A company that makes phone hacking devices claims to have developed a solution that freezes iPhones in a state that lets cops more easily access sensitive data inside them, according to a video obtained by 404 Media.
This is the latest salvo in the never-ending battle between Apple and companies that help cops — sometimes those in authoritarian countries — break into iPhones.
In November 2024, 404 Media revealed Apple quietly introduced a new feature in iOS that automatically reboots an iPhone that has not been unlocked for 72 hours. The idea behind this so-called “inactivity reboot” is to revert the phone to a state that makes it harder for police to break into the device, and thus extract sensitive data from it with forensics technology.
At the time of Apple’s change, law enforcement agents expressed concern about this new feature, given that oftentimes they can’t immediately try to break into iPhones that have been seized. That could be because police are still waiting for a court authorization to do so, or there is simply a backlog of devices to unlock, for example.
In the US, if cops get into a phone before a warrant, even if a warrant is issued later, all evidence from the phone is suppressed as illegally obtained.
This is a bigger concern with respect to intelligence agencies who conduct mass surveillance.
even if a warrant is issued later, all evidence from the phone is suppressed as illegally obtained.
This assumes a healthy and functioning country. I wouldn’t assume that of the US in particular. People are being hunted, kidnapped, imprisoned and murdered by the government as we speak.
I’m a law student in the US, so I’m actually privy to this information in the form of all the talks that they have judges and lawyers giving.
You may not assume that the US judiciary is healthy and functioning, but it is not as broken as most international observers (or chronically online Americans) think it is. In particular, if you have been observing the Department for Justice’s results recently, you’ll notice a few things:
- Because the Department has been hiring for loyalty and not legal skill, the Department has lost most of its prior prestige. Previously, clerking for the Department was a competitive law school position. Now, the top legal minds then to avoid it. As a result, the quality of legal skill at the Department has decreased, drastically.
- Judges in the federal judiciary, with the exception of some notable Trump cronies, is actually very willing to uphold existing procedural law and rule against the government. It happens extremely regularly.
- When judicial orders are ignored, it is almost always temporary and not in any lasting way. Federal judges still do threaten and issue contempt of court penalties and disciplinary referrals to officials who blatantly disobey court orders.
So in short, you are partially correct and partially wrong. The judiciary of the US has shown to be remarkably resilient considering it has withstood two years of a fascist in power and in full control of the legislature.
First of all, you’re doing important work and I wish you well in your studies and career, for everyone’s sake.
Thanks for the insight. Definitely some positives there. When ICE have added an innocent person’s data to be absorbed into (eg) Palantir’s database, how confident can we be that it is actually removed again?
If this is illegal (which I am not convinced that it is, even though it certainly should be), then a judge can order Palantir or the relevant government agencies to destroy the data. If there is a question about whether this order will be complied with, the court can appoint a special master to oversee it, but this is rare. Usually what happens is the court will take their word on it, but if it turns out they lied, then the court will impose a stiff penalty for contempt of court.
Federal judges still do threaten and issue contempt of court penalties and disciplinary referrals to officials who blatantly disobey court orders.
I guess this is my main point of concern right now, as an outsider. I know that the courts are still ruling against Trump and the Republicans fairly regularly, but then I hear about situations where they’re simply ignoring the courts’ rulings and little seems to actually happen as a result.
What do those “disciplinary referrals” actually do? Do people actually get fired, or is it just something else for the Republicans to ignore?
Disciplinary referrals are issued against lawyers who break the court rules. Contempt of court is used against anyone (lawyer or not) who violates a direct order from the court. A lawyer who blatantly violates an order may receive both a disciplinary referral and also a contempt of court penalty.
Before a court issues a penalty of any kind against anyone, they usually issue what is called an order to show cause, which essentially means the party accused of violating the rules must appear before the judge and explain why they should not receive a penalty.
