Antwortete im Thread
If your threat model is "theft of devices by cops", make shure to be able to commit #AssetDenial or have nothing on the devices they can use!
- Burner #StupidPhones and (e)SIM-Cards are cheap. keep them switched off and the battery pulled out!
I'd consider wasting €20 on a #StupidPhone, €20 on a rewriteable #eSIMcard and €10-20 on an #eSIM a "necessary expense" and I'd gladly show people how to get that stuff and not burn their opsec/anonymity by doing so...
Infosec ExchangeJess👾 (@JessTheUnstill@infosec.exchange)If you're talking NSA level hacking, sure, they can pop anything. But that's oftentimes burning million dollar vulns and potentially creating an international crisis or lawsuits or whatever.
If that's your threat model, nothing is going to be secure enough except for truly random one time pads or something, and you need something FAR more advanced to advise your opsec than this.
You're basically talking about an entirely different universe of security requirements. I'm talking about local PD just plugging everyone's phones into a standard license Celebrite box and dumping whatever they can. Which is going to be far far less if the phone is in BFU. Stop scaring normies with threat models that don't apply to them.
@kkarhan@infosec.space @Pibble
