this post was submitted on 19 Jul 2024

270 points (98.6% liked)

Technology

58009 readers

3055 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

270

Leaked Cellebrite Tool Docs Reveal List of Phones That Can Be Unlocked (cybersecuritynews.com)

submitted 1 month ago* (last edited 1 month ago) by AmbiguousProps@lemmy.today to c/technology@lemmy.world

27 comments fedilink hide all child comments

According to the documents, Cellebrite could not unlock any iPhones running iOS 17.4 or newer as of April 2024, labeling them as “In Research.” For iOS versions 17.1 to 17.3.1, the company could unlock the iPhone XR and iPhone 11 series using their “Supersonic BF” (brute force) capability. However, iPhone 12 and newer models running these iOS versions were listed as “Coming soon.”

The Android support matrix showed broader coverage for locked Android devices, though some limitations remained. Notably, Cellebrite could not brute force Google Pixel 6, 7, or 8 devices that had been powered off. The document also specifically mentioned GrapheneOS, a privacy-focused Android variant reportedly gaining popularity among security-conscious users.

Links to the docs:

iPhone

Android

GrapheneOS has a thread about this on Mastodon, which adds a bit more detail:

Cellebrite was a few months behind on supporting the latest iOS versions. It's common for them to fall a few months behind for the latest iOS and quarterly/yearly Android releases. They've had April, May, June and July to advance further. It's wrong to assume it didn't change.

404media published an article about the leaked documentation this week but it doesn't go into depth analyzing the leaked information as we did, but it didn't make any major errors. Many news publications are now writing highly inaccurate articles about it following that coverage.

The detailed Android table showing the same info as iPhones for Pixels wasn't included in the article. Other news publications appear to be ignoring the leaked docs and our thread linked by 404media with more detail. They're only paraphrasing that article and making assumptions.

We received Cellebrite's April 2024 Android and iOS support documents in April and from another source in May before publishing it. Someone else shared those and more documents on our forum. It didn't help us improve GrapheneOS, but it's good to know what we're doing is working.

It would be a lot more helpful if people leaked the current code for Cellebrite, Graykey and XRY to us. We'll report all of the Android vulnerabilities they use whether or not they can be used against GrapheneOS. We can also make suggestions on how to fix vulnerability classes.

In April, Pixels added a reset attack mitigation feature based on our proposal ruling out the class of vulnerability being used by XRY.

In June, Pixels added support for wipe-without-reboot based on our proposal to prevent device admin app wiping bypass being used by XRY.

In Cellebrite's docs, they show they can extract the iOS lock method from memory on an After First Unlock device after exploiting it, so the opt-in data classes for keeping data at rest when locked don't really work. XRY used a similar issue in their now blocked Android exploit.

GrapheneOS zero-on-free features appear to stop that data from being kept around after unlock. However, it would be nice to know what's being kept around. It's not the password since they have to brute force so it must be the initial scrypt-derived key or one of the hashes of it.

top 27 comments

sorted by: hot top controversial new old

[–] mctoasterson@reddthat.com 42 points 1 month ago

Nice to see some benefit to updated vanilla AOSP, Graphene, and other options.

It goes without saying but it seems like a deeply fucked business model to horde zero-days that could cause billions in damage or safety issues if they fall into the wrong hands, in order to keep your mercenary surveillance product working.

[–] Lojcs@lemm.ee 39 points 1 month ago* (last edited 1 month ago) (2 children)

Mfw Samsung on android 6 is the most secure 😮. Wonder if it has something to do with the mid boot password option that was around

Edit: Downvoted in 10 seconds wtf

[–] woelkchen@lemmy.world 35 points 1 month ago (1 children)

Mfw Samsung on android 6 is the most secure 😮. Wonder if it has something to do with the mid boot password option that was around

More likely: So old, no point in even attempting, therefore not supported.

[–] WhatAmLemmy@lemmy.world 13 points 1 month ago* (last edited 1 month ago)

That's taking "security through obscurity" to a whole new level.

[–] henfredemars@infosec.pub 12 points 1 month ago (1 children)

I think it’s probably a demand issue. There’s just not that many devices running with that Android version, and it takes a lot of time and money to pay engineers to find and use extremely complex state of the art exploits.

[–] pineapplelover@lemm.ee 19 points 1 month ago (1 children)

So security through obscurity

[–] henfredemars@infosec.pub 13 points 1 month ago

Right. If you’re a sufficiently wanted criminal, I’m sure they could custom an exploit for you. You’re not really secure.

Probably not economical to include it in their normal package.

[–] helenslunch@feddit.nl 37 points 1 month ago (2 children)

The document also specifically mentioned GrapheneOS

Okay...what'd it say? Baffling that the author didn't think that was important...

[–] ExtravagantEnzyme@lemm.ee 33 points 1 month ago* (last edited 1 month ago) (2 children)

I mean, the doc's are available through the link. But here's some screen grabs:

AFU: After First Unlock

BFU: Before First Unlock

BF: Brute Force

FBE: File Based Encryption

FDE: Full Device Encryption

FFS: Full File System

[–] peopleproblems@lemmy.world 5 points 1 month ago (1 children)

[–] ExtravagantEnzyme@lemm.ee 11 points 1 month ago

Android user? Graphene looks like it's worth the setup process more and more. Pixels are the only Google product worth while thanks to Graphene really.

[–] helenslunch@feddit.nl 2 points 1 month ago (1 children)

The only docs I saw pertained to iOS.

[–] ExtravagantEnzyme@lemm.ee 6 points 1 month ago

Just like the link in the iOS section, there's a link in the Android section. Both were in the first sentence, I believe. But I had to give the article another once over to find it.

