4 ms·
Do I understand this correctly: does this mean that every iOS device from iPhone 4 to iPhone 8 + iPhone X could be unlocked for data access if you had physical
by alibert 7y ago
Do I understand this correctly: does this mean that every iOS device from iPhone 4 to iPhone 8 + iPhone X could be unlocked for data access if you had physical access to it?
Also one of the following reply to the twitter link posted somewhere in the comment here [0] has the following:
`During iOS 12 betas in summer 2018, Apple patched a critical use-after-free vulnerability in iBoot USB code. This vulnerability can only be triggered over USB and requires physical access. It cannot be exploited remotely. I am sure many researchers have seen that patch.`
This could explain the recent price reduction of bounty for iOS (lower than Android) [1]
[0] https://news.ycombinator.com/item?id=21091247 https://news.ycombinator.com/item?id=21091247
[1] https://www.zdnet.com/article/android-exploits-are-now-worth-more-than-ios-exploits-for-the-first-time/ https://www.zdnet.com/article/android-exploits-are-now-worth...
- hnghost 7y agoAs per the wording of the article, that is the correct understanding.
- topranks 7y agoThe data on the device is encrypted. This allows you to install a different OS on the device, but it won’t be able to decrypt the users data without pin code. You could potentially flash a new firmware which contains a keylogger and sends the pin to someone. Or that waits for the user to enter it (decrypting the disk,) and then siphons off the data. But on your own with a stolen phone and this you won’t be able to read the data.