The bumpy road towards iPhone 5c NAND mirroring

dmitrygr wrote: post #3

campuscodi wrote: post #2

I wonder how much the entire rig cost him? Not $1 million, that's for sure!

< $50 in parts (just a PIC24)

It would have cost the agencies a lot more though (contracting fees), I highly doubt they'd have the technical capabilities to handle this. But it just goes to show that they didn't really reach out and were simply using it as a means to push their backdoor agenda. :(

Re: The bumpy road towards iPhone 5c NAND mirroring

#7

Post by dogma1138 » Fri, Sep 16, 2016, 12:18 AM UTC

dmitrygr wrote: post #3

campuscodi wrote: post #2

I wonder how much the entire rig cost him? Not $1 million, that's for sure!

< $50 in parts (just a PIC24)

There are quite more parts to that, as well as the scope, logic analyzers and quite a few other components.

It doesn't end up to 1M$ but it's also not 50$.

Re: The bumpy road towards iPhone 5c NAND mirroring

#8

Post by Sniffnoy » Fri, Sep 16, 2016, 12:21 AM UTC

A note -- if you're linking to arXiv, it's better to link to the abstract (https://arxiv.org/abs/1609.04327) rather than directly to the PDF. From the abstract, one can easily click through to the PDF; not so the reverse. And the abstract allows one to do things like see different versions of the paper, search for other things by the same authors, etc. Thank you!

Re: The bumpy road towards iPhone 5c NAND mirroring

#9

Post by solipsism » Fri, Sep 16, 2016, 12:22 AM UTC

lisper wrote: post #4

Vindicated. https://news.ycombinator.com/item?id=11199093

I'm sure all the "experts" who were so vocal about how wrong you were will speak up now and admit they were wrong. Happens all the time around here. ;)

Re: The bumpy road towards iPhone 5c NAND mirroring

#10

Post by xt00 » Fri, Sep 16, 2016, 12:24 AM UTC

CGamesPlay wrote: post #5

Probably useful to mention this in the comments here: this works for the 5c, but not the 6 and beyond, due to the addition of the Secure Enclave.

So the secure enclave must have an embedded flash inside the processor that includes the pin code attempt counter -- meaning that writing to the external flash would not happen at all right?