Slashdot Mirror
Cellebrite Can Now Unlock Apple iPhone 6, 6 Plus (cyberscoop.com)
Patrick O'Neill writes: A year after the battle between the FBI and Apple over unlocking an iPhone 5c used by a shooter in the San Bernardino terrorist attack, smartphone cracking company Cellebrite announced it can now unlock the iPhone 6 and 6 Plus for customers at rates ranging from $1,500 to $250,000. The company's newest products also extract and analyze data from a wide range of popular apps including all of the most popular secure messengers around. From the Cyberscoop report: "Cellebrite's ability to break into the iPhone 6 and 6 Plus comes in their latest line of product releases. The newest Cellebrite product, UFED 6.0, boasts dozens of new and improved features including the ability to extract data from 51 Samsung Android devices including the Galaxy S7 and Galaxy S7 Edge, the latest flagship models for Android's most popular brand, as well as the new high-end Google Pixel Android devices."
Why? Apple will do more to secure iOS.
If they want my password that bad, I just may give it to them for $250,000.
I'm keeping my Windows Phone.
Security through obscurity FTW !
Quite a range. I dearly hope the lower end of the range is for some Shleprock who forgot his passcode and the 250K fee is for any customer with the last name Government.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
No.
Modern app appers use Appdows 10, NOT LUDDITE Windows Phone!
Apps!
with Kool and the Gang
I assume (possibly incorrectly) they broke the boot loader then bruteforce the pin - if this is correct an adequate defence would be to set a long alphanumeric password rather than the default numeric 6 digit.
Can anyone confirm this is the technique they they are using?
I'll keep my secrets in my head and stick to a $50 dumbphone with nothing in it and not even turned on for more than 1 hour a day. Seriously you people so attached to your goddamned smartphones are pathetic and I pity you.
I believe it. Fingerprint scanning was once a really loosey goosey way of providing the illusion of security, but where easily fooled using some pretty low tech. Although a hotdog sure seems to be pretty low tech.. Even on a good day, finger print scanning is pretty bad, either giving you a really high false positive or really high reject rates, even today, when the horse power needed to sort though a pile of prospective fingerprints looking for a match is more readily available.
Think of it as a really bad padlock with one tumbler made of plastic... Easy to pick if you don't want anybody to know you broke in, or you can just yank it off with your bare hands if you don't care if they find out...
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
DEPORT them BAD DUUDZ!
Cellbrite is the next best thing to having someone like geohotz on the payroll. The forensics guys at my work swear by it as their go to tool for doing forensics collections of mobile devices.
No. Nobody misread that. Stop trying to be funny, it isn't working.
Help me understand the legal standing of Cellbrite.
If I buy an iPhone 6 and circumvent the built-in encryption, am I not in violation of the DCMA? Yet when Cellbrite does it, and sells that service as a product it's not a DMCA violation but instead a legal offering to law enforcement (or anyone willing to pay the crazy fee)?
Am I missing something here?
n/t
You have to trick your target into carrying around a miniature surveillance system. Which is to say, the only winning move is to not play the game. I'm not a Luddite, I just understand the danger of such devices.
I wonder if a dirty fingerprint scanner simply picked up residue from the previous time it was touched.
Do not look into laser with remaining eye.
1) Pay $250K for the yearly subscription.
2) Advertise phone unlocking nationwide for $500.
3) Get 600 people to pay to unlock a phone (individuals, police agencies, private detectives, etc etc etc)
4) $50K profit! Woo hoo!
Get 1200 people to pay and make $100K profit. And so on...
All I need is $250K to get started...and another $100K for advertising.
Just cruising through this digital world at 33 1/3 rpm...
As I understand it phone fingerprint scanners don't actually look at your fingerprint. Rather they measure the capacitance over a series of fluctuations in the field density to make the "fingerprint". Or something like that. I don't know how many unique bits you can get out of that, but the danger of someone managing a false positive is reduced by simply locking it out after three failed scans and making the user type in their password instead.
I read the internet for the articles.
"Ask your doctor if Cellebrite is right for you."
I remember talking to a guy who said don't listen to companies that tell you their security is foolproof. Because the only fools are those saying that and the ones who believe them. If you want the data you'll find a way in to get it. Call it a back door, a pre configured security access agreement or whatever.
