Cops Are Hacking iPhones With Secretive $15,000 GrayKey

Oni · 10-09-2020, 02:15 AM

I'm not sure on the semantics of iPhones, but I know Android requires a password after about 5 failed fingerprint scans. For Android you can also require a password on boot. Does the iPhone not have a similar failsafe, in the event someone is trying to bruteforce the fingerprint scanner? Can that be bypassed?

@phyrrus9 might know.

phyrrus9 · 10-09-2020, 06:03 AM

(10-09-2020, 02:15 AM)Oni Wrote: I'm not sure on the semantics of iPhones, but I know Android requires a password after about 5 failed fingerprint scans. For Android you can also require a password on boot. Does the iPhone not have a similar failsafe, in the event someone is trying to bruteforce the fingerprint scanner? Can that be bypassed?

@phyrrus9 might know.

iOS always requires a passcode on boot, and you can set how often its required (default is always). The passcode itself unlocks the encryption key to the partition holding your data, the phone doesn't ever know it.

PCcracker · 10-09-2020, 06:18 AM

Thanks bro. It was a nice info

mothered · 10-09-2020, 09:45 AM

(10-09-2020, 06:03 AM)phyrrus9 Wrote: iOS always requires a passcode on boot, and you can set how often its required (default is always). The passcode itself unlocks the encryption key to the partition holding your data, the phone doesn't ever know it.

In the event you forget the passcode, what recovery options are available?

phyrrus9 · 10-10-2020, 12:22 AM

(10-09-2020, 09:45 AM)mothered Wrote:
(10-09-2020, 06:03 AM)phyrrus9 Wrote: iOS always requires a passcode on boot, and you can set how often its required (default is always). The passcode itself unlocks the encryption key to the partition holding your data, the phone doesn't ever know it.
In the event you forget the passcode, what recovery options are available?

None. You can wipe the device and start fresh, or you can optionally turn on a secondary encryption system that would allow you to change the passcode using a different passcode remotely.

Oni · 10-10-2020, 01:26 AM

(10-09-2020, 06:03 AM)phyrrus9 Wrote:
(10-09-2020, 02:15 AM)Oni Wrote: I'm not sure on the semantics of iPhones, but I know Android requires a password after about 5 failed fingerprint scans. For Android you can also require a password on boot. Does the iPhone not have a similar failsafe, in the event someone is trying to bruteforce the fingerprint scanner? Can that be bypassed?

@phyrrus9 might know.

iOS always requires a passcode on boot, and you can set how often its required (default is always). The passcode itself unlocks the encryption key to the partition holding your data, the phone doesn't ever know it.

How would you theorize this "GrayKey" works? If I remember, Apple refused to backdoor.

phyrrus9 · 10-10-2020, 02:17 AM

(10-10-2020, 01:26 AM)Oni Wrote:
(10-09-2020, 06:03 AM)phyrrus9 Wrote:
(10-09-2020, 02:15 AM)Oni Wrote: I'm not sure on the semantics of iPhones, but I know Android requires a password after about 5 failed fingerprint scans. For Android you can also require a password on boot. Does the iPhone not have a similar failsafe, in the event someone is trying to bruteforce the fingerprint scanner? Can that be bypassed?

@phyrrus9 might know.

iOS always requires a passcode on boot, and you can set how often its required (default is always). The passcode itself unlocks the encryption key to the partition holding your data, the phone doesn't ever know it.

How would you theorize this "GrayKey" works? If I remember, Apple refused to backdoor.

There are always people looking to break Apple's security. Usually to escape the walled garden, but occasionally those reveal serious security flaws. For example last year, Apple's internal signing key was leaked, which allowed many the ability to recompile the firmware for the iPhone, with security removed and run it on their devices to discover other vulnerabilities. It's always been a cat and mouse game, and probably always will be.

mothered · 10-10-2020, 02:57 AM

(10-10-2020, 12:22 AM)phyrrus9 Wrote: None. You can wipe the device and start fresh

In my view, there should be a recovery option In place.

How do you wipe the device If you cannot access the phone due to a forgotten passcode?

phyrrus9 · 10-10-2020, 04:56 AM

(10-10-2020, 02:57 AM)mothered Wrote:
(10-10-2020, 12:22 AM)phyrrus9 Wrote: None. You can wipe the device and start fresh
In my view, there should be a recovery option In place.

How do you wipe the device If you cannot access the phone due to a forgotten passcode?

You can use a button combination to set it into recovery mode, and then upload firmware, or you can wipe the encryption key remotely (same effect), or enter the code incorrectly 10 times.

mothered · 10-10-2020, 08:50 AM

(10-10-2020, 04:56 AM)phyrrus9 Wrote: You can use a button combination to set it into recovery mode, and then upload firmware, or you can wipe the encryption key remotely (same effect), or enter the code incorrectly 10 times.

Got It.

All In all, there are a few recovery options to choose from.
Thanks for clarifying It.