4 ms·
It does[0]. Something is fishy about this story. Either the guy was targeted by someone who had a guess at the passcode for the device, or there’s some way that
by easton 6y ago
It does[0]. Something is fishy about this story. Either the guy was targeted by someone who had a guess at the passcode for the device, or there’s some way that the Gray Key (which is only easily available to LEO and government agencies) can bypass the rate limiting (would a hard reset do the trick? I don’t think so, but I don’t hack iPhones. But the iPhone is disabled screen sticks whether or not the device is on).
0: https://support.apple.com/guide/security/passcodes-sec20230a10d/1/web/1 https://support.apple.com/guide/security/passcodes-sec20230a...
- evanreichard 6y agoThere was no reference to the iPhone model in the Twitter thread that I noticed besides the logo, which could be an iPhone X. The iPhone X is vulnerable to an unpatchable BootROM exploit (checkm8), which could bypass the need to even brute force. EDIT: I haven't actually done this, and I'm not sure it would allow you to bypass a PIN, so just a theory.
- colejohnson66 6y agoAFAIK The bootrom exploit doesn’t allow getting around the hardware-based lockout. But I’m open to be proven wrong.
- n3k5 6y agoNo, you're right: Checkm8 only lets you boot into a custom OS, but to decrypt any data from the installed iOS, you'd need to hack the secure enclave, which it doesn't touch. (Technically you could boot a fake OS with a passcode skimmer, but developing this into an actual exploit isn't any easier than simply observing the user entering their passcode.)
- jonny_eh 6y agoOr the phone was unlocked when it was pinched.