3 ms·
Those attackers could instead install a hardware based touch screen logger or write a similar attack in software and write it directly to your phone's flash. It
by ultramancool 11y ago
Those attackers could instead install a hardware based touch screen logger or write a similar attack in software and write it directly to your phone's flash. It's more complicated, but it's still true, once someone has physical access, all bets are off.
- lotyrin 11y agoYes, a device which has been accessed physically shouldn't be trusted anymore (theoretically) but I was talking about the case of a booted device being stolen by an attacker, not the case of one having been returned. In practice, If you can detect intrusion and the device has a secure boot system, wipe the device and issue it new keys, re-encrypt all data to the new keys with some backup cold-stored keys.