![]() ![]() This is a rather clunky way around the added protection added by WhatsApp, as Oxygen still needs the Apple ID and password (or some other access to the iCloud) and the user's SIM card or phone. ![]() They can then generate the key and decrypt downloaded data. So what Oxygen does is download data backed up by WhatsApp, and they then require a SIM-card with the same number as the user so they can receive the verification code. That key is then used to encrypt the data uploaded to the iCloud Drive.įorensic tools can download that data but in order to decrypt it on any device other than the original iPhone, the key is now needed, and that can be obtained only by passing the verification process again. As explained by Katalov, when the user opts to upload their WhatsApp data to the iCloud Drive, and they've entered a texted verification code sent by the Facebook-owned firm, a unique encryption key is generated. To understand what barriers Oxygen's Forensic Detective is up against, it's necessary to first understand what WhatsApp actually did. While Oxygen isn't fibbing about its ability to retrieve WhatsApp messages from the iCloud, its tools will only work in a very specific scenario, he said. Vladimir Katalov, CEO of rival forensics firm, Elcomsoft, explained to me how the update worked and what Oxygen was doing to circumvent the encryption. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |