The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Hot answers tagged

4

Without full-disk encryption, your unencrypted data can be read without recovering the pincode. Enabled USB debugging, definitely, extends the attack surface, but it's not necessary for a determined and skilled thief. But most likely, they will wipe everything and resell your phone to get the daily dose.


4

While mutual TLS and certificate pinning are intended for different problems they can be used to solve the specific problem of detecting active MITM too. Only, with mutual TLS it is the server which detects the MITM (client certificate not as expected) while with certificate pinning it is the client (server certificate not as expected). Implementation ...


2

If your phone is powered on during access, and they have a way to get past your lock codes, I don't see why not. In the end, phones nowadays are just computers, and if you give someone else physical access to your computer, it's not your computer anymore. One example would be that the attacker disables the 3d party APK install protection and downloads his ...


1

Flash memory could be read externally by a very determined attacker, but probably a random pickpocket isn't going to bother. Full disk encryption would eliminate that possibility. An unlocked bootloader would allow simply changing the device password from a recovery environment, but given that your phone's bootloader is not unlocked and bootloader exploits ...


1

A sophisticated threat actor could potentially exploit adb's key file permissions by switching your phone MOBO to another same model phone and some tinkering. From then on, provided he knew how to get there, even an encrypted device might be under threat of full decryption. The key factor here is the fact nothing is encrypted. Basically, any kid with ...


1

ISPs in general can detect VoIP connections because these network flows in general have specific network metrics such as , constant rate, a relationship between up stream and downstream and some more. However, some applications such Skype the embed all encrypted traffic on one network flow, make impossible to know how many messages has been sent. In the case ...


1

The CAC seems to be a typical smartcard where the private key is stored on the card itself and crypto operations involving the private key like signing are also done on the card. Such smartcards do not allow extraction of the private key. In fact, that is the main purpose of these cards that any use of the private key should explicitly require physical ...


Only top voted, non community-wiki answers of a minimum length are eligible