3 ms·

And so law enforcement just uses GreyKey[1] and problem solved for them. [1] https://www.magnetforensics.com/products/magnet-graykey/ https://www.magnetforensi

And so law enforcement just uses GreyKey[1] and problem solved for them. [1] https://www.magnetforensics.com/products/magnet-graykey/ https://www.magnetforensics.com/products/magnet-graykey/

sparker72678 3y ago
Is it still the case that this product attempts to brute-force unlock the phone?
ssl232 3y ago
How does that work? Reading between the lines it sounds like it is device dependent, so at least obscure Android phone users might be safe...?
- forgotpwd16 3y ago
  Was going do the same question. And was more curious in the >When time is critical or access is restricted, selectively extract specific data you need to kick-start your investigation part. With full-device encryption, was expecting it would've been all or nothing.
  - yencabulator 3y ago
    For what it's worth, Android no longer supports full-device encryption, it encrypts filesystem subtrees. For a single-user phone, there's not much of a difference; your "user files" key is obtained from the hardware secret store when you type your PIN.
- yencabulator 3y ago
  I would assume security exploits, mostly targeting old unpatched versions, with some undisclosed 0days in the more expensive products. And against a modern Pixel/iPhone I would also expect the answer to how does it work to be "not so well". Consider the percentage of the population that uses a potato phone from 2018, consider the likelihood of them being the criminal in question, and the product starts working a lot better. Remember how FBI failed to decrypt the iPhone of some domestic terrorists: https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_dispute https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d... Also remember that lower-end Android hardware uses a different, cheaper, algorithm: https://en.wikipedia.org/wiki/Adiantum_(cipher) https://en.wikipedia.org/wiki/Adiantum_(cipher)
deleted 3y ago
[deleted]
kornhole 3y ago
Yes this ruling will increase the revenues for companies like this, Celebrite, the platforms, and data brokers. Unless of course it is my phone. ;)
fn-mote 3y ago
The existence of a temporary workaround does not mean the original right to refuse to provide your password is somehow bad or (perhaps more to your point) futile. Every barrier to surveillance makes it less likely. Increase the cost to decrease the behavior.

And so law enforcement just uses GreyKey[1] and problem solved for them. [1] https://www.magnetforensics.com/products/magnet-graykey/ https://www.magnetforensics.com/products/magnet-graykey/

sparker72678 3y ago

Is it still the case that this product attempts to brute-force unlock the phone?

ssl232 3y ago

How does that work? Reading between the lines it sounds like it is device dependent, so at least obscure Android phone users might be safe...?

forgotpwd16 3y ago
Was going do the same question. And was more curious in the >When time is critical or access is restricted, selectively extract specific data you need to kick-start your investigation part. With full-device encryption, was expecting it would've been all or nothing.
- yencabulator 3y ago
  For what it's worth, Android no longer supports full-device encryption, it encrypts filesystem subtrees. For a single-user phone, there's not much of a difference; your "user files" key is obtained from the hardware secret store when you type your PIN.
yencabulator 3y ago
I would assume security exploits, mostly targeting old unpatched versions, with some undisclosed 0days in the more expensive products. And against a modern Pixel/iPhone I would also expect the answer to how does it work to be "not so well". Consider the percentage of the population that uses a potato phone from 2018, consider the likelihood of them being the criminal in question, and the product starts working a lot better. Remember how FBI failed to decrypt the iPhone of some domestic terrorists: https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_dispute https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d... Also remember that lower-end Android hardware uses a different, cheaper, algorithm: https://en.wikipedia.org/wiki/Adiantum_(cipher) https://en.wikipedia.org/wiki/Adiantum_(cipher)

deleted 3y ago

[deleted]

kornhole 3y ago

Yes this ruling will increase the revenues for companies like this, Celebrite, the platforms, and data brokers. Unless of course it is my phone. ;)

fn-mote 3y ago

The existence of a temporary workaround does not mean the original right to refuse to provide your password is somehow bad or (perhaps more to your point) futile. Every barrier to surveillance makes it less likely. Increase the cost to decrease the behavior.