• Ever wanted an RSS feed of all your favorite gaming news sites? Go check out our new Gaming Headlines feed! Read more about it here.
Feb 1, 2018
5,083
Apple Just Killed the 'GrayKey' iPhone Passcode Hack

Uncloaked by Forbes in March, Atlanta-based Grayshift promised governments its GrayKey tech could crack the passcodes of the latest iOS models, right up to the iPhone X. From then on, Apple continued to invest in security in earnest, continually putting up barriers for Grayshift to jump over. Grayshift continued to grow, however, securing contracts with Immigration and Customs Enforcement, and the Secret Service.

Previously, GrayKey used "brute forcing" techniques to guess passcodes and had found a way to get around Apple's protections preventing such repeat guesses. But no more. And if it's impossible for GrayKey, which counts an ex-Apple security engineer among its founders, it's a safe assumption few can break iPhone passcodes.

Police officer Captain John Sherwin of the Rochester Police Department in Minnesota said of the claim iOS 12 was preventing GrayKey from unlocking iPhones: "That's a fairly accurate assessment as to what we have experienced.

Big win for consumers- data privacy should be a human right in the digital era IMO.
 

8byte

Attempted to circumvent ban with alt-account
Banned
Oct 28, 2017
9,880
Kansas
Fantastic news, and I'm glad to see Apple continue to treat data privacy as something sacred. Now if only their devices were affordable to more people.
 

StAidan

Member
Oct 25, 2017
880
Apple's dedication to protecting data privacy is what convinced me to buy my first iPhone (the XS) this year. I feel like they are the only large company who takes it seriously.
 

Kthulhu

Member
Oct 25, 2017
14,670
good shit, Apple.

are Android phones similarly secure already?

Google's been doing better since Android 6.0, but iOS is still the industry standard for a secure mobile OS for the mainstream. Plus a lot of the data on an Android phone is backed up to the cloud, so in theory Google could be forced to turn over a lot of data on you.
 

dingobingo

Banned
Dec 5, 2017
2,099
Apple's dedication to protecting data privacy is what convinced me to buy my first iPhone (the XS) this year. I feel like they are the only large company who takes it seriously.

Nah, they just don't make money from data mining you. I'm pretty sure if that was their source of rev it would be a diff story.
 

borghe

Member
Oct 27, 2017
3,112
this is not entirely correct. There is a LOT of stuff that is private from apple, literally device only, that will NEVER be private from google. like your files and stuff are one thing.. and most of that is secure between both OSes.. but

traditional search and usage data
privacy keys used for device and data encryption
machine learning data
encrypted backups online (only accessible by apple IF law enforcement has access onto the phone itself)

etc.

android can say that the data on your phone is totally secure. google cannot (and will not) say your data and backups to the cloud are totally secure (usually if asked for by law enforcement)

apple can say in the vast majority of cases... unless law enforcement has access onto your phone, there is very limited data they can give law enforcement from the cloud.
 

TI92

Alt account
Banned
Oct 25, 2017
5,598
this is not entirely correct. There is a LOT of stuff that is private from apple, literally device only, that will NEVER be private from google. like your files and stuff are one thing.. and most of that is secure between both OSes.. but

traditional search and usage data
privacy keys used for device and data encryption
machine learning data
encrypted backups online (only accessible by apple IF law enforcement has access onto the phone itself)

etc.

android can say that the data on your phone is totally secure. google cannot (and will not) say your data and backups to the cloud are totally secure (usually if asked for by law enforcement)

apple can say in the vast majority of cases... unless law enforcement has access onto your phone, there is very limited data they can give you from the cloud.
If that's the case you can use roms that aren't google-based at all. So yeah you can have stuff that google knows nothing about :p
 

borghe

Member
Oct 27, 2017
3,112
If that's the case you can use roms that aren't google-based at all. So yeah you can have stuff that google knows nothing about :p
umm... that's not what ROMs do....

it's a result of using Google services, and those services being designed from the start around data collection.
 

Phantom

Writer at Jeux.ca
Banned
Oct 28, 2017
1,446
Canada
User Warned: Drive by post, derailment
All while not allowing people to repair their own phones, using slave labor in China and overcharging for poor tech. Gotta love the cult of Apple.
 

borghe

Member
Oct 27, 2017
3,112
Yeah and you can run roms such as those from LineageOS that don't require google services by default...
of course. but then you are losing a massive chunk of what people buy modern smartphones for (not to mention what most people expect from iOS/Android). not to mention now having to maintain the OS entirely on your own.. it's not practical for even your typical above average consumer. hence why apple gets kudos (their mainstream OS is locked as hell) and google often gets chastised when it comes to privacy.

I mean by the same metric... your iPhone is even more secure if you never create an iCloud account and never back it up.

we're talking consumer use cases.. not going extremely out of your way to run a hardened phone.
 

