News for hackers. Stuff that matters.

A comment on Law Enforcement Gets Around Your Smartphone's Encryption. Parent comment

Re:Law Enforcement Gets Around Your Smartphone's Encryption by vaduz on Wednesday January 20, 2021 @02:25PM (#25850757)
> > To this they I still can't wrap my head around how can data on an Android phone be considered secure without requiring a long password at boot. Veracrypt style.

> it is considered secure only by Google. Android has DOS style security: an app which has access to storage has access to all your files.

That's true for most full-disk or file-based encryption systems, including VeraCrypt mentioned by GP - as soon as you unlock the given storage, any application that has read access to your storage has access to all your files.

[ Parent | on HN ]
Re:Law Enforcement Gets Around Your Smartphone's Encryption by waynecrescent on Wednesday January 20, 2021 @02:47PM (#25851044)
I should've clarified... I was imagining attack scenarios like a search warrant. i.e. the attackers finding your device in a powered off state. In the case of veracrypt, its reasonable to assume that your memory is the only thing holding the keys to the castle. Whereas in the case of android phones you are 100% at the mercy of whoever designed the security coprocessor.
[ Parent | on HN ]