Reply to topic  [ 3 posts ] 
'GrayKey' iPhone Unlocking Box Used by Law Enforcement Shown 
Author Message
What's a life?
User avatar

Joined: Thu Apr 23, 2009 6:27 pm
Posts: 12251
Reply with quote
Quote:
Last week, news of a previously-unknown iPhone unlocking device called GrayKey surfaced, and today, MalwareBytes shared photos and additional information about the product, which is designed for law enforcement officials.

Created by a company named Grayshift, GrayKey is a small, portable gray box equipped with dual Lightning cables.

https://www.macrumors.com/2018/03/15/gr ... cking-box/

_________________
All the best,
Paul
brataccas wrote:
your posts are just combo chains of funny win

I’m on Twitter, tweeting away... My Photos Random Avatar Explanation


Fri Mar 16, 2018 9:57 am
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
Hardly a surprise, there have been similar devices in the past for ripping data from connected phones.

What is surprising is that the phone still allows the software to be installed. That would indicate that either the phone isn't checking for a valid Apple signing key or that Grayshift have "stolen*" Apple's signing key.

* given that the private key is always a closely guarded secret, Apple wouldn't give it out, so the only way to get hold of it would be to steal it or they have found some way to crack such keys, which would also be disastrous for the whole IT industry - it is built on the reputation of such keys, without it, the whole industry would be set back a couple of decades, in terms of software distribution and connecting to the Internet - it certainly wouldn't be secure to connect a computer or smartphone to the Internet, if the keys are broken; it would be the equivalent of parking your car in the middle of the street, leaving the doors open, the keys in the ignition and the motor running...

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Fri Mar 16, 2018 10:52 am
Profile ICQ
What's a life?
User avatar

Joined: Thu Apr 23, 2009 6:27 pm
Posts: 12251
Reply with quote
big_D wrote:
Hardly a surprise, there have been similar devices in the past for ripping data from connected phones.

What is surprising is that the phone still allows the software to be installed. That would indicate that either the phone isn't checking for a valid Apple signing key or that Grayshift have "stolen*" Apple's signing key.


That was the eyebrow raiser here too. I would have expected the phone not to respond to software install attempts. The article does say that it could be using some kind of jailbreaking - maybe it can force that somehow.

From the article:
Quote:
How the GrayKey works is not known, but it's believed to be using some sort of jailbreaking process that could damage iPhones in some way.


I expect that Apple will either have one, or be trying to acquire one.

_________________
All the best,
Paul
brataccas wrote:
your posts are just combo chains of funny win

I’m on Twitter, tweeting away... My Photos Random Avatar Explanation


Fri Mar 16, 2018 11:30 am
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 3 posts ] 

Who is online

Users browsing this forum: No registered users and 37 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.