Disciplinary referrals are addressed to the state bar association, which are organisations comparable to guilds which license lawyers. The bar association can impose penalties against the lawyer which include:
- Censure, a formal finger-wagging which leaves a permanent mark on their licence and is generally considered detrimental to future job prospects
- Mandatory ethics training or re-take bar exam
- Temporary suspension of their licence to practise law
- Disbarment and expulsion from the bar association, which permanently revokes the lawyer’s licence to practise law. This typically cascades to all bar associations across the country.
An example: Rudy Guiliani was a Trump lawyer who filed submissions before several courts containing information he knew to be false and raising allegations he knew were unsubstantiated, as a part of Trump’s scheme to overturn the 2020 presidential election. The New York bar association disbarred him for this, and the DC bar association took note and automatically disbarred him as well. His legal career is finished; he cannot legally be employed as a lawyer anywhere in the country.
Contempt of court is an inherent power of the court to punish people who violate its orders. A judge can, on their own initiative, declare someone guilty of contempt of court and impose a punishment for it, which could include:
- A fine, possibly an increasing fine until the order is complied with. The fine is paid personally by the person found guilty of contempt of court and no immunities apply.
- Imprisonment for a fixed term, usually not more than a month
- Imprisonment until the person complies with the order
- Anything else the judge comes up with, that does not violate Amendment 8 of the US Constitution or relevant laws
Example: A lawyer was fined $10,000 in March 2026 by my state’s Court of Appeal for submitting a brief containing AI hallucinations.
Ah, so as this progresses the Republicans steadily run out of “competent” lawyers because they keep getting disbarred (or quitting to save their legal skins), leaving them with increasingly incompetent ones that have an even harder time accomplishing stuff.
Here’s hoping their legal wells run dry quickly, I suppose.
Remember in the early days of Trump II when we were hearing about entire US Attorney’s offices quitting in protest? That no longer happens, but that’s what happens when top brass asks experienced, career lawyers to defend positions they know are indefensible, and insists they sign their name to hot garbage, that they know is the same kind as what got Rudy Guiliani disbarred.
So yes, the Trump Justice Department is indeed running out of good lawyers and that’s why the US Attorney’s Office for DC is led by a Fox News commentator who happens to have a law degree.
jeannie piero, the drunk lawyer.
they will have to keep sourcing them from legit law firms, but law firms require them to disassociate from the firm before working for someone like trump or gop.
The judiciary really needs to start using “Imprisonment until the person complies with the order” a lot more early, often, and against people higher up in the DoJ org chart.
Judges generally issue escalating sanctions. A verbal admonition first, then a verbal threat to impose sanctions, then an order to show cause, then actual penalties.
Despite what the media reports, the Administration always folds and complies because it would be embarrassing to have senior officials or government lawyers actually penalised for failing to comply with a court order.
More legitimacy theater.
deleted by creator
I know that the courts are still ruling against Trump and the Republicans fairly regularly, but then I hear about situations where they’re simply ignoring the courts’ rulings and little seems to actually happen as a result.
There has to be a mechanism of enforcement for an order to having meaning. For non-lawyer disobeyers, normally what a judge would do is hold someone in contempt and have federal marshals or sheriffs arrest the person. In this situation, no federal judge is going to request the US Marshals arrest a member of the Trump administration because it would create a constitutional crisis and because the executive legal team would immediately appeal it to his Supreme Court who would overrule them. So a smart judge doesn’t want the crisis and knows they will get overruled and won’t use federal Marshal arrest power. As a result, there is no mechanism for non-lawyers. A lawyer like Janine Pirro may have to deal with an ethics complaint, but most of the people in the executive branch doing arguably illegal things aren’t lawyers. So then what? There’s no solution to this, it’s uncharted territory and a complete disaster.
Go learn about the harmless error rule. You are incredibly naive. DAs and cops break the rules ALL THE TIME because once there’s a conviction the burden of proof shifts and a defendant, now convicted, in prison has the burden of proving (somehow, while behind bars) that in a theoretical other version of reality they wouldn’t have been convicted had the error not been made.
