How I Found a Vulnerability to Hack iCloud Accounts and How Apple Reacted to It
In the second half of the post he suggests remotely determining an iDevice passcode was possible with his rate limit bypass. Essentially a salted version of the devices passcode is uploaded to the apple server which he could then bypass the rate limit to brute force it.<p>Isn&#x27;t this a backdoor that would enable passcode bypass like was requested for the San Bernardino and Pensacola shooters phones?<p>This vulnerability is a massive deal. With the passcode determined there&#x27;s nothing stopping bad actors surreptitiously access your data.<p>After all this a $2,180,000,000,000 market cap company offers a reward of $18,000. What a disgrace!