Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

an OS update can at best remove the limit on how fast or how many times you can attempt to unlock the user data

Wouldn't an OS update be able to store the user password in a plain text file on the non-encrypted partitions? I don't think those partitions are hardwired to be readonly until the rest of the system is unlocked?



Absolutely, but only if that code is running when the user supplies the password. I mentioned this possibility as well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: