Can I protect my Phone from USB hacks?

19 posts / 0 new
Last post
vestureofblood
vestureofblood's picture
Offline
Last seen: 1 day 13 hours ago
Joined: 08/17/2012 - 15:21
Posts: 1987
Location: Missouri
Can I protect my Phone from USB hacks?

Hi all,

I have a Galaxy S10, and have all the lock function enabled good passwords etc. But one area of concern for me is if someone physically gets their hands on my phone and plugs it into a PC via USB. Right now even if the phone is locked I can just plug it into my computer and see whatever is on the sim card and the micro SD card.

Like I get that you don’t use public chargers etc, but my concern is if my phone is lost and I don’t realize it right away.

Is there something I can do to prevent them from being able to get data off the phone?

In Him (Jesus Christ) was life; and the life was the light of men. And the light shineth in darkness; and the darkness comprehended it not.
http://asflashlights.com/ Everyday Carry Flashlights, plus Upgrades for Maglite.

zoulas
zoulas's picture
Offline
Last seen: 2 hours 29 min ago
Joined: 06/01/2020 - 08:35
Posts: 1836

If you lose physical access to your device whether it’s your laptop, desktop pc or your phone (which is no less of a computer that a full blown laptop) the game is over for you and your data. Any high-school student can get to your data. If they can’t get it via usb, there are countless ways to do it providing you have physical access to the device.

The good news is that in almost every case, the data is not what a phone thief wants, it’s the phone itself to sell.

Vaping
Offline
Last seen: 2 months 1 week ago
Joined: 09/20/2015 - 10:38
Posts: 194

You can remotely lock, erase or even find a lost Android device:

https://support.google.com/accounts/answer/6160491?hl=en

Furthermore, Samsung devices may have FRP
https://www.samsung.com/nz/support/mobile-devices/how-to-disable-google-...

zoulas
zoulas's picture
Offline
Last seen: 2 hours 29 min ago
Joined: 06/01/2020 - 08:35
Posts: 1836

Vaping wrote:
You can remotely lock, erase or even find a lost Android device:

https://support.google.com/accounts/answer/6160491?hl=en

Very sorry to tell you but this only works sometimes. Absolutely cannot rely on this method.

Vaping
Offline
Last seen: 2 months 1 week ago
Joined: 09/20/2015 - 10:38
Posts: 194

I agree it is not a perfect method, but I have lost and found Android devices with this before. however my phones are never above 99.00$ so it doesn’t matter that much.

sp5it
sp5it's picture
Offline
Last seen: 7 hours 44 sec ago
Joined: 12/25/2012 - 07:51
Posts: 1385
Location: Poland

Put some superglue to USB socket. Problem solved Sick

Think of how stupid the average person is, and realize half of them are stupider than that. George Carlin

 Anyone offended by my signature please fill Complaint Form. Thank you.

 If a lot of people listen to Slayer, the world would be a better place to live" - Tommy Wiseau

Yokiamy
Yokiamy's picture
Offline
Last seen: 1 day 54 min ago
Joined: 10/18/2016 - 15:47
Posts: 3030
Location: Netherlands

Cant you turn on the preferred method for USB connection?
on my Pixel there’s a USB setting for charging or MTP etc. so when you connect it, nothing will happen.

Quadrupel
Quadrupel's picture
Offline
Last seen: 10 hours 59 min ago
Joined: 12/03/2017 - 10:40
Posts: 713
Location: Lithuania

quantum computers… its impossible to keep data safe anymore ;))
…A quantum computer with only 100 qubits would, theoretically, be more powerful than all the supercomputers on the planet combined….
it will (can) crack any password in seconds..;)
,,,,,A computer with 79 qubits has already been built….

bilakos10
bilakos10's picture
Offline
Last seen: 1 day 12 hours ago
Joined: 08/22/2013 - 14:25
Posts: 1523
Location: ~ Earth

I think Android is supposed to let you mount your internal memory and SD Card on your computer only after you’ve successfully unlocked your phone after plugging it in.

Isn’t this the case with your device?
Maybe you’re plugging it in while it’s already unlocked and that’s why your SD card gets mounted seamlessly?

Lightbringer
Lightbringer's picture
Online
Last seen: 30 sec ago
Joined: 08/30/2016 - 14:12
Posts: 15492
Location: nyc

Short answer: no.

Unless you’d consider Mike’s stoopit-gloo suggestion. (I’d probably go with rtv, though.)

I carry only 2-wire power-only charging cables for micro, so I’m not afraid of charging pretty much anywhere, even on a bus, but that does nothing for C.

And my phones go right into a small molle pouch which then goes in my “purse”, one of those cross-body bags with like 95 pockets.

I’d be hard-pressed to let those phones go anywhere out of my possession. Plus I put an ancient Egyptian curse on anyone who violates the sanctity of my bags.

