Lost iPhone? - Lost passwords!

[UPDATE] SIM-PIN can be also extracted! Visit: http://www.youtube.com/watch?v=hpFdfv...
[UPDATE] iOS firmware versions up to iOS 6.0.1 are also affected. See FAQ with further information about the topic: http://sit4.me/ios-keychain-faq

The paper highlights risks that accompany losing a locked iOS device regarding confidentiality of passwords stored in the keychain. It presents results of handson tests that show the possibility for attackers to reveal some of the keychain entries. For the described approach, the knowledge of the user's secret passcode is not needed, as the protection provided by the passcode is bypassed.
http://www.sit.fraunhofer.de/en/forsc...

• Category

  Science & Technology

[fenrriho]

...so many limitations on the iphone, even security is limited...

[kopial]

That's what hackers do, break them. That's what street racers do, break them. That's what taxpayers do, fool them. That's what Steve Jobs do, rip them. Its these researcher-hackers who protect us by sending a clear message to corporations about their system weakness, then only u get a new firmware upgrade. Real hackers won't upload such video, its too valuable!

[Monde Tuba]

cryptography is evolving to randomization to include time & location parameters via GPS; that adding the latter to the crypto-algorithm provides a degree of accountability within 3 meters of access time just in case the authorities should "need to know" your whereabouts.

[Viet, Hoang Van]

ok

[osnapitznot ari]

how do i get access to the filesystem?

[Freddie Rice]

not necesarily setup his own password, but install a second certificate with a different password.

[Freddie Rice]

Actually you can re-jailbreak. Restore the patched files and then reboot. Then jailbreak again.

[Freddie Rice]

No, they did not release any of the scripts used in the video. They only explained a basic security flaw in the system. The data in keychain-2.db is in sqlite3 format, well known by any database programmer. This security firm just wants apple to add the slightest bit of encryption to the account names when the device is unlocked.

[Alessandro Pagliuca]

How to do a ssh tunnel?!?!?!?!?!?!?