Secure Reset

Let's assume my iPhone has been hacked. Maybe I had an old IOS with a bug or maybe it's something new but somebody installed something like a rootkit on it.

How can you make sure the phone is clean again by wiping it? How would you know the phone does not just act as if it got wiped?

Can an iPhone be reset so it absolutely safe nothing bad is still on it? (Assuming no hardware modifications and Apple playing by the rules and firmware signatures have not been compromised)

I'm asking in the context that even keyboard firmware has been used in the past to reinstall rootkits after the mac has been wiped for example. Seems really hard to be sure of anything these days ...

Thanks for the help guys!

Posted on Dec 24, 2022 11:08 AM

18 replies

Dec 26, 2022 9:55 AM in response to m.schwaller

m.schwaller wrote:

After some research and the input of the members the conclusion is the following:

It is not possible to securely reset an iPhone.

Factory Reset on the device itself is the only option and if your phone is indeed hacked you cannot trust that function anymore.

Nonsense.

m.schwaller Author

Level 1

11 points

Dec 26, 2022 10:08 AM in response to IdrisSeabright

Sadly I can't put much trust in your "believe in Apple magic". Of course i'm very open to information how you think a button on a hacked phone could be trusted? Did you notice the Jailbreaks for IOS 15 and 16 were just released? Are you just offended that a very secure device like the iPhone has still miles to go in security?

Some of us need more than an "Apple Privacy Slogan" to design secure processes for our customers etc. Things like that are start: Secure Enclave Processor security certifications – Apple Support (UK) Would love to see a CC EAL7 here some day :-)

m.schwaller Author

Level 1

11 points

Dec 26, 2022 1:09 PM in response to Lawrence Finch

Thanks man - in the meantime i came to the same conclusion despite the "help" of others ;-) Glad to see there some people around that know their stuff! Sure would be nice to find some documentation on how it is prevented that the device just acts like being in DFU mode but its a good start I think :-)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Secure Reset