GrayShift's Strategy to Keep iOS Hacking Secret

Vicestruck again. After revealinga tutorial explaining to the police how to hack an Apple device, the sectionMotherboardfrom the New York media has just revealed documents published by GrayShift detailing its method of trying to maintain the confidentiality that reigns around its technology. Indeed, GrayKey, the company's tool for hacking iPhones, requires serious protection measures to avoid falling into the wrong hands.

One of the documents that the subsidiary of the Walt Disney Company was able to get its hands on reveals in particular what investigators who have invested in the product must not communicate to third parties. We learn, for example, that it is out of the question for the manufacturer to see the functionalities of its solution brought to light. Of particular concern is one, bypassing Apple's USB shield introduced with iOS 11.4.1.

The second largest American metropolis as a customer

The file in question was actually intended for the Illinois police, which are based in Chicago. History does not say in which cases GrayKey may have been used here, however many assume that cases related to terrorism orchild crimeare potentially the target of the authorities. With the result of the heated debates which follow, mixing concern for respect for private life and questions of morality.

The Windy City is not the only one to have used the GrayShift ring road. Indeed, the accessory was also able to find a buyer in the city of Orlando (FL) where, among other things, the shooting of thePulse, an LGBT club targeted by the Islamic State organization. An official from the local town hall allegedly wrote to the commissioner in 2018 in order to hide the purchase of GrayKey from municipal records. Objective: to guarantee greater discretion for crime maneuvers.

GrayShift's reaction

GrayShift CEO David Miles quickly responded to what appeared to be the start of a controversy:

“Confidentiality agreements help to protect our customers and partners with how confidential information is disclosed, and we protect and maintain the integrity of our relationships. In addition, they are instrumental in preventing the public disclosure of our intellectual property to protect the integrity of our security research. Confidentiality agreements are not at all meant to prevent disclosure of evidentiary data or general information about GrayKey in court proceedings that may result from data extracted by GrayKey during our customers’ investigations.”

In short, the manager justifies the actions of his company by the need to “protect” ses “customers and partners“, while maintaining “the integrity of its relationships“. It would also be a question of preserving the “intellectual property” of the brand as well as the integrity of its cybersecurity research. Finally, Miles also protects himself against possible legal risks.