|
@marcan42 | |||||
|
Sure, you can try to attack my phone from a powered-but-locked state, but if you screw up and it reboots, or if you attempt any boot chain attacks, or if the battery runs out, you are *not* getting in. Period.
|
||||||
|
||||||
|
|
Hector Martin
@marcan42
|
17. sij |
|
Thread about numeric passcode strength on iPhones.
And *this* is why I consider my rooted Android phone to be more secure than iPhones under a whole category of attack scenarios. Because I can use separate 25-character full ASCII *startup* password and an 8-digit *unlock* code. twitter.com/matthew_d_gree…
|
||
|
||
|
|
Hector Martin
@marcan42
|
17. sij |
|
I don't know why nobody offers this option of split FDE/unlock codes by default (neither iPhones nor stock Android). It's such a massive no-brainer to increase security to basically "unbreakable" under an entire class of practical attack scenarios.
|
||
|
|
||
|
|
Hector Martin
@marcan42
|
17. sij |
|
(And we can already do this exact thing for FDE on desktops/laptops, so it's not like it's novel)
|
||
|
|
||