Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Aggregated disk writes

i have found the text below in iPhone analytics data. What does it mean please?

{"app_name":"aggregated","app_version":"","bug_type":"145","timestamp":"2020-02-06 08:20:33.14 +0300","os_version":"iPhone OS 13.3.1 (17D50)","incident_id":"34880E87-9A67-4A16-A17A-94D0369275CF","slice_uuid":"B722CBE6-961A-3300-80E4-2CC18CCFC143","build_version":"","is_first_party":true,"share_with_app_devs":true,"name":"aggregated"}

Date/Time: 2020-02-05 21:01:20 +0300

End time: 2020-02-06 08:20:32 +0300

OS Version: iPhone OS 13.3.1 (Build 17D50)

Architecture: arm64e

Report Version: 29

Incident Identifier: 34880E87-9A67-4A16-A17A-94D0369275CF


Data Source: Microstackshots

Shared Cache: 0x1a4e8000 A77981DC-1632-354B-978B-380DC657D1E6

Shared Cache: 0x24988000 A77981DC-1632-354B-978B-380DC657D1E6


Command: aggregated

Path: /System/Library/PrivateFrameworks/AggregateDictionary.framework/Support/aggregated

Version: ??? (???)

PID: 1811


Event: disk writes

Action taken: none

Writes: 1073.75 MB of file backed memory dirtied over 40752 seconds (26.35 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds

Writes limit: 1073.74 MB

Limit duration: 86400s

Writes caused: 1073.75 MB

Writes duration: 40752s

Duration: 40752.35s

Duration Sampled: 40679.60s

Steps: 263 ( (10.49 MB/step))


Hardware model: iPhone12,1

Active cpus: 6

iPhone 11, iOS 13

Posted on Feb 7, 2020 5:50 PM

Reply
Question marked as Best reply

Posted on May 1, 2020 3:27 AM

Let me preface all of this by saying something I've wanted to say for over a year. You people on these forums who give snide, sarcastic responses to others who come here for help (as if they're paranoid or wanting a problem) should be ashamed of yourselves. This stuff is REAL. Yes, there are some paranoid people out there, but when you've had your entire electronic world taken over and you discover that people have been doing things you didn't even know was possible it tends to make you a little paranoid. 

Your situation sounds exactly like my scenario-except I know who is behind my issue. The capabilities that can be enabled by a malicious developer are insane. And the lack of regulation with enterprise software is maddening. When the wrong people get a hold of it (like the culprit behind my issue, who works in IT and used a copy from his work)...they have complete, hidden control over your devices. It doesn't matter how many times you wipe your devices-it is designed to persist. The person "helping" me installed enterprise software on my laptop without my knowledge. He created a hidden administrator profile and my entire system was a remote desktop controlled by him. There are menu items I am blocked from seeing, some settings I'm unable to change and even though my phone wasn't paired with the laptop (I didn't even have itunes on the computer) everything was syncing to it. He has been able to control my home network, despite my purchasing a new router. I spent MULTIPLE hours/days getting help from Microsoft and Apple- but I never got help from anyone skilled enough to fully (and permanently) remove the management tools. Microsoft remoted into my system and uncovered and deleted the files and secret administrator profile but they didn't go far enough. The stalker actually remoted into my system and brought up some sort of chat window and taunted me, saying it would always come back because it was in the registry. I've been told by an IT person at my work that I'll have to get new devices (laptop and phone) and abandon my Microsoft and Apple ID's to be free of it. The software companies make most of their money from enterprise/group policy clients. Every business out there uses management software-which I understand. But it is infuriating to have lost control of my entire electronic existence on my personal devices that I paid good money for. Software I purchased and basically my whole life.  All pictures of my children, documents, the email address I've always used (for every account, including my banking and utilities) are no longer in my control. I never would have believed it would be so difficult to get help for something like this. I now realize I never will. I never gave anyone my passwords and have always been hypervigilant about protecting my network. I've always kept my software and security up to date.

Similar questions

95 replies

May 1, 2020 1:59 PM in response to Bugshappen

Obviously you have made up your mind (incorrectly) so yes, I will stop commenting.


But if you do a DFU restore EVERYTHING is removed, including all jailbreaks. And if you used a new Apple ID with a strong password on it there is no way, not through the cloud, not through your phone number, that he can do anything to your iPhone.

But maybe in your world you think he can.


Good luck.

May 2, 2020 8:35 PM in response to Cr21h

I have this same problem. I have the same phone number. Two police reports & one that went to the fbi verifying hack. I also have a son who was sexually abused by biological mother’s boyfriend with an IT background. Have sent numerous reports but yet NOTHING has been done to fix. Makes one wonder who is working with who? Hackers underground who abuse children are allowed to continually do this and we have no privacy even though we trust apple to do the right thing

May 4, 2020 3:59 PM in response to DARKG8R

I want to post an update on my situation. I have an Disk Writes occurring today. This time, it is Safari Disk Writes and references power, sql, etc. I've shut down cable service already so this, is not a result of that. Three Apple devices are being controlled by someone who has access to my AppleId which I never share, and access to unique device information which I have never shared with anyone. Additionally, it appears they have not only downgraded ios version, but they have ALSO downgraded my device to an iphone 7 plus! Multiple indicators, for example AppleTv on phone now is a small screen as if I have the white band on top and bottom where fingerprint and Home would be.


Also, prevalent in all these months, when my device was only 8 months, is, there is

1) schedule callback taking place, importantly, 2) CommCenterEntitlementRequest that consistently appears to be changing my location or routing my service.

3) Something to do Sqllite3

To add further to the nvram ota I spoke of in my other post on this thread, there was another mount volume created.


Atop my initial Q's I want to know where my icloud server is based. What state, do my files reside? Is it supposed to be close and in region where one lives? Opened it?.....






May 4, 2020 7:37 PM in response to Jagcresmur

See, the problem here is one thing seems to affect the other. AND I think there are at least two seperate things going on. Cable co appears to be doing MITM too. I paid for additional security from them too until they began giving it free. My question, is what device info can a cable co get? Did they take the phone number, route it in their service, link to my AppleId and create an MDM since they also sell Apple products and then downgrade the OS and ios? I rarely ever connected to wifi too. But that doesn't explain the nvram ota. Also, in my case, I think a neighbor who has Apple prods too, might have major issues. She showed me a slew of phone numbers in her contacts she said she didnt put there. Apple needs to find a way to not allow priveluge access into any devixe info. It should not be granted as it appears it was to I don't know who. Bottom line, I think there is monitoring as well as illegal phone/internet activity taking place, using my device. Consider, it has to be placed somehow and if the phone has never been left alone and only connected for a restore and hardware check at Apple, and the ither devices are minths old and barely used, I cannot decipher it quite yet but have a reasonable sequence of things. I have to check receipt dates.


As soon as my device turned one year, all **** broke loose. Just before, there were numerous queries in log for Account info and queries also came from Appstore? I did inform Support. Wasn't completely sure if it had anything to do with connecting to our Appletv.

May 11, 2020 5:47 AM in response to Community User

One more thing. When I log in to my AppleId on my phone, I no longer receive verification codes. It just logs me right in. And, in calling Apple support at the mid April, it also stopped sending me device verification. So since my phone was 8 months old til now, it's all good???? I hate being lied to. That to me is the worst of human character traits.

May 11, 2020 5:38 PM in response to Community User

Here your not signed in, and if your location services our off as well as other services google by default has to guess your location by the information it is receiving from your browser and or phone.

so your WebKit might me using Something like

“Safari 13.1 Apple WebKit MAC OS version 13 like gecko”

But your using an iPhone. That’s your browser adjusting to googles interface.

Safari comes equipped I believe with 6 different web kits.


So it calculates your location by data it receives from you and data it collects by exact or similar searches across its data base. So based on tour search this is your location it’s just guessing. Not accurate and nothing to be to concerned about. There’s so much internet junk out there your just spinning in circles trying to combat it. Don’t use java, and disable all cookies and clear cookies and cache daily etc.

May 12, 2020 1:19 AM in response to Cr21h

DarkG8r, thanks for your reply. Pinpointed yes. I am a female, mother, victim, witness, not criminal.


Update: Appears my iphone has two seperate accounts going on mine and another with my initials.


Q for all: I want to reset my end to end encryption but absolutely none of the various ways, work. Nothing is allowing me to reset end to end encryption. How else can I get this done?


Thanks in advance.

May 26, 2020 3:57 PM in response to Cr21h

Update on my situation. More happened but this is just for yesterday on my phone. Four stacks logs generated. Three in the afternoon during in the middle of a phone call and the fourth around 8p. Some explanation from what I know occurred described after examples. Logs heavy for throttling Sflags throttlng, camera, voice, video, Camin, mail, something called utune, all forms network, VM, skywalk doorbells and if_nets and controllers. Some regarding Apple account.


Example: ifnet_start_utune1, much regarding wifi and vm.

Example: vm_io_reprioritize thread, hardware, vm_swapfile_create, many skywalk doorbells


Example: skywalk_doorbell_en0_tx, skywalk_doorbell_pdo_ip2_tx, AppleICA60, ioAccelFenceMachine, AppleEmbeddedGPSControl


Saturday installed H--ulu app. Login as normal shows location of login. It shows me out if state. Multiple logins to other accounts unrelated also show me out of state (I'm not in that state). This has been a problem for at least 8 months. Someone changed my service to be routed through specific network servers coming from west coast while I am in the northeast. From there, they can manipulate anything sunce they clearly cobtrol said servers. Contracts, devices, Apple accounts and usage all opened/purchases in Boston, MA area.

Saturday - Notified Apple of wrong state situation again.

Yesterday, Monday, log into the H app again, this time it sends my FULL ip and NO location. Security issue. I contact H via chat and explain my account was changed between Saturday evening- Monday afternoon. This occurs on backend. Customer can't do it. This is a security issue aka hackers. They fix it to report as normal. Then after, I made a call, these Stacks logs occurred. In less than 1 1/2 hrs of me discovering my H account was altered to send my full ip to sit on an unencrypted Apple server, and me contacting them, the Stacks occurred.


