https://hk.news.yahoo.com/俄軟件解鎖iphone截取密碼-港警是買家-據悉並非新客戶不時購買更新-074806069.html
俄軟件解鎖iPhone截取密碼 港警是買家 據悉並非新客戶不時購買更新
眾新聞
4.2k 人追蹤
2019年12月22日 上午7:48
香港眾志秘書長黃之鋒在未有收到查閱手機內容手令下，懷疑被警方擅自破解iPhone XR手機密碼，並取得2份WhatsApp及2份Telegram的手機對話記錄，作為控罪證據，令人關注被視為保安功能最強的iPhone也「失守」。
俄羅斯資訊保安公司ElcomSoft日前就公布，成功利用iPhone內置晶片漏洞，為執法部門開發軟件截取iOS裝置的資料，即使未解鎖同樣能破解帳戶密碼。從官網可見，香港警察正是客戶之一。據了解，香港警察並不是新客戶，已使用ElcomSoft產品多年，不時亦會購買更新。至於警方這次是否利用該公司軟件，解鎖黃之鋒的iPhone XR手機取得對話資料，就不確定。
專門為執法部門提供數據取證工具的俄羅斯資訊保安公司ElcomSoft，上周五宣布更新「iOS Forensic Toolkit 5.2」程式，可以由iPhone 5S至iPhoneX，以至平板iPad及電視Apple TV等裝置，在未解鎖或無法使用的情況下，截取iOS系統的鑰匙圈（Keychain）資料。而鑰匙圈一般儲存用戶賬號、密碼、自動登錄等資料。
向來注重私隱保安的iPhone，其實並非無懈可擊。iPhone內置A7至A11晶片早前被揭發，不能修復越獄工具「checkm8」的漏洞，其後催生支援更多版本、更強大的越獄工具「Checkra1n」出現，今年11月才正式推出，可破解iOS 7至目前最新iOS 13.3版本。換句話說，無論裝置有沒有更新，又或已經更新至最新的iOS版本，都可被截取資料。今次俄羅斯公司的軟件，正正利用越獄工具「Checkra1n」將未開鎖的裝置，截取和破解鑰匙圈。首次解鎖即可取得多個電郵和帳戶密碼，意味取得密碼後可再獲取更多個人資料。
ElcomSoft：目的打擊罪行 實際操作受本地法律約束
根據官網顯示，「iOS Forensic Toolkit 5.2」程式可以截取用戶裝置的備份、壞機記錄檔、媒體（包括相片、錄音文件、iTunes資料庫等）、共享文件、破解受保護的鑰匙圈等﹐並自動禁止裝置再度用鎖定熒幕。客戶之中除了香港警方，還有聖保羅公安、阿布扎比警察、澳洲聯邦警察及貝德弗警察；至於軍隊方面，美國空軍國民警衛隊、南韓國軍機務司令部也有採用ElcomSoft的軟件。
究竟香港警方何時購入？購入甚麼程式？ElcomSoft行政總裁Vladimir Katalov回覆眾新聞查詢，指公司軟件在全球多個政府及執法部門廣泛使用，包括香港、中國內地、美國、以色列、英國等地，目的是打擊罪行，他們只會提供軟件，而非服務。由於公司受條款規管，不可以透露個別交易資料，但他們對買家使用軟件有要求，實際操作需受許可協議及本地法律約束。他亦坦言無法從技術上，控制軟件如何被使用，因為也會侵犯軟件用戶的私隱。
港警截取WhatsApp、Telegram對話呈堂
本港反修例風波持續，執法上警方使用武器的數量和殺傷力逐步升級，檢控工作上亦出現懷疑破解手機的個案。香港眾志秘書長黃之鋒涉嫌在6月21日包圍警察總部，8月30日遭O記探員在街頭拘捕，隨即被押至東區裁判法院提堂。他被控三罪，包括涉嫌干犯「煽惑他人明知而參與未經批准集結」，即6月21日在金鐘夏愨道非法煽惑夏愨道在場人士參與未經批准集結；涉嫌干犯「組織未經批准集結」，同日在灣仔警察總部正門外組織未經批准集會；涉嫌干犯「明知而參與未經批准集結」，同日在警總外參與未經批准集會。而香港眾志主席林朗彥及成員周庭亦各被控一項及兩項控罪。
黃之鋒上周四（19日）在東區法院再度提堂，控方提供
黃之鋒 Joshua Wong
18 December at 23:50 ·
我在今年8月30日被捕及起訴，當時使用的iPhoneXR被警方撿取作證物。被捕期間，我從未向警方提供手機密碼，警方亦從來沒有向我要求索取密碼。
昨日黃昏（距離開庭前約20小時）我收到控方提供的證據列表，其中包括4份「黃之鋒手機訊息交流記錄」，2份是Whatsapp對話，2份是Telegram對話。截至今日開庭聆訊前，我沒有收到控方通知或警方查閱手機內容的手令。我對這種侵害私隱的做法十分憤怒。
鑑於現時《截取通訊及監察條例》未能規管政府要求網絡供應商要求交出通訊記錄，或限制警方以黑客軟件竊取市民個人資料，因此即使警方採用侵害私隱甚至非法途徑取得通訊紀錄，法律上無法阻止警方的濫權行為。從控方提交的證據可觀察到，警方甚至能得知個別訊息是從軟件的手機版本或電腦版本發出，並非一般用戶介面可以做到。
我嚴正呼籲所有運動參與者注意資訊安全。
