4 ms·
I looked into why I was unable to use a secure encryption password on android devices about a year ago and i was shocked to find the AOSP bug that was over a de
by kelsey98765431 2y ago
I looked into why I was unable to use a secure encryption password on android devices about a year ago and i was shocked to find the AOSP bug that was over a decade old identifying a max 16 character encryption password, and was absolutely floored to see CyanogenFraud now called LineageOS had willingly not patched this until literally the very latest release, which was not available for my one plus device at that time.
16 character max for a decade is a juicy rainbow table for the small cost of a few petabytes, something most law enforcement is easily capable of paying for.
Between the devils I know I much prefer my apple mobile devices, even with a fix applied I wonder about the intentions of a team that ignored security concerns for over a decade (both Alphabet and Lineage)
- e12e 2y ago> 16 character max for a decade is a juicy rainbow table for the small cost of a few petabytes Surely the kdf is salted and not prone to rainbow table attack? If it is, that's a flaw on its own - and much more serious than a 16 character limit? log2((2*26+10+10)^16) ~98bits of entropy - that's nothing to sneeze at?