4 ms·
Apple can hypothetically upload an OS update enabling unlimited password attempts, so that the encryption key can be brute forced.
by mrdrozdov 11y ago
Apple can hypothetically upload an OS update enabling unlimited password attempts, so that the encryption key can be brute forced.
- jMyles 11y agoRight - so that means that the iPhone is already broken, no? ...and, more to the point: when phones come out that don't have this vulnerability, none of this will matter, right?
- zaroth 11y agoThe specific technique/functionality they are asking for in this case most likely only works on the 5c, but there are also reports that the auto-wipe on the 6s which is handled by the secure enclave could also be disabled on a locked phone. Even if both of these particular vulnerabilities are closed, it's almost a guarantee that additional vulnerabilities exist which Apple could be forced to exploit. The next best example is perhaps police forcing Apple to wiretap iMessages in real-time. They have tried countless times and Apple has said they do not have the capability and refused to create it. But it is clearly technically possible from the design. Closing that vulnerability would require significant changes to the iMessage UX. Some people argue we can't trust Apple and they should make those changes in any case, but obviously Apple is willing to impose some level of trust in their own infra in order to gain UX advantages.