Re:A Message to Our Customers
by JoshTriplett on Wednesday February 17, 2016 @12:03PM
(#11119274)
With a sensibly-built phone, that SIM card does not have the ability to access anything of value on the device.
[ Parent
| on HN ]
Is there a list of sensibly built phones available? I'd like to buy a phone where the modem and SIM do not have access to main memory (AIUI most phones use a single-chip SoC with a built-in modem).
Re:A Message to Our Customers
by an_account on Wednesday February 17, 2016 @12:37PM
(#11119565)
What's the point of accessing main memory in a locked and encrypted phone?
Re:A Message to Our Customers
by JoshTriplett on Wednesday February 17, 2016 @03:48PM
(#11121237)
Main memory is rarely encrypted, unless you have special security features in your CPU to do so. Only the disk is encrypted; main memory is vulnerable while running. Also see https://en.wikipedia.org/wiki/Cold_boot_attack
So you don't want any hardware to have access to main memory if it doesn't need to. For instance, you can use an IOMMU to ensure that devices can only access the specific areas the OS wants to allow them to DMA to/from, not all of memory.
> What's the point of accessing main memory in a locked and encrypted phone?
The phone isn't always locked and encrypted; for example, whenever the user is using the phone it's unlocked and decrypted.