Slashdot Mirror


Bill Gates Sides With FBI In Apple Spat (ft.com)

Fudge Factor 3000 writes: Bill Gates has now publicly stated that Apple should cooperate with the FBI in the San Bernadino terrorist's phone unlocking case. He states that it is for this specific case, but seems to miss the point that there are other law enforcement officials waiting on the wings with their requests should this precedent be set. The war against privacy escalates. Setting aside the actual practicality of unlocking the San Bernadino phone, the teams that are emerging on this issue include some pretty strange bedfellows: John McAfee and Bill Gates on the pro-unlocking side, and Woz, Edward Snowden and even some of the victim's families on the con.

389 comments

  1. Is that by Anonymous Coward · · Score: 5, Insightful

    the same Bill Gates who's companies latest offering backs up everly last secret it can find on your computer to server in the US?
    Bend over more Bill, it's not quite far enough yet.

    1. Re:Is that by kruug · · Score: 3, Informative

      First off, Bill hasn't been involved with Windows for quite some time. Secondly, it does back anything up that you don't tell it to...

    2. Re:Is that by bondsbw · · Score: 2, Insightful

      Indeed, the company that uploads the entire contents of your device to its cloud service and calls it a "backup feature".

      Oh wait, I thought you were talking about Apple for a minute. Carry on.

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
    3. Re:Is that by Anonymous Coward · · Score: 0

      Is that supposed to make me feel better??!!!??!?!

    4. Re:Is that by shaitand · · Score: 0

      Windows 10 most definitely does send information back to MS. You can disable some options but that doesn't eliminate the backdoor or all the data going back.

    5. Re:Is that by kruug · · Score: 2, Informative

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

    6. Re:Is that by shaitand · · Score: 2, Insightful

      There is nothing anonymous about meta-data it compiles into a very unique and identifiable fingerprint. Can we all cut the crap please.

    7. Re:Is that by TheCastro1689 · · Score: 0

      What are you on about? Bill came back, hated 8 and now W10 is what we're getting. He's supposed to be working on the MS Office applications, but he definitely has some Windows input.

    8. Re:Is that by Anonymous Coward · · Score: 0

      Very unique? What's that exactly?

    9. Re:Is that by shaitand · · Score: 0

      Please refer to a dictionary for the meaning of the word unique. Just because the data being sent back does not contain a single data point that can identify you does not mean the composite can not be used to identify you. Just like no single point reviewed in an actual fingerprint uniquely identifies you, the combination of ridges and swirls can do so.

      Meta data can be cross referenced. For instance, viewing gps data points I can surmise where x works, lives, and had dinner a few nights. Cross referencing that data with facebook trivially will identify an individual and tell you quite a bit about their life that no government organization has business to know. So nothing but an anonymous stream of gps data points (you know, ACTUAL telemetry data) is not anonymous at all.

    10. Re:Is that by bondsbw · · Score: 1

      Can we all cut the crap please.

      Indeed, just show them all the evidence that their personal files are being sent to Microsoft. That should shut them up.

      I mean, you can do that can't you? You can show that actual harmful data is being sent and not just the telemetry that MS claims, right? I hope so, otherwise it's like you are just repeating things that others have said with no real substance to back it up.

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
    11. Re: Is that by Redmancometh · · Score: 1

      Heh. This guy gets it

    12. Re:Is that by Lead+Butthead · · Score: 1, Troll

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

      .. and that ... makes it okay. Are you f_cking kidding me?

      --
      ELOI, ELOI, LAMA SABACHTHANI!?
    13. Re:Is that by shaitand · · Score: 2

      "Indeed, just show them all the evidence that their personal files are being sent to Microsoft. That should shut them up."

      Since I didn't make such a claim, I'm not sure why I'd present evidence for it. But since the EULA authorizes them to do so and you are claiming they are not taking advantage of what you agree to in the EULA. I trust that YOU are prepared to provide evidence they aren't exercising the legal rights they are requiring. Otherwise it's like you are just repeating things that others have said with no real substance to back it up.

      "and not just the telemetry that MS claims, right"

      Begging the question much? My argument was that the telemetry that MS claims is actually harmful data.

    14. Re:Is that by bondsbw · · Score: 2

      Since I didn't make such a claim

      Then what did you mean by "that doesn't eliminate the backdoor or all the data going back"? You made a claim that they have a backdoor and "all the data" is going back to them, certainly you or someone else here can prove it so that it's clear how MS is in the wrong.

      Look, I'm not arguing against you. I just am sick and damn tired of hearing this argument against MS come up every time a tech company is mentioned in a Slashdot post, but nobody has the decency to show that something more harmful than anonymous telemetry gets sent. Telemetry might provide a means for identification, but how is that significantly different from kind of data that gets sent to advertisers in non-MS web browsers on non-MS operating systems?

      I'm not trying to justify it as acceptable behavior, but can we for once have a conversation about one of the other tech companies that much more blatantly gather data? The companies that are directly the subject of this post and several other recent posts which admit they would freely give the FBI cloud backup data if the FBI hadn't screwed up by changing the password?

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
    15. Re:Is that by Ol+Olsoc · · Score: 4, Insightful

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

      Oh fucking bullshit.

      If you can actually read, Microsoft very plainly and explicitly says that they scrub your identifying data after thy get your telemetry. So why would they tell you they scrub it if they do not have it?

      Seriously, how much to you get paid to lie about this shit? It's to the hpoint where the shilss are denying What Microsoft says they do.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    16. Re: Is that by Anonymous Coward · · Score: 1

      Only if you let it. The geeks don't use iCloud backups. They use their own computers.

      The cloud is a fucking sham. If you participate in it then you get what you deserve. Meanwhile real devs and admins are using their own hardware, because that's what real IT does. Fuck renting hardware.

    17. Re:Is that by thegarbz · · Score: 1

      the same Bill Gates who's companies latest offering backs up everly last secret it can find on your computer to server in the US?

      No this is the one who hasn't been CEO for 16 years and hasn't had a full time position at the company for at least 10. You must be talking about some other guy.

    18. Re:Is that by macs4all · · Score: 1

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

      Except for one BIG difference: Unlike Windows, OS X makes it easy (and actually effective) to Opt-Out.

      I don't know about Android or Ubuntu.

    19. Re: Is that by Anonymous Coward · · Score: 0

      Sure is. The same microdicksucking faggot. Fuck him in his ass and everything he ever thought of.

    20. Re:Is that by Anonymous Coward · · Score: 0

      Most of the data being sent to MS is actually encrypted.

      If it is "harmless anonymous data" why is MS hiding it?

    21. Re:Is that by Stan92057 · · Score: 1

      Every win 10 install is given a unique adverting number so they say

      http://windows.microsoft.com/en-us/windows-10/services-setting-preferences

      Advertising ID. Part of how we operate our business as a business is to display ads. For those ads to be relevant to you, we generate a random, unique advertising ID for each person on a device, for apps and other experiences to use. If you turn this off, you'll still see ads. If you keep it on, you're more likely to see ads for things you're interested in.

      --
      Jack of all trades,master of none
    22. Re:Is that by Anonymous Coward · · Score: 0

      Anonymous telemetry is not anonymous.

      It has been proven time and again, that stripping personal info from data doesn't stop people from tracing it back to you.

      Pull your tongue out of MS's collective ass.

      Apple would not freely give cloud backup to the FBI, they would do it with a court order. What they won't do is create a backdoored version of their OS and if you can't tell the difference you are even more fucktarded than you are presenting yourself.

    23. Re:Is that by tsa · · Score: 1

      I didn't know astroturfing was still a thing.

      --

      -- Cheers!

    24. Re: Is that by tsa · · Score: 2

      Finally someone who talks sense about the Cloud.

      --

      -- Cheers!

    25. Re:Is that by shaitand · · Score: 2

      "Telemetry might provide a means for identification, but how is that significantly different from kind of data that gets sent to advertisers in non-MS web browsers on non-MS operating systems?

      I'm not trying to justify it as acceptable behavior"

      Okay, so we have found a bit of common ground. You will not see this kind of data sent from typical Linux desktops. You can take measures to prevent it in browsers as well. You can allegedly turn off some kinds of data but not all, according to MS. Your desktop/laptop was really the last potential bastion of privacy, mobile and everything running a mobile OS is completely compromised, and this last bastion is an important battle ground.

      There is only one way for a communication to be private. You generates a key, the contact on the other end generates a key and the public side of that key is exchanged. No third party certifies or has access to either key, they must be generated at the client. This is the only manner in which absolutely no trust of other parties is required. If the client device is compromised prior to key generation then the whole thing is just wasted extra cycles. The desktop and private servers are the only place you have left that there is any potential to generate and use a key for internet communications that aren't compromised.

      MS is requiring you grant permission to do the same on windows 10, not just for your mobile but for your desktop. They are sending a stream of data back but only they know for certain what that data contains. Nobody can "prove" they are lying, yet. But they have a long standing anti-consumer anti-privacy stance and a long history of lying about these things. They purchased Skype which securely worked in the manner I outlined and completely re-engineered it for the sole purpose of making the system "tappable."

      MS Windows is a near monopoly on the desktop and the company has a long track record of bad behavior but believe me you will see commentary opposing this kind of thing no matter what company it comes from. Not too far back a story came to light with Intel sending data back from a modified Linux distribution.

    26. Re:Is that by Zaelath · · Score: 1

      nobody has the decency to show that something more harmful than anonymous telemetry gets sent.

      Yeah, how? Given it's all encrypted with MS's public key, how do you know it's only telemetry? How can I prove it's not?

      Now, if MS logged what they sent locally in clear text packets, I could use their public key to encrypt the packet and prove that it was only that data they claimed travelling over the wire.

      MS has not chosen to make that available, hence they are the ones who are choosing to allow this to remain an issue.

    27. Re:Is that by bondsbw · · Score: 1

      There are tools and techniques for intercepting Windows API calls including CryptoAPI.

      Surely, with all this focus on MS uploading data (despite users turning it off--something I very much don't agree with), someone has tried to intercept the communications before they are encrypted? And surely anything other than telemetry would have made the front page of every tech site? That's why I'm very skeptical.

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
    28. Re:Is that by Parafilmus · · Score: 1

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data... it's doing the same thing OS X does

      That is not the case, at least with respect to encryption.

      When you encrypt a disk with filevault, the system will ask if you want to share the key with Apple, or if you'd prefer to keep it private.

      When you encrypt a disk with bitlocker, the system will send the key to Microsoft, without asking. The key is tied to your email address, in case Microsoft is ever asked to decrypt your disk.

      Doesn't that reveal a fundamental difference in two operating systems' attitude toward user privacy?

    29. Re:Is that by Parafilmus · · Score: 1

      Clarification: windows pro or enterprise can be made to encrypt a disk without send the key to microsoft, though its not the default behavior. Windows home will always silently send the key to MS.

    30. Re:Is that by Parafilmus · · Score: 1

      You can show that actual harmful data is being sent and not just the telemetry that MS claims, right?

      How about this:

      When you encrypt a disk using Windows Home, Microsoft silently transmits the key to themselves, in case they ever need to decrypt your disk in the future. http://www.securityweek.com/mi...

      Does that count as harmful? The data is not anonymous. Its transmitted silently, and it can be used to compromise the user's privacy. That at least lands in the "potentially harmful" category, right?

    31. Re:Is that by Zaelath · · Score: 2

      That's the same theory that says OpenSSL was never full of security holes because it was open source and everyone in the world could check it. Any vulnerabilities you have seen of late are just products of your fevered imagination.

      In any case, that's an awfully tall straw man you've set up. You're asking "someone" to do a lot of work to find out what MS are collecting at the moment, far beyond "decency".

      People are, generally, likely to think MS are trustworthy because they have skin in the game (as do I). However, they see more value in making discovering what telemetry they're interested in difficult, than in shutting down the conspiracy theorists by being open about it. I find that in itself interesting.

