Comment on Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps

<- View Parent
xthexder@l.sw0.com ⁨4⁩ ⁨days⁩ ago

That’s for breaking a bcrypt hash, and I don’t believe there’s any way to extract the pin hash from a phone since it happens inside a secure hardware layer (like a TPM). If it is possible, the attacker would most likely have to physically destroy your phone to get at it. To bruteforce a 4 digit pin with retry lockout timers, it takes 16 hours to try all combinations, according to a tool I found that auto-enters pins via usb keyboard emulation.

source
Sort:hotnewtop