1

MiA1 is probably the only one of it's kind that doesn't wipe data when bootloader is unlocked (tested by me and widely known)

It is said to be a security threat. I am not clear how

Say my device is stolen and one wants to access data how does this feature make it easier given

  • I use 6 digit PIN and fingerprint. One has to get past that before adb can be activated and used to transfer data to a PC.

  • The device is encrypted (Oreo 8.0.0)

  • Debugging turned off

(I am not talking of risks of unlocked boot loader. I understand that)

This is not a hypothetical question but something I need to understand, this being my daily use device.

I don't have information that calls for three letter agencies to use sophisticated tools , so that angle can be ruled out while answering (though useful to know).

I am looking for realistic threat assessment

  • As soon as they can flash a custom recovery with fastboot, the device is essentially completely theirs, including all of that data. Encrypting the device will stop them being able to access that data unless they know the password to decrypt it though. – MoonRunestar Jan 9 '18 at 16:12
  • @Sonickyle27: you are right but the device is encrypted. Added that to question. Thanks – beeshyams Jan 9 '18 at 16:17
  • @Sonickyle27 also what you say is possible for any other device which has unlocked boot loader already – beeshyams Jan 9 '18 at 16:28
  • And what if they can decrypt those data without your password, say they have tools that break this encryption? – esQmo_ Jan 9 '18 at 17:38
  • 1
    With the custom recovery a root shell can be invoked and then USB debugging can be enabled. As far as encryption it depends on the level of security type and where the key is stored. If a key is stored on-device it does not protect the application data from root users. The key has to be eventually provided to an app and thus be vulnerable. – Bo Lawson Jan 9 '18 at 17:41
1

Using twrp decrypt password one can easily write a simple brute force script to guess your password. And as I can see it, there isn't any limit on how many times this command can be executed, so depending on the strength of your password, your device will be unlocked one day or the other.

Having debugging turned off doesn't make any difference in TWRP

  • Theoretically possible but vague in terms of how much time it would take. Need figures to substantiate what you are saying. In the meantime, what's stopping me from wiping my data using Google account? – beeshyams Jan 10 '18 at 6:13
  • Also your answer in the present form is speculative. Nothing to show how it can be done as you suggest or proof that it is tried and tested – beeshyams Jan 10 '18 at 6:16
  • @beeshyams time is very relative to your setup, but definitely nothing too huge. Take a look at this article. And the device can be kept switched off for the entire process, wiping using your Google account won't do anything. And what I said is the simplest hacking technique, doesn't require any 'proof of concept' in this day and age. Like the article I linked above, millions of people try this everyday. – harpratap Jan 10 '18 at 7:51
  • In case you didn't know, the fappening was a result of a similar attack I posted as my answer. So its a tried and tested method in the wild. – harpratap Jan 10 '18 at 8:00
  • 1
    @beeshyams this is not a special NSA level hack. Its barely 10 lines of code any noobie could write. And no, only your particular model is at risk. Because any normal device would wipe it's internal memory when I unlock bootloader and install TWRP on it. On your device it doesn't, so your data isn't safe when you lose your device. – harpratap Jan 11 '18 at 0:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.