It’s a nearly impossible standard to meet, especially difficult after conviction, and the remedy is not even necessarily release, merely a new trial.
Not only that, even if a judge and DA and cops violate a defendant’s rights OVER AND OVER they still almost always apply the harmless error rule. Even if the trial is essentially infected with bias and procedural corruption (what could be deemed structural error), courts do not care.
Many decisions the court makes are just denials without opinions also, so it’s not like the court always even justifies why they ignore a convicted person’s request. In other words, the appellate cases you’re reading as a law student showing one defendant got released over an error is a cherry picked case chosen by the court either to create the illusion of a fair functioning system or chosen because the situation is so egregious (that means terrible) that courts will look bad if they don’t overturn it.
But no, there’s nothing functional here.You’re privy to nothing if you don’t understand that things haven’t really been functioning for a long time, primarily because the harmless error rule allows corrupt DAs cops and judges to do almost anything.
With respect, we might not be observing the same things at the same places. I saw an DDA blow up her own case (defendant accused of putting GPS tracker on ex-girlfriend’s car) by accidentally mentioning that they traced a GPS tracker back to [defendant’s first name].[defendant’s surname]@gmail.com, and the judge decided this was fatal to their case because they forgot to put the name of the GPS tracker company employee on their witness list.
This guy was 100% guilty. Two witnesses saw him do it and they found his fingerprints on the tracker.
State v. Landon Heath Higgins, Oregon Circuit Court, case number 23CR14417 if interested.
I don’t know the circumstances, but occasionally judges toss trivial things to punish DAs for messing up. It rarely impacts cases with larger punishments. You’re likely referring to a misdemeanor case where the defendant may have gotten a plea deal for 6 months and had a good job and time in jail would have messed that up and resulted in a waste of county resources. Also, things like this occasionally happen to create the illusion of legitimacy. I am not sure if this is a case you read or if you witnessed the judge’s ruling, but the fact that you’re using what is likely a case that carries less than 365 days max time as an example of how a judge will destroy a DAs entire case is in itself revealing.
Have any circuit court examples of cases carrying 10 years? 20 years? Life? No? Oh, I wonder why. Are you a clerk? Assisting an ADA? You’re completely biased and want to see things working. Go read about how impossible it is for the harmless error rule to get overcome on appeal, go read about how structural errors are essentially ignored or the remedy isn’t even release but just go back to start. There’s plenty of articles about this.
https://harvardlawreview.org/print/vol-131/harmless-errors-and-substantial-rights/
I also once saw someone steal a soda from a store and was going to get a month in jail but the judge tossed the entire case because the DA made a procedural error! The system must work!
Yep, and the concern shouldn’t just be for yourself - authorities will clone the phones and then comb your contacts and social media and then add to their systems compiling relational data and use that to target people, often innocent people. Your phone data won’t just be used to harass or inconvenience or stress you out, it’ll be used to harm other people. You should care about that.
Yup.
This is why it is critical to have the numbers and contact info of as many of one’s family committed to memory, not the Contact list, as possible. Cops can’t get at what’s in one’s head (for the most part)…
In the US, if cops get into a phone before a warrant, even if a warrant is issued later, all evidence from the phone is suppressed as illegally obtained.
This is not a hard and fast rule. There is the concept of Inevitable Discovery.
If they find evidence during an illegal entry, they may later seize it lawfully under a search warrant and prosecutors may use it in court if they can supply an independent source, rather than benefit from the earlier violation.
Real world example: In Nix v. Williams, decided in 1984, the Supreme Court considered evidence of a child’s body found after police obtained incriminating statements from Williams. Those statements were later determined to have been illegally obtained and were excluded. However, the body was located in the existing search area and the same type of location (a culvert) they were searching. It was simply in a search quadrant they had not gotten to yet. So the searchers would likely have found the body anyway even without those statements.
Well, as I’ve quickly learned, pretty much nothing in law is an absolute rule. Judges love making their exceptions.
kinda the entire point of common law, just a vibes legal system designed around enabling english aristocrats to hold onto their power longer
That’s part for sure, but I’d argue that it’s more often lawmakers trying to phrase things to specifically carve out loopholes their donors want to exploit. Then judges having to work through the bullshit to determine what it actually says and whether those specific circumstances are covered.
That example I have above for instance, should the body not be admissible as evidence just because the killer told Police where it was a few hours before they would have found it anyway?
that assumes you can prove it, and that the system gives a shit.
The idea behind GrayKey Preserve and Evidence Preservation Mode is to keep the iPhone in a state known as After First Unlock, or AFU.
They don’t need to access before a warrant. The whole point of this new method is to keep the phone from going into BFU so they can pull the data off later, when a warrant comes through. (Or again, on the record)
If only we could see what apple was doing under the hood. If only companies that constantly pat themselves on the back for being secure could be open source.
Wasn’t there a vulnerability in the chips apple uses for USB?
For chips released in 2018 and 2019. To the best of my knowledge anything newer than a iPhone 11 nothing has yet been found and announced. So 7 years ago. That said you know that if there is some unannounced vulnerability and some spyware company or government knows of it, they are not going to report it.
So, y’all gonna switch to GrapheneOS now?
The companies who sell these bypass devices spend time on graphene too, don’t worry.
The price of iOS exploits would suggest Apple’s doing a pretty good job in this area.
I’m sure they do spend time on Graphene OS, but that’s not the same as being successful in cracking it.
Most of these exploits involve side channel attacks which are much closer to the hardware. Graphene definitely does a lot more to make that difficult, but typically devices are getting pwned within a few months even with graphene.
Having graphene on relatively new hardware is a really good practice, but it obviously isn’t a complete security posture on its own. Not having sensitive, compromising or incriminating stuff on your daily carry phone is much more important.
I remember one cybersec company got hit with an internal communications leak that suggested they could get into any GrapheneOS device before the Pixel 9, AFU or BFU. They were still having trouble with BFU Pixel 9. But this was a year or two ago.
Device wipe before capture/seizure seems to be the highest guarantee.
As someone with a Pixel 8 running Graphene OS, I’d love for you to cite the source so I could read it.
https://www.androidauthority.com/cellebrite-leak-google-pixel-grapheneos-security-3611794/
Appears I was partially misremembering, they were able to get into older phones on older security patches.
I wonder if they spend time on Linux mobile devices, considering how niche they are.
But then again, security through obscurity is not real security, and I’m not aware of any reasonable way to run something like QubesOS on a phone in any way that would be usable.
I’m sure they spend time on Linux in general, since it is the most common operating system (and includes Android, so even bigger). I doubt they spend much, if any, effort on the specific subset of systems that make a Linux phone different from another Linux device.
Smartphones had been vulnerable for pretty much it’s entire existence, and most of time, while true software do play a role, it’s been more about stuff such as bootloader exploits.
Sadly Linux phones on it’s state are insecure by design.
They don’t have to stay insecure by design. It just requires purpose-built hardware.
Does graphite disable faceid and touchid?
On Graphene, Lockdown mode disables biometric login until you unlock it manually with your passcode, but the device is still in the less secure AFU (After First Unlock) state.
You can also set it to restart the device if not used within a set time period. Various settings from 10 minutes to 72 hours. So if you haven’t touched your device within that time period, it will shutdown and restart, going back to the more secure BFU (Before First Unlock) state.
That’s no different than iOS in that regard then (minus the configurable restart time). But that’s about what I’d expect, not sure you could have a useable phone if it didn’t have an AFU state at all.
deleted by creator
It’s almost like there’s only two ways to actually accomplish this type of thing. You can do the same basic thing but use different names to differentiate where/how that function is used.
Lock it and require the passcode where the decryption key is still in memory because the system is running, or shutdown/restart the device so the decryption key isn’t in memory anymore.
