Slashdot Mirror


John McAfee Offers To Decrypt San Bernardino iPhone For the FBI and Save America (hothardware.com)

MojoKid writes: Wondering what John McAfee is up to these days? It's not sniffing bath salts nor is he fleeing foreign countries as a person of interest in a murder investigation and faking heart attacks (been there, done all that) ; instead, he's on a mission to save America. How so? By cracking the code on the San Bernardino iPhone that's causing such a ruckus. McAfee didn't just criticize the FBI; instead he offered a potential solution. Let him and his team of hackers break into the iPhone without any help from Apple. "With all due respect to Tim Cook and Apple, I work with a team of the best hackers on the planet. These hackers attend Defcon in Las Vegas, and they are legends in their local hacking groups, such as HackMiami. They are all prodigies, with talents that defy normal human comprehension," McAfee said. Eccentric rant aside, McAfee's offer is simple - give him three weeks and he will, "free of charge, decrypt the information on the San Bernardino phone" with his team of hackers. He'll do it using mostly social engineering.

26 of 364 comments (clear)

  1. What's he on, today? by MSG · · Score: 5, Informative

    McAfee is clearly off his rocker. The only person or persons who he could expect to socially engineer his way through are dead.

    1. Re:What's he on, today? by Talderas · · Score: 4, Insightful

      Unless he believes Apple has the ability to decrypt the device and plans on socially engineering them.

      --
      "Lack of speed can be overcome. In the worst case by patience." --Znork
    2. Re:What's he on, today? by aaron4801 · · Score: 5, Funny

      He's socially engineering the FBI. He'll just waste the 10 attempts, and get the phone wiped. Debate over.

    3. Re:What's he on, today? by Krishnoid · · Score: 5, Interesting

      McAfee is clearly off his rocker.

      ...

      I work with a team of the best hackers on the planet. These hackers attend Defcon in Las Vegas, and they are legends in their local hacking groups, such as HackMiami. They are all prodigies, with talents that defy normal human comprehension,

      Hey, if these hackers are the ones that starred in his last video, and he's going to make another one describing how he plans/executed this hack, I'm all for it.

    4. Re:What's he on, today? by Anonymous Coward · · Score: 5, Insightful

      The FBI is not asking Apple to decrypt it. They're asking Apple to load a new firmware on it that removes the limit and delay on the number of tries before the device wipes itself so they can brute-force it. They've even told Apple that they can do it in-house so there's no chance the method will be used on anyone else's phone.

      Apple doesn't want to admit that they can flash new firmware to the locked device even though everyone knows they can.

    5. Re:What's he on, today? by __aaclcg7560 · · Score: 5, Insightful

      Apple doesn't want to admit that they can flash new firmware to the locked device even though everyone knows they can.

      According to one legal analyst, the FBI and NSA already have this capability. What the government is looking for in this court case is a legal precedent to force companies to do this for them and make the data recovery admissible in court.

    6. Re:What's he on, today? by PopeRatzo · · Score: 4, Insightful

      What the government is looking for in this court case is a legal precedent to force companies to do this for them and make the data recovery admissible in court.

      That's it in a nutshell.

      --
      You are welcome on my lawn.
    7. Re:What's he on, today? by AdamThor · · Score: 4, Interesting

      So John McAfee can make a boast that won't get tested. He gets to proclaim himself supreme ninja badass knowing nobody will call his bluff, AND illustrate that when the government doesn't take him up on his offer it is because they are after something other than what they claim.

      *golf clap*

      Well played, Mr. McAfee.

      --
      -- "Oh. This guy again."
    8. Re:What's he on, today? by Andy+Dodd · · Score: 5, Informative

      Apple devices have an additional "trick" beyond just PBKDF2 - There's a random AES key burned into the CPU, and it's wired such that it can be set/erased, but not directly read - it can only be fed as the key into an AES engine.

      I am not sure if Apple's PBKDF2 has this AES engine as part of the loop, or if it just feeds the key that comes out of PBKDF2 through the AES engine, but the end result is, on any given device, the AES key that results from a given passphrase is unique to that device and cannot be reproduced off-device.

      So if someone just clones the device's flash contents, they have to resort to brute-forcing AES directly, as opposed to trying to brute-force passcodes.

      So you can only brute-force passcodes on-device (something like 80ms per try on this model, newer models have a 5 seconds per try limitation), and Apple's software doesn't even allow you to do that. The FBI wants to at LEAST get on-device brute-force capability.

      Which might still take years if the user had a reasonably strong passphrase.

      --
      retrorocket.o not found, launch anyway?
    9. Re:What's he on, today? by Anonymous Coward · · Score: 5, Insightful

      Close. I don't think he would wipe the phone, that would make too much trouble even for a man with MacAfee's history.

      No, he's shedding a light on how absurd the FBI's story on this item is. "Oh my goodness, there's a phone connected to this tragedy and we don't know what the 109 messages say! Even though we know who did it, we know that the messages went to Africa, we know the times and the recipient(s), we have all the meta-data. Oh, and we have the full resources of the FBI, CIA, NSA, DOD, the Five Eyes, and we've data-mined the entire planet. Yet John MacAfee can break into this phone with a tiny group of volunteer hackers and we just can't figure that out at all."

      The only thing the FBI is trying to do here is to cynically use a tragedy to set official, legal precedent. They are attempting to bully the phone makers to give them anything they want, any time they want it. This has nothing to do with the San Bernardino shooting beyond winning sympathy and support for the spying goals of the FBI.

      J. Edgar Hoover would be proud. Also Niccolo Machiavelli. We've been giving the Three Letter Agencies anything they want since 9/11 and they've grown fat and entitled on the spoils.

    10. Re:What's he on, today? by taustin · · Score: 4, Interesting

      I think they're also aiming to (eventually) use OS updates - which can be done remotely - to hack phones without having to have physical possession. Because seizing the phone can't be done without the owner knowing it, and getting warrants means dealing with judges. If they can do it remotely, they can ignore due process.

    11. Re:What's he on, today? by Anonymous Coward · · Score: 4, Informative

      Only Apple has the key to sign their firmware image. OK, maybe the NSA but they'd never share that capability with the FBI.

    12. Re:What's he on, today? by Trailer+Trash · · Score: 4, Informative

      Apple doesn't want to admit that they can flash new firmware to the locked device even though everyone knows they can.

      According to one legal analyst, the FBI and NSA already have this capability. What the government is looking for in this court case is a legal precedent to force companies to do this for them and make the data recovery admissible in court.

      I came to this conclusion yesterday. Some clueless folks elsewhere were arguing that there might be a zero day exploit that Apple could use (um, paradox, anyone?) that would get the trick done. My point was that if such were available chances are the FBI, NSA, whomever would already know about it or be in a position to find out about it, and that would be an easier and cheaper route to take.

      It's obvious that they want to force Apple to do this as a precedent, particularly now that iPhone 6 + cannot be "hacked" in this manner.

    13. Re:What's he on, today? by xvan · · Score: 4, Interesting

      It'd be easy to test. Throw him a another phone and ask him to unlock it. But they don't need him to unlock it, so they won't ask.

  2. Impressive! by 110010001000 · · Score: 5, Funny

    They must be pretty good if they attend Defcon in Las Vegas!

  3. Seems like a natural fit by scunc · · Score: 5, Funny

    Who better to break into a system that's nearly impossible to get into than the man responsible for software that's nearly impossible to get rid of?
    --
    What happens when an unstoppable force meets an irremovable object?

  4. dammit John, FOCUS! by Thud457 · · Score: 5, Funny

    You're supposed to be running for president!

    A Trump / McAfee ticket is the closest thing we can get to having President Dwayne Elizondo Mountain Dew Herbert Camacho in real life.

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  5. Re:Can you work with an image? by agm · · Score: 4, Informative

    The encryption keys and protection mechanism are hardware based, not software based. The bytes in storage are useless without the phone's exact hardware. Unless they try and brute force the encryption. How many millions of years would that take?

  6. Re:Can you work with an image? by spire3661 · · Score: 5, Insightful

    You dont get it. This is the FBI's 'Rosa Parks' moment. They are using an incendiary case to force the issue that unbreakable encryption should not be allowed in casual use. They are trying to force the idea that it should be illegal to make an unbreakable lock and they are using this case to ram it home. They dont really give a shit about the data in this case, they want to cow the tech sector into not making their jobs harder.

    --
    Good-bye
  7. Re:PR bull by bluefoxlucid · · Score: 4, Interesting

    The whole thing is bullshit-on-hold. I already know the narrative; I've modeled the current government in abstract from bits and pieces I've picked up while not really paying attention.

    You want to know how it plays out?

    The government cracks the phone. It finds evidence of the shooting on there--possibly explicit, possibly vague. Regardless, it's evidence. They hold up this evidence and say, "If this hadn't been encrypted, we could have stopped this shooting!"

