Unable to password-protect accessing DFU mode

Originator:zach
Number:rdar://24701069 Date Originated:17-Feb-2016 10:30 AM
Status:Open Resolved:
Product:iOS Product Version:9.2
Classification:Security Reproducible:Always
 
Summary:
On the Mac, I can set an EFI password to prevent people from messing with my computer's firmware or boot loading.

It would be really nice if I could set a password on my phone to do something similar with DFU mode, for similar reasons.

Steps to Reproduce:
1. Have an iPhone
2. Annoy the US Government for some reason (valid or otherwise)
3. Have the FBI seize my phone
4. Wait for the FBI to subpoena y'all at Apple to help break into my phone
5. ???
6. ??????

Expected Results:
No one should be able to see the pictures of my puppy besides me. He's too cute.

Actual Results:
Theoretically, if someone had unrestricted physical access to my phone, they could boot to DFU and force an OS upgrade to an OS that lets them see pictures of my puppy without my permission. The results of that would be devastating.

Version:
iOS 9.2.1

Notes:


Configuration:
iPhone 6

Attachments:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!