4 ms·
> Physical access will always be king No. Your wording suggests that once attackers gain physical access, all is lost. It is not true. With a passphrase based
by netheril96 3y ago
> Physical access will always be king
No. Your wording suggests that once attackers gain physical access, all is lost. It is not true. With a passphrase based full disk encryption, if the passphrase is strong and the machine is powered off, physical access doesn't imply data access.
- antegamisou 3y agoYou still have to defend against cold boot attacks or very sophisticated hardware implants: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies?leadSource=uverify%20wall https://www.bloomberg.com/news/features/2018-10-04/the-big-h...
- Laaas 3y agoAttach a microphone to the device while they are not looking, decode the keys they are pressing from the sounds, figure out what keys are the password, done. This is _trivial_ for any mildly sophisticated attacker.
- coppsilgold 3y agoYou don't even need to attach it, other placements are sufficient as well. An example of how an attack can be performed: <https://github.com/shoyo/acoustic-keylogger https://github.com/shoyo/acoustic-keylogger> Room bugged = keyboard keylogged