    That's contingent on them actually cracking the phone, but it's the direction they're going. Notice the huge flaw in logic: They weren't in possession of the phone pre-shooting, and any software on the phone would be able to bypass the encryption. Network monitoring would have given them any unencrypted information. Encrypted messaging is a different facility, and any systems to look for certain key words would face both an incredible wall of false positives and misdirection by simple codes ("did you remember to pick up eggs?" "I'll buy them tonight around 8." Shooting is at 8pm). Doesn't matter; the narrative is swallowed by the masses, because people in groups don't think.

    I doubt they'll fabricate evidence and claim they broke the encryption. They may be using this case as pressure, hoping to bring multiple such cases forward and continuously claim people are dying because of encryption. That's more conjecture; I'm pretty firm on their political play at the masses, but not on the power buildup via repeated demands for backdoor decryption capabilities through multiple tragedies. My models give me movie plots, but not firm projections; more data will elevate some of those movie plots to firm projections.

    Just watch when they *do* break someone's encryption in one of these cases. Watch what they say after. They'll spin a narrative about how the encryption allowed the crime to occur, about how they could have stopped it if only there was an encryption back door.

  8. iPhone Security explained.. by slashkitty · · Score: 4, Informative

    I highly recommend some of you read this paper: http://www.apple.com/business/...

    --
    -- these are only opinions and they might not be mine.
  9. Re:Can you work with an image? by edtice1559 · · Score: 4, Informative

    The four digit PIN isn't used to encrypt the device. If it were, the thing would have been decrypted in under a minute. The encryption key is stored in a piece of hardware that takes the PIN and encrypted data as input. It combines those with a key that only the hardware knows to generate some output. If the hardware would make it's key available then it would be trivial to do what you describe. But the hardware is explicitly designed NOT to do that. It can only output the decrypted text. If you pass it the wrong PIN, the output is jibberish. Of course you can still try every combination of PIN but you need the actual hardware. For iPhone 5, if you entered a bad PIN too many times, the OS wiped the device. If you could sabotage the counter or otherwise modify the software you get unlimited tries. That's what the FBI wants here. Starting in iPhone6, the hardware ("secure enclave") will destroy its key if there are ten bad PIN entries in a row. The same hardware is designed such that updating it's software will also destroy the key. So the trick won't work anymore. However, Apple can decrypt an iPhone5. But they have to do it by updating software to not wipe the phone.

  10. Whatever the outcome, Apple owes McAfee a favor by Applehu+Akbar · · Score: 4, Insightful

    McAfee's software, which comes loaded by default on millions of PCs, has been instrumental in making OS X more popular.

  11. "the" sanburnadino iphone by citylivin · · Score: 4, Insightful

    If your like me and had no idea wtf this article is talking about, apparently it was used in an american mass shooting:

    https://en.wikipedia.org/wiki/...

    Funny they are so concerned with gaining access to this stupid phone when the real weapons used to commit the crime are sold almost everywhere in america.

    --
    As a potential lottery winner, I totally support tax cuts for the wealthy
  12. Re:Can you work with an image? by j-turkey · · Score: 5, Informative

    You dont get it. This is the FBI's 'Rosa Parks' moment. They are using an incendiary case to force the issue that unbreakable encryption should not be allowed in casual use. They are trying to force the idea that it should be illegal to make an unbreakable lock and they are using this case to ram it home. They dont really give a shit about the data in this case, they want to cow the tech sector into not making their jobs harder.

    THIS! I wish that I had mod points. You are correct, the case is entirely political. The Guardian has an article that explains in depth what you very succinctly stated. The big takeaway is that the actual data in this case doesn't really matter. However, the feds were fishing for the perfect inflammatory case to establish legal precedent (NPR had a great story on it earlier this week with a legal analyst who said that the Justice Department knew exactly what they were doing when they chose this case). Tim Cook is spot on in fighting this as a precedent matter more than anything else.

    --

    -Turkey

  13. Re:Can you work with an image? by spire3661 · · Score: 5, Insightful

    Read more history. I dont think the Jews in Germany ever imagined things would ever end up where they did either. Thats not hyperbole or Godwin. History EXPLICITLY AND WITHOUT QUESTION teaches us that these powers can and WILL be abused to hurt and literally enslave people. IF they can do it to 'criminals' they can do it to anyone. Part of you earning and investing is BEING A GODDAMN CITIZEN. You dont get to completely ignore your civic duty. Where did you get that idea that your only function is to be a selfish prick and give nothing back? Paying taxes=!being a citizen or fulfilling your civic duties. Get involved and you will see precisely why people scram about this shit. Did you parents teach you nothing of the sacrifices people made to get us here? Freedom isnt free, it requires an involved and educated citizenry. Be part of that or shut the fuck up. Dont let your apathy strip others of their creator granted rights.,

    --
    Good-bye