Forensic Implications of Apple Stolen Device Protection

June 1st, 2026 by Oleg Afonin

If you extract data from iPhones for a living, Stolen Device Protection is the change you can no longer afford to ignore. It does something deceptively simple: it puts Face ID or Touch ID in front of the “Trust This Computer” prompt. The practical result is that an examiner who knows the device passcode still cannot pair an unfamiliar iPhone to a forensic workstation. That is the most disruptive change Apple has made to iPhone pairing behavior in roughly a decade, and as of spring 2026 it is switched on out of the box.

Read the rest of this entry »

Yahoo!, Dropbox and Battle.net Hacked: Stopping the Chain Reaction

February 14th, 2013 by Vladimir Katalov

Major security breaches occur in quick succession one after another. Is it a chain reaction? How do we stop it?

Read the rest of this entry »

Déjà vu

December 24th, 2012 by Vladimir Katalov

The story about PGP becomes really funny.

Read the rest of this entry »

ElcomSoft Decrypts BitLocker, PGP and TrueCrypt Containers

December 20th, 2012 by Vladimir Katalov

BitLocker, PGP and TrueCrypt set industry standard in the area of whole-disk and partition encryption. All three tools provide strong, reliable protection, and offer a perfect implementation of strong crypto.

Read the rest of this entry »