4 ms·
Mostly academia and nation states. Physical access will always be king and this provides one more avenue for adversaries to bypass encryption more easily.
by drakythe 3y ago
Mostly academia and nation states. Physical access will always be king and this provides one more avenue for adversaries to bypass encryption more easily.
- netheril96 3y ago> Physical access will always be king No. Your wording suggests that once attackers gain physical access, all is lost. It is not true. With a passphrase based full disk encryption, if the passphrase is strong and the machine is powered off, physical access doesn't imply data access.
- antegamisou 3y agoYou still have to defend against cold boot attacks or very sophisticated hardware implants: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies?leadSource=uverify%20wall https://www.bloomberg.com/news/features/2018-10-04/the-big-h...
- Laaas 3y agoAttach a microphone to the device while they are not looking, decode the keys they are pressing from the sounds, figure out what keys are the password, done. This is _trivial_ for any mildly sophisticated attacker.
- coppsilgold 3y agoYou don't even need to attach it, other placements are sufficient as well. An example of how an attack can be performed: <https://github.com/shoyo/acoustic-keylogger https://github.com/shoyo/acoustic-keylogger> Room bugged = keyboard keylogged