Slashdot Mirror


FBI Gripes "We Can't Read Everyone's Secrets" (reuters.com)

New submitter rdukb writes: FBI Director James Comey told the Senate Intelligence Committee that investigators still can't access the phone contents of one of the San Bernadino killers. He went on to argue that the phenomenon of communications "going dark" due to more sophisticated technology and wider use of encryption is "overwhelmingly affecting" law enforcement operations, including, not only the San Bernadino murders, but also investigations into other murders, car accidents, drug trafficking and the proliferation of child pornography. This might increase pressure on Apple to loosen the backdoor restrictions. Will the industry relent and allow Government access to data from these devices?

175 comments

  1. Clickbait by Anonymous Coward · · Score: 0

    "Will the industry relent and allow Government access to data from these devices?"

    I don't know, but I had better click and find out!

    1. Re:Clickbait by ArmoredDragon · · Score: 1

      Admittedly I haven't read TFA, what has me scratching my head is how they know that this phone belonged to one of the San Bernadino killers. Perhaps they know who the phones belong to, but what makes them think the owner is one of the San Bernadino killers? Perhaps they already have other evidence and they don't actually need any backdoors?

    2. Re:Clickbait by Trax3001BBS · · Score: 1

      "Will the industry relent and allow Government access to data from these devices?"

      I don't know, but I had better click and find out!

      I didn't RTA either, it's of no use whatever it might claim, it's the background deals that will the key here.

    3. Re:Clickbait by stealth_finger · · Score: 1

      "Will the industry relent and allow Government access to data from these devices?"

      I don't know, but I had better click and find out!

      I would say Betteridge but in this case, probably yes.

      --
      Wanna buy a shirt?
      https://www.redbubble.com/people/stealthfinger/shop?asc=u
    4. Re:Clickbait by RockDoctor · · Score: 1

      They may have evidence as to who paid for the device, and/ or it's communications connection. Whether that is the person who was using it at the time that $SUSPICIOUS_COMMUNICATION$ is a question that they still have to address.

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
  2. Sure. Force Apple and Google to add backdoors by Anonymous Coward · · Score: 5, Insightful

    What could POSSIBLY go wrong?

    Um...maybe fifteen minutes after the first OS release, the Darknet will have utilities published to take advantage of them?

    Captcha: "contempt"

    1. Re:Sure. Force Apple and Google to add backdoors by Anonymous Coward · · Score: 0, Troll

      Well, only Apple is fighting backdoors.

      You might want to ask yourself why.

    2. Re:Sure. Force Apple and Google to add backdoors by Anonymous Coward · · Score: 1

      Well, only Apple is fighting backdoors.

      You might want to ask yourself why.

      Because BlackBerry sold-out to Government long ago.

    3. Re:Sure. Force Apple and Google to add backdoors by Anonymous Coward · · Score: 1

      And Google.

      And Samsung.

      And Windows.

      And Nokia.

  3. If you open that backdoor... by Anonymous Coward · · Score: 3, Insightful

    You will just force me to find other means to encrypt, making my device even DARKER than it already is...

    1. Re:If you open that backdoor... by mark-t · · Score: 3, Interesting

      The idea, I imagine they believe, is that when you have to go to suffficient lengths to keep your data confidential, you will actually draw even *more* attention in the process, and even if you are not guilty of anything in particular, may find yourself more heavily scrutinized by the powers that be than the average individual.

    2. Re: If you open that backdoor... by Anonymous Coward · · Score: 0

      I used to think this. Now I randomly do things which may or may not be real. That 320mb encrypted file? Garbage with the best password phrase and access key I could make. That other very similar encrypted file? My tax data. Whoop de doo. Going to break every file I have for hundreds of these files spread across machines drop box and everywhere else i sizes of 20mb to 2gb? Right.

    3. Re:If you open that backdoor... by dcollins117 · · Score: 1

      The idea, I imagine they believe, is that when you have to go to suffficient lengths to keep your data confidential, you will actually draw even *more* attention in the process, and even if you are not guilty of anything in particular, may find yourself more heavily scrutinized by the powers that be than the average individual.

      The use of strong encryption in no way implies that you are "guilty" of anything or have "done something wrong."

      It means you have taken proper and necessary steps to secure your data against unauthorized access. That is what all good digital citizens should be doing. Many don't, and that's why we see stories every week about a large data breach of names, addresses, social security numbers, etc. being handed over to criminals.

      Since everyone is subject to suspicionless, unwarranted surveillance, it doesn't seem to me to be useful to be concerned about drawing even "more" attention to yourself. You're already under surveillance, by doing nothing at all. That's why we use of encryption.

    4. Re:If you open that backdoor... by mark-t · · Score: 1

      The use of strong encryption in no way implies that you are "guilty" of anything or have "done something wrong."

      I didn't suggest that it did.

      In the eyes of those who might believe that if one is doing nothing wrong they have nothing to hide (which is false, but there are still people who believe believe it), however, it might at the very least give them an incentive to more closely scrutinize that person's activities, at least moreso than the average person who follows the government status quo procedures.

      But again, I do not ever mean to suggest that this should be an indication that one actually *has* done something wrong, only that there are people who may *believe* something wrong may be happening, and in the end, that belief will still influence what actions they take.

    5. Re:If you open that backdoor... by Anonymous Coward · · Score: 1

      "The use of strong encryption in no way implies that you are "guilty" of anything or have "done something wrong.""

      Correct, the use of strong encryption means you will be more heavily targeted for your information than someone else simply because they have to do more than press a button to get it out of you. (Will include, as we've seen, treating you like a criminal to get that information.)

    6. Re:If you open that backdoor... by Anonymous Coward · · Score: 0

      They don't need backdoors when they can just buy zerodays. Simple analogy: they don't need keys to your door locks when they can simply buy a hammer and smash the door in, legally, having a warrant. Which begs the question: why are they really concerned? Cryptocurrency is one option

    7. Re:If you open that backdoor... by Rakarra · · Score: 1

      The use of strong encryption in no way implies that you are "guilty" of anything or have "done something wrong."

      The FBI under Hoover learned that everyone is "guilty" of something, whether it's illegal or not, and that it's very helpful to have such information on-hand.

    8. Re:If you open that backdoor... by Anonymous Coward · · Score: 0

      The use of strong encryption in no way implies that you are "guilty" of anything or have "done something wrong."

      I didn't suggest that it did.

      Mind, the prosecutor might not be implying it, but his eyebrows are going to fall off if they stretch any further in that direction.

      Like it or lump it, strong encryption literally screams "I DON'T WANT YOU TO KNOW ABOUT THIS", and human nature dictates that everyone will become *very* interested in what you don't want them to know. And since we'll probably never know what was actually on the phone, it becomes a Magical Mystery Machine that the FBI can stuff full of life-saving miracle information, that if we only had a backdoor could have saved trillions of lives..

  4. No by Kohath · · Score: 5, Insightful

    People made that mistake before. We learned our lesson. Government can't be trusted. They demonstrate it a new way every day.

    1. Re:No by Darinbob · · Score: 5, Insightful

      "Overwhelmingly affecting" law enforcement. Really? What did they do when people didn't have technology and just whispered their secrets to each other? Did they whine that they couldn't hear the secrets and tried to pass laws that required everyone to shout? We have always had secrets that law enforcement could never figure out and we always will. There have always been unsolved cases, and there always will be. Law enforcement has always whined that it could do more if only they had more power, and they always will.

    2. Re:No by Anonymous Coward · · Score: 1

      We haven't learned our lesson. Maybe *you* have. Maybe a large percentage of the slashdot crowd has. But the majority of the voting populace doesn't know or care how much spying the government does. And they generally trust the government with the information, because that is so much more convenient than calling the government out on its corruption.

      And even if the current crop of voters *did* learn their lesson (which they did not), the next generation has not learned it, and will make the same mistakes all over again.

    3. Re:No by Sperbels · · Score: 5, Funny

      If you people would only let us slowly tear the flesh off of our suspect, getting a confession would be that much easier. It's like you guys want more crime.

    4. Re:No by bobbied · · Score: 1

      Ah, the founding fathers would be proud. Now if we can just get the REST of the constitution back in favor, that would be great.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    5. Re:No by Anonymous Coward · · Score: 0

      I put my faith in companies, because they're peoples!

    6. Re:No by Kohath · · Score: 5, Interesting

      And even if the current crop of voters *did* learn their lesson (which they did not), the next generation has not learned it, and will make the same mistakes all over again.

      I don't think the next generation will side with law enforcement. What did the police ever do for them besides hassle them, give them traffic tickets, and threaten to raid their parties? We have the lowest crime in decades and safest highways ever. Law enforcement is generally not needed and increasingly feared by regular people.

      The people who like law enforcement are 55+ and remember trying to raise a family during the crime wave times of 1970-1990.

    7. Re:No by Fnord666 · · Score: 1

      If you people would only let us slowly tear the flesh off of our suspect, getting a confession would be that much easier. It's like you guys want more crime.

      I believe the taser is the torture device du jour for LEOs these days.

      --
      'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
    8. Re:No by mark-t · · Score: 3, Interesting

      What I think is more interesting is that even *IF* the government could be trusted, it would still be a bad idea to give them unfettered access, because if they can read your confidential data, however benign they may claim their intentions to be, then so can somebody with less benevolent motivations. The net result is that instead of making things easier for law enforcement, it will actually made things harder because law enforcement would then be further burdened with trying to also protect those who are innocent from predatory criminals who are exploiting the weaker security that would be made mandatory.

      Obviously if you don't trust the government in the first place, this is clearly a bad idea.... but it is interesting, I think, to note that even if the government *COULD* be trusted, it still works out to an overall bad idea, with a net negative benefit for absolutely everyone, both the people *AND* the government. The only ones who would really come out ahead are the ones who disregard the law.

