'GrayKey' iPhone Unlocking Box Seeing Wide Adoption Among Law Enforcement

GrayShift's recently publicized "GrayKey" box designed to crack locked iPhones is seeing wide adoption among police forces and federal agencies across the United States according to a recent investigation by Motherboard.

Motherboard found that regional police forces like the Maryland State Police, the Indiana State Police, and the Miami-Dade County Police have purchased or are soon purchasing GrayKey technology, while other forces like the Indianapolis Metropolitan Police Department have looked into boxes and received quotes from GrayShift.

graykey1


The Secret Service is also planning to purchase "at least half a dozen" GrayKey boxes for unlocking iPhones, while the State Department has already bought them and the Drug Enforcement Administration has expressed interest.

Current FBI Director Christopher Wray said in January at the International Conference on Cyber Security that law enforcement officials are facing a "Going Dark" challenge where an "enormous" number of cases rely on an electronic device. "We're increasingly unable to access that evidence, despite lawful authority to do so," said Wray.

Motherboard's investigation into GrayShift, the GrayKey iPhone unlocking boxes, and other smartphone unlocking methods suggest that is not the case. The FBI uses the going dark debate to advocate for easier access to electronic devices through backdoors, but the seemingly readily available tools like GrayKey undermine these arguments.

"It demonstrates that even state and local police do have access to this data in many situations," Matthew Green, an assistant professor and cryptographer at the Johns Hopkins Information Security Institute, told Motherboard in a Twitter message. "This seems to contradict what the FBI is saying about their inability to access these phones."

"The availability and affordability of these tools undercuts law enforcement's continual assertions that they need smartphone vendors to be forced to build 'exceptional access' capabilities into their devices," Riana Pfefferkorn, cryptography fellow at the Stanford Center for Internet and Society, told Motherboard in a Twitter message.

In recent months, law enforcement officials have been quietly revisiting proposals that would require tech companies to build backdoor access into smartphones and other electronics, something Apple vehemently fought against back in 2016 following the San Bernardino shooting where the FBI attempted to order the company to provide it with a tool to crack the iPhone 5c involved in the case.

As has been previously reported, the GrayKey mentioned by Motherboard is a small, portable gray box that's equipped with dual Lightning cables. An iPhone can be plugged into one of the cables to install proprietary software that's able to guess the passcode for an iPhone in either a few hours or a few days, depending on the strength of the passcode.

Once the GrayKey software has unlocked an iPhone, it can be plugged back into the GrayKey box to download all of the data on the iPhone. GrayKey can crack the latest iPhones running modern versions of iOS, including iOS 11, providing law enforcement officials with easy access to locked iPhones for criminal investigations.

Grayshift charges $15,000 for a GrayKey box that requires internet connectivity, is geofenced to a specific location, and allows for 300 unlocks, or $30,000 for a box that requires no connection, can be used anywhere, and can unlock an unlimited number of devices.

As Motherboard points out, the technology used in the GrayKey boxes may eventually be outdated through updates to the iOS operating system, leading to periods where some versions of iOS may be difficult to access. Because of the ongoing cat and mouse game of Apple patching a vulnerability as third-party iPhone cracking services look for new methods to get into iPhones, the argument for backdoors into smartphones is likely to surface time and time again.

Motherboard's full report on the iPhone unlocking tools available to law enforcement officials can be viewed over on the website.

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Top Rated Comments

JimmyHook Avatar
39 months ago
Waste of taxpayer money. It’ll be worthless in a few weeks. Also, everyone should enable wiping the phone after 10 failed attempts, also use a complex passcode
Score: 37 Votes (Like | Disagree)
Mefisto Avatar
39 months ago

Also, everyone should enable wiping the phone after 10 failed attempts, also use a complex passcode
It's my understanding that the device gets around this safety measure. Don't ask me how, though, I understand very little of what it actually does apart from "unlocks iPhones and stuff".
Score: 21 Votes (Like | Disagree)
fenderbass146 Avatar
39 months ago
Simply not true. Since 2008 we've been selling law enforcement tools to unlock iPhones. We've even met with Apple's iOS security team and shown them these tools at work. They've done nothing to block them (directly) in updates. Sure, there are small modifications we have to make with new iOS updates, but the core tech is still the same as it has always been.

And setting to wipe after 10 attempts doesn't matter. It's not brute forcing in a way that will trigger that function.
Any proof of this? And who is "we"?
Score: 21 Votes (Like | Disagree)
MagnusVonMagnum Avatar
39 months ago
Why would anyone who is not a wanted criminal and has no plans to commit a crime in the near future care about this?
Why would you care if someone watched you take a shower or use the bathroom if you have nothing to hide?

1> Some people value privacy (unlike many of the younger generation that don't seem to know WTF privacy is, even).

