Slashdot Mirror
Hacker Dumps iOS Cracking Tools Allegedly Stolen From Cellebrite (vice.com)
Last year, when Apple refused to unlock the security on an iPhone 5c belonging to the San Bernardino shooter, the FBI turned to an Israeli mobile forensics firm called Cellebrite to find another way into the encrypted iPhone. Now Motherboard reports that a hacker has released files allegedly from Cellebrite that demonstrate how cracking tools couldn't be kept private. From a report: Now the hacker responsible has publicly released a cache of files allegedly stolen from Cellebrite relating to Android and BlackBerry devices, and older iPhones, some of which may have been copied from publicly available phone cracking tools." The ripped, decrypted and fully functioning Python script set to utilize the exploits is also included within," the hacker wrote in a README file accompanying the data dump. The hacker posted links to the data on Pastebin. It's not clear when any of this code was used in the UFED. Many of the directory names start with "ufed" followed by a different type of phone, such as BlackBerry or Samsung. In their README, the hacker notes much of the iOS-related code is very similar to that used in the jailbreaking scene -- a community of iPhone hackers that typically breaks into iOS devices and release its code publicly for free.
Repeat the meme!
piracy is not theft
piracy is not theft
piracy is not theft
Software cannot be stolen!
In their README, the hacker notes much of the iOS-related code is very similar to that used in the jailbreaking scene -- a community of iPhone hackers that typically breaks into iOS devices and release its code publicly for free.
Remind me again, how much did the FBI pay Celebrite to get into that single iPhone 5c again?
Fuck Israel and fuck the US government.
Where is the link to the torrent?
OTOH, they've intentionally made the private data of many users of this privacy/encryption scheme less secure - not only from the US government and Cellbrite, but now from all who would know what they saw fit to hide, whether nefarious or banal.
I've already had half a fifth of whiskey tonight . . . Help me out here, Slashdot. A/C's need not apply.
http://cdn5.cellebrite.org/Forensic/UFED/4PC/Cellebrite%20Ufed%20Setup%205.4.0.853%20UFED4PC%20(Fat).exe.cpkg
Have fun.
The safety of the mighty iOS. But for some reason Android users should be terrified of running a slightly old OS version, unlike iOS users should because of reasons.
Why do I have to think of somewhat fatty elder people when I read that name?
(And oh, before you accuse me of ageism: I'm elder -- and somewhat fatty ;-D
Now let's get to work on getting Trump's tax returns.
As FBI asked for for signed executable that could have checked serial number of the phone and would have been useless on other phones.
This is exactly what I and everyone else was saying at the time about the FBI case. If an exploit was developed for one phone it would be used for all phones and it would eventually leak out into the Internet. I expect each and everyone who said I was wrong about this issue to make a formal apology.
The owner of the device should be the one setting ALL keys, from bootloader on up signing and verifying the images they use on their device.
Centralized signed firmware images only ensure the 'owner' of the device is not the same as the 'owner' of the data.
"Now the hacker responsible has publicly released a cache of files allegedly stolen from Cellebrite...some of which may have been copied from publicly available phone cracking tools..."
Well, that's some creative irony labeling a hacker as the thief, since it would appear Cellebrite favors "borrowing" code to create a product to sell to the highest taxpayer-funded bidder...
no proof
Where is the pastebin link? Why don't we get the primary source for this story? :(
I don't need that god awful piece of shit iTunes to manage content on my phone? I mean the main window has a sync button. I add files to my library and click sync but it never copies the files. Only when you click on the tiny phone button on the toolbar and then look at the storage space breakdown does a second sync button show up. This is what actually copies files to your phone. What the fuck Apple?
Oh and say I don't like Apple's default media player. In order to use a third party app I have to enable file sharing with that app, and copy my files over to it. That means I need to delete my iTunes library or else everything is copied to the phone TWICE. Again, what the fuck?
Only the State obtains its revenue by coercion. - Murray Rothbard
Because Apple did not develop a tool for the FBI to tease out the encrypted data from one phone, the FBI basically offered a cash prize for such capability (went shopping for someone who could). This caused multiple companies / hackers to seek out a way to tease out the data. And eventually when one of them succeeded, they had a fiscal incentive to not disclose the vulnerability to Apple (so they could use it again in the future to make more money). Until it eventually leaked out onto the internet.
If Apple had developed a tool to reverse-engineer their encryption and tease out the data from one phone, it would've been as safe as they could keep it, and they would've had the option to patch whatever vulnerability they used immediately after the FBI was satisfied. There would've been no additional fiscal incentive for someone else to find a vulnerability, because the FBI would've been satisfied and not offered a cash prize for someone else finding a vulnerability. So there would've been a lower chance of such a vulnerability being found, and remaining in the wild (someone who found it might've turned it in to Apple for a bounty, rather than held out hoping to sell it to government agencies).
So basically, Apple refusing to help the FBI increased the chances of this type of exploit being found and spread in the wild.
You would've been right if Apple had created a back door in their encrypted backup servers to satisfy the FBI's request. But that's the kinda of "worst case" thinking that political advocates use to try to make strawmen to win arguments. Engineers think in terms of "least effort" and "least cost" (fiscal and other). Finding an exploit in just this one older phone model would've been an engineer's preferred solution to the problem, not putting a backdoor into the backup servers that would defeat the purpose of encrypting the backups.
If someone enters your home or business while you're away, goes through your file cabinet, takes pictures of every document, then leaves without disturbing anything, it's still illegal. The only exception is if your government does it then it's just called surveillance. Double standard hypocrisy. If I remember correctly we had a President that was impeached for ordering exactly that. There should be no legal difference between data on your device, in a briefcase, or in your file cabinet.
Would have posted the link to actual hacking tools
The new slashdot just constantly links to vice.com for 60% of it's daily content.
Imagine if vice.com suddenly went out of business? Slashdot would have no content to post! All they would have is Rothschild Global warming FUD stories to post all day.
Link to dumps
Release 1 - the supply chain - a backdoor with backdoors.
In this release find a small sample of the 900GB of mere 'user accounts and basic contact
information' recently liberated from Cellebrite.
The exploit techniques that Cellebrite employ are wrapped in various encryption schemes .eas (DLL designed to target devices and applications) and .epr
in an attempt to protect 'their' intellectual property. The custom routines for
decrypting this lame ass protection are included in this release along with an
accompanying sample
(bootloaders, exploits and shellcode) files.
The more discerning eye will notice that some of the Apple exploits bear a remarkable
resemblance to those available to any teenager interested in the jailbreaking scene;
perhaps not all those tax dollars have been wasted, the Blackberry epr is still worth
a look at.
The ripped, decrypted and fully functioning python script set to utilize the exploits
is also included within.
Download links:
https://mega.nz/#!sZUkSbDT!l74...
https://mega.nz/#!0d9zBQLI!DdK...
Coming soon.....
Release 2 - watching the watchers - pivot to win.
In this release find a small sample of files retrieved via the weaponized Cellebrite
update service deployed on MS Windows based devices and desktops (SYSTEM privs) within
the customer infrastructure.
Analysis of the compression and obfuscation employed by Cellebrite on products supplied to
British MOD juxtaposed with the protection free versions supplied to SOCOM and others is
also included within.
@FBI Be careful in what you wish for.
[Rent This Space]
That site made my day....it will come in handy over the next.....arghhh...4 years.....hmmmm.......phhhhh........shit...