    9. Re:No by Jack+Griffin · · Score: 3, Interesting

      I don't think the next generation will side with law enforcement. What did the police ever do for them besides hassle them, give them traffic tickets, and threaten to raid their parties? We have the lowest crime in decades and safest highways ever. Law enforcement is generally not needed and increasingly feared by regular people.

      This is a really good point. The police are losing the hearts and minds and seem content to let it drift away. The biggest threat to the rule of law is the lack of buy-in from the people.
      As you say, when I was a kid it was dangerous to go out at night. Violent crime was a lot more common and the police were the good guys (mostly) there to protect and serve. We used to have a local cops visit the school and everyone knew them by first name.

      Nowadays I feel free to walk the streets any time of night, I sleep with my front door open, I never lock my car, we live in the the safest and most prosperous times. Yet my experience of the Police is some jerks who wants to punish me for the most ridiculously trivial things.
      The cops need a PR makeover, get back into the community as part of the community, as more social oriented workers than para-military bully boys.

    10. Re:No by BoogieChile · · Score: 1

      Has the pepper spray novelty worn off, then?

    11. Re: No by Anonymous Coward · · Score: 0

      The police DOES NOT CARE about winning the "hearts and the minds" of the populace. Just as the whole of government does not care or need for it. They have overwhelming power on their side and are becoming more and more bold about using that power disproportionally. If anyone protest they just use more power. That's how things are, now and for the foreseeable future.

    12. Re:No by AmiMoJo · · Score: 1

      I hope encryption is "overwhelmingly affecting" law enforcement's efforts to create a panopticon and collect bulk data. That means we are getting safer, we are winning the second crypto war.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    13. Re:No by Anonymous Coward · · Score: 0

      > We learned our lesson.

      [citation needed]

      btw, captcha:erasable

    14. Re: No by Rakarra · · Score: 1

      The police DOES NOT CARE about winning the "hearts and the minds" of the populace.

      Doesn't sound like you know any police officers, or much about the police in general other than "big government" stereotypes.

  5. No. by Anonymous Coward · · Score: 0

    Just no. Nope. Not gonna happen.

  6. To answer the question posed... by Anonymous Coward · · Score: 0

    I hope not.

  7. Boo Hoo!! by fred911 · · Score: 5, Insightful

    "overwhelmingly affecting" law enforcement operations"

      Including extra-legal warrantless, domestic, mass surveillance. Go cry somewhere else, the US intelligence
    complex made this bed, now go lie in it.

      We need more end to end encryption to be used as a daily matter of fact, because it's been proven time and time again you aren't trustable.

    --
    09 F9 11 02 9D 74 E3 5B - D8 41 56 C5 63 56 88 C0 45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  8. more FBI lies by dltaylor · · Score: 5, Insightful

    FBI directors lie to Congress as part of their normal job duties.

    This is just more of the same.

    1. Re:more FBI lies by PolygamousRanchKid+ · · Score: 5, Insightful

      Well, now that the FBI employee directory is out. Concerned citizens can call or email the FBI Director directly, to voice their concerns.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    2. Re:more FBI lies by Anonymous Coward · · Score: 0

      You are thinking of Clapper, this is Comey a different guy. I'm not aware of him lying to Congress.

    3. Re:more FBI lies by FatdogHaiku · · Score: 2

      When bureaucrats talk with politicians,
      the truth can be lost on the head of a pin.

      Also, Help, I'm trapped in a fortune cookie factory!

      --
      You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office
    4. Re:more FBI lies by Anonymous Coward · · Score: 0

      Omnivore, J Edgar listening to tapes of Jane Fonda having sex (while looking stunning in a paisley print frock), this goes all the way back.

      Law enforcement in a free society is supposed to be hard.

      To summarize Commey, WHAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, huh, huh, WHAAAAAAAAAAAAAAAAAAAA....

    5. Re:more FBI lies by Jack+Griffin · · Score: 1

      FBI directors lie to Congress as part of their normal job duties.

      So do you, so why do you expect others to behave differently?
      This is part of the problem, instead of expecting our teachers, coaches, priests, police, politicians etc to be immune to human behaviour, we should expect it and take appropriate precautions.

    6. Re:more FBI lies by Cederic · · Score: 1

      I'm really not convinced that Hoover looked stunning in a paisley print frock.

  9. Yeah, Officials tell us the truth eh? by Anonymous Coward · · Score: 0

    Like Mr N.S.A...

  10. NSA Disagrees (sort of) by xbytor · · Score: 1
  11. Dear FBI by Anonymous Coward · · Score: 5, Insightful

    Dear FBI,
    Backdoors will only let you catch the dumbest of dumb criminals. Encryption exists, you can't uninvent it. Taking default encryption away, hurts the privacy of the innocent and does nothing to stop the bad guys from using their own encryption. You can't have a backdoor without the possibility that others will figure out how to access that backdoor too. Just deal with it already and stop trying to destroy security.

    1. Re:Dear FBI by Anonymous Coward · · Score: 0

      OTP's https://en.wikipedia.org/wiki/One-time_pad have been around for along time, you dont need technology to encrypt coominications and OTP with a proper setup and used correctly is theroticaly impossiable to crack, encryption isn't new and its importaint for many reasons, just because it may contain information that may help you is not a good reason to weaken encrypton, or make it an offence to use.

    2. Re:Dear FBI by Anonymous Coward · · Score: 0

      Message Acknowledged.
          -Agent 3472-341

    3. Re:Dear FBI by rtb61 · · Score: 1

      Cough, cough, how about this
      If you really wanted to interrogate them that much, then maybe you should not have shot them to bits.
      Surely you don't want the evidence to prosecute dead people?
      Maybe, might be fishing expedition are no excuse (no bullshit with 6 degrees of separation means you can investigate everyone on the planet).

      They have got the individuals and every weapon and ammo and residence, a field mine of DNA to track down and you will get far more from the DNA than you will the phone. You know both of them recently where in Saudi Arabia for an extended period and these two went off exactly like you would imagine brain washed sleeper agents being accidentally trigger and going for the wrong target. Want to know what really happened stick a roto-rooter up the collective backsides of the House of Saud, they seem to be getting rid of a bunch more brain washed sleeper agents at this time (try questioning them away from Saudia Arabia before they are silenced for ever or just ask NATO they know exactly what is going on in Saudi Arabia).

      So what does a backdoor in phones have to do with that glaring missing backdoor into the corrupt activities of NATO (technically there should be one for the FBI and other NATO countries police investigatory agencies) and Saudi Arabia (which is where NATO has a near complete electronic backdoor and to which the FBI should be demanding access, shit bucket ton more evidence than that mobile phone).

      --
      Chaos - everything, everywhere, everywhen
    4. Re:Dear FBI by Jack+Griffin · · Score: 1

      Dear FBI, Backdoors will only let you catch the dumbest of dumb criminals.

      That might be good enough.
      My bank is full of clever criminals who fleece 0.1% here and 0.2% there to make themselves rich and get away with it. The stupid crims will hold a gun to your face and may shoot you for $50. Given the choice, I can live with the smart crims.

  12. Hiring Fail by randalware · · Score: 5, Insightful

    The police are not hiring some people because they have too high of an IQ.

    Then the people they do hire, whine "Can't you make this easier ? It's too hard !"

    What do you want next ?

    Master keys to all physical locks ?
    People must use their birth names ?
    No cars that can exceed 30 mph ?
    Everyone wear hi-viz clothes and flashing lights ?
    Nation ID numbers tattooed on your cheeks ? all four cheeks ?

    If it was an easy job, stopping crooks, all our bankers, lawyers & politicians would be incarcerated.

    --
    This is my opinion based on what little I know and understand of the rumors and lies Thanks, Randal
    1. Re:Hiring Fail by Virtucon · · Score: 1

      The police are not hiring some people because they have too high of an IQ.

      Then the people they do hire, whine "Can't you make this easier ? It's too hard !"

      What do you want next ?

      Master keys to all physical locks ?
      People must use their birth names ?
      No cars that can exceed 30 mph ?
      Everyone wear hi-viz clothes and flashing lights ?
      Nation ID numbers tattooed on your cheeks ? all four cheeks ?

      If it was an easy job, stopping crooks, all our bankers, lawyers & politicians would be incarcerated.

      Master Keys - Wanted but all Internet Tech companies know that this is fatal to their business model.
      No cars that can exceed 30 mph - See Self Driving Cars. Once we have you in a self driving car, regulating speed , route is easy.
      hi-viz clothes and flashing lights ? - See Japan
      National ID numbers tattooed on your cheeks - Close but see Real ID legislation that was passed without debate in congress as a rider.

      --
      Harrison's Postulate - "For every action there is an equal and opposite criticism"
    2. Re:Hiring Fail by PAjamian · · Score: 1

      What do you want next ?

      Master keys to all physical locks ?

      Already got those, they're called lock picks, and the police can't even use them, they have to ram people's door in instead.

      The crooks, on the other hand, are very good at using lock picks.

      --
      Windows is a bonfire, Linux is the sun. Linux only looks smaller if you lack perspective.
    3. Re:Hiring Fail by Anonymous Coward · · Score: 1

      Master keys to all physical locks ?

      TSA demanded and got that, and look how well that turned out. http://it.slashdot.org/story/15/09/09/1143206/tsa-luggage-lock-master-keys-are-compromised

    4. Re:Hiring Fail by Jack+Griffin · · Score: 1

      Then the people they do hire, whine "Can't you make this easier ? It's too hard !"

      Isn't it natural to want to make your job easier? I've never heard a trench digger ask for a smaller shovel, or surgeon say to put the implements away, I'll do this one with my bare hands...

    5. Re:Hiring Fail by Anonymous Coward · · Score: 0

      Bullshit, you watch too many movies. Crooks suck at lock picks because lock picks suck.
      It's complete bullshit that you can easily open a door with a lock pick.
      Picking locks is damn hard and for modern locks damn near impossible.
      Crooks just break the window.

      Please post a video of yourself using a lock-pick to crack a modern door lock.
      I won't be holding my breath.

