News for hackers. Stuff that matters.
Re:Insider Attack Resistance by mtgx on Thursday May 31, 2018 @04:32PM (#17199947)
> This constraint forces an attacker to focus on the user that actually has the password.

The irony is that while the Android development team is doing this, the Google business and cloud services teams are increasingly gathering more data from the Android users, and encouraging them to put as much of their data on Google's servers as possible. And Google can give access to that data because it doesn't use end-to-end or homomorphic encryption.

Re:Insider Attack Resistance by ucaetano on Thursday May 31, 2018 @04:46PM (#17200077)
You'd need a court order to get that data from Google, but not to get the data from a seized phone. That court order might also be challenged by Google.

That applies especially to non-law enforcement actors. Those can't get a court order to force Google to hand over the data.