Cops Suspect iOS 18 iPhones Are Communicating to Force Reboots, Making Unlocking Harder

Law enforcement officials in Detroit, Michigan are warning other police officers about an alleged iPhone change that causes Apple devices stored for forensic examination to spontaneously restart, reports 404 Media.

iphone passcode green
iPhones that are undergoing examination have apparently been rebooting, which makes them harder to unlock with brute force methods, and Michigan police think that it's due to a security feature that Apple added in iOS 18. A document found by 404 Media speculates that iPhones running ‌iOS 18‌ are causing other iPhones to restart when those iPhones have been disconnected from a cellular network.

The purpose of this notice is to spread awareness of a situation involving iPhones, which is causing iPhone devices to reboot in a short amount of time (observations are possibly within 24 hours) when removed from a cellular network. If the iPhone was in an After First Unlock (AFU) state, the device returns to a Before First Unlock (BFU) state after the reboot. This can be very detrimental to the acquisition of digital evidence from devices that are not supported in any state outside of AFU.

It is believed that the iPhone devices with iOS 18.0 brought into the lab, if conditions were available, communicated with the other iPhone devices that were powered on in the vault in AFU. That communication sent a signal to devices to reboot after so much time had transpired since device activity or being off network.

After First Unlock, or AFU, denotes a device state where the owner has unlocked their device with a passcode or Face ID at least one time since it was powered on. It is easier for law enforcement to get into a device in AFU mode with ‌iPhone‌ unlocking tools from companies like Cellebrite. A restart apparently makes the process more difficult.

The digital forensics lab that noticed the issue had several iPhones in AFU state reboot, including iPhones in Airplane mode and one in a faraday box. Since a faraday box blocks all electronic signals from reaching a device, there wouldn't be a way for an ‌iPhone‌ running ‌iOS 18‌ to communicate with an ‌iPhone‌ in a functional faraday box.

The police document speculates that this is "an iOS 18.0 security feature addition" because one device running ‌iOS 18‌ also rebooted after a period of isolation and inactivity. Several other devices in the same area did not, however, restart, and there is no evidence that Apple has added a feature that causes older iPhones to reboot when in contact with an ‌iPhone‌ running ‌iOS 18‌.

Law enforcement officials recommend isolating ‌iOS 18‌ devices from other iPhones that are in an AFU state as further testing takes place.

The specific conditions that must exist for these reboots to occur is unknown and further testing and research would nee to be conducted to add more specifics to the new hurdle we are now faced with. What is known is that this new "feature" of some sort has increased the difficulty with forensically preserving digital evidence.

Matthew Green, a cryptographer and Johns Hopkins professor told 404 Media that the law enforcement officials' hypothesis about ‌iOS 18‌ devices is "deeply suspect," but he was impressed with the concept.

"The idea that phones should reboot periodically after an extended period with no network is absolutely brilliant and I'm amazed if indeed Apple did it on purpose," he said.

Note: Due to the political or social nature of the discussion regarding this topic, the discussion thread is located in our Political News forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Popular Stories

election results 2024 live activities

Track 2024 U.S. Election Results Live on Your iPhone Lock Screen

Tuesday November 5, 2024 5:02 am PST by
Apple News is providing Live Activities support for the 2024 U.S. presidential election, allowing iPhone and iPad users to track electoral results in real time directly from their Lock Screen. The feature is rolling out for U.S. users over the course of Election Day, November 5, providing continuous updates of the electoral count. So if you're interested, you don't need to repeatedly check...
Generic iOS 18

Everything New in iOS 18.2 Beta 2

Monday November 4, 2024 12:34 pm PST by
Apple today seeded the second betas of upcoming iOS 18.2 and iPadOS 18.2 updates to developers, and Apple is continuing to refine the Apple Intelligence capabilities. There are also a handful of smaller features that are worth knowing about. Find My Find My has a new option to Share Item Location with an "airline or trusted person" that can help you locate something that you've misplaced....
iCloud General Feature

Here's What's New in Apple's Updated iCloud Terms and Conditions Taking Effect Next Week

Friday September 13, 2024 7:39 am PDT by
Apple has started notifying users about an upcoming revision to its iCloud Terms and Conditions, which takes effect on Monday, September 16. We compared the text of the upcoming iCloud Terms and Conditions with the current U.S. version from September 18, 2023 and identified four key changes: "Apple ID" references have been changed to "Apple Account" throughout. iCloud users must agree to ...
ipads early bf deals

The Best Early Black Friday iPad Deals

Tuesday November 5, 2024 7:02 am PST by
Black Friday is still a few weeks away, but you can already find great prices on numerous iPads, including the 9th generation iPad, 10th generation iPad, iPad Air, and iPad mini. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Of course, there is a chance that ...
ios 18 2 chatgpt plus

iOS 18.2 Beta 2 Shows Siri ChatGPT Limit, Offers 'Plus' Upgrade Option

Monday November 4, 2024 10:54 am PST by
With the second beta of iOS 18.2 that's available for developers today, Apple has further fleshed out the ChatGPT integration that's available with Siri. In the Settings app, there's now a section that shows the ChatGPT daily limit, and offers an option to upgrade to the paid ChatGPT Plus plan. The beta includes an Advanced Capabilities section with a "Daily Limit" reading that shows up as...
M4 MacBook Pros Thumb

M4 MacBook Pro Reviews: Processor Benchmarks Impress, New Nano-Texture Option Worth the Extra $150

Thursday November 7, 2024 6:14 am PST by
The first wave of reviews of Apple's new M4-powered MacBook Pro models were published this morning. We've collected some of the latest impressions from YouTube channels and select media outlets below. Apple last month announced the new 14-inch and 16-inch MacBook Pro models, adding next-generation M4, M4 Pro, and M4 Max chips, with Thunderbolt 5 ports on higher-end models, display and camera ...
early apple watch black friday

The Best Early Black Friday Apple Watch Deals

Wednesday November 6, 2024 6:33 am PST by
Black Friday is just around the corner, and Apple Watch deals have begun appearing ahead of the shopping holiday on November 29. In this article, we'll take a look at all of the best early Black Friday Apple Watch deals, including the new Series 10 models. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small...

Top Rated Comments

orbital~debris Avatar
3 hours ago at 02:28 pm
Concept is cool.

But as it’s a new iOS it could easily just be a bug ('https://www.macrumors.com/2024/10/21/ios-18-1-fixes-random-restart-bug-iphone-16/'), too.
Score: 21 Votes (Like | Disagree)
ersan191 Avatar
3 hours ago at 02:29 pm
Why would they have random phones talk to each other rather than just rebooting if the phone hasn't been connected to cellular for awhile in iOS 18 itself?
Score: 19 Votes (Like | Disagree)
dustin_ Avatar
3 hours ago at 02:28 pm
good stuff!
Score: 17 Votes (Like | Disagree)
adambadamh Avatar
3 hours ago at 02:28 pm
Am I missing something? How would the devices be "talking" to one another to force the restarts if the device also in the faraday box exhibited the same issue?
Score: 16 Votes (Like | Disagree)
now i see it Avatar
3 hours ago at 02:34 pm
Ha. iPhones are crashing because of buggy software and now it’s called a security feature!
Score: 10 Votes (Like | Disagree)
anshuvorty Avatar
3 hours ago at 02:44 pm
Um, maybe law enforcement, once again, misunderstands technology?
Score: 7 Votes (Like | Disagree)