5 ms·
I don't understand the seeming incongruity between these two statements: On the one hand: > One way to think about Cellebrite’s products is that if someone is
by Ansil849 6y ago
I don't understand the seeming incongruity between these two statements:
On the one hand:
> One way to think about Cellebrite’s products is that if someone is physically holding your unlocked device in their hands, they could open whatever apps they would like and take screenshots of everything in them to save and go over later. Cellebrite essentially automates that process for someone holding your device in their hands.
But on the other hand:
> We are of course willing to responsibly disclose the specific vulnerabilities we know about to Cellebrite if they do the same for all the vulnerabilities they use in their physical extraction and other services to their respective vendors, now and in the future.
If UFED just copies data from unlocked phones, why would they be using vulnerabilities to do so?
I guess my question is, is Cellebrite capable of copying locked devices, or more to the point - has vulnerabilities to unlock devices without knowing the access PIN?
- g_sch 6y agoBased on the post, it sounds like there's some data parsing going on (possibly to present the data in a user-friendly way?), and the parsing step uses outdated versions of software (such as ffmpeg) which have well-documented vulnerabilities in them.
- md_ 6y agoCellebrite claims, "Lawfully access locked devices with ease Bypass pattern, password or PIN locks and overcome encryption challenges quickly on popular Android and iOS devices" https://www.cellebrite.com/en/ufed/ https://www.cellebrite.com/en/ufed/
- supergirl 6y agothey could use vulnerabilities to extract more data. probably it's common to do some obfuscation of data which celebrite might have reverse engineered.
- dandelany 6y ago> is Cellebrite capable of copying locked devices, or more to the point - has vulnerabilities to unlock devices without knowing the access PIN? Yes, they even brag about it in their marketing materials: https://www.cellebrite.com/en/a-practical-guide-to-checkm8/ https://www.cellebrite.com/en/a-practical-guide-to-checkm8/ That's a public vunerability, it's anyone's guess how many nonpublic ones they're using.
- chevill 6y ago>If UFED just copies data from unlocked phones, why would they be using vulnerabilities to do so? I think what he meant to say was that if Cellebrite is used on your locked phone it could be the equivalent of a person having your unlocked phone in their hands where they can do whatever they want. Only cellbrite doesn't do look at random things, it grabs everything. Cellebrite devices are also frequently used by phone carriers to image your old phone and transfer the data to your newly purchased phone, to give you a clearer idea of what they can do.