search

kpwn / yalu102

incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
Do What The F*ck You Want To Public License
1.77k stars 554 forks source link

Acessing filesystem when the iPhone is locked #450

Open ValHook opened 7 years ago

ValHook commented 7 years ago

To my understanding some iPhone files are encrypted by a filekey stored in filesystem metadata and this key derives from a Class key that derives from the passcode.

When I connect through ssh to my iPhone when it is locked, how come can I read raw content of my files from the user partition? I would assume that the Class key is not available to the OS and therefore simple programs like cat who use simple read syscalls would not be able to retrieve the content of my files.

I know it is not a code related issue but I'd like to know how come I can read my files when my phone is locked. Does yalu remove all this kind of encryption system?

akachronix commented 7 years ago

To be honest, I don't really know because I don't care enough to loom at the source code again.

On Feb 28, 2017, at 8:47 PM, Valentin Mercier notifications@github.com wrote:

To my understanding some iPhone files are encrypted by a filekey stored in filesystem metadata and this key derives from a Class key that derives from the passcode.

When I connect through ssh to my iPhone when it is locked, how come can I read raw content of my files from the user partition? I would assume that the Class key is not available to the OS and therefore simple programs like cat who use simple read syscalls would not be able to retrieve the content of my files.

I know it is not a code related issue but I'd like to know how come I can read my files when my phone is locked. Does yalu remove all this kind of encryption system?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

ipadkid358 commented 7 years ago

@akachronix Why bother responding?

@ValHook These class keys you're referring to only apply when a device is rebooted (that time when it says "Device requires a passcode"). If you have any devices with untethered jailbreaks, you should be able to easily verify this.