“Apple confirmed to The New York Times Wednesday it was going to introduce a new security feature, first reported by Motherboard. USB Restricted Mode, as the new feature is called, essentially turns the iPhone’s lightning cable port into a charge-only interface if someone hasn’t unlocked the device with its passcode within the last hour, meaning phone forensic tools shouldn’t be able to unlock phones,” Joseph Cox and Lorenzo Franceschi-Bicchierai report for Motherboard.
“Naturally, this feature has sent waves throughout the mobile phone forensics and law enforcement communities, as accessing iPhones may now be substantially harder, with investigators having to rush a seized phone to an unlocking device as quickly as possible. That includes GrayKey, a relatively new and increasingly popular iPhone cracking tool,” Cox and Franceschi-Bicchierai report. “But forensics experts suggest that Grayshift, the company behind the tech, is not giving up yet.”
“‘Grayshift has gone to great lengths to future proof their technology and stated that they have already defeated this security feature in the beta build. Additionally, the GrayKey has built in future capabilities that will begin to be leveraged as time goes on,’ a June email from a forensic expert who planned to meet with Grayshift, and seen by Motherboard, reads, although it is unclear from the email itself how much of this may be marketing bluff,” Cox and Franceschi-Bicchierai report. “Ryan Duff, a security researcher who has studied iPhone and is Director of Cyber Solutions at Point3 Security, told Motherboard that USB Restricted Mode is a pretty solid solution, referring to USB Restricted Mode.”
Read more in the full article here.
MacDailyNews Take: Sounds like marketing bluff on the part of Grayshift to us. After all, who’s going to buy boxes from you when they’ll be far less effective in a few months? You can’t brute force if you can’t try a high number of combinations quickly.
Regardless, be sure to use long, alphanumeric passwords and, even if there is a GrayKey box on every corner, your data will remain secure.
Use at least seven characters – even longer is better – and mix numbers, letters, and symbols.
To change your password in iOS:
Settings > Face ID & Passcodes > Change Passcode > Passcode Options: Custom Alphanumeric CodeGuide to iOS estimated passcode cracking times (assumes random decimal passcode + an exploit that breaks SEP throttling):
4 digits: ~13min worst (~6.5avg)
6 digits: ~22.2hrs worst (~11.1avg)
8 digits: ~92.5days worst (~46avg)
10 digits: ~9259days worst (~4629avg)— Matthew Green (@matthew_d_green) April 16, 2018
SEE ALSO:
Apple punches back at Grayshift, maker of the GrayKey iPhone-hacking box – June 15, 2018
Apple to undercut GrayShift, Cellebrite tools for cracking iPhones – June 13, 2018
Apple’s iOS 11.4 update with ‘USB Restricted Mode’ may defeat GrayKey, Cellebrite forensic tools – May 8, 2018
GrayKey box can guess a six-digit iPhone password in 11 hours on average – April 16, 2018
Police around the U.S. can now unlock iPhones – April 12, 2018
Law enforcement uses ‘GrayKey’ box to unlock iPhones – March 16, 2018
The man who wrote those password rules has a new tip: N3v$r M1^d! – August 8, 2017
Thank goodness for hackers doing police work. I guess that gives the law enforcement folks more time to do other important stuff.
LOL at the LE depts. that shell out all that money, for a big waste. Cause it will be obsolete soon….ROTF
Apple should just put an algorithm in to destroy the innards after 15 failed cracking attempts……
Grayshift is breaking the law, right?
Making and selling the devices isn’t illegal, unless you could argue they’re burglary tools. Even then, the company claims that they exclusively sell the devices to law enforcement agencies that pledge to use them only in a lawful fashion.
The agencies are only breaking the law if they don’t have a warrant (and don’t have one of the narrow exceptions allowing lawful reasonable searches without one). Since any evidence they collect illegally can’t be used in court, or even to obtain other admissible evidence, using the devices illegally would be a waste of time and money… for a law enforcement agency. Good old fashioned criminals are another story, of course.
OK, then I wonder if Grayhift is violating Apple’s terms of use? If so, it would be funny since Wozniak also made some such foil to make free phone calls.
It’s worth remembering that Apple hired Jonathan Zdziarski, who was one of the world’s best security and forensics experts for mobile phones. He has a very detailed knowledge of how law enforcement people try to access iPhones and is now working for Apple, hardening iPhones against the sort of exploits that he and others employed.
It’s a little too soon to expect much of his expertise to have reached the iPhones in our pockets, but I’m sure that his contribution will make our devices considerably more secure in the future.
All you’d really have to do is ad a randomizer to the passcode component to make brute forcing much more difficult, and require a biometric authentication after a suspected “flurry” attack.
Nonsense. There’s obviously more to apples approach than just “locking out the USB port after an hour”, I’d imagine here’s a biometric component to it as well along with Secure Enclave authentication… doubt they’ll be able to brute force anything running iOS 12 with a biometric sensor ( Face ID / Touch ID ). Total BS.
Apple needs to work with Boeing and develop an iOS version of the Boeing Blackphone
http://www.dailymail.co.uk/sciencetech/article-3917756/The-phone-secure-head-NSA-uses-Boeing-s-secret-blackphone-SELF-DESTRUCT-tampered-begins-testing-no-t-buy-one.html