Notifications
Clear all

iCloud lock removal

10 Posts
4 Users
0 Likes
1,377 Views
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

As this subject affects DFA I ask for PM only. We have access to a large number of lost and found devices we would like to use for training purposes. Which is the fastest way to remove iCloud lock and ALS Activation Lock Status?

 
Posted : 16/05/2018 11:19 am
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Ask Apple in .ch, in your case, they would cooperate.

 
Posted : 16/05/2018 12:21 pm
(@randomaccess)
Posts: 385
Reputable Member
 

I get the feeling Apple wouldn't make it easy, since the whole point is to disincentivise device reuse

Asking Apple may be the easiest way, I'm not sure if they would help though.

 
Posted : 16/05/2018 12:26 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

We have access to a large number of lost and found devices we would like to use for training purposes.

This is very interesting -sideways - from a purely legal standpoint.

With traditional "lost and found" items, let's say an umbrella or a suitcase the item was stored *somewhere* and, if it was not claimed for within a given time the item would have been auctioned publicly.

What happens now with digital devices (i.e. more or less a repository containing data about substantial parts of someone's life)?

Would selling these devices at an auction be *somehow* contrary to any of the various data protection Laws?[1]

What happens if these devices (and their contents) go into the hands of Digital (LEO) Investigators?

Would they be able to identify the owners? ?

If yes, shouldn't they have the (moral if not legal) requirement to attempt contacting the owner?

Or - independently from the ability/possibility to identify the owner - shouldn't there be some kind of "deleting protocol" to be implemented as soon as the device is *somehow* accessed and made operative again?

Otherwise, wouldn't that (allowing a LEO to access the data on these devices) be some form of warrantless search?

jaclaz

[1] Single datapoint, a few years ago, while working as a consultant for the equivalent of a Chapter11 procedure I raised the issue of re-selling the PC's belonging to a bankrupted company and in the end everyone, including the lawyers and the Judge agreed on the opportunity of wiping the disks before putting the computers on auction.

 
Posted : 16/05/2018 12:29 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

We did, they refused. Of course, to sell new devices is always better. But we have also budget restraints and search for new ways of destructive devices for trainings.

 
Posted : 16/05/2018 12:31 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

@jaclaz, good points.

If really legally clean would be Lost and found devices to fully destroy. No selling at all.

 
Posted : 16/05/2018 12:38 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

https://www.youtube.com/watch?v=G9ns02AZ2vU

29.04.18 posted on yt. Is this still working? Who may did test it?

Any domain just .uk I would question. Normally it looks .co.uk right?

 
Posted : 16/05/2018 12:55 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

It's a proxy server, which has a fake DNS resolving for *apple.com ) If it is still working, you should be able to connect it worldwide.

 
Posted : 16/05/2018 2:13 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

On the iOS setup process the apple server makes a IP geolookup and proposes the 2nd time a respective country language. Apple could easily geofence the activation process to the respective continent e.g. based on the GDPR.

Faked/Changed DNS entries are normally the first step into CyberDeath.

 
Posted : 16/05/2018 4:27 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Go for the facts and not for the theory!

While everything shall work as you say, the reality shows it works as I say )

A single router with fake DNS, ntp server and a modified pre-captured url communication for a real activation would lead to the results needed.

It is so easy, do a test task, monitor what this proxy you mentioned is doing compared to a real activation! You'll be amazed that a value of zero or one can be so surprising for a lock removal )

 
Posted : 02/06/2018 8:42 pm
Share: