The saga of devices that promise to unlock Apple devices (or other platforms) is eternal, and every now and then a breakthrough comes to remind us that there is no absolute security and always good to keep in mind that your precious data will never be 100%. protected.
Recently, this not came up again with a report from Forbes exposing device sales UFED (Universal Forensic Extraction Device, or “Universal Forensic Extraordinary Device”) of Cellebriteon eBay. The price? Some units even go out for $ 100.
To add a bit of historical context, Cellebrite is that Israeli security company that produces tools for unlocking iPhones, iPads and Android devices. One of its most notable customers is the FBI, which has already used Apple's techniques to bite Apple and, in some ways, wrap up a lengthy controversy with the Cupertino giant.
UFED is one of the devices used by the FBI and other security companies (and will know who else) in unlocking the devices; Directly purchased from Cellebrite, these devices cost between $ 6,000 and $ 15,000, depending on the model. The versions marketed by eBay sellers are older, outdated models that still work.
The news, of course, is worrying, since nobody wants unlocking tools on iPhones and other gadgets to fall into the hands of any person or organization, of course. In addition to threatening the integrity of user data, such a phenomenon could create a situation of complete insecurity in the mobile world, as crackers could use Cellebrite devices to exploit and uncover vulnerabilities reported on iOS and Android without sharing them in such a way. responsible with Apple and / or Google, of course.
To make matters worse, devices sold on eBay bring data from previously extracted extracts. A security researcher bought some used UFED units sold on the site and was able to retrieve data about scanned devices such as their models, date and form of extraction, as well as IMEI numbers. Even text messages and contact lists could be retrieved, although the researcher chose not to explore this field.
Cellebrite has already contacted its customers, advising them not to resell the unlocking devices; The recommended procedure for forwarding simply return them manufacturer. The question is, of course, whether they will adhere to the recommendations.
On the other hand, maybe Apple could benefit from this whole story, buy some UFED drives and use them to close the holes in their system. That wouldn't be totally illogical, wouldn't it?
via 9to5Mac
