Hacker Teaches iPhone Forensics To Police

Ponca City, We love you writes "The Mercury News reports that former hacker Jonathan Zdziarski has been tapped by law-enforcement agencies nationwide to teach them just how much information is stored in iPhones — and how to get it. 'These devices are people's companions today,' says Zdziarski. 'They're not mobile phones anymore. They organize people's lives. And if you're doing something criminal, something about it is probably going to go through that phone.' For example, every time an iPhone user closes out of the built-in mapping application, the phone snaps a screenshot and stores it. Savvy law-enforcement agents armed with search warrants can use those snapshots to see if a suspect is lying about whereabouts during a crime."

Comments

your own personal lo-jack

[romanval]

You would think most criminals would know not to carry a cell phone at all, since the cell towers tracks and record their location at every moment.

Re:iPhone secret screenshots?

[Graff]

"For example, every time an iPhone user closes out of the built-in mapping application, the phone snaps a screenshot and stores it." - TFS What?

It's called caching. When an iPhone application switches to another application it can quickly store an image of the app's current state. When the user switches back it displays that image while the real view is being built. That way the user gets an immediate view of the last state of the app rather than having to wait around for that state to be re-built.

Your desktop computer's web browser (and many other programs and devices) does the same thing, it stores data for quick access and responsiveness. You'd be surprised at just how many devices use this technique, the iPhone is far from the only device to cache data.

It's a smart technique but yeah, if you're committing crimes then too bad for you. I'd suggest that maybe you shouldn't be using ANY electronic device during a crime that you don't completely understand what data it sends and stores and how to deal with it before it becomes evidence.

Zombie Flash cookies and going deep

[AHuxley]

http://arstechnica.com/apple/news/2010/09/rldguid-tracking-cookies-in-safari-database-form.ars
I wonder how many will soon be tracked via Flash-based cookies and deep stored history options.
The Safari database seems to be an open and safe way to track a user via a normal 'ad' after a site visit.
Stop giving state task forces and feds signals intelligence via a next generation of toys in your pocket.
Go simple and swap any used device out asap.
Try a collection of dumb devices with no networking or life long databases.
Recall the Malcolm X script... "Don't never write nothing down ....
Cause if they can't find no [iphone] they ain't got no proof..."
The serial numbers, hidden databases, location services ect, almost makes you think someone really put thought into tracking.
Any ex CIA director's investment banks seed money linked to funding this stuff?