Re:A Message to Our Customers
by eru on Thursday February 18, 2016 @02:35AM
(#11124286)
You could bruteforce the passcode.
[ Parent
| on HN ]
Yes, if you could recover the SE key (or factory-burned SoC key for older phones), you could crack the passcode on your own cluster rather than being limited to what the phone hardware/software can do.
> for older phones
To my knowledge, all keys are still wrapped with the UID, and the UID is still a factory-burned SoC key (not accessible to any firmware). Possible to extract, but not easy to do at scale.