|
@marcan42 | |||||
|
(And we can already do this exact thing for FDE on desktops/laptops, so it's not like it's novel)
|
||||||
|
||||||
|
|
Hector Martin
@marcan42
|
17. sij |
|
Thread about numeric passcode strength on iPhones.
And *this* is why I consider my rooted Android phone to be more secure than iPhones under a whole category of attack scenarios. Because I can use separate 25-character full ASCII *startup* password and an 8-digit *unlock* code. twitter.com/matthew_d_gree…
|
||
|
||
|
|
Hector Martin
@marcan42
|
17. sij |
|
Sure, you can try to attack my phone from a powered-but-locked state, but if you screw up and it reboots, or if you attempt any boot chain attacks, or if the battery runs out, you are *not* getting in. Period.
|
||
|
|
||
|
|
Hector Martin
@marcan42
|
17. sij |
|
I don't know why nobody offers this option of split FDE/unlock codes by default (neither iPhones nor stock Android). It's such a massive no-brainer to increase security to basically "unbreakable" under an entire class of practical attack scenarios.
|
||
|
|
||
|
Paul McMillan
@PaulM
|
17. sij |
|
Android used to allow it. I suspect they stopped because phone reboot is so rare for most users they forget the passcode. Biometric + alphanumeric password isn't a bad split in modern android for some threat models.
But then again, they took away true full disk encryption too.
|
||
|
|
||
|
|
Hector Martin
@marcan42
|
17. sij |
|
I don't remember Android ever allowing it. It always required rooting and running a vdc command to change the FDE password, AFAIK.
|
||
|
|
||
|
Dougall
@dougallj
|
17. sij |
|
iirc macOS removed this recently, and tied FDE to login passwords :(
|
||
|
|
||