https://hk.news.yahoo.com/%E4%BF%84%E8%BB%9F%E4%BB%B6%E8%A7%A3%E9%8E%96iphone%E6%88%AA%E5 % 8F% 96% E5% AF% 86% E7% A2% BC-% E6% B8% AF% E8% AD% A6% E6% 98% AF% E8% B2% B7% E5% AE% B6-% E6 % 93% 9A% E6% 82% 89% E4% B8% A6% E9% 9D% 9E% E6% 96% B0% E5% AE% A2% E6% 88% B6% E4% B8% 8D% E6% 99 % 82% E8% B3% BC% E8% B2% B7% E6% 9B% B4% E6% 96% B0-074806069.html
Russian software unlocks iPhone to intercept password, Hong Kong police are buyers, it is reported that new customers do not buy updates from time to time
[众 新闻]
Public news
4.2k followers
December 22, 2019 at 7:48 am
Huang Zhifeng, the Secretary-General of Hong Kong Zhongzhi, did not receive a warrant to view the contents of the mobile phone. He was suspected of being able to crack the iPhone XR mobile phone password and obtaining 2 WhatsApp and 2 Telegram mobile conversation records as evidence of the charge. The iPhone, regarded as the strongest security feature, is also "lost."
Russian information security company ElcomSoft announced recently that it has successfully exploited iPhone's built-in chip vulnerabilities and developed software for law enforcement agencies to intercept iOS device data, which can also crack account passwords even if it is not unlocked. It can be seen from the official website that the Hong Kong police is one of the customers. It is understood that the Hong Kong Police is not a new customer and has been using ElcomSoft products for many years. It will also purchase updates from time to time. As for whether the police will use the company's software this time to unlock Huang Zhifeng's iPhone XR phone to obtain dialogue information, it is uncertain.
ElcomSoft, a Russian information security company that provides data forensics tools for law enforcement agencies, announced on Friday that it has updated the "iOS Forensic Toolkit 5.2" program, which can be used from iPhone 5S to iPhoneX, as well as tablets, iPads, and Apple TVs. In the case of use, intercept the keychain data of the iOS system. The key ring generally stores user account, password, automatic login and other information.
