Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Serious flaws in the way Samsung phones encrypt key material in TrustZone

twitter.com

Post reply on HN
Print view View original

61–70 of 91 posts

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#61

Post by roblabla »

sissjdb wrote: post #58
d-gearloose wrote: post #29

Earlier quoted context omitted.

That's kind of the thing with Microsoft's bitlocker as well. It automatically decrypts the hard drive on boot, so the only thing it could protect you from is someone removing the hard drive and mounting it somewhere else. But if they have physical access to the device, why would they do that?

Physical access does not imply easy arbitrary code execution. Consoles are largely protected by the same technology, how often do you see people achieving code execution on them by tampering with the hardware?

All the time? Hardmods have been a thing since the first consoles, all the way down to the latest Nintendo Switch.

Also, consoles are "protecting" not the user, but the manufacturer - which is exactly the point people are trying to make.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#62

Post by nest0r »

sissjdb wrote: post #58
d-gearloose wrote: post #29

Earlier quoted context omitted.

That's kind of the thing with Microsoft's bitlocker as well. It automatically decrypts the hard drive on boot, so the only thing it could protect you from is someone removing the hard drive and mounting it somewhere else. But if they have physical access to the device, why would they do that?

Physical access does not imply easy arbitrary code execution. Consoles are largely protected by the same technology, how often do you see people achieving code execution on them by tampering with the hardware?

No post body was provided.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#63

Post by noisy_boy »

4pkjai wrote: post #2

I used a Samsung phone for a few months, it gave me the strong impression that they really don't know how to develop software properly.

I have been using Samsung phone/earbuds/watch for a while now and I think the software experience is quite good (coming from Oxygen OS on OnePlus 6 (great) and having used Apple devices (stifling) in the past ). Their heavy handed UI/UX are things of past - One UI 4 has plenty of customization/useful features while being reasonably light (e.g. it has a feature that lets you force dark mode on apps that don't support it which is surprisingly handy). In terms of integration (which Apple is famed for), everything works seamlessly: when I take out the earbuds, the audio automatically routes to them, the watch syncs automatically with the phone with pretty decent exercise/fitness tracking out of the box, the app selection for the watch has improved due to them using Wear OS etc. Sure, there are some Samsung apps I don't care to use but that is not getting in my way. Their privacy record is a weak point indeed and it is unfortunate that we don't have any competitor in Android space that has the same or better level of polish while keeping privacy a priority.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#64

Post by matheusmoreira »

qiqitori wrote: post #6

I personally don't like how it's possible to store data on my device without me being able to access the data. Also most of the time these keys are used for DRM. So... good IMO.

These companies think we are the ememy they must secure their devices against. Users having total control offends these corporations because we become too powerful and subversive. What are their little copyrights when we can read and copy everything? What are their little monopolies when we can customize, side load, debug, reverse engineer?

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#66

Post by tragictrash »

tpxl wrote: post #37
dachryn wrote: post #33

Earlier quoted context omitted.

unironically, the Huawei p30 is a great android phone. Stable software, not a lot ofbloatware, and acceptably fast security updates. Real shame they are not allowed to make Android phones anymore. I genuinely believe Samsung is a bigger security and data leakage threat nowadays than Huawei was a few years ago

> Real shame they are not allowed to make Android phones anymore. Harmony OS for phones is a fork of Android.

They mean Google Play certified phones, not Android.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#67

Post by philistine »

scim-knox-twox wrote: post #18
account-5 wrote: post #16

Earlier quoted context omitted.

This is my impression as an unhappy Samsung smart TV owner, despite being a happy owner of an older Samsung "dumb" TV; the reason I bought their crappy smart TV.

LG does the same. I bought good OLED and still, I had to connect pihole to block ads... New LG's are even worse. I don't know what I do if my current TV will stop working. I want only display, I don't want any additional features (ads, personalization etc.).

TCL and many other manufacturers use Roku For their OS. I’m on my second tv with it, and have never connected either to the internet, without any issues.

That’s what you want.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#68

Post by philistine »

dachryn wrote: post #33
octoberfranklin wrote: post #22

Earlier quoted context omitted.

I have never had any other impression of any smartphone. Probably why I don't carry one.

unironically, the Huawei p30 is a great android phone. Stable software, not a lot ofbloatware, and acceptably fast security updates. Real shame they are not allowed to make Android phones anymore. I genuinely believe Samsung is a bigger security and data leakage threat nowadays than Huawei was a few years ago

You’re rewriting history. Huawei was blocked from Android access due to it being deemed an asset of the Chinese government. Not because it was leaking any data.

Re: Serious flaws in the way Samsung phones encrypt key material in TrustZone

#69

Post by dbrgn »

ChuckNorris89 wrote: post #9
peterangular wrote: post #8

Earlier quoted context omitted.

Was in their ecosystem for about four years before going to Google Pixels - I find your experience to be very true. It was truly night and day.

> before going to Google Pixels Which isn't any better IMO. Most recent Pixels have been a buggy mess from launch. Google doesn't see to give a damn about the quality of their devices which is especially bad considering they come at flagship prices. On the other side, my mom's cheap Samsung A52 has been great so far.

I have a Pixel 3a and it has been working flawlessly. Best phone I've owned so far.

I've heard a lot of complains from Pixel 4a and 6 owners though, about bugs in the OS and drivers... Not sure if these issues are widespread or not.

Post reply on HN