4 ms·

I just served on a jury for a that made extensive use of Cellbrite, Greykey and cell tower triangulation. It was crazy how routine this is on law enforcement, a

I just served on a jury for a that made extensive use of Cellbrite, Greykey and cell tower triangulation. It was crazy how routine this is on law enforcement, and how much they got from an iPhone. (Everything). Case has now completed but it completed because of that evidence.

noduerme 3y ago
Please tell us more! This is likely the best way for that information to come out.
- throwaway17_17 3y ago
  What information are you looking for? I didn’t know there was such a lack of information on what law enforcement agencies get from Cellebrite. I can only speak to my personal and professional (non-LEO) experience, but I’ll give it a shot.
  - bagels 3y ago
    Which phone model/version? Did they need anything from other owner? From apple? Physical access? USB? Brute force bypass? Anything you can describe about the capabilities and techniques people would be interested in knowing.
    - abwizz 3y ago
      i rekon that if the case is big enough, the'll get access to the cloud backups. the UFED product page states that it can bypass device locks, this sounds like physical access and would only require the device to be confiscated.
d__a__n__g 3y ago
[flagged]
- qbasic_forever 3y ago
  WTF is with your account? Are you trying to impersonate dang, the official moderator?
  - deleted 3y ago
    [deleted]
  - deleted 3y ago
    [deleted]
switch007 3y ago
You can’t leave us hanging with “…from an iPhone (everything)”!!
theshrike79 3y ago
So just normal regular cops got "everything" off a locked iPhone. Please share what you know, because that'd be huge news. The last info we had is that even the FBI had trouble getting into a locked 4S and the protection has improved significantly. After that the info was that Graykey(?) could bypass the attempt limit on passcodes, but by having an alphanumeric code you could make brute forcing take longer than our Sun has life left in it.
- thefz 3y ago
  You do understand that everything you know about iPhone's privacy comes from Apple's mouth, right? Snowden has revealed they are more than happy to let agencies into their supply chain.
  - viktorcode 3y ago
    > You do understand that everything you know about iPhone's privacy comes from Apple's mouth, right? No, we know that from the words of independent security experts.
    - thefz 3y ago
      Apple does not exist in a vacuum, they are subject to national or federal law like any other, and every time they make you believe the opposite it's a publicity stunt the nuances of which clearly escape you
      - saiya-jin 3y ago
        Apple's handling on HN is a sore point for me with this otherwise pretty factual forum. The amount of shills, purely positive news, accepting all their PR without questions, ignoring all that happened in the past... not all members, but some very highly voted opinions makes me think this place simply can't be objective on this topic. Probably hundreds of Apple employees come here quietly and stay quiet on relevant topics, but folks either paid or simply fanatical about this specific brand make any serious discussion impossible. I dont blame the company, its for profit mega corporation just like the rest doing same things as everybody else on the market (ie not paying taxes where it should to support local development, happy with chinese child labor in contractors etc), but some people refuse to see that. Its not unique to electronics, but one would expect a bit more rational and balanced discussion on them.
tristanb 3y ago
Sorry, I just saw there was interest in this. They were able to get everything off of an older iPhone, i think two generations prior to now, (i'm sorry I can't remember the exact model) but for updated (current) iPhones they were not able to get a full disk image, but could get "some" data. (I'm sorry I again can't give specifics as I don't remember, but it would be metadata). Essentially we were told Greykey keeps updating the software to find new ways to extract the data. We were also told it didn't work if the phone had been powered off. For the phones that it did work on, it extracted everything from the disk and then Cellbrite went through the data to present it to the user. The Greykey device plugs into the phone, requires the phone to not have been powered off. The untrusted USB settings also help prevent it from working.

noduerme 3y ago

Please tell us more! This is likely the best way for that information to come out.

throwaway17_17 3y ago
What information are you looking for? I didn’t know there was such a lack of information on what law enforcement agencies get from Cellebrite. I can only speak to my personal and professional (non-LEO) experience, but I’ll give it a shot.
- bagels 3y ago
  Which phone model/version? Did they need anything from other owner? From apple? Physical access? USB? Brute force bypass? Anything you can describe about the capabilities and techniques people would be interested in knowing.
  - abwizz 3y ago
    i rekon that if the case is big enough, the'll get access to the cloud backups. the UFED product page states that it can bypass device locks, this sounds like physical access and would only require the device to be confiscated.

d__a__n__g 3y ago

[flagged]

qbasic_forever 3y ago
WTF is with your account? Are you trying to impersonate dang, the official moderator?
- deleted 3y ago
  [deleted]
- deleted 3y ago
  [deleted]

switch007 3y ago

You can’t leave us hanging with “…from an iPhone (everything)”!!

theshrike79 3y ago

So just normal regular cops got "everything" off a locked iPhone. Please share what you know, because that'd be huge news. The last info we had is that even the FBI had trouble getting into a locked 4S and the protection has improved significantly. After that the info was that Graykey(?) could bypass the attempt limit on passcodes, but by having an alphanumeric code you could make brute forcing take longer than our Sun has life left in it.

thefz 3y ago
You do understand that everything you know about iPhone's privacy comes from Apple's mouth, right? Snowden has revealed they are more than happy to let agencies into their supply chain.
- viktorcode 3y ago
  > You do understand that everything you know about iPhone's privacy comes from Apple's mouth, right? No, we know that from the words of independent security experts.
  - thefz 3y ago
    Apple does not exist in a vacuum, they are subject to national or federal law like any other, and every time they make you believe the opposite it's a publicity stunt the nuances of which clearly escape you
    - saiya-jin 3y ago
      Apple's handling on HN is a sore point for me with this otherwise pretty factual forum. The amount of shills, purely positive news, accepting all their PR without questions, ignoring all that happened in the past... not all members, but some very highly voted opinions makes me think this place simply can't be objective on this topic. Probably hundreds of Apple employees come here quietly and stay quiet on relevant topics, but folks either paid or simply fanatical about this specific brand make any serious discussion impossible. I dont blame the company, its for profit mega corporation just like the rest doing same things as everybody else on the market (ie not paying taxes where it should to support local development, happy with chinese child labor in contractors etc), but some people refuse to see that. Its not unique to electronics, but one would expect a bit more rational and balanced discussion on them.

tristanb 3y ago

Sorry, I just saw there was interest in this. They were able to get everything off of an older iPhone, i think two generations prior to now, (i'm sorry I can't remember the exact model) but for updated (current) iPhones they were not able to get a full disk image, but could get "some" data. (I'm sorry I again can't give specifics as I don't remember, but it would be metadata). Essentially we were told Greykey keeps updating the software to find new ways to extract the data. We were also told it didn't work if the phone had been powered off. For the phones that it did work on, it extracted everything from the disk and then Cellbrite went through the data to present it to the user. The Greykey device plugs into the phone, requires the phone to not have been powered off. The untrusted USB settings also help prevent it from working.