[cryptography] Fwd: Re: Commercialized Attack Hardware on SmartPhones

2014-03-02 Thread shawn wilson
On list -- Forwarded message -- From: shawn wilson ag4ve...@gmail.com Date: Mar 2, 2014 11:37 AM Subject: Re: [cryptography] Commercialized Attack Hardware on SmartPhones To: Tom Ritter t...@ritter.vg Cc: How about a dictionary and rules. Even if you choose an alphanumeric strong

Re: [cryptography] Fwd: Re: Commercialized Attack Hardware on SmartPhones

2014-03-02 Thread Tom Ritter
-- Forwarded message -- From: shawn wilson How about a dictionary and rules. Even if you choose an alphanumeric strong pass, you're kinda limited to the phone's keyboard - you're not going to want to switch case or between letters and special too often. Also, IIRC Android limits

Re: [cryptography] Fwd: Re: Commercialized Attack Hardware on SmartPhones

2014-03-02 Thread Jacob Appelbaum
Hi Tom, Have you seen the cellebrite gear and their forensics tools? My understanding is that their UFED gear attempts to exploit various bugs in phones. https://wikileaks.org/spyfiles/list/company-name/cellebrite.html Here is one of their people talking about exploiting 0day bugs to gain