Cellebrite Unable to Unlock iPhones on iOS 17.4 or Later, Leak Reveals

[alchemistmuffin]

Apple continually introduces improvements to the security of its operating systems in order to keep ahead of companies like Cellebrite that are always searching for flaws and vulnerabilities to exploit in order to access the data on locked iOS devices.

And how do they thwart them? Simple: they have the Cellbrite cracking device.

What I heard from industrial chatter is that Apple posed as security firm working for law enforcement (they even set up fake shell company just for this purpose) to obtain the devices. After figuring out how it cracks the OS, Apple patches it up in subsequent updates.

As long as Apple can keep up (they have multiple fake shell company posing as security firm) this will keep iOS very difficult if not impossible to crack without some chip flaws in Apple Silicon.

 

[willzyx]

Buy a cheap Chinese knockoff on Amazon.

I want to get a passcode, not give someone lead poisoning.

 

[CarAnalogy]

We don’t know that. We only know what Cellebrite specifically is currently (well, back in April) unable to hack.

I seem to recall that's how they solved the San Bernadino phone as well. They're the government, they can just wait. Eventually 'sploits will come out.

 

[ChedNasad]

Finally vindicated for obsessively updating everything all the time

 

[rjp1]

Apple's commitment to continuing to upgrade their security is admirable.

I honestly can't think of anyone that makes an operating system that doesn't do the same.

 

[MrAverigeUser]

I seem to recall that's how they solved the San Bernadino phone as well. They're the government, they can just wait. Eventually 'sploits will come out.

I am no specialist, but IIRC They have been only able to hack the Handy in the San Bernardino Case because the owner had activated automatic background syncronisation with iCloud everytime the iPhone has been put on...
it seems that they were able to use a weakness of this automatic syncronisation process to get the iPhone under control.

 

[xiJulian_]

Interesting. I have an Israeli friend whose iPhone 14 Pro Max got unlocked by the police not too long ago.

 

[MrAverigeUser]

Interesting. I have an Israeli friend whose iPhone 14 Pro Max got unlocked by the police not too long ago.

IIRC at least in the San Bernardino case THEN they had luck that the criminal did not deactivate the automatic sync mode THEN... the old IOS of that time seems nowadays easy to break (if the article is correct) since IOS 17.5x and later IOS updates is said to be at least at the moment relatively secure.. (?)

maybe the security hardware of the latest iPhone models plays a certain positive role as an "ad on" together with IOS 17.5x and later updates?

Would be interesting to know if your friend used the iPhone 14 with activated sync. or not - and what version of IOS at that time when he has been controlled...
I remember that apple said that IOS 17.5x includs very important security features and so I updated my iP14 immediatly after release.

BTW: I do NOT use the iCloud... I dont trust Clouds.... I like and do physical backups

 

[Iwavvns]

You will have to get a basic flip-phone. iPhone 15 Pro can already be unlocked.

The best approach is to avoid putting anything that important on your phone to begin with. I grew up in the 70’s, we didn’t have mobile phones and we got along just fine using our brains. I learned quite a bit from my childhood in the 70s, I learned that I could get along just fine today if all of my devices disappeared.. whereas most people would have a nervous breakdown.

 

[jmonster]

all these tools yet the EU wants to „protect“ us with those annoying Cookie Banners. All just a front to preach falls safety while actually spying on us in secret anyway.

Also the irony trying to click one of the links in the article:

„This connection is not private“

You can take a long walk off a short cliff with this EU hate. The banner is only necessary when the cookies are used for more than session. It's the absolute fault of the websites for engaging in practices that require them. (Or they superfluously display them without actually needing too ... mhm right.)

Cause life would be so much better if we could just make believe it wasn't happening huh. Violate privacy and exploit users, OK, inform them about it WHOOOOAAA GET OUTTA HERE WITH THOSE LAWS!

🙄🙄🙄

 

[CarAnalogy]

I am no specialist, but IIRC They have been only able to hack the Handy in the San Bernardino Case because the owner had activated automatic background syncronisation with iCloud everytime the iPhone has been put on...
it seems that they were able to use a weakness of this automatic syncronisation process to get the iPhone under control.

To be fair I don't remember the details anymore. This is what I was alluding to in the original post, that if they had left the phone where it was it would have backed up to iCloud and then Apple would give them the iCloud backup. They didn't follow chain of custody by obtaining a hard copy before doing anything that would modify it. Though to also be fair, it's easy to Monday morning quarterback that one.

But Apple wasn't willing to purposely break the fundamental security systems of iOS and set the precedent.

They would never have been able to put that monster back in the box.

 

[splifingate]

Uffff .... The information is not updated!!!! Now it is possible to unlock or access the information of iPhones on all iOS versions, including 17.5.1, under certain conditions.

Yup.

 

[Tagbert]

I don't believe that any big tech company is truly looking out for us when it comes to privacy. If they want our data, trust me, they can get it one way or another.

It’s more about where the benefits are for the company. Apple does not benefit from compromising your privacy. They do benefit from protecting it as best they can.

 

[InTeCredo]

all these tools yet the EU wants to „protect“ us with those annoying Cookie Banners. All just a front to preach falls safety while actually spying on us in secret anyway.

Also the irony trying to click one of the links in the article:

„This connection is not private“

That is why I use VPN...

 

[MTShipp]

Makes me wonder how the FBI got into Crooks’ phone.

 

[MrAverigeUser]

at least one should never ever do a jailbreak... opening and inviting the iPhone for EVERYONE...

 

[Victor Mortimer]

That is why I use VPN...

It's cute that you think that helps you in any way.

VPNs are useful for two purposes: Connecting to your company's network, and torrenting.

They do NOTHING to protect you from insecure websites.