Live data from Hacker News

Israeli firm can steal phone data in seconds

phys.org

41–50 of 120 posts

Re: Israeli firm can steal phone data in seconds

#42
post #2

"But privacy and rights activists worry such powerful technology can wind up in the wrong hands, leading to abuses." Am I to believe that this firm is the right hands? Or government? Please...all hands are the wrong hands. These vulnerabilities need to be closed. I wouldn't be surprised if the NSA or some other government tentacle was paying them not to make whatever they found known. Gee, I sound paranoid. What am I…

You highlight a kind of social disconnect among a segment of the population that are kind of eternal liberal optimist loyalists that have no problem trusting their parent, the government with any and all sorts of individual rights. It is precisely why some people simply cannot look through or past the notion that the government could somehow not be a benevolent parent that only has our best interest in mind and are thereby more than willing to cede all sorts of responsibilities and rights.

It is the frame of mind behind many different dualistic issues like gun rights, state's rights vs strong central power consolidation, immigration, education, etc.

Re: Israeli firm can steal phone data in seconds

#43
post #41

Sounds like an Apple advertisment.

That's what I was basically thinking. Combine that with the recent mass malware discoveries on hundreds of millions of android phone, it really makes you wonder why anyone with any sensitivity regarding these issues buy anything but Apple. On the flip side, it's really a massively missed opportunity for Apple to not be paying guerrilla marketing types to push all the bad press about Android all over the place off the books.

Re: Israeli firm can steal phone data in seconds

#45
What exactly is wrong with a company buying a product on the retail market and figuring out how it works? I thought we were "hackers" here and want to assert our rights to "own" our equipment. At least we know that exploits may be available and we know not to put complete trust in our device security.

Re: Israeli firm can steal phone data in seconds

#46
post #28

Sounds like a risky business to be in. If Apple decides to change their encryption technology, you could be out of business some time soon after a new release.

Your mistaken, looking at the forensic side of things burner phones are not your regular iphone or android.

E.g random article from bestbuy.

http://www.bestbuy.com/site/at-t-gophone-lg-b470-prepaid-cel...

Re: Israeli firm can steal phone data in seconds

#47
I wonder, if Ben-Peretz and his checks 250 researcher team can crack checks 150 phones a month what is stopping the // from forming a 2,500 researcher team and doing the same?

It's not like there's a shortage of relevant skills in the US (supposedly responsible for stuxnet) or Russia.

Or is it just that doesn't want to share its toys with ?

Re: Israeli firm can steal phone data in seconds

#48
Cellebrite is not that good at their job. They employ a few 0days for a few Android bootloaders, but in general most of their vulnerabilities used for extraction are either shitty or taken from the public which means if you have a fully patched Android device you're ok.

Owning a brand new IPhone 7 with SEP and encryption on would make them useless, for now.

A while ago there was a "leakage" which also included a few things which weren't supposed to be in the regular interwebs, while the files were quickly removed from their servers, a few people have managed to get what is needed.

On the other hand, remember that cellphones nowadays are quite fragile and should be used with caution regarding any sensitive information, if you have something important better keep it somewhere else, not on your cellphone.

This article is just a lame effort of their new "research", (more like PR), group manager to promote them, which he does in a perfect way, if only he had a proper job.

Re: Israeli firm can steal phone data in seconds

#49

I wonder, if Ben-Peretz and his checks 250 researcher team can crack checks 150 phones a month what is stopping the / / from forming a 2,500 researcher team and doing the same? It's not like there's a shortage of relevant skills in the US (supposedly responsible for stuxnet) or Russia. Or is it just that doesn't want to share its toys with ?

Ah well, with Mediatek based phones it's pretty easy - you can readback the whole storage once you have its partition map from a rooted device, or you know the size of its flash chip and figure out the partition bounds later.

Dunno about the situation with other phones but given that many cheap Androids run Mediatek, it's not very difficult to claim a huge number of "crackable phones".

The only thing that should protect you from any kind of government snoops is encrypting your phone with a strong passphrase and shutting it off once you leave a room taking the cops less than 30 seconds to enter.

Re: Israeli firm can steal phone data in seconds

#50
post #36
post #16

Earlier quoted context omitted.

Probably not, it's an Israeli firm.

Any sales to US firms could be curtailed or punished. Just like security itself - the goal is to provide enough barriers so predators go looking elsewhere for easier prey.

> Any sales to US firms could be curtailed or punished.

That doesn't really restrict the NSA, CIA, FBI or any other agency/PD from buying their services. After all, that's what "black budgets" are for.

Post reply on HN