4 ms·
So it is necessary to know a device's PIN to apply this jailbreak? The article refers to Secure Enclave and how its protection cannot be bypassed, but it's unc
by factorized 7y ago
So it is necessary to know a device's PIN to apply this jailbreak?
The article refers to Secure Enclave and how its protection cannot be bypassed, but it's unclear whether the PIN itself (and entering the DFU mode) is protected by the Secure Enclave.
- qeternity 7y agoThe PIN isn’t protected by the Secure Enclave. The PIN is what protects it. The SE protects cryptographic keys.
- morpheuskafka 7y agoThe PIN is not stored anywhere on the device. It is validated by the Secure Enclave but cannot be recalled. So this attack vector would need to involve flashing a malicious iOS clone that would boot normally and ask the user to enter their PIN/TouchID normally before activating malicious functions.