±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35636
New Yesterday: 3 Visitors: 172

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

iPad and iPhone in 'Activate' mode after factory reset

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

armresl
Senior Member
 

Re: iPad and iPhone in 'Activate' mode after factory reset

Post Posted: Feb 21, 19 00:22

How does it show that someone is trying to cover up some things? (if this is not a bot account)

- JohnBerman
I suspect that all the data on the iPad models have been deleted and gone for good, but this shows that someone is trying to cover up some things.

_________________
Why order a taco when you can ask it politely?

Alan B. "A man can live a good life, be honorable, give to charity, but in the end, the number of people who come to his funeral is generally dependent on the weather. " 
 
  

TinyBrain
Senior Member
 

Re: iPad and iPhone in 'Activate' mode after factory reset

Post Posted: Feb 21, 19 06:19

"Erase all content and settings" option in Settings obliterates all of the keys in Effaceable Storage, rendering all user data on the device cryptographically inaccessible (p15 upper left corner). The keyword is inaccessible. 'Factory reset' still has encrypted data if there were before, the non-firsttime-used flash storage is unencrypted. Encrypted data is written to the storage, not the whole storage is encrypted. So dependant on ever used free storage can be unencrypted or encrypted by former keys.

It depends on what devices iOSs you have (e.g. A8 or before). Apple SoCs multiplied by iOSes can result in mulitple options. Please decide on one option e.g. A9 with iOS 10 for precise answer to your question.

See the official Apple iOS 12.1 security guide here, to learn yourself. Former security guides are online not available, you should keep these pdfs in archive for your lab.

www.apple.com/business..._Guide.pdf

Your question was on downloading data, the answer is no. You hang in the factory reset boot process which is different from normal boot process.  
 

Page 2 of 2
Page Previous  1, 2