What would a third option even look like?
Removed by mod
Are you. Understanding a standard shut down does what you want?
What are you babbling about? Of course, that’s why I already said it. Twice.
Both comments I have made in thi thread have mentioned shutting down or restarting the device to put it back into a BFU state.
Since you clearly didn’t actually read the comments you are replying to… I’ll include the relevant parts from both below:
You can also set it to restart the device if not used within a set time period. Various settings from 10 minutes to 72 hours. So if you haven’t touched your device within that time period, it will shutdown and restart, going back to the more secure BFU (Before First Unlock) state.
Lock it and require the passcode where the decryption key is still in memory because the system is running, or shutdown/restart the device so the decryption key isn’t in memory anymore.
You still didn’t answer the question I posed though… before replying in way that seems to indicate you either can’t, or refuse to actually read before responding condescendingly.
Since you seem to think there should be another choice instead of doing the same two things to protect the device/data… what would a third option look like? Other than locking and disabling biometrics, or a shutdown/restart putting the device back into BFU mode.
Or are you just stuck thinking a shutdown and reboot are technically different things? Even though that makes no difference here since they both put a device into BFU.
Ahh, yes. The old “I use this thing and because I use this thing it must be better than your thing.”
Well, I expect this to be patched asap now that it has leaked. Apple has been quick to patch things when such leaks happen. Hopefully that’s the case here too.
Apple probably gave them the backdoor
On the assumption Apple wants to facilitate access to such authorities, were I Apple, I’d have either already made available redundant backdoor so disabling any one wouldn’t be a problem; or, I’d have others ready to be opened when I need to shut others down.
you cant make a bank vault out of doors.
they’re quick IF we always accept that they really did find out about it at the same time as everyone else.
The government can do anything they want to you. We are cattle.
Bring back the power hard switch. Problem solved.
And a removable battery. One I can guarantee the battery will pop off if I accidentally drop it while my hands are in the air.
This is actually an interesting idea. SpikeBoot. An feature which reboots the phone if it gets dropped and not unlocked in 30s.
Much more practical than the iPhone feature that calls 911 if you fall.
Lol, they’ve been doing this for years. Apple was compromised a long time ago.
deleted by creator
but that’s only needed when apple doesn’t give access to the phone which they just do when there’s a warrant
cops have no problems getting in iphones there’s just a little delay sometimes
they still have all the hacking technology too
[citation needed]
Apple’s been pretty good at patching vulnerabilities and a pain in the ass for cops trying to get into phones, with the only actually better option being GrapheneOS.
I get it from watching crime interrogations.
When they get the warrant they’re allowed to ask for passwords but they don’t need them to read everything on the phone. It goes to the lab.
If it’s in the cloud then apple reports the crimes anyway.
When they get the warrant they’re allowed to ask for passwords…
Ok; key word is ask. I don’t have to tell. Or what if I’ve genuinely forgotten it?
… but they don’t need them to read everything on the phone. It goes to the lab.
So then why ask?
it’s cheaper to get the passwords. They’re allowed to ask but don’t need them. That’s why they ask. You don’t have to give the passwords because they’re allowed to ask. People often misunderstand and think they have to give the passwords because there’s a warrant but you don’t have to. They take the computer stuff to the lab anyway and the tech companies give access to the cloud stuff.
Ok; please provide recent documentation that the police, “…have no problems getting into iPhones.”
I don’t have a phone.
So you dont play Diablo?
Never met the guy.
I understood that reference
Yes you do
No, I don’t
Yes, you do
Have you ever talked to me on the phone?
AND
Do I have a phone?
Is the same answer for both questions.
We talked on the phone last night!
I don’t have a phone, that wasn’t me.
Cops in USA? Is this only for USA? If yes, I don’t care. The article tittle suggests police all over the world.
Is there a different iPhone outside of the us?
yes, they are different and have to confirm to local laws
They would still carry the exact sake vulnerabilities.
