GrayKey iPhone unlocker poses serious security concerns

postmarxed:

postmarxed:

apparently there’s an exploit in iOS that can bypass the limit on the number of times a passcode can be entered so this device just inputs every possible passcode until it finds the right one. hopefully Apple is working on a patch I’d love it if these police departments spend $15,000 on one of these and then the exploit is patched and the device is useless.

Hey here’s how to protect yourself against this

Go into your settings and find Touch ID & Passcode (Face ID & Passcode if you have an iPhone X)

It’ll ask you to enter your current passcode so do that and then hit change passcode

You’ll have to enter your current passcode again. Then instead of entering a new 4 or 6 digit passcode hit this little Passcode Options button

Then hit Custom alphanumeric code

And set yourself a 10 digit password with letters and numbers.

Graykey can crack a 4 digit code in 13 minutes, or a 6 digit code in about 22 hours. A 10 digit alphanumeric code will take it about 12 years on average.