      But hey, I don't really care. Not only did I opt out of what I could, but block the servers they collect telemetry on entirely via an external firewall they can't control, since opting out doesn't opt out. That's interesting too.

      I think the decency hurdle is MS's to fall over, and describing yourself as sceptical is deliciously ironic.

    32. Re: Is that by Tolkien · · Score: 1

      Untrue, the NSA intercept every software crash report that users send to Microsoft, that''s a gold mine to them.

    33. Re: Is that by Anonymous Coward · · Score: 0

      hahahahaha

      Until some "terrorist" locks their secrets up and the FBI asks Microsoft to backdoor a patch so they can access the data.

      Because. . . terrorists of course :|

      Though using Windows to hide anything would be a rather poor choice to begin with.

      Unlike Windows, I don't want anyone to force update my computer / phone without my specific knowledge of it.

    34. Re:Is that by ayesnymous · · Score: 1

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

      Oh fucking bullshit.

      If you can actually read, Microsoft very plainly and explicitly says that they scrub your identifying data after thy get your telemetry. So why would they tell you they scrub it if they do not have it?

      Why scrub after it gets sent and not before? Your identifying data is going over the internet - not good.

    35. Re:Is that by antdude · · Score: 1

      How about not even uploading those telemetry data. :(

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    36. Re:Is that by bondsbw · · Score: 1

      Considering that so much energy has been put into inspecting Windows 10 packets to see just how and when specific updates cause your settings to revert and start sending data back to Microsoft, I can't imagine how no energy has gone into actually checking what was being sent. Doesn't make sense.

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
    37. Re:Is that by Zaelath · · Score: 1

      Trolling or clueless. The AI challenge of the next millennium.

    38. Re:Is that by Ol+Olsoc · · Score: 1

      Windows 10 does send information back to Microsoft, but nothing personal aside from anonymous telemetry data. It's not stealing documents, it's not stealing photos, it's doing the same thing OS X does, it's doing the same thing Android does, it's doing the same thing Ubuntu did.

      Oh fucking bullshit.

      If you can actually read, Microsoft very plainly and explicitly says that they scrub your identifying data after thy get your telemetry. So why would they tell you they scrub it if they do not have it?

      Why scrub after it gets sent and not before? Your identifying data is going over the internet - not good.

      Exactly. My guess is that the data is worth more to them and who knows if they can attach a name to it.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    39. Re:Is that by lsatenstein · · Score: 1

      One argument in favor of unlocking phones was given by a government agent. He stated that the government could go into your safety deposit box as part of an investigation. They can drill the lock, or use a bank passkey, along with the second key that the clerk uses.

      However, the safety box has limited exposure. The government opening one box does not reduce the privacy of the adjacent box.

        If Apple can unlock their model phone or provide a backdoor to the encryption algorithm, then so can all criminals. Apple will be out of business.

      My conjecture is that AES encryption is easily hackable, given Intel integrated AES instructions into the CPU hardware, and that is why it was chosen over the blowfish or twofish algorithms. With Intel's AES cpu integrated instructions, encryption/decryption is more than 20 times faster than it would be otherwise, and substantially faster and easier for the government to discover the key than if the data was encrypted with blowfish.
           

      --
      Leslie Satenstein Montreal Quebec Canada
    40. Re:Is that by beastofburdon · · Score: 1

      All you need to show them is the UELA and have them actually read it. I can only assume you did not read it since you do not seem to be aware of the parts that include keylogging and direct access to all files on the computer.

    41. Re: Is that by cthulhu11 · · Score: 1

      Only public information on Facebook could be referenced, so if you don't want your business to be public, don't broadcast it in the first place.

    42. Re:Is that by Jack+Griffin · · Score: 1

      Why scrub after it gets sent and not before? Your identifying data is going over the internet - not good.

      Exactly. My guess is that the data is worth more to them and who knows if they can attach a name to it.

      Taking the tin foil hat off for a sec, one technical reason I can think of is that it's easier to have one centralised scrubbing engine than millions of them in various states of operation on everyone's machine.
      But I'm guessing that you're not actually interested in a technical discussion...

    43. Re:Is that by Anonymous Coward · · Score: 0

      I get 50 bucks every time I shill for them... Brought to you by Carl's Jr.

      In all seriousness, the telem shits been going sense XP(and in ALL major OSs). People just need something to bitch about in 10 now that they have their start button back and its a handy lightening rod for irrational hate.

    44. Re: Is that by shaitand · · Score: 1

      I assume you realize all information on Facebook is public. It is so easy to access that checking all the content in your "restricted" profile is standard practice for hiring processes these days let alone government.

    45. Re:Is that by Ol+Olsoc · · Score: 1

      I get 50 bucks every time I shill for them... Brought to you by Carl's Jr.

      In all seriousness, the telem shits been going sense XP(and in ALL major OSs). People just need something to bitch about in 10 now that they have their start button back and its a handy lightening rod for irrational hate.

      Telemetry is one thing. I set my systems to check for updates, but allow me to download and install them. Which is gone in W10, I can sort of delay them, but the updates change the settings to automatic.

      I also don't have any problem with sending crash reports, or any feedback that I approve. And if I ask a question of Siri or Cortana, it obviously goes out to somewhere to find it. So every OS phones home. But last time I checked, OS X or Linux doesn't read my email, or keypresses That would be Microsoft. And It obviously couldn't be happening since 1995. But back to the pay thing. I actually like the way W10 works if they would just let me have control over the updates, and do not want all of the telemetry.

      They have a payment system discount for people who think it's half good?

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    46. Re:Is that by barbariccow · · Score: 1

      That would make sense, except when you send a packet, you must first assemble it. Don't include the data you don't have to scrub............

    47. Re:Is that by barbariccow · · Score: 1

      So 10 bajillion years are shorted to 500 majillion years?

    48. Re:Is that by Jack+Griffin · · Score: 1

      That would make sense, except when you send a packet, you must first assemble it. Don't include the data you don't have to scrub............

      Hey I'm no apps guy, but I would have thought that the app will already have 'user_data' as a blob, and all the OS has to do is send that. Anything else would require some local intelligent process to filter types of data. Centralising that makes more sense to me (assuming data sizes are not impacting on the network).

    49. Re:Is that by Anonymous Coward · · Score: 0

      Wireshark shows that Windows 10 sends a metric shit-ton of data to various MS servers. Even if you shut off the spyware, keylogger, etc.

      The data is transmitted encrypted.

      Combine that with the EULA and make the obvious connection.

    50. Re:Is that by Anonymous Coward · · Score: 0

      Do you actually think that the API calls for this functionality are published?

      You are either the biggest and dumbest MS shill since Andre Da Costa or just simply fucking retarded.

    51. Re:Is that by Anonymous Coward · · Score: 0

      It makes sense to transmit personally identifiable data first and then scrub it?

      You trust MS that much?

      Fucking retard

  2. Of course he does. by Anonymous Coward · · Score: 5, Insightful

    See, the billionaire class wants to make sure that we little people can be monitored and tracked.

    1. Re:Of course he does. by Anonymous Coward · · Score: 1

      Yeah the 'con' side is full of non-billionaire people like Tim Cook.

    2. Re:Of course he does. by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Tim Cook isn't a billionaire.

      What's the next step after billionaire again?

    3. Re:Of course he does. by Anonymous Coward · · Score: 0

      He's worth "only" $785 million

      John McAfee isn't a billionaire either. Literally the only Billionaire is Bill Gates. A single person hardly supports the "billionaire class" argument.

    4. Re:Of course he does. by Anonymous Coward · · Score: 0

      Well, Donald Trump is another billionaire who wants Apple to bend over.

    5. Re:Of course he does. by U2xhc2hkb3QgU3Vja3M · · Score: 4, Funny

      Donald Trump wants everyone to bend over.

    6. Re:Of course he does. by NatasRevol · · Score: 1

      Donald Trump is a serial failure, so not a good representative of any class but the loser class.

      --
      There are two types of people in the world: Those who crave closure
    7. Re: Of course he does. by Anonymous Coward · · Score: 1

      Trump failed big once. Then he learned to engineer deals so only his partners got screwed. That's when he made money. But people quickly learned not to partner with him. Since then he's mostly been coasting.

      Source: I once had a law professor who worked a Trump case at the IRS. Like the Church of Scientology, Trump always slipped through their fingers. But everybody wanted to nail him because he bilked hundreds of millions from naive partners.

    8. Re:Of course he does. by Anonymous Coward · · Score: 0

      It's not even a 'class'; There are only about 400 billionaires in the WORLD. Those 400 hole more wealth than the rest of the world combined!

      For the greater good "we" should simply eminent domain all their wealth.

    9. Re: Of course he does. by unixisc · · Score: 1

      Precisely why we should elect him - so that he gets us on his team winning against everyone else.

    10. Re: Of course he does. by NatasRevol · · Score: 1

      Once? Not even close.

      http://www.nydailynews.com/new...

      --
      There are two types of people in the world: Those who crave closure
    11. Re:Of course he does. by Anonymous Coward · · Score: 0

      New flash, champ:

      The LITTLE PEOPLE class want to make sure that we little people are monitored and tracked, too.

      Look at the user base of services like Gmail, Facebook, and other "free" services, and tell me I'm wrong.

    12. Re:Of course he does. by Archangel+Michael · · Score: 1

      I've missed more than 9000 shots in my career. I've lost almost 300 games. 26 times, I've been trusted to take the game winning shot and missed. I've failed over and over and over again in my life. And that is why I succeed. - Michael Jordan on failure

      If you don't try, you still fail. It is the worst kind of failure.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    13. Re:Of course he does. by Psion · · Score: 1

      Gmail, Facebook, and other such services are all places I can easily lie to and tell to fuck off when I want. It's really easy to practice disinformation with them without any retribution beyond a slightly elevated risk of losing one of my accounts with them.

      If I try that with the government, I will face fines, imprisonment, or worse.

    14. Re: Of course he does. by Anonymous Coward · · Score: 0

      What about the AFL deal? He screwed the AFL league. He forced them to play on the fall to compete with the NFL and it killed them.

      The NFL wouldn't let trump own a team so he went to the next best thing the NFL. He was greedy and mad at the NFL and wanted to shut them down because they did not let him buy a team.

      Trump came from a rich family and has had failure after failure with some success sprinkled in.

    15. Re: Of course he does. by ewibble · · Score: 1

      Or he can bilk every single person in the US. (and probably the rest of the world). I am sure the all his ex partners believed they where "on his team". The only person on Donald Trumps team is himself.

  3. And you are surprised? by thaylin · · Score: 4, Insightful

    The man is the founder of a company with a terrible privacy record and you are surprised? I am more surprised that he does not realize you cannot create a specific solution for this that is not also a general solution for all phones.

    --
    When you cant win, ad hominem.
    1. Re:And you are surprised? by ebonum · · Score: 1, Interesting

      Bill Gates is a guy who won't blink for a second when it comes to sending a human rights activists in China 10 years of hellish prison. He'll do ANYTHING to get in good with the government to make money. He's not even very particular about which government he'll hop into bed with. What do you expect him to say about a Muslim murderer who killed Americans?

    2. Re: And you are surprised? by Anonymous Coward · · Score: 0

      He's refuting he said that he supports the FBI.

    3. Re:And you are surprised? by Anonymous Coward · · Score: 5, Insightful

      MS also earns hundreds of millions, if not billions, per year from government contracts.

      As Upton Sinclair wrote, "It is difficult to get a man to understand something, when his salary depends on his not understanding it."

    4. Re:And you are surprised? by McPierce · · Score: 1

      Someone from Microsoft criticizing the choices made by Apple that aren't terribly popular?

      Color me surprised...

      --
      Darryl L. Pierce "What do you care what people think, Mr. Feynman?"
    5. Re:And you are surprised? by AmiMoJo · · Score: 1

      Do you have any evidence to back that up? I mean, he was a dick when he was running Microsoft, but I don't recall him creating backdoors for the Chinese or being involved in sending activists to prison.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    6. Re:And you are surprised? by Jeremi · · Score: 3, Interesting

      I am more surprised that he does not realize you cannot create a specific solution for this that is not also a general solution for all phones.

      Err, can't you? Since only Apple has the private key necessary to sign iOS firmware updates, AFAICT that means that Apple could release a nerfed firmware that would run only on an iPhone 5c with Sayed Farouk's phone's hardware ID, and refuse to run on any other device, and nobody would be able to modify it without breaking its signature.

      I understand there is also a principle of legal precedent to consider, but from a technical standpoint I don't see how it's impossible.

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    7. Re:And you are surprised? by Anonymous Coward · · Score: 0

      A significant part of the problem is that they don't know the tamperproof hardware ID (which is used as keying material) of the phone in question.

      And if you tie it to the ID of some other hardware component in the system, you're only a reflow oven away from any other phone having the "same" ID, by virtue of moving that other hardware component around.

    8. Re:And you are surprised? by tlhIngan · · Score: 3, Insightful

      Err, can't you? Since only Apple has the private key necessary to sign iOS firmware updates, AFAICT that means that Apple could release a nerfed firmware that would run only on an iPhone 5c with Sayed Farouk's phone's hardware ID, and refuse to run on any other device, and nobody would be able to modify it without breaking its signature.

      I understand there is also a principle of legal precedent to consider, but from a technical standpoint I don't see how it's impossible.

      It's more of a barrier to entry.

      Right now, Apple has to develop the firmware. And while it's easy to disable the 10 PIN check, the FBI wants additional development to be able to programmatically guess the PIN.

      Once that is done, you have basically a master key. It doesn't matter that the FBI has a nerfed version that only works on one phone. One it's out, the barrier to developing it for other phones Is a lot lower - "We just want what you have given the FBI, just with this hardware ID". And so on.

      And then there's a whole case of cyberattackers wanting to look at the firmware and find ways to break it - through jailbreaking if need be. Imagine the havoc caused if this firmware was released as part of a jailbreak tool for iOS.

      In fact, the precedent for the All Writs Act is if something is already done, then law enforcement can ask for it to be done as well. Since the telephone company already uses pen registers for their own internal investigations (fraud, etc), then the FBI, local LEOs and others asking the phone company to put on a pen register on a specific line can do so as well. After all, the difference between the phone company and LEOs is who the data goes to in the end.

      And the FBI doesn't want static data. They want live data. Let's say they used GMail and other services - they could ask Google for the data, but that requires a warrant. They could ask Apple, then use the GMail app on the phone in question and get the data without a warrant. Sure, it's probably not admissible, but if you really needed to know, you could either subpoena Google later for an "official" copy of the evidence, or just find other evidence.

      And one final note - if you're comfortable with LEOs accessing your phone, then why bother putting a PIN on it? Or do you have crap on your phone that you don't want others to see?

      Tim Cook knows about privacy - if nothing more than to protect those who have yet to come out of the closet. Which even in these modern times still brings up punishments as severe as the death penalty in many countries. Even in the first world many people are unable to cope with learning their son/daughter is gay.

      So yeah, the phone owner's life could literally be on the line.

    9. Re:And you are surprised? by Anonymous Coward · · Score: 0

      Yeah that is correct, they can easily make 1 small update tied to the 1 phone.

      But most people commenting on this story (all over the internet) don't understand that Apple has the master signing key, or how it works.

    10. Re:And you are surprised? by Anonymous Coward · · Score: 1

      There were plenty of stories about it. I have looked up one of them and I'm sure that Google will find you plenty more (though maybe not "bong", or whatever it is MS calls it's excuse for a search engine today). It's funny how easily people forget how truly awful Microsoft is with just a few years of publicity campaigns against their opponents.

    11. Re:And you are surprised? by tricorn · · Score: 1

      And then there's a whole case of cyberattackers wanting to look at the firmware and find ways to break it - through jailbreaking if need be. Imagine the havoc caused if this firmware was released as part of a jailbreak tool for iOS.

      Jailbreaking is a lot more difficult and complex than what this firmware would be. Having the firmware wouldn't allow anyone (except for Apple) to sign it for any other device.

      If you have a jailbroken device, you could already do this. However, AFAIK, there's no way to jailbreak current phones without having the passcode in the first place.

      So, no, without Apple's signing keys, the firmware is useless. With Apple's signing keys, it's unnecessary.

    12. Re:And you are surprised? by Curunir_wolf · · Score: 1

      Cook is absolutely right to be concerned about precedent. If they are forced to create a crack for this phone, it will just open the flood gates. The FBI has already admitted they have about 12 other phones they need Apple to crack for them. And another LEO agent told an ABC news reporter that he has been holding on to about 150 phones that would also be entering the pipeline.

      So maybe "undue burden" might be hard to argue in this one particular case, but setting the precedent absolutely creates a whole new business process that Apple will need to take care of, and one that is nothing but cost and bad press for them.

      --
      "Somebody has to do something. It's just incredibly pathetic it has to be us."
      --- Jerry Garcia
    13. Re: And you are surprised? by Anonymous Coward · · Score: 0

      Please link to the jailbreak that can dump the keys even on a phone that is unlocked. What? It can't be done? Perhaps that is the issue you twat!

    14. Re:And you are surprised? by Jack+Griffin · · Score: 1

      Once that is done, you have basically a master key. It doesn't matter that the FBI has a nerfed version that only works on one phone. One it's out, the barrier to developing it for other phones Is a lot lower

      No it isn't. Since the hardest part in this equation is getting the court order.
      The next phone will still require a court order, since Apple will have to sign any firmware for any different device.Also the security model on IOS changed after the 5C, so any device built after it won't work anyway.

      And don't even bother with the precedent argument. The FBI have already nullified this by explicitly specifying it a once off request. Any future argument for precedence won't hold water in an actual court (rather than the kangaroo court that is Slashdot, where people don't seem to understand how legal precedence works)

  4. Bill Gates was always about controlling people by QuietLagoon · · Score: 4, Insightful
    From his time as Microsoft CEO, Bill Gates was all about removing choice, and making computer users use Windows software by making deals with PC OEMs.

    .
    It comes as no surprise that Bill Gates gives privacy so little weight, with less privacy users have less choice and control.

    1. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      Ditto. And as far as those deals go, a lot of the companies that made seemingly lucrative deals with Microsoft later regretted them.

    2. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      From his time as Microsoft CEO, Bill Gates was all about removing choice...

      I think that was Steve Jobs.

      Seriously though, I do wonder which 'side' he would be on.

    3. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      And how is that different from Apple? It wants to control people too, with walled gardens and insisting on being the only manufacturer of its computers (as opposed to PC clones).

    4. Re:Bill Gates was always about controlling people by chispito · · Score: 2

      From his time as Microsoft CEO, Bill Gates was all about removing choice, and making computer users use Windows software by making deals with PC OEMs.

      . It comes as no surprise that Bill Gates gives privacy so little weight, with less privacy users have less choice and control.

      I'm shocked, shocked to find someone on Slashdot that taking the chance to dump on Bill Gates.

      I don't really care who comes out on what side here. I'm more interested in how Apple and Google move forward with their OSes to prevent this from even being a question next time.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    5. Re:Bill Gates was always about controlling people by phishybongwaters · · Score: 0, Flamebait

      Well, no, he didn't make anyone use windows. He made deals with OEMs stating, hey, your PC here is going to be running windows at some point, so you'll have to pay me a license fee. The PC OEMs who jumped on board are the ones that made users use windows, because they were essentially paying for it with the price of the PC, they could have offered you the competitor (who exactly was that at the time? IBM? Zerox?) It's all hip and fun to bash on MS and gates, but at least lay blame where it belongs. He worked a deal with the OEMs, they had the choice to opt in or not, they sold you out. And guess what..... for that very reason we have MACs and Linux to complete with MS. We likely wouldn't have the cool tech we do have if not for some shady behind the scenes deals.

    6. Re:Bill Gates was always about controlling people by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Go watch the old Keynotes with Steve. He talks about user privacy quite a lot when talking about iTunes, iCloud, etc.

    7. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0, Flamebait

      From his time as Microsoft CEO, Bill Gates was all about removing choice, and making computer users use Windows software by making deals with PC OEMs.

      .

      It comes as no surprise that Bill Gates gives privacy so little weight, with less privacy users have less choice and control.

      s/Bill Gates/Lennart Poettering/g;
      s/Windows/systemd/g;
      s/PC OEMs/Linux Distributions/g;

    8. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      Where is it written that you must license your hardware and software designs, or you are a total shithead?

      Because that's what you are acting like. Besides, Apple did allow clones in the late 90s, and it just about buried them. So go fuck yourself.

    9. Re:Bill Gates was always about controlling people by _UnderTow_ · · Score: 1, Insightful

      ... I'm more interested in how Apple and Google move forward with their OSes to prevent this from even being a question next time.

      This. The thing that bothers me the most about this whole thing is that Apple declared that they couldn't unlock our phones, that with the new OS and default encryption your data is safe, when it clearly isn't. IMO, they should open the phone for the FBI if they have the capability, then fix whatever is needed so that they actually CANNOT comply in the future.

    10. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      There is a huge difference!
      Apple never tried to gain a monopoly by forcing other manufacturers to use its products like Microsoft did.
      They have a walled garden, but they are not forcing anyone in.

    11. Re:Bill Gates was always about controlling people by spacepimp · · Score: 1

      Well in this instance, it makes the iPhone less secure and desirable, so the outcome is one in which Windows mobile efforts might look better as a result.

    12. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      ... I'm more interested in how Apple and Google move forward with their OSes to prevent this from even being a question next time.

      This. The thing that bothers me the most about this whole thing is that Apple declared that they couldn't unlock our phones, that with the new OS and default encryption your data is safe, when it clearly isn't. IMO, they should open the phone for the FBI if they have the capability, then fix whatever is needed so that they actually CANNOT comply in the future.

      Apple can't unlock the phone: only someone with the PIN can unlock it. Unfortunately, in this case, the PIN seems to be only four digits long, so you can brute force it. What Apple can do is tweak the software so that the auto-wipe does not kick in, and all ten thousand PINs can be gone through. This is brute forcing, and cannot be avoided, even with AES (though it'd take a while even with 128-bit keys).

      If, however, the PIN/lock code is 8+ characters, like is an option on newer versions of iOS, good luck trying to brute force that in a timely. in more recent version of iOS, Apple is even forcing people to use PINs that are at least six digits (which is better than most debit cards).

      Personally, my iOS pass code is at least ten characters. Good luck with that.

    13. Re:Bill Gates was always about controlling people by Xylantiel · · Score: 1

      Yep. My hope: 1. Apple resists until the supreme court says they must assist, 2. as a result, vendors make SECURE handsets that they have no ability to "help" unlock. Win for the customer! If Apple is not forced to help in this case, the customer (the owner of the device) LOSES because vendors can continue to make handsets "pretend secure" like this handset is. If the vendor has a backdoor or the ability to insert one without owner consent, it's not secure, just like if the government mandates a backdoor, it's not secure. Fortunately the handset vendors are already heading in the direction of actually secure devices, with some, including Apple I believe, already there.

    14. Re: Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      Steve didn't choose sides, he created the sides.

    15. Re:Bill Gates was always about controlling people by jbengt · · Score: 1

      He made deals with OEMs stating, hey, your PC here is going to be running windows at some point, so you'll have to pay me a license fee. The PC OEMs who jumped on board are the ones that made users use windows, because they were essentially paying for it with the price of the PC, they could have offered you the competitor

      That's not exactly correct. MS made deals like: We notice that 75% of your PCs are sold with windows installed. You can pay us X$ for every PC you sell, whether or not it has MS Windows on it, plus we'll throw in MS Word for free on each of them. Or else we'll charge you 3X$ for each copy of windows plus 3X$ for each copy of Word you sell.
      So that, essentially, became the Windows tax we all love to hate, and if you wanted anything else, instead, the PC OEMs might offer it, but you had to pay extra.

