Michael Parenti

When you shut down a modern iPhone, the Power Management Unit (PMU) cuts voltage to the main A-series processor, the OLED display, and the camera array. It leaves a separate Low Power Mode (LPM) rail live on the motherboard. Sitting on that energized rail are three wireless chips: the Bluetooth controller, the NXP NFC controller, and the Apple U1 Ultra-Wideband chip. Apple built this hardware partition to run "Findable After Power Off," Express Transit passes, and Digital Car Keys when your battery dies. Even with iOS completely unloaded from RAM, those three chips stay powered for up to 24 hours on a manual shutdown (and up to 5 hours on automatic battery reserve). Right before iOS powers down, it pre-computes 96 rolling NIST P-224 public keys (one for every 15-minute window over the next 24 hours) and sends them to the Bluetooth chip using Host Controller Interface (HCI) commands. The final HCI command severs communication with the main processor and starts a standalone thread inside the Bluetooth silicon. While the main SoC sits unpowered, the Bluetooth chip wakes up every 2 seconds to broadcast the current P-224 public key over Bluetooth Low Energy. Any passing iPhone or MacBook that hears that broadcast encrypts its own GPS coordinates with your broadcasted public key and relays the packet to Apple servers. In 2022, researchers at the SEEMOO lab at TU Darmstadt audited this low-power hardware chain ("Evil Never Sleeps") and found a major gap between the three wireless chips. While the NFC chip runs encrypted and signed firmware and the U1 Ultra-Wideband chip checks cryptographic signatures at boot, the Broadcom Bluetooth chip has neither encryption nor signature verification on its firmware updates. Broadcom bakes its base Bluetooth firmware into read-only Mask ROM at the factory. To fix bugs and load the standalone Find My feature, iOS writes raw binary patches directly into the chip internal SRAM using a mechanism called PatchRAM (Write_RAM HCI commands). The hardware never checks a cryptographic signature on those RAM patches. If an attacker already has kernel-level code execution on iOS (through spyware or a local jailbreak exploit), they can overwrite the Bluetooth chip PatchRAM in SRAM before the user powers the phone down. When the user drags the power-off slider, iOS halts and wipes main system RAM. Because the PMU keeps the LPM power rail alive, the modified Bluetooth firmware stays in SRAM and keeps executing on reserve battery power. Worse, the TU Darmstadt team showed from iPhone board schematics that the Bluetooth and U1 chips are wired directly to the Secure Element inside the NFC controller via dedicated hardware buses (SE_I2C and R1_WAKE/SYNC) so car keys and transit cards work while the phone is off. Compromised Bluetooth firmware running in LPM can broadcast custom tracking beacons, listen for over-the-air wake commands, or talk directly to the Secure Element over SE_I2C while the main operating system is dead. Apple lets you tap "Temporarily Turn Off Finding" on the shutdown screen and enter your passcode to disable LPM for that power cycle. That toggle works if your phone is clean, because a clean iOS kernel tells the PMU to cut the LPM rail. If your phone is already compromised by kernel spyware, the malware controls the shutdown sequence. It can turn off the screen, play the shutdown animation, ignore your toggle, and tell the PMU to keep the patched Bluetooth chip powered in the background. Once kernel malware can hide inside unverified radio SRAM, a software power-off slider means nothing. Until the battery is physically disconnected from the board or the phone goes inside an RF-shielded Faraday bag, the Bluetooth silicon can stay on the air.

