Warning Issued For Apple's 1.4 Billion iPad And iPhone Users

[bill dennison]

https://www.forbes.com/sites/gordon...warning-ios-12-iphone-xs-max-xr/#5f2b6f583641

In its defence, Cellebrite says its tools require you to physically have possession of the iPhone or iPad you want to hack (it cannot be done remotely) and that it performs lengthy security checks to determine the entitlement of anyone who wants it to crack a device. That said, Forbes has previously reported that Cellebrite kit has sold on eBay for as little as $100, making it the dream for hackers and jealous spouses alike.

wonderful

 

[Nunz]

Physically have possession of the iPhone... for the average user this is about as threatening as the Spectre/meltdown Intel stuff

Kinda looking forward to getting an Android with my next phone though.

 

[logical]

Nothing is safe these days. I'm sure all that Apple touts about privacy is BS they probably sell off our data like hotcakes.

 

[Sasquach]

Nothing is safe these days. I'm sure all that Apple touts about privacy is BS they probably sell off our data like hotcakes.

Apple just likes to know who is on team fruit.
It just so happens that people don't tell apple that...so they find out themselves....

 

[bill dennison]

Physically have possession of the iPhone... for the average user this is about as threatening as the Spectre/meltdown Intel stuff

Kinda looking forward to getting an Android with my next phone though.

you never left your phone somewhere like a restaurant or somewhere ?

a 100 buck kit that anybody can buy to crack phones means I will never put any credit cards in the dumb thing


…….

(note: Cellebrite has previously said it can hack Android devices as well),

 

[Nunz]

Maybe I’m weird - I don’t have any banking or passwords for banking/card access saved on my phone.

 

[bill dennison]

Maybe I’m weird - I don’t have any banking or passwords for banking/card access saved on my phone.

no it scares the crap out of me also

with this more so

but they could get into things like m$ & uplay with my all my authenticators maybe

or buy AMC movie tickets and get in as AMC has my card but it is not in my phone


I do hope they lock this down or nuke this company

 

[Nunz]

The company makes stuff for government/police work. I’m just curious how/why it made it to the market.

 

[bill dennison]

The company makes stuff for government/police work. I’m just curious how/why it made it to the market.

ebay

 

[Elysian]

you never left your phone somewhere like a restaurant or somewhere ?

a 100 buck kit that anybody can buy to crack phones means I will never put any credit cards in the dumb thing


…….

Joke's on them, I have no money!

 

[aRandomRobot]

This looks like it’s kind of similar to what Greykey had except packaged up to be portable. The reason you’d want a portable version is that as far as I know you need the USB port open for the crack to work and since 11.4.1 the port is disabled automatically after an hour with no use or unlocks. That means if you arrest someone and want to access their phone you have to use the kit ASAP on site. It also makes the kit more usable for thieves though.

I’m still ok using Apple Pay though. My phone only has an encrypted alias of my card so even if it got hacked I’d only need to revoke the alias and not cancel my card and get a new one.

I think the primary market for thieves here is going to be wiping phones for resale and maybe stealing passwords/accounts. ATM skimmers are probably still more lucrative and easy to build/buy than these kits, at least for now.