V dal\u0161\u00edm aktualizaci zabezpe\u010den\u00e9 mobiln\u00ed platformy GrapheneOS 2024053100 byla p\u0159id\u00e1na funkce nouzov\u00e9ho blokov\u00e1n\u00ed dat na za\u0159\u00edzen\u00ed. U\u017eivatel m\u00e1 mo\u017enost nastavit dodate\u010dn\u00e9 heslo a PIN, jejich\u017e zad\u00e1n\u00ed povede k vymaz\u00e1n\u00ed v\u0161ech kl\u00ed\u010d\u016f v hardwarov\u00fdch \u00falo\u017ei\u0161t\u00edch, v\u010detn\u011b kl\u00ed\u010d\u016f pou\u017e\u00edvan\u00fdch pro \u0161ifrov\u00e1n\u00ed dat na disku, a tak\u00e9 k vymaz\u00e1n\u00ed eSIM a restartu. T\u00edmto zp\u016fsobem, pokud je na u\u017eivatele vyv\u00edjen n\u00e1tlak k odem\u010den\u00ed obrazovky nebo p\u0159i hrozb\u011b, \u017ee se smartphone dostane do nespr\u00e1vn\u00fdch rukou, m\u016f\u017ee vlastn\u00edk za\u0159\u00edzen\u00ed zadat destruktivn\u00ed PIN a blokovat data bez mo\u017enosti obnoven\u00ed p\u0159\u00edstupu. <\/p>\n
Projekt GrapheneOS rozv\u00edj\u00ed odvozeninu od k\u00f3dov\u00e9 z\u00e1kladny Android (AOSP, Android Open Source Project), kter\u00e1 byla roz\u0161\u00ed\u0159ena a modifikov\u00e1na za \u00fa\u010delem zv\u00fd\u0161en\u00ed bezpe\u010dnosti a zaji\u0161t\u011bn\u00ed ochrany soukrom\u00ed. Ofici\u00e1ln\u011b jsou podporov\u00e1ny v\u011bt\u0161ina aktu\u00e1ln\u00edch za\u0159\u00edzen\u00ed Google Pixel (Pixel 4\/5\/6\/7\/8, Pixel Fold, Pixel Tablet). V\u00fdsledky projektu jsou distribuov\u00e1ny pod licenc\u00ed MIT. Obsahuje mnoho experiment\u00e1ln\u00edch technologi\u00ed zam\u011b\u0159en\u00fdch na zv\u00fd\u0161en\u00ed izolace aplikac\u00ed, podrobn\u00e9 \u0159\u00edzen\u00ed p\u0159\u00edstupu, blokaci projev\u016f typick\u00fdch zranitelnost\u00ed a zt\u00ed\u017een\u00ed pr\u00e1ce exploit\u016f. <\/p>\n
Nap\u0159\u00edklad platforma pou\u017e\u00edv\u00e1 vlastn\u00ed implementaci malloc a modifikovanou variantu libc s ochranou proti po\u0161kozen\u00ed pam\u011bti, stejn\u011b jako p\u0159\u00edsn\u011bj\u0161\u00ed rozd\u011blen\u00ed adresn\u00edho prostoru proces\u016f. M\u00edsto JIT v Android Runtime se pou\u017e\u00edv\u00e1 pouze anticipativn\u00ed (AOT, ahead-of-time) kompilace. V j\u00e1dru Linuxu jsou zahrnuty mnoh\u00e9 dal\u0161\u00ed ochrann\u00e9 mechanismy, nap\u0159\u00edklad v slub jsou p\u0159id\u00e1v\u00e1ny kan\u00e1rkov\u00e9 zna\u010dky pro blokaci p\u0159ete\u010den\u00ed buffer\u016f. Pro zv\u00fd\u0161en\u00ed izolace aplikac\u00ed jsou vyu\u017eity SELinux a seccomp-bpf. <\/p>\n
Existuje mo\u017enost selektivn\u00edho poskytov\u00e1n\u00ed p\u0159\u00edstupu jednotliv\u00fdm aplikac\u00edm k s\u00ed\u0165ov\u00fdm operac\u00edm, senzor\u016fm, adres\u00e1\u0159i a perifern\u00edm za\u0159\u00edzen\u00edm (USB, kamer\u00e1m). Ve v\u00fdchoz\u00edm nastaven\u00ed je zak\u00e1z\u00e1no z\u00edsk\u00e1v\u00e1n\u00ed \u00fadaj\u016f o IMEI, MAC adrese, s\u00e9riov\u00e9m \u010d\u00edsle SIM karty a dal\u0161\u00edch hardwarov\u00fdch identifik\u00e1torech. \u010cten\u00ed ze schr\u00e1nky je povoleno pouze aplikac\u00edm, ve kter\u00fdch je aktu\u00e1ln\u011b aktivn\u00ed vstupn\u00ed fokus. Jsou zahrnuta dal\u0161\u00ed opat\u0159en\u00ed pro izolaci proces\u016f spojen\u00fdch s Wi-Fi a Bluetooth a prevenci \u00fanik\u016f zp\u016fsoben\u00fdch bezdr\u00e1tovou aktivitou. Mnoho z mechanism\u016f zv\u00fd\u0161en\u00ed bezpe\u010dnosti vyvinut\u00fdch v r\u00e1mci projektu bylo p\u0159esunuto do hlavn\u00ed k\u00f3du Android. <\/p>\n
V GrapheneOS se pou\u017e\u00edv\u00e1 kryptografick\u00e1 verifikace na\u010d\u00edtan\u00fdch komponent\u016f a roz\u0161\u00ed\u0159en\u00e1 \u0161ifrov\u00e1n\u00ed dat<\/a> na \u00farovni souborov\u00fdch syst\u00e9m\u016f ext4 a f2fs (data jsou \u0161ifrov\u00e1na pomoc\u00ed AES-256-XTS, a n\u00e1zvy soubor\u016f \u2014 AES-256-CTS za pou\u017eit\u00ed HKDF-SHA512 k vygenerov\u00e1n\u00ed samostatn\u00e9ho kl\u00ed\u010de pro ka\u017ed\u00fd soubor), a nikoli blokov\u00e9ho za\u0159\u00edzen\u00ed. Data v syst\u00e9mov\u00fdch odd\u00edlech a v ka\u017ed\u00e9m u\u017eivatelsk\u00e9m profilu jsou \u0161ifrov\u00e1na