148
submitted 1 month ago* (last edited 1 month ago) by misk@sopuli.xyz to c/technology@lemmy.world
top 11 comments
sorted by: hot top controversial new old
[-] TechnoFish@lemm.ee 27 points 1 month ago

One good thing about windows phones was that hardly anyone would have been insane enough to spend resources to develop a forensic tool for it.

Lol, did you see what windows computers do? They literally upload your key to microsoft. Like they aren't event hiding the fact. If you don't create a microsoft account to allow for the upload, then they just store the key unencrypted and its effectively like no encryption.

[-] lud@lemm.ee 3 points 1 month ago

That's because people are stupid enough to never write down their keys and it's better to have somewhat worse encryption compared to no encryption.

In an enterprise the recovery keys are most often stored in AD or Entra.

[-] just_another_person@lemmy.world 24 points 1 month ago

Anyone have the linked docs from the article? Looks like archive didn't get them in time.

[-] GlenRambo@jlai.lu 3 points 1 month ago

Its linked in other commenters post

[-] jet@hackertalks.com 22 points 1 month ago* (last edited 1 month ago)
[-] WhyJiffie@sh.itjust.works 10 points 1 month ago

It's a bit ironic that on the forum the poster did not remove the tracking parameters from the google drive link

[-] muntedcrocodile@lemm.ee 8 points 1 month ago

So essentially grapheneos is keeping me safer than google lol.

[-] q5VtXnYt@infosec.pub 7 points 1 month ago

Always has been

[-] mac@lemm.ee 6 points 1 month ago* (last edited 1 month ago)

Has there been any information about how long physical access is needed for these attack methods to extract data?

I've got my auto restart set at 8 hours, in graphene's mastodon thread, they say 10 minutes is best for highest levels of security. The short time frame given in that thread makes me wonder if these exploits give instant access to data.

[-] jet@hackertalks.com 8 points 1 month ago* (last edited 1 month ago)

Typically the attacks don't take 10 hours.... they take seconds, what takes time is getting the captured device a laboratory and the laboratory having time to look at it. So what will happen usually is the phone is put into a faraday bag, hooked up to a usb charger, and put on a shelf until the laboratory can get around to it.

Once the lab starts attacking the phone, it could take seconds as I said above, but some attacks are more involved requiring the phone to be disassembled and leads soldered onto the board. The restarting is about reducing the time the lab has before they can start and finish their attack

The same process applies to computers and laptops as well, there are lots of mouse jigglers for sale to prevent a screen saver from going on.

this post was submitted on 19 Nov 2024
148 points (99.3% liked)

Technology

60112 readers
4312 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS