4 ms·
> Since then, a company called Grayshift launched the GrayKey, a small device that was capable to breaking into modern iPhones. Those devices proliferated acros
by sillysaurusx 2y ago
> Since then, a company called Grayshift launched the GrayKey, a small device that was capable to breaking into modern iPhones. Those devices proliferated across the country, to federal, state, and local law enforcement, and are now a mainstay in forensic investigations.
Anyone know about GrayKey? Curious how it works.
Their website (https://www.magnetforensics.com/products/magnet-graykey/ https://www.magnetforensics.com/products/magnet-graykey/) claims “ Magnet Graykey can provide same-day access to the latest iOS and Android devices – often in under one hour.”
- Gabriel_Martin 2y agochange some config files to prevent attempt limit lockout then brute force?
- sodality2 2y agoModern iOS devices have a hell of a lot more than a simple config file (see: secure enclave)
- TheNewsIsHere 2y agoYep! To add, Apple details this in their security whitepaper. It used to be, years ago, that the limit was a purely software function. For many years this limit has been enforced in firmware/hardware. The paths between memory, storage, and CPU are now protected by the Secure Enclave hardware which is responsible for enforcing passcode entry attempt limits. These limits can only be configured after a mandatory passcode prompt (or via MDM). It is certainly possible that certain elements of the U.S. government have developed more advanced exploits beyond what GreyKey could have done, that they aren’t going to publicize.
- jki275 2y agoIt works on certain models and certain OS release levels that have known exploits. That's all it is.
- bangaladore 2y agoGiven that all their marketing material is extremely old IPhones, I would bet money this is a bunch of marketing jargon to trick police departments into giving them money.