2> Corrupt governments manufacture crimes (Is the US there yet? I dunno, but if I lived in somewhere like Russia I'd want as secure a phone as I could possibly get. I know I don't trust parts of the government as far as I can spit).

3> People commit crimes every day without even knowing it. I read once the average person commits like two felonies a month and has NO IDEA they are doing it. This is because there are so SO many laws on the books, both federal and state, some dating back to the 18th Century and while politicians are always in a hurry to make loads of new laws, they almost NEVER repeal older laws. Given the FACT that "ignorance of the law" is NEVER an excuse, would you REALLY want to bet your last dollar you've never committed a crime and that your phone could NEVER be used against you because you simply didn't INTEND to commit one? We're living in a country where marijuana is legal in several states now for recreational use, but illegal on a federal level. You're FRACKED even if you have a prescription and use it and the federal government decides to go after you since it's illegal on the federal level and considered to have NO MEDICINAL VALUE due to MORONS classifying it that way (see that Traveling Gnome guy running the justice department to see WTF you're really dealing with in this corrupt country).

People have gone to PRISON for having physical relations with their girlfriend in back-arsewards states like Georgia due to PURITAN type laws on the books for over a hundred years where things like oral are (or at least were) 100% ILLEGAL UNDER ALL CIRCUMSTANCES (married even) in that joke of a state and guess what convicted the guy? His PHONE!!! He had a video of it on it. Not fair? Too farking bad!!! What you THINK is "just" or "fair" or "right" doesn't mean SQUAT in a court of law! PERIOD! Ignorance of the law means NOTHING. You will go to prison and be branded for the rest of your life and not even understand WHY in some of these "hick" states!!! Do you really want to take the chance you may have broken a law and just hand yourself over on an unrelated charge/search because you went on vacation in a backwards state where something is illegal that you filmed with your wife??? It may sound crazy, but it's happened.

Do you think you have the right to backup your own software? The DMCA has never been tested fully in court on "fair use" arguments. The problem is that while you're supposed to have fair use, you're not allowed by bypass protection for ANY REASON including backups! Would/could that stand up in courts? Neither side really wants to fully test it since both sides stand to lose a LOT. But this is the kind of GARBAGE you have to deal with when MORON politicians pass laws they don't even FRACKING READ first!!!! (let alone understand)

Ultimately, privacy means NOTHING if we're OK with letting everyone skirt our privacy rights. The government doesn't need to know how much I drink an when I drink it if I'm not driving. They don't need to store my blood pressure 24/7 (to use it against me with insurance or some crap at some point). They don't need my fingerprints if I haven't broken the law. They'd LOVE to have everyone's! It would solve more crimes! It would also put you at almost every location you've EVER gone. Someone murders someone 2 years later and your fingerprint is against some wall you were leaning against when the room was laid out differently. People have been put to death with LESS evidence in the past. DNA is starting to reveal how fracked up some of these past convictions are. COINCIDENCE (also known as being in the wrong place at the wrong time) kills people every single day. Am I being completely paranoid? Maybe, but I'd rather be paranoid and not wind up on trial for something I didn't do or didn't know I was doing than "don't worry" and find myself staring at Big Bubba in my cell looking at me like I'm a piece of pie. The government convicts people for LYING yet that's all the government does to us every single day. It's not a crime for the government to lie to its own citizens, but it's a crime for us to lie to the government. Go figure. These are not people to put your "trust" in (just like the police that regularly shoot people they're supposed to be protecting because all too many are trigger happy cowards that shoot at the first "noise" they hear (like that woman that knocked on a police car window that she called to talk to them and the passenger cop shot her when he heard the knocking sound!!!) and ask questions while they're rigging the site to cover their butts).

Yes, you can TRUST law enforcement. They NEVER lie, never falsify reports, never plant evidence and never shoot anyone that didn't have it coming! Right. Why would anyone not want these guys going through their phones? They wouldn't plant evidence to win a case! They wouldn't LIE about it! They wouldn't shoot you if you're not a criminal! They'd never convict you and block evidence showing your innocence because prosecutors don't care if they win or lose, only if they get true justice!!! It doesn't hurt their careers to lose, after all! NOT!
Score: 18 Votes (Like | Disagree)
dmx Avatar
39 months ago
Apple should sue them for infringement if they don’t have MFi certification.
Score: 17 Votes (Like | Disagree)
RedKite Avatar
39 months ago
Surprised that Apple haven’t stepped up and announced a new security process doohickey that renders these boxes useless!
Score: 16 Votes (Like | Disagree)

Top Stories

siir apple event april 20

Siri Reveals Apple Event Planned for Tuesday, April 20

Tuesday April 13, 2021 12:04 am PDT by
Siri has apparently prematurely revealed that Apple plans to hold an event on Tuesday, April 20, where the company is expected to reveal brand new iPad Pro models and possibly its long-awaited AirTags trackers. Subscribe to the MacRumors YouTube channel for more videos. Upon being asked "When is the next Apple Event," Siri is currently responding with, "The special event is on Tuesday, April...
apple event spring loaded