The iPhone, which has always valued privacy and security, is not invulnerable. The iPhone's built-in A7 to A11 chips were previously unveiled and could not repair the vulnerability of the "checkm8" jailbreak tool. Later, a more powerful and powerful jailbreak tool "Checkra1n" emerged. It was officially launched in November this year and can crack iOS 7 Up to now the latest iOS 13.3 version. In other words, data can be intercepted regardless of whether the device is updated or has been updated to the latest iOS version. This time, the software of the Russian company is using the jailbreak tool "Checkra1n" to intercept and crack the key ring of the unlocked device. You can get multiple emails and account passwords for the first unlock, which means you can get more personal information after you get the passwords.
ElcomSoft: The purpose of combating crime is subject to local law
According to the official website, the "iOS Forensic Toolkit 5.2" program can intercept backups of user devices, broken machine records, media (including photos, audio files, iTunes database, etc.), share files, crack protected key rings, etc., and automatically Prevent the device from using the lock screen again. In addition to the Hong Kong Police, the customers include the São Paulo Police, Abu Dhabi Police, Australian Federal Police, and Bedford Police. As for the military, the US Air National Guard and South Korean Military Air Command also use ElcomSoft software.
When did the Hong Kong Police buy it? What program did I purchase? EllaSoft Chief Executive Officer Vladimir Katalov responded to public enquiries, stating that the company's software is widely used in many governments and law enforcement agencies around the world, including Hong Kong, Mainland China, the United States, Israel, the United Kingdom and other places. The purpose is to combat crime. They only provide software, and Not service. Because the company is subject to terms and conditions, it is not possible to disclose individual transaction information, but they have requirements for buyers to use the software, and the actual operation is subject to license agreements and local laws. He also confessed that it is not technically possible to control how the software is used, because it also violates the privacy of software users.
Hong Kong Police intercepts WhatsApp and Telegram conversations
The anti-revision case in Hong Kong has continued, and the number of weapons used and the lethality of the police have gradually escalated in law enforcement. There have also been cases of suspected cell phone cracking in prosecution work. Huang Zhifeng, the Secretary-General of Hong Kong Zhizhi, was suspected of besieging the police headquarters on June 21 and was arrested on the street by Agent O on August 30. He was then taken to the Eastern Magistracy to appear. He was charged with three counts, including a suspected offender who “incited others to knowingly participate in an unauthorized assembly”, that is, on June 21, illegally instigated people at Harcourt Road to participate in an unauthorized assembly at Harcourt Road, Admiralty; On the same day, an unauthorized rally was organized outside the main entrance of the Wan Chai Police Headquarters; the suspected offender "knowingly participated in an unauthorized rally" and participated in an unauthorized rally outside the police headquarters on the same day. The chairman of the Hong Kong Chizhi Lin Langyan and the member Zhou Ting were also charged with one and two charges each.
Huang Zhifeng re-appeared in the Eastern District Court last Thursday (19th), the prosecution provided
Huang Zhifeng Joshua Wong
18 December at 23:50
I was arrested and prosecuted on August 30 this year, and the iPhone XR I was using was picked up by the police as evidence. During the arrest, I never provided the mobile phone password to the police, and the police never asked me for the password.
Yesterday evening (approximately 20 hours before the hearing) I received a list of evidence provided by the prosecution, including 4 "Huang Zhifeng mobile phone message exchange records", 2 were Whatsapp conversations, and 2 were Telegram conversations. As of today's hearing, I have not received a notice from the prosecution or a warrant from the police to check the contents of the mobile phone. I am very angry at this privacy violation.
As the current Interception of Communications and Surveillance Ordinance fails to regulate the government's requirement that network providers require the submission of communication records, or restricts the use of hacking software to steal personal data of citizens, even if the police use invasion of privacy or even illegal channels to obtain communication records, the law There is no way to stop police abuse. From the evidence submitted by the prosecution, it can be observed that the police can even learn that individual messages were sent from the mobile or computer version of the software, which is not possible with the ordinary user interface.
