Privacy

1244 readers

154 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 1 year ago

MODERATORS

Ategon

danielintempesta

Police want the password to your phone (reason.com)

submitted 1 month ago by [email protected] to c/privacy

39 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 7 points 1 month ago (1 children)

iOS encrypts the storage by default. Don't know about android but I'm sure if not by default it can be enabled.

[–] AsudoxDev 0 points 1 month ago* (last edited 1 month ago) (1 children)

I never said anything about the phone not being encrypted by default. I am talking about the emergency mode iOS devices have.

[–] [email protected] 0 points 1 month ago (1 children)

You literally said 'that doesn't encrypt your storage'. I've read some other comments of yours about it being decrypted after entering a pin or passwords in memory...that's not how it works (again at least in iOS), it's managed by hardware. Basically a chip enters your password for you. So no, an attacker can't access your storage, it's still encrypted, or your password that easily.

[–] AsudoxDev 2 points 1 month ago* (last edited 1 month ago)

PSA hitting your power button (5)? times in a row (however many it takes to bring up the SOS screen) on an iPhone will disable biometric login until you’ve entered your password again.

I responded to that with:

That does not encrypt your storage. It simply disables the biometric authentication methods. Which means they can see your stuff if they get into the phone via a exploit.

That emergency mode that is activated by hitting the power button 5 times does not encrypt the storage. It merely disables the biometric authentication methods and possibly other things related to security, but it does not encrypt the storage. The phone stays in the AFU state and therefore the decryption keys are still somewhere in the hardware chip's memory.