A Russia-based cybersecurity company said it found a new way into your locked iPhone.
Elcomsoft,How Is Eroticism Different Than Sex which creates digital forensic software for governments and law enforcement agencies, saidon Friday that its iOS Forensic Toolkit can now extract some data from locked iPhones and iPads in Before First Unlock (BFU) mode.
The tool takes advantage of a vulnerability, known as the Checkm8 exploit, in certain iPhone and iPad models. The Elcomsoft iOS Forensic Toolkit sells for $1,495.
The BFU mode detail is important to note. BFU is the state an iPhone is in before a user unlocks the device for the first time after booting up or restarting the phone. It is the device's most secure state.
If you ever restarted your phone and then received a phone call from your mom before unlocking it, you may notice that her telephone number appears in the call notification instead of her contact name. That’s a function of the iPhone being in BFU mode.
As Elcomsoft puts it:
In Apple’s world, the content of the iPhone remains securely encrypted until the moment the user taps in their screen lock passcode. The screen lock passcode is absolutely required to generate the encryption key, which in turn is absolutely required to decrypt the iPhone’s file system. In other words, almost everything inside the iPhone remains encrypted until the user unlocks it with their passcode after the phone starts up.
It is the “almost” part of the “everything” that we target in this update.
The company discovered that some data in the keychain, which is where Apple stores a users’ passwords and other protected information, is actually accessible before a user unlocks the phone.
This data includes email usernames and passwords, according to the company.
While the forensic tool works on iPhones and iPads running on even Apple's most recent operating system, iOS 13.3, it doesn’t work on all models of the device. Devices that run on the A12 chip, like the iPhone XR, or the new U1 chip, like the iPhone 11, are immune to the vulnerability that phones that run on the earlier A-series chips — the iPhone 5S to the iPhone X— have.
Being that the forensic tool uses the Checkm8 exploit, it requires a jailbreak installation, known as Checkra1n, on the devices in BFU mode. However, this can be done while the iOS device is locked.
This news comes a little over a week after Apple’s iOS device encryption came under fire during a Congressional hearing. The Cupertino-based tech giant has been a strong advocate for security protocols that make it nearly impossible to pull private data off a user’s locked iPhone.
Apple claims that even it can’t access these locked devices. Some in law enforcement, like Manhattan district attorney Cyrus Vance, have criticized Apple for these practices. These critics would now like Congress to step in and force companies like Apple’s hand.
The truth is that while it isn’t easy, there are a few security companies that have been able to bypass Apple’s encryption and crack into locked iOS devices. The Israel-based Cellebrite sells a $6,000 device which has been used by law enforcementto break into locked smartphones. U.S.-based Grayshift signeda deal with Immigration and Customs Enforcement earlier this year for the use of the company’s iPhone hacking tool, GrayKey.
Elcomsoft’s latest tool just shows once again that even with Apple’s encryption, our smartphones aren’t as secure as we think.
Topics Apple Cybersecurity iOS iPad iPhone
Emma Stone shouted out Greta Gerwig while presenting for Best DirectorYouTube app gets new AI that removes background like a green screenHere's what it's like to fly in Qatar Airways' new luxury QsuiteEmma Stone shouted out Greta Gerwig while presenting for Best DirectorBerlin blockchain conference has brilliantly stupid stock artJimmy Kimmel nails Oscars monologue about change in Hollywood, WeinsteinAfter Parkland shooting, do we need social media background checks?The best 3 apps for tracking your crypto portfolioHere's what it's like to fly in Qatar Airways' new luxury QsuiteOscars 2018: The best and worst moments from the showYou'll see much more of Erica in 'Stranger Things' Season 3You'll see much more of Erica in 'Stranger Things' Season 3Diver swims in sea filled with plastic trash off the coast of BaliWaves from weekend nor'easter cause damage in CaribbeanPlease let this 'Moonlight' rumor for the Oscars be truePennsylvania attorney general sues Uber for hiding 2016 data breachExclusive: Here's a peek at Monica Hesse's new novel 'The War Outside'This shirt with Timothée Chalamet's face on it is the fiercest Oscars red carpet look4 ways to turn the Oscars' promise of equality and inclusion into realityThis baby trying pizza for the first time is the essence of joy What it's like when a criminal, bankrupt, for Tech gifts for people who really, really like watching TV Let's break down the common self George and Amal Clooney are expecting twins so that's something nice Here's a Halloween playlist for all your spooky music needs Madonna confirmed adoption of twins with a heart Blind man sued Domino's over its website. Here's what the Supreme Court had to say. Bathrobe Trump gets comfortable in some strange places with this Photoshop battle Elizabeth Warren drops the perfect response when asked about same Watch this 81 Essential's Andy Rubin teases...half a phone? Twitter is dubbing over Joker's laugh and it's contagious Meanwhile, Australia's in the grip of an intense heatwave straight from hell How disgusting is your water bottle, really? When 44 men tried to silence Elizabeth Warren, she took her voice to Facebook Live Of course Amazon workers are looking at Cloud Cam footage California just scored a major privacy win against facial Ebay founder backs tests to give people free money Instagram deserves more scrutiny after Russian troll farm investigation There's a chocolate manhole cover in Japan and we don't know why
3.4612s , 10196.9453125 kb
Copyright © 2025 Powered by 【How Is Eroticism Different Than Sex】,Steady Information Network