Technology

59495 readers

3110 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

986

Apple Quietly Introduced iPhone Reboot Code Which is Locking Out Cops (www.404media.co)

submitted 1 week ago by Stopthatgirl7@lemmy.world to c/technology@lemmy.world

264 comments fedilink hide all child comments

Apple quietly introduced code into iOS 18.1 which reboots the device if it has not been unlocked for a period of time, reverting it to a state which improves the security of iPhones overall and is making it harder for police to break into the devices, according to multiple iPhone security experts.

On Thursday, 404 Media reported that law enforcement officials were freaking out that iPhones which had been stored for examination were mysteriously rebooting themselves. At the time the cause was unclear, with the officials only able to speculate why they were being locked out of the devices. Now a day later, the potential reason why is coming into view.

“Apple indeed added a feature called ‘inactivity reboot’ in iOS 18.1.,” Dr.-Ing. Jiska Classen, a research group leader at the Hasso Plattner Institute, tweeted after 404 Media published on Thursday along with screenshots that they presented as the relevant pieces of code.

you are viewing a single comment's thread
view the rest of the comments

[–] NateNate60@lemmy.world 320 points 1 week ago (49 children)

Law enforcement shouldn't be able to get into someone's mobile phone without a warrant anyway. All this change does is frustrate attempts by police to evade going through the proper legal procedures and abridging the rights of the accused.

[–] ohellidk@sh.itjust.works 44 points 1 week ago* (last edited 1 week ago) (26 children)

well it's kind of a selling point. I'm just too used to using android, though.

Edit - there's something for that too, cool!

[–] ContrarianTrail@lemm.ee 7 points 1 week ago (2 children)

I'm the only guy in my (small) friend group who still used pattern code instead of fingerprint so I take that to mean my phone is by default more difficult to break into than most. Giving my fingerprint to a giantic tech firm has always seemed like a bad idea so I never did. Though the fingerprint reader acts as a power button too so who knows if they've scanned it anyway.

[–] Damage@feddit.it 16 points 1 week ago

Afaik the fingerprint is stored on dedicated hardware on your device, it never leaves your phone and cannot be "read"

[–] sunzu2@thebrainbin.org 5 points 1 week ago (2 children)

Patterns are too easy to breach via brute force is my understanding like comically easy

[–] Crashumbc@lemmy.world 8 points 1 week ago* (last edited 1 week ago)

Any modern phone os locks to pin after 3 tries.

Now depending how good they are, it's often possible to guess it by looking at the smear patterns on the phone.

[–] wellheh@lemmy.sdf.org 4 points 1 week ago (2 children)

Most phones aren't letting you try more than 5 attempts before you're locked out. You can even set it up to erase after the attempts

[–] catloaf@lemm.ee 6 points 1 week ago

Most attacks are done offline. If they clone the encrypted partition, they can brute-force as fast as they want. Pin lockouts can't protect against that.

[–] sunzu2@thebrainbin.org 2 points 1 week ago (1 children)

You are showing a limited understanding of law enforcement's capabilities for brute force attacks.

They make an imagine ofnthe device and then brute force it so you better have that 16 character password.

[–] wellheh@lemmy.sdf.org 2 points 1 week ago (1 children)

Makes sense, but in that case, why do law enforcement even care if the OS reboots itself if they already have a copy of the encrypted contents?

[–] sunzu2@thebrainbin.org 1 points 1 week ago

properly passworded os still has vulnerabilities that they want to exploit.

OP is just one vulnerability closed.

You mentioned wipe feature after fialed tries, thats a tactic that a person with serious threat model can use but cops go a work around it.

load more comments (23 replies)

load more comments (45 replies)