Hacker News Reader

Since after all, Cellebrite claims their device doesn't alter evidence on the way through. If that claim is true, Moxie's artistically-beautiful files obviously can't affect it.

Saying those decorative files tampered with evidence is equivalent to admitting that everything the Cellebrite claims to do, it doesn't do and never has done.

View on HN

The vulnerabilities allow for code execution in the context of the Cellebrite application via the parsing of a video file. It doesn’t matter what the application was designed to do, you can now make it do anything you want just by getting it to scan a phone with a malicious video on it.

Yes. So Cellebrite should be writing the data to write-once storage prior to performing any analysis of the content.

In absence of write-once media, they are betting that the hashes they capture will be the same every time they image the device because they never modify the device.

Reply on news.ycombinator.com