craig6928 wrote:
the only way your getting the data from the iphone is repairing the screen and using the correct passcode
they use a very high encryption
if you mess with it and try and enter it to many times
good bye data automatic wipes
also replacing the NAND chip into another iPhone will not work
as it works of a id code system which you can not copy
this ties information on the iphone to everything a person does on there phone and emails
example below
2b6f0cc904d137be2e1730235f5664094b831186.
welcome to big brother knowing everyhing you do on your iphone
Well this "id code" example.. is this not just the GUID of the phone/user? Windows has this type of thing in the NTFS filesystem, we used to change it when the network went wonky thinking it was a name collision or something using the tool from Mark Russinovich(sysinternals) newsid.exe.. till it was kind of debunked as being any cause of any shenanigans.
I am not sure how big brother comes into it.
anyway this is an old thread, but for some reason it came up today in the unread posts?
I was searching for a specific NAND thing and found this at the same time so thought it may be useful for someone.
Code:
iOS Data Recovery Using Low-Level NAND Images
Sept.-Oct. 2013 (vol. 11 no. 5)
http://www.computer.org/csdl/mags/sp/2013/05/msp2013050049-abs.htmlCode:
ABSTRACT:
To recover erased data from iOS devices, specialists use a brute-force method to decrypt the passwords, then extract data images directly from low-level NAND storage and analyze the redundancy caused by its file translation layer (FTL) behavior. iOS devices' garbage collection strategy significantly affects data recovery.
another good resource:
iOS Forensic Investigative Methods
http://www.zdziarski.com/blog/wp-content/uploads/2013/05/iOS-Forensic-Investigative-Methods.pdf