    16. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      My understanding is that the phone in question is simply one generation too late, phones with newer hardware have everything (including the number of guesses before bricking) in the secure chip and can't be ignored by iOS. This is based on a previous explanation on Slashdot.

    17. Re:Bill Gates was always about controlling people by Agripa · · Score: 1

      Apple can't unlock the phone: only someone with the PIN can unlock it. Unfortunately, in this case, the PIN seems to be only four digits long, so you can brute force it. What Apple can do is tweak the software so that the auto-wipe does not kick in, and all ten thousand PINs can be gone through. This is brute forcing, and cannot be avoided, even with AES (though it'd take a while even with 128-bit keys).

      It is too bad Apple did not think to only allow updates on unlocked phones.

    18. Re:Bill Gates was always about controlling people by Anonymous Coward · · Score: 0

      Given he 'dumped' (literally & figuratively) his pile of shit on the rest of us so long he deserves it, besides he has billions so I'm sure he can hire someone to wipe the shit off him.

    19. Re:Bill Gates was always about controlling people by Jack+Griffin · · Score: 1

      From his time as Microsoft CEO, Bill Gates was all about removing choice,

      Apart from the fact that MS OSes supported more hardware and had more backwards compatibility than any other vendor in the history of computers you mean?

  5. I'm SHOCKED! by Anonymous Coward · · Score: 0

    Shocked I tells ya! Bill Gates for president!

  6. You can buy a customer base, by Anonymous Coward · · Score: 0

    But you can't buy a moral conscience.

    BTW Thanks a lot for Windows 10.

  7. Re:Windows backdoor confirmed. by Anonymous Coward · · Score: 0

    Windows doesn't have a backdoor. Windows is the backdoor.

  8. McAfee? by fuzzyfuzzyfungus · · Score: 4, Interesting

    Not that his opinion matters nearly as much as the others(he's still loaded; but he's more busy playing the Hunter S. Thompson of tech than being a tech leader these days); but I thought that McAfee's position wasn't so much 'pro unlock' as "Me and my hacker posse will hack the shit out of it!"; which is a vote in favor of getting the contents of the phone(not that anyone is really against that, if there were some non-problematic way to do it); but not obviously a vote in favor of the feds having the right to force Apple to make it so.

    1. Re:McAfee? by OzPeter · · Score: 5, Insightful

      I thought that McAfee's position wasn't so much 'pro unlock' as "Me and my hacker posse will hack the shit out of it!";

      I thought McAfee's position was more along the lines of "Look at me! Look at me!" with the idea that he could say any old shit, get the attention he craves and then not have to deliver anything as no-one in their right mind would let him near that phone.

      --
      I am Slashdot. Are you Slashdot as well?
    2. Re:McAfee? by rch7 · · Score: 1

      You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor, so why should they be immune to court orders? No business or person is immune to it. They can only (try to) refuse to provide general access software, but every time they will get court order to provide data from specific phone, they should be legally required to comply with court order.

    3. Re:McAfee? by Anonymous Coward · · Score: 0

      That description does not narrow down the list of people described by the previous poster.

    4. Re:McAfee? by Rob+Y. · · Score: 2

      Off topic a bit, but does anybody but me think the 'erase phone after 10 bad password tries' feature takes 'security' too far? I'm not nuts about a feature that lets any arbitrary malicious person with physical access to my phone wipe the whole thing by simply entering 10 bad passwords. How about just making them wait a few hours after 10 bad passwords - perhaps increasing that delay after each 10 bad tries until the correct password has been entered. That'd make a brute force crack impossible, but still protect my phone from a nasty prankster - which is a more likely scenario, after all, than the FBI with a search warrant.

      --
      Posted from my Android phone. Oh, I can change this? There, that's better...
    5. Re:McAfee? by Anonymous Coward · · Score: 0

      While McAfee promises that he can unlock the phone, his views on whether Apple should comply with the FBI seem to actually support Apple.

      Here is a source for that.

    6. Re:McAfee? by Jeremi · · Score: 1

      Off topic a bit, but does anybody but me think the 'erase phone after 10 bad password tries' feature takes 'security' too far?

      It would be a bit over-the-top if erasing the phone meant losing all the data you had stored on the phone. But then again, if you didn't have your phone backed up somewhere, dropping your phone into the sink would have the exact same effect. So of course you do have your important data backed up, right? In which case, having your kid brother accidentally wipe your phone is only a minor inconvenience, not a big disaster -- just restore it when you get your phone back.

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    7. Re:McAfee? by Anonymous Coward · · Score: 0

      Apple already has access to it though through their own personal backdoor
       
      Prove it or STFU.
       
        You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions.
       
      Anytime you're ready to show us how it's done, big shot.

    8. Re:McAfee? by Anonymous Coward · · Score: 0

      You don't have to use it. Problem solved!

    9. Re:McAfee? by UnknowingFool · · Score: 1

      You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor, so why should they be immune to court orders?

      When you get an iPhone you are the administrator and you can change your own phone. Apple does not have access to it. Older iPhones did not have the hardware layers to completely lock down the phone. Newer ones are substantially hardened.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    10. Re:McAfee? by squiggleslash · · Score: 3, Interesting

      It's a phone, a small, losable, stealable, breakable, device you normally store in your front pocket. If you're storing valuable information on your device and not backing it up anywhere else, you're doing it wrong.

      --
      You are not alone. This is not normal. None of this is normal.
    11. Re:McAfee? by UnknowingFool · · Score: 1

      How about just making them wait a few hours after 10 bad passwords - perhaps increasing that delay after each 10 bad tries until the correct password has been entered.

      Um because that's exactly how an iPhone security works. After the 5th bad attempt, the phone will delay a minute. The delay increases incrementally with each attempt until is it 1 hour after 9. After 9, phone will delay to user's setting of delay time or erase data. It is up to the user.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    12. Re:McAfee? by fuzzyfuzzyfungus · · Score: 1

      Pretty much all of the brute-force prevention strategies involve a compromise between vulnerability to denial of service attacks and vulnerability to brute force; it's really just a matter of picking your poison based on what works best for your environment.

      The 'if you screw up, the data gets wiped' approach is a good fit when the device it protects is assumed to be a mere local cache(often one with a dangerously high risk of loss/theft) of something that is backed up elsewhere. Protecting the data isn't a serious concern; but keeping it from leaking is.

      For on-site situations(and anywhere where any idiot on the network can bounce authentication attempts in your name off the server as often as they like) the progressive timeout/temporary lockout ones are usually a better bet.

    13. Re:McAfee? by Anonymous Coward · · Score: 0

      Off topic a bit, but does anybody but me think the 'erase phone after 10 bad password tries' feature takes 'security' too far? ...

      No; I don't think so. How about you just backup your phone? This will also protect you from nasty toilets which eat your phone when you accidentally drop it.

    14. Re:McAfee? by Anonymous Coward · · Score: 0

      2 factor authentication with the phone? No, the phone is no longer just a phone, it's part of the digital identity for most, especially since the SIM cards are authentically tied to a real person, unlike the rest of the net.

    15. Re:McAfee? by david_thornley · · Score: 1

      I've got news for you: if I've got physical access, I can wipe the whole thing faster than that with a few simple tools, or maybe just the heel of my shoe.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  9. So help them out, Bill! by pla · · Score: 1

    Microsoft has the resources to reverse engineer Apple's protections and come up with a version of Windows that would run on iHardware. If Billy G wants to suck Uncle Sam's dick so badly, he should pony up and get on his knees!

  10. NBC poll 52% for FBI, 38% for Apple by peter303 · · Score: 3, Insightful

    Main street is viewing it differently than tech world. People fear security more than privacy.

    1. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 5, Informative

      and this is why America is no longer the land of the free, its the land of the afraid.

    2. Re:NBC poll 52% for FBI, 38% for Apple by Lunix+Nutcase · · Score: 1

      When was it ever? Are you ignorant of US history?

    3. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      and this is why America is no longer the land of the free, its the land of the afraid.

      +1 This!!

    4. Re:NBC poll 52% for FBI, 38% for Apple by fabrica64 · · Score: 1

      It really depends which was the question by NBC, because most of media outlet reported a lot of wrong. This is not about Apple refusing to open something it could. Apple can't open it. It's about Apple refusing to create a software facilitating guessing weak passwords that can be used on most old iPhones. I guess the 52% for FBI was just answering a question like "Apple can open the phone and it's refusing to do it protecting the terrorist, are you with FBI or Apple?"

    5. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      Tech world also doesn't view it that way. Just the idiots around here, and hipsters that want to support Apple by blocking entrances to their stores in a 'protest'.

    6. Re:NBC poll 52% for FBI, 38% for Apple by sbaker · · Score: 5, Insightful

      The biggest problem is that people are reacting to the headline - not the back story.

      1) This was the terrorist's WORK phone. He tried (and failed) to destroy his personal phone - and the FBI have all of the data from that. If he didn't destroy the work phone, there probably wasn't anything important on it.
      2) The FBI already have his texts, IP address lookups, voicemails and phonecall meta-data from the telco's - so this is only stuff like photos and documents stored inside the phone.
      3) The FBI already have an iCloud backup from 6 weeks before the attack.
      4) If they hadn't screwed up and changed the iCloud account's apple id - they'd have a recent backup too - and this would be a moot point. They screwed up.
      5) If this was so important - why didn't they demand it back in December when they first got the phone? Any information on it now will be horribly outdated.
      6) We already know that this was not a big ISIS plot or anything like that. It was a 'lone gunman' kind of a thing...so it's unlikely that there is anything on the phone that would incriminate anyone else who isn't already incriminated.
      7) If they succeed - you can bet that Apple's next phone will make it impossible to circumvent the security with an OS upgrade by putting more stuff in ROM.

      Knowing those things makes it very clear that they are using a high-profile case to demonstrate a capability (both on behalf of Apple - and on the behalf of the legal system to compel Apple).

      The reason to do this is to provoke a debate that they hope will produce either laws or a legal precedent that they can apply to future cases - there is no other reason to fight Apple and public opinion.

      The reason MOST people are agreeing with the Fed is that they didn't take the time to look at the facts.

      --
      www.sjbaker.org
    7. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      That sounds like something a communist would say. Get him boys.

    8. Re:NBC poll 52% for FBI, 38% for Apple by youngatheart · · Score: 3, Informative

      How I wish the question asked had been "Should Apple be forced to write software to enable government hacking?"

    9. Re:NBC poll 52% for FBI, 38% for Apple by kilfarsnar · · Score: 1

      Main street is viewing it differently than tech world. People fear security more than privacy.

      That's to be expected. Generally speaking, people fear what they are told to fear and don't question the viewpoints presented to them. They think that if unlocking this phone will help catch terrorists, then it should be done. If that's as far as one's thinking goes, it makes perfect sense.

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
    10. Re:NBC poll 52% for FBI, 38% for Apple by oh_my_080980980 · · Score: 1

      Exactly! The FBI has a boatload of information to sift through. All they would get would be 2 MONTHS between the last backup and the attack. Hardly a treasure trove when you consider this attach was PLANNED MONTHS BEFORE!

    11. Re:NBC poll 52% for FBI, 38% for Apple by Fire_Wraith · · Score: 3, Insightful

      Yes. The problem with this (and many other polls) is in how you phrase the question, and the degree to which you explain the issue (or not).

      For instance, if I asked people, "Should Apple comply with a legally issued search warrant?" most people will answer yes. If I instead ask them, "Should Apple give the U.S. Government unfettered access to everyone's iPhone?" people will likely answer more negatively (I wish I could say all would, but I don't have that much faith in humanity anymore).

      Beyond that though, I think part of the problem is that the average person doesn't understand why "unlocking a terrorist's phone, with a warrant" is a problem. Apple has no problem (morally speaking, technical challenges are another matter) with unlocking a single iPhone. What Apple objects to is giving the government a key to disable security on ANY iPhone, because past evidence shows that they'll start using it anywhere they want to, not just on this one particular case.

    12. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      I think the poll is somewhat misleading. Personally I'm on the /. line of thinking but I was talking to a lady I work with who was on the other. For her, it was fine because there would have to be a warrant or similar issued for it to be used, so it was okay to mandate these backdoors. When it was explained to her that what would happen if somebody else found out about these backdoors and they abused them (for her I used Russians since she can't imagine corrupt US government officials) her feelings about them changed drastically. I don't think most support it in the way people here like to assume, they either haven't thought about or don't understand how it could be abused and how anyone can discover it. And this lady has a degree in engineering. She's just near retirement and thinks about different things. Has different primary concerns.

    13. Re:NBC poll 52% for FBI, 38% for Apple by xxxJonBoyxxx · · Score: 1

      >> (lots of other evidence)

      Unfortunately, it seems you can't ever have enough evidence. Right now, there's a show on Netflix called "Making of a Murderer" about a guy who stalked a photographer, lured her to his house, raped her, killed her, then dumped her possessions and her body in a barrel and burned it all. The local law authorities collected mounds of evidence, even bringing in outside law enforcement to make sure they did it right, arrested the killer, and easily convicted him of murder in a court of law. However, ten years later a couple of random guys put together a ten-hour show that still finds a lot of holes in the process and casts doubt on the evidence, leading thousands of simple minds to sign petitions asking for this guy to be set free. With that (and the chance that this or that is declared inadmissible in court) in mind, if was in law enforcement, I'd always err on the side of all-the-evidence-I-could-possibly-collect.

    14. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      explain to me what you, a consumer, need 256 AES encryption for that you can't use 128 AES encryption for. Nudie photos? What? What do you keep on your phone that's so goddamn important that you need to seal it from the universe? I mean, the whole takeaway from the fappening was that its dumb to keep private things like that on potentially insecure devices and services, right? So why does that apply then but not now?

      Think about this for a while: Which is more secure for your data, your phone with its 265 bit encryption, or a $2 flash drive that never leaves your desk?

      I understand if you're a bank or a large corporation or something like that, but just you and me don't need encryption schemes like that (and on our phones, of all places) because of situations like this and also because its easy to just not put things on your phone that you would otherwise need to encrypt if it were.

      I keep all important documents in paper and not as electronic documents, not at all. And certainly not on my phone.

      I mean, safe manufacturers can't sell their safes unless they have a way of cracking them, why is the same not true here?

    15. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      explain to me what you, a consumer, need 256 AES encryption for that you can't use 128 AES encryption for.

      I use secure systems because CPUs are fast enough to make them practical for everyday use. Explain to me what you, an AC, need 128 AES encryption for that you can't use rot13 for.

    16. Re:NBC poll 52% for FBI, 38% for Apple by Maow · · Score: 1

      4) If they hadn't screwed up and changed the iCloud account's apple id - they'd have a recent backup too - and this would be a moot point. They screwed up.

      I've seen this brought up many times, but I'd like it clarified: who changed the ID / password?

      I thought it was the employer as part of a standard employment termination procedure, not the FBI or any government officials.

      Anyone able to link to a source that clarifies this point?

    17. Re:NBC poll 52% for FBI, 38% for Apple by tricorn · · Score: 1

      What about "should Apple be required to sign (for a specific single phone) a specific firmware image provided by the FBI"?

    18. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      safe manufacturers can't sell their safes unless they have a way of cracking them

      Citation needed (or it's BS)

      anon as I have modded (though not you) - JazzLad

    19. Re:NBC poll 52% for FBI, 38% for Apple by Actually,+I+do+RTFA · · Score: 1

      4) If they hadn't screwed up and changed the iCloud account's apple id - they'd have a recent backup too - and this would be a moot point. They screwed up.

      And why not insist Apple just restore that. It's in the cloud, and they have backups. "Get X from backup drive 13156 or whichever" seems well within scope of a search warrant.

      --
      Your ad here. Ask me how!
    20. Re:NBC poll 52% for FBI, 38% for Apple by youngatheart · · Score: 1

      That would be an interesting question. In fact I think the FBI should be creating the firmware they're wanting loaded in this case. It would significantly weaken Apple's argument of compelled speech.

      Of course, I trust you're aware that this isn't a firmware image provided by the FBI, but instead the Department of Justice wants to compel Apple to create software.

    21. Re:NBC poll 52% for FBI, 38% for Apple by sh00z · · Score: 1
      I believe it was a Twitter battle. I don't have an account, so I can't verify.
      1. Apple tweets that the Apple ID's password was changed within 24 hours of the "Authorities" taking the phone into their possession.
      2. FBI tweets that the San Bernadino County IT Department had the password reset.
      3. San Bernadino tweets that the reset was requested by the FBI.

      Sorry to propoagate the rumors, but it's been hours, and nobody else has responded.

    22. Re:NBC poll 52% for FBI, 38% for Apple by dcollins117 · · Score: 1

      explain to me what you, a consumer, need 256 AES encryption for that you can't use 128 AES encryption for.

      Easy answer - it's none of your business. Could be anything. Use your imagination. If I thought you needed to know, I'd tell you, but I don't and won't. That's how privacy works.

    23. Re:NBC poll 52% for FBI, 38% for Apple by Anonymous Coward · · Score: 0

      If they hadn't screwed up and changed the iCloud account's

      this is the key. the feds fucked up and had the cloud credentials changed, likely without knowing what the hell they were doing. it is not up to apple to cover some agent's or agency director's ass. let them hang for their own massive fuck up. leave apple out of it.

    24. Re:NBC poll 52% for FBI, 38% for Apple by kilfarsnar · · Score: 1

      explain to me what you, a consumer, need 256 AES encryption for that you can't use 128 AES encryption for.

      What difference does it make? If I need encryption, why wouldn't I want the strongest I can get? To turn it around, why would I use 128 AES when I can use 256 AES? If nothing on my phone is so important, why do you care?

      Think about this for a while: Which is more secure for your data, your phone with its 265 bit encryption, or a $2 flash drive that never leaves your desk?

      That's easy: the encrypted phone. The flash drive can easily be stolen or accessed when I'm not around. The phone cannot be accessed, even if it's stolen

      I understand if you're a bank or a large corporation or something like that, but just you and me don't need encryption schemes like that (and on our phones, of all places) because of situations like this and also because its easy to just not put things on your phone that you would otherwise need to encrypt if it were.

      I do banking on my phone, as well as communicate with my health care provider. Both of those involve private, sensitive information. Encryption is appropriate.

      I mean, safe manufacturers can't sell their safes unless they have a way of cracking them, why is the same not true here?

      Is that really true? I would be surprised if that were actually a requirement of safe manufacturers. But I am not well versed in the subject.

      But on the question of encryption, I want it because I want to keep my personal information and effects secure; from everybody not authorized by me. That includes criminals, corporations, government and entities where those three categories intersect. It's my data and it's in my interest to secure it if I see fit. I have locks on my doors not because I have anything to hide, but to deter burglars and trespassers. I would not consent to search of my house by the authorities because it is not in my interest. The authorities exist to enforce laws and identify wrongdoing. They are not my friends and have no interest in my well being. So I have no interest in making their job any easier.

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
    25. Re:NBC poll 52% for FBI, 38% for Apple by Jack+Griffin · · Score: 1

      If I instead ask them, "Should Apple give the U.S. Government unfettered access to everyone's iPhone?"

      That question would be the least accurate of them all.

    26. Re:NBC poll 52% for FBI, 38% for Apple by Jack+Griffin · · Score: 1

      there probably wasn't anything important on it.

      Wow. This is your laissez faire attitude how a criminal investigation should operate?

      6) We already know that this was not a big ISIS plot or anything like that.

      How do you know that there isn't some agent provocateur involved (whether ISIS or other organisation?)

      It was a 'lone gunman' kind of a thing...so it's unlikely that there is anything on the phone that would incriminate anyone else who isn't already incriminated.

      A lone gunman that had at least two people involved? Great detective work so far...

      7) If they succeed - you can bet that Apple's next phone will make it impossible to circumvent the security with an OS upgrade by putting more stuff in ROM.

      They already use a different security model for iPhone6

      The reason MOST people are agreeing with the Fed is that they didn't take the time to look at the facts.

      Thanks for telling me what my opinion is. I think the Feds should be able to get access to information if they have a court order for it. And if you have the ability to give that access, you should be compelled to deliver it. It is a pillar of how criminal investigations and the Justice system work. We already know that Apple can create a specific signed firmware that will only run on one device, so why not use this capability?
      The slippery slide/pandoras box argument doesn't really have any merit based on facts, only conjecture.

  11. Sure, Billy Boy. by Lunix+Nutcase · · Score: 4, Insightful

    Yeah we all know that once law enforcement gets access to something they NEVER ask again. The disengenuousness of people claiming this is only about one phone is astounding.

    1. Re:Sure, Billy Boy. by Anonymous Coward · · Score: 0

      "Yeah we all know that once law enforcement gets access to something they NEVER ask again. The disengenuousness of people claiming this is only about one phone is astounding."

      That's the same thing as saying "after this crime, no other crimes should ever be committed". It's a childish view of the world, and it's just as disingenuous as saying that if you unlock this phone then the box of pandora is opened. It's always been open - as long as people are going to commit heinous crimes, there will be a need for investigation.

    2. Re:Sure, Billy Boy. by Lunix+Nutcase · · Score: 1

      That's the same thing as saying "after this crime, no other crimes should ever be committed".

      Maybe in the world of strawmen.

      It's a childish view of the world, and it's just as disingenuous as saying that if you unlock this phone then the box of pandora is opened.

      Except it will open a pandora's box. Once the US government succeeds in forcing Apple to do this to fight "the bad guys", countries like China will force Apple to do the same simply to extend their surveillance state. So it's no "childish view" of the world to actually realize that all these claims of "it's just about one phone!" and "it won't create precedent!" are simply lies.

      It's always been open - as long as people are going to commit heinous crimes, there will be a need for investigation.

      If it's always been open there would be no point to this case as law enforcement would already have a backdoor. There would be zero point to them filing suit against Apple.

    3. Re:Sure, Billy Boy. by Jack+Griffin · · Score: 1

      Yeah we all know that once law enforcement gets access to something they NEVER ask again. The disengenuousness of people claiming this is only about one phone is astounding.

      Maybe because those people know how court order works, and know how signed apps work.
      But if you prefer conspiracies and wild speculation, then maybe just make stuff up instead...

    4. Re:Sure, Billy Boy. by Jack+Griffin · · Score: 1

      Except it will open a pandora's box. Once the US government succeeds in forcing Apple to do this to fight "the bad guys", countries like China will force Apple to do the same simply to extend their surveillance state.

      We already know the firmware is technically possible, so you are saying that the only thing preventing the Chinese government from demanding this now is that there is no legal precedent in the US court system?
      Please go back and read that again.

      So it's no "childish view" of the world..

      That's precisely what it is.

  12. Correct me if I'm wrong, but... by Anonymous Coward · · Score: 0

    Couldn't the FBI just clone the iPhone and try brute forcing the 4 digit pin on each cloned image? Run through 10 iterations, wipe the image. Reload image. Try the next 10, reload the image. Repeat until code is cracked. It's a manual process, but could use interns.

    FBI gets info, encryption standards remain unbroken and secure (to the best of everyone's knowledge.) Win/Win?

    1. Re:Correct me if I'm wrong, but... by Lunix+Nutcase · · Score: 1

      No, they can't.

    2. Re:Correct me if I'm wrong, but... by Anonymous Coward · · Score: 0

      Can you explain why? Ultimately iOS is an operating system that has to have a method of getting on the hardware in the first place. I've seen people make hackintoshes (putting OSX on non-apple approved hardware,) so what is the mechanism that prevents the same from happening to iOS?

    3. Re:Correct me if I'm wrong, but... by Lunix+Nutcase · · Score: 1

      Because it's a security mechanism built into the OS. The unlock process requires identifiers unique to the hardware.