    6. Re:Hiring Fail by Anonymous Coward · · Score: 0

      My dad was the maintenance foreman in a manufacturing facility, where the company apparently didn't want backup keys for some reason. He had to be able to pick locks in case of lost/stolen keys, and he did make it look easy. I watched him pick those locks at work, both door locks and padlocks, and none of those were simple household locks. However, that was a third of a century ago, so maybe they wouldn't qualify as "modern" locks by your definition. However, he could also pick the type of locks that used a circular key, but it took him longer.

      Crooks suck at lock picking for the same reason they suck at shooting people - they don't practice diligently and they fail to maintain their tools, in the unlikely case they even have such tools. If they had that kind of work ethic, most of them would probably just get jobs. My dad tried to show me (around age 11) how to pick a lock using his tools and an exposed lock cylinder, but I wasn't able to do it, and it shouldn't surprise anyone that it's a skill which requires practice.

      You're right about the window-breaking, though. It's just easier, and doesn't require much practice or skill.

      - T

  13. don't believe his lies by Gravis+Zero · · Score: 4, Insightful

    FBI director says investigators unable to unlock San Bernardino killer's phone content

    things one needs to unlock a smartphone:
    * fingerprint (sometimes) (difficulty: invalid)
    * dump the flash memory (difficulty: hobbyist)
    * to avoid lockout, have machines emulate the phone and try every combination to unlock the phone (difficulty: developer)

    conclusion: the investigators had a technician unlock the phone in less than an hour

    DO NOT BELIEVE HIS LIES.

    --
    Anons need not reply. Questions end with a question mark.
    1. Re:don't believe his lies by AHuxley · · Score: 0

      Yes the devices sold, designed for consumers in the US have to be wiretap, plain text and voice recording friendly.
      If not they would not be on sale and be locked out of networks.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:don't believe his lies by mrchaotica · · Score: 1

      to avoid lockout, have machines emulate the phone and try every combination to unlock the phone (difficulty: developer)

      It's not that it's difficult, it's just that it requires more time than the heat death of the universe to execute.

      I don't deny the FBI director's assertion that they were unable to decrypt the phone; I deny his assertion that their failure constitutes any kind of problem.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    3. Re:don't believe his lies by Cyberax · · Score: 1

      Nope. Doesn't work like this:
      1) Flash memory in iPhones is encrypted with a strong random key.
      2) The key is contained only in RAM and inside the TPM module that also does fingerprint recognition.
      3) The key can be released if the correct PIN is entered. However, the key is irrevocably destroyed by the TPM module if you try more than 6 wrong PINs.

      In conclusion, pretty much the only way to unlock a modern iPhone when its owner is dead is to have the fingerprint available.

    4. Re:don't believe his lies by LateArthurDent · · Score: 1

      It's not that it's difficult, it's just that it requires more time than the heat death of the universe to execute.

      Eh...most phones I've seen limit your key to a 4-digit pin. So we're really talking 10,000 combinations, and that's without taking in consideration the non-uniform distribution of pins people choose.

    5. Re:don't believe his lies by Anubis+IV · · Score: 4, Insightful

      devices sold, designed for consumers in the US have to be wiretap, plain text and voice recording friendly.

      No, they don't. Encrypted phones are used every day by the US government itself, as well as numerous businesses. Consumer-facing products such as FaceTime, FaceTime Audio, and iMessage are readily available today, are used by tens of millions of people, and are designed with end-to-end encryption that prevents wiretaps from taking place. Comparable products exist for other platforms. What you just said is an outright fabrication.

      Moreover, the Constitution's Fourth Amendment grants "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures". It does not grant the government the right to deny us security on the basis that they may one day have a reasonable cause for a search or seizure. They're left to figure out how to get access on their own, despite our right to be secure. If I put my papers in a safe, that means bringing in a safecracker, not legally obligating all safe manufacturers to put defects in their safes that make them less secure. If I put my stuff in my car, that means bringing in a locksmith, not legally obligating all car manufacturers to put defects in their safes that makes them easier to break into. And if I put my data in a smartphone, that means bringing in a hacker, not legally obligating all smartphone manufacturers to put defects in their phones that makes them easier to access.

      In this particular case, I wish the government the best, but the suggestion that we shouldn't have the right to secure our smartphone because that same right can be used by criminals to hide wrongdoing is no different than suggesting that we shouldn't have the right to free speech because that same right can be used by criminals to incite wrongdoing.

    6. Re:don't believe his lies by cfalcon · · Score: 2

      Phones don't need to be wiretap friendly, you have no obligation to forfeit privacy, and the constitution guarantees your right to privacy and free speech.

      With that said, the phones are not constructed idiotically, and will wipe / key dump if attacked naively with brute force. Additionally, I don't know which phones are limited to 4 character passphrases, but it is sure as FUCK not "most". Android users can set a password, Apple users can set a password. Maybe some trivially untrustworthy shit limits your password length to 4 digits, but nothing worth using.

    7. Re:don't believe his lies by Anonymous Coward · · Score: 1

      If you have a search warrant: you have fingerprints. I mean: it's not like we leave them on everything we touch or anything...

      San Bernardino shooters are A) dead and B) didn't burn their house down. I'm pretty sure they had an opportunity to get some fingerprints off of them!

      Also: the federal government has nitric acid and electron microscopes. They have the capability to decap that TPM chip and flip the 0-5 iterating bits to prevent them from ever hitting "6". This is just one of many attacks that could be used to unlock that iPhone. If they don't have it's contents, it's because they don't need them badly enough to pay the money required to get them.

      The entire argument suggests that they most certainly HAVE decrypted the phone and are just trying to maximize the shelf-life of the intelligence contained within by playing stupid to lull the guilty parties in to a false sense of security.

    8. Re:don't believe his lies by Gravis+Zero · · Score: 1

      It's not that it's difficult, it's just that it requires more time than the heat death of the universe to execute.

      to crack the AES encryption: yes. to crack smartphone security: no.

      --
      Anons need not reply. Questions end with a question mark.
    9. Re:don't believe his lies by Anonymous Coward · · Score: 0

      San Bernardino shooters are A) dead and B) didn't burn their house down. I'm pretty sure they had an opportunity to get some fingerprints off of them!

      Would that be before or after the government decided to let dozens of media types into the apartment, contaminating the entire scene? That one still smells, to me.

    10. Re:don't believe his lies by Anonymous Coward · · Score: 0

      Why doesn't the FBI just ask the NSA for the phone and internet records?

    11. Re:don't believe his lies by Gravis+Zero · · Score: 1

      2) The key is contained only in RAM and inside the TPM module that also does fingerprint recognition.

      i wouldn't be surprised if...
      1) Infineon had a way to subvert their own security
      2) FBI decapped the chip to retrieve the key. you can edit silicon circuits with a Focused Ion Beam. it's pricey and slow but it can be done.

      --
      Anons need not reply. Questions end with a question mark.
    12. Re:don't believe his lies by Anonymous Coward · · Score: 0

      DO NOT BELIEVE HIS LIES.

      Nobody here does, the problem is people in Congress barely understand how the light switch works and will believe almost anything (if there are enough dollars involved).

    13. Re:don't believe his lies by Cyberax · · Score: 1

      TPM chips are designed to withstand such attacks by using distributed storage. I really doubt that you can pull it off even in the best lab. And even then the cost of doing it will probably make sense only for highest-grade intelligence, not regular terrorist investigations.

    14. Re:don't believe his lies by Gravis+Zero · · Score: 1

      TPM chips are designed to withstand such attacks by using distributed storage. I really doubt that you can pull it off even in the best lab. And even then the cost of doing it will probably make sense only for highest-grade intelligence, not regular terrorist investigations.

      oh please. all they have to do is disable the self-destruct/counter mechanism and the rest is a brute force attack. i'm sure Infineon even has a backdoor mechanism to disable it. I doubt Apple is even using TPM 2.0 which makes this all moot because TPM 1.2 is a joke.

      --
      Anons need not reply. Questions end with a question mark.
    15. Re:don't believe his lies by bloodhawk · · Score: 1

      to avoid lockout, have machines emulate the phone and try every combination to unlock the phone (difficulty: developer)

      It's not that it's difficult, it's just that it requires more time than the heat death of the universe to execute.

      I don't deny the FBI director's assertion that they were unable to decrypt the phone; I deny his assertion that their failure constitutes any kind of problem.

      The average user has a 4-6 digit pin, even if it is 8 or 10 digits you are looking at a few hours at most to crack it, You aren't searching for a 128 bit or 256 bit key here, just the users password to unlock.

    16. Re:don't believe his lies by Anonymous Coward · · Score: 0

      you don't brute force a phone directly, You dismantle, dump the contents and brute force to your hearts content.

    17. Re:don't believe his lies by guruevi · · Score: 1

      The way the chips works, it isn't really that simple. The PIN unlocks a larger cryptographic hash. If you enter 10 wrong pins, the chip deletes it's "memory" of this hash.

      The crypto-chip and the key verification are one unit, any form of tampering (opening the device, removing the chip/power etc) could probably trigger a wipe as well. I think the only way of doing it (if there are no tamper controls), would be to use perhaps an electron microscope and remove layer by layer of the chip until you can read out the actual memory bit by bit. That is something a nation-state can do for very high profile cases (when stealing a president's phone for example) but it's cost prohibitive for anything else or to do it en masse. And as soon as such an attack gets used, chip makers would probably find ways to get around that as well.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    18. Re:don't believe his lies by LordWabbit2 · · Score: 2
      It's not as simple as that, the following was from a fellow slashdotter on a different post, I sent a copy to friends because I found it so interesting. Unfortuanately I did not keep a copy of WHO he was, my apologies to him for posting it again without attributing it to him.

