How easy is it to steal $10,000 from a locked phone?
Score and analysis
Summary
Derek Muller, with cybersecurity experts Ioana Boureanu and Tom Chothia, demonstrates a sophisticated hack that bypasses iPhone security to steal funds from a locked phone.
They reveal how Apple's Express Transit Mode and specific Visa card vulnerabilities allow transactions without user verification, a loophole first disclosed in 2021. The video details the multi-layered technical exploit, including manipulating transaction data and bypassing cryptographic checks, highlighting the specific combination of an iPhone and a Visa card in transit mode as the key enabler.
Muller concludes by questioning whether Visa's zero liability policy is sufficient protection, emphasizing the need for technical changes to prevent such vulnerabilities from being exploited.
Breakdown
Derek Muller, Ioana Boureanu, and Tom Chothia meticulously break down the hack's three layers of defense bypass, explaining the technical nuances of Express Transit Mode, high-value transaction flags, and asymmetric cryptography.
They detail how specific interactions between Visa and Apple systems create the vulnerability, offering a systemic view of the exploit.
Derek Muller effectively builds tension throughout the demonstration of the hack, from the initial $5 transaction to the $10,000 attempt with Marques Brownlee.
The narrative structure, combined with clear explanations from experts and dynamic visuals, keeps the audience invested in the outcome.
Derek Muller presents the hack with clear demonstrations and expert interviews, while also seeking responses from Apple and Visa regarding their security protocols and the vulnerability.
The video acknowledges the limitations and specific conditions required for the hack to succeed, presenting a balanced view of the issue.
Derek Muller, along with cybersecurity experts Ioana Boureanu and Tom Chothia, reveals a sophisticated man-in-the-middle attack that bypasses phone security to steal funds.
They demonstrate how Express Transit Mode and specific Visa card vulnerabilities enable transactions without user verification, offering a novel perspective on mobile payment security.
The video relies on direct demonstrations with Marques Brownlee and detailed explanations from cybersecurity experts Ioana Boureanu and Tom Chothia.
It references the hack's public disclosure in 2021 and discusses specific technical protocols like RSA encryption, providing a strong foundation for its claims.
The Veritasium video features clear visuals and audio throughout its 25-minute runtime, with professional animations explaining complex technical concepts.
The production team effectively uses graphics and on-screen text to supplement the explanations provided by Derek Muller, Ioana Boureanu, and Tom Chothia.
Derek Muller concludes by highlighting that while Visa offers refunds, the stress and inconvenience of a $10,000 theft are significant, questioning if this is sufficient protection.
He emphasizes that technical changes are needed to prevent such vulnerabilities, leaving the audience with a clear call for better security measures.
Click any metric to see why it scored this way
Use VidScore on YouTube
Explore scores and profiles while you browse.
Get the ExtensionRelated videos
More videos we scored on the same topics.

The Day America Goes Dark
Redacted
I Was Right?!
The PrimeTime
Huge Wins Against The Flock Cameras…
SomeOrdinaryGamers
He 'Hacked' Flock Cameras. What He Found Is Terrifying (Benn Jordan)
IRONCLAD
Cybersecurity Expert Reveals America's Terrifying AI Arms Race
Shawn Ryan Show
I was wrong about VPNs
NetworkChuck
Watch this before you boot up another device
Low Level
your home router STILL SUCKS!! (use OPNsense instead)
NetworkChuck
dude wtf
Low Level
Investigating Flock: America's Mass Surveillance Company
Tommy G
im shocked more people aren't talking about this
Low Level
