19-year-old Hacks iPhone 7, iOS 10; Is Apple's Security Weakening?

Gone are the days where Apple boasts of its high-security devices after a security researcher just managed to crack through the latest Apple innovations. 

iOs 10 is the tenth major operating system built by Apple and was released just recently. Fans, however, are wondering whether or not the latest operating system of the tech giant could be jailbroken. 

BGR reported on a jailbreak by security researcher Luca Todesco, 19, also known as @qwertyoruiopz on Twitter who has recently managed to crack the iOS. In a post, Todesco included a picture of the cracked iPhone7 running in iOs 10.0.1 after using a tool called Cydia version 1.1.26

Todesco did not reveal how he broke through the iOS 10.0.1 patch and has never released the iOS versions he had jailbroken before. Apple is expected to act quickly on the matter after the reported jailbreak. Other OS hackers are still working on ways to jailbreak the latest iOS 10.0.1 but no update has been posted yet; however,the estimated release of the jailbreak is expected in November. 

Apple's latest iOS seems to be highly vulnerable not just to individual hackers but to companies benefitting on cracking Apple's security.

Forbes  reported that the Elcomsoft, a Russian forensics company has probed the security of iOS 10, and found out that Apple was using a weaker password protection mechanisms for manual backups. Elcomsoft reportedly could guess backup passwords faster that the iOS 9. The hacking company mentioned an 80-90 percent chance of getting the right password and that their kit can be bought by anyone. 

This was confirmed in a blog post on Elcomsoft by Oleg Afonin, which mentioned  "We discovered an alternative password verification mechanism added to iOS 10 backups." The new iOS skips certain security checks, allowing Elcomsoft to "...try passwords approximately 2500 times faster compared to the old mechanism used in iOS 9 and older," Afonin added. 

The weakness was reported to have been due to a change in the algorithm used by Apple for iOS 10. With the change, hackers need to try just one password and repeat to try and match the login, which is less time consuming compared to the algorithm used in iOS9 back to iOS4.
 
A spokesperson from Apple confirmed that they are working on the issue and that they are addressing this through an upcoming security update. They also added that "we recommend users ensure their Mac or PC are protected with strong passwords and can only be accessed by authorized users." 

Real Time Analytics