4 ms·
Since most apps are syncing with something behind cloudflare, an AWS, Azure or GCP endpoint doing MiTM, I am pretty sure all they need is get a warrant and ask
by prmoustache 2y ago
Since most apps are syncing with something behind cloudflare, an AWS, Azure or GCP endpoint doing MiTM, I am pretty sure all they need is get a warrant and ask those companies to get a valid certificate, poison DNS and wait for the smartphone to give out its credentials to the forensic lab.
People should never use apps that sync to something else than their own servers.
- chneu 2y agoHow would apps grant access to all the phones data though? Sure, they could intercept Google or Facebook or Microsoft, but I don't see how theyd get full access to the phone without an OEM helping them. Apps are sandboxed. I don't see how it's possible.
- jjav 2y ago> Apps are sandboxed. I don't see how it's possible. How many phone apps there are these days that are strictly local storage and don't communicate externally to anywhere? It's all cloud cloud cloud, which means it is most likely passing through one or more MITM points.