Slashdot Mirror
Hacker Teaches iPhone Forensics To Police
Ponca City, We love you writes "The Mercury News reports that former hacker Jonathan Zdziarski has been tapped by law-enforcement agencies nationwide to teach them just how much information is stored in iPhones — and how to get it. 'These devices are people's companions today,' says Zdziarski. 'They're not mobile phones anymore. They organize people's lives. And if you're doing something criminal, something about it is probably going to go through that phone.' For example, every time an iPhone user closes out of the built-in mapping application, the phone snaps a screenshot and stores it. Savvy law-enforcement agents armed with search warrants can use those snapshots to see if a suspect is lying about whereabouts during a crime."
Nobody would ever be clever enough to generate false data.. for an iAlibi? ..or clever enough to hack into and plant incriminating evidence? (not that there's ever been a security breach!)
..don't panic
Your iPhone is clearly not your friend, and this isn't the only story about why today. It's the fink waiting to rat you out at the first opportunity. Go look up the new Safari html 5 database tracking that uniquely identifies you to advertisers. Until the phone comes with strong enough encryption to defeat this hacker in addition to remote wipe that truly wipes the phone, you shouldn't be sleeping too well at night, courtesy of Mr. Steve Jobs.
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
"Guess what? We've got a pretty good idea how many crimes are committed where people aren't caught. People tend to report crimes, especially big ones."
That a rather large assertion without any support. I can't speak of all areas of crime, only 'cybercrime'. I can assure that most of this type of crime DOES NOT go reported regardless of size.
The reason is very simple. At this level both the robbed and the insurance company both have a great interest in making sure the event doesn't go public. That interest is greater than whatever help the police might provide. The insurance company has other clients who are likely vulnerable to the same thing. It is usually better to prevent others from finding out how to copycat than to stop this one guy. Especially if the guy is reported and not caught! The company robbed doesn't want to see a story about how they were attacked on MSNBC the next day. Their stock would plummet! Forget the company getting robbed, that would cost the CEO, VP's, and the board a lot of money on a personal level.
Your numbers about crime not being profitable run counter to common sense. The bulk of the things we outlaw are only called bad because they shift a large amount of wealth from one to another easily, consistently, and rapidly.
Also you pose this false dichotomy where one has to repeatedly take the same chance or else be able to live off a single event.
Five years ago it took 3hrs worth of work (but not time since you have to wait for mailings and such) to fake an identity get a few thousand in credit extended and convert that credit into cash. A reasonably intelligent person could figure out how to perform this task and make tracing and catching him meet the 'hard enough' threshold within an afternoon. That person could walk away with $5000. That is a pretty large chunk of cash for most of us.
The credit card company not only wouldn't report this but would fight with law enforcement in every way they legally could if law enforcement tried to investigate. Because of this if the 'victim' tries to report the crime the local police would say that interstate banking is the FBI problem. The FBI would tell her not to file the report because the card companies won't cooperate!
How do I know? I saw it first hand many times. If you did this enough the card companies would see a pattern and report you. They would cooperate. But if you were bright enough to stop at one or two times you could make $5k-$10k pretty much risk free.* Afterward you could continue your life the same as before but with a pretty substantial chunk, perhaps to invest for retirement. Perhaps for a child's college fund. Or maybe just to blow, it was free and easy money after all. As for taxes, $5k-$10k doesn't change a lifestyle and can easily be absorbed without having to pay the taxes as long as you don't deposit it all at once (or even at the same bank within a 3 month period, banks have to report large cash transactions over $5k or a suspicious combination of them).
* This is no longer the case. So many bright and unreported criminals did this that identity theft laws were lobbied for and put into place to make this more difficult.