5 ms·

Those passcodes aren't usually long? I'm not trying to add to the debate here but couldn't they brute force it?

by lawlessone 11y ago

jhasse 11y ago
Exactly! Most of the time they are 4 digits. Also what about finger prints on the phones?
probablyfiction 11y ago
After a certain number of failed attempts, newer devices lock themselves.
- geographomics 11y ago
  According to this writeup, that may be worked around by resetting the device after every few attempts: http://www.zdziarski.com/blog/?p=5106 http://www.zdziarski.com/blog/?p=5106 (penultimate paragraph)
huxley 11y ago
You can set your iPhone to secure erase after 10 failed pass-code attempts. In addition you can use long alphanumeric pass codes and even the default new passcode option is being increased to 6 digits (though you can choose a 4 digit option). This renders the brute force option pretty useless. Which I'm fine with, I don't want to make things easier for crooks or identity thieves.
- dtech 11y ago
  Would that work against a determined opponent with physical access? Unless the iPhone has some fairly high-grade encryption hardware I suspect you can just do fun things like copy the (encrypted) storage/key to brute-force it without the safety mechanisms kicking in.
  - huxley 11y ago
    It does have some pretty fancy encryption hardware and Apple seems to have made it very difficult to do even with physical access. David Schultz wrote a pretty comprehensive article about it: http://www.darthnull.org/2014/10/06/ios-encryption http://www.darthnull.org/2014/10/06/ios-encryption
- joshstrange 11y ago
  There are ways around that still http://techcrunch.com/2015/03/19/iphone-bruteforce-pin/ http://techcrunch.com/2015/03/19/iphone-bruteforce-pin/ In this case they cut the power to the device before it can write to memory the failed attempt (IIRC) allowing them to keep trying over and over (with a small delay for the phone to restart every 9 tries).

Those passcodes aren't usually long? I'm not trying to add to the debate here but couldn't they brute force it?

jhasse 11y ago

Exactly! Most of the time they are 4 digits. Also what about finger prints on the phones?

probablyfiction 11y ago

After a certain number of failed attempts, newer devices lock themselves.

geographomics 11y ago
According to this writeup, that may be worked around by resetting the device after every few attempts: http://www.zdziarski.com/blog/?p=5106 http://www.zdziarski.com/blog/?p=5106 (penultimate paragraph)

huxley 11y ago

You can set your iPhone to secure erase after 10 failed pass-code attempts. In addition you can use long alphanumeric pass codes and even the default new passcode option is being increased to 6 digits (though you can choose a 4 digit option). This renders the brute force option pretty useless. Which I'm fine with, I don't want to make things easier for crooks or identity thieves.

dtech 11y ago
Would that work against a determined opponent with physical access? Unless the iPhone has some fairly high-grade encryption hardware I suspect you can just do fun things like copy the (encrypted) storage/key to brute-force it without the safety mechanisms kicking in.
- huxley 11y ago
  It does have some pretty fancy encryption hardware and Apple seems to have made it very difficult to do even with physical access. David Schultz wrote a pretty comprehensive article about it: http://www.darthnull.org/2014/10/06/ios-encryption http://www.darthnull.org/2014/10/06/ios-encryption
joshstrange 11y ago
There are ways around that still http://techcrunch.com/2015/03/19/iphone-bruteforce-pin/ http://techcrunch.com/2015/03/19/iphone-bruteforce-pin/ In this case they cut the power to the device before it can write to memory the failed attempt (IIRC) allowing them to keep trying over and over (with a small delay for the phone to restart every 9 tries).