ReadingResearchRadarInvestment framework
Sign in / Sign up
← Back to reading
NewsTopic · GrayKey取证攻防1 min read·2026-10-01DisconfirmAI Editorial

Leaked video claims GrayKey can bypass iPhone's automatic reboot lock

The video explains no technical details and Apple has not responded; the iPhone forensics arms race escalates, and the next move is Apple's.

ImportanceLocalEvidenceE2 unreplicatedWrite-upQuick

Original publication time 2026-10-01 21:00 GMT+8

A leaked law-enforcement training video shows forensics vendor Magnet Forensics claiming its new GrayKey Preserve device can bypass the iPhone's 72-hour inactivity reboot.

Apple added that mechanism to iOS in November 2024: a phone that goes unlocked for 72 hours reboots automatically, making it much harder for police forensics tools to extract data. The video says the new device can hold the phone in its After First Unlock (AFU) state even across a reboot, and can switch off radios to stop remote data wipes.

The video does not explain how it works. Jiska Classen, a researcher at the Hasso Plattner Institute who reviewed a transcript, suspects Magnet found a way to manipulate the phone's clock. Apple and Magnet did not respond to requests for comment.

Sources

  • 原始出处404media.co↗
Sign in / Sign up
ReadingResearchRadarInvestment framework
Topic

GrayKey取证攻防

取证公司 Magnet Forensics 的 iPhone 解锁工具 GrayKey 被指已能绕过苹果 iOS 18.1 引入的"72 小时不活动自动重启"安全机制。据 404 Media 获得的一段面向执法部门的泄露教程视频,Magne…

3 steps1 piecesUpdated 2026-10-03 21:58

How it got here

  1. 2024-11-01苹果随 iOS 18.1 推出"不活动重启"功能:iPhone 72 小时未解锁即自动重启,回到加密更严格的 BFU 状态,加大取证难度。
  2. 2025-01-01Magnet Forensics 制作仅面向执法人员的教程视频,介绍 GrayKey Preserve 设备与 Evidence Preservation Mode,宣称可在重启后保持 AFU 状态并无限期保留临时数据。
  3. 2026-10-01404 Media 公开该泄露视频,报道 GrayKey 可绕过不活动重启;苹果与 Magnet 均未回应,研究员 Jiska Classen 猜测机制为操纵时钟或关闭数据过期进程。

What is still unsettled

  • 绕过的具体技术机制是什么——视频未披露,Classen 仅给出时钟操纵或关闭过期进程两种猜测。
  • 该技术已向执法部门提供多久,是否已在真实案件中使用。
  • 对最新版本 iOS 是否仍然有效,苹果将如何封堵。
Read the full topic →
Continue researching →