4 ms·
“The Met has retained Rabbani’s phone and laptop and is continuing its efforts to examine the contents.” I'm guessing that means that it's encrypted and, since
by dsr_ 9y ago
“The Met has retained Rabbani’s phone and laptop and is continuing its efforts to examine the contents.”
I'm guessing that means that it's encrypted and, since he still hasn't given them the password, they are stuck.
The fine, the cost of a laptop and phone... altogether, I can't see this stopping terrorists, just making people's lives worse.
- komali2 9y agoAs always when this comes up, I wonder about the legality or "legality" of a remote wipe. I have the option using cerberus, and if I did so I'd have a hard time imagining how someone could prove I did it.
- ue_ 9y agoHow would you trigger a remote wipe?
- amiga-workbench 9y agoDead man switch
- rtkwe 9y agoThat's unlikely to work. Police forensics usually work with a drive image instead of with the device itself as much as possible to avoid damaging evidence either through allowing active measures like a dead mans switch or mishandling by investigators. Beyond that simply removing the dive and putting it in another computer would bypass any switch except one in the drive firmware itself. Are there any software out there designed to do that?
- amiga-workbench 9y agoWhat do they do with devices that have soldered in storage? Hilariously enough, an Intel Management Engine-esque system could come in handy here for nuking data.
- rtkwe 9y agoNot sure. Last time I read about these things soldered in storage wasn't really a thing. For some things where it's still largely a separate board they could probably just desolder it and attach it to another device via pogo pins or something. For monolithic boards you could attach wires directly to the chip given enough resources. IME could maybe be useful for this but it's hard to prevent the take the drive out and attach it to another machine without having firmware or a ME-like chip on the drive to make it wipe if it's connected to a different machine.
- subroutine 9y agoDoesnt every new Macbook Pro have a soldered-in SSD?
- rtkwe 9y agoYes though in this [0] teardown there's a comment at the bottom that makes it sound like there's an easy connector where the SSD CPU connection can be accessed which would probably allow non-destructive imaging without involving the CPU so no userland software could protect against imaging. > The funny connector to nowhere is the connector to tap into the SSD. When the Apple connector is mounted (as supplied) it connects the CPU to the SSD. When removed the signals for the SSD can be accessed. [0] https://www.ifixit.com/Teardown/MacBook+Pro+13-Inch+Touch+Bar+2017+Teardown/92171 https://www.ifixit.com/Teardown/MacBook+Pro+13-Inch+Touch+Ba...
- mmel 9y agoThey desolder it and resolder it into a platform to read it
- angry_octet 9y agoNot feasible with iPhones, as it is not possible to access the security processor memory. At least, not without some very sophisticated attack, e.g. using some sort of differential power analysis on the chip. Very expensive.
- patcheudor 9y agoIf you could get to it quick enough that is. I assume police departments these days have a procedure for cutting off wireless access to devices they confiscate by using radio frequency blocking bags. This of course brings up an interesting counter for actual terrorists, devices which don't fully power down and monitor for radio frequencies so if they are lost, the device automatically wipes itself.