TI92

Alt account
Banned
Oct 25, 2017
5,598
of course. but then you are losing a massive chunk of what people buy modern smartphones for (not to mention what most people expect from iOS/Android). not to mention now having to maintain the OS entirely on your own.. it's not practical for even your typical above average consumer. hence why apple gets kudos (their mainstream OS is locked as hell) and google often gets chastised when it comes to privacy.

I mean by the same metric... your iPhone is even more secure if you never create an iCloud account and never back it up.
I mean, you can get open source alternatives for most if not all things. Or rip APKs yourself...

a lot of stuff that iPhones just won't let you do if you want truly secure stuff. The ability to control it yourself :/
 

Dierce

Member
Oct 27, 2017
3,993
All while not allowing people to repair their own phones, using slave labor in China and overcharging for poor tech. Gotta love the cult of Apple.
Yeah exactly this.They refuse to accept that Apple is not doing this because they actually care about privacy, it's all a marketing gimmick. Privacy and security comes down to educating the customer.

Apple wants complete control over the customer experience which is something that I completely disagree with. If I don't want to use two factor I shouldn't have my device notifying me to turn it on every day or have my computer trick me into enabling encryption.
 

mordecaii83

Avenger
Oct 28, 2017
6,860
The company I work for has flat out banned Google devices from accessing certain services multiple times in the past, which is why I switched to iPhone in the first place and I don't regret my decision. It's nice to feel secure without having to jump through hoops.
 

borghe

Member
Oct 27, 2017
3,112
I mean, you can get open source alternatives for most if not all things. Or rip APKs yourself...

a lot of stuff that iPhones just won't let you do if you want truly secure stuff. The ability to control it yourself :/
I mean, that's the point here. iPhone IS that secure by default. Without direct access to the unlocked phone, apple has no access to identifiable data. everything you are saying "well you CAN do it by heading down the road of custom ROMs"... is iOS out of the box.
 

BDS

Banned
Oct 25, 2017
13,845
They refuse to accept that Apple is not doing this because they actually care about privacy, it's all a marketing gimmick.

I mean, Apple was willing to fight the federal government in court and face massive public backlash over their refusal to unlock the San Bernardino shooter's iPhone. I do think Tim Cook is one of those hyper-libertarian Silicon Valley dudes who genuinely does value privacy and not just as a marketing gimmick.
 

thespartin

One Winged Slayer
Avenger
Oct 27, 2017
159
Russia and China can already hack the President's iPhone, so I don't think anyone is safe
They arent "hacking into" his phone. Security experts best guess is they are breaking the encryption on the phone tower, nothing to do with getting access into the actual phone or data on the phone. Its just them being able to listen in to his conversations.
 

borghe

Member
Oct 27, 2017
3,112
Yeah exactly this.They refuse to accept that Apple is not doing this because they actually care about privacy, it's all a marketing gimmick. Privacy and security comes down to educating the customer.
this really can't be proven either way. In this case, it just happens that a huge marketing tool/opportunity just HAPPENS to be in the consumer best interest... it's not impossible, just incredibly rare :P and that their biggest competitor in fact got to be as big as they are because they made money by harvesting your private information.

it was a way for them to differentiate themselves from their biggest competitor that just happens to be in the consumer's best interest. are they noble? or did we get really lucky?
 

Dierce

Member
Oct 27, 2017
3,993
I mean, Apple was willing to fight the federal government in court and face massive public backlash over their refusal to unlock the San Bernardino shooter's iPhone. I do think Tim Cook is one of those hyper-libertarian Silicon Valley dudes who genuinely does value privacy and not just as a marketing gimmick.
The way I see it everything apple does is 100% marketing. It's how they became so famous in the first place. Ensuring privacy and security to them is locking people inside their walled ecosystem where only they have absolute control. Some people might be fine with that but I'm not.
 

borghe

Member
Oct 27, 2017
3,112
Ensuring privacy and security to them is locking people inside their walled ecosystem where only they have absolute control. Some people might be fine with that but I'm not.
this is patently false FYI. The assurance that your data is private is made BECAUSE you are literally the only one who has absolute control over your privacy. All keys, machine learning data, biometrics, usage data, etc are stored locally on your device (or in some cases p2p distributed across multiple devices of yours, because you choose to)

and just like android... all of your non-proprietary local data is able to be migrated to another platform just fine, as long as you have access onto the device.
 

ReAxion

Member
Oct 26, 2017
3,882
The way I see it everything apple does is 100% marketing. It's how they became so famous in the first place. Ensuring privacy and security to them is locking people inside their walled ecosystem where only they have absolute control. Some people might be fine with that but I'm not.

apple logos make people believe weird shit indeed.
 

Dan

Member
Oct 25, 2017
8,950

No doubt, as long as you have humans involved in the coding process, there will always be vulnerabilities. No doubt the powers that be are currently trying to expose those vulnerabilities and create tool kits for bypassing IOS' controls.
 

Jazzy

Member
Oct 25, 2017
1,156
I wonder what the brute force protections Samsung and Google have? I've never thought about it, but I've never needed it.