iOS 12 Includes Setting to Disable USB Access When an iPhone Hasn't Been Unlocked for More Than an Hour

[MacRumors]

In iOS 12, there's a new setting that will effectively put an end to law enforcement access to iPhones and iPads using USB devices like the GrayKey box, preventing USB accessories from connecting when it's been more than an hour since the iPhone was last unlocked.

Located under Touch ID & Passcode, the new setting, which requires a passcode to be entered to allow a USB accessory to connect after an hour, is enabled by default.

You can toggle off the setting to allow USB accessories to connect at any time, but most users are likely going to leave this set to the default setting as there's not a whole lot of benefit to turning it off. With this turned on, you'll need to enter your passcode for a data connection to the iPhone using a USB device, such as when you connect it to iTunes on a computer, but charging via the Lightning port will continue to work fine.

The new setting is of interest because it's an expansion of USB Restricted Mode, a feature Apple toyed with during the iOS 11.4 beta. USB Restricted Mode was designed to disable USB access to the Lightning Connector after 7 days, but iOS 12 cuts that time period way, way down.

Law enforcement officials use USB access to an iPhone or an iPad to connect accessories like the GrayKey box, a tool that plugs into the Lightning port of an iPhone and uses the data connection in an attempt to brute force a passcode.

With the new setting, an iPhone's Lightning port data connection will not work with the GrayKey box if it's been more than an hour since a passcode was entered, rendering it effectively useless unless used immediately after an iPhone is obtained from a suspect.

Law enforcement officials are likely going to be unhappy with the changes Apple is making in iOS 12 because it's going to make iOS 12 devices a lot harder to get into, but from a customer point of view, this setting offers protection from hackers and other bad actors who may be able to get ahold of this kind of technology.

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Article Link: iOS 12 Includes Setting to Disable USB Access When an iPhone Hasn't Been Unlocked for More Than an Hour

 

[Mr. Heckles]

This is just awesome! I’m glad it’s an hour and not a week.

 

[Khedron]

In before that guy who's been professionally cracking iOS for a decade tells us he already knows how to bypass this setting.

 

[Robert.Walter]

Should also be triggered when a phone is put into SOS mode and whenever TouchID/FaceID is disabled.

If it’s not doing that, that would seem to be an oversight.

 

[BC2009]

Somebody was saying this could be bypassed since it was a software change, but if this works then it is awesome.

My way around GreyBox was to use an alphanumeric password that would take a very long time to guess. Touch ID makes it so I rarely have to enter that password.

This is a setting that I will leave turned on -- for sure.

I just wonder if this is just the next step in the move / counter-move.

 

[thefredelement]

Can't it just be right away except for things (apps / hosts / etc.) I explicitly allow (if possible?), if not, right away would be great... I think someone else said this on an 11.4 thread maybe or I read it somewhere but the more I think about it the more it makes so much sense, why wouldn't it be turned off unless the device was unlocked or the relationship was established as trusted?!?

 

[Lerxt]

This is one of the things I love Apple products for, the way Apple takes genuine steps to protect privacy. Keeep on doing this and i'll be a customer forever.

 

[dontwalkhand]

Bye bye super expensive GreyKey!

 

[Scottsoapbox]

So if you brick your iPhone, does this prevent restoring from iTunes?

 

[Mr. Heckles]

Can't it just be right away except for things (apps / hosts / etc.) I explicitly allow (if possible?), if not, right away would be great... I think someone else said this on an 11.4 thread maybe or I read it somewhere but the more I think about it the more it makes so much sense, why wouldn't it be turned off unless the device was unlocked or the relationship was established as trusted?!?

I agree, but it’s better than a week. I wish I could make it that the port doesn’t transfer data at all unless I unlock it.

 

[scrapesleon]

Good I’m going to toggle it on I don’t mind entering my passcode

 

[mujtaba.mir]

Don’t see the toggle on an iPhone X, can see the text about one hour warning though.

 

[justiny]

I’m perfectly fine with law enforcement officials being unhappy about this.

 

[jeremiah256]

It's the simple things like this that makes iOS so valuable to me. Love it.

 

[AdonisSMU]

This is HOT!

 

[WiiDSmoker]

Good - **** the police

 

[jermwhl]

Good - **** the police

I was wondering why this was listed under "political, religious, and social issues". I guess this is why, lol.

 

[Princejb134]

Somebody was saying this could be bypassed since it was a software change, but if this works then it is awesome.

My way around GreyBox was to use an alphanumeric password that would take a very long time to guess. Touch ID makes it so I rarely have to enter that password.

This is a setting that I will leave turned on -- for sure.

I just wonder if this is just the next step in the move / counter-move.

what are you hiding?
i just had a 4 digit pin lol

 

[Wowzera]

Will it keep charging the gadget?

 

[BWhaler]

This is why I love you Apple and suffer your crappy keyboards.

This, and privacy against Facebook, Google, and the other spyware companies out there.

Thank you for your leadership and care.
[doublepost=1528159034][/doublepost]

Will it keep charging the gadget?

My understanding is yes. It’s data which is shut down.

 

[Apple_Robert]

Thanks for the article, MR. Great feature, Apple. Will definitely leave it toggled off (default setting);

 

[Mr. Heckles]

what are you hiding?
i just had a 4 digit pin lol

Banking info, emails, contacts of friends and family, photos, personal info, and more. No one needs to see this info unless I let them. Period.

 

[rorschach]

So if you brick your iPhone, does this prevent restoring from iTunes?

I would imagine not. This feature exists to protect user data. Restoring erases that data. The police aren’t taking phones just to get a new phone; they want they data.

 

[PBG4 Dude]

I would imagine not. This feature exists to protect user data. Restoring erases that data. The police aren’t taking phones just to get a new phone; they want they data.

I think the question here is if DFU mode reactivates USB connectivity to the lightning port, can there still be a way to break into the phone?

 

[Dodgeman]

Apple out here doing a 1st! This is good news. I admit Apple takes peoples personal security seriously.
They should probably lower this down to a half hour, or even 15 minutes.
Put a really long pin code in, and it'll be next to impossible to crack.