3 ms·
> 2) Graykey does something in a few minutes It’s probably using some kind of exploit to upload a custom ramdisk (similar to jailbreaks). Except, unlike jailbr
by colejohnson66 7y ago
> 2) Graykey does something in a few minutes
It’s probably using some kind of exploit to upload a custom ramdisk (similar to jailbreaks). Except, unlike jailbreaks, it doesn’t jailbreak the device, but instead tests the passwords.
What’s also interesting is that the Secure Enclave (which holds the encryption key) is supposed to enforce the 10 password limit, so they’re doing something really clever here.
- daxorid 7y agoOccam's Razor here suggests that the SEP doesn't actually enforce the limit (it's clearly not enforcing the delays, either), and that the almighty Marketing Department defeated the security engineers once again. It's much more likely that a marketing-driven product development culture would lie to its customers than it is that Grayshift engineers have compromised the SEP itself. Researchers have been "compromising" HSMs by standing on its external signaling implementation rather than the chip itself for decades, now.