iOS 11 patches an exploit that could be used to crack an iPhone 7 or iPhone 7 Plus passcode using a $500 hardware hacking solution, Apple confirmed to TechCrunch this afternoon.
The exploit, demonstrated by YouTube user EverythingApplePro yesterday, was never really of any concern to iPhone users because of the extreme parameters required to make it work in a timely manner, according to TechCrunch. It uses a $500 piece of hardware, requires physical access to an iPhone 7 or 7 Plus, realistically only works with a 4 digit passcode, and slows down drastically more than 10 minutes after an iPhone's passcode was last changed.
The "box" shown off in the video is similar to tools used by law enforcement officials, and while passcode-guessing hardware like this does not normally work at this speed because iOS devices lock you out after several failed passcode entry attempts, there is a bug in iOS 10 that makes it possible to guess a passcode over and over for a short period directly after the passcode has been changed. TechCrunch explains:
According to Apple, the behavior that allows the box to work has been patched as of iOS 11 beta 4.
The exploit, demonstrated by YouTube user EverythingApplePro yesterday, was never really of any concern to iPhone users because of the extreme parameters required to make it work in a timely manner, according to TechCrunch. It uses a $500 piece of hardware, requires physical access to an iPhone 7 or 7 Plus, realistically only works with a 4 digit passcode, and slows down drastically more than 10 minutes after an iPhone's passcode was last changed.
The "box" shown off in the video is similar to tools used by law enforcement officials, and while passcode-guessing hardware like this does not normally work at this speed because iOS devices lock you out after several failed passcode entry attempts, there is a bug in iOS 10 that makes it possible to guess a passcode over and over for a short period directly after the passcode has been changed. TechCrunch explains:
On iOS 10, there is a "bug" for lack of a better term, that allows repeated, rapid guesses of the passcode if you've changed it within the last minute or so. This allows the box to work within that period. Once another threshold is crossed -- say 10 minutes after a passcode is changed -- you no longer have the freedom to guess rapidly.Without the rapid guessing enabled by the iOS 10 bug, it takes much, much longer for a solution like box to get into an iPhone because it's slowed down by Apple's passcode timeout. A six digit passcode (now the default on iOS devices) that had not been changed recently would take approximately 9.5 years to crack, for example.
According to Apple, the behavior that allows the box to work has been patched as of iOS 11 beta 4.
31 comments
Apple today announced a voluntary recall of three-prong AC wall plug adapters designed for use primarily in Hong Kong, Singapore, and the United Kingdom.
Apple states that, in very rare...
A number of iPhone and iPad users this morning are taking to Twitter and Reddit to report an issue with the App Store that prevents them from downloading or updating apps.
The problem starts...
The next couple of years will see the rollout of 5G cellular phone networks from companies like Verizon, AT&T, Sprint, and T-Mobile, and it sounds like 5G smartphone plans might not be priced in...
Apple continues to dominate when it comes to customer support, according to Laptop Mag's annual tech support showdown, which is designed to help customers determine which companies are offering...
On April 24, 2015, the original Apple Watch launched in nine countries around the world. Four years later and we are now on the fourth iteration of the wearable device, the Apple Watch Series 4. Over...
Earlier this month, Bloomberg shared details on the thousands of employees that Amazon employs around the world to listen to voice recordings captured in the homes of Amazon Echo owners when the...
Tomorrow marks a month since Apple announced its Apple News+ subscription service, which means if you signed up on March 25 following the event, you're going to start getting charged $9.99...
A class action lawsuit originally filed against Apple in 2013 over broken iPhone 4, iPhone 4s, and later iPhone 5 power buttons is finally set to proceed to jury trial in San Diego state court...
