I was sent this article showing what appears to be a document by Cellebrite that was marked as confidential describing a recent Advanced Unlocks capability. The document is a few months old. This capability allegedly uses a dedicated appliance with a stated range of about 8 metres. Given the range they suspect it is to do with Bluetooth.
There is no mention of iPhones with MIE (hardware memory tagging, iPhone 17, Air and later) and it is not on the latest iOS version, which could suggest a patch.
Take a look for yourself:
โ๏ธ Is Cellebrite sitting on an iPhone radio 0day? · justin.sh

It would make sense that Cellebrite would choose to have capabilities like this one under development. When devices increase their security against physical attacks, the exploit developers will move towards a path of least resistance to exploit other components or circumvent the security measures that prevent the extraction, as we see with their automatic reboot cancelling exploits for iPhones. Since forensics labs contain devices in isolation to prevent network access and remote wiping, it is possible to make simulated / dummy network environments inside those containers where advanced labs can attempt exploit delivery without the risks.
The full document is available on request so it needs to be looked at further. While I do not intend to make discussion threads on this site regularly I think this is in a public interest.
Replies (13)
They're throwing around "future proof"... ๐ค
Likely because this will be their approach in the future to try and exploit device extraction now that USB is becoming more protected. Looks like someone over there hates the hardware port control feature we have (We also have a shutdown timer for Bluetooth).
They still were not able to exploit modern iPhones using memory tagging and the article appears to explain how this could have been patched.
My neighbor is ex-FBI. We had a good discussion about GrapheneOS and the overall trend of increased device security.
I told them that I certainly want law enforcement to be able to catch bad guys, and there are real bad guys the whole of public needs caught and brought to justice.
And also that when I'm in my house with my family, I expect to be able to achieve total privacy and security through whatever means. He agrees with that and wants it too.
I told him that when I'm out in public, I still expect to be secure within my own affects. My own vehicle. My own devices. These are my property not public property. He agrees.
Where we disagree is what happens after a warrant. He says LE need the ability to break in if it's legal and Apple etc shouldn't be going to war with the State here. I said that customers have been on the abusive side of State surveillance and its perfectly reasonable for technology companies to offer more secure and private offerings that people would self select out of a sense of common decency, not wanting to be forced to be naked.
At the end of the day, I want to own my devices. If there is a warrant, that gives me a bargaining chip. I can always decline access if I so choose.
That's a better balance of power that doesn't force every man, woman, and child to be strip searched at all times. And I think the world is moving in this direction.
Privacy is about dignity.
The analogy of an open air prison is the most effective. The more privacy and dignity the public gives up, the more the public space becomes like an open air prison.
At some point, the dignity is so low that you breed a slave society that collapses. I think we're on this trajectory.
No privacy + involuntary bond debt + gaurateed confiscation (inflation) + can be physically forced to fight in wars....
What is this if not slavery or at least bondage?
Social credit and the constant checkpointing and digital strip searches....
We have to claw back some dignity for the average person before the State crushes what's left of mankind's most basic right: to dignity.
I gave the argument of envisioning a society where TSA checkpoints are everywhere, physically and digitally, and what kind of society that would be and would we want our grandchildren to live there.
We've divested of all the basic mechanisms for ensuring a good social contract and basic, high order cultural homogeneity that actually reduce the threat of chaotic crime will preserving dignity...
Instead we seem to be going all in on a kind of open borders, blob culture, open air prison with no trust or dignity.
Good people WILL adapt to provide their own privacy, security, and dignity. We will not wait for the State to unscuttle what has been scuttled.
Thanks for listening to my rant.
> He says LE need the ability to break in if it's legal
Bullshit. Why?
Because the state is a psychopath, and those "rules and laws" that the state itself wrote = for suckers who believe in them.
The state itself will break the law as soon as the opportunity presents itself, they'll put you in prison, and then from prison you'll spend decades proving that the state broke the law, and you'll be writing all sorts of democratic things to all sorts of democratic courts, and proving on paper that you're not a camel.
No, fuck that shit. I'm grateful that I have FOSS and GrapheneOS, which I can destroy at any second, and I don't give a shit about their "laws".
It's not surprising that an old guy who had an entire career in law enforcement would think that.
Talking to him for almost two hours, it was clear he held conflicting views that were difficult to balance.
This is actually the problem of providing law and order. Households deserve and society requires a basic dignity. Like with dystopian novels, total order requires zero dignity. Thus society is lost and no longer worth preserving but it becomes an moral imperative to overthrow it.
Police need to use old fashioned police work to catch bad guys, and society needs to preserve the basic dignity of households.
Everything after that is a "tough luck" situation.
GrapheneOS and other freedom tech are natural responses to an evil attack on the basic dignity of mankind.
Freedom tech is net positive because anything that safeguard basic dignity also safeguards civilization as a whole.
"My house, my devices, my property" shouldn't even be up for debate
Yes. He conceded that, thinking about what he wants with his wife and children.
The discussion becomes one of legal warrants. I maintain that legal warrants can not bring the prerequisite that everybody is rendered insecure in their effects.
Law enforcement must do the old fashioned things, and be denied the ability to strip every man, woman, and child at will.
There are already laws against refusing to cooperate with warrants. If a judge demands I cooperate with a search and I don't... charge me with that.
You don't strip Mankind of basic dignity just because the system wants assurance of access.
In other words, civilization is not the states detention center, and the population is legitimate and reasonable to adopt freedom tech to resist tyranny from the totalitarian instinct presented in authoritarianism and even technological technocracy.
Love the shutdown timer.
found this somewhere somewhen, might be of interest

i know its older and for android though