iPhone Forensics

Foreword

Cap’n Crunch

The iPhone is a very useful tool, but you should be aware of some very important things. This book will shed some light about just how “private” a device like the iPhone really is.

The iPhone is essentially a full-fledged computer, running a slimmed down version of the Unix operating system and Apple’s Leopard. Like most mainstream operating systems, deleting a file only deletes the reference to the data, and not the actual data. This is why data recovery programs work. For the iPhone, the same is also true, but in addition, the amount of data stored on the iPhone extends far beyond what is perceived to be stored on it or what is accessible through its user interface. This data is, however, accessible with the tools and procedures outlined in this book. A criminal might attempt to delete all of the data she thinks exists on the phone but, in most cases, will have only made it inaccessible to the average person. A criminal might also think simple security, such as a passcode, will safeguard self-incriminating evidence from the police. As you’ll see, this too only keeps the average person out. Fortunately for you, if you are reading this book, you are not an average person.

My opinion on crime is this: any self-respecting criminal is likely to use a desktop computer with encryption or other tools to hide his dirty deeds. With strong encryption, new laws such as the Foreign Intelligence Surveillance Act—which gives the U.S. Government unfettered access to our private ...