500-630 million Android phones open to post-wipe data recovery

Status
Not open for further replies.
So what Nexus device did they test? They also mentioned enabling FDE would likely thwart the data recovery attempt.


EDIT: So they had 3 Nexus 4's, but chose not update it to 4.4 so they could see if the flaw persists. :/

From PDF said:
Other devices in our sample for which we do not present
results (too few devices) include the Motorola Defy (Eclair,
v2.1.x), Nexus 4 and Nexus 5 (KitKat, v4.4).
Click to expand...
 
Last edited:
diamond.g said:
They also mentioned enabling FDE would likely thwart the data recovery attempt.
Click to expand...

The researchers reportedly said: "Full-disk encryption has the potential to mitigate the problem, but we found that a flawed factory reset leaves behind enough data for the encryption key to be recovered."

The Reg journalist ended with: "this author suggests users may be able to counter the attack by enabling full disk encryption and creating very long complex passwords just before handsets are wiped for sale in a bid to make brute forcing of keys impractical"
 
iConnected said:
The researchers reportedly said: "Full-disk encryption has the potential to mitigate the problem, but we found that a flawed factory reset leaves behind enough data for the encryption key to be recovered."

The Reg journalist ended with: "this author suggests users may be able to counter the attack by enabling full disk encryption and creating very long complex passwords just before handsets are wiped for sale in a bid to make brute forcing of keys impractical"
Click to expand...

I am glad you are so concerned for Android phones! I am sure your motives are in the right place. Because you are such a regular contributor to the alternative section I am sure you don't have ulterior motives at all!

Did you see this IOS vulnerability?
The thing about exploits and vulnerabilities..........ALL software has them.

http://www.forbes.com/sites/thomasbrewster/2015/02/19/ios-copycat-app-vulnerability/
 
jamezr said:
I am glad you are so concerned for Android phones! I am sure your motives are in the right place. Because you are such a regular contributor to the alternative section I am sure you don't have ulterior motives at all!
Click to expand...

Oh for goodness sake.

I don't use alternatives to iOS myself, so don't normally have anything to contribute here.

Does that offend you? If so, I apologise.

I noticed and read the article because I have family members who do have older Android phones and who regularly turn to me for advice. (The fact that all I end up doing is reading their manuals out loud to them seems to keep escaping them).

I personally found the information in it interesting. Please excuse me for that.

And I noted that it offered practical advice, which I will follow when my family members eventually ask me how they should best go about disposing of their old Android phones.

I thought others might be similarly interested and/or find the advice similarly useful. Those were my only motives. And I thought this was the most relevant place on the MR forums to share it.

Does that offend you? If so, I apologise again.
 
iConnected said:
Oh for goodness sake.

I don't use alternatives to iOS myself, so don't normally have anything to contribute here.

Does that offend you? If so, I apologise.

I noticed and read the article because I have family members who do have older Android phones and who regularly turn to me for advice. (The fact that all I end up doing is reading their manuals out loud to them seems to keep escaping them).

I personally found the information in it interesting. Please excuse me for that.

And I noted that it offered practical advice, which I will follow when my family members eventually ask me how they should best go about disposing of their old Android phones.

I thought others might be similarly interested and/or find the advice similarly useful. Those were my only motives. And I thought this was the most relevant place on the MR forums to share it.

Does that offend you? If so, I apologise again.
Click to expand...


So the vulnerability I posted for you for IOS. Are you going to post in the IOS section? Your so concerned about the security of people mobile phones in all that!
Why not? Does my calling you out offend you? Keeping you honest about your motives offend you? See how that stuff works in reverse? So run along and post the threat I gave you for all of your ifriends to see since your so concerned for people.
 
iConnected said:
The researchers reportedly said: "Full-disk encryption has the potential to mitigate the problem, but we found that a flawed factory reset leaves behind enough data for the encryption key to be recovered."

The Reg journalist ended with: "this author suggests users may be able to counter the attack by enabling full disk encryption and creating very long complex passwords just before handsets are wiped for sale in a bid to make brute forcing of keys impractical"
Click to expand...

Yeah I ended up reading the report. I would recommend anyone with an older Android device that isn't a Nexus (4 or greater) get a newer device as most of the OEM's don't upgrade. Of course without them releasing the results of the 4.4+ devices it is hard to say if the issue persists.
 
jamezr said:
Does my calling you out offend you? Keeping you honest about your motives offend you? See how that stuff works in reverse?
Click to expand...

You are not demonstrating anything in reverse.

You challenged my motives based on your own false assumptions. You caused offence by doing so. And you were wrong.

And I'm not sure why you think it would be "news" to anyone if I, you or anyone else posted information elsewhere about an iOS vulnerability that was written about over 3 months ago.

Enough with your silly trolling.
 
iConnected said:
You are not demonstrating anything in reverse.

You challenged my motives based on your own false assumptions. You caused offence by doing so. And you were wrong.

And I'm not sure why you think it would be "news" to anyone if I, you or anyone else posted information elsewhere about an iOS vulnerability that was written about over 3 months ago.

Enough with your silly trolling.
Click to expand...

No I am a regular here in this section....you are not and your only goal in posting this is to inflame and post misinformation.
tell me how many other security type postings have you ever made? Thought so.... Then did you post the IOS security threat I gave you? Thought so...your agenda is quite iclear.
 
MOD NOTE: Please knock off the useless bickering. Thread isn't productive at this point.

B
 
Status
Not open for further replies.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Back
Top