I solemnly call on all sports participants to pay attention to information security.
俄軟件解鎖iPhone截取密碼 港警是買家 據悉並非新客戶不時購買更新
眾新聞
4.2k 人追蹤
2019年12月22日 上午7:48
香港眾志秘書長黃之鋒在未有收到查閱手機內容手令下，懷疑被警方擅自破解iPhone XR手機密碼，並取得2份WhatsApp及2份Telegram的手機對話記錄，作為控罪證據，令人關注被視為保安功能最強的iPhone也「失守」。
俄羅斯資訊保安公司ElcomSoft日前就公布，成功利用iPhone內置晶片漏洞，為執法部門開發軟件截取iOS裝置的資料，即使未解鎖同樣能破解帳戶密碼。從官網可見，香港警察正是客戶之一。據了解，香港警察並不是新客戶，已使用ElcomSoft產品多年，不時亦會購買更新。至於警方這次是否利用該公司軟件，解鎖黃之鋒的iPhone XR手機取得對話資料，就不確定。
專門為執法部門提供數據取證工具的俄羅斯資訊保安公司ElcomSoft，上周五宣布更新「iOS Forensic Toolkit 5.2」程式，可以由iPhone 5S至iPhoneX，以至平板iPad及電視Apple TV等裝置，在未解鎖或無法使用的情況下，截取iOS系統的鑰匙圈（Keychain）資料。而鑰匙圈一般儲存用戶賬號、密碼、自動登錄等資料。
向來注重私隱保安的iPhone，其實並非無懈可擊。iPhone內置A7至A11晶片早前被揭發，不能修復越獄工具「checkm8」的漏洞，其後催生支援更多版本、更強大的越獄工具「Checkra1n」出現，今年11月才正式推出，可破解iOS 7至目前最新iOS 13.3版本。換句話說，無論裝置有沒有更新，又或已經更新至最新的iOS版本，都可被截取資料。今次俄羅斯公司的軟件，正正利用越獄工具「Checkra1n」將未開鎖的裝置，截取和破解鑰匙圈。首次解鎖即可取得多個電郵和帳戶密碼，意味取得密碼後可再獲取更多個人資料。
ElcomSoft：目的打擊罪行 實際操作受本地法律約束
根據官網顯示，「iOS Forensic Toolkit 5.2」程式可以截取用戶裝置的備份、壞機記錄檔、媒體（包括相片、錄音文件、iTunes資料庫等）、共享文件、破解受保護的鑰匙圈等﹐並自動禁止裝置再度用鎖定熒幕。客戶之中除了香港警方，還有聖保羅公安、阿布扎比警察、澳洲聯邦警察及貝德弗警察；至於軍隊方面，美國空軍國民警衛隊、南韓國軍機務司令部也有採用ElcomSoft的軟件。
究竟香港警方何時購入？購入甚麼程式？ElcomSoft行政總裁Vladimir Katalov回覆眾新聞查詢，指公司軟件在全球多個政府及執法部門廣泛使用，包括香港、中國內地、美國、以色列、英國等地，目的是打擊罪行，他們只會提供軟件，而非服務。由於公司受條款規管，不可以透露個別交易資料，但他們對買家使用軟件有要求，實際操作需受許可協議及本地法律約束。他亦坦言無法從技術上，控制軟件如何被使用，因為也會侵犯軟件用戶的私隱。
港警截取WhatsApp、Telegram對話呈堂
本港反修例風波持續，執法上警方使用武器的數量和殺傷力逐步升級，檢控工作上亦出現懷疑破解手機的個案。香港眾志秘書長黃之鋒涉嫌在6月21日包圍警察總部，8月30日遭O記探員在街頭拘捕，隨即被押至東區裁判法院提堂。他被控三罪，包括涉嫌干犯「煽惑他人明知而參與未經批准集結」，即6月21日在金鐘夏愨道非法煽惑夏愨道在場人士參與未經批准集結；涉嫌干犯「組織未經批准集結」，同日在灣仔警察總部正門外組織未經批准集會；涉嫌干犯「明知而參與未經批准集結」，同日在警總外參與未經批准集會。而香港眾志主席林朗彥及成員周庭亦各被控一項及兩項控罪。
黃之鋒上周四（19日）在東區法院再度提堂，控方提供
黃之鋒 Joshua Wong
18 December at 23:50 ·
我在今年8月30日被捕及起訴，當時使用的iPhoneXR被警方撿取作證物。被捕期間，我從未向警方提供手機密碼，警方亦從來沒有向我要求索取密碼。
昨日黃昏（距離開庭前約20小時）我收到控方提供的證據列表，其中包括4份「黃之鋒手機訊息交流記錄」，2份是Whatsapp對話，2份是Telegram對話。截至今日開庭聆訊前，我沒有收到控方通知或警方查閱手機內容的手令。我對這種侵害私隱的做法十分憤怒。
鑑於現時《截取通訊及監察條例》未能規管政府要求網絡供應商要求交出通訊記錄，或限制警方以黑客軟件竊取市民個人資料，因此即使警方採用侵害私隱甚至非法途徑取得通訊紀錄，法律上無法阻止警方的濫權行為。從控方提交的證據可觀察到，警方甚至能得知個別訊息是從軟件的手機版本或電腦版本發出，並非一般用戶介面可以做到。
我嚴正呼籲所有運動參與者注意資訊安全。
https://hk.news.yahoo.com/%E4%BF%84%E8%BB%9F%E4%BB%B6%E8%A7%A3%E9%8E%96iphone%E6%88%AA%E5 % 8F% 96% E5% AF% 86% E7% A2% BC-% E6% B8% AF% E8% AD% A6% E6% 98% AF% E8% B2% B7% E5% AE% B6-% E6 % 93% 9A% E6% 82% 89% E4% B8% A6% E9% 9D% 9E% E6% 96% B0% E5% AE% A2% E6% 88% B6% E4% B8% 8D% E6% 99 % 82% E8% B3% BC% E8% B2% B7% E6% 9B% B4% E6% 96% B0-074806069.html
Russian software unlocks iPhone to intercept password, Hong Kong police are buyers, it is reported that new customers do not buy updates from time to time
[众 新闻]
Public news
4.2k followers
December 22, 2019 at 7:48 am
Huang Zhifeng, the Secretary-General of Hong Kong Zhongzhi, did not receive a warrant to view the contents of the mobile phone. He was suspected of being able to crack the iPhone XR mobile phone password and obtaining 2 WhatsApp and 2 Telegram mobile conversation records as evidence of the charge. The iPhone, regarded as the strongest security feature, is also "lost."
Russian information security company ElcomSoft announced recently that it has successfully exploited iPhone's built-in chip vulnerabilities and developed software for law enforcement agencies to intercept iOS device data, which can also crack account passwords even if it is not unlocked. It can be seen from the official website that the Hong Kong police is one of the customers. It is understood that the Hong Kong Police is not a new customer and has been using ElcomSoft products for many years. It will also purchase updates from time to time. As for whether the police will use the company's software this time to unlock Huang Zhifeng's iPhone XR phone to obtain dialogue information, it is uncertain.
ElcomSoft, a Russian information security company that provides data forensics tools for law enforcement agencies, announced on Friday that it has updated the "iOS Forensic Toolkit 5.2" program, which can be used from iPhone 5S to iPhoneX, as well as tablets, iPads, and Apple TVs. In the case of use, intercept the keychain data of the iOS system. The key ring generally stores user account, password, automatic login and other information.