    4. Re:Correct me if I'm wrong, but... by Junta · · Score: 1

      There's plenty of commentary talking about this. The key is in a place that is not trivially gotten at (in other variations of such a scheme long ago, getting at the similar key amounted to dissolving parts of the chip package to get at the relevant bits, lot's of advancement has been made since then).

      If you clone to the best of your ability, you'll still not get the key. If there is a way to retrieve the key, it would require more engineering effort than a theoretical software change, and likely be running high risk of destroying the key rather than recovering.

      Hence the request to force update software to a) not have an unlock limit and b) accept input over a simulated USB keyboard. Apple doesn't want to produce an image that Apple's update process would in theory accept as valid, since the existence of such a thing would open the door for use elsewhere.

      Meanwhile, Apple offered up iCloud access, but the data was too old, and an overly aggressive password change made the device incapable of being forced to sync after the fact. Apple would give FBI full access, except not this particular way.

      --
      XML is like violence. If it doesn't solve the problem, use more.
    5. Re:Correct me if I'm wrong, but... by U2xhc2hkb3QgU3Vja3M · · Score: 1

      And they can't read/copy these IDs and write them on another iPhone?

    6. Re:Correct me if I'm wrong, but... by MachineShedFred · · Score: 1

      Because part of the key comes from a UID that is burned into the CPU, and not recorded anywhere else. This makes it so that you can't unlock the image without being on the hardware itself, unless you have some kind of magical crack for AES-256, or several hundred thousand years to brute force the key.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    7. Re:Correct me if I'm wrong, but... by Anonymous Coward · · Score: 0

      Like Lunix Nutcase said, each phone has a randomized crypto key stored on hardware that's designed to not give it up. Simply doing a dump of the drive medium won't cut it.

      That being said, this whole freak out is stupid because the FBI physically have the phone. They physically have the crypto chip. All they need is to subpoena Apple for the design doc and get top men on the job to wire the crypto chip up to some system along with the drive medium. I doubt booting iOS is necessary at all. Just create a harness that accepts the chip and storage medium and drives the chip to decrypt the storage medium to a second medium. This is very likely the approach that McAfee envisions, being a crazy drug addict notwithstanding.

      There may or may not be a key derivation function involved based on the password required on first boot, but the damned OS needs to boot to the point of asking for that password somehow.

      No, this is a PR stunt that stands to benefit both the FBI and Apple.

      Posting AC because I get modded to oblivion by idiots who think crypto is magick every time I point this out.

    8. Re:Correct me if I'm wrong, but... by SecurityGuy · · Score: 1

      I can't speak to the internals of the iPhone in particular, but there absolutely exists cheap, tamper resistant hardware that allows you to import a key, but not export it. The hardware simply doesn't have offer a function to do it.

    9. Re:Correct me if I'm wrong, but... by oh_my_080980980 · · Score: 1

      You don't need the fucking key! The FBI can brute force it. The problem is thy are limited to 10 attempts before the phone wipes itself. Thus, if they can clone/copy the the phone, then can do as many attempts as possible. So the original questions stands.

    10. Re:Correct me if I'm wrong, but... by U2xhc2hkb3QgU3Vja3M · · Score: 1

      You're right, now that I think about it I remember seeing something about this for some Atmel microcontrollers.

    11. Re:Correct me if I'm wrong, but... by Falos · · Score: 1

      Dependency on UIDs provided by hardware.

      There's a fresh article on Ars about how they could, in theory, decap the chip and read the UID data, then spin up clones for brute forcing, yes. But you have to know where the data is physically located, and you're likely to just destroy stuff and make it completely unrecoverable.

      http://arstechnica.com/securit...

    12. Re:Correct me if I'm wrong, but... by Anonymous Coward · · Score: 0

      Thanks for all the information that's been posted so far. This is AC who asked the original question about imaging the phone.

    13. Re:Correct me if I'm wrong, but... by hplogsdon · · Score: 1

      The password/passcode used to unlock the phone is not the encryption key that is used to decrypt the phone. The phone uses the password/passcode in conjunction with a hardware identifier to derive an AES256 key that cannot be read directly.

      If you clone/copy the phone, you lose the hardware identifier, and cannot do as many attempts as possible.

    14. Re:Correct me if I'm wrong, but... by mrchaotica · · Score: 1

      ...unless you have some kind of magical crack for AES-256, or several hundred thousand years to brute force the key.

      That is wildly optimistic. It's more on the order of several hundred quindecillion years (i.e., ~10^50 years).

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    15. Re:Correct me if I'm wrong, but... by Junta · · Score: 1

      The key is 256 bit AES key. I don't know the Apple implementation, but generally such a key is stored itself encrypted by a key derived from the PIN. When it wants to make it irrecoverable, it forgets all versionns of a key, meaning one must attack a 256 bit random key instead of a key derived from some human piece of knowledge.

      --
      XML is like violence. If it doesn't solve the problem, use more.
  13. All for Nothing by MailtoDelete · · Score: 2

    This argument is a sham and a shameless power grab by the powers that be. We are talking about someone who had the forethought to destroy his personal phone and computer hard drive to avoid the collection of incriminating evidence, yet he did nothing to obscure the $0.99 iPhone 5c that was issued to him from the local government. Does anyone really think he left any evidence at all on that device? Highly unlikely. He knew this device had no expectation of privacy (issued/controlled by government) and he made no attempt to destroy it (not like he fear the consequences of destruction of gov't property), so why would he have used it for any purpose related to illegal/questionable activities?

    1. Re:All for Nothing by Anonymous Coward · · Score: 0

      On the other hand, maybe he hid it in plain sight. If he was acting alone on a suicide mission, then why would he care?

      In any case, the device needs to be searched. It's something called *due diligence*, son.

      LOL@vword: guards

    2. Re:All for Nothing by MailtoDelete · · Score: 1

      One could also argue that Apple has done their *due diligence* by accommodating all requests up to the request to re-engineer their product in a way that intentionally cripples the security features that offer any inkling of data protection, and cannot be built on a single-phone-specific scale. Don't get me wrong, I choose not to use Apple products personally because they like to dictate how they will and will not be used, but I respect them for standing up and questioning the validity of this request. The government also already has the communication logs from the carrier network, so it knows with whom the terrorist was in communication. Why not chase down those leads instead, with a little old fashioned investigation. Surely, if those associated by the call and SMS logs are also terrorists, there will be other indicators.

    3. Re:All for Nothing by Falos · · Score: 1

      Feds are vesting very heavily into an "obligatory" check.

      That how you scream "ulterior motive", son.

    4. Re:All for Nothing by Jack+Griffin · · Score: 1

      yet he did nothing to obscure the $0.99 iPhone 5c that was issued to him from the local government. Does anyone really think he left any evidence at all on that device?

      Yes.

      Highly unlikely.

      Yeah well good thing our criminal investigations are more robust than this.

  14. Re: Windows backdoor confirmed. by Anonymous Coward · · Score: 0

    Sadly this is very accurate. Everything MS is doing via Windows lends itself to this. Microsoft is complicit in the espionage machine operations, probably so that they are treated favourably in matters involving government. I wonder how much goodwill MS will retain if it's found later that they provided information on their own users to law enforcement. I mean, reporting child pornographers is one thing, but if the entertainment industry ever gets to take all the pirates to court it will be Microsoft handing in the evidence.

  15. Partisan Bill by rmdingler · · Score: 1

    So it seems the Captains of (tech) Industry fall prey to the same partisan squabbles that keep the legislative branch impotent much of the time.

    --
    Happiness in intelligent people is the rarest thing I know.

    Ernest Hemingway

  16. I don't get it ... by Anonymous Coward · · Score: 0

    Why doesn't Apple simply have the govt. fund their security auditing of the iPhone?

    If they can crack it, then the FBI gets what they want in this case and Apple can then fix whatever holes they found in the next version of the iPhone.

    It's an easy win-win.

    1. Re:I don't get it ... by tranquilidad · · Score: 3, Insightful

      Perhaps Apple doesn't want to divert their resources off of the products and product lines that are important to them as a company.

      Perhaps Apple doesn't want the liability if they mistakenly delete all the data the FBI wants.

      Perhaps Apple doesn't want to set a legal precedent that companies will result in ever increasing demands to break their products in the way the government desires.

      Perhaps Apple is taking a principled stand.

    2. Re:I don't get it ... by bobbied · · Score: 1

      What makes you think Apple cannot crack their own hardware/software?

      I'm no Apple zealot, but it's obvious to me they *could* do what the FBI wants, write a version of iOS that allows the FBI to brute force the phone quickly. This is NOT an issue of security and doesn't really require that Apple find a vulnerability to exploit. What the FBI wants is an iOS version with a set of vulnerabilities purposely built in so they can more easily brute force the phone in question.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    3. Re:I don't get it ... by MailtoDelete · · Score: 1

      To get this to work, however, they'd also have to make it so that the phone in question can apply this as a required update. What stops them from repeatedly using such a tool where they might have main-in-the-middle systems already widespread and quietly in use (stingray)?

    4. Re:I don't get it ... by MachineShedFred · · Score: 1

      Of course Apple can deliver what the FBI wants in this case - this phone doesn't employ the much more hardened security of the 5S and above. They could comment out a couple of functions in the code (wipe after 10 attempts, increase time delay between incorrect attempts), build it, sign it, put the phone into DFU mode and upload it. It would take one engineer less than a day.

      They are fighting the legal precedent of allowing a Federal Court Judge to compel a company to compromise their product on a whim. This doesn't even stop at phones - are you telling me that some assistant District Attorney out there wouldn't try to use this precedent to compel a company who makes a secure USB stick to give law enforcement a peek? How about safe manufacturers? Manufacturers of bank deposit boxes?

      This is how our legal system works. A prosecutor takes past legal precedent and tries to expand it to include whatever it is that they are trying to do. Thus, the use of the All Writs Act from 1789 to try to unencrypt a phone.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    5. Re:I don't get it ... by jschultz410 · · Score: 1

      "What makes you think Apple cannot crack their own hardware/software?"

      I'm taking them at their word that they have purposely designed the security of the iPhone so that even they can't break them. If that's not true, then screw Apple and force them to perform whatever capabilities they have reserved to themselves. Why should they have superior capabilities to crack our phones than the government, especially when national security or warrants are in play?

      "What the FBI wants is an iOS version with a set of vulnerabilities purposely built in so they can more easily brute force the phone in question."

      That may be what they want in the long run, but that is certainly not what the court has ordered nor what US law currently mandates. It also shouldn't help them in this particular case at all.

    6. Re:I don't get it ... by jschultz410 · · Score: 1

      "Perhaps Apple doesn't want to divert their resources off of the products and product lines that are important to them as a company." Yeah, the iPhone is such an ancillary product for Apple. I agree! /s

      "Perhaps Apple doesn't want the liability if they mistakenly delete all the data the FBI wants." Oh, I'm sure that's a real concern for a multi-billion dollar company ...

      "Perhaps Apple doesn't want to set a legal precedent that companies will result in ever increasing demands to break their products in the way the government desires." AFAIK, the govt. has not mandated any particular kind of exploit. They just want the info off of this phone. Great! Work to crack it on the govt's dime and if they are successful, then they've identified security holes to be patched in future versions. It's win-win all around.

      "Perhaps Apple is taking a principled stand." Highly unlikely. They are just trying to protect their brand.

    7. Re:I don't get it ... by omnichad · · Score: 1

      Doesn't DFU mode wipe the data?

    8. Re:I don't get it ... by bobbied · · Score: 1

      I'm not making a determination on if Apple should or shouldn't do what the FBI wants and what the judge has ordered. I'm just trying to explain what they've been asked to do.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    9. Re:I don't get it ... by bobbied · · Score: 1

      Oh please. Apple can easily produce an iOS version that doesn't erase the phone's content after a specific number of tries to enter a pin and take away the mandatory wait times required between failed tries. They likely can do this in about an hour, including flashing the new iOS version into the phone.

