blakes

Definitely agree, something like this really needs to be open source. This sort of project is way too difficult for just one person or a small group to do on their own.

I love the idea, but I'd never trust this, and I'd never recommend someone use it.

Your right, it doesn't have anything to do with user data being accessible, but an unlocked bootloader will mean the barrier to finding a vulnerability is much lower than otherwise.

A locked bootloader is an essential line of defense.

I'd be much more interested in this attack if they could get the keys from a phone with a locked bootloader.

I'd assume, encrypted or not, physical access to a phone with an unlocked bootloader means it's owned.

Related:

https://www.nsa.gov/research/tech_transfer/

(PDF) https://www.nsa.gov/research/_files/tech_transfers/nsa_techn...

Some people are saying that the NSA is wasting time with patents, but they clearly have a reason or two to file these patents. And I'm sure it could debated that it is either a good or a bad thing.