Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

patent10021

macrumors 68040
Original poster
Apr 23, 2004
3,580
854
I know it has the SEP but could some forensic tools access some other non-encrypted area in memory or system folder?

Just double-checking. All we need to do is an iTunes factory restore and turn off all iCloud?
 
If the iPhone had a passcode on it, all data will be encrypted, and without the correct decryption key, all data any forensic tool would be able to get out of it, would be useless, unreadable, scrambled nonsense. That said, the decryption key could theoretically be brute-forced, but if the device is on a recent version of iOS that brute-forcing process would not exactly be an easy thing to do either. They use quite long keys and have limits to how often you can attempt with a new key. - Furthermore, if you do the restore, new data will be written to some of the blocks meaning not all data will be intact so even if it were brute-forced there may not really be anything left.

In essence, unless you're hiding nuclear codes on it, and the buyer is the North Korean government, I think you'll be fine.
 
...snip...

In essence, unless you're hiding nuclear codes on it, and the buyer is the North Korean government, I think you'll be fine.
Well, I am going to pyongyang tomorrow to meet with Kim Jong-un.

p.s. Is the passcode thing retro-active? Meaning can you add a passcode now and all is safe? Or only from day of using passcode like MacOS File Vault?
 
Well, I am going to pyongyang tomorrow to meet with Kim Jong-un.


In that case you're going to want to use a hot air station to pull out the flash chips from the iPhone, as well as the controller, plug both directly into another circuit board that has a uart port, connect a serial terminal to it, and run zerofree on the drive to 0 out all the free storage that was reclaimed from the restore.

Because a 0.5% likelihood of any data spillage would be too high a risk at that point I'd say
 
In that case you're going to want to use a hot air station to pull out the flash chips from the iPhone, as well as the controller, plug both directly into another circuit board that has a uart port, connect a serial terminal to it, and run zerofree on the drive to 0 out all the free storage that was reclaimed from the restore.

Because a 0.5% likelihood of any data spillage would be too high a risk at that point I'd say
:)
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.