摘要:An unpatchable bootrom exploit called "checkm8" works on all iDevices up until the iPhone X irrespective of whether they run iOS 12 or iOS 13 and make 阅读全文
posted @ 2019-12-19 23:16 Pieces0310 阅读 (194) 评论 (0) 编辑
摘要:Yesterday a friend of mine Kirby came to me with a smartphone and she wanted me to do her a favor. She showed me some contacts in an app called "LINE" 阅读全文
posted @ 2019-08-02 23:10 Pieces0310 阅读 (257) 评论 (0) 编辑
摘要:One cannot be in two places at once. Do you know what's "Dual Apps"? Manufactures like Xiaomi,Oppo,Huawei offer "Dual Apps" feature which allows users 阅读全文
posted @ 2019-04-16 23:23 Pieces0310 阅读 (319) 评论 (2) 编辑
摘要:Now it's more and more difficult for forensic tools to extract evidence from smartphone running Android 7 and above. Maybe you could acquire physical 阅读全文
posted @ 2019-03-17 22:26 Pieces0310 阅读 (566) 评论 (0) 编辑
摘要:近年来的安卓手机取证相较过往,可以施展的手法是愈来愈受限了,大体上可以安卓7.0做为一个分野,在安卓7.0以上的高版本明显有以下反取证的特性出现: 1. 降级(Downgrade)搭配ADB Backup的技法无法备份到App的数据,如此一来即便你知道嫌疑犯明明有用WeChat等IM,但却苦无方法可 阅读全文
posted @ 2018-12-30 14:52 Pieces0310 阅读 (415) 评论 (0) 编辑
摘要:A friend of mine she was frustarted in extracting WeChat chat messages from suspect's smartphone running Android 7.x. The situation is that no pattern 阅读全文
posted @ 2018-12-19 23:26 Pieces0310 阅读 (443) 评论 (0) 编辑
摘要:最近有则取证相关的消息,链接如下,光看标题便知道与Apple的Face ID有关. https://www.cnet.com/news/fbi-unlocked-an-iphone-x-by-forcing-the-suspect-to-use-face-id/ 看完内容之后,我不争气地笑出声来,没 阅读全文
posted @ 2018-10-14 21:03 Pieces0310 阅读 (161) 评论 (0) 编辑
摘要:取证说穿了其实就是攻防,这本是正义与邪恶的对决,亦即执法单位与嫌疑犯两者之间的事,但现实生活中要比这复杂多了. 怎么说呢?举个例子大家便理解了.取证人员费尽心思,用尽各种手法,努力地想要自手机上提取重要迹证,以还原真相,除暴安良.但此时手机厂商却跳出来了,她说为了保障个人隐私,因此她们必须致力于提升 阅读全文
posted @ 2018-07-22 09:45 Pieces0310 阅读 (281) 评论 (0) 编辑
摘要:Have you ever seen a movie called "Ex Machina"? I like this movie very much. Artificial intelligence Robot Ava has a robotic body but a very attractiv 阅读全文
posted @ 2018-07-11 11:59 Pieces0310 阅读 (164) 评论 (0) 编辑
摘要:When it comes to booting up evidence files acquired from target disk, you got two options. One is VFC and the other is Live View. Both of them could c 阅读全文
posted @ 2018-05-31 22:09 Pieces0310 阅读 (225) 评论 (0) 编辑