The reason ut has me un a dufferant State, is because they MOVED both Cell and icloud server to west coast. Clearly shown by my billing cycle being changed from 11:59p to 2:59am AND previously having done Trace Routes a few times. Each time same route from west coast to TX or Chicago then Rhode Island. Rhode Island towers used by ATT no my service and owned by individuals in the west coast. I've checked and all major cell networks less than 2 miles of my location. My service will not use any of them.


Bottom line: I think the criminal needed my new ip address and used an insider in H. Really, what are the chances of me downloading H, all normal, changes made, then an hour adter I login again and get email notice, I get these Stacks that have extensive throttling and promotions when I'm just on a phone call?

May 29, 2020 5:41 AM in response to Cr21h

I too have been hijacked and held hostage. Happened over 10 years ago and is still going on. Multiple carriers 100 different phones Too many email accounts to even count or remember. . Can’t stop it. I have discovered a lot of info though

using LibTerm I land yandex I’ve found my os matches the wiki iPhone os.

it sends streaming audio from mic and video from camera. All messages from all accounts are wrapped in a bundled and sent to sociopath ex and who ever she had help her from China to take over...... let’s see!!!

22 laptops, 11 desktops, countless androids, tablets, iPhones, iMacs , business laser printers, printers, raspberry pi’s, 5 smart TVs, 3 DVD players, couple tomtoms, my automotive scanner, electronic picture frames, commercial ice machine , hundreds of sd cards thumb drives external hard drives.

a fortune in electronics. Just purchased 2 more iPhones yesterday with different numbers and new SIM cards. No email set up yet. I think one has even hijacked already. Haven’t had time to investigate.


May 29, 2020 5:53 AM in response to GTOMkke

Unfortunately you are on your own when it comes to research and answers. Most folks are dumb as bricks and believe what they are told.

yes, you have been hijacked. It’s very easy to do and very common. If you want to pursue the invisible bunny, get a good browser with a translater.

start on Baidu

CSDN

F2c

yandex “Russia”

this is where most of the script files come from. communication And information is easily obtained but it’s a pain translating. Once you have it set up it’s easier until your “developer” decides to remove what you’ve done in feeble efforts to iTunes it out.

best thing to do is ignore it.

tape over your cameras and don’t say anything near your phone that you wouldn’t say to your mother. 11 years I’ve wasted

May 29, 2020 2:10 PM in response to Community User

Correction: since 13.0 end of September beginning October 2019, someone has been turning off or deleting my backups from icloud server. Noticed backup deletions or turned off, after 13.0 when I saw a restore done after I updated and before Apple removed signing. Unable to restore device to know good. Then again after Apple restored iphone and again after 13.4 when they changed root certificates. They also must be using the esim which, how could they get that info?

May 29, 2020 4:38 PM in response to Jagcresmur

I have the answers. The date is very significant. I’m driving.

Apple don’t care. They have bet to great lengths to make people believe their lies.

Apple is more vulnerable than most os.

the tv app has a cve. I forget the number. A cve is a fault or a defect in which it can be exploited. There are many weaknesses. That’s an easy one. You are hacked my friend. Your device sends audio and video in real time to your attacker. Most likely it’s someone very close to you. Your device or I’m my case all my devices are nothing but tracking and spy devices that just so happen to e used as a telephone.

there’s a lot more to this but I’m driving home. I’ll reply more later.

May 29, 2020 5:23 PM in response to Community User

IDS|株式会社アイディエス

idsma.com

医療用「検体搬送システム」の専門企業 IDS(株式会社アイディエス)の企業サイトです。

idsma.com at WI. IDS|株式会社アイディエス

website.informer.com › idsma.com

WWW.IDSMA.COM Visit www.idsma.com. General Info. Stats & Details Whois IP Whois Expand all blocks. IDS|株式会社アイディエス. 医療用「検体搬送システム」の専門企業 IDS(株式会社アイディエス)の企業サイトです。 Keywords: ids, 血液検査, 株式会社アイディーエス, 分注, アイディエス, 検体搬送, ids japan, ids lab. Mar 20, 2020. Hide


im not sure. I’m exhausted from a day of **** on a hot roof. Translate some of that and see if it helps.

IDSMA is New to me. May have something to do with this discussion board. I’m new to it also

May 29, 2020 6:27 PM in response to GTOMkke

Apple store

get libterm


type help. See if dig command is there.

if not type

package list

to see available packages.

install any that are network related that may contain dig


at the terminal type cd /

Hit enter key

then type:

dig

hit enter


you can try to dig different directories but I don’t think it will matter.


you will get the ip address of your “server”

geo locate IP Address don’t trust first geo locate. Do several different ones.

do a who is on it

trace ip


get networking utility tools from Apple store.

send ascii messages to IP address and port number threatening their well existence. It’s kinda fun



/dev

/etc

/usr

/var

/proc

/lib

/run

/boot




Aggregated disk writes

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.