News for hackers. Stuff that matters.

A comment on Even your strongest Android pattern lock is worse than a 3-letter ASCII password. Parent comment

Re:Even your strongest Android pattern lock is worse than a ... by oxalo on Monday July 28, 2014 @04:57PM (#8099284)
Unless someone steals your phone, grabs the lock pattern 'hash' (not sure on implementation details...), and brute forces it on a computer in a few seconds.

Guess I need to go read how that's implemented now.

[ Parent | on HN ]
Re:Even your strongest Android pattern lock is worse than a ... by Someone1234 on Monday July 28, 2014 @06:12PM (#8099644)
If they could dump the phone's content already then why even waste the effect? Just perform a full backup, factory reset it, and then restore only the user's contents you want access to.

However if you have debugging disabled and no third party bootloader, you cannot access the filesystem while the phone is locked. So being able to crack some kind of hash is a moot point.

[ Parent | on HN ]