      You mistake an iPhone's unlock code with the iPhone's encryption key. the iPhones do typically use a 4-6 digit pin as an unlock code. The user also has the ability to create a full alphanumeric password for the unlock code as well. However, that is simply the code that's used to unlock the actual full encryption key that is stored within dedicated crypto hardware. Apple uses a dedicated chip to store and process the encryption. They call this the Secure Enclave. Within the secure enclave itself, you have the device's Unique ID (UID) . The only place this information is stored is within the secure enclave. It can't be queried or accessed from any other part of the device or OS. Within the phone's processor you also have the device's Group ID (GID). Both of these numbers combine to create 1/2 of the encryption key. These are numbers that are burned into the silicon, aren't accessible outside of the chips themselves, and aren't recorded anywhere once they are burned into the silicon. Apple doesn't keep records of these numbers. The second half of the encryption key is generated using a random number generator chip. It creates entropy using the various sensors on the iPhone itself during boot (microphone, accelerometer, camera, etc.) This part of the key is stored within the Secure Enclave as well, where it resides and doesn't leave. This storage is tamper resistant and can't be accessed outside of the encryption system. Even if the UID and GID components of the encryption key are compromised on Apple's end, it still wouldn't be possible to decrypt an iPhone since that's only 1/2 of the key. The secure enclave is part of an overall hardware based encryption system that completely encrypts all of the user storage. It will only decrypt content if provided with the unlock code. The unlock code itself is entangled with the device's UDID so that all attempts to decrypt the storage must be done on the device itself. You must have all 3 pieces present: The specific secure enclave, the specific processor of the iphone, and the flash memory that you are trying to decrypt. Basically, you can't pull the device apart to attack an individual piece of the encryption or get around parts of the encryption storage process. You can't run the decryption or brute forcing of the unlock code in an emulator. It requires that the actual hardware components are present and can only be done on the specific device itself. The secure enclave also has hardware enforced time-delays and key-destruction. You can set the phone to wipe the encryption key (and all the data contained on the phone) after 10 failed attempts. If you have the data-wipe turned on, then the secure enclave will nuke the key that it stores after 10 failed attempts. Whether the device-wipe feature is turned on or not, the secure enclave still has a hardware-enforced delay between attempts at entering the code: Attempts 1-4 have no delay, Attempt 5 has a delay of 1 minute. Attempt 6 has a delay of 5 minutes. Attempts 7 and 8 have a delay of 15 minutes. And attempts 9 or more have a delay of 1 hour. This delay is enforced by the secure enclave and can not be bypassed, even if you completely replace the operating system of the phone itself. If you have a 6-digit pin code, it will take, on average, nearly 6 years to brute-force the code. 4-digit pin will take almost a year. if you have an alpha-numeric password the amount of time required could extend beyond the heat-death of the universe. Key destruction is turned on by default. Even if you pull the flash storage out of the device, image it, and attempt to get around key destruction that way it won't be successful. The key isn't stored on the flash itself, it's only stored within the secure enclave itself which you can't remove the storage from.

      --
      There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    19. Re:don't believe his lies by MatthiasF · · Score: 1

      The last option you mention, creating an emulated copy of the phone, is ultimately the most likely scenario the FBI will use in the future.

      They can simply copy the contents of the phone, copy any IDs or chip based encryption keys, throw it into a virtualized environment and then send tons of possible combinations at it.

      In the end, the fingerprint scanner is probably the easiest method to break. The FBI already has a huge database of fingerprints then can just randomly throw at the virtualized phone, or even generate random fingerprints. The fingerprint software itself is not as accurate as people think, so I doubt the phone would last a day or two of brute force.

    20. Re:don't believe his lies by Cederic · · Score: 1

      So I can wipe peoples iPhones by entering a bad pin ten times?

      Awesome. I'm going to get sacked.

    21. Re:don't believe his lies by guruevi · · Score: 1

      Yes, it actually works if you have hours of time to do it. There is a progressive time lockout. So after 3 attempts, you get 1 minute timeout, this gets progressively worse as after 8 and 9 attempts it's an hour per attempt so you'll spend ~2-3 hours on the process.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    22. Re:don't believe his lies by david_thornley · · Score: 1

      Ten thousand combinations, and it's easy to set an iPhone to wipe after ten unsuccessful attempts to enter the PIN, so the chance is roughly one in a thousand, perhaps one in a hundred for some given non-uniform distributions. You'll lose everything on the device, but you should always have that backed up.

      The interesting thing about an iPhone, cryptographically, is that the key needs a secret key embedded in a chip that's hardened so it would be extremely difficult or impossible to retrieve the key. It is certainly possible to copy the storage off the phone (I believe this can be done before or after wiping, since wiping just renders the key that was used unrecoverable) and attempt to decrypt AES-256, but that's not actually feasible.

      I don't understand all the details (cryptography and computer security are very complex fields), but the intended effect is that the information on an iPhone can be accessed only by entering the correct PIN, and I haven't heard that anyone has breached that.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    23. Re:don't believe his lies by david_thornley · · Score: 1

      If you store important stuff on an iDevice, without any sort of backup, you will lose it. I don't understand the security behind the iCloud backups, but nobody's claimed to be able to crack that.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  14. Boycot by kheldan · · Score: 1

    Will the industry relent and allow Government access to data from these devices?

    If they or any company does, then they should be boycotted until they go bankrupt. It'll never end. Even if the government got access to every single device immediately, it would never be enough for them. Next they'd be pushing for being above any basic civil or human rights, and be able to use at will any torture techniques they felt like to pry 'secrets' out of peoples' brains, too. Ironically no one would ever be safe ever again, more fearful of the people who were once supposed to protect them than they ever were of so-called 'terrorists'. It has to stop, it has to stop NOW.

    --
    Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    1. Re:Boycot by U2xhc2hkb3QgU3Vja3M · · Score: 2

      If they or any company does, then they should be boycotted until they go bankrupt.

      You mean like Microsoft, with Windows 10 which communicates with dozens of servers even when you turn telemetry off?

    2. Re:Boycot by kheldan · · Score: 1

      Yep, boycotting them too, but for different reasons. Don't know (or care) if they're sharing all that data with the government or not, just boycotting them because they're a bunch of dicks.

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    3. Re:Boycot by Jack+Griffin · · Score: 1

      Will the industry relent and allow Government access to data from these devices?

      If they or any company does, then they should be boycotted until they go bankrupt.

      What if getting access to one of these devices would save your family's lives?
      I'm not supporting the abuse of power here, and put the bad cops to the side for a sec, we all know that routine. Ultimately, there are bad people out there who want to kill us, and it the function of law enforcement to stop them. Rather than continually hate on authorities, I'd be more interested in hearing what possible solutions exist for a law enforcement to function within the expectations of society. Because you can bet as soon as it affects your family, you'll be crying that the authorities don't have enough power. Somewhere must exist a happy middle ground.

    4. Re: Boycot by Anonymous Coward · · Score: 0

      You're barking up the wrong tree: nerds do not have families and/or loved ones.

    5. Re: Boycot by Anonymous Coward · · Score: 0

      You are aware that your boycotting "efforts" are absolutely futile, aren't you? Boycotts only work when you have large numbers on your side and in this global market, you simply do not and can not have them. You can keep "boycotting" but don't delude yourself into thinking you will ever have an impact. You're not the fearless revolutionary leader on the barricades; you're the weird type nobody wants to talk to, sulking in the corner and being ignored. But hey, if it works for you...

    6. Re: Boycot by Anonymous Coward · · Score: 0

      ..Oh, OK, I'll just go buy Windows 10 and let Clippy go through and organize my underwear drawer at night and watch me sleep, IT'S OK herp derp

      Shut the fuck up faggot Microsoft shill. Go back to sucking those huge black cocks you love so much. Be sure to remember to swallow.

    7. Re:Boycot by Anonymous Coward · · Score: 0

      Get that emotional-argument bullshit out of here.

      What's next? Think of the children?

      Just because you don't understand or value privacy or security doesn't mean that there aren't some of us that do.

    8. Re: Boycot by Rakarra · · Score: 1

      Do you have any way to actually counter his arguments other than loudly yelling nonsense?

    9. Re:Boycot by david_thornley · · Score: 1

      There's a legal saying that "hard cases make bad law". I can come up with situations where people's lives will be saved for any violation of civil liberties you care to name. Heck, even torture can work if the information you seek is easily verifiable but not obtainable (something like NP problems). In the meantime, any way to crack my iPhone can be used by bad guys as well as good guys.

      I understand that you're a coward, and have sympathy, but you're talking about giving up privacy for an infinitesimal increase in security against a particular unlikely threat.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    10. Re:Boycot by Jack+Griffin · · Score: 1

      There's a legal saying that "hard cases make bad law".

      Oh there's a saying? Oh well, you automatically win then.

      In the meantime, any way to crack my iPhone can be used by bad guys as well as good guys.

      Ooh they'll crack you phone and then what? See photos you took of yourself with your willy in your hand?

      I understand that you're a coward, and have sympathy, but you're talking about giving up privacy for an infinitesimal increase in security against a particular unlikely threat.

      No I'm not. But nice attempt at a strawman.
      Even though I spelt it out quite clearly the first time I'll do it again for your benefit
      Rather than continually hate on authorities, I'd be more interested in hearing what possible solutions exist for a law enforcement to function within the expectations of society.

    11. Re:Boycot by david_thornley · · Score: 1

      Sayings don't win anything, but they're often distilled wisdom that may be applicable. I believe that one was, which is why I mentioned it. It's a catchy way of saying that the law can't cover everything.

      I didn't say what was on my phone. In the event that a law enforcement officer cracked in illicitly, I might get a little bit of revenge by boring said LEO. However, that's beside the point.

      No, the part in bold was not what you were primarily talking about. You both led and finished with an extremely unlikely made-up situation designed to elicit an emotional response. If that is considered a legitimate argument, I can justify pretty much any government act. You also seem to me to be implying that law enforcement can't really function without unlimited access to everyone's data, which is clearly untrue.

