Slashdot Mirror
Cellebrite Can Now Unlock Apple iPhone 6, 6 Plus (cyberscoop.com)
Patrick O'Neill writes: A year after the battle between the FBI and Apple over unlocking an iPhone 5c used by a shooter in the San Bernardino terrorist attack, smartphone cracking company Cellebrite announced it can now unlock the iPhone 6 and 6 Plus for customers at rates ranging from $1,500 to $250,000. The company's newest products also extract and analyze data from a wide range of popular apps including all of the most popular secure messengers around. From the Cyberscoop report: "Cellebrite's ability to break into the iPhone 6 and 6 Plus comes in their latest line of product releases. The newest Cellebrite product, UFED 6.0, boasts dozens of new and improved features including the ability to extract data from 51 Samsung Android devices including the Galaxy S7 and Galaxy S7 Edge, the latest flagship models for Android's most popular brand, as well as the new high-end Google Pixel Android devices."
If they want my password that bad, I just may give it to them for $250,000.
Quite a range. I dearly hope the lower end of the range is for some Shleprock who forgot his passcode and the 250K fee is for any customer with the last name Government.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
with Kool and the Gang
How do you know Cellebrite isn't an Apple funded offshoot to funnel govt money in exchange for backdoors.
I believe it. Fingerprint scanning was once a really loosey goosey way of providing the illusion of security, but where easily fooled using some pretty low tech. Although a hotdog sure seems to be pretty low tech.. Even on a good day, finger print scanning is pretty bad, either giving you a really high false positive or really high reject rates, even today, when the horse power needed to sort though a pile of prospective fingerprints looking for a match is more readily available.
Think of it as a really bad padlock with one tumbler made of plastic... Easy to pick if you don't want anybody to know you broke in, or you can just yank it off with your bare hands if you don't care if they find out...
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Cellbrite is the next best thing to having someone like geohotz on the payroll. The forensics guys at my work swear by it as their go to tool for doing forensics collections of mobile devices.
Help me understand the legal standing of Cellbrite.
If I buy an iPhone 6 and circumvent the built-in encryption, am I not in violation of the DCMA? Yet when Cellbrite does it, and sells that service as a product it's not a DMCA violation but instead a legal offering to law enforcement (or anyone willing to pay the crazy fee)?
Am I missing something here?
n/t
Some of us have jobs.....Maybe we could switch to using walki talkies that would solve some of the problem but create a lot of new ones: extra device, everyone and their dog with a scanner can hear and limited range.
Minimum threshold fixed. Thanks!
Such a brave stance that--- Well, although many of us are indeed too dependent on our smartphones, they offer real utility beyond taking pictures of our food. I would be completely fucked without GPS + maps. Also I don't drive, so ride sharing apps are a life saver. The other things like twitter, reddit, music, banking etc are nice, compromise my security and I could live without them, but to just flat out say that people attached to, or I assume anyone who uses a smartphone is pathetic, well... fuck you?
640k ought to be enough for anyone.
I wonder if a dirty fingerprint scanner simply picked up residue from the previous time it was touched.
Do not look into laser with remaining eye.
1) Pay $250K for the yearly subscription.
2) Advertise phone unlocking nationwide for $500.
3) Get 600 people to pay to unlock a phone (individuals, police agencies, private detectives, etc etc etc)
4) $50K profit! Woo hoo!
Get 1200 people to pay and make $100K profit. And so on...
All I need is $250K to get started...and another $100K for advertising.
Just cruising through this digital world at 33 1/3 rpm...
As I understand it phone fingerprint scanners don't actually look at your fingerprint. Rather they measure the capacitance over a series of fluctuations in the field density to make the "fingerprint". Or something like that. I don't know how many unique bits you can get out of that, but the danger of someone managing a false positive is reduced by simply locking it out after three failed scans and making the user type in their password instead.
I read the internet for the articles.
I'll keep my secrets in my head and stick to a $50 dumbphone with nothing in it and not even turned on for more than 1 hour a day. Seriously you people so attached to your goddamned smartphones are pathetic and I pity you.
Grandpa Gribble? they let you out of the home again?
If you are that shit shakingly paranoid about security, why on earth are you even using a device whose main feature is to track you? Without that tracking, the cellular system doesn't function. And they even keep logs.
That one hour you have it turned on, your phone is alerting your presence to teh authorities, and they be a comin ta get ya!
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Such a brave stance that--- Well, although many of us are indeed too dependent on our smartphones, they offer real utility beyond taking pictures of our food.
There is nothing about the cellular system that is secure. So use what you use as long as you are comfortable with it. AC has some weird ideas that he is somehow immune to the tracking and other possibilities that are just inherent in the system. If LE is interested, any time his phone connects to a couple towers, he's nailed. I'm not inclined to do anything illegal, but if I was, none of it would be on my cell or computer. I use the hell out of my smartphone for trip mapping and location services. The occasional tethering, and most of that is data lookup. I have no plans to get rid of mine, no matter what some AC thinks.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Why did what he said make you so angry?
Why did what he said make you so angry?
