New Swedish law + Encrypted phones 02-27-2020, 08:11 PM
#1
On March 1 in Sweden there will be a new law passing allowing police to legally "hack" phones, all that's required is a suspicion that the person is engaging in criminal activities. The reason for the new law is because drug-dealers are using encrypted chat-apps like Telegram, Signal, Wickr, etc. How they are going to do this is not really clear, but I'm guessing they'll stock up on 0days in some of the most popular apps used. I've also heard they could install malware on your phone, either through physical tampering or by having the targets ISP remotely do it through some form of MITM attack.
My threat-model hasn't really covered a national entity like this before, but I've bought two new Android phones for me and my friend and was thinking of securing it as well as I can. I'm planning on unlocking the bootloader on both, rooting them and installing LineageOS. LineageOS comes with the standard Android 10 encryption. I was thinking we start using XMPP with a self-hosted XMPP server using OMEMO, I could just download a good client on both our phones and set it up for him. As for internet you can simply buy prepaid surf with cash and get a new SIM card after each payment. This way they wouldn't know which phone to target, if they were theoretically trying to install malware through the ISP. Then locking the bootloader again once I'm done.
Maybe unrooting it after I've done the changes I want to (like removing pre-installed bloatware) is a good idea as having root access on your phone could be a huge security flaw. Also I'm not even sure if a MITM attack like this would work if the ISP is compromised. Do you guys have any other suggestions?
My threat-model hasn't really covered a national entity like this before, but I've bought two new Android phones for me and my friend and was thinking of securing it as well as I can. I'm planning on unlocking the bootloader on both, rooting them and installing LineageOS. LineageOS comes with the standard Android 10 encryption. I was thinking we start using XMPP with a self-hosted XMPP server using OMEMO, I could just download a good client on both our phones and set it up for him. As for internet you can simply buy prepaid surf with cash and get a new SIM card after each payment. This way they wouldn't know which phone to target, if they were theoretically trying to install malware through the ISP. Then locking the bootloader again once I'm done.
Maybe unrooting it after I've done the changes I want to (like removing pre-installed bloatware) is a good idea as having root access on your phone could be a huge security flaw. Also I'm not even sure if a MITM attack like this would work if the ISP is compromised. Do you guys have any other suggestions?
(This post was last modified: 02-27-2020, 08:18 PM by zn0.)
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)














![[Image: KmPTi6b.png]](https://i.imgur.com/KmPTi6b.png)