You can point an ultrasonic speaker at an iPhone from a few feet away, play an audio command that no human ear can hear, and the phone will wake up, open Safari, and dial a phone number. To everyone standing in the room, it sounds like dead silence. To the phone, it sounds like someone speaking directly into the microphone. Mobile operating systems use digital low-pass filters to delete all sound above 20,000 Hz, assuming inaudible frequencies can never reach the voice assistant. Yet this attack succeeds without exploiting a single line of software code. The flaw is not in the operating system. It is in the microscopic silicon plate inside the microphone itself. 1. The microscopic machine inside your microphone Inside modern smartphones, microphones are not miniature versions of studio microphones. They are micro-electro-mechanical systems (MEMS) chips smaller than a grain of rice. Inside the chip package sits a flexible silicon diaphragm suspended barely two micrometers above a rigid metal backplate. The two plates form a variable capacitor. When sound waves hit the silicon diaphragm, it flexes inward and outward, changing the electrical capacitance. An onboard preamplifier converts that movement into an electrical voltage. At normal room volumes, the silicon plate moves evenly: double the sound pressure, and the plate flexes twice as far. 2. The non-linear spring catch The flaw appears when sound waves hit the microphone at high pressure (above 90 dB SPL). If you broadcast an ultrasound carrier wave (say, 28,000 Hz) that has an audio command modulated on top of it, the microphone front-end cannot move symmetrically. The mechanical spring resistance of the silicon, the electrical pull between the plates, and the preamplifier circuit all reach their limits. Instead of flexing smoothly, the silicon plate bends slightly more inward than outward. This asymmetry acts like an old crystal radio receiver. Mathematically, a non-linear response squares the incoming wave. That squaring action strips the silent 28,000 Hz carrier away and leaves behind the original human voice command in the audible 300 Hz to 3,500 Hz range. By the time the analog-to-digital converter reads the signal, the ultrasound is already gone. It has physically transformed into ordinary low-frequency sound inside the microphone chamber. The phone digital filter never triggers because the audio reaching the software is already normal human voice. 3. What researchers actually proved (DolphinAttack) In 2017, researchers at Zhejiang University published DolphinAttack, demonstrating this hardware flaw across Siri, Google Now, and Alexa. They successfully forced phones to initiate FaceTime calls, navigate to malicious websites, turn on airplane mode, and unlock smart doors paired to the device. Later research expanded this into attacking through solid tables, using the furniture itself as a physical acoustic conductor. 4. Why this fails in the wild (The physical friction) Demonstrating this in an acoustic laboratory is straightforward. Pulling it off in a crowded coffee shop runs into strict physical limits: First, air absorbs high-frequency sound rapidly. Bass travels through concrete walls, but 30,000 Hz ultrasound loses roughly 1 to 1.5 decibels of power per meter in normal room air. In the original DolphinAttack paper, the effective range was limited between a few centimeters and 1.75 meters. Reaching across an entire room requires a heavy array of high-voltage transducers. Second, ultrasonic emitters act like laser pointers. High-frequency sound travels in narrow beams of 15 to 20 degrees. If you fail to aim directly at the phone one-millimeter microphone port, sound pressure drops below the 90 dB threshold needed to bend the plate. Third, modern phones are waterproof. Devices with IP68 ratings place a hydrophobic Gore-Tex mesh over the microphone hole. The mesh lets air equalize while stopping water, but it acts like a dense acoustic muffler against ultrasonic frequencies, absorbing another 14 dB of signal strength. Finally, voice assistants use personal voice training. If Siri or Google Assistant is set to only respond to the device owner, a generic synthesized ultrasonic command is ignored unless the attacker models the owner vocal pitch. 5. How modern hardware catches it Defending against inaudible voice injection requires catching the acoustic mismatch before speech recognition executes: * Multi-microphone cross-checks: Modern smartphones carry three or four microphones positioned on the bottom, top, and camera bump. When a real human speaks, their voice reaches all microphones with natural arrival delays. A narrow ultrasonic beam hitting one microphone port creates an unnatural phase imbalance across the device. * Harmonic distortion analysis: When a microphone is driven into non-linear demodulation, it does not produce a clean voice recording. It leaves distinct distortion products and second-order harmonics. Software filters can analyze the spectrum and mute the assistant if they detect the signature of mechanical demodulation. * Acoustic damping barriers: Microphone manufacturers can install physical acoustic damping layers inside the chip housing that attenuate frequencies above 22,000 Hz before the sound wave ever reaches the silicon diaphragm. Inaudible voice injection works because digital security models assume analog sensors behave linearly. When sound waves push silicon past its linear limits, the hardware itself executes operations the operating system never authorized.