GrayKey iPhone unlocker poses serious security concerns
blog.malwarebytes.com
GrayKey iPhone unlocker poses serious security concerns
1–10 of 97 posts
Re: GrayKey iPhone unlocker poses serious security concerns
#2> The cheaper model isn’t much of a danger if stolen—unless it’s stolen prior to setup—but at 4″x 4″x 2″, the unlimited model could be pocketed fairly easily, along with its token, if stored nearby. Once off-site, it would continue to work.
Presumably even the cheaper model could be reverse engineered to reveal the exploit used. But once it becomes known, it would be patched.
Re: GrayKey iPhone unlocker poses serious security concerns
#3Passphrases are always going to be the strongest, but you can have more than 6 digits in your pincode.
Select "Custom Alphanumeric Code" in Passcode Options[1], but only enter digits using the keyboard. iOS will display a pin pad on the lock screen that will accept any number of digits[2].
I picked this up from the delicious iOS 11 security whitepaper[3].
[1] https://i.imgur.com/KEEC71B.png [2] https://i.imgur.com/YrgQA5s.png [3] https://www.apple.com/business/docs/iOS_Security_Guide.pdf
Re: GrayKey iPhone unlocker poses serious security concerns
#4How much bounty would Apple pay, say if somebody steals one and sends it to them? Is it illegal to them to make such an offer?
Re: GrayKey iPhone unlocker poses serious security concerns
#5How much bounty would Apple pay, say if somebody steals one and sends it to them? Is it illegal to them to make such an offer?
The ‘offer’ isn’t illegal - going through with it would be though, for both sides. Grand theft and receiving stolen goods. Both not great, plus you’d be actively acting against the law enforcement system which would ensure a zealous prosecution.
Re: GrayKey iPhone unlocker poses serious security concerns
#6How much bounty would Apple pay, say if somebody steals one and sends it to them? Is it illegal to them to make such an offer?
"Possession of stolen property" is a crime in many places.
I imagine that telling someone, "Steal that TV and I'll give you $100 for it" would, additionally, make you a conspirator to the crime of theft.
Re: GrayKey iPhone unlocker poses serious security concerns
#7This seems at odds with Apple’s claims about holding the device encryption keys in a secure coprocessor that only releases them in response to a valid passcode, and self-destructs the keys if too many passcodes are tried.
Re: GrayKey iPhone unlocker poses serious security concerns
#8How much bounty would Apple pay, say if somebody steals one and sends it to them? Is it illegal to them to make such an offer?
Well in most places, theft is illegal.
On the other hand, perhaps Apple could secretly partner with a law enforcement team and purchase one for themselves. $15k and $30k are literally nothing to Apple with their warchest in the tens of billions.
Re: GrayKey iPhone unlocker poses serious security concerns
#9I hate this stuff. I want to secure my device and not have the govt or companies steal it, I want to control my device. Still, it's fascinating to learn about.
Did no one think, when they take someone's phone for 5 minutes at the border, they could be doing this to your phone.
Re: GrayKey iPhone unlocker poses serious security concerns
#10Is it just me or does the price point seem extremely low?
They have a device that should be in high demand globally, and maybe one competitor.
And they are charging 15-30k, for basically unlimited usage??
You can't tell me federal law enforcement wouldn't pay at minimum ten times that amount for metered usage...