5 ms·
Okay, but fooling a biometrics sensor is not exactly a Lock Screen bypass. Has iOS had a Lock Screen bypass?
by mwint 4y ago
Okay, but fooling a biometrics sensor is not exactly a Lock Screen bypass. Has iOS had a Lock Screen bypass?
- ajross 4y agoFooling a biometric sensor is precisely a lock screen bypass, that's what the biometrics are for. By that logic the linked bug was "fooling the SIM security layer" and not a "lock screen bypass". Don't play that game, it's bad logic and bad security practice.
- mwint 4y agoBut it’s a fundamentally different type of security bug: these biometrics bypasses require knowing something about the user (lift a fingerprint, picture of a face, etc). I see this as a different class: I can grab an unknown person’s Pixel they left in a coffee shop and get into it.
- lrvick 4y agoCellebrite sits on a pile of unlock exploits for Apple devices and sells unlocking services to law enforcement, or presumably anyone with money. https://cellebrite.com/en/cas-sales-inquiry/ https://cellebrite.com/en/cas-sales-inquiry/ Zerodium brokers sales of iOS FCP Zero Click for $2m. I expect they sell to people like Cellebrite who can make a profit selling expensive unlocks and keeping the vuln secret. https://www.zerodium.com/program.html https://www.zerodium.com/program.html All phones are security shit shows. It is just a game of how well known this months exploits are and how much someone has to gain by targeting you.