2 ms·
Based on the reported time-to-unlock it's pretty clear they're brute-forcing the passcode. The phone has an escalating lockout time after failed attempts, so th
by ubernostrum 9y ago
Based on the reported time-to-unlock it's pretty clear they're brute-forcing the passcode. The phone has an escalating lockout time after failed attempts, so they must have some way of evading that.
I've read a few theories of how that might work, from timing attacks to carefully-sequenced reboots of the phone to try to confuse the lockout mechanism.
- abalone 9y agoThat worked in the past but Apple got hip to it and specfically note that the SEP delay counter survives reboots. Maybe they missed something again but it seems less likely. My money is on a set of vulns similar to what CTS-Labs found in AMD’s secure coprocessors last month.[1][2] [1] https://thehackernews.com/2018/03/amd-processor-vulnerabilities.html https://thehackernews.com/2018/03/amd-processor-vulnerabilit... [2] https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-...