On: Apple can comply with the FBI court order

[venomsnake]

Or any rooted android. Good luck in defeating LUKS. No custom firmwares will help them.

[scintill76 → venomsnake]

Make sure you set high enough LUKS master key iteration counts, and/or very complex password, so that they can't image the LUKS header and brute-force your passphrase off-device.

[st3v3r → venomsnake]

A rooted android is even less secure.

[venomsnake → st3v3r]

If you say so

https://blog.torproject.org/blog/mission-impossible-hardenin...

[feld → venomsnake]

a rooted android is probably easiest to own over the air with a push notification, so yeah, that's a great idea! NOT

[carom → feld]

Could you expand a little on what you're referring to? Is this a specific vulnerability?

[venomsnake → feld]

A powered down device rarely has that vulnerability.

[paraxisi → venomsnake]

A powered down device isn't exactly terribly useful.

[16bytes → paraxisi]

You can't send a powered down phone a push notification for post-hoc analysis.

You would have had to know the target and push a vulnerability beforehand, which wouldn't have helped in this case.

[feld → paraxisi]

So power it on? It will still boot with encryption. Isn't Android encryption is an extension of ext4 and only protects some data. It's not full disk / LUKS last I knew.