Hacker News new | ask | show | jobs
by kossTKR 1113 days ago
Adjacent topic but i have a friend who told me buying a refurbished iPhone from a local shop was a bad idea from a security perspective.

Is this true? I thought a hard reset and secure enclave etc. was enough? Can you put "stuff" in it that survives to a new user?
2 comments
bollos 1113 days ago
Theoretically yes. However, the chance of you encountering a second hand device with such an implant is relatively low I'd say.

I guess if you buy it off journalists or activists the chance would be higher but still relatively unlikely. But as with anything, consider if it suits your threat model and act accordingly.

link
saagarjha 1113 days ago
Exploits that survive a full wipe are almost unheard of on iOS.
link
infthi 1113 days ago
hardware modifications definitely can. A few years ago I've read ([0] - the article is in russian but google translate does its job) about hardware bugs installed in iphones - with a mic and an own SIM card, everything is powered from the phone's battery.

[0] https://service-iphone.ru/blog/proslushka-v-iphone-teper-bez...

link