panic message to lock all open databases
omnirom has a very clever feature that is a solid defense against forensics: if the lock screen is enabled and someone connects to USB with adb, the phone automatically powers off. Then if you have Full disk encryption, your device is fully locked and encrypted.
I could see this tying into cacheword for an even quicker response: when cacheword gets this same signal, it could lock all open databases. That would be a much sneakier defense since the forensics device would still be able to get the phone data, but all the sensitive data would be encrypted and locked. So it would not arise suspicion since it would look no different, versus the phone shutting down.
This could also be implemented outside of being tied into the lock screen if it was some kind of generic broadcast message. It seems that the worst abuse that could happen would be DoS launched by a local app.
#4 Updated by abeluck almost 4 years ago
So rebooting is definitely not a possibility without root, custom rom, or system signed package.
However, detecting USB events might work, though I'm not sure if they'd work with forensic devices (e.g., celbrite)
Relevant android documentation:
- https://developer.android.com/reference/android/hardware/SensorEventListener.html (maybe some sensors fire on usb plug?)
Relevant other info: