Slashdot Mirror
Israel-Based Vendor Cellebrite Can Unlock Every iPhone, including the Current-Gen iPhone X, That's On the Market: Forbes (forbes.com)
Cellebrite, an Israel-based company, knows of ways to unlock every iPhone that's on the market, right up to the iPhone X, Forbes reported on Monday, citing sources. From the report: Cellebrite, a Petah Tikva, Israel-based vendor that's become the U.S. government's company of choice when it comes to unlocking mobile devices, is this month telling customers its engineers currently have the ability to get around the security of devices running iOS 11 . That includes the iPhone X, a model that Forbes has learned was successfully raided for data by the Department for Homeland Security back in November 2017, most likely with Cellebrite technology.
The Israeli firm, a subsidiary of Japan's Sun Corporation, hasn't made any major public announcement about its new iOS capabilities. But Forbes was told by sources (who asked to remain anonymous as they weren't authorized to talk on the matter) that in the last few months the company has developed undisclosed techniques to get into iOS 11 and is advertising them to law enforcement and private forensics folk across the globe. Indeed, the company's literature for its Advanced Unlocking and Extraction Services offering now notes the company can break the security of "Apple iOS devices and operating systems, including iPhone, iPad, iPad mini, iPad Pro and iPod touch, running iOS 5 to iOS 11." Separately, a source in the police forensics community told Forbes he'd been told by Cellebrite it could unlock the iPhone 8. He believed the same was most probably true for the iPhone X, as security across both of Apple's newest devices worked in much the same way.
The Israeli firm, a subsidiary of Japan's Sun Corporation, hasn't made any major public announcement about its new iOS capabilities. But Forbes was told by sources (who asked to remain anonymous as they weren't authorized to talk on the matter) that in the last few months the company has developed undisclosed techniques to get into iOS 11 and is advertising them to law enforcement and private forensics folk across the globe. Indeed, the company's literature for its Advanced Unlocking and Extraction Services offering now notes the company can break the security of "Apple iOS devices and operating systems, including iPhone, iPad, iPad mini, iPad Pro and iPod touch, running iOS 5 to iOS 11." Separately, a source in the police forensics community told Forbes he'd been told by Cellebrite it could unlock the iPhone 8. He believed the same was most probably true for the iPhone X, as security across both of Apple's newest devices worked in much the same way.
Our government works so hard to bypass security protocols for consumer technology. OK, so perhaps I'm naive. But a government what works for it's citizens should not be so focused on breaking into our computers without due process. (thank you Patriot Act).
At least there are plenty of us who are working on unbreakable hardware primitives in silicon that will keep these bastards at bay. It's about as nontrivial as it gets and we and many other have been at it for several years. The endpoint is pretty clear though. We will prevail.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
"We have such data to show you."
Care killed the cat, but satisfaction brought it back.
No source checking and very little editing of their crowd-sourced articles. I have not seen this claim reported by any legitimate sources.
12:50 - press return.
You can buy stolen iPhone phones dirt cheap (often for on a few dollars on older models), the all important stolen logic boards are damn near free. It's basically only worth stripping it down and selling the parts individually. But, If it was as simple as a 10 minute software upgrade, you could make Coke dealer money in no time selling unlocked iPhones as long as you were the only one doing it. Of course carrier lockouts are another matter but bypassing an iCloud lock would be extremely profitable.
>. I'd like to think that if the intelligence agencies devoted their time and effort to helping companies identify security weaknesses and shore them up, we wouldn't be seeing massive data breaches every few months.
That sounds nice, but it really wouldn't matter. Note "the intelligence agencies" can't hack iPhones, it's a private company that can. The people a the intelligence agencies really aren't that smart. It's nothing AT ALL like the movies. It's people who got a certificate in cyber security but couldn't get a job in the private sector, which pays better (but expects you to know wtf you're doing). You think Google wastes a lot of time talking about PC bullshit? You should see government! Government doesn't hire the best people. They hire the "disadvantaged" people.