      As I understand this, that is all the FBI is really asking that they do.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    10. Re:I don't get it ... by bobbied · · Score: 1

      I'm not arguing one way or the other on the question what Apple SHOULD do. I'm arguing that they clearly have the technical ability to do what's being suggested.

      Personally, I'm not taking sides here. I'm worried about the precedent, but I'm also loathed to up and ignore a judge's order. My guess is that Apple will be forced to do this, but I'm not sure this is a good idea. The legal process will decide and it's going to be interesting to watch.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    11. Re:I don't get it ... by tranquilidad · · Score: 1

      ""Perhaps Apple doesn't want to divert their resources off of the products and product lines that are important to them as a company." Yeah, the iPhone is such an ancillary product for Apple. I agree! /s"

      I didn't claim the iPhone was an ancillary product for them. I presume that building the software the FBI wants is not on Apple's current product plan. What products should Apple put on hold in order to fulfill the FBI's request?

      "the govt. has not mandated any particular kind of exploit. They just want the info off of this phone. Great! Work to crack it on the govt's dime and if they are successful, then they've identified security holes to be patched in future versions. It's win-win all around."

      How is it win-win if Apple has to divert resources off of Apple's desired work-plan in order to work on the government's wish list? The government is seeking to re-prioritize Apple's product road map and development resources to favor the government. Doing it on the "government's dime" doesn't change the fact that the government is dictating to Apple how they allocate their internal resources. Perhaps if the government thought you could be helpful they could divert you from your plans and get you to solve one of their problems. As long as it's on their dime why would you care whether or not you wanted to participate.

      Perhaps you believe that Apple has unlimited resources and can continue with their current product plans un-interrupted and still satisfy the government's request.

      "They are just trying to protect their brand." - Is it not Apple's right to protect their brand?. Is that not a liability that Apple should protect? The very same type of liability you dismiss because they're a "multi-billion dollar company."

    12. Re:I don't get it ... by Anonymous Coward · · Score: 0

      Can they?
      Lets say that I created a chip, lets call it a key validation / repository where a unique 256bit secrect key is held and the only interfaces to the chip are pin input and a key output. You give the chip the key input and if it is valid it returns the secret key to be used to decode other data. If you give the wrong pin input the chip internally increments a counter if that counter gets > 10 it destroys the secret key. Tell me how by making any OS change that interfaces that this chip that you can get the secret key out of the chip without the proper pin. You got ten tries no matter what OS or interface you use.

      Your turn.

    13. Re:I don't get it ... by jschultz410 · · Score: 1

      The security of the iPhone *should* be one of their top priorities and they *should* already have whole teams of people working on this internally. If the govt. wants to fund further security audits, then that is a 100% win-win. They will get directly paid for things they should have already been doing anyway. Literally, the govt. will be funding future security improvements to the iPhone.

      If the courts are forcing them to labor without just compensation, then that is a different matter.

    14. Re:I don't get it ... by jschultz410 · · Score: 1

      If it is that easy to externally modify the OS on the phone without user authorization to basically bypass the security of the data on the phone, then their claims about security are shite in the first place.

    15. Re:I don't get it ... by bobbied · · Score: 1

      I'm not sure about the device they are talking about here, but for the I-Phone 5c you can flash a new iOS version without knowing the owner's pin or password. There is a process to "recover" the phone and flash a new operating system without disrupting the user's data. I actually did this on my daughter's phone just yesterday.

      However, if you have physical access to the device, chances are you can recover any data on board if you are careful and try hard enough. Some devices are build to erase data when physically disassembled, but an I-Phone is not one of those things.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    16. Re:I don't get it ... by tranquilidad · · Score: 1

      It is not a win-win when Apple, or any other company, or you or I are forced to work on things we don't want to work on even if we're compensated.

      Apple doesn't have unlimited resources. The FBI isn't asking Apple to perform more security audits. They are attempting to force Apple to write software that will allow the FBI to break into the iPhone.

      Take that single phrase, "force Apple to write software." Perhaps you believe that Apple should write that software anyway to enhance the security of their products.

      Do you not think that Apple may disagree with your conclusion.

      Your argument is that as long as the government compensates them it shouldn't matter that Apple disagrees.

      Here's a simple question for you, from where do the resources to write that software come?

      If those resources are working on other projects that Apple more highly values then Apple loses the opportunity to deliver those other projects. If multiple products depend on those projects then Apple has multiple products that are delayed. Is that not a loss for Apple? Is it not a loss for Apple when the government dictates to them how to use their resources? What difference does it make if the government compensates them for their labor?

      I assume that Apple does have as one of their top priorities the security of the iPhone and already have whole teams of people working on it internally.

      I'm stumped by your position, though. How do you not see the problem when the government can dictate how a private entity deploys their resources, in effect, reaching into a company and setting their development priorities?

      Apple did nothing wrong, they do not own the phone, the government screwed up when they took possession of the phone and now the government believes it can set Apple's development priorities and you think it's O.K. as long as the government pays them for their labor.

      Look at the latest story where the U.S. Department of Justice now has 12 additional iPhones they want unlocked. What if they all require different methods in order to be unlocked? You seem to be saying, "Well, that's too bad for Apple's product and development plans but, after all, the government is compensating them for their labor."

      Then again, as you've previously stated, "Screw Apple."

    17. Re:I don't get it ... by jschultz410 · · Score: 1

      If Apple can simply write some software to get around the iPhone's security mechanisms in this case or any of the others, then THEIR SECURITY MECHANISMS ARE BROKEN.

      The govt. is paying them to test their own security, which they have claimed they purposely designed so even they can't break it. Either they lied about that, which wouldn't surprise me at all, or they will get paid to test their own security. How is getting paid for something you should already be doing anyway a horrible intrusion onto your liberty?

      And, yes, if Apple *LIED* about designing their security so that even they couldn't break it, then definitely *SCREW* Apple.

    18. Re:I don't get it ... by jschultz410 · · Score: 1

      It sounds like what you are driving at is that the data itself it not well secured really at all. If you can get a copy of the data and successfully brute force attack it, then that's user error for not having a long enough random-ish password to encrypt the data. For the data to be truly secure, Apple, the govt. whomever should be able to fully access the entire contents of the phone, know what algorithms are being used and still not be able to decrypt the data without knowing the encryption password and brute forcing it should be prohibitively expensive.

    19. Re:I don't get it ... by tranquilidad · · Score: 1

      Apple said they're designing their systems so even they can't break them. That doesn't mean every iPhone generation out there can't be broken. Recognizing that older model iPhones like the 5c have limited physical capabilities (no secure enclave), they built certain capabilities into the O/S.

      We all know, those of us paying attention anyway, that an O/S written and signed by Apple can be installed on this particular model of iPhone that can bypass erasure of the data when too many wrong passcode entries are attempted.

      Apple is not getting paid to test their own security. Apple is being forced, via this court order, to write and sign a new version of the O/S that will bypass erasure of the data and allow passcode entries via a connected peripheral device rather than the touchscreen.

      Even someone as thick as I can see that writing and signing a new O/S with undesirable features isn't part of "testing their security." Surely you can see this as well.

      "How is getting paid for something you should already be doing anyway a horrible intrusion onto your liberty?"

      How is building a new O/S that bypasses their security capabilities "something [they] should already be doing?"

      It's an intrusion onto [my/Apple's/your] liberty when the government forces [me/Apple/you] to do something [I/Apple/you] don't want to do regardless of whether or not compensation is involved.

      You seem to be stuck on the fact that Apple is simply being asked to test their security, they're not, they're being told to bypass their security by building a new O/S. Here is the wording from the court order:

      Apple's reasonable technical assistance shall accomplish the following three important functions: (1) it will bypass or disable the auto-erase function whether or not it has been enabled; (2) it will enable the FBI to submit passcodes to the SUBJECT DEVICE for testing electronically via the physical device port, Bluetooth, Wi-Fi, or other protocol available on the SUBJECT DEVICE and (3) it will ensure that when the FBI submits passcodes to the SUBJECT DEVICE, software running on the device will not purposefully introduce any additional delay between passcode attempts beyond what is incurred by Apple hardware.

      Apple's reasonable technical assistance may include, but is not limited to: providing the FBI with a signed iPhone Software file, recovery bundle, or other Software Image File ("SIF") that can be loaded onto the SUBJECT DEVICE. The SIF will load and run from Random Access Memory and will not modify the iOS on the actual phone, the user data partition or system partition on the device's flash memory. The SIF will be coded by Apple with a unique identifier of the phone so that the SIF would only load and execute on the SUBJECT DEVICE. The SIF will be loaded via Device Firmware Upgrade ("DFU") mode, recovery mode, or other applicable mode available to the FBI. Once active on the SUBJECT DEVICE, the SIF will accomplish the three functions specified in paragraph 2. The SIF will be loaded on the SUBJECT DEVICE at either a government facility, or alternatively, at an Apple facility; if the latter, Apple shall provide the government with remote access to the SUBJECT DEVICE through a computer allowing the government to conduct passcode recovery analysis.

      If Apple determines that it can achieve the three functions stated above in paragraph 2, as well as the functionality set forth in paragraph 3, using an alternate technological means from that recommended by the government, and the government concurs, Apple may comply with this Order in that way.

      Even if all they were doing was attempting to break the security of the installed O/S it's up to Apple to decide how best to do that, not government orders.

      If you can't see the difference then, frankly, there's no hope you'll understand the liberty implications either.

    20. Re:I don't get it ... by bobbied · · Score: 1

      The principle everybody needs to understand is that all encryption techniques in common use today, except for one, are subject to being broken by brute force, the only question is how long will it take. (Only the single use pad cipher being the exception). If you have access to the device, it can be disassembled and the data retrieved and subject to the brute force attack.

      EVENTUALLY all encrypted data can be viewed by the people you where hiding it from by encrypting it. Encryption just hides the information from your adversaries for a period of time. The trick is to make it take longer to find the key and decrypt than the information you are protecting is going to be useful.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    21. Re:I don't get it ... by jschultz410 · · Score: 1

      So, Apple has a unique ability to subvert older generations of their iPhone through software signed by them. Then, yeah, the govt. absolutely does have the right to invoke Apple's special capabilities to conduct a lawful search warrant. All of this points to the wisdom of designing such systems so that even Apple can't break them. Then in the future they can claim they have no special capabilities not available to the govt already. This case is a legacy cost for doing half-assed security in the past. Oh well, lesson learned.

    22. Re:I don't get it ... by jschultz410 · · Score: 1

      The keyspace for several common symmetric encryption schemes (e.g. - AES-256) is on the order of 2^256. So, brute force attacks aren't even possible on them because there isn't enough energy in the universe to try all combinations before the heat death of the universe. You need to find some kind of flaw to drastically reduce the search space first.

      http://www.eetimes.com/documen...

    23. Re:I don't get it ... by jschultz410 · · Score: 1

      And, yes, passwords typically don't have 256 or even 128 bits of entropy in them, but, again, that's the user's problem.

    24. Re:I don't get it ... by Fengpost · · Score: 1

      Perhaps, they do not want to answer this question from the Chinese or Russian governmenmt "We want the same access to your product as the US govenment."

      --
      The purpose of writing is to inflate weak ideas, obscure poor reasoning, and inhibit clarity....Calvin
    25. Re:I don't get it ... by david_thornley · · Score: 1

      Apple isn't ignoring a court order. Apple is actively challenging it. That's one of the safety measures in the court system: it puts limits on the power of one bad judge. Challenging the order is perfectly legal and unobjectionable.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    26. Re:I don't get it ... by david_thornley · · Score: 1

      The AES-256 key is not specified by the user, but is the combination of a PIN and a 256-bit random number. Assuming the random number is really random, that's 256 bits of entropy.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    27. Re:I don't get it ... by david_thornley · · Score: 1

      Apparently, in the case of the 5C, the lockout delay and wipe are in the OS, and so if Apple can change the OS they can bypass those measures. From the 5S on, that functionality is in secure hardware, and so this particular trick won't work.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    28. Re:I don't get it ... by david_thornley · · Score: 1

      Installing the replacement OS requires Apple's signing key, so the 5C is pretty secure against any attack that doesn't have that. The later iPhones are more secure.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    29. Re:I don't get it ... by bobbied · · Score: 1

      Fair enough, but their attempts to play this in the court of public opinion isn't going to play well for their case. Eventually the judge can/will invoke sanctions in order to force compliance.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    30. Re:I don't get it ... by Jack+Griffin · · Score: 1

      Perhaps Apple doesn't want to divert their resources off of the products and product lines that are important to them as a company.

