6 ms·

If you have physical access to the device, aren't all bets off anyways?

• lotyrin 11y ago
  Not theoretically, at least. Even attackers that can read your RAM perfectly can be thwarted by encrypting things and unloading the keys from memory.
  • ultramancool 11y ago
    Those attackers could instead install a hardware based touch screen logger or write a similar attack in software and write it directly to your phone's flash. It's more complicated, but it's still true, once someone has physical access, all bets are off.
    • lotyrin 11y ago
      Yes, a device which has been accessed physically shouldn't be trusted anymore (theoretically) but I was talking about the case of a booted device being stolen by an attacker, not the case of one having been returned. In practice, If you can detect intrusion and the device has a secure boot system, wipe the device and issue it new keys, re-encrypt all data to the new keys with some backup cold-stored keys.
• theGimp 11y ago
  Disk encryption is supposed to be the security measure that thwarts that, to an extent. The attacker can probably use your device, but if you have it set up correctly, they shouldn't be able to read your data.