09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

manithree
manithree's picture
Offline
Last seen: 5 hours 5 min ago
Joined: 01/12/2013 - 01:08
Posts: 572
Location: Orem, UT, USA

I’m pretty sure if you encrypt your phone, they’ll have to have your fingerprint or passcode to unlock it and get your data. If you’re concerned about that, that’s probably the thing to do. And set a screen lock.

bilakos10
bilakos10's picture
Offline
Last seen: 1 day 12 hours ago
Joined: 08/22/2013 - 14:25
Posts: 1523
Location: ~ Earth
Lightbringer wrote:
Short answer: Plus I put an ancient Egyptian curse on anyone who violates the sanctity of my bags.

Got any stories to share? Big Smile

Lightbringer
Lightbringer's picture
Online
Last seen: 30 sec ago
Joined: 08/30/2016 - 14:12
Posts: 15492
Location: nyc
bilakos10 wrote:
I think Android is supposed to let you mount your internal memory and SD Card on your computer only after you’ve successfully unlocked your phone after plugging it in.

Not mine. Just plugging it in, even if it goes straight to the locked screen, I still get full access to internal memory and sd card.

I still wouldn’t trust any soft “lockout”, as you can still possibly do the press’n‘hold the power and volume buttons while booting up to get into “developer mode” or whatnot, and then have full access to everything.

09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

Lightbringer
Lightbringer's picture
Online
Last seen: 30 sec ago
Joined: 08/30/2016 - 14:12
Posts: 15492
Location: nyc
bilakos10 wrote:
Lightbringer wrote:
Short answer: Plus I put an ancient Egyptian curse on anyone who violates the sanctity of my bags.

Got any stories to share? Big Smile

Not publicly. Several “mysterious deaths” are still under investigation. LOL

No one knows what to make of the shreds of “ancient linen” that were found at the scene.

09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

djmcconn
djmcconn's picture
Offline
Last seen: 2 hours 54 min ago
Joined: 10/07/2011 - 23:04
Posts: 423
Location: North Carolina

ZOUNDS Bagman!

Inexorabill
Inexorabill's picture
Offline
Last seen: 16 hours 30 min ago
Joined: 02/12/2021 - 19:56
Posts: 22
Location: USA

I know modern iPhones are encrypted but I’m not sure about android.

Illuminant E master race.

Oli
Offline
Last seen: 1 day 14 hours ago
Joined: 08/03/2018 - 21:03
Posts: 490
Location: United States

Not really an expert here. Are these SD cards mounted as portable or extra internal phone storage? What are the chances you’ve already clicked some box at some point that allows your phone to recognize your computer? So the results would be different just plugging it into some random computer??? Do you have Wi-Fi on when you’re doing this? What’s the S10 on,,, Android 9? It’s probably not relevant but??? Also if I lost my phone I’d know about it PDQ. Maybe you need a better way to carry it, like lb. And yes some Android phones are encrypted. I haven’t tried it but I’m pretty sure there’s no way in hell my phone would show you anything if you plugged it in to a puwter if I had a pin set up or a fingerprint or the face unlock. And yes with some phones you have the option to predetermine what will happen when you plug it into a computer. I don’t remember where that is. Okay it is in the developer options there are various USB settings. I can’t help beyond that. Multiple edits above

sp5it
sp5it's picture
Offline
Last seen: 7 hours 44 sec ago
Joined: 12/25/2012 - 07:51
Posts: 1385
Location: Poland

Android is encrypted too, since a long time.

Think of how stupid the average person is, and realize half of them are stupider than that. George Carlin

 Anyone offended by my signature please fill Complaint Form. Thank you.

 If a lot of people listen to Slayer, the world would be a better place to live" - Tommy Wiseau

Bort
Bort's picture
Online
Last seen: 10 min 46 sec ago
Joined: 06/01/2012 - 17:15
Posts: 8131
Location: Holding the proverbial flashlight

bilakos10 wrote:
I think Android is supposed to let you mount your internal memory and SD Card on your computer only after you’ve successfully unlocked your phone after plugging it in.

Isn’t this the case with your device?
Maybe you’re plugging it in while it’s already unlocked and that’s why your SD card gets mounted seamlessly?


Yes, this.
No one should be able to access the data unless the phone is unlocked while connected.
All modern (since Marshmallow?) phones are encrypted so even if they tear the phone apart if they don’t know your password to unlock it they can’t access it.
Assuming the phone has a locking password. But if it allows unlimited PIN attempts they will eventually get in, as 4 digits takes 10,000 tries which would take a couple hours.

However memory cards used as external storage are not encrypted. If you use them as internal storage it is encrypted as well. Though i find doing so seems to be very buggy and i have lost data more than once by doing so, so i just use them as external storage and don’t put sensitive stuff on them.

The Journal of Alternative Facts TM

"It is critical that there is a credible academic source for the growing and important discipline of alternative facts. This field of study will just keep winning, and we knew that all the best people would want to be on board. There is a real risk in the world today that people might be getting their information about science from actual scientists"