Yalu JB Wrote:A new Chinese $500 box-like device can hack into your passcode automatically! This tool is based on a recovery mode security vulnerability that allows it to input an infinite amount of passcodes.

It looks very primitive at the very outset but packs incredible power for such a small device. It comes with 3 USB slots, which allows the hacker to hack 3 iPhone devices simultaneously.

Furthermore, it also has with its own hacking software that has a number of options pertaining to the cracking technique you want to use.

To initiate the hack, your device must be in the “flash” state, that is, must be undergoing the restore process.

The hacking methodology is very similar to a WiFi attack. It performs a classic brute-force attack and tries every combination of all the numbers until it gets it right.

Even if it does take time, it will still eventually cracking up the passcode since it can perform any number of attempts.
Will Apple close this loophole?

Yes, of course. Apple will be closing this major loophole as soon as possible now that this tool is public. As far as I know, it has already been closed in iOS 11.

With that said, you do not have to wait for them to fix every loophole or vulnerability. You can simply use several basic security functions already at your disposal to stay safe.

hacker

The best way to secure your device is to use an alphabetic password. Doing so will practically render all brute-force tools useless because they will then need to go through a humongous amount of combinations that could take up years.

(Aug 19, 2017 11:11 AM)Arnold Schwarzenegger Wrote:  Yeah check out this video buddy.
youtube.com/watch?v=IXglwbyMydM&t=627s

(Aug 20, 2017 09:58 PM)iPhoo Wrote:  Okay, but let's be smart. In theory the box is not needed at all. This is pretty much a rip-off. I've seen this recover data screen, while updating.

Now, more to the point: as long as you have a USB to lightning adapter, and a USB keyboard, you can make the PIN attempts yourself, or use a USB HID emulator. Which is not hard to make. With the emulator, you can script it to make pin attempts within set ranges.

Even manual entry is possible right? Although that would take forever. You can use logic to try common pins first (2580, 3669, 1245, 0852...) 🤝

(Aug 20, 2017 11:00 PM)๖ۣۜCriminal Wrote:  What im curious about is why this only works on the iphone 7 is there certain hardware that the iphone 7 has that causes this bug or can you not access this recovery page on iphones before the 7 like 6s 6 5s etc I figure since it's a software bug in the IOS update process it should in theory work on all devices unless recovery mode is like a special OS seperate from the main OS kinda like what self encrypted HDD's do you get booted into a special OS before the main one launches.