5 ms·

> The Manhattan district attorney, Cyrus R. Vance Jr., foreground, and New York City’s police commissioner, William J. Bratton, behind him, say they have about

by arrty88 11y ago

> The Manhattan district attorney, Cyrus R. Vance Jr., foreground, and New York City’s police commissioner, William J. Bratton, behind him, say they have about 175 iPhones they have been unable to unlock. Wait, how many have they been able to unlock and how? Sheer luck?

Eric_WVGG 11y ago
nah they have tools that can be embedded between the touchscreen and logic board, can be used to brute force https://www.youtube.com/watch?v=meEyYFlSahk https://www.youtube.com/watch?v=meEyYFlSahk I naively thought it was a machine with a robotic finger, derp
- cplease 11y ago
  Only on iOS <= 8.1. Is there anything published that works since 8.1.1?
- jonah 11y ago
  This is the blog post that video comes from: http://blog.mdsec.co.uk/2015/03/bruteforcing-ios-screenlock.html http://blog.mdsec.co.uk/2015/03/bruteforcing-ios-screenlock.... It has a bit more context.
- taneq 11y ago
  Is this close enough to your original idea? http://www.dashfest.com/?p=393 http://www.dashfest.com/?p=393
nightpool 11y ago
Depends a lot on the version of the phone and the state that they found them in, no?
matthew-wegner 11y ago
Perhaps luck (trying birthdays), perhaps getting pin numbers from other services (ATM card) and trying those...
ceejayoz 11y ago
As long as the "delete after ten failed attempts" feature is off, you can try as many times as you want. It'll be slow going (the phone institutes delays after a bunch of failures), but I'm sure feeding SSNs, phone numbers, birthdays, etc. into it gets decent returns.
- rasz_pl 11y ago
  >> still works even with the “Erase data after 10 attempts” configuration setting enabled. Our initial analysis indicates that the IP Box is able to bypass this restriction by connecting directly to the iPhone’s power source and aggressively cutting the power after each failed PIN attempt, but before the attempt has been synchronized to flash memory

by arrty88 11y ago

Eric_WVGG 11y ago

nah they have tools that can be embedded between the touchscreen and logic board, can be used to brute force https://www.youtube.com/watch?v=meEyYFlSahk https://www.youtube.com/watch?v=meEyYFlSahk I naively thought it was a machine with a robotic finger, derp

cplease 11y ago
Only on iOS <= 8.1. Is there anything published that works since 8.1.1?
jonah 11y ago
This is the blog post that video comes from: http://blog.mdsec.co.uk/2015/03/bruteforcing-ios-screenlock.html http://blog.mdsec.co.uk/2015/03/bruteforcing-ios-screenlock.... It has a bit more context.
taneq 11y ago
Is this close enough to your original idea? http://www.dashfest.com/?p=393 http://www.dashfest.com/?p=393

nightpool 11y ago

Depends a lot on the version of the phone and the state that they found them in, no?

matthew-wegner 11y ago

Perhaps luck (trying birthdays), perhaps getting pin numbers from other services (ATM card) and trying those...

ceejayoz 11y ago

As long as the "delete after ten failed attempts" feature is off, you can try as many times as you want. It'll be slow going (the phone institutes delays after a bunch of failures), but I'm sure feeding SSNs, phone numbers, birthdays, etc. into it gets decent returns.

rasz_pl 11y ago
>> still works even with the “Erase data after 10 attempts” configuration setting enabled. Our initial analysis indicates that the IP Box is able to bypass this restriction by connecting directly to the iPhone’s power source and aggressively cutting the power after each failed PIN attempt, but before the attempt has been synchronized to flash memory