Story image

Freezing hell, Androids are under attack

11 Mar 13

Thinking of sending a text? Hold the phone, literally. Oh wait, it's 28 degrees outside, you should be safe.

In what has to be one of the most bizarre research papers ever published, German scientists say freezing an Android phone can reveal its data secrets.

After freezing phones for an hour, researchers say the method is the most effective way of exploiting the encryption system which protects phone data.

With the cold attacks scrambling the system, researchers gained access to contact lists, browsing histories, photographs and no doubt a severe case of frostbite.

So, as you are all wondering, how on earth did this form of research even come about?

Google released a data scrambling system for Android called Ice Cream Sandwich, which proved effective for end-users, but problematic for law enforcement and forensics workers.

Not to be defeated however, researchers Tilo Muller, Michael Spreitzenbarth and Felix Freiling simply whacked a few smartphones into a freezer until they dropped below -10C.

"We present FROST (Forensic Recovery of Scrambled Telephones), a tool set that supports the forensic recovery of scrambled telephones," the scientists said in their blogpost. "To this end we perform cold boot attacks against Android smartphones and retrieve disk encryption keys from RAM.

"We show that cold boot attacks against Android phones are generally possible for the first time, and we perform our attacks practically against Galaxy Nexus devices from Samsung."

Essentially chilling a phone to make its contents vulnerable, the breakthrough could actually impact the daily life of Russians, Scandinavians, Alaskans and basically anybody living in Dunedin from June onwards.

"To break disk encryption, the bootloader must be unlocked before the attack because scrambled user partitions are wiped during unlocking," the researchers said.

"However, we show that cold boot attacks are more generic and allow to retrieve sensitive information, such as contact lists, visited web sites, and photos, directly from RAM, even though the bootloader is locked.

Branding smartphones small PCs, the scientists were the first to try the method on phone products, and are currently working on defences against the attack to ensure encryption keys are never place in vulnerable memory chips.

For all you skiers or snowboarders out there looking forward to a winter on the slopes, remember to leave your smartphone in the locker, or better still, the microwave.

IDC: Standalone VR headset shipments grow 428.6% in 3Q18
The VR headset market returned to growth in 3Q18 after four consecutive quarters of decline and now makes up 97% of the combined market.
Meet Rentbot, the chatbot that can help with tenancy law
If you find yourself in a tricky situation  - or if you just want to understand your rights as a landlord or tenant, you can now turn to a chatbot for help.
PlayerUnknown’s Battlegrounds (PUBG) finally releases on PS4
PUBG on PS4 feels like it’s still in Early Access as the graphics look horribly outdated and the game runs poorly too. 
How AI can fundamentally change the business landscape
“This is an extremely interesting if not pivotal time to discuss how AI is being deployed and leveraged, both in business and at home.”
CERT NZ highlights rise of unauthorised access incidents
“In one case, the attacker gained access and tracked the business’s emails for at least six months. They gathered extensive knowledge of the business’s billing cycles."
Report finds GCSB in compliance with NZ rights
The Inspector-General has given the GCSB its compliance tick of approval for the fourth year in a row.
Game review: Just Cause 4 on PC
Rico Rodriguez returns to wreak over-the-top havoc for a fourth time. This time the island nation of Solís is our hero’s sandbox, ripe for destruction.
Hands-on review: Logitech G502 HERO gaming mouse
My favourite feature of the G502s is the ‘Sniper’ button, which is found on the left hand side of the device. When held, this lowers the DPI and allows you to achieve maximum accuracy whilst honing in on a kill on your favourite FPS title.