Huh? I was in full tease mode. Kinda like when your crazy uncle Louie shows up at family gatherings and brags about not having an email address, and I tease him about all the women he must get by being such an independent stud. In this case, I just gave AC a little telling. Maybe he takes telling, maybe not. If I had to assign an emotion to it, it might be to feel badly because I ridiculed the guy who thinks that he is somehow more "secure" because of having a feature phone, or whatever it is he has. Then again, nahhh. Peace out, Bing.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
The retina lock on my lumia 950 is a very nice feature, of course the 4 digit pin kinda makes it redundant .. why ? you ask ! I understand that in the US you can be compelled to provide a fingerprint, but not a retina scan correct me if I am wrong. As far as being forced to open a retina scan, it's very easy to closed your eyes, screw up you face to stop it woring, believe me I have tested this extensively, and if you don't want windows hello to work, it is very easy to make it not open.
Sounds like the shareholders of Cellebrite need to be strung up by their necks until dead for allowing the government to spy upon us.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
Does that mean they found a way around the secure enclave?
I have wondered about different virtual machines on a phone. The retina lock might get one the VM for a workspace for personal stuff, while to access business data, it would require a fingerprint and PIN. Done right, there would be plausible deniability for this... and more importantly, it would separate business and personal stuff.
I remember doing that a few decades ago. I worked at ScumSoft, Inc. and since I was very sick the only way to open my office door was to use a photocopy of my face I did a week earlier.
#DeleteFacebook
People who ask for this are above the law, either cops who don't care if what they do is illegal, or criminals who don't care.
Alright, lets say I'm likely to use the license >1, but 200 times... what's the point at which it begins to pay dividends to own the subscription?
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
Whoa, slow down there George Jetson. I don't even have a cellphone.
I only communicate over ham radios using Morse Code to transmit ciphertext that can only be decoded with a one-time pad provided to me through a dead-drop.
Only crack the nuts that crack. You don't put the ones that don't crack in the sack.
OK, I'll add it to the list:
1. So-called judges.
2. The press.
3. Cellebrite.
Only crack the nuts that crack. You don't put the ones that don't crack in the sack.
Now I'm imagining someone paying Cellbrite $1500 to unlock my smartphone, and once it's unlocked, all they find is hundreds of photos of my food. I suppose I'd want a steganographic watermarking app that encodes a randomly generated serial number in each image.
Lets add car manufacturers to the list for letting government employees drive around harassing us, weapons manufacturers that sell to the government, clothing and office equipment suppliers that sell to the government, food and utility companies that sell to the government...
Rather than blaming a couple of dozen shareholders, perhaps you should look a little harder at the hundreds of millions of voters who continue to vote for candidates who allow the government to spy on 'us'.
it was just a matter of time. someone will...figure it out.
I'm surprised more criminals don't give their phones to someone else while they are breaking the law, to create an alibi. The cops will get the cell records and datarape the phone, generating evidence that can then be used in the criminal's own defence.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
people need to defend themselves.
there are hostiles out there that want to do us harm, either now or perhaps, later.
these hostiles are GOVERNMENTS and CORPORATIONS.
no one speaks for us, the individual, anymore. both those bad guys want to do us harm and do not have our best interests at heart.
its time for a revolution. seriously, its over due.
and if those treasonous corps and govs get punished by mobs, I don't think I'll lose any sleep over that ;)
--
"It is now safe to switch off your computer."
We should all store massive amounts of files that have nothing but random data in them.
Give them names like NuclearCode.doc, fill some of the empty space on our hard drives with them.
Attach them to every single Email and text we send.
The NSA computers would screech to a halt wading through all the noise,
- I live the greatest adventure anyone could possibly desire. - Tosk the Hunted
There is not, and never has been, any such thing as "privacy" on the Internet.
This has been a public service announcement.
All the world's an analog stage, and digital circuits play only bit parts.
Although intriguing and saddening that they've unlocked the iPhone 6 (but not 6s?).
What's more intriguing is that, why are Android phones so easy to break?!
... I guess everyone is aware that Google is a corporate spying empire, and yet there are people here who still argue against Apple and advocate for Android spyware?
And why is it we never hear from Google/Microsoft wanting to protect its users against government surveillance, unlike Apple.
Would you advocate GMail/Hangouts over Signal/Telegram/WhatsApp ?
How do you know Cellebrite isn't an Apple funded offshoot to funnel govt money in exchange for backdoors.
How do we know you're not Vladimir Putin, or worse yet, Steve Bannon?
Last time we were talking about this, the consensus was that, with all it's flaws, the new iPhones are getting security quite right and that the Secure Enclave architecture should be incredibly safe against exactly these attacks.
Dos anyone know what attack vector they have used here?
This technology is just a one-off request. There is no way it can get "out there".
Said the F.B.I.
If you trash it, that's destruction of evidence.
I'm surprised more criminals don't give their phones to someone else while they are breaking the law, to create an alibi. The cops will get the cell records and datarape the phone, generating evidence that can then be used in the criminal's own defence.
And here's one that always gets me into trouble on Slashdot. I am perfectly happy to have my gas purchases easily found. I even broadcast my position via APRS, which timestamps my location and broadcasts it to the world That's a s part of a hobby. I don't care about cell phone tracking, or video camera recording. While many here think that they need to be ghosts, I've figured that this stuff will stand a better chance of giving me a very good alibi if I need one. Some people who have been accused of crimes have already been exonerated. I've been trying to find the story of a New York man arrested for sexual assault, but his claim of leaving his work at the time proved he was indeed at work at the time. If I do, I will post it.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Dammit Wilco, get off Slashdot and get back to your janitor duties.
I see my shadow changing, stretching up and over me...
Alright... I'll just do a quick stop at Monolith Burger first. I heard they have Astro Chicken II: Revenge of the Landing Drone Ship.
#DeleteFacebook