Apple's 'USB Restricted Mode' closes security loophole on locked iPhones, thwarting police data extraction

The new software feature will by default protect against iPhone-hacking tool GrayKey

Apple will change the default settings of its iPhone to stop hackers from accessing information through the phones' Lightning port and as a result, will cut off a loophole used by the police to access protected iPhone data.

The Cupertino company says the changes are part of its regular security updates and its only aim is to provide better security for iPhone users, denying the changes were designed to stop US law enforcement from gaining access.

"We're constantly strengthening the security protections in every Apple product to help customers defend against hackers, identify thieves and intrusions into their personal data," Apple said in a statement.

"We have the greatest respect for law enforcement, and we don't design our security improvements to frustrate their efforts to do their jobs."

Advertisement
Advertisement - Article continues below

The new default settings will have a feature Apple call a "USB restricted mode" which has been present in developer betas for both iOS 12 and iOS 11.4.1. With this feature, all communication through a Lightning port to USB connection will be blocked on unlocked and dormant devices.

US law enforcement uses a tool called a GrayKey, which is a small box with two Lightning cables that can unlock password encryptions on iPhones and extract data from Cupertino's phones.  

The box downloads the contents of the device to an interface. However, the new feature will render these hacking tools useless.

The loophole applies to countries outside the US, including the UK, but its likely to impact the FBI who have an ongoing privacy battle with Apple which refused to help the police crack into an iPhone used by a gunman in the San Bernardino shootings in December 2015 which saw 14 people fatally shot. 

A similar situation arose in Devin Kelley shot 26 people and wounded 20 others in the Sutherland Springs, Texas shootings of November 2017. In this case, the police decided not to contact Apple for help initially and sent the shooter's iPhone SE to its own labs.

Apple said it immediately contacted the FBI after learning about the incident but it was instead they were met with a search warrant for the data held it held as well as for any files stored on another phone found near Kelley's body.

"We offered assistance and said we would expedite our response to any legal process they send us," Apple said at the time, noting that the efforts of the FBI made it more difficult to access the data on the iPhone.

Picture: Shutterstock - Malwarebytes Labs

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Most Popular

Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/cloud/amazon-web-services-aws/354223/what-to-expect-from-aws-reinvent-2019
Amazon Web Services (AWS)

What to expect from AWS Re:Invent 2019

29 Nov 2019
Visit/business/business-strategy/354252/huawei-takes-the-us-trade-sanctions-into-its-own-hands
Business strategy

Huawei takes the US trade sanctions into its own hands

3 Dec 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019