r\u016fzn\u00fdmi kl\u00ed\u010di. Vyu\u017e\u00edvaj\u00ed se dostupn\u00e9 hardwarov\u00e9 schopnosti k urychlen\u00ed \u0161ifrovac\u00edch operac\u00ed. Na obrazovce s uzam\u010den\u00edm se zobrazuje tla\u010d\u00edtko pro ukon\u010den\u00ed relace, po jeho\u017e stisknut\u00ed jsou kl\u00ed\u010de pro de\u0161ifrov\u00e1n\u00ed resetov\u00e1ny a \u00falo\u017ei\u0161t\u011b je p\u0159evedeno do neaktivovan\u00e9ho stavu. Existuje nastaven\u00ed pro z\u00e1kaz instalace dal\u0161\u00edch aplikac\u00ed ve vybran\u00fdch u\u017eivatelsk\u00fdch profilech. Pro ochranu p\u0159ed hrub\u00fdm silov\u00fdm \u00fatokem je zapot\u0159eb\u00ed syst\u00e9m zpo\u017ed\u011bn\u00ed, kter\u00fd z\u00e1vis\u00ed na po\u010dtu ne\u00fasp\u011b\u0161n\u00fdch pokus\u016f (od 30 sekund do 1 dne). <\/p>\n Do GrapheneOS z\u00e1sadn\u011b nezahrnuje aplikace a slu\u017eby Google, ani alternativn\u00ed implementace t\u011bchto slu\u017eeb, jako je microG. Z\u00e1rove\u0148 je v\u0161ak mo\u017en\u00e9 nainstalovat slu\u017eby Google Play do odd\u011blen\u00e9ho izolovan\u00e9ho prost\u0159ed\u00ed, kter\u00e9 nem\u00e1 \u017e\u00e1dn\u00e1 speci\u00e1ln\u00ed opr\u00e1vn\u011bn\u00ed. Projekt tak\u00e9 vyv\u00edj\u00ed n\u011bkolik vlastn\u00edch aplikac\u00ed zam\u011b\u0159en\u00fdch na ochranu informac\u00ed a soukrom\u00ed. Mezi nimi jsou nap\u0159\u00edklad prohl\u00ed\u017ee\u010d Vanadium zalo\u017een\u00fd na Chromiu a modifikovan\u00e1 verze enginu WebView, chr\u00e1n\u011bn\u00fd PDF prohl\u00ed\u017ee\u010d, firewall, aplikace Auditor pro verifikaci za\u0159\u00edzen\u00ed a odhalov\u00e1n\u00ed naru\u0161en\u00ed, aplikace pro pr\u00e1ci s fotoapar\u00e1tem zam\u011b\u0159en\u00e1 na zaji\u0161t\u011bn\u00ed soukrom\u00ed a syst\u00e9m pro vytv\u00e1\u0159en\u00ed \u0161ifrovan\u00fdch z\u00e1loh Seedvault. \u0412 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b GrapheneOS 2024053100 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0438 PIN-\u043a\u043e\u0434\u0430, \u0432\u0432\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u043e\u0447\u0438\u0441\u0442\u043a\u0435 \u0432\u0441\u0435\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u043e\u0447\u0438\u0441\u0442\u043a\u0435 eSIM \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116317","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Na Android platform\u011b GrapheneOS se objevila mo\u017enost vytvo\u0159en\u00ed destruktivn\u00edho PIN k\u00f3du | ProHoster","description":"V dal\u0161\u00edm aktualizaci zabezpe\u010den\u00e9 mobiln\u00ed platformy GrapheneOS 2024053100 byla p\u0159id\u00e1na funkce nouzov\u00e9ho uzam\u010den\u00ed dat na za\u0159\u00edzen\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-android-platforme-grapheneos-poyavilas-vozmozhnost-sozdaniya-destruktivnogo-pin-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Android-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 GrapheneOS \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e PIN-\u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b GrapheneOS 2024053100 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-android-platforme-grapheneos-poyavilas-vozmozhnost-sozdaniya-destruktivnogo-pin-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-04T07:39:49+00:00","article:modified_time":"2026-02-15T20:08:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116317","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-15 20:09:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:41:19","updated":"2026-02-15 20:09:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116317","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=116317"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116317\/revisions"}],"predecessor-version":[{"id":161178,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116317\/revisions\/161178"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=116317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=116317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=116317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"