iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

Architecture OverviewApplications Processor• ARM (6 or 7 depending on idevice/version)• XNU Based Kernel (like OS X-lite on ARM)• Implements Kernel and Application Signing from bootloader down.Baseband Modem• Another ARM, handles GSM connectivity• Separated from App. Processor with its own RAM and FLASH• Mostly interesting to carrier unlocks, but not my rootkits (yet?)Hardware Encryption Introduced in iPhone 3GS• Low-level data encryption on NAND storage –− Idea is that you drop the key, and FS can’t be read.• A silly feature, really:− ‘The remote wipe feature as well as ‘Find my iPhone’ can be disabled byremoving the iPhone's SIM card.’ – Jonathan ZdziarskiCopyright Trustwave 2010