3 ms·
Do you have a good citation for that or is it just a personal theory?
by 13of40 11y ago
Do you have a good citation for that or is it just a personal theory?
- mikeash 11y agoApple used to have a bug where they'd report PIN failure before writing that failure to nonvolatile storage. Somebody took advantage of this by building a box that cut power before the write could be performed, allowing a brute force attack: https://www.intego.com/mac-security-blog/iphone-pin-pass-code/ https://www.intego.com/mac-security-blog/iphone-pin-pass-cod... The proposal here is similar, just using a different technique to prevent the write. There isn't any nonvolatile storage besides the flash memory, so if you can reset that then the software has no way of knowing what happened before.
- dr_zoidberg 11y agoThanks for the link, it looks interesting.
- superuser2 11y agoNote that this was patched and is no longer feasible.
- 05 11y agoA personal theory. The iPhone Wiki has a description of iPhone storage structure - it seems newer phones (pre Secure Enclave) don't have separate NOR, NVRAM and NAND - they just use NAND for everything. [1] https://www.theiphonewiki.com/wiki/NOR https://www.theiphonewiki.com/wiki/NOR