      There is a very clear solution to the issue of how law enforcement is to function in the absence of backdoors to everyone's private data, which is for it to continue just as it does right now. It isn't necessarily the best solution, although I do think it excellent. If you have actual reasons why another solution would be better, let's hear them. (I am going to put one condition on hypothetical situations you might use: if they aren't clearly more likely than being struck with lightning, I'm not going to pay attention to them.)

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    12. Re:Boycot by Jack+Griffin · · Score: 1

      You also seem to me to be implying that law enforcement can't really function without unlimited access to everyone's data, which is clearly untrue.

      Nope, never said that, but that is usually the strawman thrown up whenever this subject is raised.

      There is a very clear solution to the issue of how law enforcement is to function in the absence of backdoors to everyone's private data, which is for it to continue just as it does right now.

      Yeah but unfortunately the world doesn't work like that.
      I think conservatives like to think there was a magic time in the past when the world was perfect, and we can achieve it again if only we stick to "old-fashioned values" (you know like racism, misogyny, and xenophobia). But as the millions of example in nature demonstrate, you have to adapt or die.

      It isn't necessarily the best solution, although I do think it excellent. If you have actual reasons why another solution would be better, let's hear them.

      I'll give you a few reasons:
      1. It isn't the best solution
      2. Because the world is changing, technology allows new things to happen both good and bad, so we need to keep up or perish. Therefore new techniques will be required to counter the new threats that emerge.
      3. If we (society) wait until a real threat is present, it maybe too late. Therefore some preventative measures have to take place at some point.

      I will re-iterate that under no circumstances am I suggesting the cops have carte blanche to do what they like. I am merely questioning the logic behind the "fuck the police" type statements which don't really serve any purpose. Especially in a forum where we're supposed to be a little smarter than the rest.

      So, back to TFA. The head of FBI has called out to his bosses that encryption as a possible threat, one that already has real consequences, and is likely to have a huge impact on future crime solving. This is his job to call this out and would be extremely negligent not to. Now it's our job as the wider society to come up with solutions of how we tackle this.
      Doing nothing (or status quo) is only going to lead to more crime and/or less convictions. This is not acceptable to anyone who doesn't live in their parent's basement.

    13. Re:Boycot by david_thornley · · Score: 1

      If you were really interested in how we should work law enforcement powers into society, you would accept keeping encryption strong as a possibility.

      Instead, you say that the world doesn't work exactly like it is working right now, which seems to me a little odd. Then you apparently try to give three reasons for your opinions, one of which is proof by blatant assertion, one of which is a fortune-cookie type of statement with no immediate application, and one of which is fearful speculation.

      The head of the FBI has claimed that strong encryption carries serious threats. You seem to think that has real consequences, and is likely to have a huge impact on future crime solving, without any actual basis that I can tell. I agree that it's part of his job to bring up possibilities that he sees as potential problems, but he's clearly biased. That doesn't make him wrong, but it makes those of us who don't live in their parents' basements feel the need for independent confirmation. You apparently skip the step involving gathering evidence and/or actually thinking about something, and seem to take what the FBI head says as revealed truth.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    14. Re:Boycot by Jack+Griffin · · Score: 1

      If you were really interested in how we should work law enforcement powers into society, you would accept keeping encryption strong as a possibility.

      Strong but not necessarily freely available. We already restrict cryptography exports for national security reasons. This is a similar concept.

      Instead, you say that the world doesn't work exactly like it is working right now, which seems to me a little odd.

      Nothing odd about it. You claimed we should keep on doing what we're doing, my response was referring to the fact that world isn't static. People who continuing doing the same thing forever tend to get left behind. This is how the world works.

      Then you apparently try to give three reasons for your opinions, one of which is proof by blatant assertion,

      I was actually quoting you there. Go back and re-read.

      one of which is a fortune-cookie type of statement with no immediate application,

      So the technology isn't changing and allowing new threat vectors? Ok we'll have to disagree with that.

      and one of which is fearful speculation.

      That is the job of the security industry. Or do you think just waiting for the damage to happen is a better strategy?

      The head of the FBI has claimed that strong encryption carries serious threats. You seem to think that has real consequences, and is likely to have a huge impact on future crime solving, without any actual basis that I can tell.

      Apart from the people whose job it is to protect the country saying so you mean? Do you also ignore advice from you doctor or your lawyer? Do you also question your plumber or electrician when they offer professional advice?
      I'm not saying we blindly follow along, but dismissing it blindly is equally foolish

      I agree that it's part of his job to bring up possibilities that he sees as potential problems, but he's clearly biased.

      I agree. So how do we figure out where the reality is? By completely dismissing opinions that don't agree with our own? Or do we take it with a grain of salt and think there's probably at least a little bit of truth in there?

      That doesn't make him wrong, but it makes those of us who don't live in their parents' basements feel the need for independent confirmation.

      I agree. So where do we get from? I've heard similar messages from a lot of security types, and he provided one high profile, real world example. So it's not complete fantasy.

      You apparently skip the step involving gathering evidence and/or actually thinking about something, and seem to take what the FBI head says as revealed truth.

      The evidence is in TFA. Freely available encryption is already hampering law enforcement efforts.

  15. Archer by U2xhc2hkb3QgU3Vja3M · · Score: 3, Funny

    This might increase pressure on Apple to loosen the backdoor restrictions.

    Phrasing!

  16. I don't think quotes mean what you think they mean by dfn5 · · Score: 2

    I read the article and no where do I see anyone quoted as saying "We Can't Read Everyone's Secrets". I do see "We still have one of those killer's phones that we have not been able to open," but I suppose that isn't as shocking.

    --
    -- Thou hast strayed far from the path of the Avatar.
  17. Yeah, right... by skaag · · Score: 1

    They are only saying this to try and convince the bad guys they are "safe".

    --

    All those moments will be lost in time, like tears in rain... time... to... die...

  18. Example does not support claim by Anonymous Coward · · Score: 0

    Their example is "investigators still can't access the phone contents of one of the San Bernadino killers". But they already know the person the phone belongs to is the killer, without having examined those phone contents. How is not being able to read the phone of a caught killer an example of how this hampers finding killers?

  19. The cognitive dissonance is astounding by timholman · · Score: 5, Insightful

    If James Comey thinks that the FBI could keep their backdoor decryption key secure, perhaps I could call him at his office phone using the FBI directory that just got uploaded to the net, and discuss it with him. :-)

    The FBI and the DoJ can't even keep their own databases safe from a social hack. A backdoor key would be in the hands of China and Russia before the week was out.

    1. Re:The cognitive dissonance is astounding by Anonymous Coward · · Score: 0

      Well said!

    2. Re:The cognitive dissonance is astounding by Anonymous Coward · · Score: 0

      A backdoor key would be in the hands of China and Russia before the decryption backdoor was even implemented.

      FTFY.

    3. Re:The cognitive dissonance is astounding by stealth_finger · · Score: 1

      If James Comey thinks that the FBI could keep their backdoor decryption key secure, perhaps I could call him at his office phone using the FBI directory that just got uploaded to the net, and discuss it with him. :-)

      All cleverness aside, maybe you should.....from a payphone......miles away.

      --
      Wanna buy a shirt?
      https://www.redbubble.com/people/stealthfinger/shop?asc=u
  20. Cryptophobic by silvertear33 · · Score: 1

    Things like this “While the coalition’s air campaign is helping to deny ISIL some territorial safe havens and financial resources, how do we degrade it and destroy it if all they need to carry out an attack in the West is an internet connection and an encrypted message application?” Just make you stop and say Huh? This is the world we live in where Encryption is preventing us from catching bad guys but at the same time "Meta data kills" I would like to see one politician or FBI director to actually understand what encryption means, or even what it's used for. Next thing you are going to see is "How dare you have a personal thought that is not recorded by the government! Terrorist!"

    1. Re:Cryptophobic by Anonymous Coward · · Score: 0

      Stop it, you're going to make hundreds of congressmen come all over themselves, and they won't even know what happened!
      Do you really want to Randy Marsh the whole damn House?

  21. Never go full J. Edgar Hoover by Hotawa+Hawk-eye · · Score: 1

    The type of power Director Comey is asking for sounds like J. Edgar Hoover's wet dream. To keep Comey and future FBI directors from breaking the law like Hoover is suspected of doing, if he succeeds in mandating encryption back doors to allow law enforcement to access suspected criminals' phone I believe Comey's phone should have the same type of encryption back door. Just in case he implements a policy like COINTELPRO, of course.

    How about it, Director? Would you use one of these phones for confidential and/or secret communications with other members of the FBI? If not, why not?

    1. Re: Never go full J. Edgar Hoover by Anonymous Coward · · Score: 0

      Actually, the FBI is one of the Federal agencies that refuses to use iPhone , over nebulous "security" issues, and yet has the director complain they can't access one that is locked.

      In this specific instance. They know who the killer is, and the phone is not relevant for evidentiary purposes. The phone's data is relevant for intelligence purposes.

      Some things you don't ever get to know, that's how life is, and a law enforcement official should know that better than most

  22. Freedom of speech by Anonymous Coward · · Score: 0

    The FBI wants to take that away.
    If I could go back in time I would add freedom of secret speech.
    Reading your political email telling faux news.
    No wonder most use a private mail server.
    Learn to encrypt your mail servers it what faux news has taught us.

  23. why by Anonymous Coward · · Score: 0

    why doesn't the FBI crowd source decryption?
    if it works for SETI...

  24. Fear nearly always wins by Bugler412 · · Score: 1

    Fear tactics combined with power politics and vote getting symbolic lawmaking will nearly always win. Prepare for the backdoored encryption world (if we aren't already there) unless something dramatic changes in how we make laws.

  25. No net benefit by Anonymous Coward · · Score: 0

    Even if they could gain access it would have no impact on the investigation. Lone wolf perps who are dead as doornails.

    I don't want police to have access to my "papers and things" at any time for a domestic criminal investigation per my 5th amendment rights. If I am given immunity I would cheerfully release my data on a consent basis for a non-domestic investigation. That willingness will end when the rest of the world adopts our constitution.