Stop removing basic functionality from your products and get to work in making them secure from overreaching governments, ya faggot.
Sounds like the shareholders of Cellebrite need to be strung up by their necks until dead for allowing the government to spy upon us.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
Does that mean they found a way around the secure enclave?
Has there been any actual peer-reviewed evidence that Cellebrite's attacks are legit? The FBI claiming "we did it!" is dubious at best. I remain skeptical that if there is a exploitable vulnerability, that only this one company that just so happens to sell exploits is the only outfit to have discovered it.
No, obviously not.
Best news today!
Send Timmy Cook to prison for obstruction of justice!
Burn Timmy Burn!
People who ask for this are above the law, either cops who don't care if what they do is illegal, or criminals who don't care.
Alright, lets say I'm likely to use the license >1, but 200 times... what's the point at which it begins to pay dividends to own the subscription?
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
OK, I'll add it to the list:
1. So-called judges.
2. The press.
3. Cellebrite.
Only crack the nuts that crack. You don't put the ones that don't crack in the sack.
Now I'm imagining someone paying Cellbrite $1500 to unlock my smartphone, and once it's unlocked, all they find is hundreds of photos of my food. I suppose I'd want a steganographic watermarking app that encodes a randomly generated serial number in each image.
Lets add car manufacturers to the list for letting government employees drive around harassing us, weapons manufacturers that sell to the government, clothing and office equipment suppliers that sell to the government, food and utility companies that sell to the government...
Rather than blaming a couple of dozen shareholders, perhaps you should look a little harder at the hundreds of millions of voters who continue to vote for candidates who allow the government to spy on 'us'.
people need to defend themselves.
there are hostiles out there that want to do us harm, either now or perhaps, later.
these hostiles are GOVERNMENTS and CORPORATIONS.
no one speaks for us, the individual, anymore. both those bad guys want to do us harm and do not have our best interests at heart.
its time for a revolution. seriously, its over due.
and if those treasonous corps and govs get punished by mobs, I don't think I'll lose any sleep over that ;)
--
"It is now safe to switch off your computer."
We should all store massive amounts of files that have nothing but random data in them.
Give them names like NuclearCode.doc, fill some of the empty space on our hard drives with them.
Attach them to every single Email and text we send.
The NSA computers would screech to a halt wading through all the noise,
- I live the greatest adventure anyone could possibly desire. - Tosk the Hunted
There is not, and never has been, any such thing as "privacy" on the Internet.
This has been a public service announcement.
All the world's an analog stage, and digital circuits play only bit parts.
Although intriguing and saddening that they've unlocked the iPhone 6 (but not 6s?).
What's more intriguing is that, why are Android phones so easy to break?!
... I guess everyone is aware that Google is a corporate spying empire, and yet there are people here who still argue against Apple and advocate for Android spyware?
And why is it we never hear from Google/Microsoft wanting to protect its users against government surveillance, unlike Apple.
Would you advocate GMail/Hangouts over Signal/Telegram/WhatsApp ?
Okay, lousy spin on the name. Anyway, I guess the clowns at Cellebrite do this shit for the "challenge" of cracking a tight system. But they must be aware of the audience of their products: power elites and criminals. As an aside, you can quibble over which is which in that apparent dichotomy. So it seems to me that the clowns at Cellebrite are morally reprehensible, as they enable abuse of people and do so for Cellebrite's profit. This truly irks me. I am eternally pissed at government overreach, but Cellebrite has a special place in hell.
So they can hack FB messenger and what's app which both use the signal protocol but can they hack the signal messenger app?
Last time we were talking about this, the consensus was that, with all it's flaws, the new iPhones are getting security quite right and that the Secure Enclave architecture should be incredibly safe against exactly these attacks.
Dos anyone know what attack vector they have used here?
This technology is just a one-off request. There is no way it can get "out there".
Said the F.B.I.
If they can unlock the 6 and 6S, it's only a matter of time before they can unlock the 7. Apple's approach to security didn't change much between those two, and the fact that they have some workaround behind the 10-try lockout (or even the ability to delid the chip and read its internal state), means that they have some approach, possibly hardware based in part, that will either work on the 7, or will work on the 7 with a little bit more effort. If instead this is something related to software, Apple could fix it- but only if they figure out what approach is being used.