Hacker News Reader

This device pranks the hardware to allow unlimited attempts at guessing the password.

I don’t know the details: is it as simple as grounding the “password entered incorrectly” pin? Or is it about injecting so much noise on a signal line that the message to increment the PIN attempt count never gets through? I don’t know.

So use a passphrase, not a PIN.

View on HN

Last year someone demonstrated the possibility of dumping and restoring the state of the security hardware in between entry attempts, so that the phone always thought you were on your first try. I assume this is the technique being used by the GreyKey.

EDIT: Pretty sure this is the one I'm thinking of: https://www.digitaltrends.com/mobile/cambridge-researcher-ha...

I guess it was two years ago.

With all the work that I've heard went into secure enclave (IIRC that's apples hardware+software security latest-and-greatest), does that mean someone (or an entire team) at Apple is absolutely sweating bullets/thinking frantically right now?

Security and a focus on user privacy protection (from other entities, at least) is definitely a differentiator for apple devices

Reply on news.ycombinator.com