Hardware

Repairing Your iPhone Home Button From An Unofficial Repair Shop Can Brick Your Phone

Comment

Going to an unauthorized Apple technician to repair your home button can cost you a lot of money. On Friday, The Guardian reported that thousands of iPhone users encountered a mysterious “Error 53” error due to a new security feature to protect your Touch ID data. This error renders your iPhone useless as it bricks it.

If you break your home button and you need to replace it, you’ll want to go to an official Apple Store or an authorized repair shop to avoid the error 53. If a third-party repair shop replaces your home button and you’re running iOS 9, Apple automatically bricks your phone. Once your iPhone is bricked, there’s no way to unbrick it.

I know what you’re thinking: Apple is an evil company and wants to capture all the repairing revenue. Well, not really. There’s a reason why Apple wants you to pay between $269 and $329 to replace your home button, and it’s security.

When Apple introduced its Touch ID sensor for the iPhone 5s, the company needed to reassure its customers. Your fingerprints don’t get uploaded to Apple’s servers. They’re not even stored on your iPhone’s regular storage space. Similarly, you won’t find them in your iCloud or iTunes backup.

Instead, your fingerprints are stored on a secure enclave. The secure enclave is a coprocessor that utilizes a secure boot process to make sure that it’s uncompromized. It has a secret unique ID not accessible by the rest of the phone or Apple — it’s like a private key. The phone generates ephemeral keys (think public keys) to talk with the secure ecnlave. They only work with the unique ID to encrypt and decrypt the data on the coprocessor.

And finally, the Touch ID sensor is paired with the secure enclave for increased security — otherwise everything I just described would be useless. A hacker would be able to replace your home button with a faulty Touch ID sensor to access everything that is stored on the secure enclave, including your Apple Pay details.

With iOS 9, Apple checks that the Touch ID sensor and secure enclave are still intact. If iOS 9 can’t verify the Touch ID sensor, Apple blocks your iPhone with an error 53. That’s why unauthorized repair shops can’t fix the home button. Comparatively, Apple stores and authorized repair shops pair the new home button with the secure enclave so that you can keep using Touch ID after a home button replacement.

And this is where Apple has made some mistakes. The company treats security very seriously but should also take advantage of its own design. The secure enclave works independently from the main processor. If iOS 9 can’t verify the authenticity of the Touch ID sensor, the OS should brick the secure enclave, or disable all Touch ID-related features, such as Apple Pay.

The company shouldn’t prevent you from accessing your precious photos, contacts and apps. Today’s implementation of the error 53 is a bad one, and I hope that Apple is going to fix it in the next iOS release.

And even more important, Apple should have communicated about this “Error 53” when releasing iOS 9.0 — the current support page is not enough. Customers deserve to know what’s happening and why Apple is preventing them from accessing their phones. Otherwise, people will think that Apple is greedy and wants to kill third-party repair shops, which is not true.

According to The Guardian, the issue affects the iPhone 6 and 6 Plus. It’s likely that people using an iPhone 5s, iPhone 6s or iPhone 6s Plus are also affected as these devices also have a Touch ID sensor. iPad users could also face the same issue if their devices have a Touch ID sensor.

Apple sent TechCrunch the following statement:

We take customer security very seriously and Error 53 is the result of security checks designed to protect our customers. iOS checks that the Touch ID sensor in your iPhone or iPad correctly matches your device’s other components. If iOS finds a mismatch, the check fails and Touch ID, including for Apple Pay use, is disabled. This security measure is necessary to protect your device and prevent a fraudulent Touch ID sensor from being used. If a customer encounters Error 53, we encourage them to contact Apple Support.

More TechCrunch

PayHOA, a previously bootstrapped Kentucky-based startup that offers software for self-managed homeowner associations (HOAs), is an example of how real-world problems can translate into opportunity. It just raised a $27.5…

Meet PayHOA, a profitable and once-bootstrapped SaaS startup that just landed a $27.5M Series A

Restaurant365, which offers a restaurant management suite, has raised a hot $175M from ICONIQ Growth, KKR and L Catterton.

Restaurant365 orders in $175M at $1B+ valuation to supersize its food service software stack 

Venture firm Shilling has launched a €50M fund to support growth-stage startups in its own portfolio and to invest in startups everywhere else. 

Portuguese VC firm Shilling launches €50M opportunity fund to back growth-stage startups

Chang She, previously the VP of engineering at Tubi and a Cloudera veteran, has years of experience building data tooling and infrastructure. But when She began working in the AI…

LanceDB, which counts Midjourney as a customer, is building databases for multimodal AI

Trawa simplifies energy purchasing and management for SMEs by leveraging an AI-powered platform and downstream data from customers. 

