SN

私人新聞日報Private News Daily

Private use only · Michael SoMichael So

本頁為 Michael So 私人自用,非公開發佈,亦非任何機構之產品。 This page is for the personal use of Michael So only. It is not a public release and is not a product of any organisation.

深度分析Analysis

取證公司稱可繞過蘋果手機自動重啟,凍結保留資料The forensic company claims it can bypass automatic restarts on Apple phones and freeze the preserved data.

404 Media ·2026-10-01

404 Media 取得一段執法專用示範影片,顯示 Magnet Forensics 開發新硬體 GrayKey Preserve 及證據儲存模式。做法係取得初步許可權後切斷藍芽、無線及流動網路,把手機鎖死喺已解鎖狀態,即使斷電或重啟都唔會消失。有研究蘋果手機安全嘅學者形容係遊戲規則改變者。404 Media obtained a law enforcement demonstration video showing Magnet Forensics developing new hardware GrayKey Preserve and an evidence preservation mode. The method is to first gain initial access, then disable Bluetooth, wireless, and mobile networks, locking the phone in an unlocked state so that it does not disappear even if powered off or restarted. Researchers studying Apple phone security describe it as a game-changer.

A company that makes phone hacking devices claims to have developed a solution that freezes iPhones in a state that lets cops more easily access sensitive data inside them, according to a video obtained by 404 Media.

This is the latest salvo in the never-ending battle between Apple and companies that help cops — sometimes those in authoritarian countries — break into iPhones.

In November 2024, 404 Media revealed Apple quietly introduced a new feature in iOS that automatically reboots an iPhone that has not been unlocked for 72 hours. The idea behind this so-called “inactivity reboot” is to revert the phone to a state that makes it harder for police to break into the device, and thus extract sensitive data from it with forensics technology.

At the time of Apple’s change, law enforcement agents expressed concern about this new feature, given that oftentimes they can’t immediately try to break into iPhones that have been seized. That could be because police are still waiting for a court authorization to do so, or there is simply a backlog of devices to unlock, for example.

The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode, according to the video.

A company that makes phone hacking devices claims to have developed a solution that freezes iPhones in a state that allows police to more easily access sensitive data inside them, according to a video obtained by 404 Media.

This is the latest salvo in the never-ending battle between Apple and companies that help cops — sometimes those in authoritarian countries — break into iPhones.

In November 2024, 404 Media revealed that Apple quietly introduced a new feature in iOS that automatically reboots an iPhone that has not been unlocked for 72 hours. The idea behind this so-called “inactivity reboot” is to revert the phone to a state that makes it harder for police to break into the device and extract sensitive data from it using forensic technology.

At the time of Apple’s change, law enforcement agents expressed concern about this new feature, because often they cannot immediately attempt to break into the iPhones that have been seized. This may be because the police are still waiting for court authorization to do so, or simply because there is a backlog of devices to unlock, for example.

The new technology to bypass inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. According to the video, Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode.

原文出處:Source: 404 Media ↗