Hacker News Reader

Comment by jakelarkin | Hacker News Reader

'Cellebrite "Pro Series" purchases all appear to include the firm’s Cloud Analyzer tool, which extracts “private-user cloud data” by "utilizing login information extracted from the mobile device.'

Chilling that is can be done without a warrant e.g. arrested protesters or to citizens crossing the US border.

View on HN

Does this mean that as long as you use different strong passwords for everything (via say, 1Password), and do NOT use a fingerprint unlock, Cloud Analyzer wouldn't work?

Or is it extracting login info in some other manner that would still function?

Presumably it'd require passwords or cookies to be downloaded from people's phones to work. With those credentials they could login to FB / Twitter / GMail etc and snoop about, downloading whatever data they can find there too.

I doubt they could do that passively. It would probably require them physically taking your (unlocked) phone and imaging it. (Which I suspect is becoming standard practice when they arrest people, if they can get away with it.)

If thats the case then 1Password would only keep your credentials safe while you aren't actually logged in to the services in question on your phone.

I would venture to say that a search warrant for a device, would not cover the contents stored in the cloud. While the cellebrite does have this feature I would presume a separate warrant would be required to obtain the cloud data, which is located in another physical location.

Reply on news.ycombinator.com