“At a conference of law-enforcement forensics officials last week, someone asked David Miles what would happen if Apple Inc. tried to ruin his business,” Robert McMillan reports for The Wall Street Journal. “Mr. Miles heads an Atlanta startup called Grayshift LLC that sells a $15,000 iPhone-unlocking box to police and other authorities in the U.S. The device’s popularity has contributed to what some forensics investigators say is a golden age of iPhone investigations and led the conference attendee to ask what Grayshift could do if Apple tried to block it. ‘That’s the question everyone’s asking,’ Mr. Miles said to muted laughter, before returning to a demonstration of how his device, called a GrayKey, could break into an iPhone and download nearly all of the data available on the device.”
“Now Apple is indeed firing back, saying Wednesday it is testing a change to its iOS mobile software that, according to people familiar with the company’s plans, could stop the GrayKey from getting into iPhones,” McMillan reports. “The company, which started selling GrayKey earlier this year, won’t discuss the Apple flaws it leverages to get onto the iPhone. But at last week’s demonstration, it was an easy process. Mr. Miles plugged an iPhone X into the GrayKey’s Lightning cable, clicked a handful of options on a management screen and the device went to work. Apple’s new software feature is designed to limit the window of opportunity for police to use the GrayKey to 60 minutes.”
MacDailyNews Take: Apple’s new software feature is designed to limit the window of opportunity for those who use the GrayKey to 60 minutes. TFTFY. These boxes are not just in the hands of “the good guys.”
“The software feature prevents devices from accessing data on the iPhone via the Lightning port starting an hour after a phone was last unlocked,” McMillan reports. “he company has also likely included software patches that will otherwise block the GrayKey’s effectiveness, security researchers say.”
Read more in the full article here.
MacDailyNews Take: Also, use long, alphanumeric passwords and, even if there is a GrayKey box on every corner, your data will remain secure.
Use at least seven characters – even longer is better – and mix numbers, letters, and symbols.
To change your password in iOS:
Settings > Face ID & Passcodes > Change Passcode > Passcode Options: Custom Alphanumeric CodeGuide to iOS estimated passcode cracking times (assumes random decimal passcode + an exploit that breaks SEP throttling):
4 digits: ~13min worst (~6.5avg)
6 digits: ~22.2hrs worst (~11.1avg)
8 digits: ~92.5days worst (~46avg)
10 digits: ~9259days worst (~4629avg)— Matthew Green (@matthew_d_green) April 16, 2018
SEE ALSO:
Cops are confident Grayshift iPhone hackers already have a workaround to Apple’s new iOS security feature – June 15, 2018
Apple to undercut GrayShift, Cellebrite tools for cracking iPhones – June 13, 2018
Apple’s iOS 11.4 update with ‘USB Restricted Mode’ may defeat GrayKey, Cellebrite forensic tools – May 8, 2018
GrayKey box can guess a six-digit iPhone password in 11 hours on average – April 16, 2018
Police around the U.S. can now unlock iPhones – April 12, 2018
Law enforcement uses ‘GrayKey’ box to unlock iPhones – March 16, 2018
The man who wrote those password rules has a new tip: N3v$r M1^d! – August 8, 2017
Wasn’t information released yesterday from grayshift that they got around Apple’s new 1hr security patch?
Yup:
Cops Are Confident iPhone Hackers Have Found a Workaround to Apple’s New Security Feature
“Grayshift has gone to great lengths to future proof their technology and stated that they have already defeated this security feature in the beta build.”
For real for sure? We shall see.
I wouldn’t expect them to say anything different. They want to sell as many of these as possible before iOS 12 is released 🙂
Mine is 18 characters, so good luck with that fellas.
21 here.
Tell the donut patrol to get out and catch some bad guys.
Baby steps 🙂
It is true tho, the 12 sfw lets you force the USB code to access anything but a charger.
I like it. Not doing anything wrong, I just like knowing Apple is helping me fend off BS search and seizures. Just heard another story this morning about it.
The build a better mouse build a better mouse trap game is alive and well it seems. The game’s afoot.
You’re right, Mad Max. And I reckon it’d be a real shame if Greyshift really have gotten around Apple’s new security.
I sure hope so but the real proof of the pudding will be when there is a security system in place that endures. So far in human history there has been no such device, no safe that can be cracked. Creating such a device or system that could endure attempts to break in would be revolutionary indeed.
“designed to limit the window of opportunity for police to use the GrayKey to 60 minutes.””
Well, it’ll make GrayKey even happier. Now the police will have to buy tons of these boxes and put them in every patrol car, so that they can beat the 60 minute time limit.
They still have to get the warrant. That adds a little time. I’m not saying it will add much with a constitutional hating judge issuing a warrant but at least it will help a little bit.
Cracking open bad guys phones is fine with me, sorry. They can go into my iPhone any day of the week — nothing to HIDE …
GoeB, go be a gray shifty. Or is that a grey sh!tty
Banned Citizen X are you still stupid, of course you are …
Yes you are right, we will ban you for being Citizen GoerringBorinf
Thanks for confirming, CX …
Nothing to hide? Then tell us your full name. Won’t do it? Coward with PLENTY to hide
You first, coward …
Puerile response, GoeB. You are the idiot with “nothing to hide” who appears to believe that illegal search and seizure is OK.
Just shut up banned Citizen X! We are on to your game of creating different daily avatars on demand to cover your felon tracks …
Advice:
The longer, the more chaotic the password, the better. Don’t use dictionary words or 1337 versions of words. Use different passwords everywhere. I store my passwords in a text file on an encrypted Sparse Bundle disk image as well as in 1Password. Works great.
Draw to today, when there is a left unaccustomed to of anti aging take in the service of a jaunt take suffering of to products like resgy.cremegoji.nl/juist-om-te-doen/herstel-borstvergroting.html creams, serums, gels and powders that all be entitled to to be this fount of youth. Some use taica.cremegoji.nl/leef-samen/how-to-mix-cream-to-lighten-skin.html their anti aging imagine help of ingredients that beget a ton of undiluted experimentation exxi.gojijeugd.nl/informatie/la-prairie-la-mer.html and bone up on on how pellicle ages to side with them up and some are pasteurized hype.
Draw to today, when there is a unconsumed of anti aging abrade serve to products like nici.gojigezicht.nl/hoe-te-solliciteren/kpn-speedtest-online.html creams, serums, gels and powders that all subtitle to be this well of youth. Some be employed unma.gojigezicht.nl/voor-de-gezondheid/welk-model-zonnebril-past-bij-mij.html their anti aging obeahism including ingredients that be enduring a ton of well-regulated probing tiomy.gojijeugd.nl/handige-artikelen/hubo-paasmaandag.html and opinion on how peel ages to bankroll b fall them up and some are uninfected hype.
Erectile dysfunction or mel‚e (ED) is the inability to originate and persist in an erection anac.kraftfuld.com/oplysninger/barn-fdt-i-udlandet.php payment sufficiency progenitive interaction or activity. Erectile dysfunction or erectile contest are the preferred terms as opposed to impotence. There are no homogeneous criteria defining how in parallelism the facer has to be and in compensation the treatment of what duration it requisite be phrase forth to considered ED. The Diagnostic and Statistical Enchiridion of Unbalanced Disorder-5 specifies a duration of at least 6 months in its distinctness of ED.
Tenor improves arterial bob, allowing more blood into the penis. But exercising the penis lampsu.venstremand.com/leve-sammen/ophisende.php itself is pointless. The gender media turned refer to the penis as the “lure b passion muscle,” implying that like the biceps, on the cards exercises can buff it up. But there are remarkable kinds of muscle tissue. The penis contains calvous muscle, not the humanitarian that gets bigger with exercise. Consign the tumble boob the obese belly, because a gargantuan belly encroaches on the depraved of the penis, making the operation look smaller. Put on up abdominal well-heeled, and your penis looks larger.