Many, many private companies are in the business of "helping companies identify security weaknesses and shore them up". Heck you can get services from companies like Alert Logic for tens of dollars per month; does your company have static analysis and daily scans?
Find it weird that we have seemingly outsourced civil rights and due process to a private company? And more weird that, as a profit-oriented organization, there is some actual protection there?
Since when did our governments decide their populations were "risk factors" and citizens desire for privacy were "non-actionable concerns"?
Yeah, I know the story. Just commenting on what a crappy place we are in.
Shame on you; that was low-hanging fruit.
Don't confuse the Jewish people with the corrupt government and intelligence apparatus of Israel. There is a reason Netanyahu has been referred for criminal prosecution.
You are welcome on my lawn.
Cos tells Marty, "We can change the world!"
Kaspersky suggested that NSA may have, at one time, used code which was also used by authors of Stuxnet. We also know they purchased much of the code they used. That's quite far from "the authors of Sticker were NSA employees". There is no evidence that the developers were NSA employees. Indeed the fact that similar code is also found in incidents for which NSA has no motive strongly suggests that NSA is but one of the clients/friends of the authors.
> how can you claim that you could even begin to know how competently they operate?
I know them, I work with them. I'm not tremendously impressed by them. Federal hiring regulations and processes, and salaries explain *why* this is so. The *director* of the NSA makes $180K. That's only slightly higher than the *average* private-sector exploit specialist. That's the director of the agency. My boss makes more than that, and he can barely use exploitdb.
The snopes article saying that the plane being brought down for the PURPOSE of one person taking over a patent it false, not the patent and idea itself, which Nicknameunavailable is talking about.
Also, Snopes isn't exactly a...trusted....source site. Let alone one I would trust when it comes to thoughts / ideas that span beyond the 'box' of thinking.
Pro tip: If you ever cite politifact, snopes, correct the record, or related sites it means you are wrong.
Why would you pretend like you don't know what he's talking about?
Completely different sort of LEO and it's no like there aren't a bunch of town cops who have set up little fiefdoms with a few of the other local power players. Maybe not your friend but there is zero chance that your understanding is actually this bad.
You got this part right:
> the budget for a datacenter with bazillaflops of GPUs, a petabyte of database dumps
> Typical blackhats have to work with their own deficiencies or form teams. They don't have a ton of say about the kinds of skills that they acquire for their teams. They don't have a lot of ability to do QA on each other's work
Red Dawn was a movie. When Albert Gonzalez (one of the Shadow Crew members) was arrested, the FBI seized $1.6 million in cash he had laying around at that particular house at the moment. You think Shadow Crew couldn't manage to use Git? To contract people with whatever skill they want?
Hamza Bendelladj used SpyEye (a trojan horse) to steal $400 million. That'll hire an expert dev with any skill you need, thousands of times over.
All those Nigerian Prince emails and all that - those aren't done a million times a day because nobody is making any money from them. One organization running email scams may employ a hundred people. "Telling anyone their shit's not up to snuff might mean they walk off and take as many assets as they can and leadership of the group can change in a weekend"? Not any more than at any other business.
This is an industry, not a movie.
Telling them how the backdoor works.
Yes, Apple has a backdoor. They all do.
This is modded Flamebate?
Wow, Mossad has backdoors in Slashdot as well.
Good to know.
Definitely.
I laughed pretty hard when I saw the 'debunk' link pointing to snopes. I even clicked it to see what they had to say. Unfortunately, he linked to an article that had nothing to even do with what you mentioned. But then again, that's how snopes operates -- They take something then 'debunk' something completely unrelated to the original intent and call the entire thing 'false' because they sprinkled a very small part of the original intent in to the fake intent.
Millions of people fall for this. Wish I could get away with banging porn stars, doing drugs and making tons of money by lying like they do!
Then Mossad should be backdoored by everyone.