5 ms·

Actually, no. When you first power on an iPhone, you need the passphrase, not the FaceID. So swapping hardware does you no good unless you also have the passphr

Actually, no. When you first power on an iPhone, you need the passphrase, not the FaceID. So swapping hardware does you no good unless you also have the passphrase/passcode. Either way, let's say this attack you're talking about is possible. What % of people that buy this phone are actually going to be at risk of someone taking their phone apart to compromise them in this way? This method you explained is in no way "trivial." If you're Edward Snowden, don't use this feature. Simple as that. But I wouldn't use TouchID if I was Snowden either. Judging by your last paragraph, though, I'm guessing you're trolling. Have a nice day.

Sir_Cmpwn 9y ago
>Actually, no. When you first power on an iPhone, you need the passphrase, not the FaceID. So swapping hardware does you no good unless you also have the passphrase/passcode. You don't need to shut off the phone to get into the hardware. >What % of people that buy this phone are actually going to be at risk of someone taking their phone apart to compromise them in this way? This method you explained is in no way "trivial." On the other hand, I bet a company could easily implement such an attack on the cheap and sell it to LE, who would just pass the costs on to the defendant. >Judging by your last paragraph, though, I'm guessing you're trolling. Have a nice day. I'm setting the stakes. If you're not up for the discussion that's up to you.
- mikewhy 9y ago
  > You don't need to shut off the phone to get into the hardware. I'm genuinely curious if this has been done before and if you can provide examples.
  - Sir_Cmpwn 9y ago
    I don't have anything handy, I'm afraid, but the idea is sound from an electronics perspective. Definitely raises the implementation cost of this attack, though.
- Fnoord 9y ago
  > You don't need to shut off the phone to get into the hardware. Do you mean row hammer [1] or cold boot attack [2]? [1] https://en.wikipedia.org/wiki/Row_hammer https://en.wikipedia.org/wiki/Row_hammer [2] https://en.wikipedia.org/wiki/Cold_boot_attack https://en.wikipedia.org/wiki/Cold_boot_attack
  - Sir_Cmpwn 9y ago
    Uh, neither? I don't think you understand the problem.

Sir_Cmpwn 9y ago

>Actually, no. When you first power on an iPhone, you need the passphrase, not the FaceID. So swapping hardware does you no good unless you also have the passphrase/passcode. You don't need to shut off the phone to get into the hardware. >What % of people that buy this phone are actually going to be at risk of someone taking their phone apart to compromise them in this way? This method you explained is in no way "trivial." On the other hand, I bet a company could easily implement such an attack on the cheap and sell it to LE, who would just pass the costs on to the defendant. >Judging by your last paragraph, though, I'm guessing you're trolling. Have a nice day. I'm setting the stakes. If you're not up for the discussion that's up to you.

mikewhy 9y ago
> You don't need to shut off the phone to get into the hardware. I'm genuinely curious if this has been done before and if you can provide examples.
- Sir_Cmpwn 9y ago
  I don't have anything handy, I'm afraid, but the idea is sound from an electronics perspective. Definitely raises the implementation cost of this attack, though.
Fnoord 9y ago
> You don't need to shut off the phone to get into the hardware. Do you mean row hammer [1] or cold boot attack [2]? [1] https://en.wikipedia.org/wiki/Row_hammer https://en.wikipedia.org/wiki/Row_hammer [2] https://en.wikipedia.org/wiki/Cold_boot_attack https://en.wikipedia.org/wiki/Cold_boot_attack
- Sir_Cmpwn 9y ago
  Uh, neither? I don't think you understand the problem.