4 ms·

Can they compel you to give your phone's password? Otherwise, when in Cali I'm just going to use a password to lock my iPhone

by tibbon 16y ago

tptacek 16y ago
Password locking your iPhone is not a forensically secure technique. A better idea would be to keep anything incriminating off it, and (obviously) not to get arrested.
- tibbon 16y ago
  Actually the best way would seem to be some device that would instantly disable the iPhone if you were pulled over. I somehow doubt they are going to start confiscating everyone's phones with dead batteries (with no other reason for arrest or search) just to check the contents. "I'm sorry officer, my phone's battery is dead so I clearly wasn't texting while driving. Am I being detained, or am I free to go?" But probably the easiest thing to do is to quickly slide your phone into a compartment (not hidden, just closed) in your car when you get pulled over. Then they must get a warrant to search your car. Most cops don't push it to this level unless you actually did do something.
- liuhenry 16y ago
  I know that the iPhones are notoriously bad at securing data when the device is on, but what about the remote wipe option? It's my understanding that 3GS and 4 phones have encrypted HDDs, with the remote wipe clearing the keys. I'm no expert, but wouldn't that be equivalent to any other disk encryption technique (which, to my knowledge, is practically unbreakable if keys are unavailable)?
  - Xuzz 16y ago
    If they power it off, using the same exploits as the iPhone jailbreaks (and using forensic tools by Jonathan Zdziarski; http://twitter.com/JZDZIARSKI http://twitter.com/JZDZIARSKI) they can easily recover the data. Before the boot-up ROM used on the iPhone was exploited, though, this was much more difficult (if not impossible).
eneveu 16y ago
Time to try out WhisperSystem's android app? http://www.whispersys.com/ http://www.whispersys.com/ Odly enough, I heard about this thanks to the US government! It is developed by Marlinspike, who was recently detained at the US border, and was mentioned in the Wired article: http://www.wired.com/threatlevel/2010/11/hacker-border-search/ http://www.wired.com/threatlevel/2010/11/hacker-border-searc...

Can they compel you to give your phone's password? Otherwise, when in Cali I'm just going to use a password to lock my iPhone

by tibbon 16y ago

Can they compel you to give your phone's password? Otherwise, when in Cali I'm just going to use a password to lock my iPhone

tptacek 16y ago

Password locking your iPhone is not a forensically secure technique. A better idea would be to keep anything incriminating off it, and (obviously) not to get arrested.

tibbon 16y ago
Actually the best way would seem to be some device that would instantly disable the iPhone if you were pulled over. I somehow doubt they are going to start confiscating everyone's phones with dead batteries (with no other reason for arrest or search) just to check the contents. "I'm sorry officer, my phone's battery is dead so I clearly wasn't texting while driving. Am I being detained, or am I free to go?" But probably the easiest thing to do is to quickly slide your phone into a compartment (not hidden, just closed) in your car when you get pulled over. Then they must get a warrant to search your car. Most cops don't push it to this level unless you actually did do something.
liuhenry 16y ago
I know that the iPhones are notoriously bad at securing data when the device is on, but what about the remote wipe option? It's my understanding that 3GS and 4 phones have encrypted HDDs, with the remote wipe clearing the keys. I'm no expert, but wouldn't that be equivalent to any other disk encryption technique (which, to my knowledge, is practically unbreakable if keys are unavailable)?
- Xuzz 16y ago
  If they power it off, using the same exploits as the iPhone jailbreaks (and using forensic tools by Jonathan Zdziarski; http://twitter.com/JZDZIARSKI http://twitter.com/JZDZIARSKI) they can easily recover the data. Before the boot-up ROM used on the iPhone was exploited, though, this was much more difficult (if not impossible).

eneveu 16y ago

Time to try out WhisperSystem's android app? http://www.whispersys.com/ http://www.whispersys.com/ Odly enough, I heard about this thanks to the US government! It is developed by Marlinspike, who was recently detained at the US border, and was mentioned in the Wired article: http://www.wired.com/threatlevel/2010/11/hacker-border-search/ http://www.wired.com/threatlevel/2010/11/hacker-border-searc...