Details about tool used by FBI to unlock any Iphone disclosed

<div dir="ltr" style="text-align: left;" trbidi="on"> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie9nNpjo21KXHc6fFJdGFOPCYExqI8z04EGLNY9nH8X3a9u6oLWu8L4tbJOhSh5EArzHWNcrZNK7lbnISY8iq893LiIucqNY1VA8lDCw8pi9E9uvnwmIEcirP4B-SWEyC9siHtxHQGd_ki/s1600/unlock-iphone.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FBI's tool to unlock any iPhone disclosed" border="0" data-original-height="506" data-original-width="900" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie9nNpjo21KXHc6fFJdGFOPCYExqI8z04EGLNY9nH8X3a9u6oLWu8L4tbJOhSh5EArzHWNcrZNK7lbnISY8iq893LiIucqNY1VA8lDCw8pi9E9uvnwmIEcirP4B-SWEyC9siHtxHQGd_ki/s640/unlock-iphone.jpg" title="FBI's tool to unlock any iPhone disclosed" width="640" /></a></div> A series of hot debates about the backdoor access should be provided or not to law enforcement agencies to <a href="http://www.hackerschronicle.com/search/label/apple">Apple </a>devices started after the case of San Bernadino's locked iPhone. But anyhow agency found a way to unlock the iPhone by taking the help from an Israeli company named Cellebrite, which provides iPhone unlocking services to law enforcement agencies.<br /> <br /> But recently name of new a device known as <a href="https://graykey.grayshift.com/">GrayKey</a>, is being circulated in the market. The GrayKey claims to be able to unlock any <a href="http://www.hackerschronicle.com/search/label/iOS">iOS-powered</a> devices such as iPads, iPods and iPhones. It can also copy the data inside that phone, which can be browsed over a web based portal. Grayshift is based in Atlanta, Georgia, Grayshift was founded in 2016, and is a privately-held company with fewer than 50 employees.<br /> <br /> According to Forbes, the GrayKey <a href="http://www.hackerschronicle.com/search/label/iphone%20unlocking">iPhone unlocker</a> device is marketed for in-house use at law enforcement offices or labs. This is drastically different from Cellebrite’s overall business model, in that it puts complete control of the process in the hands of law enforcement.<br /> <br /> A security firm <a href="https://blog.malwarebytes.com/security-world/2018/03/graykey-iphone-unlocker-poses-serious-security-concerns/">Malwarebytes </a>have released the leaked images and working of this device. GrayKey is a 4x4x2 inch gray box, with two lightning cables sticking out of the front. It is very much easy to crack a iPhone's passcode.<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV5KY24wEDQ9bcBj3Df1ECFQJ3LZ62g1iodhjUrS0ZVYvJ5WKIBJpDY9e8459lLu7EcjoBPab8uoYbqcWu7ac2Roe3clzm4_TPywLG2Sc0neXQmUSN8icwoPoe01LTIv5VWLGmLzNzThkk/s1600/GrayKey-iphone-unlocking-device.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="GrayKey iphone unlocking device" border="0" data-original-height="288" data-original-width="600" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV5KY24wEDQ9bcBj3Df1ECFQJ3LZ62g1iodhjUrS0ZVYvJ5WKIBJpDY9e8459lLu7EcjoBPab8uoYbqcWu7ac2Roe3clzm4_TPywLG2Sc0neXQmUSN8icwoPoe01LTIv5VWLGmLzNzThkk/s640/GrayKey-iphone-unlocking-device.png" title="GrayKey iphone unlocking device" width="640" /></a></div> <br /> Two <a href="http://www.hackerschronicle.com/search/label/iphone">iPhones </a>can be connected at one time, and are connected for about two minutes. After that, they are disconnected from the device, but are not yet cracked. Some time later, the phones will display a black screen with the passcode, among other information. The exact length of time varies, taking about two hours in the observations of our source. It can take up to three days or longer for six-digit passcodes, according to Grayshift documents, and the time needed for longer passphrases is not mentioned. According to Grayshift, even disabled phones can be unlocked.<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjP95h2V4sdTVLVQtq1Clob1PUlZhyiOyjB0tsBMkC6JU_-kVthXnqt-qrrUHujK-U0chO8BCOsgrV40Rr2jFg_sASjO35z5sRoTwsOs_usUMFwUAmyLsPCQpWxBO5KpPqb7VedfCHEXOgb/s1600/GrayKey-unlocked-iPhone.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="GrayKey-unlocked-iPhone.png" border="0" data-original-height="565" data-original-width="600" height="602" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjP95h2V4sdTVLVQtq1Clob1PUlZhyiOyjB0tsBMkC6JU_-kVthXnqt-qrrUHujK-U0chO8BCOsgrV40Rr2jFg_sASjO35z5sRoTwsOs_usUMFwUAmyLsPCQpWxBO5KpPqb7VedfCHEXOgb/s640/GrayKey-unlocked-iPhone.png" title="GrayKey-unlocked-iPhone" width="640" /></a></div> <br /> After the device is unlocked, the full contents of the filesystem are downloaded to the GrayKey device. From there, they can be accessed through a web-based interface on a connected computer, and downloaded for analysis. The full, unencrypted contents of the key-chain are also available for download.<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf0IKmJuMJ4MQLHhyphenhyphendZDmg_4E_Mhd3FWVAawhkPlfG9q5R46OMUn_A4CQ-w8bkphrT7Y58itN386t4KcAuQAYI8pmSSZ_EaSI0_BKMwJ2d17ZQr1pFHbSGNQzYrs-LjndHWqN4_503juxM/s1600/iphone-jailbreak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FBI is using this blackbox which can unlock any iPhone in the world" border="0" data-original-height="304" data-original-width="600" height="324" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf0IKmJuMJ4MQLHhyphenhyphendZDmg_4E_Mhd3FWVAawhkPlfG9q5R46OMUn_A4CQ-w8bkphrT7Y58itN386t4KcAuQAYI8pmSSZ_EaSI0_BKMwJ2d17ZQr1pFHbSGNQzYrs-LjndHWqN4_503juxM/s640/iphone-jailbreak.png" title="FBI is using this blackbox which can unlock any iPhone in the world" width="640" /></a></div> <br /> The GrayKey device itself comes in two “flavors.” The first, a $15,000 option, requires Internet connectivity to work. It is strictly geofenced, meaning that once it is set up, it cannot be used on any other network.<br /> <br /> However, there is also a $30,000 option. At this price, the device requires no Internet connection whatsoever and has no limit to the number of unlocks. It will work for as long as Apple fixes the vulnerabilities the device depends on.</div>