Apple's 'Spring Loaded' Event Officially Announced for Tuesday, April 20

Tuesday April 13, 2021 9:04 am PDT by
Following an overnight leak by Siri, Apple today officially announced that it will be holding a special "Spring Loaded" event on Tuesday, April 20 at 10:00 a.m. Pacific Time at the Steve Jobs Theater on the Apple Park campus in Cupertino, California. As with all of Apple's 2020 events, the April 2021 event will be a digital-only gathering with no members of the media invited to attend in...
pixel watch prosser leak

Google Pixel Watch Allegedly Leaks with Circular Design, Rumored to Launch in October

Monday April 12, 2021 2:49 am PDT by
Renders of Google's first smartwatch, codenamed "Rohan," have been shared by Jon Prosser, showing that Google plans to adopt a circular design for its flagship wearable watch. Prosser shared the renders in an episode of his YouTube show "Front Page Tech," in which he claims they were made based on marketing material he had seen from a source within Google. The renders show that the Pixel...
Google maps feaure green

Google Maps App for iOS Finally Updated After Four Months

Monday April 12, 2021 10:03 am PDT by
Following the completed rollout of App Privacy labels for its App Store apps, Google today updated the Google Maps app for the first time in four months. Apple in December began requiring all new app submissions and app updates to include App Privacy labels, detailing the data that is collected by the app so consumers know what they're sharing. Google didn't begin implementing App Privacy ...
AppleTV and HomePod Feature

Bloomberg: Apple Working on New Apple TV With Integrated HomePod Speaker and FaceTime Camera

Monday April 12, 2021 3:32 am PDT by
Apple is working on a combined Apple TV with HomePod speaker that has a camera for video calls through a connected television set, according to Bloomberg's Mark Gurman. From the report: The company is working on a product that would combine an Apple TV set-top box with a HomePod speaker and include a camera for video conferencing through a connected TV and other smart-home functions,...
samsung experience 1

Samsung's 'iTest' Lets You Try a Galaxy Device on Your iPhone

Thursday April 8, 2021 12:42 pm PDT by
Samsung has launched "iTest," an interactive website experience that's designed to allow iPhone users to test out Android on a Galaxy device, or "sample the other side," as Samsung puts it. Subscribe to the MacRumors YouTube channel for more videos. The iTest website is being advertised in New Zealand, according to a MacRumors reader who came across the feature. Visiting the iTest website on...
epic iap feature 3

Tim Cook Says App Store Would Become a 'Flea Market' if Third-Party Payment Systems Were Allowed

Monday April 12, 2021 9:41 am PDT by
In a recent interview with the Toronto Star, Apple CEO Tim Cook spoke about a wide variety of topics, ranging from App Tracking Transparency to Apple's ongoing legal battle over App Store policies with Fortnite creator Epic Games. Notably, Cook said that Epic Games' desire for Apple to let developers offer their own payment systems in apps "would make the App Store a flea market":At the...
tim cook toronto star

Tim Cook Says Apple is 'Not Against Digital Advertising' Ahead of iOS 14.5 Launch With App Tracking Transparency

Monday April 12, 2021 8:00 am PDT by
Starting with iOS 14.5, iPadOS 14.5, and tvOS 14.5, Apple will be requiring apps to receive a user's permission to track their activity for targeted advertising purposes, as part of a privacy measure known as App Tracking Transparency. Ahead of App Tracking Transparency being enforced, Apple CEO Tim Cook has participated in a privacy-focused interview with the Toronto Star, telling the...
a13 bionic mockup

Apple Made Sudden Security Changes to its Chips in Fall 2020

Monday April 12, 2021 8:15 am PDT by
Apple made unusual mid-production hardware changes to the A12, A13, and S5 processors in its devices in the fall of 2020 to update the Secure Storage Component, according to Apple Support documents. According to an Apple Support page, spotted by Twitter user Andrew Pantyukhin, Apple changed the Secure Enclave in a number of products in the fall of 2020:Note: A12, A13, S4, and S5 products...
HomePod G4 Feature

Bloomberg: Future HomePod May Feature iPad Connected Via Robotic Arm to Track Users Around The Room During FaceTime Calls

Monday April 12, 2021 3:50 am PDT by
In a report outlining a possible Apple TV with a combined HomePod and camera, Bloomberg's Mark Gurman says that Apple is exploring a future high-end HomePod speaker that could include an iPad connected via a robotic arm that tracks and follows users around a room. From the report: The Cupertino, California-based technology giant, is also mulling the launch of a high-end speaker with a touch ...