|
Posted by Steve Riley [MSFT] on November 5, 2007, 3:39 pm
Please log in for more thread options How does one access data on a computer? Two ways: locally and remotely.
Remotely accessing data in main memory on a smartphone would always result
in the clear-text data leaving the device, even if the data is encrypted in
main memory.
Locally accessing data in main memory requires physical access to the
device. If the device is protected by a PIN, I don't know of any way to get
to the data without first supplying the PIN.
Just because someone wants to sell you something, doesn't mean that you need
it. Additionally, just because a security feature exists, doesn't mean that
it should be enabled.
--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley http://www.protectyourwindowsnetwork.com
> There are some product on the market that encrypt the internal memory. My
> understanding is that there might be ways of accessing the data even
> having
> strong PIN set up. Otherwise, why would those products be offerred?
> Thank you.
>
> "Steve Riley [MSFT]" wrote:
>
>> Storage card encryption is important because the card can be removed from
>> the device. By encrypting the card, you protect the contents if your card
>> gets stolen.
>>
>> But main memory really doesn't need encrypting, when you think about it.
>> Do
>> you have a PIN configured on your device? If so, then you've got the
>> protection you need. So long as your PIN is good enough to survive
>> guessing
>> attacks to the point where device reset kicks in, encrypting main memory
>> isn't necessary. It would drag down performance without offering any
>> security advantage.
>>
>> --
>> Steve Riley
>> steve.riley@microsoft.com
>> http://blogs.technet.com/steriley
>> http://www.protectyourwindowsnetwork.com
>>
>>
>> > I am using Mogul HTC 6800 with Windows Mobile 6. I'm looking for a
>> > solution
>> > to encrypt the data, there is an option to encrypt the storage card but
>> > not
>> > the build in storage. Is there an option to install Outlook on the
>> > storage
>> > card instead to encrypt it? Do you have any suggestions?
>> >
>> > Thank you.
>>
>>
|