Cops have breached one of iOS’s most secure features, report claims

A company called Magnet Forensics, which supplies law enforcement with a device called GrayKey, claims to have bypassed a significant iOS security feature. This revelation, reported by 404 Media, raises concerns about user privacy and data protection.

The security in question is known as the Inactivity Reboot feature. When an iPhone remains idle for 72 hours, it automatically reboots and enters a more secure state called Before First Unlock (BFU). During this time, sensitive data is encrypted and protected. After the unlock, the iPhone enters a less secure state called After First Unlock (AFU).

According to the leaked video, Magnet Forensics has developed a workaround using the GrayKey Preserve device. This enables the iPhone to be frozen in AFU mode, even if the device restarts. In this frozen state, the encryption is weaker, allowing easier access to the device's data.

Moreover, the GrayKey Preserve can recover deleted data, including location information, iMessages, and deleted images. The video suggests that this could potentially be maintained indefinitely.

Security expert Jiska Classen suggested that the new GrayKey might be manipulating iOS's clock, effectively stopping the inactivity reset and preventing data deletion. Apple, known for its strong stance on user privacy, has been working against such tools. Apple has not provided a specific solution to this vulnerability but is reportedly actively working on a fix.