The likelihood of investigators getting any information off of Oscar Pistorius’ locked iPhone will need a lot of technical boxes to be ticked, a security expert has said.<\/p>\n
This follows reports that investigators are having a tough time gaining access to the murder-accused paralympian’s phone for crucial evidence – with the much-publicised trial date drawing nearer.<\/p>\n
Pistorius stands accused of murdering his model girlfriend, Reeva Steenkamp, on 14 February 2013.<\/p>\n
Pistorius claimed that he believed Steenkamp was an intruder at the time the incident took place, and opened fire on her behind a closed door. The state is pursuing murder charges.<\/p>\n
Two iPhones and a BlackBerry were taken as evidence in the case – though Pistorius reportedly could not remember the four-digit PIN code needed to unlock the phone at the time.<\/p>\n
Pistorius’ legal representative, Brian Webber, has handed over Pistorius’ Apple ID and password to authorities. Investigators claim that the details are not correct.<\/p>\n
On Thursday, 13 February, news outlet eNCA claimed to have gained access to Pistorius\u2019 iTunes account using the Apple ID and password provided by Webber, without any issues.<\/p>\n
\u201cAll it appears to reveal is that Oscar Pistorius likes legal TV dramas, cello concertos and dance music,\u201d the news group said.<\/p>\n
Investigators, however, are looking for more than download and app information \u2013 rather seeking to gain access to iMessage history and other data stored on the paralympian\u2019s traceable digital footprint.<\/p>\n
Content such as text messages and communication through message applications are not held by network operators (which only track “to” and “from” cellphone numbers), meaning RICA would not help with any content insight in this case.<\/p>\n
According to an iPhone security expert, gaining access to data on a locked iPhone using an Apple ID and password alone is unlikely.<\/p>\n
“With an iPhone 4S and above, no there isn’t a way to unlock the device without the PIN – you can’t do it with the Apple ID only,” the expert said.<\/p>\n
“With the Apple ID you can wipe and restore the phone, but it requires that you have access to either on-computer or iCloud backups of the device.”<\/p>\n
Previous version of Apple’s iOS software allowed users to bypass the PIN lock-screen using an emergency call exploit, while the iPhone tracking app, Find my iPhone, allowed a remote PIN reset.<\/p>\n
Both of these work-arounds have since been removed by Apple.<\/p>\n
If the incorrect PIN is repeatedly entered into the device a number of times, it locks up temporarily. There are options available to erase data from the device if the incorrect PIN is entered 10 times.<\/p>\n
For iPhone users who “forgot” their passwords or blocked their devices, gaining access to their devices requires a system restore through iTunes (on-computer of iCloud back ups), or a complete system reset.<\/p>\n
This process, again, has a few prerequisites which, if not met, means all data on the device will be lost.<\/p>\n
To successfully bypass a locked device and restore its data:<\/p>\n
“That’s quite a few ‘ifs’ – there’s a lot of hypothesis here,” the expert said.<\/p>\n
In the Pistorius case and the problems investigators have been facing, the security expert weighed that it’s possible that the Apple ID provided isn’t the one used for the iCloud backups – if any exist.<\/p>\n
A number of forensic tools exist that can extract data from the iCloud; however, proper processes need to be followed for any evidence to stand up in court.<\/p>\n
Further, there’s no way to tell if Pistorius didn’t nuke his iMessage or WhatsApp history before handing it over to police, or restored his data to another device, remotely.<\/p>\n
“He could maybe have closed his account remotely, and linked a new phone to a new account.”<\/p>\n
Pistorius’s murder trial is set to start on 3 March 2014.<\/p>\n
Pistorius iPhone code remains elusive: report<\/a><\/strong><\/p>\n Apple asked for help in Pistorius murder case<\/a><\/strong><\/p>\n Social media \u201cdisturbs\u201d Pistorius family<\/a><\/strong><\/p>\n