[–] Lojcs@lemm.ee 24 points 1 month ago (1 children)

It says it's immune since 2023 updates

[–] helenslunch@feddit.nl 5 points 1 month ago

Nice, thanks

[–] Adanisi@lemmy.zip 1 points 1 month ago (2 children)

Use a long password and you'll be immune from their before first unlock brute force.

Passcodes are trivial to break.

[–] fmstrat@lemmy.nowsci.com 2 points 1 month ago* (last edited 1 month ago)

Incorrect. Read the links.

Edit: I missed the "first", you're not saying fully immune. My bad.

[–] underisk@lemmy.ml -4 points 1 month ago* (last edited 1 month ago) (2 children)

They’re exploiting vulnerabilities and back doors not brute forcing your passcode. The only way you’re keeping them out is with hardware encryption which the iPhone has and probably why it’s the only one not vulnerable. Hardware encryption also won’t matter if your vendor shares their keys with law enforcement. As far as I’m aware, Apple is the only one that’s gone to court and successfully defended their right to refuse access to encryption keys.

Don’t put anything incriminating on your phones.

[–] Adanisi@lemmy.zip 8 points 1 month ago* (last edited 1 month ago)

In a before-first-unlock state they absolutely are bruteforcing, since the filesystem is encrypted. The exploits are for bypassing the retry limit in that case.

And the manufacturers don't have your encryption keys. They're unique.

[–] fmstrat@lemmy.nowsci.com 7 points 1 month ago (1 children)

Huh? None of this makes sense to me. Apple and Google do not have encryption keys for your device, regardless of hardware or software. When your phone is unlocked, the key and/or hash is in memory, and may be key wrapped, regardless of hardware or software. iOS is listed as vulnerable to the attacks, minus the latest devices and versions, which is pretty much the norm with lagging development. Same woth latest Pixels. Where are you getting this info from?

[–] underisk@lemmy.ml 3 points 1 month ago* (last edited 1 month ago) (1 children)

The Secure Enclave is a component on Apple system on chip (SoC) that is included on all recent iPhone, iPad, Apple Watch, Apple TV and HomePod devices, and on a Mac with Apple silicon as well as those with the Apple T2 Security Chip. The Secure Enclave itself follows the same principle of design as the SoC does, containing its own discrete boot ROM and AES engine. The Secure Enclave also provides the foundation for the secure generation and storage of the keys necessary for encrypting data at rest, and it protects and evaluates the biometric data for Face ID and Touch ID.

https://support.apple.com/guide/security/hardware-security-overview-secf020d1074/web

The FBI wanted access to Apple’s encryption keys which they use to sign their software. They don’t have ‘your’ encryption keys, they have their own that the FBI wanted to use to bypass these features. They eventually dropped it because they found a zero day exploit which apple fixed in later versions. That is why the newer phones aren’t vulnerable (yet).

https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_dispute

[–] fmstrat@lemmy.nowsci.com 0 points 1 month ago (1 children)

Familiar, but based on your first comment about the benefits of hardware encryption over software encryption, and thus iOS being better than Android, perhaps you're misinterpretting the specifics?

For the first point, the SE only stores keys at rest. The keys and hashes are still in memory when booted, otherwise the device wouldn't be able to function. This works the same as software encryption, the key itself is just encrypted and stored on "disk" instead of in flash when off.

For the second, Apple's software signing keys would not give the FBI access to a device. There is nothing to "turn over". The signing of new software to bypass the lock was to remove the 10 retry reset. As above, there is no benefit to hardware encryption over software here.

The benefit hardware encryption brings is potential speed (which is certainly valuable, but not necessarily more secure or harder to crack).

[–] underisk@lemmy.ml 0 points 1 month ago* (last edited 1 month ago) (1 children)

I’m not claiming iPhones are superior. I don’t care about dumb OS wars, just don’t put things on your phone expecting that they can’t be retrieved. That’s the only point I’m trying to make here.

And the keys absolutely would give them access since those keys are used to sign Apple software which runs with enough privileges to access the encryption keys stored in the “Secure Enclave”. Anything you entrust to a company’s software is only as secure as the company wants to make it, and the only company to publicly resist granting that acces is Apple (so far)

[–] fmstrat@lemmy.nowsci.com 1 points 1 month ago (1 children)

The only way you’re keeping them out is with hardware encryption

This was the hardware vs software comment I was debating, not the rest.

Also, software signing keys (like those requested by the FBI) would work for enabling brute force since that's a change to the software, but not for direct access into SE. That would be like saying a firmware update could grant access to a LUKS partition without the passphrase. Not possible. If it was, no open source encryption would ever work.

[–] underisk@lemmy.ml -2 points 1 month ago (1 children)

The only thing that has successfully managed to thwart the FBI in their attempts to break into a phone was Apple’s hardware based encryption. To such an extent that they took legal and legislative actions to try and circumvent it. The specifics of how the encryption works is irrelevant to this argument, and you are more than welcome to consider that point conceded.

[–] Lojcs@lemm.ee 1 points 1 month ago (1 children)

The specifics of how the encryption works is irrelevant to this argument

I’m not claiming iPhones are superior

If it's not the "Apple's" and also not the "hardware based encryption", what's the argument then? As you pointed it out FBI only needed apple's help since they didn't have a working exploit and dropped it once a new one was found. In the latest case with android once again their existing tools didn't work but cellibrite had an unreleased one ready to use, so they didn't need to go to court in the meantime.

[–] fmstrat@lemmy.nowsci.com 2 points 1 month ago

Exactly, thank you. They seem to think hardware encryption is a form of magic here, and are missing the key point. Sure, we are needlessly debating on the interwebs, but this type of thing is what leads to those that don't understand the specifics gravitating towards the wrong solutions for their needs.