UserresU There's information throughout the thread. Which part do you need more info about?
Cellebrite Premium July 2024 documentation
Quotesquestioner Are you referring to the SoC column for iPhones? That refers to their System on a Chip, i.e. the CPU, GPU, MMU, etc. It's already implied by the device model but they may have added it to help explain why there would be differences between certain generations.
GrapheneOS yes i mean SoC and the other stuff that is on the right to it. My english is insufissient for describing sheets. Is there mabe a video, that explains the charts in detail?
Chat Logs of Cellebrite/Graykey/etc. Users/Staff
Might be relevant.
https://discuss.privacyguides.net/t/chat-logs-of-cellebrite-graykey-etc-users-staff/21374
- Edited
GrapheneOS
Is brute force possible in AFU? It seems there's no secure element throttling in AFU. I tried multiple failed password login and it still allows me to try.
What's the Pixel titan throttling policy? like how many times of failed tries before first cooldown period? Is there a max number of failed tries?
- Edited
Upstate1618 follow this link and scroll down. You'll find a table with that info: https://grapheneos.org/faq#encryption
Upstate1618 Is brute force possible in AFU? It seems there's no secure element throttling in AFU.
No and there is. Maybe you tried with a short PIN? If I recall correctly, the guesses have to be over a certain length. Maybe 4 or more digits? Don't remember for sure.
To try the throttling, you need to input a valid PIN (4 or more digits) and it needs to be a different PIN each time. It won't throttle if you keep inputting 1111
, for example. This is a new change.
The throttling thresholds seem to have also changed slightly, so we'll need to update the docs. You'll hit the first throttle after 10 failed attempted, if I recall correctly.
Hi! Thanks for sharing this.
Are they able to read and access the user data afu or bfu on standard Android on Google pixel with Titan M2, if they don't have the passcode? Or can they only extract the encrypted version of the user data? Can they also extract the data bfu?
Hello, do you know if Apple has taken over the same restart feature as GrapheneOS?
Guillaume Worth noting auto-reboot has no impact on what's listed in these tables but rather just whether the device stays in AFU. They never pointed out that GrapheneOS would get back to BFU in the table.
According to media reports it seems that iPhone resets if it has no connection to mobile network for some time. Typically that is in a case when iPhone is stored in forensic bag.
However, if that is true, there could be workaround for that. Police should just present the phones some fake network (without internet connectivity, no SMS and no calls), and iPhone will have access to network (however, there will be no further network connectivity), and will not reboot itself?
We don't know if this would be a workaround, however GrapheneOS's option to autoreboot at specific time interval when screen is not unlocked, seems much better option.
Matthai Last night I removed the case from my iPhone to clean it, and I turned it a little in all directions to put it back, he asked me for my password after putting it back, so I wonder if by turning my phone in all directions he must have believed that I had it stolen or something like that
- Edited
Matthai According to media reports it seems that iPhone resets if it has no connection to mobile network for some time.
According to this report, it's just a timer:
The reboot timer is not reliant on charging or network functions, and is only tied to inactivity since the last unlock.
Edit: A timer would be simpler and more secure, so hopefully any report claiming network coverage is involved would be detailed and would report on experiments.
Guillaume no, it just tried to scan a face and failed twice. Completely normal for every FaceID enabled iPhone.
Matthai The police speculation and the news stories about it were wrong. There is nothing rebooting the devices automatically for iOS 18 and earlier. iOS 18.1 added an auto-reboot timer similar to the one we've used since June 2021. iOS 18.1 was released on October 28th. Their auto-reboot timer is 4 days. There's no way that most of the devices police are complaining about are on iOS 18.1 and clearly not all are since some of the info is about clearly older devices. They were also talking about them rebooting in batches, etc. despite being locked at different times. It is likely that what happened is a few newly obtained iOS 18.1 devices rebooted and then that triggered a bunch of speculation and inaccurate reports leadijng to the news stories.
We have a thread about iOS 18.1 integrating the auto-reboot feature we pioneered in GrapheneOS:
https://grapheneos.social/@GrapheneOS/113450097776800819
We proposed it for inclusion in Android in January 2024 but it has yet to happen and it's likely they weren't going to do it based on our proposal. They'll almost certainly add it now, but they could have just listened to us.
awesome!
GrapheneOS 3 days now in iOS 18.2 https://twitter.com/naehrdine/status/1856802400897503487