3 ms·
Isn't this stupid? Why not flush something properly in the RAM instead to wipe the "cached" secrets? A full restart feels like an overkill.
by imcritic 1y ago
Isn't this stupid?
Why not flush something properly in the RAM instead to wipe the "cached" secrets?
A full restart feels like an overkill.
- subscribed 1y agoIt also terminates almost all malware and makes sure the device is encrypted and the keys cannot be extracted.
- davikr 1y agoThe system is provably fully encrypted after a restart.
- scarface_74 1y agoIt’s not just the RAM. Android devices and iOS devices are not that secure after first unlock (AFU). https://blogs.dsu.edu/digforce/2023/08/23/bfu-and-afu-lock-states/ https://blogs.dsu.edu/digforce/2023/08/23/bfu-and-afu-lock-s...
- MattPalmer1086 1y agoNot really. Restart - simple with known and predictable effects, data no longer accessible, all secrets flushed no matter where they were or cached. Turn off disk encryption, suspend all running services, overwrite all secrets in the O/S wherever they are, and then restore all that on entering password. Probably can't do anything about secrets cached by actual apps. Complex, hard to maintain and probably buggy.
- crote 1y agoThat "something" is at least the entire userspace, so any attempt at doing so ends up being UX-equivalent to a full restart - while having a decent chance of leaving unintended trace data lying around in memory. A full restart guarantees that everything will be wiped.
- deleted 1y ago[deleted]
- scarface_74 1y agoIt’s not about data being wiped. It’s that neither Android nor iOS has fully encrypted storage after you reboot and enter your credentials - biometric or passcodes.