iPhone spyware lets police log suspects' passcodes when cracking doesn't work
https://www.nbcnews.com/tech/security/iphone-spyware-lets-cops-log-suspects-passcodes-when-cracking-doesn-n1209296

#cososec

@voltronic Okay now that I've actually read the article I'm even *more* baffled on how this could be effective against a reasonably-secured OS. This isn't just pulling data off of a cache, but also requires actually installing software on the phone without user authentication. That shouldn't be possible, period.

@john_b @voltronic Oh this kind of thing works. It's an ancient technique. It's just another way of brute-forcing a password. But, it will fail if your device is properly secured with 2-factor authentication or other methods. Fortunately for cops, most people haven't a clue when it comes to security.

@sjvn @john_b @voltronic

Hold up: first, an iPhone will go into infinite lockout after a sufficient number of failed passcode attempts.

Second, you simply cannot install software onto an iPhone that you can't unlock.

Tell me how this "works" in light of these facts, because I can't see it.

@sjvn @john_b @voltronic

https://www.tomsguide.com/how-to/what-to-do-when-your-iphone-is-disabled

@mcfate
That matches with everything I've read, but somehow these Graykey boxes are getting keyloggers onto locked iPhones.

@sjvn @john_b