Bad day for cellphone security

Subject: General Tech | February 14, 2013 - 01:47 PM |
Tagged: Android, iOS 6, apple, security, FROST

Two different mobile phone security concerns were revealed today, one for devices using iOS 6.1 and one for Androids.  DailyTech has posted text instructions as well as linking to a video which shows how an iPhone 5's password protection can be completely bypassed and allow anyone with physical access to your phone to log into the phone with full access.  The second vulnerability, tested with Android 4.0 but possibly wide spread, was discovered by a team at the Friedrich-Alexander University in Germany, and it allows you to recover  information from a phone which has used the Android disk encryption.  They used both a freezer to drop the temperature of the phone and a trick with the battery which puts the phone into 'fastboot' mode and allows the loading of a custom image via a Linux PC which installs their Forensic Recovery Of Scrambled Telephones tool, aka FROST.  As you can see from the images below, that gives you the ability to get the encryption key or even brute force some passwords. 

View Full Size

"First part:
-Go to emergency call, push down the power button and tap cancel.
-Dial 112 and tap green and inmediately red.
-Go to lock screen.

Ok...ready for second part:
-Go to passcode screen.
-Keep pushing down the power button ...1...2...3...seconds and before showing the slider "turn off"...tap the emergency call button and ...voilá!
-Then without releasing the power button press the home button and ready..."

Here is some more Tech News from around the web:

Tech Talk

Source: DailyTech
No comments posted yet.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Lines and paragraphs break automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote><p><br>
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

By submitting this form, you accept the Mollom privacy policy.