iOS 11.4.1 it has a very important new function designed to secure iPhone, iPad, and iPod Touches, and in the morning we talked about it and what it offers. The Apple company implemented it to prevent the breaking of access codes by unauthorized persons, implicitly by the authorities, but it seems that it is not really that well thought out.
iOS 11.4.1 blocks access to the Lightning port of iDevices if they have not been unlocked for an hour, but a simple accessory sold, even by Apple, cancels the security measure. More precisely, those who managed to remove the new security system from iOS 11.4 say that a Lightning adapter for connecting cameras or SD cards allows the connection with the phone to be kept active even if more than an hour has passed.
iOS 11.4.1: MAJOR Security feature was BROKEN
iOS 11.4.1 can be prevented from activating the security system implemented by Apple if an accessory is connected to it less than an hour after the last unlock, the access code can thus be broken. The procedure is very simple, the police only have to be vigilant and connect the accessory to the terminal to prevent its security after an hour.
"What we discovered is that iOS will reset the USB Restrictive Mode countdown timer even if one connects the iPhone to an untrusted USB accessory, one that has never been paired to the iPhone before. Either way, since iOS 11.4, the speed of GrayKey (and probably its competitors) is limited to slow recovery rates of one passcode in 10 minutes. While this allows breaking 4-digit passcodes in reasonable time (about two months worst-case scenario), 6-digit passcodes already make little sense to attack unless one has a custom dictionary, and 6 digits is the default length for the passcode suggested by iOS.”
iOS 11.4 still brings a very good change, more precisely, brute force attacks can be made much more difficult, that is, an attempt to enter a password can only be entered once every 10 minutes. This greatly increases the time required to crack the passcode of an iPhone or an iPad tablet, the creators of GrayKey devices recognizing the problem.
