News for hackers. Stuff that matters.
[deleted]
Re:A Message to Our Customers by tomaskafka on Wednesday February 17, 2016 @04:55AM (#11116685)
Nope. Once this option will be there, a single-button iPhone cracker box with lighting connector will be available on aliexpress in cca 3 weeks.
Re:A Message to Our Customers by tomp on Wednesday February 17, 2016 @04:21AM (#11116472)
It's reducing the complexity of decryption (from O(∞) to O(2^n)), so it's clearly a backdoor.
Re:A Message to Our Customers by rosser on Wednesday February 17, 2016 @04:21AM (#11116471)
So what would you call it, a back gate? It still loosens the extant security measures, facilitating compromise. That's pretty backdoor-y in my book.
Re:A Message to Our Customers by Trundle on Wednesday February 17, 2016 @04:22AM (#11116477)
I don't have an iPhone so correct me if I'm remembering correctly but aren't they by default protected by a 4 digit numeric pin? A 4 digit numeric pin that a brute force attack can be used on is effectively no security/a backdoor imo.
Re:A Message to Our Customers by RobJDavey on Wednesday February 17, 2016 @04:54AM (#11116677)
There are escalating time limits on incorrect PIN attempts, which is also enforced in hardware by the Secure Enclave in A7 chips and above. This would mean even breaking a 4-digit pin code without that delay being removed would take a long time. Additionally the device may be set to wipe after 10 incorrect attempts.

Attempts | Delay

1-4: none

5: 1 minute

6: 5 minutes

7-8: 15 minutes

9: 1 hour

Source: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Re:A Message to Our Customers by andreyvit on Wednesday February 17, 2016 @09:25AM (#11117997)
Secure Enclave is _not_ hardware; despite being isolated from the main OS and CPU, it is still software-based and accepts software updates signed by Apple.
Re:A Message to Our Customers by mynameisvlad on Wednesday February 17, 2016 @04:33AM (#11116543)
I believe the default on new installs is now 6, but options for a more complex PIN, either numeric or straight up alphanumeric, are available.
Re:A Message to Our Customers by zenbsd on Wednesday February 17, 2016 @07:16PM (#11122682)
I use an alphanumeric password on all my iOS devices