Find my iPhone Activation Lock

Question

Level 1

14 points

Find my iPhone Activation Lock

Ok so I don't really have a problem, only a question. Let's say that I lose my iPhone and some thief steals it (note that my iPhone has Find My iPhone enabled). That thief realizes I have a passcode on my iPhone, but wants access to the iPhone (whether that be with all my data on it, or with my iPhone restored to factory defaults, doesn't matter which). So he DOES NOT keep trying at the passcode (meaning he doesn't enter the wrong passcode too many times). The thief then takes my stolen iPhone and plugs it into his computer and tries to restore it with DFU mode or with recovery mode (holding down the home button while the device is powered off and then plugging it into iTunes) Now I know that restoring an iPhone normally with a computer you have previously synced to will require you to manually disable Find My iPhone on the iPhone, but I also know that using DFU mode or recovery mode will bypass this step (not bypass activation lock, only bypass iTunes' demand to turn off FMiP. So the thief proceeds to erase my iPhone and restores it to factory defaults.

1. What will he/she find now when he/she powers on my iPhone?? (in all possibilities of erasing the iPhone, meaning DFU mode/recovery mode, regular restore, third party software etc.)

2. Is there any way to bypass FMiP Activation Lock

3. Once on the FMiP activation lock screen after restoring a device, can someone bypass AL if they have my Apple ID and password

4. Just how secure is Apple's device theft prevention techniques

Thanks all for your answers!!
~ Capt Inc - April 17, 2017

iPhone 6s, iOS 10.3.1

Posted on Apr 17, 2017 7:36 AM

Reply

Answer 1

KiltedTim

Level 10

229,026 points

Apr 17, 2017 7:46 AM in response to Capt Inc

1 They will be presented with an activation locked phone that is devoid of data.

2 No. there is no way to bypass the activation lock.

3 Yes. If they have your iCloud credentials, they can get past it. That is not "bypassing" Activation lock. It's using the proper credentials to get past it.

4 It is as secure as you are. If you get conned into giving up your account credentials to the thief, then the activation lock doesn't do anything at all for you. If you don't do that, then it is completely secure.

Reply

Answer 2

javaliga

Level 10

120,179 points

Apr 17, 2017 7:52 AM in response to Capt Inc

1. The thief will still be required to enter your Apple ID & password to use your iPhone: Use Mobile Device Management and Find My iPhone Activation Lock - Apple Support As that article says: it requires the user's Apple ID and password before anyone can turn off Find My iPhone, erase the device, or reactivate and use the device.

2. As far as I know, there is no way for a common thief to bypass the Activation Lock Turn off Find My iPhone Activation Lock - Apple Support

3. Yes, they can bypass it if they know your Apple ID & password unless you also have two factor authentication also enabled: Two-factor authentication for Apple ID - Apple Support

4. Well, it is my understanding that the FBI spent well over a million dollars to bypass the Activation Lock on an iPhone linked to a suspected terrorist and I'm not sure that method (whatever it was) can still be used today.

Reply

Answer 3

KiltedTim

Level 10

229,026 points

Apr 17, 2017 7:59 AM in response to javaliga

javaliga wrote:

4. Well, it is my understanding that the FBI spent well over a million dollars to bypass the Activation Lock on an iPhone linked to a suspected terrorist and I'm not sure that method (whatever it was) can still be used today.

Just FYI, it wasn't the activation lock they were trying to bypass, it was the lock screen passcode. What they finally came up with was a hardware solution that allowed them to brute force passcode entry on the device without triggering the auto-erase or delays between entries. That method will NOT work on any newer iPhones. It was a hardware specific bypass for that specific model of phone and earlier.

Reply

Answer 4

Capt Inc Author

Level 1

14 points

Apr 17, 2017 8:02 AM in response to javaliga

Yes I heard a LOT about the San Bernadino iPhone terrorist case. Actually got pretty involved with the news about it. From what I know, a private decryption company offered to unlock the iPhone 5C, but the FBI told no one else specifically how it was done. No doubt Apple did something to prevent this from happening in the future. I am all for unlocking a terrorist's phone and finding out what they did/who they were. I am all for any techniques to stop terrorism, but the down-the-line implications that would have on the rest of the world (not just the Apple community) are just too severe. If Apple did/could unlock anyone's iPhone, then that would raise questions on just how secure the average job-holding person is, and cause questions on who has the power to unlock and who's phone should be unlocked. And then the biggest threat is that some cyber hacker could get a hold of the decryption tech and use it to exploit and rob people. Ugh......the many problems our world has.

Reply

Answer 5

Apr 17, 2017 8:04 AM in response to Capt Inc

One additional point. There is a service for thieves that will send very official looking texts to your phone number (remember, they know it because it is on your SIM card) saying your phone has been found, just log in to this link to track it. Brian Krebs wrote about it a while ago: https://krebsonsecurity.com/2017/03/if-your-iphone-is-stolen-these-guys-may-try- to-iphish-you/

Reply

Answer 6

Capt Inc Author

Level 1

14 points

Apr 17, 2017 7:51 AM in response to KiltedTim

Ok thx. And no I will never ever give out any account credentials 🙂 I'm just wondering about the details

Reply

Answer 7

javaliga

Level 10

120,179 points

Apr 17, 2017 8:01 AM in response to KiltedTim

Thanks for the info!

Reply

Answer 8

Capt Inc Author

Level 1

14 points

Apr 17, 2017 8:04 AM in response to KiltedTim

Yes KiltedTim is right. They were trying to bypass the "Erase Device after 10 failed passcode attempts" feature. Brute force on it only works on I believe iOS 9.x.x on iPhone 5c and earlier only.

Reply

Answer 9

Capt Inc Author

Level 1

14 points

Apr 17, 2017 8:06 AM in response to Lawrence Finch

Hmm...haven't thought of this one yet. Best to trust no one you don't know in security matters. Thx for the tip off!

Reply