6 ms·
"Nobody knows how?" They have a pretty plausible explanation in the back half of this very article: > With iOS 12, Apple implemented a highly-anticipated chang
by Someone1234 8y ago
"Nobody knows how?" They have a pretty plausible explanation in the back half of this very article:
> With iOS 12, Apple implemented a highly-anticipated change called “USB Restricted Mode.” This shuts off lightning port access on the iPhone if it hasn’t been unlocked by a user in the last hour. This was widely believed to be Apple’s solution to foil companies like GrayShift and Cellebrite but we don’t know for certain if that did the trick. Apple did not return our request for comment.
That would definitely do it. If Lightning goes down they cannot differentially backup/restore while attempting to guess the user's passcode.
- deleted 8y ago[deleted]
- saagarjha 8y agoThis was a well known feature. My guess is that Apple has now actually fixed the underlying issue that they were using.
- StudentStuff 8y agoPresumably patching whatever bug they were exploiting to avoid triggering the pin anti-bruteforcing feature Apple has had for nearly a decade...
- eridius 8y agoDuring the iOS 12 betas it was reported that GrayKey was able to operate despite USB Restricted Mode. No information was given as to how though.
- HatchedLake721 8y agoReported by GrayKey itself. Nothing but marketing and PR to calm down customers while they were trying to find holes in the beta.
- lawnchair_larry 8y agoI doubt that
- seppin 8y agoit's a pretty easy put up or shut up moment
- eridius 8y agoGiven that customers themselves had access to the beta, if that were true it would have been pretty easy for someone else with access to a GrayKey to refute that.
- SmellyGeekBoy 8y agoOr confirm it
- eridius 8y agoThere's not really any motivation for people with access to GrayKeys to confirm things that GrayKey has said. I would imagine that GrayShift frowns upon its clients talking publicly about GrayKey, so there'd have to actually be a good reason for someone to do so. "GrayShift told the truth" isn't a particularly good reason. But "GrayShift is lying" for many people would be a good enough reason to be worth speaking up. Heck, even an anonymous claim that GrayShift is lying would be something, but if anyone made such a claim, it wasn't publicized anywhere.
- Scoundreller 8y agoHow do you backup your phone after you smash your screen?
- chrischen 8y agoThat’s an event a backup is supposed go help with. You’re talking no longer about backup, but restore.
- hrrsn 8y agoI'd wager this is a fairly fringe case that isn't worth the trade off. If you don't have a recent backup and absolutely need the data, take it to a third party repair shop/buy a screen from ifixit/data recovery lab, connect a new display, enter your PIN, back it up.
- thetinguy 8y agoSame way you do if your drive fails in your computer. You don’t. You should make regular backups before anything happens to your device.
- wepple 8y agoSomewhat tangentially, it’s actually a fairly smooth process to pull data off a MacBook when the keyboard/graphics/touchpad are dead. A friend dropped a drink through his and it looked very dead. Turns out with a thunderbolt cable, another Mac, and his disk crypto password & he had easy access so his old disk. Don’t ask me how, but kudos Apple.
- sigfubar 8y agoDisk encryption usually employs some form of PBKDF to turn the user’s passphrase into a key that’s usable for crypto. If you know the specific derivation function and the passphrase, unlocking the storage device on another machine is a matter of setting up the software. When both ends of this are Apple machines (one end: the damages machine running in target disk mode; other end: a working machine) the key derivation is taken care of by definition, requiring the user to merely enter the passphrase.