91–99 of 99 posts
Earlier quoted context omitted.
They absolutely make rings w/NFC tags. At least men's rings, I assume they may do it for women's too.
Neat. Does android support NFC for the bootup FDE decrypt?
Earlier quoted context omitted.
On the other hand, phones do not need to be rebooted often. And if I'm upgrading my OS the stupid thing is going to make me wait 20 minutes while it precompiles every app, so screw it I don't care if I have to spend 40 seconds inputting a password.
Right, but it may reboot at the most inopportune moments, like after the battery runs out, and where you may not have access to the 20 character long master password which is impossible to remember.
Earlier quoted context omitted.
Isn't Android running a really old Linux because they can't rebase? So they have to cherry pick... or has that stopped now?
No, but they tend to stick to the LTS releases and the kernel tends to not get a version update for the life of the device. So it doesn't track the latest, but it's also not "really old" in that upstream Linux still considers it a supported version.
$ uname -a
Linux localhost 3.10.73-gef93fe9 #1 SMP PREEMPT Fri May 20 20:48:13 UTC 2016 aarch64 Android
Fascinating article, the more I learn about crypto and security the more obvious it becomes how hard this stuff is to get right.
You know, I'm not really all that certain that it's intellectually difficult to get crypto right; it feels more likely that it's organisationally and process-wise difficult to get crypto right. What I mean is that folks want to take an existing product and layer crypto atop it, when really they need to start from the crypto and built a product over it. They want to do things which are mathematically impossible (e.g.…
Replace "crypto" by just about any software engineering endeavor, and what you say is still correct.
Could someone explain how and why it uses "0x1337" in order to validate the key? Is that magic? https://github.com/laginimaineb/android_fde_bruteforce/blob/...
Earlier quoted context omitted.
Neat. Does android support NFC for the bootup FDE decrypt?
I doubt it. But you might not prefer it to, depending on the threats you want to secure against. If you had extremely valuable secrets, someone could just execute you and use your NFC jewelry to unlock those secrets.
Earlier quoted context omitted.
Neat. Does android support NFC for the bootup FDE decrypt?
I doubt it. But you might not prefer it to, depending on the threats you want to secure against. If you had extremely valuable secrets, someone could just execute you and use your NFC jewelry to unlock those secrets.
Earlier quoted context omitted.
Sorry for an extremely nooby question, but your comment makes me wonder: Are Snapdragon and Exynos architectures that alike? I mean, do you have any preliminary idea how easy it would be to apply your Snapdragon method to an Exynos SoC?
Actually, I would imagine they are nothing like one another. However, Exynos uses a TrustZone TEE implementation to implement the KeyMaster module, just like Qualcomm's Snapdragon. This means that unless that TEE implementation uses a hardware key which is not software accessible, the same issue would be present. Of course, reverse-engineering a new TEE implementation would take a long time... But it sounds like it c…
You should be aware that people like you are unsung heroes and I'd like you to know that many of us who are busy struggling to stay afloat are feeling better knowing that people like you are doing the work you do.
Have that in mind. I wish you well.
Earlier quoted context omitted.
There is no getting it "right" just less wrong; aka "perfect" security does not exist.
"perfect" security does not exist. For that matter, I think what "perfect security" could be like is the world in Orwell's 1984 --- definitely not something I'd want existing either.