Toggle sidebar Toggle sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

'GrayKey' iPhone Unlocking Box No Longer Works After iOS 12 Update

err404 said:
I disagree, only because it encourages truly more secure devices.
Click to expand...
That may be the end result, but in no way can that money be viewed as an investment in device security. The knock-on effects can’t ever be the justification for the expense itself.
 
gaanee said:
Is it not much easier to simply point the iPhone and unlock it and get access using FaceID? According to reports your consent is not required unlike for TouchID fingerprint. That sounds like sort of a loophole for security. TouchID apart from convenience provides better protection because fingerprint patterns are harder to replicate if not impossible.
Click to expand...

That's only one scenario where the culprit is alive and well. Face ID won't work on faces of the deceased, for example.
 
gaanee said:
Is it not much easier to simply point the iPhone and unlock it and get access using FaceID? According to reports your consent is not required unlike for TouchID fingerprint. That sounds like sort of a loophole for security. TouchID apart from convenience provides better protection because fingerprint patterns are harder to replicate if not impossible.
Click to expand...
No, TouchID and FaceID can both be compelled in the US under certain circumstances. Passcode is different, fifth amendment iirc. You can’t be forced to disclose knowledge in your head.
 
  • Like
Reactions: xpxp2002, Cayden and JayWilliams1776
FaceID does require the user's eyes to be looking at the phone. One can simple refuse to look!

I love that Apple continues to work to protect our privacy. I can see the other side of the coin when accessing a phone could provide needed information BUT unfortunately I see the abuse of it fast becoming the norm and not out of necessity.
 
  • Like
Reactions: martyjmclean and BODYBUILDERPAUL
lclev said:
FaceID does require the user's eyes to be looking at the phone. One can simple refuse to look!

I love that Apple continues to work to protect our privacy. I can see the other side of the coin when accessing a phone could provide needed information BUT unfortunately I see the abuse of it fast becoming the norm and not out of necessity.
Click to expand...

Also if you push the vol button and power button together before handing over the phone, faceid requires a passcode input even if you are forced to look at the phone
 
  • Like
Reactions: DCW, Mayostudent and martyjmclean
koruki said:
Also if you push the vol button and power button together before handing over the phone, faceid requires a passcode input even if you are forced to look at the phone
Click to expand...

Is this only on FaceID phones? It seems this feature would be useful on TouchID phones as well, but it doesn't work on my iPhone 7 Plus.
 
gaanee said:
Is it not much easier to simply point the iPhone and unlock it and get access using FaceID? According to reports your consent is not required unlike for TouchID fingerprint. That sounds like sort of a loophole for security. TouchID apart from convenience provides better protection because fingerprint patterns are harder to replicate if not impossible.
Click to expand...
Where did you read that TouchID is protected? This is murky legal ground and current thinking suggest that while passwords are protected, fingerprints aren’t. So if you’re in front of a suspect with their iPhone, their face is just as accessible as their fingers.

Stella said:
Cat and mouse game continues.

This benefits Apple: vulnerabilities will be found and exploited, and Apple will patch them.
Click to expand...
Ergo, this benefits us.
 
Two points:

One, Apple blocking this is a win for all of us, not because the government is unable to get into bad guy's phone, but because it fixes one more way for anybody to get into any of our iOS devices. I said the same thing when Apple patched various vulnerabilities that the jailbreak community was using to gain access - eliminating vulnerabilities is good.

Two, if I were the guy from Grayshift, "gee, we don't know how to get around this" is exactly what I'd say right now, regardless of whether we had another plan/angle underway or not - the clock on the limited sales lifetime of any next device they make starts when Apple learns of some new way in that they've worked out, so you wouldn't want to start the clock until you announce sales of your next-gen device.
 
gaanee said:
Is it not much easier to simply point the iPhone and unlock it and get access using FaceID? According to reports your consent is not required unlike for TouchID fingerprint. That sounds like sort of a loophole for security. TouchID apart from convenience provides better protection because fingerprint patterns are harder to replicate if not impossible.
Click to expand...

Any abnormal activity requires you to re-enter the passcode, a restart or pushing the vol and power button before handing your phone over stops FaceID from working til you re-enter the code. It also doesn't work when you're asleep like touchID where kids were putting their parents finger onto the scanner.

Finger print is not impossible to replicate, they did it really early on, Face is much harder to copy
 
zorinlynx said:
Is this only on FaceID phones? It seems this feature would be useful on TouchID phones as well, but it doesn't work on my iPhone 7 Plus.
Click to expand...
Try pressing the display on/off button (what many call the power button) five times fast. It should go to emergency/help page (possibly after a few seconds), then hit the "X" there to cancel. Should now require a password. I don't know why older models use this pattern and newer ones use the "both buttons at once" technique.
 
  • Like
Reactions: DCW
PickUrPoison said:
Forced? As in Guantanamo?

People do spend time in custody on contempt charges to avoid disclosures. How many months or years will go by until the person is released varies.
Click to expand...

The average person, told “tell us your passcode or you will go to jail for an indeterminate amount of time” would consider that being “forced” to produce your passcode.
 
  • Like
Reactions: Rocko99991
gaanee said:
Is it not much easier to simply point the iPhone and unlock it and get access using FaceID? According to reports your consent is not required unlike for TouchID fingerprint. That sounds like sort of a loophole for security. TouchID apart from convenience provides better protection because fingerprint patterns are harder to replicate if not impossible.
Click to expand...

They never needed consent for TouchID either (fingerprints are not protected and there are existing cases covering this). If you are worried about it disable FaceID or if asked for your phone, hold the lock and volume up buttons for about 2 seconds and it will disable it.
 
cmaier said:
The average person, told “tell us your passcode or you will go to jail for an indeterminate amount of time” would consider that being “forced” to produce your passcode.
Click to expand...
Depends on the person and the stakes involved, right? Is a murderer going to give up his password when his phone would get him convicted? Don’t judges typically decide further incarceration will be unproductive? I’m sure it would depend on the facts of the case.

I wonder what the record is for the longest time period someone’s been in custody on contempt charges... probably many years.
 
Good riddance. Perhaps police departments will think twice about purchasing next time when it's so expensive and will be shut down quickly. They'd be better off hiring more officers to, you know, help prevent crimes from happening in the first place.
 
  • Like
Reactions: MacsRuleOthersDrool
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back