I would like to know how to get data on an Android phone with soft methods - that is, no physical methods, such as looking at the imprints on the screen, disassembling the device, etc. Let's assume that Android is upgraded to the latest version and there are no unknown bugs that would cause the insecurity of the phone.
I would like to know if my phone would still be safe under these circumstances, respectively, and what is the minimum requirement for theoretical full security:
- The device has USB debugging enabled, but all trusted ADB hosts are safe and not touched by malicious people. (Looks like the ADB host has to be trusted before ADB can connect to it, and it is possible only after unlocking the screen, so it should be safe?)
- The device has been rooted (such as a development image) and a number of common, famous apps (such as Root Explorer) that require root has been installed.
- The disk is fully encrypted. In this case the hacker is allowed to disassemble the phone to get the storage module (and the storage module only).
- Uses an 8-digit number password that is not so strong - not crack-able by trying by hand, but crack-able with a rainbow-table attack.
And are there any other thing that seems safe but not actually?