    Then they can follow-up by taking all public services off federal budgets 100% to comply. No more defined benefit. Defined contribution with 10% government assist for the disabled.

    JJ

  26. Offset by Anonymous Coward · · Score: 1

    There is also an offset.

    How much crime has been PREVENTED because criminals could not get easy access to user data too.

    My guess that figure is much much higher than the unsolved crimes one.

    There is also the wee issue that new technology has proven many people innocent of the crimes they have been imprisoned for.
    There are also cases where police have been caught planting evidence and committing other serious crimes.

    Whats next, fireproof paper, ban on shredders because it makes paper hard/impossible to use as evidence ?

  27. I sure Hope They Can't Decrypt This by Anonymous Coward · · Score: 0

    Rng n ont bs qvpxf lbh pbpx tbooyvat chxrf.

  28. My God! by Anonymous Coward · · Score: 0

    How did the FBI possibly solve crime before digital devices? Do your investigative work just like you used to. Surely wiretap exist and MIIM for government use. WTF do you need unencrypted devices for FBI? Grow up and do your job!

    1. Re: My God! by Anonymous Coward · · Score: 0

      This is somewhat of a false argument. Before digital devices, the criminals also didn't have them. While not saying we should give the FBI access, we also can't expect the criminals to be able to use new technology and tell investigators to work like its the 1980s.

  29. Funny thing - error 53 is directly related to this by Anonymous Coward · · Score: 0

    So you know how that error 53 that's hitting the press is getting all the headlines as people are threatening Apple over it? Well, actually, from a security point of view - I now have more respect for Apple than ever on this subject. You see, SecureID tokens (those little LCD things with a password that changes every minute) - they have security tampering features that will automatically brick the token if you play with it's pins that are hidden on the back. For Apple to do the equivalent of this is not a bug - it's a feature. If a hostile tries to hack my phone and can't get through the biometrics (all that takes is a rubber hose and hammer in many cases) - and they open it and try swapping out the scanner - well I want that phone to brick! And as for the "getting into the San Bernadino" phones - I guess they knew to use passwords and not fingerprints as fingers can be used to unlock things once the owner is dead - not like Apple has blood-circulation detection on the fingerprint scanner. Error 53 just shows that Apple's Kung-fu is strong and well thought out. And the FBI has plenty other ways to do their job.

  30. To cover up the X-files we need to stop other stuf by Joe_Dragon · · Score: 1

    To cover up the X-files we need to stop other stuff as well.

  31. Subpoenas and the right against self-incrimination by Frobnicator · · Score: 5, Informative

    Perhaps they know who the phones belong to, but what makes them think the owner is one of the San Bernadino killers?

    That's where law enforcement is having a hard time.
    * Government can use a warrant to demand the item be surrendered, and preserve it as evidence.
    * Government can demand passwords from third parties like phone companies under both subpoenas and warrants.
    * BUT individuals have a constitution protection against compelled self-incrimination.

    The government is supposed to produce evidence and link the person to the crime without a forced confession. It is a GOOD THING, it helps prevent things like being tortured to confession and fishing expeditions looking for crimes. Prosecutors and police can demand an individual produce papers and documents that link them to a case, but (assuming their legal defense is doing their job) by doing so they trigger the protections of the fourth and fifth amendments by compelling the evidence.

    This was recently re-affirmed by the supreme court in US v. Hubbell. If the government demands that the person gives up documents, papers, or passwords to the device it is compelled self-incrimination. If the government demands a person incriminate himself to collect evidence, it becomes poisoned and the government cannot use it or information from it to help with prosecution.

    Police and prosecutors absolutely can demand the people turn over passwords .... but by doing so they also trigger immunity, they cannot use that fact or anything learned from the devices as evidence against them. They'll bitch and moan and complain about not having the passwords, they'll petition congress about how unfair it is to law enforcement that police need to actually investigate crimes and can't use self-incrimination tactics, but the lawyers know full well all it takes is a single slip of paper to legally demand the passwords. Grant them immunity under the protections of the 5th and they are compelled to turn the passwords over, but the person also walks away from criminal liability.

    Simply (perhaps dangerously oversimplified) in most of these cases it is that the police are lazy. There are many other known details, much other evidence, but investigators are going for the easy pickings of the data on phones and other personal documents typically protected by law. They could do actual leg-work, actual investigation, actual crime scene evaluation, and many investigators do. The ones wanting to break down the constitutional protections are the lazy investigators who won't be bothered to use the other available investigation tools.

    --
    //TODO: Think of witty sig statement
  32. Re:I don't think quotes mean what you think they m by Anonymous Coward · · Score: 0

    "We still have one of those killer's phones that we have not been able to open,"

    They know he is a killer -- so why do they need his phone? Do they also need to know what he ate for dinner on June 2nd, 1985? Sometimes data just doesn't need to exist -- consider the phone trash / data gone.

  33. Phones are too hard but IoT is easy by Alypius · · Score: 1
    Pretty soon they won't even be trying with phones; they'll just tap the Internet of Things as a vector.

    The Berkman report is pretty interesting reading and points out thatdevice encryption can be frustrating, but there's still no default for end-to-end encrypted communication, metadata is plaintext by necessity, and the security of the IoT is something that too few people have worried about.

  34. bo ho now we have actually got to do our job by Anonymous Coward · · Score: 0

    by going back to actually building a case through the tried and tested methods of detective work or fabricating one!

  35. You Show me Yours.... by Anonymous Coward · · Score: 0

    I'm fine with that as long as everybody has full access to all of the government's secrets.

  36. Parallel Construction Kit? by rsborg · · Score: 1

    Police and prosecutors absolutely can demand the people turn over passwords .... but by doing so they also trigger immunity, they cannot use that fact or anything learned from the devices as evidence against them. They'll bitch and moan and complain about not having the passwords, they'll petition congress about how unfair it is to law enforcement that police need to actually investigate crimes and can't use self-incrimination tactics, but the lawyers know full well all it takes is a single slip of paper to legally demand the passwords. Grant them immunity under the protections of the 5th and they are compelled to turn the passwords over, but the person also walks away from criminal liability.

    This is a very interesting and informative comment. My question is, how does this play into parallel construction?

    --
    Make sure everyone's vote counts: Verified Voting
    1. Re:Parallel Construction Kit? by Anonymous Coward · · Score: 0

      This is exactly where parallel construction shines.
      If there turns out to be nothing incriminating on the electronics, there will be now - physical access is the greatest, most final compromise of just about any consumer electronic... but they still need to explain how they legally got this information if they supposedly still can't get "into" the phone or whatever when it's challenged by the defense. You have an entire organization backing you whose very job it is to "collect evidence" and the like, so fellow agents become the accusers, the victims, plant whatever wherever anything you need to make the story real.

      Meanwhile, if it turns out the phone is chock-full of evidence and the person IS a criminal, parallel construction instead becomes the "tips" and "anonymous information" they "received" by means of which they were "alerted" and "granted access to" the device in question, which "makes it legal"

      As we've seen, these are people with nothing better to do given mass data collection than to spy on their exes and blackmail small businesses, so there's no way they wouldn't leap at a chance to have a fun afternoon of engineering a downfall.

  37. Here we go... by Anonymous Coward · · Score: 0

    That's what You get when letting open source into smartphones. It was like modifying the gadget's circuit wasn't enough, now failed programmers who choose to attend criminal organizations (including non private sector ones) and screw freely. Look, I saw a bunch a gang kids passing written notes, going straight to gang members locations to deliver messages, during a telephone tapping operation. They have their own frameworks fellas. And criminals exit like.. I don't know... Ancient egypt or something. Police and detectives are only 100 years old, max.

  38. They can't but... by Anonymous Coward · · Score: 0

    They can't but they sure as they worship Lucifer they want to.

  39. Re:I don't think quotes mean what you think they m by ScentCone · · Score: 1

    They know he is a killer -- so why do they need his phone?

    Really? You're that lacking in imagination, or that unfamiliar with the long history of Islamist murderers being in touch with each other and specific consulting figureheads, financiers, teachers, parts suppliers, etc?

    --
    Don't disappoint your bird dog. Go to the range.
  40. Warrants? Cry him a river. by Fnord666 · · Score: 1

    He went on to argue that the phenomenon of communications "going dark" due to more sophisticated technology and wider use of encryption is "overwhelmingly affecting" law enforcement operations

    Basically he is whining because the FBI actually has to, you know, go to a judge and prove sufficient cause for her to grant them a warrant before accessing an individual's property or papers like the 4th amendment says they have to.

    Cry him a river, build him a bridge, and tell him to get over it.

    --
    'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
  41. Re:Subpoenas and the right against self-incriminat by ArmoredDragon · · Score: 2

    Police and prosecutors absolutely can demand the people turn over passwords

    That doesn't make sense to me because a password is the "what you know" authentication factor. And what would stop somebody from saying they forgot the password?

    Now a fingerprint on the other hand is "who you are" and the government does have the right to make you identify "who you are" not only to law enforcement but to the courts as well.

    The third authenticaiton factor "what you have" (i.e. smart card, key fob) could be compelled to be turned over only if the government can prove that not only does it exist, but that you actually have it too.

  42. Of course they will relent by AndyKron · · Score: 1

    Of course Industry will relent and give the government access. They want to keep their special perks.

  43. Methinks the maiden doth protest too much by Locke2005 · · Score: 1

    I'm pretty sure that, given sufficient compute time, the NSA can brute-force decrypt anything. They just can analyze all encrypted traffic in real time. No encryption lasts for ever, it only pushes back the time people can see what's inside by a few years.

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:Methinks the maiden doth protest too much by Anonymous Coward · · Score: 0

      I'm pretty sure that, given sufficient compute time, the NSA can brute-force decrypt anything.

      And I'm pretty sure you're an idiot. The NSA, despite their wide-ranging powers, cannot defy well-tested mathematical proofs and the laws of physics.

