zoukankan      html  css  js  c++  java
  • Life cycle of plist in Lockdown changes dramatically in iOS 10

    We could take advantage of plist to bypass Trust Relationship so as to extract data from a iDevice. Now it becomes an impossible mission in iOS 10.

    As you could see the iOS version is iOS 10.0.2.

    Now my workstation trust this iDevice, and the plist in Lockdown folder is right there.

     

    Let my show you what happen to iOS 10. I poweroff this iDevice and power it on. Of course it's locked. You have to enter passcode or Touch ID.

    Let's take a look at iTunes in my workstation. iTunes could not see anything in that iDevice...But the plist is still right there..What's matter with this iDevice???

    The answer is that the life cycle of plist in Lockdown changes in iOS 10. That means if you seize an iDevice which is poweroff. The plist in suspect's PC/Laptop/Mac has no effects on that iDevice. You still need the passcode or Touch ID in order to got the data inside this iDevice.

     

    I'm not sure why Apple doing this. Life cycle of plist in Lockdown changes dramatically  in iOS 10 being a bad influence on mobile forensics. iOS forensics is going dark in the very near future.

     

     

  • 相关阅读:
    Vue响应式原理
    vue 与 react
    vuex
    受控组件( controlled component )与不受控制的组件( uncontrolled component )区别
    redux学习语录
    Flux
    MVC和MVVM 架构模式/设计思想
    immutable
    JS中一些兼容性问题
    @芥末的糖 ---------- node连接数据库两种方式mysql和moogoDB
  • 原文地址:https://www.cnblogs.com/pieces0310/p/5909266.html
Copyright © 2011-2022 走看看