Good info there from wiki. So, if someone were THAT (9 days) serious about getting the data, he might as well re-flash the whole phone to avoid any trace-backs, destroy root-kits etc. I know I would do that.<br>Which again brings us back to the same point, as the thread says... of DATA protection and not the phone itself. If I am a data thief why will I bother keeping the SD card on the phone. I will simply take it out, put it in my memory card reader and start hacking it. The only way I wont be able to get it (easily) if the data on the SD card itself was hidden/encrypted/unreadable. We have to isolate the phone from data here.<br>
<br>Rahul J<br><br><div class="gmail_quote">On Sun, Jun 1, 2008 at 4:38 AM, Ilja O. <<a href="mailto:vrghost@gmail.com">vrghost@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Sat, May 31, 2008 at 8:13 PM, Rahul Joshi <<a href="mailto:rjoshi31@gmail.com">rjoshi31@gmail.com</a>> wrote:<br>
> I'm no security expert but I'm pretty sure a lightweight 8 bit salt<br>
> encryption (security guys?) can give any dektop pc software enough trouble<br>
> to abort the attempt of trying to read a 256 meg worth of datacard, unless<br>
> it really belongs to the director operations FBI ;)<br>
><br>
<br>
</div><shamelesly edited copy from wikipedia><br>
Assume a user's secret key is stolen and he is known to use one of<br>
200,000 English words as his password. The system uses a 8-bit salt.<br>
The amount of combinations is 256*200000 = 51200000.<br>
</shamelesly copy from wikipedia><br>
<br>
If attacker chacks one hash per second and has 64-core beowulf<br>
cluster it will require 9 days to check all possible combinations.<br>
That's not so much, imo.<br>
Also, processors are cheap these days one guy [1] has build 96-core<br>
machine (for unknown price).<br>
<br>
[1] <a href="http://helmer.sfe.se/" target="_blank">http://helmer.sfe.se/</a><br>
<div><div></div><div class="Wj3C7c"><br>
_______________________________________________<br>
Openmoko community mailing list<br>
<a href="mailto:community@lists.openmoko.org">community@lists.openmoko.org</a><br>
<a href="http://lists.openmoko.org/mailman/listinfo/community" target="_blank">http://lists.openmoko.org/mailman/listinfo/community</a><br>
</div></div></blockquote></div><br>