Let's assume we have an Android device with:

  • Unlocked bootloader

  • Full Device Encryption

  • Password lockscreen

Will Android security measures (FDE and password lock) still be able to prevent data exfiltration from physical possession of the device?

  • What stops an attacker from manipulating the bootloader and silently implenting a keylogger (that logs your FDE password)?
    – SEJPM
    Mar 24 '16 at 14:00
  • I'm asking. Is there anything that stops him?
    – Mars
    Mar 25 '16 at 4:38
  • The answer (I guess): android.stackexchange.com/a/36831
    – SEJPM
    Mar 25 '16 at 11:28
  • That was awesome. I'll have to double check that I can lock my BL on a stock recovery and still be able to flash images from within the system.
    – Mars
    Mar 26 '16 at 0:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.