Cellebrite Premium July 2024 documentation

Stayjuice

I assume that Cellebrite needs a usb/data connection to get in to phones, couldn’t a non data port be installed on a device? A port that only charges and gives no data access just wondering

All attacks I thought went through the usb port if it couldn’t handle data it would be safer at hardware level

GrapheneOS

Stayjuice USB-C port is a non-data port on GrapheneOS when configured that way. It disables USB-C data at a hardware level when set to "Charging-only" mode. The default is "Charging-only when locked" which immediately blocks new USB-C connections at both a hardware and software level after locking followed by disabling USB-C data when existing connections end. It's implemented by setting the USB controller to act in a certain way. There's even support for fully disabling it while booted into the regular OS mode to block charging including USB-PD too.

Stayjuice

GrapheneOS I wasn’t very clean sorry, I mean on the apple devices that Cellebrite can attempt to get in to. I’m weaning myself off of apple anyway. I will use the pixel as my main and I might invest in a pixel tablet to replace my iPad mini and sell that as it doesn’t get used rarely anymore.

final

Stayjuice Forensic experts are trained in device repair, they'd just replace the port with a functional one.

Stayjuice

final rumour has it that future devices may not have a data port at all and just wirelessly charge then they couldn’t solder one on

Aeon

not sure if someone posted it already but here is an article that contains the celebrite support matrix from February 2025

https://osservatorionessuno.org/blog/2025/03/a-deep-dive-into-cellebrite-android-support-as-of-february-2025/

dc32f0cfe84def651e0e

Stayjuice How are we supposed to install GOS on thos devices?

de0u

Stayjuice rumour has it that future devices may not have a data port at all and just wirelessly charge then they couldn’t solder one on

"Rumor" indeed. That seems unlikely given the amount of work Google has been putting in on getting desktop environments to display over USB-C. I think it will be a while before it's feasible to transmit monitor-quality display output without a physical connection. I guess in theory UWB might do it, but I'm not aware of monitors supporting UWB input.

Stayjuice

de0u apple, they put in a patent and since the forensic software does apple as well as android having no data port will make things interesting

de0u

Stayjuice apple, they put in a patent

Many things are patented but not shipped as products. So while a phone without any physical data ports is certainly a theoretical possibility the existence of a patent filing does not imply devices will ship any time soon.

Stayjuice

de0u it doesn’t mean that it won’t not come anytime soon either 😉

unrealnegan

My Pixel 6 was confiscated by the German police after a political rally. I was recently able to pick it up again. From an inquiry with my lawyer, the following emerged: The authorities tried to read the device with both UFED4PC and Cellebrite Premium Touch. In addition, software from other forensic providers was used without success. The software did not succeed in breaking the system. The device was in BFU mode and had a 30-digit PIN. USB port was deactivated. As of March 2025, I can therefore say that it is not possible for Cellebrite to break a secured GrapheneOS.

grayway2

unrealnegan Very good news. I suggest to not bring your electronic devices to public rally next time to avoid seizure.

There is no democracy in our world, we have to defend ourselves against such abused situations. Google hardware and GrapheneOS code hardening is helping us to stop them.

someone27281

unrealnegan

Thanks for sharing. Is it even legal to try these things on a phone which you just ceased from a protestor?
And also for high threat model I suggest remote attestation verification just to make sure.

unrealnegan

someone27281 The police like to connect the device to a Cellebrite device while you are giving fingerprints. I have also seen the police carry mobile Cellebrite devices. The police call a judge and he orders it. Unfortunately, this is legal for the police.

DeletedUser253

I would like to obtain the latest Cellebrite Premium support matrix and user manual (both in PDF format) for privacy-related research purposes. Is there any way to obtain these PDF files other than purchasing the product?

88dotorg

DeletedUser253 your thoughts/ question made do a quick search with positive results, so the answer is yes! Go to Big Brother and search for "mobile Cellebrite devices PDF download manual" or better the spec. device name/ number, results show from the archive dot org.

Upstate1618

Is iOS 18.3.1 and later vulnerable to AFU attraction?

Privacyfanatic

GrapheneOS

Does this also include the ability to bruteforce iPhone 12 and later in BFU? Or is this just AFU?

Privacyfanatic

As of May 2025, can Cellebrite bruteforce iPhone 12 and later while in BFU? I’m aware that AFU extraction is possible for modern iPhones, but are the hardware chips still holding up while in BFU?

I see in the July 2024 documentation, they’re not able to bruteforce iPhone 12 or later in BFU, regardless of passcode strength. Has this changed as of May 2025?

« Previous Page Next Page »