaos.social/users/agowa338/statuses/117079395228269615Tue, 11 Aug 2026 23:09:55 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:08:33 GMT]]>@GrapheneOS does wireless charging work regardless of USB settings? If so I could just live off of that and never really use the USB port.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079389839253951https://forum.fedi.dk/post/https://mastodon.social/ap/users/116479258220553617/statuses/117079389839253951Tue, 11 Aug 2026 23:08:33 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 23:03:38 GMT]]>GrapheneOS blocks new USB connections while locked by default at both a software and hardware level. It can be enabled while unlocked too. It can even be set to fully disable USB while booted including USB-PD and other charging functionality. More info:

https://grapheneos.org/features#usb-c-port-and-pogo-pins-control

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079370556996097https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079370556996097Tue, 11 Aug 2026 23:03:38 GMT<![CDATA[Reply to Android has USB data and a large number of USB drivers available including while locked. on Tue, 11 Aug 2026 22:59:50 GMT]]>Standard Android USB charging-only mode does not block new USB connections. It only means the device Android is running on isn't acting as a USB peripheral such as a webcam, MTP or MIDI device itself. USB debugging is another of those gadget modes which can be on simultaneously.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079355558848576https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/117079355558848576Tue, 11 Aug 2026 22:59:50 GMT