USB Restricted Mode,Mike Horner Archives a new iOS feature that protects unauthorized access of the data on your iOS device, has a glaring omission that would make it quite easy for someone to beat in many scenarios.
The feature, introduced in iOS 11.4.1 and iOS 12 beta 2, is supposed to make the data on your iPhone safe even if someone can physically access it. One hour after the phone's last been unlocked, it enters USB Restricted Mode, which disables data access to its Lightning port.
However, security firm ElcomSoft has discovered a way to disable the timer, and it's ridiculously easy -- you just need to plug an accessory into the iPhone's Lightning port, and the timer is disabled.
SEE ALSO: The 2018 iPhones could come in gold, blue, red, and even orangeUSB Restricted Mode is designed to protect against devices such as GrayKey, a hardware device that enables an attacker to extract data from an iOS device they don't have legitimate access to. While it doesn't offer full protection from GrayKey, it significantly hampers any would-be attacker by limiting the time to perform an attack to one hour or less.
However, ElcomSoft says that merely plugging in nearly any device (not just ones that have previously been connected to that phone), such as Apple's Lightning to USB 3 Camera Adapter, will disable the timer. This would give an attacker enough time to bring the device to a lab and then work on it for as much time as they'd like.
This trick works in iOS 11.4.1 and iOS 12 beta 2, both of which have the USB Restricted Mode feature, ElcomSoft claims.
According to ElcomSoft, the problem likely lies in Apple's Lightning communication protocol -- in other words, the way the iPhone "talks" to devices that are plugged into it. When you connect the iPhone to a computer, the two devices exchange cryptographic keys and establish trust. Many Lightning accessories, however, don't have the capability to do that, so the iPhone just trusts them by default.
If this is indeed a bug and not intended behavior, it might be hard for Apple to fix it. According to ElcomSoft, a fix could render numerous Lightning accessories useless -- though it might be possible to make sure the iOS device only communicates with devices that were previously plugged into it.
We've contacted Apple for comment and will update this post when we hear from them.
Topics Apple Cybersecurity iPhone
How your uncle's conspiracy theories trigger your brain's anxiety areasRedditors planning to hide hundreds of 3D7 pro tips to help you learn how to cook in 2017Taylor Swift gave one of her oldest fans the best Christmas surprise ever'Absolver' shakes up everything you know about fighting games5 times India topped the world in 2016Airbnb CEO teases updates for 2017 on TwitterJ.K. Rowling tweeted this heartwarming Christmas message to her fans9 people the internet made famous in 2016Airbnb CEO teases updates for 2017 on TwitterA look back at George Michael's legendary career50 thoughts I have while waiting for my Seamless orderA life in the stars: Carrie Fisher in picturesCold drones can now brave winter with their own drone sweatersThis is the best city for job seekers in 2017India's public bank blocks largest mobile wallet, promotes its own11 technologies to watch in 2017Tesla holiday Easter Eggs make your car dance, fly to MarsTorrential rain turns Australia's desert heart into a series of waterfallsMike Pence's new neighborhood gets plastered with 'trust women' signs Grandma discovers Uber Eats and immediately takes it too far A brilliant artist reimagined characters from 'The Office' as cartoons The NBA knows you only care about the fourth quarter. This proves it. What if yoga pants, but with guns? Millie Bobby Brown reps March For Our Lives at Kids' Choice Awards March For Our Lives, Tide Pods, and the new way we talk about teens Apple confirms the App Store is down for many users The KFC Waffle Double Down is coming ... but only to Canada Here's glorious proof that everything should be named in the style of the walkie talkie Robert Downey Jr. reveals star 'Queer Eye' gets renewed for a second season This girl needed the fire department to save her from a swing, and she's not the only one Thread about how much data Facebook and Google have on you will freak you the hell out Apple announces $329 9.7 Acer's Chromebook Tab 10 is the world's first Chrome OS tablet 'Emergency Contact' is a love story told for the age of smartphones Nothing says 'happy anniversary' like a creepy clown photobomb Gina Rodriguez to play Carmen Sandiego in live Naomi Wadler had a powerful message to share with March For Our Lives Chance the Rapper slams Heineken ad as 'racist'
2.0186s , 10109.46875 kb
Copyright © 2025 Powered by 【Mike Horner Archives】,Exquisite Information Network