      That's not to say that they can't find other weaknesses (key stored insecurely, implementation errors etc.) in many or even most cases. But if you really think they can brute-force decrypt *anything/everything* regardless of algorithm, keylength etc. then you really don't understand anything about encryption even on a very basic level.

    2. Re:Methinks the maiden doth protest too much by Bob+the+Super+Hamste · · Score: 1

      I'm pretty sure that, given sufficient compute time, the NSA can brute-force decrypt anything.

      No. At some point you run out mass energy of this universe. This limit actually happens at a surprisingly low value even using ideal computers, which are many orders of magnitude more efficient than the best we currently. For symmetric key encryption (also know as private key encryption like with the AES, TWOFISH, or SERPENT ciphers) you would run out of mass energy in this universe some where around 270 bits running on conventional computers. Sadly that is just the energy to cycle a 270 bit counter through all possible states as you haven't tried to decrypt the data yet so the actual limit would be lower. This however ignores quantum computers which people believe are magical and while they do offer impressive speedups against symmetric key encryption you would still run out of energy somewhere around 540 bits. So if we assume that any of the major modern symmetric ciphers aren't broken (seems reasonable, and if you are paranoid just cascade them like TrueCrypt or VeraCrypt do) using a 256 bit key, and using a non existent ideal quantum computer it would still take more energy than our sun will put out over its entire life (similar order of magnitude) time to brutefore it.

      Now that analysis doesn't discuss asymmetric key, public key, encryption which on conventional computers is really hard with similar energy requirements but shifted. On quantum computers it is a different story for the algorithms the depend on integer factorization or discrete logarithms where a real quantum computer can trivially brake them. Right now it appears that the most likely replacement would be lattice based cryptography.

      Now lets suppose that the NSA has a computer that is some ultra strange ideal computer that is composed of many universes of matter and consumes many universes worth of energy (don't ask me where the waste heat is going) there is still one form of encryption that they couldn't break with it. A one-time pad is a type of encryption that can be proved to be secure for all cases. At best they could generate all possible plain texts of the given length but they wouldn't have any way of knowing which plain text was the valid one. So if this post was encrypted with a one-time pad the NSA wouldn't ever be able to decrypt it and it is pretty short.

      That said I don't know what about the built in encryption on a cellphone so that my be a giant steaming pile that isn't worth fuck all but it isn't like there aren't encryption schemes that are basically good through the heat death of the universe.

      --
      Time to offend someone
  44. Well by Dunbal · · Score: 1

    Technically they shouldn't read ANYONE'S secrets. Having a secret is not a crime. You're supposed to catch criminals who break the law, not mine people's data and extrapolate to see if they have done anything wrong. Because after all, everyone (including FBI agents) is guilty of something.

    --
    Seven puppies were harmed during the making of this post.
  45. Re:Funny thing - error 53 is directly related to t by Locke2005 · · Score: 1

    Is it really that complicated? My take was that if you can do an end-run around the fingerprint scanner by just plugging in a different fingerprint scanner, then by definition the fingerprint scanner isn't secure. Meaning that, if you want to replace the fingerprint scanner, you must be forced to first unlock the old fingerprint scanner. But then, what happens if the fingerprint scanner itself fails? You either brick the whole phone every time a scanner fails, or leave your data wide open to anyone who steals your phone.

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  46. Sure... by Locke2005 · · Score: 1

    If every manufacture inserted back doors for the Feds, wouldn't criminals simply hire a few techs to implement one-time pads to use for encryption? In fact, shouldn't anybody that wants to keep data private long-term already be using a one-time pad?

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  47. Re:Subpoenas and the right against self-incriminat by Anonymous Coward · · Score: 0

    government does have the right to make you identify "who you are" not only to law enforcement but to the courts as well

    A court does, law enforcement does not. If you are stopped by a cop or fed or other LEO and they ask you for your identity, you are under no obligation to tell them.

  48. Re:I don't think quotes mean what you think they m by R3d+M3rcury · · Score: 1

    So, in other words, what they're looking for is other people to arrest. It isn't that the case against the person who actually did the crime necessitates their being able to access information on the phone. It's that there may be other people involved and they want to look that over.

  49. Dear FBI: See this image by rnturn · · Score: 2

    It's a photo of the world's smallest violin playing a plaintive melody to go along with your constant whining about having to follow the law:

    >>--> . <--<<

    --
    CUR ALLOC 20195.....5804M
  50. Re:I don't think quotes mean what you think they m by ScentCone · · Score: 1

    The two key figures in that attack are already dead. The phone in question will shed light on whether or not their circle of friends, family, and overseas contacts were criminally involved in what happened. There's plenty of reasons to think that those to idiots didn't act in a vacuum.

    --
    Don't disappoint your bird dog. Go to the range.
  51. Wasn't it just a few weeks ago that... by rnturn · · Score: 3, Informative

    ... Comey was trying to convince everyone that he wasn't obsessing over encryption and not being able to read everyone's private information?

    --
    CUR ALLOC 20195.....5804M
  52. Re:Subpoenas and the right against self-incriminat by Sax+Russell+5449D29A · · Score: 1

    I think, considering the context, he meant the law enforcement can forcefully make you give your fingerprints. Which they, of course, can and have been able to do for pretty much as long as fingerprints have been utilized in criminal forensics.

    --
    -SR
  53. Re:Subpoenas and the right against self-incriminat by Anonymous Coward · · Score: 0

    ... protection against compelled self-incrimination.

    In many countries that protection is provided not by a constitution, but by tradition of jurisprudence. If the government decides to take that protection away in their 'war on terror', which has happened in other countries, someone will have to prosecute the government to get that protection re-instated.

  54. Warrants Are Too Hard by Anonymous Coward · · Score: 2, Interesting

    Comey's message:

    - Warrants are too hard;
    - Due Process is too hard;
    - Privacy is too hard;
    - Habeas Corpus is too hard;
    - Miranda warnings are too hard;
    - Encryption is too hard;
    - Court cases are too hard;
    - Evidence is too hard;
    - Probable Cause is too hard;
    - Judges are too hard;
    - Jurisdiction is too hard;
    - Investigation is too hard;

    Etc.

    Damn, law enforcement is hard!

    My response? My grandparents were farmers in the Dirty Thirties. That was hard. Hard enough to destroy good families who didn't deserve to be tested that way. You don't know hard. Do your job and stop trying to skate along looking for an easy life with high pay and no accountability. You can steal my privacy the day you can steal my wallet. And you can't steal my wallet!

    1. Re:Warrants Are Too Hard by MitchDev · · Score: 1

      This needs to modded up to +10

  55. Re:Subpoenas and the right against self-incriminat by ArmoredDragon · · Score: 1

    A court does, law enforcement does not. If you are stopped by a cop or fed or other LEO and they ask you for your identity, you are under no obligation to tell them.

    You are correct in that they can't just randomly stop you and ask for ID, however they can if they have probable cause to believe that you were involved in illegal activity, which even SCOTUS has upheld:

    https://www.flexyourrights.org...

  56. Re:Subpoenas and the right against self-incriminat by Frobnicator · · Score: 1

    ... protection against compelled self-incrimination.

    In many countries that protection is provided not by a constitution, but by tradition of jurisprudence. If the government decides to take that protection away in their 'war on terror', which has happened in other countries, someone will have to prosecute the government to get that protection re-instated.

    It is a protection that many in the United States are quick to surrender when they feel threatened, but thankfully so far the more wise heads have prevailed.

    In the past 50 years or so the popular attitude toward the protection has faltered. A half century ago invoking your right to remain silent was seen as a good use of protecting yourself. Those who did it were considered smart. But these days, when someone invokes the fifth amendment in the US it is often seen with derision and suspicion.

    Anyone can incriminate themselves all they want voluntarily, confess all you want. But the protections against compelled self-incrimination are extremely important. Sadly too many don't realize how important they are.

    --
    //TODO: Think of witty sig statement
  57. That's not how quotation marks work by rebelwarlock · · Score: 1

    You use quotation marks when you're quoting what someone said. When you do stupid shit like the summary title, you end up sounding like a child. Here, let me give you an example of why you can't just make shit up and put it between quotation marks:

    Rdukb gripes, "I'm so sad because I don't think I'll be able to be a big enough asshole today."

    Chances are pretty good (about 60/40) that the submitter never actually said that.

  58. You're all playing into the lie by Anonymous Coward · · Score: 1

    Of course the stuff is crackable. These complaints keep getting aired so that all the ignorant criminals are lulled back into using their communication devices. Seriously, I thought the new(at the time) galaxy phone with the latest greatest encryption was secure... then someone showed how even the password can be gotten around by pasting a long line of characters into the camera app which is located on the security splash screen. no pass necessary . There is nothing bad on my phone as far as I know, but someone dumb enough to record criminal activities with their galaxy phone will be handing it right over thinking they are not incriminating themselves. All with tier encryption stuff "Active"

  59. Re:Subpoenas and the right against self-incriminat by PPH · · Score: 1

    BUT individuals have a constitution protection against compelled self-incrimination.

    The San Bernadino killers are dead. So I'm not certain exactly how 4th and 5th Amendment rights would work. There's a good chance that the phone contains evidence that would incriminate others. But these others have almost certainly fled and/or destroyed evidence by now. So there isn't likely a imminent threat to be dealt with. So, what exactly is it that they need?

    --
    Have gnu, will travel.
  60. Boohoo by kbsoftware · · Score: 2

    "FBI Gripes "We Can't Read Everyone's Secrets" " Good, that's how it should be. "Will the industry relent and allow Government access to data from these devices?" Let's hope not.

  61. Re:Subpoenas and the right against self-incriminat by davester666 · · Score: 1

    unless you are in a constitution-free zone, which is the 100-mile "Border" zone.

    Only 2/3's of the country live within this zone.

