3 ms·
Not theoretically, at least. Even attackers that can read your RAM perfectly can be thwarted by encrypting things and unloading the keys from memory.
by lotyrin 11y ago
Not theoretically, at least.
Even attackers that can read your RAM perfectly can be thwarted by encrypting things and unloading the keys from memory.
- ultramancool 11y agoThose attackers could instead install a hardware based touch screen logger or write a similar attack in software and write it directly to your phone's flash. It's more complicated, but it's still true, once someone has physical access, all bets are off.
- lotyrin 11y agoYes, a device which has been accessed physically shouldn't be trusted anymore (theoretically) but I was talking about the case of a booted device being stolen by an attacker, not the case of one having been returned. In practice, If you can detect intrusion and the device has a secure boot system, wipe the device and issue it new keys, re-encrypt all data to the new keys with some backup cold-stored keys.