Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Cops Are Confident iPhone Hackers Have Found a Workaround to Apple’s New Security Feature
Motherboard.vice.com ^ | June 14, 2018 | By Joseph Cox and Lorenzo Franceschi-Bicchierai

Posted on 06/15/2018 3:34:22 PM PDT by Swordmaker

“Grayshift has gone to great lengths to future proof their technology and stated that they have already defeated this security feature in the beta build.”


Image: Malwarebytes

Apple confirmed to The New York Times Wednesday it was going to introduce a new security feature, first reported by Motherboard. USB Restricted Mode, as the new feature is called, essentially turns the iPhone’s lightning cable port into a charge-only interface if someone hasn’t unlocked the device with its passcode within the last hour, meaning phone forensic tools shouldn’t be able to unlock phones.

Naturally, this feature has sent waves throughout the mobile phone forensics and law enforcement communities, as accessing iPhones may now be substantially harder, with investigators having to rush a seized phone to an unlocking device as quickly as possible. That includes GrayKey, a relatively new and increasingly popular iPhone cracking tool. But forensics experts suggest that Grayshift, the company behind the tech, is not giving up yet.

“Grayshift has gone to great lengths to future proof their technology and stated that they have already defeated this security feature in the beta build. Additionally, the GrayKey has built in future capabilities that will begin to be leveraged as time goes on,” a June email from a forensic expert who planned to meet with Grayshift, and seen by Motherboard, reads, although it is unclear from the email itself how much of this may be marketing bluff.

“They seem very confident in their staying power for the future right now,” the email adds.

(Excerpt) Read more at motherboard.vice.com ...


TOPICS: Crime/Corruption; Government; News/Current Events
KEYWORDS: apple; appleiphone; applepinglist; iphone; police; privacy; security
Navigation: use the links below to view more comments.
first previous 1-2021-31 last
To: minnesota_bound
We do not use Grayshift nor did I say. If you read the article you would have understood this.

Like your previous lies in Apple threads, it's all BS you post. It doesn't matter what you post, MB. . . you post lies. You don't know what you are talking about. Your company would not be using iPhones if they were so easy to crack. . . and if Apple were so difficult to get ahold of. YOU stated your company called that company, not me. So if you claimed you aren't using it why would you have any need to call them? BS posting is the only reason. We all see it. Keep dancing. . . it's amusing.

21 posted on 06/16/2018 7:39:40 PM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 18 | View Replies]

To: PapaBear3625
I'm still failing to understand why Apple would provide the ability to pass in the unlocking password via USB, rather than manually at the screen. Or why Apple would continue to allow password attempts at USB speed after a small number of attempts.

The passcode STILL has to be entered only from the screen input.

Grayshift's Graybox device displays the passcode of the targeted iPhone/IPad on another iPhone's screen. . . not on the targeted device. It is making multiple attempts until it finds the one that works, then it displays the correct passcode on the already open device, the amount of time it took, and other statistics. It doesn't actually do the unlocking of the target iPhone.

Essentially since you cannot run an App on a locked iPhone, they are running it on an already unlocked iPhone. . . and accessing the locked device through its Lightning port to spoof its security lockouts. It's really quite ingenious.

Apple is going to close that door by making the Lightning port a power only port if the actual passcode has not been entered within the past hour from the screen. TouchID and FaceID do not qualify as a qualifying an entry. You cannot spoof it if it will not accept data at all.

22 posted on 06/16/2018 7:55:08 PM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 19 | View Replies]

To: PapaBear3625
I'm still failing to understand why Apple would provide the ability to pass in the unlocking password via USB, rather than manually at the screen. Or why Apple would continue to allow password attempts at USB speed after a small number of attempts.

The passcode STILL has to be entered only from the screen input.

Grayshift's Graybox device displays the passcode of the targeted iPhone/IPad on another iPhone's screen. . . not on the targeted device. It is making multiple attempts until it finds the one that works, then it displays the correct passcode on the already open device, the amount of time it took, and other statistics. It doesn't actually do the unlocking of the target iPhone.

Essentially since you cannot run an App on a locked iPhone, they are running it on an already unlocked iPhone. . . and accessing the locked device through its Lightning port to spoof its security lockouts. It's really quite ingenious.

Apple is going to close that door by making the Lightning port a power only port if the actual passcode has not been entered within the past hour from the screen. TouchID and FaceID do not qualify as a qualifying an entry. You cannot spoof it if it will not accept data at all.

23 posted on 06/16/2018 7:55:08 PM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 19 | View Replies]

To: minnesota_bound
We do not use Grayshift nor did I say. If you read the article you would have understood this.

By the way, I read the article. In fact, I posted it. Apparently you did not.

24 posted on 06/16/2018 8:42:20 PM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 18 | View Replies]

To: Swordmaker

You are the only person on this forum that insults people.
You should try to be a nice person. You will be feel better for it.


25 posted on 06/17/2018 12:37:41 AM PDT by minnesota_bound
[ Post Reply | Private Reply | To 21 | View Replies]

To: minnesota_bound
You are the only person on this forum that insults people.
You should try to be a nice person. You will be feel better for it.

Or you can stop posting gratuitous lies on Apple threads and I’ll stop calling you on them. . . but calling someon what they obviously are s no insulting them, it’s only recognizing and stating the truth. You lie.

Incidentally, I feel quite well when I’m exposing liars for what they are and calling them on their BS. So far you haven’t posted an honest reply on this thread.

26 posted on 06/17/2018 3:32:05 AM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Swordmaker
... to only accept data access after the passcode has been input for one hour.

You mean I have to input the passcode for an hour?

27 posted on 06/18/2018 6:42:23 AM PDT by P8riot (I carry a gun because I can't carry a cop.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: P8riot
"... to only accept data access after the passcode has been input for one hour."

You mean I have to input the passcode for an hour?

LOL!

That is a bit of an awkward construction, isn't it?

Try it this way: ". . . to only accept data access for one hour after a valid passcode has been input."

28 posted on 06/18/2018 5:07:32 PM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 27 | View Replies]

To: hanamizu

Last time I had to get in touch with Apple, they gave me the option to give a callback number - and I received a call 10 minutes later...


29 posted on 06/19/2018 11:23:28 AM PDT by TheBattman (Democrats-Progressives-Marxists-Socialists - redundant labels.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: minnesota_bound

The biggest lie I’ve seen here on FR in a LONG time... I have RECEIVED more insults than can be counted on the hands and feet of the US congress-critters. Never one from Swordmaker - but 98% are from anti-Apple trolls who hurl insults like a batting practice pitching machine.

You misunderstand (as most liberals also do) that presentation of observable facts to correct errors does not equal “insults”.


30 posted on 06/19/2018 11:27:48 AM PDT by TheBattman (Democrats-Progressives-Marxists-Socialists - redundant labels.)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Swordmaker

Yeah, I figured that was what they were trying to say, but I just can’t resist digs at improper grammar.


31 posted on 06/19/2018 2:44:51 PM PDT by P8riot (I carry a gun because I can't carry a cop.)
[ Post Reply | Private Reply | To 28 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-31 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson