Security Vulnerability in iPhone 3GS/iPod Touch Recovery Mode

Part of the appeal of the iPhone 3GS and related 2009 iPod Touch models is the built in hardware encryption, but a well-publiced attack (http://www.youtube.com/watch?v=kHdNoKIZUCw) by iPhone Forensics specialist Jonathan Zdziarski means that the encryption can be circumvented by putting the device into Recovery Mode, as there can allow the installation of a custom kernel WITHOUT authentication (Passcode or equivalent) being invoked (http://www.schneier.com/blog/archives/2009/07/iphone_encrypti.html#c386843).
There is a rumour that a fix for this missing authentication was included in the iPhoneOS 3.0.1 "SMS" patch, but I can find no documentation that it was included in that patch, nor any other statement as to whether this has been resolved.
I am working with clients who would be interested in replacing aging PocketPC based PDAs with a mix of iPhones and iPod Touches, but would not be interested in buying a platform with such an egregious security design issue unresolved.
Any further information would be welcome.
Thanks!
Bill

Part of the appeal of the iPhone 3GS and related 2009 iPod Touch models is the built in hardware encryption, but a well-publiced attack (http://www.youtube.com/watch?v=kHdNoKIZUCw) by iPhone Forensics specialist Jonathan Zdziarski means that the encryption can be circumvented by putting the device into Recovery Mode, as there can allow the installation of a custom kernel WITHOUT authentication (Passcode or equivalent) being invoked (http://www.schneier.com/blog/archives/2009/07/iphone_encrypti.html#c386843).
There is a rumour that a fix for this missing authentication was included in the iPhoneOS 3.0.1 "SMS" patch, but I can find no documentation that it was included in that patch, nor any other statement as to whether this has been resolved.
It was fixed in 3.1
<http://support.apple.com/kb/HT3860>
"A heap buffer overflow exists in Recovery Mode command parsing. This may allow another person with physical access to the device to bypass the passcode, and access the user's data. This update addresses the issue through improved bounds checking."

Similar Messages

After itunes finishes restoring my ipod touch 8gb, itunes still says itunes has detected an ipod touch recovery mode. You must restore it before using it with itunes. and i dont knwo what to do

after itunes finishes restoring my ipod touch 8gb, itunes still says itunes has detected an ipod touch recovery mode. You must restore it before using it with itunes. and i dont know what to do

Are you sure it is 1043? I've never seen that error before. But you can try disabling your security software, connecting the phone to a USB port directly on the computer (not a hub), and trying to restore again.

My iphone 3gs is in recovery mode how do i activate it please help. it shows the message your iphone couldnot be activated because the activation server is temporarily deactivated.

my iphone 3gs is in recovery mode how do i activate it please help. it shows the message your iphone couldnot be activated because the activation server is temporarily deactivated.

This usually happens if the phone has been Hacked / Jailbroken / Modified...
Is this the case...?

How long does restoring iPhone 3GS take in recovery mode through iTunes?

how long does restoring iPhone 3GS take in recovery mode through iTunes?

You are right there as a weard issue try with the battery comes out and then try to connect to the itunes should be working properly, if not fix the power on/off button because are escential to do it.

My Iphone 3GS went into recovery mode while I was trying to update to the iOS 6.1.2

My Iphone 3GS went into recovery mode while I was trying to update to the iOS 6.1.2
I need help fast. I'm on call and this is my only phone.

It finally restored. I saw that a couple folks said they kept trying and finally got restored. So I decided to keep trying and retrying while I researched the techno routes folks described--DFU, tinyumbrella, and scary programming processes. I decided I'd rather put my sim chip in one of our old iphones and take mine to a shop than suffer through a bunch of complication. I switched to Apple b/c I got tired of playing programmer. I digress. After a few minutes itunes would drop my phone from dashboard yet continued showing the checking with Apple...status. So I repeatedly force-quit itunes, restarted phone, unplugged and plugged back into computer. Each time I'd do whatever itunes prompted then walk away. After about an hour of this, for no apparent reason, it went directly into recovery. Didn't lose any photos but did have to reinstall most of my apps. It has to be an Apple network issue related to this particular upgrade.

IPhone 3gs stuck in recovery mode, firmware iO 5

My iPhone is stuck in recovery mode. I have a 3gs, firmware 5.0.
Before I tried to restore it, my iPhone would randomly shut off, turn back on, and display a notification that said "Activation Required." Now, sometimes my phone would shut off again and return to it's previous working state. However, this time it did not. I put the phone into recovery mode and tried restoring it on my Acer Aspire 1 with Windows 7. iTunes put the phone through the various stages of restoration; Extracting Software, Preparing iPhone for Restore, Restoring Software, Verifying Restore, Restoring Firmware. After all of this, a nice little error message pops up that reads, "The iPhone 'iPhone' could not be restored. An unknown error has occured (1)."
After this little mishap occured four more times, I decided to click "More Information," and was promptly brought to the help page set up here. I proceeded to troubleshoot by updating to the latest version of iTunes, updating my security, restarting my computer, and so forth until all the necessary precautions were performed. Now it was back to iTunes to try my luck at getting my life back.
To my delight, I found that this time the restoration process took upwards of forty minutes to complete. However, to my despair, a nice little error message popped up that read, "The iPhone 'iPhone' could not be restored. An unknown error has occured (-1)." Ah, a different error message! i thought, feeling as if there was hope in fixing my phone. I clicked "More Information" and skimmed through the specific error messages, looking for that lucky -1. Nothing.
I need help. I have attempted to restore my phone a dozen times since this occurence, and I'm growing tired of going through the same process over and over and getting the same result. My phone is stuck in recovery mode now. I've tried restoring the phone on 2 different computers, to find out if, in fact, the problem was my iPhone and not my computer.
Some important information you may need to know in order to help me solve my problem:
iPhone 3gs
Running iOS 5.0
Using iTunes 10.5
On an Acer Aspire One Netbook
Running Windows 7
All security updates installed as of November 7, 2011
Also iTunes 10.5 on Acer Aspire 57354774 laptop
Running Windows 7
Reply ASAP with a solution please!

Hello,
I have an iPhone 3GS which I updated with the last firmware (iOS 5) 2 weeks ago. Everything goes ok.
And suddenly, while the phone was recharching. It asked me to activate it but I was unable to do it as it was rebooting constantly every time I connected it to iTunes.
I tried both 2 restore modes (Restore and DFU) but since I can't achieve a restore with the last Apple iOS 5 firmware. I got the error code 1.
I I tried on 3 different computers but same error. I really don't know what to do next...
I already called Apple Customer Care and I'm still waiting for an answer. I let you know.
And you, did you manage to get your iPhone back alive ?

IPhone 3GS stuck in recovery mode while updating to iOS 6.1

Hello there, I was updating my iPhone 3GS(New Bootrom) from iOS6.0 to iOS 6.1. While it was updating, iTunes suddenly ends up saying error and now my iPhone is stuck in recovery mode loop. I've tried DFU mode on my iPhone and try to kick it out by using TinyUmbrella but the computer doesn't reconize it. And when it was on recovery, iTunes doesn't reconize too, a window pops up and says i have to install 'Apple Mobile Device'. I've re-install and install iTunes a couple of times and nothing is working. Switching on and off the iPhone doesn't work too. Please, someone help me with this problem! I really do not know what to do! Please reply this As Soon As Possible!

Ok. I have spent the last 8 hours researching this problem and have the absolute 110% answer to everyone's problem with this issue.
Error 13 and 14 : Are checksum problems with the firmware image that is in the update package.
The update package is a .ipsw (IPod or IPhone SoftWare). This file is actually just a .zip renamed .ipsw.
The error is caused by a failure to download a crc-free version of the file. Not really sure why there are so many crc problems with the iphone updates, but Apple does not check the integrity of the update package before wiping your current version of IPhone software and that is why all IPhones that start an update with a bad update package end up in recovery mode. These errors are NOT related to the iTunes installation, antivirus software, or firewalls.
Recommendation : use a program like "Object Fix" (Freeware) to verify the integrity of the file prior to commencing with any new updates. You will have to keep trying to download it until you get a error free file. Once you have a CRC error free file this problem will go away. (I thought TCP/IP helped get rid of CRC errors.)
I had another problem and that was...
Error 1603 and 1604 : These are USB driver connectivity problems.
Recommendation : FULLY uninstall and re-install itunes software as stated in the Apple support documentation. Be sure to reboot between each step and these problems should clear themselves up. In addition, firewalls and anti-virus software may cause these errors as well.
Finally, shame on apple for not properly documenting their software so that end users do not have to decrypt their error messages with no true support to solve the issues. These are problems that enough people have had that there should be specific documentation on these problems.

