Chinese forensics firm announces it can forensically depose pixel

taiyi

original text
https://mp.weixin.qq.com/s/AHjsyLsQM0ydkqhBaydwKA

The Kunlun Unlock Labs of Xiamen FiveFiveAnchor Information Technology Co. Ltd. recently released an elevated rights forensic tool for Android 14. This tool is speculated to have bypassed the Android rights management mechanism by exploiting a vulnerability, thus accessing and elevating device privileges to achieve in-depth forensics on the device. Of particular note, the tool successfully achieved elevation of privileges on Pixel phones with Google's Tensor chip. It is believed that this vulnerability may have been fixed by Google in its July security update, however it is unclear whether the forensic tool is exploiting a known vulnerability or a new, undisclosed vulnerability for the elevation of privileges. In light of this, all users are advised to update to the latest security patch to keep their devices safe.

troika

taiyi I have looked at the original text and found that there is a higher possibility of software vulnerabilities. However, as a Chinese, I would recommend using EDS and Zarchive to encrypt files separately. Even if graphene is hacked, separate encryption software can still protect your file security.

troika

taiyi I helped you ask, they are exploiting the Android kernel combination vulnerability, which is a software vulnerability. The most outrageous thing is that they don't even know about the Graphene OS system

GrapheneOS

taiyi This sounds like it's a privilege escalation from adb shell requiring the device to be unlocked. See https://discuss.grapheneos.org/d/12848-claims-made-by-forensics-companies-their-capabilities-and-how-grapheneos-fares.