Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Surely whatever mechanism they are using cannot overcome device encryption?


Last I heard (see source) is that they can bypass the pinlock delay, making brute-force entry much more efficient. If you use a numeric pincode, even if 8 digits, "breaking the encryption" is well within their reach. If you use an alphanumeric+symbols password that 8 characters or longer, brute-forcing rapidly becomes impossible, even for cellebrite.

A running, unlocked phone may be hacked by zero days. Encryption at rest... currently no.

Any body have more details on these technical aspects ?

Source: https://arstechnica.com/information-technology/2018/02/celle...


What about a pattern?


Pattern is just a numeric lock underneath(the dots that you connect represent numbers on a numpad, on Android they even used to be saved in plaintext as a pin until Android 2.1 iirc).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: