Google Android

[userque]

Google may reset Android passcodes remotely, unless you encrypt your device - gHacks Tech News

... What this means is that Google may reset the phone's passcode remotely if the proper legal paperwork is provided.

But, that is only possible of full-disk encryption is not enabled. ...

 

[k0nkuzh0n]

for the average user, encrypting your device will cause many more problems than it will help. But if you know what you are doing and/or are very concerned about security, encryption would be a good thing to do.

I wouldn't encrypt your device for the sole purpose of making it so google can't reset your passcode. The operating system isn't even needed to get the stuff that would be of interest off your phone.

 

[userque]

for the average user, encrypting your device will cause many more problems than it will help.

How so? I find encryption gets in the way of more advanced users than the average user. It's pretty seamless these days. Have you every owned an encrypted android phone recently?

But if you know what you are doing and/or are very concerned about security, encryption would be a good thing to do.

I wouldn't encrypt your device for the sole purpose of making it so google can't reset your passcode. The operating system isn't even needed to get the stuff that would be of interest off your phone.

The issue may not be whether than can get it without your password; it may be that they want to get it remotely, easily, quickly, and with a lesser likelihood that you become aware of the breach--which can be a great advantage for the NSA/FBI/POLICE depending upon the situation.

 

[burrocrat]

i'm not worried if the nsa/fbi wants to data dump my phone, most of that info is available through multiple sources or redundant means of confirmation anyways. the only thing that concerns me is if the pictures on my phone get scimmed and then end up on the internet, because there is going to be at least a couple ex-girlfriends show up intending to cut my wiener off if that happens and i still have plans for it later. will encryption help me with that?

 

[userque]

i'm not worried if the nsa/fbi wants to data dump my phone, most of that info is available through multiple sources or redundant means of confirmation anyways. the only thing that concerns me is if the pictures on my phone get scimmed and then end up on the internet, because there is going to be at least a couple ex-girlfriends show up intending to cut my wiener off if that happens and i still have plans for it later. will encryption help me with that?

It would be more helpful than not I'm sure; perhaps you should send them to me for further analysis.

 

[burrocrat]

It would be more helpful than not I'm sure; perhaps you should send them to me for further analysis.

oh, you can have them no problem, there is a good reason i left. but you'll have to go get them yourself, they never listened to me or went where i said, and there's definitely no way they are going to let me tape them up in a big box and ship them to the midwest ever again anyways.

 

[k0nkuzh0n]

How so? I find encryption gets in the way of more advanced users than the average user. It's pretty seamless these days. Have you every owned an encrypted android phone recently?

I didn't really think about how a lot of cell phones these-days don't have SD card slots, as that is really where encryption can cause the most problems. Can't just take an encrypted SD card out of your phone and put it into your laptop, or new phone, and expect it to 'just work'.

If Google will reset your phone's passcode with a warrant, I don't see why they wouldn't give up your encryption passcode with a warrant. Or maybe there is already a back door and encrypting enables that back door. A master encryption key. I'm not helping, am I? :laugh:

 

[userque]

I didn't really think about how a lot of cell phones these-days don't have SD card slots, as that is really where encryption can cause the most problems. Can't just take an encrypted SD card out of your phone and put it into your laptop, or new phone, and expect it to 'just work'.

If Google will reset your phone's passcode with a warrant, I don't see why they wouldn't give up your encryption passcode with a warrant. Or maybe there is already a back door and encrypting enables that back door. A master encryption key. I'm not helping, am I? :laugh:

Good point about the SD cards.

In theory, Google doesn't know your passcode. And there are no known backdoors in the encryption schemes used.

More significantly, having the ability the reset a passcode is not the same as having the ability to know a passcode.

The thing is, Android OS is open-source. Backdoors would be found. iOS is not open-source.

Any code in Android OS designed to upload passcodes/keys to Google, or anywhere, would likely be spotted.

Btw, have you ever done much "reverse engineering?"

 

[burrocrat]

Btw, have you ever done much "reverse engineering?"

i tried that on one of them girlfriends you want me to send you. i would not recommend you repeat the mistake.

 

[userque]

i tried that on one of them girlfriends you want me to send you. i would not recommend you repeat the mistake.

Sometimes the encryption measures are too strong. Attempts to reverse engineer them will trigger anti-decryption mechanisms--further scrambling the problem. This was written about in a book I haven't read: Men are from Mars; Women are from Venus. Or something like that.