Berlin-based trawa raises €10M to use AI to make buying renewable energy easier for SMEs

Lydia is splitting itself into two apps — Lydia for P2P payments and Sumeria for those looking for a mobile-first bank account.

Lydia, the French payments app with 8 million users, launches mobile banking app Sumeria

Cargo ships docking at a commercial port incur costs called “disbursements” and “port call expenses.” This might be port dues, towage, and pilotage fees. It’s a complex patchwork and all…

Shipping logistics startup Harbor Lab raises $16M Series A led by Atomico

AWS has confirmed its European “sovereign cloud” will go live by the end of 2025, enabling greater data residency for the region.

AWS confirms will launch European ‘sovereign cloud’ in Germany by 2025, plans €7.8B investment over 15 years

Go Digit, an Indian insurance startup, has raised $141 million from investors including Goldman Sachs, ADIA, and Morgan Stanley as part of its IPO.

Indian insurance startup Go Digit raises $141M from anchor investors ahead of IPO

Peakbridge intends to invest in between 16 and 20 companies, investing around $10 million in each company. It has made eight investments so far.

Food VC Peakbridge has new $187M fund to transform future of food, like lab-made cocoa

For over six decades, the nonprofit has been active in the financial services sector.

Accion’s new $152.5M fund will back financial institutions serving small businesses globally

Meta’s newest social network, Threads, is starting its own fact-checking program after piggybacking on Instagram and Facebook’s network for a few months.

Threads finally starts its own fact-checking program

Looking Glass makes trippy-looking mixed-reality screens that make things look 3D without the need of special glasses. Today, it launches a pair of new displays, including a 16-inch mode that…

Looking Glass launches new 3D displays

Replacing Sutskever is Jakub Pachocki, OpenAI’s director of research.

Ilya Sutskever, OpenAI co-founder and longtime chief scientist, departs

Intuitive Machines made history when it became the first private company to land a spacecraft on the moon, so it makes sense to adapt that tech for Mars.

Intuitive Machines wants to help NASA return samples from Mars

As Google revamps itself for the AI era, offering AI overviews within its search results, the company is introducing a new way to filter for just text-based links. With the…

Google adds ‘Web’ search filter for showing old-school text links as AI rolls out

Blue Origin’s New Shepard rocket will take a crew to suborbital space for the first time in nearly two years later this month, the company announced on Tuesday.  The NS-25…

Blue Origin to resume crewed New Shepard launches on May 19

This will enable developers to use the on-device model to power their own AI features.

Google is building its Gemini Nano AI model into Chrome on the desktop

It ran 110 minutes, but Google managed to reference AI a whopping 121 times during Google I/O 2024 (by its own count). CEO Sundar Pichai referenced the figure to wrap…

Google mentioned ‘AI’ 120+ times during its I/O keynote

Firebase Genkit is an open source framework that enables developers to quickly build AI into new and existing applications.

Google launches Firebase Genkit, a new open source framework for building AI-powered apps

In the coming months, Google says it will open up the Gemini Nano model to more developers.

Patreon and Grammarly are already experimenting with Gemini Nano, says Google

As part of the update, Reddit also launched a dedicated AMA tab within the web post composer.

Reddit introduces new tools for ‘Ask Me Anything,’ its Q&A feature

Here are quick hits of the biggest news from the keynote as they are announced.

Google I/O 2024: Here’s everything Google just announced

LearnLM is already powering features across Google products, including in YouTube, Google’s Gemini apps, Google Search and Google Classroom.

LearnLM is Google’s new family of AI models for education

The official launch comes almost a year after YouTube began experimenting with AI-generated quizzes on its mobile app. 

Google is bringing AI-generated quizzes to academic videos on YouTube

Around 550 employees across autonomous vehicle company Motional have been laid off, according to information taken from WARN notice filings and sources at the company.  Earlier this week, TechCrunch reported…

Motional cut about 550 employees, around 40%, in recent restructuring, sources say

The keynote kicks off at 10 a.m. PT on Tuesday and will offer glimpses into the latest versions of Android, Wear OS and Android TV.

Google I/O 2024: Watch all of the AI, Android reveals

Google Play has a new discovery feature for apps, new ways to acquire users, updates to Play Points, and other enhancements to developer-facing tools.

Google Play preps a new full-screen app discovery feature and adds more developer tools

Soon, Android users will be able to drag and drop AI-generated images directly into their Gmail, Google Messages and other apps.

Gemini on Android becomes more capable and works with Gmail, Messages, YouTube and more

Veo can capture different visual and cinematic styles, including shots of landscapes and timelapses, and make edits and adjustments to already-generated footage.

Google Veo, a serious swing at AI-generated video, debuts at Google I/O 2024