Iphone 3gs stuck in recovery mode, will not restore or update error 36

As the title states, I have a 3gs stuck in recovery mode. Sort of worked earlier today, been having trouble with the battery draining fast/not holding charge goes into recovery mode on its own at times. Have been able to force it out of recovery in the past but now it is just showing a USB cable going into an iTunes logo. I can't get it to restore/update and before it got stuck it would not update or restore either. Before you ask, I have no idea what iOS I have, this **** thing didn't start messing up until I plugged it into my computer.

Update: I have uninstalled and re-downloaded iTunes, Tried with a different computer, tried with a different iTunes account. None of these did anything for me. I have no idea what to do next, nearest apple store is more than an hour away.

Ipod Touch Recovery Mode Loop - Error Code 14

I attempted to update my Ipod Touch (3rd Gen 32 GB) to the latest firmware (IOS 5 i think). It froze during the process and has since been stuck in a Recovery Mode loop. I have followed all recommendations on their website, called Apple support and re-installed all Apple related software, and even been to the Genius Bar in our local Apple shop, and it still broken!! They said that as it was out of Warranty (six months) and had a 'Hardware fault' i could buy a replacement for £120. I tried to argue with the shop staff and higher level customer support staff on the phone that my Ipod was working just fine before attempting to update the firmware so how could it be a hardware fault??
Is it just me or the fact that as soon as the one year warranty is up, Apple expect you to replace your faulty item with a new one. So much for good quality goods, can we expect Apple products to last just over a year and then be expected to buy a replacement!!
Isn't the fact that i have been offered a new Ipod Touch 32GB for only £120 pounds an admission that the product has some fault issues??
Anyone else in this position?
Any ideas how to fix the problem?
Anyone else disappointed with Apple Customer Support?

From the article cited at the end of my post:
Error 6: All of the steps in this article apply to resolve this issue. Following iTunes for Windows: Troubleshooting security software frequently resolves this error. There may be third-party software installed that modifies your default packet size in Windows by inserting a TcpWindowSize entry into your Registry. If your default packet size is set incorrectly it can cause this error. Contact the manufacturer of the software that installed the packet size modification for assistance.
http://support.apple.com/kb/TS1275

My iphone 3gs stucked in recovery mode.i dont have backup

my iphone is in recovery mode and i couldnt come over it.please help me.

Try:
Placing your device into recovery (DFU-Device Firmware Upgrade) mode:
Follow these steps to place your iOS device into recovery mode. If your iOS device is already in recovery mode, you can proceed immediately to step 6.
   1. Disconnect the USB cable from the iPhone, iPad, or iPod touch, but leave the
       other end of the cable connected to your computer's USB port.
   2. Turn off the device: Press and hold the Sleep/Wake button for a few seconds
       until the red slider appears, then slide the slider. Wait for the device to turn off.
              * If you cannot turn off the device using the slider, press and hold the
                Sleep/Wake and Home buttons at the same time. When the device turns off,
                release the Sleep/Wake and Home buttons.
3. While pressing and holding the Home button, reconnect the USB cable to the
       device. The device should turn on. Note: If you see the battery charge warning,
       let the device charge for at least ten minutes to ensure that the battery has some
       charge, and then start with step 2 again.
4. Continue holding the Home button until you see the "Connect to iTunes" screen.
       When this screen appears you can release the Home button:
5. If necessary, open iTunes. You should see the following "recovery mode" alert:
6. Use iTunes to restore the device.
If you don't see the "Connect to iTunes" screen, try these steps again. If you see the "Connect to iTunes" screen but the device does not appear in iTunes, see this article and its related links.
Additional Information:
If you have a problem getting into recovery mode then try: RecBoot: Easy Way to Put iPhone into Recovery Mode.
Note: When using recovery mode, you can only restore the device. All user content on the device will be erased, but if you had previously synced with iTunes on this computer, you can restore from a previous backup. See this article for more information.

HT201210 iphone 3gs stuck in recovery mode

Hi after updating my phone to ios 5.1.1 shortly afterwards my phone entered recovery mode. I have tried everything, i have updated windows, updated itunes, removed all third party usb's from computer, plugged iphone usb round the back not the front, checked security settings and restarted my home computer, but when i try to restore through itunes i always get the same "itunes could not restore iphone from an unknown error (1)" I have been to the apple shop and they told me £120 for a new phone, i said no as this isnt really my fauly a new update and its ctashed my phone. PLEASE HELP???

Hello,
I have an iPhone 3GS which I updated with the last firmware (iOS 5) 2 weeks ago. Everything goes ok.
And suddenly, while the phone was recharching. It asked me to activate it but I was unable to do it as it was rebooting constantly every time I connected it to iTunes.
I tried both 2 restore modes (Restore and DFU) but since I can't achieve a restore with the last Apple iOS 5 firmware. I got the error code 1.
I I tried on 3 different computers but same error. I really don't know what to do next...
I already called Apple Customer Care and I'm still waiting for an answer. I let you know.
And you, did you manage to get your iPhone back alive ?

HT1212 It says ipod touch recovery mode server cannot be contacted

Guys if you have tip can you just reply i really really need my ipod recovery **** its been 1month still haven't recover my ipod touch passlock

Update Server
Try:
- Powering off and then back on your router.
- iTunes for Windows: iTunes cannot contact the iPhone, iPad, or iPod software update server
- Change the DNS to either Google's or Open DNS servers
Public DNS — Google Developers
OpenDNS IP Addresses
- For one user uninstalling/reinstalling iTunes resolved the problem
- Try on another computer/network
- Wait if it is an Apple problem

New ipod touch recovery mode

I just connected my new iPod but I cant do anything because it says that it is in recovery mode and I am not sure what to do.

Try RecBoot to get it out of recovery mode. If that does not work, just go restore it.
Basic troubleshooting steps
17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 
Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101
 In Memory of Steve Jobs 

Iphone 3gs stuck in recovery mode , power button dosent work, and cant connect to itunes.

Well This Is Bad.
So today i used my iphone 3gs.. and then it had a problem so i restored it. then during the restore it gave me error 20. i tried looking at apple support but it didnt help.
so heres what it has:
1. broken power button
2. cant be seen on itunes.. not even the mac!
3. stuck in recovery mode.
4. dosent sence a computer.
now i hear theres a "freezer trick" to get it out of this mode. but i tried it and no luck.
i also looked on youtube, google,and apple support and stores. but theres nobody who had this problem.
im trying to wait till the battery runs out but that will take long.
what should i do?!?

You are right there as a weard issue try with the battery comes out and then try to connect to the itunes should be working properly, if not fix the power on/off button because are escential to do it.

HT201210 Why can't i get my iphone 3gs out of recovery mode when i try to restore it?

Hello People,
My iPhone 3GS has gone into "Recovery Mode" and ive tried to restore it. When it reaches the firmware it stops and my iPhone restarts and i get an error message saying "The iPhone 'iPhone' could not be restored. An unknown error has occured(1)." Ive tried putting it into DFU mode but it doesn't seem to work (its like it is in a loop). Ive tried different firmwares such as 3.1.3 and 4.1 and it still stops at the firmware section. The iPhone was new out of the box about 4-5 days ago and i get this.
Any suggestions please post below this thread.
Best Regards,
Kieran
<Email Edited By Host>

You've just exposed your email address to millions of people, some of whom are spammers or worse. That was not a good idea. Expect a massive increase in spam as a result, unless the mods see it and edit it out of your message. You can only restore a 3GS to iOS 5.1.1. If you are trying to install an earlier version you must hack or jailbreak your phone; error 1 is usually an indication that the phone is jailbroken. See: http://support.apple.com/kb/TS3694#error1

Security Vulnerability in iPhone 3GS/iPod Touch Recovery Mode

Similar Messages

Maybe you are looking for