The iPhone, which has always valued privacy and security, is not invulnerable. The iPhone's built-in A7 to A11 chips were previously unveiled and could not repair the vulnerability of the "checkm8" jailbreak tool. Later, a more powerful and powerful jailbreak tool "Checkra1n" emerged. It was officially launched in November this year and can crack iOS 7 Up to now the latest iOS 13.3 version. In other words, data can be intercepted regardless of whether the device is updated or has been updated to the latest iOS version. This time, the software of the Russian company is using the jailbreak tool "Checkra1n" to intercept and crack the key ring of the unlocked device. You can get multiple emails and account passwords for the first unlock, which means you can get more personal information after you get the passwords.
ElcomSoft: The purpose of combating crime is subject to local law
According to the official website, the "iOS Forensic Toolkit 5.2" program can intercept backups of user devices, broken machine records, media (including photos, audio files, iTunes database, etc.), share files, crack protected key rings, etc., and automatically Prevent the device from using the lock screen again. In addition to the Hong Kong Police, the customers include the São Paulo Police, Abu Dhabi Police, Australian Federal Police, and Bedford Police. As for the military, the US Air National Guard and South Korean Military Air Command also use ElcomSoft software.
When did the Hong Kong Police buy it? What program did I purchase? EllaSoft Chief Executive Officer Vladimir Katalov responded to public enquiries, stating that the company's software is widely used in many governments and law enforcement agencies around the world, including Hong Kong, Mainland China, the United States, Israel, the United Kingdom and other places. The purpose is to combat crime. They only provide software, and Not service. Because the company is subject to terms and conditions, it is not possible to disclose individual transaction information, but they have requirements for buyers to use the software, and the actual operation is subject to license agreements and local laws. He also confessed that it is not technically possible to control how the software is used, because it also violates the privacy of software users.
Hong Kong Police intercepts WhatsApp and Telegram conversations
The anti-revision case in Hong Kong has continued, and the number of weapons used and the lethality of the police have gradually escalated in law enforcement. There have also been cases of suspected cell phone cracking in prosecution work. Huang Zhifeng, the Secretary-General of Hong Kong Zhizhi, was suspected of besieging the police headquarters on June 21 and was arrested on the street by Agent O on August 30. He was then taken to the Eastern Magistracy to appear. He was charged with three counts, including a suspected offender who “incited others to knowingly participate in an unauthorized assembly”, that is, on June 21, illegally instigated people at Harcourt Road to participate in an unauthorized assembly at Harcourt Road, Admiralty; On the same day, an unauthorized rally was organized outside the main entrance of the Wan Chai Police Headquarters; the suspected offender "knowingly participated in an unauthorized rally" and participated in an unauthorized rally outside the police headquarters on the same day. The chairman of the Hong Kong Chizhi Lin Langyan and the member Zhou Ting were also charged with one and two charges each.
Huang Zhifeng re-appeared in the Eastern District Court last Thursday (19th), the prosecution provided
Huang Zhifeng Joshua Wong
18 December at 23:50
I was arrested and prosecuted on August 30 this year, and the iPhone XR I was using was picked up by the police as evidence. During the arrest, I never provided the mobile phone password to the police, and the police never asked me for the password.
Yesterday evening (approximately 20 hours before the hearing) I received a list of evidence provided by the prosecution, including 4 "Huang Zhifeng mobile phone message exchange records", 2 were Whatsapp conversations, and 2 were Telegram conversations. As of today's hearing, I have not received a notice from the prosecution or a warrant from the police to check the contents of the mobile phone. I am very angry at this privacy violation.
As the current Interception of Communications and Surveillance Ordinance fails to regulate the government's requirement that network providers require the submission of communication records, or restricts the use of hacking software to steal personal data of citizens, even if the police use invasion of privacy or even illegal channels to obtain communication records, the law There is no way to stop police abuse. From the evidence submitted by the prosecution, it can be observed that the police can even learn that individual messages were sent from the mobile or computer version of the software, which is not possible with the ordinary user interface.
I solemnly call on all sports participants to pay attention to information security.
