Discussion about https://security.stackexchange.com/questions/219921

defalt

17:40

A: Can a stolen Android phone with USB debugging enabled have screen lock bypassed?

A sophisticated threat actor could potentially try to exploit the Android Debug Bridge's authorization protocol by switching your phone's storage media to another same model phone with already active ADB/ADBD authorizations (based on HWID like the network chip's MAC address) and maybe some additi...

This accepted answer is entirely false. 1st and 2nd para make no sense at all. The process it mentions in the 1st para doesn't achieve anything

Conor Mancone

@defalt Comment on the answer. Usually the best way to get started

defalt

I made a comment earlier to ask him to expand it further because it is over-simplified but he didn't

OakSecurity

I've been trying to tell him that for literally 3 hours.

Asking me questions that I just answered

Don't even check the question's chat, your cpu will fry

defalt

Switching flash memory doesn't make sense

OakSecurity

You said that 50 times

I said please provide evidence

As I've seen it with my own eyes

and then you ask another question

or say I don't make sense or wtv

defalt

17:47

Then why don't you expand it further if you know the process? Why left it over simplified?

OakSecurity

As I previously answered, probably a good dozen of times, I saw it from a university presentation.

Every single thing I've seen and remember has been described and discussed with you in chat.

To which you objected

To which I said, please provide evidence so I can gladly be confident about changing my answer

To which you went on another tangent. Again.

defalt

Don't write it in chat. Edit your answer if you know about the process. You are leaving it over simplified

OakSecurity

I will stop commenting. Feel free to edit my MORE THAN CONDITIONAL ANSWER (could potentially try to exploit / might be able...)

Where in what I just wrote have I said I know more about the process?

I literally said the opposite

Who's this guy

how's he still alive?

Don't forget to breath

defalt

Your answer is not making sense. If you knew what you have written, you could have given it some amount of detail.

"even an encrypted device might be under threat of full decryption"

This is a very high assertion without supporting statement. adb is as privileged as the regular user

OakSecurity

Please share the 4.4.2 link where ADB is used to unlock the screen, which would bypass encryption.

The one you said was irrelevant

defalt

18:00

OP's question has written the android version so that we don't come up with old Android vulnerabilities like Dirty Cow attack. The vulnerability you linked to was fixed in v4.3