Slashdot Mirror

I don't see links to 4PC and Touch firmwares above...

Click on the summery link then use your mouse to scroll the top section, but now one is met with a SALES INQUIRY.
http://www.cellebrite.com/Mobi...

In addition, the market isn't regulated by the US government. The world provides plenty of sellers and providers of high quality services and products located outside of US. Additionally, the FBI stated they were receiving help from Cellebrite http://www.cellebrite.com/Abou... , and Israeli company.

  This is no mystery. It's not the first time this company had been the first to market with these type solutions.

From what I can tell from Cellebrite themselves that they are not taking advantage of a security or software flaw but simply copying the data repeatedly at chip level after failing the 10 attempt limit.

The original Dutch article shows a letter from FIOD (Fiscal Information and Investigation Service) asking NFI (National Forensic Institute) to decrypt the contents of a Blackberry Curve 9320. NFI said the retrieve data from the phone using Cellebrite's UFED 4PC software and then decrypted it using NFI's own method.

The also say the receive a NFI report that describes the case where 279 out of 325 encrypted messages on a Blackberry 9720 could be decrypted.

Uh... look at what they can extract and the devices. They can do nothing more than Apple can.
See for yourself.

And it's been mentioned in the comments before, but it's worth repeating. Apple's iOS security briefing is excellent reading.

To my knowledge these devices don't work on iPhones, yet, but anything in plain-text or enciphered weakly would still be a concern if physical access to the device is gained.

Your knowledge is wrong. The manufacturer has a list of supported phones, and every iOS device is on there. It even claims "iOS physical extraction, decoding & real-time decryption"; which suggests that either they've found a weakness, they have a backdoor in or they're making overblown claims and it simply tries a dictionary attack.

I have no idea how much they cost, whether the manufacturer has any qualms about selling them to whoever wants to buy or if they're sufficiently widespread that someone suitably unscrupulous could easily buy secondhand, borrow or steal one.

I take it you're assuming that based on Android not being specifically mentioned in the second link? Because according the the manufacturer, Android is definitely supported.

http://www.cellebrite.com/forensic-products/forensic-products/ufed-physical-pro/ufed-physical-supported-phones.html

The devices police have access to bypass any security locks or pins you have on your phone, as one poster above me stated: http://www.cellebrite.com/forensic-products/forensic-products.html?loc=seg

They don't manually go through it. There are devices they plug into the usb/charger port if it's a smartphone and will download everything to the device. Doesn't matter if you have a password. More info here:
http://www.cellebrite.com/forensic-products/forensic-products.html?loc=seg
Of course they'll keep the info, store it in their databases forever. Goodbye privacy.

If I did this to someones property without their permission I would have a problem.

    http://www.cellebrite.com/images/stories/support%20files/Apple_iPhone_Passcode_Bypass_instructions.pdf

If I developed the equivalent to this and applied it to an Xbox or play station I would
have a problem.

Very scary business, this is.

Check the "tutorial"...chapter 6.

http://www.cellebrite.com/forensic-products/ufed-standard-kit/ufed-video-tutorial.html

The Cellebrite UFED Ruggedized kit is a complete end-to-end solution contained in a hard case for safe transport which includes: a UFED Ruggedized device, a universal rapid phone charger, 85+ data cables, a USB flash drive, and other mission critical accessories. ...
Universal phone charger - For rapid charging of handsets/PDAs in the field which are found with no battery life remaining. Includes more than 40 charging tips with phone booster for the majority of handsets available worldwide.UFED Ruggedized

Damn, I gotta gitme one of these things!

List of supported phones:
http://www.cellebrite.com/ufed-support-center/ufed-supported-phones.html

Looking at the phone data extraction tutorial, it doesn't seem to be anything fancy or use any secret backdoors or anything to get data. Requires putting the phone in data connection mode. I have my phone default to Charge Only when connected, and they can't make me unlock it for them. And since I'm on Verizon, there's no SIM. If they have access to the a SIM they can easily get whatever is stored on that, which is pretty much nothing on more complex phones. They can also clone the SIM id, which let's them unlock phones which use a SIM lock, which I assume is what they mean by "defeat password protections"

Anyway, this is a grave abuse of power. Unless I see a warrant, I'm not letting them touch my phone. I'm from Michigan and am quite bothered by this. I mean. Seriously. What the frak.

List of supported phones:
http://www.cellebrite.com/ufed-support-center/ufed-supported-phones.html

Looking at the phone data extraction tutorial, it doesn't seem to be anything fancy or use any secret backdoors or anything to get data. Requires putting the phone in data connection mode. I have my phone default to Charge Only when connected, and they can't make me unlock it for them. And since I'm on Verizon, there's no SIM. If they have access to the a SIM they can easily get whatever is stored on that, which is pretty much nothing on more complex phones. They can also clone the SIM id, which let's them unlock phones which use a SIM lock, which I assume is what they mean by "defeat password protections"

Anyway, this is a grave abuse of power. Unless I see a warrant, I'm not letting them touch my phone. I'm from Michigan and am quite bothered by this. I mean. Seriously. What the frak.

Oh, no they have a convenient carrying storage case. Since the summary didn't bother you may have a look see here for their wares.

Oh, no they have a convenient carrying storage case. Since the summary didn't bother you may have a look see here for their wares.

Check out the specs on these things:
http://www.cellebrite.com/forensic-products.html
"Complete extraction of existing, hidden, and deleted phone data, including call history, text messages, contacts, images, and geotags" and the list just goes on and on.

So, can anyone buy one of these? If it's legal for police, then...