Freezing a Smartphone for Hour to Circumvent the Encryption System?

By

Its sounds like a scene out of James Bond movie, but someone can actually circumvent a smartphones’ complex encryption system and retrieve its confidential information by putting it in a freezer.

The discovery was recently released by German researchers at Erlangen's Friedrich-Alexander University (FAU). They froze a smartphone for an hour. The researchers – Tilo Muller, Michael Spreitzenbarth and Felix Freiling – were able to get the device’s temperature down to -10C. Data was later analyzed on a separate computer.

They were able to see contact lists, websites visited and photos, the BBC reported. These could all reveal important details on suspected criminals or terrorists.

“We show that cold boot attacks are more generic and allow to retrieve sensitive information, such as contact lists, visited web sites, and photos, directly from RAM, even though the bootloader is locked,” the researchers said in the study.

It was also found that the quick “connecting and disconnecting” of the battery “of a frozen phone forced the handset into a vulnerable mode,” the BBC said. “This loophole let them start it up with some custom-built software rather than its onboard Android operating system. The researchers dubbed their custom code Frost - Forensic Recovery of Scrambled Telephones.” The researchers used a Samsung Galaxy Nexus smartphone in their study, according to a news report.

Data scrambling was introduced by Google with the Android version commonly known as the “Ice Cream Sandwich.” But the scrambling system was a "nightmare" for police as they investigated crimes, the researchers said in a blog post. So the discovery could be a welcome find for law enforcement officials.

It was also found that data “fades from memory much more slowly when chips are cold which allowed them to grab the encryption keys and speed up unscrambling the contents of a phone,” the BBC adds.




Edited by Brooke Neuman
Get stories like this delivered straight to your inbox. [Free eNews Subscription]

TechZone360 Contributor

SHARE THIS ARTICLE
Related Articles

ChatGPT Isn't Really AI: Here's Why

By: Contributing Writer    4/17/2024

ChatGPT is the biggest talking point in the world of AI, but is it actually artificial intelligence? Click here to find out the truth behind ChatGPT.

Read More

Revolutionizing Home Energy Management: The Partnership of Hub Controls and Four Square/TRE

By: Reece Loftus    4/16/2024

Through a recently announced partnership with manufacturer Four Square/TRE, Hub Controls is set to redefine the landscape of home energy management in…

Read More

4 Benefits of Time Tracking Software for Small Businesses

By: Contributing Writer    4/16/2024

Time tracking is invaluable for every business's success. It ensures teams and time are well managed. While you can do manual time tracking, it's time…

Read More

How the Terraform Registry Helps DevOps Teams Increase Efficiency

By: Contributing Writer    4/16/2024

A key component to HashiCorp's Terraform infrastructure-as-code (IaC) ecosystem, the Terraform Registry made it to the news in late 2023 when changes …

Read More

Nightmares, No More: New CanineAlert Device for Service Dogs Helps Reduce PTSD for Owners, Particularly Veterans

By: Alex Passett    4/11/2024

Canine Companions, a nonprofit organization that transforms the lives of veterans (and others) suffering PTSD with vigilant service dogs, has debuted …

Read More