Both scenarios you describe are AFU. The second one restricts some interfaces but disk stays decrypted. You can easily try that out when calling your iPhone: In BFU, no contact info is shown. In AFU, contact info from your address book is shown.

Not necessarily. Apple also put some other mitigations in there that require you to enter the passcode under certain conditions. In some of these cases, the iPhone didn't reboot and is still in After First Unlock state.

That’s because it’s a research device. That iPhone is likely Apple’s property that they’re allowing devs to use for testing purposes. Inactivity reboot is going to be a normal reboot on end-users’ iPhones

Yeah, you can see the research device watermark before it turns back on

naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html

Just a dev fused device provided by apple to certified security researchers

It’s one of the security research device units provided by Apple for security research. There’s a glimpse of the label on the boot screen

Yeah, in BFU state pretty much all user data is encrypted

Yup, prevents law enforcement from accessing data from your locked phone.

Is this the same encryption as with a factory reset?

this resets the phone from an AFU (after first unlock) state to BFU (before first unlock) state, part of this meaning encryption keys are purged from memory and you must use your pin/password instead of just biometrics to unlock the first time. this makes it more difficult for law enforcement or other phone thieves in general to access the data on the phone, because they need to get the encryption keys, there are no potential bypasses, memory-related or otherwise

No.

That’s an SRD, specially modified iPhone that allow for deep security research

They give that to Apple Security researchers to find bugs

It's an Apple Security Research Device. Apple loans you a phone (which isn't for personal use) It's used to find, test, validate, verify, and confirm a vulnerability

It's a security research device, part of one of Apple's programs. It has it enabled by default

-v

@@ImSkyebro you can’t just change boot args

@ sure you can, you can temporarily set them via usb debugging.

Nah, I think the blur is an overlay. Look how the notch is also blurred.

@@bryanmartin_ r/woooosh

@@bryanmartin_ no that's a feature of the console

​@@ethancarter-0ridQ38That wasn't even a joke idiot

It’s clearly edited in post prod

This is an SRD, a modified iPhone for security research sent by Apple to experts

No, by rebooting the device, it's now in "before first unlock" mode, where all user data is encrypted.

Hi :) You can find some of the scripts here: github.com/seemoo-lab/airtag