mulanderDec 30, 2017

Friendly reminder. Full disk encryption on a server you have no physical access to grants you no security, same for your laptop if you carry it around in sleep mode. FDE protects your data at rest as from a cold boot you need to provide the passphrase. If your box is running the secret is present in memory and can be grabbed by a dedicated attacker.

For the same reason, when approaching border control, TURN OFF your phone, just locking the screen is often not enough.

Show threadSdXDec 30, 2017

@mulander

Does it have a tpm chip? the process is safe.

Show threadmulander
@SdX are you referring to having turn off the phone? If what I have been told is correct, modern iPhone/Android devices with bio-metrics locks on by default won't ask for passwords unless cold booted. Biometric data can be forcefully taken to unlock the devices - unlike passwords. The TPM chip doesn't prevent that in any way.
Dec 31, 2017 at 12:08amWeb
Show threadSdXDec 31, 2017

@mulander

Tanks you for the reponse.

Biometric data are stored in the processor depending on the apple. Can we imagine that secret data being recovered by a malicious person? By processor flaws made for that.

For the TPM chip, it is therefore useless. That's bullshit again.

Show threadmulanderDec 31, 2017
@SdX the situation we are discussing here is a border agent having you to unlock the device. If the device requires only the biometric data to unlock and the border agent can forcefully take your finger and put it on the device then the phone is unlocked. The TPM doesn't prevent that. iOS touchID requires a passcode after a cold boot and that makes it harder for a person with physical access & authority over your biometrics to unlock your phone - hence the suggestion to power it down.
Show threadSdXDec 31, 2017

@mulander

Yeah, but it's sad. According to comes back to say.
That there's no security available. No integrity can be 100% and that once the exchange of data by networks, data corruption is present or not verifiable.
The worst thing is that only network attacks are concerned.

There is also the unreliable material. ECC memory is only used in very rare cases. So is the corruption of bios.

When you think about it. Might as well stop it. And start farming.