Slashdot Mirror
Cellebrite Can Now Unlock Apple iPhone 6, 6 Plus (cyberscoop.com)
Patrick O'Neill writes: A year after the battle between the FBI and Apple over unlocking an iPhone 5c used by a shooter in the San Bernardino terrorist attack, smartphone cracking company Cellebrite announced it can now unlock the iPhone 6 and 6 Plus for customers at rates ranging from $1,500 to $250,000. The company's newest products also extract and analyze data from a wide range of popular apps including all of the most popular secure messengers around. From the Cyberscoop report: "Cellebrite's ability to break into the iPhone 6 and 6 Plus comes in their latest line of product releases. The newest Cellebrite product, UFED 6.0, boasts dozens of new and improved features including the ability to extract data from 51 Samsung Android devices including the Galaxy S7 and Galaxy S7 Edge, the latest flagship models for Android's most popular brand, as well as the new high-end Google Pixel Android devices."
Why? Apple will do more to secure iOS.
If they want my password that bad, I just may give it to them for $250,000.
I'm keeping my Windows Phone.
Security through obscurity FTW !
Quite a range. I dearly hope the lower end of the range is for some Shleprock who forgot his passcode and the 250K fee is for any customer with the last name Government.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
Did anyone else misread this as, "cellulite"?
I thought for moment going into the summary that it was going to contrast difficulty from the San Bernadino shooters phones with some fundamental flaw allowing someone with bit of extra weight to put the phone up against some bit of anatomy to unlock it...
absurd as this sounds, a friend apparently worked at a dotcom whose fingerprint scanners were so awful that one day he let himself into the office with the end of his convenience store hotdog. His hands were full with the dog and the 64 oz Mountain Dew...
Do not look into laser with remaining eye.
No.
Modern app appers use Appdows 10, NOT LUDDITE Windows Phone!
Apps!
with Kool and the Gang
I assume (possibly incorrectly) they broke the boot loader then bruteforce the pin - if this is correct an adequate defence would be to set a long alphanumeric password rather than the default numeric 6 digit.
Can anyone confirm this is the technique they they are using?
I'll keep my secrets in my head and stick to a $50 dumbphone with nothing in it and not even turned on for more than 1 hour a day. Seriously you people so attached to your goddamned smartphones are pathetic and I pity you.
DEPORT them BAD DUUDZ!
Cellbrite is the next best thing to having someone like geohotz on the payroll. The forensics guys at my work swear by it as their go to tool for doing forensics collections of mobile devices.
Help me understand the legal standing of Cellbrite.
If I buy an iPhone 6 and circumvent the built-in encryption, am I not in violation of the DCMA? Yet when Cellbrite does it, and sells that service as a product it's not a DMCA violation but instead a legal offering to law enforcement (or anyone willing to pay the crazy fee)?
Am I missing something here?
n/t
You have to trick your target into carrying around a miniature surveillance system. Which is to say, the only winning move is to not play the game. I'm not a Luddite, I just understand the danger of such devices.
1) Pay $250K for the yearly subscription.
2) Advertise phone unlocking nationwide for $500.
3) Get 600 people to pay to unlock a phone (individuals, police agencies, private detectives, etc etc etc)
4) $50K profit! Woo hoo!
Get 1200 people to pay and make $100K profit. And so on...
All I need is $250K to get started...and another $100K for advertising.
Just cruising through this digital world at 33 1/3 rpm...
I mis-read that as "Cellulite" can be used to unlock the iPhone and got really confused....
So rise up, all ye lost ones, as one, we'll claw the clouds.
iPhone 7 FTW
"Ask your doctor if Cellebrite is right for you."
I remember talking to a guy who said don't listen to companies that tell you their security is foolproof. Because the only fools are those saying that and the ones who believe them. If you want the data you'll find a way in to get it. Call it a back door, a pre configured security access agreement or whatever.
Stop removing basic functionality from your products and get to work in making them secure from overreaching governments, ya faggot.
Sounds like the shareholders of Cellebrite need to be strung up by their necks until dead for allowing the government to spy upon us.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
Does that mean they found a way around the secure enclave?
Has there been any actual peer-reviewed evidence that Cellebrite's attacks are legit? The FBI claiming "we did it!" is dubious at best. I remain skeptical that if there is a exploitable vulnerability, that only this one company that just so happens to sell exploits is the only outfit to have discovered it.
Best news today!
Send Timmy Cook to prison for obstruction of justice!
Burn Timmy Burn!
People who ask for this are above the law, either cops who don't care if what they do is illegal, or criminals who don't care.
Alright, lets say I'm likely to use the license >1, but 200 times... what's the point at which it begins to pay dividends to own the subscription?
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
OK, I'll add it to the list:
1. So-called judges.
2. The press.
3. Cellebrite.
Only crack the nuts that crack. You don't put the ones that don't crack in the sack.
Now I'm imagining someone paying Cellbrite $1500 to unlock my smartphone, and once it's unlocked, all they find is hundreds of photos of my food. I suppose I'd want a steganographic watermarking app that encodes a randomly generated serial number in each image.
Lets add car manufacturers to the list for letting government employees drive around harassing us, weapons manufacturers that sell to the government, clothing and office equipment suppliers that sell to the government, food and utility companies that sell to the government...
Rather than blaming a couple of dozen shareholders, perhaps you should look a little harder at the hundreds of millions of voters who continue to vote for candidates who allow the government to spy on 'us'.
people need to defend themselves.
there are hostiles out there that want to do us harm, either now or perhaps, later.
these hostiles are GOVERNMENTS and CORPORATIONS.
no one speaks for us, the individual, anymore. both those bad guys want to do us harm and do not have our best interests at heart.
its time for a revolution. seriously, its over due.
and if those treasonous corps and govs get punished by mobs, I don't think I'll lose any sleep over that ;)
--
"It is now safe to switch off your computer."
We should all store massive amounts of files that have nothing but random data in them.
Give them names like NuclearCode.doc, fill some of the empty space on our hard drives with them.
Attach them to every single Email and text we send.
The NSA computers would screech to a halt wading through all the noise,
- I live the greatest adventure anyone could possibly desire. - Tosk the Hunted
There is not, and never has been, any such thing as "privacy" on the Internet.
This has been a public service announcement.
All the world's an analog stage, and digital circuits play only bit parts.
Although intriguing and saddening that they've unlocked the iPhone 6 (but not 6s?).
What's more intriguing is that, why are Android phones so easy to break?!
... I guess everyone is aware that Google is a corporate spying empire, and yet there are people here who still argue against Apple and advocate for Android spyware?
And why is it we never hear from Google/Microsoft wanting to protect its users against government surveillance, unlike Apple.
Would you advocate GMail/Hangouts over Signal/Telegram/WhatsApp ?
Okay, lousy spin on the name. Anyway, I guess the clowns at Cellebrite do this shit for the "challenge" of cracking a tight system. But they must be aware of the audience of their products: power elites and criminals. As an aside, you can quibble over which is which in that apparent dichotomy. So it seems to me that the clowns at Cellebrite are morally reprehensible, as they enable abuse of people and do so for Cellebrite's profit. This truly irks me. I am eternally pissed at government overreach, but Cellebrite has a special place in hell.
So they can hack FB messenger and what's app which both use the signal protocol but can they hack the signal messenger app?
Last time we were talking about this, the consensus was that, with all it's flaws, the new iPhones are getting security quite right and that the Secure Enclave architecture should be incredibly safe against exactly these attacks.
Dos anyone know what attack vector they have used here?
This technology is just a one-off request. There is no way it can get "out there".
Said the F.B.I.