apple graykey Hacking News iOS iphone iphone unlocking jailbreak Details about tool used by FBI to unlock any Iphone disclosed

A series of hot debates about the backdoor access should be provided or not to law enforcement agencies to Apple devices started after t...

Read more »

'Biggest Leak in History' : iPhone source code LEAKED

<div dir="ltr" style="text-align: left;" trbidi="on"> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s1600/iPhone-code-leaked.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="350" data-original-width="590" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s640/iPhone-code-leaked.jpg" width="640" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">'Biggest Leak in History' : iPhone source code leaked</td></tr> </tbody></table> <br /> Someone just posted what experts say is the <a href="http://www.hackerschronicle.com/search/label/Source%20Code" target="_blank">source code</a> for a core component of the iPhone’s operating system on GitHub, which could pave the way for hackers and security researchers to find vulnerabilities in iOS and make iPhone jailbreaks easier to achieve.<br /> The GitHub code is labeled “<b>iBoot</b>,” which is the part of iOS that is responsible for ensuring a trusted boot of the operating system. In other words, it’s the program that loads iOS, the very first process that runs when you turn on your iPhone. It loads and verifies the kernel is properly signed by Apple and then executes it—it’s like the iPhone’s BIOS.<br /> <br /> The code says it’s for iOS 9, an older version of the operating system, but portions of it are likely to still be used in iOS 11.<br /> <br /> Apple has traditionally been very reluctant to release code to the public, though it has made certain parts of <a href="http://www.hackerschronicle.com/search/label/iOS" target="_blank">iOS</a> and MacOS open source in recent years. But it has taken particular care to keep iBoot secure and its code private; bugs in the boot process are the most valuable ones if reported to Apple, which values them at a max payment of $200,000. “<b>This is the biggest leak in history</b>,” Jonathan Levin, the author of  on iOS and Mac OSX internals, told me in an online chat. “It’s a huge deal.”<br /> <br /> Levin said the code appears to be the real iBoot code because it aligns with code he <a href="http://www.hackerschronicle.com/search/label/Reverse%20Engineering" target="_blank">reverse engineered</a> himself. A second security researcher familiar with iOS also said they believe the code is real. We don’t know who is behind the leak. Apple did not respond to a request for comment.<br /> Having access to the source code of iBoot gives iOS security researchers a better chance to find vulnerabilities that could lead to compromising or jailbreaking the device, Levin said. That means hackers could have an easier time finding flaws and bugs that could allow them to crack or decrypt an iPhone. And, perhaps, this leak could eventually allow advanced programmers to emulate iOS on non Apple platforms.<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s1600/ios-code.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="482" data-original-width="640" height="301" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s400/ios-code.png" width="400" /></a></div> <div class="separator" style="clear: both; text-align: center;"> <br /></div> <div class="separator" style="clear: both;"> <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">Vulnerabilities </a>in previous versions of iBoot allowed jailbreakers and hackers to brute-force their way through the iPhone’s lock screen and decrypt a user’s data. But newer iPhones have a chip , which has hardened the security of the device.</div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> For regular users, Levin added, this means that tethered jailbreaks, which require the phone to be connected to a computer when booting, could soon be back. These jailbreaks used to be relatively easy to pull off and were common, but are now extremely hard to come by on up-to-date iOS devices, which have advanced security mechanisms that make it hard for even highly skilled researchers from even looking for bugs, as they need to first jailbreak the device before beginning to probe the device.</div> <div class="separator" style="clear: both;"> It’s these security improvements . Nowadays, finding bugs and vulnerabilities in iOS is something that requires a significant amount of time and resources. That’s why the jailbreaking community gets excited for any leak of source code or any exploit.</div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> “iBoot is the one component <a href="http://www.hackerschronicle.com/search/label/Apple" target="_blank">Apple </a>has been holding on to, still encrypting its 64 bit image,” Levin said. “And now it’s wide open in source code form.”</div> <br /></div>

Data Leak iOS News Source Code 'Biggest Leak in History' : iPhone source code LEAKED

'Biggest Leak in History' : iPhone source code leaked Someone just posted what experts say is the source code for a core comp...

Read more »