nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqypdn5aq5ayeax6pu9wyas063d3afw9upkn9n6w3ne8q8lfwkka86czhf9sr (nprofile…f9sr) nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyqhzs84vpj5a33nnj408e4tf9nmpuc7rx248r3aa2wlnxk6kxr2szdkgfhq (nprofile…gfhq) Of course they have zero-days for mainline, I didn't imply that's not the case. Polish police likely has the bottom-tier devices they barely know how to operate (yes, I'm implying they're incompetent) and that's why they were unsuccessful.
"BFU (LUKS2)" postmarketOS is safe as there are no keys stored on the device. You could boot custom kernel + ramdisk to try and bruteforce but let's face it - it's not really feasible. They were unable to break LUKS2 encryption on friend's machines either.
You're right about runtime (or what you call "AFU"). pmOS has no protections against kernel exploits at the moment and that's something I really would like to change. The only thing you can do is to modify the devicetree to make USB controller work only in gadget mode, but then you can't connect USB drives, DACs, keyboards etc.
elly
npub17p…ra0st
2025-11-28 19:17:08 UTC
in reply to nevent1q…w0e9
Author Public Key
npub17p5uf3zjj0ycwmeqp2jxxxaveu6afqcfjecqjxggwy93jmvgfq6sura0stSeen on
wss://relay.ditto.pubPublished at
2025-11-28 19:17:08 UTCEvent JSON
{
"id": "b62b7d374bb2ee2fe6a4cd6d74959fb1ce8c57b3f662c5ce897b513a2ca69bc0",
"pubkey": "f069c4c45293c9876f200aa4631baccf35d483099670091908710b196d884835",
"created_at": 1764357428,
"kind": 1,
"tags": [
[
"p",
"5b3a7414e933d3683c2b89d83f516c7a971781b4cb3d3a33c9c07fa5d6b74fac",
"wss://relay.ditto.pub/"
],
[
"p",
"2e281eac0ca9d8c673955e7cd5692cf61e63c332aa71c7bd53bf335b5630d501",
"wss://relay.ditto.pub/"
],
[
"p",
"5468bceeb74ce35cb4173dcc9974bddac9e894a74bf3d44f9ca8b7554605c9ed",
"wss://relay.ditto.pub/"
],
[
"p",
"bc3df3f21432a58652a58b26bd6656cb1980eb069bdd72340b44c87ccbed6e05",
"wss://relay.ditto.pub/"
],
[
"e",
"4d6062d26a52589edb3cfe7b8d9dbf140075432626d008e48871c582f565d396",
"wss://relay.ditto.pub/",
"reply"
],
[
"proxy",
"https://donotsta.re/objects/b03ae634-8229-45a4-b767-6a39fd1d16bc",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "nostr:nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqypdn5aq5ayeax6pu9wyas063d3afw9upkn9n6w3ne8q8lfwkka86czhf9sr nostr:nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyqhzs84vpj5a33nnj408e4tf9nmpuc7rx248r3aa2wlnxk6kxr2szdkgfhq Of course they have zero-days for mainline, I didn't imply that's not the case. Polish police likely has the bottom-tier devices they barely know how to operate (yes, I'm implying they're incompetent) and that's why they were unsuccessful.\n\n\"BFU (LUKS2)\" postmarketOS is safe as there are no keys stored on the device. You could boot custom kernel + ramdisk to try and bruteforce but let's face it - it's not really feasible. They were unable to break LUKS2 encryption on friend's machines either.\n\nYou're right about runtime (or what you call \"AFU\"). pmOS has no protections against kernel exploits at the moment and that's something I really would like to change. The only thing you can do is to modify the devicetree to make USB controller work only in gadget mode, but then you can't connect USB drives, DACs, keyboards etc.",
"sig": "b85bbd76d6976500221df6d8dfc396e8b0641465f44bd50374e982f16c16e726df6b98fdc825d547d916ef8d51c6f45d3ae71873fb966761877e14d7b542370d"
}