News for hackers. Stuff that matters.
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by tgsovlerkhgsel on Wednesday April 21, 2021 @04:49PM (#26895261)
They don't have to read that.

The defense lawyers have to read it, and the people in law enforcement need to read the cases where judges throw out Cellebrite evidence based on that.

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by syshum on Thursday April 22, 2021 @12:24PM (#26904605)
The problem with that is the cases would need to get to the discovery stage.

95% of all criminal cases in the US are Plead out largely because the defendant can not afford competent legal representation

This is why all kinds of questionable investigative tactics are still used even some that have clearly been ruled unconstitutional, they know most of the time it will not matter, they just need to get enough to make an arrest, the system will destroy the person anyway no conviction needed, and most likely the person will plead guilty even if innocent just to make the abuse stop

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by z77dj3kl on Thursday April 22, 2021 @12:34PM (#26904726)
Do all defendants not have the right to an attorney in criminal cases?

If evidence is obviously (or with high chance) disputable, then it puts pressure even in those cases where the attorney recommends the defendant to eventually plead.

Or maybe the attorneys available to those who can't afford are just crap in general?

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by syshum on Thursday April 22, 2021 @12:59PM (#26905042)
>>Do all defendants not have the right to an attorney in criminal cases?

In theory yes, but in most cases that will be a overworked lawyer that has 100's or 1000's of other active cases, and will not spend time other than negotiation the best deal.

Even if you happen to get a good public defender that has the ability to devote lots of time to your individual case, they would have no budget to hire an expert witness to present the vulnerabilities in the Cell-bright software to a jury

Your best bet would be if the ACLU or EFF took an interest in your case, but they take on very few cases relatively speaking and tend to focus on precedent setting cases, or cases that have high public interest (or can be made to have high public interest)

>Or maybe the attorneys available to those who can't afford are just crap in general?

In some cases they are incompetent, however in most cases they are just underfunded and massively over worked. In most jurisdictions the public defenders office is funded is 1/10 or less of what the prosecutors office is funded at.

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by nvr219 on Thursday April 22, 2021 @11:23AM (#26903769)
The worst enterprises using Cellebrite don't really have to worry about defense lawyers.
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by tgsovlerkhgsel on Friday April 23, 2021 @03:46PM (#26918441)
No, but Cellebrite does because their credibility is what sells their products to law enforcement. It wouldn't kill all their sales, but enough to be painful.
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by psd1 on Friday April 23, 2021 @08:28PM (#26920909)
If you, as I do, hold that personal devices should be private, then you're probably happy with the extraction tools being weak. Let them remain complacent.
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by wglb on Thursday April 22, 2021 @10:46PM (#26910507)
That won't do much. In order to throw the evidence out, it needs to be shown that something was actually compromised by the tool, not just that it is possible.

Consider https://www.securityweek.com/forensics-tool-flaw-allows-hack.... Have any cases been thrown out? I don't think so.

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by waltwalther on Thursday April 22, 2021 @10:30AM (#26903163)
This.