3 ms·
The PIN is not stored anywhere on the device. It is validated by the Secure Enclave but cannot be recalled. So this attack vector would need to involve flashing
by morpheuskafka 7y ago
The PIN is not stored anywhere on the device. It is validated by the Secure Enclave but cannot be recalled. So this attack vector would need to involve flashing a malicious iOS clone that would boot normally and ask the user to enter their PIN/TouchID normally before activating malicious functions.