Filippo Valsorda <[email protected]> writes:

>This is sometimes referred to as the mud puddle test.

Interesting, I hadn't heard that term before.  For anyone else interested,
it's from Matthew Green in this post:

  https://blog.cryptographyengineering.com/2012/04/05/icloud-who-holds-key/

  There’s a much simpler approach that I call the ‘mud puddle test’:

  1. First, drop your device(s) in a mud puddle.
  2. Next, slip in said puddle and crack yourself on the head. When you regain
     consciousness you’ll be perfectly fine, but won’t for the life of you be
     able to recall your device passwords or keys.
  3. Now try to get your cloud data back.

  Did you succeed? If so, you’re screwed.

Peter.

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/SY4PR01MB62518652692B1BDB67F9271AEE159%40SY4PR01MB6251.ausprd01.prod.outlook.com.

Reply via email to