    --
    Sleep your way to a whiter smile...date a dentist!
  62. Backdoor Security by Anonymous Coward · · Score: 0

    If any method of access is provided it will have to be as strongly protected as the original encryption from the third and maybe even from the first party. As a loyal, patriotic governance supporter I don't want to provide the mafia(s), terrorists and dangerously jealous spouses any more access to the phones of my fellow citizens than they already have. Stay strongly encrypted, my fellow Citizens!

  63. Ignorant framing of the question by oneeyedman · · Score: 2

    "This might increase pressure on Apple to loosen the backdoor restrictions. Will the industry relent and allow Government access to data from these devices?"

    I suppose this post may just be click-bait, but there is no "loosening" or "relenting." The question is whether companies sell end-to-end encryption to their customers -- Yes or No. End-to-end encryption is the only real security that the government can't invade. People may disagree about whether citizens in a democracy should have a private sphere that excludes the government, but those are the stakes -- Yes or No. There is no gray area.

    --
    *** "Freiheit ist immer die Freiheit des Andersdenkenden". -- Rosa Luxemburg ***
  64. Re:Subpoenas and the right against self-incriminat by stealth_finger · · Score: 1

    government does have the right to make you identify "who you are" not only to law enforcement but to the courts as well

    A court does, law enforcement does not. If you are stopped by a cop or fed or other LEO and they ask you for your identity, you are under no obligation to tell them.

    And apparently they are under no obligation not to shoot you.

    --
    Wanna buy a shirt?
    https://www.redbubble.com/people/stealthfinger/shop?asc=u
  65. Re:Subpoenas and the right against self-incriminat by IamTheRealMike · · Score: 1

    It sounds to me like the problem is a flaw in the constitution or the way it's being interpreted, to be honest. The prohibition against incriminating yourself is very obviously there to stop people being tortured until they falsely claim they are guilty. But giving up a password is not a proclamation of guilt or innocence either way. All it can possibly do is yield more evidence, hopefully leading to a more accurate outcome of the case.

    I mean, under the same logic, search warrants should be illegal because by letting someone into your house you'd be "self-incriminating". Doesn't work that way.

    I think the simplest fix to this problem the FBI has is for courts to stop treating "you must tell us the password" as falling under the self-incrimination clauses. It doesn't make logical sense, would yield a reasonable balance of power (FBI/other agencies cannot do bulk data harvesting from phones, which is the real danger here), puts protection of the device or not under the control of the court, etc. This is the compromise other countries have arrived at and it seems to work OK most of the time.

  66. no stopping it by Anonymous Coward · · Score: 1

    well nothing keeps some math geek to design the next PGP or blowfish OUTSIDE of US jusrisdiction and distribute it as freeware , cant put back this genie in it's bottle , but instead of intercepting and analysing every freaking bit going true the us how about putting this new NSA compute center to good use and put those petaflops of computing power on cracking crypto of REAL criminal instead of trying to figure out if the good tax paying citizen doned the blue or red underwears when dressing up to go to work this morning ?

  67. Really? by MitchDev · · Score: 1

    Tough shit FBI.

    What kind of phone did the shooter have that the FBI claims they can't crack, I see sales skyrocketing if this is true.

    IT's not Aplle, Google, etc's job to make LE job's easier.

    The customers want security, it's the phone makers job to provide it. Sounds like they are doing a good job

    (Assuming the story is true and this isn't just the increasingly evil government's attempt to destroy the Constitution and rape american citizen's rights...)

  68. Re:Subpoenas and the right against self-incriminat by Anonymous Coward · · Score: 0

    History has shown the United States Government is evil, abuses its power, terrorizes those in power, and that a shadow government is in place. This is just the shadow government playing with the faux government.

  69. Oldest technique: Keep information in your head by DutchUncle · · Score: 1

    Nobody can read the diaries you don't keep or the lists you don't write down. I learned this from spy and mystery novels going back forever. And "'Allo ' Allo": "Listen very carefully, I will say this only once . . ."

  70. Was the FBI Director by Anonymous Coward · · Score: 0

    actually talking about Hillary's server?

  71. Re:I don't think quotes mean what you think they m by stealth_finger · · Score: 1

    The two key figures in that attack are already dead. The phone in question will shed light on whether or not their circle of friends, family, and overseas contacts were criminally involved in what happened. There's plenty of reasons to think that those to idiots didn't act in a vacuum.

    So go to the NSA. Isn't that why they are tracking calls, messages and all that? Who cares if it the phone logs/messages are encrypted if it was captured when it happened. And if they're not doing that for this what the fuck are they doing?

    --
    Wanna buy a shirt?
    https://www.redbubble.com/people/stealthfinger/shop?asc=u
  72. The Real Problem by doas777 · · Score: 1
    All else aside, we cannot allow Carte-Blanche for the reason tucked neatly into this sentence:

    but also investigations into other murders, car accidents, drug trafficking and the proliferation of child pornography.

    No matter how much emphasis we place on extra serious crimes like actual terrorism, high-level drug trafficking, and running global networks for child porn, The actual and prevalent use of the technology will be trivial matters like traffic accidents, failing to pick up after your dog, minor curfew violations, etc.

  73. Re:I don't think quotes mean what you think they m by ScentCone · · Score: 1

    So go to the NSA. Isn't that why they are tracking calls, messages and all that?

    Meta data about who called who when doesn't contain the content of text messages, the photos or other files stored on the phone, etc.

    --
    Don't disappoint your bird dog. Go to the range.
  74. Re:Funny thing - error 53 is directly related to t by Anonymous Coward · · Score: 0

    This is pure Apple fanboi bullshit. If it worked like you're implying then it would be a security feature. But the phones were *not* bricked when the fingerprint scanner was exchanged but *at the next software update* by which time all your data has *already* been compromised. So, useless as a security feature, but excellent for punishing you for getting a non-Apple repair.

  75. Re:Subpoenas and the right against self-incriminat by Anonymous Coward · · Score: 0

    This is not accurate. They can force you to turn over passwords and use the found evidence against you. Although it is regularly contested.
    The reasoning being that the password is similar to the combination to a safe which the court can compel you to provide.
    You do not automatically gain immunity. Now if somehow the password itself where a confession or clear evidence of guilt then you could reasonably argue that you can not divulge it without self-incrimination. In which case the court could provide you with immunity to prosecution based on the password, but not what it opens.

    You have a right against self-incrimination. You don't have to tell them where the evidence is but if they have a locker that smells of rotting flesh you can be compelled to provide the password to unlock it and what is inside can be used against you.

  76. Re:Subpoenas and the right against self-incriminat by Lotharus · · Score: 1

    I mean, under the same logic, search warrants should be illegal because by letting someone into your house you'd be "self-incriminating". Doesn't work that way.

    I'm already a bit lost in the jargon, but I think the key difference is whether extraction of knowledge is involved. To "let someone in your house," all you have to do is stand aside. To give up a password means revealing something that you know rather than possess.

    I also think (my opinion now) that giving up of passwords under warrant is arguably reasonable. A warrant would be required, which puts the control in the hands of the court and not in those of the investigating officers.

  77. Re:I don't think quotes mean what you think they m by Anonymous Coward · · Score: 0

    How adorable, you think they're only keeping meta-data.

    Also text messages go out over the network, over an unencrypted protocol. Think about the ramifications of that when you're claiming that they can't get the 'content of text messages' because they're 'on your phone'.

    SMH.

  78. Re:Subpoenas and the right against self-incriminat by Anonymous Coward · · Score: 0

    You are correct in that they can't just randomly stop you and ask for ID, however they can if they have probable cause to believe that you were involved in illegal activity, which even SCOTUS has upheld:

    Wrong.

    Kolender v. Lawson

    Also your link says the opposite of what you are saying:

    But how can you tell if an officer asking you to identify yourself has reasonable suspicion? Remember, police need reasonable suspicion to detain you. So one way to tell if they have reasonable suspicion is to determine if you’re free to go. You can do this by saying “Excuse me officer. Are you detaining me, or am I free to go?” If the officer says you’re free to go, leave immediately and don’t answer any more questions.

    If you’re detained, you’ll have to decide if withholding your identity is worth the possibility of arrest or a prolonged detention. In cases of mistaken identity, revealing who you are might help to resolve the situation quickly. On the other hand, if you’re on parole in California, for example, revealing your identity could lead to a legal search. Knowing your state’s laws can help you make the best choice.

    You never have to give any information or even speak to a police officer or other LEO. Just treat them like the mindless drones that they are and only speak to a lawyer and the judge.

  79. FBI or FIB by Anonymous Coward · · Score: 0

    "FBI Director James Comey told the Senate Intelligence Committee that investigators still can't access the phone contents of one of the San Bernadino killers."
    I'm not familiar with this case, so this may the cause of my confusion over the quoted statement. Are these 'accused" killer or 'convicted' killers?

    If they're only accused killers this would make more sense to me as to why the FBI would like to get into their phone, however this then leads to the question "is the FBI's thoughts that there is evidence of a crime on the phone the only evidence they have?". Surely before mobile phones there was a need to evidence means, motive and opportunity. Also having a dead body doesn't hurt either. Is the FBI lacking all of these things and predicating an entire case on the possible contents of one phone?

    If they are already convicted then why the need to access the phone? Are they looking to press further charges, are the killers suspected of other crimes? My guess is it's just another poster-boy for back-dooring encryption.

  80. Re:Warrants? Cry him a river. by david_thornley · · Score: 1

    This is information that is not available with the warrant. Assuming that the security is as good as advertised (if it weren't, why would the FBI be complaining?) it can only be retrieved by entering the PIN into the phone, and the phone can be set to destroy all its data on ten wrong PIN entries. The data cannot be read without the cooperation of a person who knows the PIN. Last I checked, the US court decisions were showing that being required to turn over a key that would reveal more than what was already known to be on the device was self-incrimination.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  81. oh by Anonymous Coward · · Score: 0

    investigations into other murders, car accidents, drug trafficking and the proliferation of child pornography.

    investigating themselves is a full time job. until it isn't.