3 ms·
As time goes on the cost of physical attacks increases. This was more true in the 90s when secure boot and FDE weren’t a thing, sure it’s still possible but it’
by hsbauauvhabzb 4y ago
As time goes on the cost of physical attacks increases. This was more true in the 90s when secure boot and FDE weren’t a thing, sure it’s still possible but it’s much harder now.
- CommitSyn 4y agoSecureboot and FDE will still protect against this. The attack in the linked video just uses a flipper zero to mimic someone holding your phone and disabling protections then installing malware. Even if the phone was on, unencrypted, and locked it would fail. Edit: I initially misunderstood where you were coming from. Yes, today things are more secure, but if someone has unfettered physical access to your device they can just as easily install hardware that waits for you to login and then do these things or replace your charger plug (on a mobile device) or use a modified Bluetooth or USB proxy to keylog (on a full device). We're of course getting into high-level corporate attacks at that point if to be unnoticed (i.e. no popups, prompts, unexpected changes), so the average user is much more safe.
- hsbauauvhabzb 4y agoPretty much, iOS jailbreaks were common and free, now they’re worth millions (assuming they can be exploited remotely). At some point, if you have physical access and the device pin, you should assume it’s game over, but there may also be a point in time where we no longer care about physical security as much, if at all.