      So out of 100,000+ employees, they can't spare a couple for one week to comment out the number_of_retries=10 code?

      Perhaps Apple doesn't want the liability if they mistakenly delete all the data the FBI wants.

      Er what? Unless they plan on giving this to the intern, how would that even happen?

      Perhaps Apple doesn't want to set a legal precedent that companies will result in ever increasing demands to break their products in the way the government desires.

      Tough titty, the Justice system takes precedence

      Perhaps Apple is taking a principled stand.

      Hahahahahahaha.... yeah good one....

  17. The US is not the only country. by gurps_npc · · Score: 4, Insightful
    Anything Apple does for the US, it will be required to do in all countries it sells. That includes China.

    I am sure that China will wait till they have a clear terrorism/criminal case, ask Apple to give them the same software they give the FBI, then make a copy of it and use it on every single dissident.

    The San Bernidino phone SHOULD be cracked - by the government, not a private company. Apple should have nothing to do with the cracking.

    --
    excitingthingstodo.blogspot.com
    1. Re:The US is not the only country. by rch7 · · Score: 1

      The Apple will be required to do it in countries like China anyway. Making excuses and delays in US court will not make them immune to totalitarian regimes at all. Who cares about US courts in China.

      They should had though about it when leaving backdoor in their phones allowing to install whatever software without owner's permission. Once they have left backdoor for themselves, now they have a line of people wanting to use it too, isn't this what was obvious from the beginning? They don't have and should not have any legal right to withheld access to evidence that they have access to.

      And yes, once you have physical access to hardware, it certainly can be reverse engineered and few bits changed to ignore failing Apple signature or counter or whatever you want. It is just more convenient and faster to ask Apple do this work.

    2. Re:The US is not the only country. by bobbied · · Score: 2, Interesting

      You don't think China doesn't already have the capacity? Something tells me that they fully understand how to do this. Remember they BUILD these things nearly exclusively and can easily obtain or reverse engineer these devices sufficiently to do anything they want.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    3. Re:The US is not the only country. by Anonymous Coward · · Score: 0

      Why should the phone be cracked by anyone?

      To uncover a super secret conspiracy that threatens America? To finally understand the universal motive that is key to preventing people from ever thinking this way again? To intimidate anyone who thinks they can hide from the police? To spend $250K employing somebody's niece in a crime lab?

      What does anybody hope to accomplish here? It's done. Move on.

    4. Re:The US is not the only country. by gurps_npc · · Score: 1
      They can tell China that they don't know how to do it and can convince china to build it themselves. At the very least this will cost China some cash, and it might delay it just enough for people to change phones.

      It is well worth the small amount of extra time/cash.

      --
      excitingthingstodo.blogspot.com
    5. Re:The US is not the only country. by phishybongwaters · · Score: 2

      Well this simply doesn't make any sense. Apple can't even offer the same encryption they offer here in the US in some countries that they consider markets, so I'd say your statement is not based in facts. And again, even Apple can't undo what they government did itself, the GOVERNMENT reset the phone, making it impossible to recover at this point, this is all nonsense but hey, it's working. How you ask? Well the average Joe Asshat now thinks the government can't crack into his phone (when they totally can) and is probably willing to side against encryption more now than before, you know, to stop terrorists and catch child predators. Essentially they are asking Apple do rework the entire update delivery system so they could remote jailbreak/root the device with a firmware upgrade. Even if Apple could do this (it's not really certain they could) it wouldn't have any effect on the device they have right now. This entire charade is designed to get Joe Asshat to side against encryption, and sadly it's working.

    6. Re:The US is not the only country. by Anonymous Coward · · Score: 1

      The San Bernidino phone SHOULD be cracked - by the government, not a private company. Apple should have nothing to do with the cracking.

      Here's the thing it has been reported that the government does actually have the means to crack this phone... in the NSA. But since this is an FBI investigation there is some reluctance to admit they can do this in a very public investigation. So it appears.

      So basically the government is lying to the Federal court and the public in order to pretend they don't already have Apple's signing keys and iOS source code or have some other capability to crack the phone.

    7. Re:The US is not the only country. by Anonymous Coward · · Score: 1

      China (or the FBI) can't do the same thing that Apple is being told to do.

      Sure they can write a version of the firmware without delays or scrub-after-10-failures. But they can't get it into the phone, not without being signed by Apple's private code-signing key, that is checked by the firmware already on the device early in the firmware update process.

      That's not to say that they can't get in some other way... but the path under discussion is open only to Apple.

    8. Re:The US is not the only country. by rch7 · · Score: 1

      It is sounds like silly excuse, Apple doesn't know how to update software on their phone??? ;) It will not fly, and you don't have any "change phone" options, all phones are the same or worse in this aspect. Government can always have access to it, assuming otherwise just leaves you exposed. China regime may choose to do it their own though to avoid publicity and catch its enemies by surprise. It is likely they already done it, they have plenty of qualified people in China to do it.

    9. Re:The US is not the only country. by Anonymous Coward · · Score: 0

      >...to give them the same software they give the FBI...

      This keeps floating around, and is incorrect. The FBI wants Apple to OPEN THE PHONE FOR THEM IN APPLE'S OWN OFFICE WITHOUT SHARING HOW IT'S DONE, so that the FBI can continue its investigation of the data on it.

      Apple handing out a tool is definitely worthy of saying no to. And it's the first thing that comes to peoples' minds thanks to Cook's biased press release that painted the court order toward public outrage. But yeah, FBI said go unlock it yourself & just hand device over when done kthx. Plenty of citations to find that.

    10. Re:The US is not the only country. by Xylantiel · · Score: 1

      Or maybe we should all side against vendor-held backdoors. It shouldn't be Apple's or the government's decision whether or not to unlock an owner-locked handset.

    11. Re:The US is not the only country. by Maow · · Score: 1

      the GOVERNMENT reset the phone

      Any link to support this claim?

      I thought it was the owner of the phone that did it as part of a standard end-of-employment procedure.

    12. Re:The US is not the only country. by Anonymous Coward · · Score: 0

      Except up until now the US has supported Apple in rejecting requests from other countries & has generally been supportive of encryption at the highest levels (Obama himself rejecting calls for backdoors). If this warrant is acted on the US loses any & all 'moral high ground' (& the US has precious little of that left any more) they have no basis to go to bat for US companies in 'back channel' discussions etc.

      So while China has passed a law requiring 'back doors', Apple continues to sell the iPhone in China & if push came to shove they should have the US government backing in 'trade negotiations' etc...except that if the warrant is upheld there is nothing the US government can do so:

      1) Apple adds a back door for China (and thus everyone else) or forgoes sales of product in China
      2) Followed quickly by Google/Android
      3) At this point the market fragments drastically since now the back door is there people who actually want secure phones will get them elsewhere (Cyanogen Mod? for Android etc.)
      4) Apple as a company will die quickly except to those who really do just want it as an 'high priced accessory price & privacy be damned'...

    13. Re:The US is not the only country. by Jack+Griffin · · Score: 1

      Anything Apple does for the US, it will be required to do in all countries it sells. That includes China.

      Yeah because the Chinese government simply will not act unless a US court has given them the green light...Seriously?

  18. Waiting on(sic) the wings? by The+Grim+Reefer · · Score: 1

    law enforcement officials waiting on the wings

    Is this some alternative phrase to "waiting in the wings"?

    1. Re:Waiting on(sic) the wings? by Anonymous Coward · · Score: 0

      For all intensive purposes, yes.

    2. Re:Waiting on(sic) the wings? by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Maybe they're all aboard Air Force One, they ran out of room so all the law enforcement officials are on the wings.

  19. FBI is violating the Federal Aquistion Regualtion by Anonymous Coward · · Score: 0

    The Gov't can not compel a contractor or potential contractor to perform work without compensation....
    since they are directing Apple, without contract for services, and without a contracting officer,
    they are in violation, and the individual making the request is subject to sanction for committing a federal crime.

  20. Remember when by Anonymous Coward · · Score: 0, Interesting

    Funny you say that, because I remember back when Apple started down the path of selling glorified spyware, Microsoft (for all its faults) was actually considered one of the "good guys" with regard to privacy. "They may be greedy, cheating bastards, but at least they have the decency to respect our privacy" was the common talk -- right here on slashdot!

    Imagine that. Not easy, is it?

    1. Re:Remember when by Anonymous Coward · · Score: 0

      Imagine that. Not easy, is it?

      Because it's not remotely true...

  21. Compared to Apple and Jobs, Gates is a piker by Anonymous Coward · · Score: 0

    Isn't it a violation of the EULA to install OS X on non-Apple hardware?

    And Apple has no qualms about selling out anyone's privacy to the Chinese government in order to maintain access to the Chinese market.

    The "walled garden" wasn't created to describe Microsoft....

    1. Re:Compared to Apple and Jobs, Gates is a piker by Junta · · Score: 1

      Also, in this case, they even said point blank the government would have been welcome to the data if it had been backed up to iCloud. It's not like Apple's a saint of privacy here.

      --
      XML is like violence. If it doesn't solve the problem, use more.
    2. Re:Compared to Apple and Jobs, Gates is a piker by Pseudonym · · Score: 1

      Also, in this case, they even said point blank the government would have been welcome to the data if it had been backed up to iCloud.

      ...as they should have. Apple should comply with any reasonable legal court order to turn over any information that they have which is relevant to a criminal case. Say, any personal information about a mass-murder suspect that they may have in their possession.

      In this case, the FBI is not demanding that Apple turn over information. They are demanding that Apple engineer something new and dangerous.

      --
      sub f{($f)=@_;print"$f(q{$f});";}f(q{sub f{($f)=@_;print"$f(q{$f});";}f});
  22. You're ALL Missing the Point by Anonymous Coward · · Score: 0, Interesting

    If Apple has done it's job correctly and provided the feature that it has advertised, it should not be possible for them or anyone else to decrypt the phone.

    Apple's response should be; 'Not possible. Prove us wrong.'

    That Apple has chosen to argue privacy and morality rather than stating not technically possible suggests to me that it is possible and they have failed to deliver what they advertised.

    1. Re:You're ALL Missing the Point by MachineShedFred · · Score: 1

      On this particular phone, it is possible. Thus, they are not taking that legal strategy.

      If it was a 5S or a 6, that is exactly what they would have done, because it probably is impossible without having an untold amount of computing power for an untold amount of time.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    2. Re:You're ALL Missing the Point by Anonymous Coward · · Score: 0

      This shit's not magick, dude. iOS has to boot somehow to the point of asking for a password (not talking about the pin here--the fixation on the pin is so fucking stupid). From there it may or may not use a hardware-based key derivation function that takes the password as one input (the other being hidden and locked in secure crypto hardware). Who the fuck knows? Does the OS just check the password against its /etc/shadow before waving the user through? Nobody knows because people are acting like this shit is fucking magick.

      The crypto chip may be able to decrypt the desired data all on its own. Who knows? The crypto chip may need to be driven by brute forcing the password. Who knows?

      Of course it's fucking technically possible. I wouldn't doubt the NSA or even the FBI themselves already has a hardness to drive the crypto chip without needing iOS booted. What this is about is bolstering Apple's reputation and giving them feelgood PR while advancing the government's goal of demonizing crypto while also helping foster the delusion that Apple has somehow access the deep fucking magick from before time.

    3. Re:You're ALL Missing the Point by hey! · · Score: 1

      The FBI isn't asking Apple to decrypt the phone. It's not encrypted, it's protected by a four digit PIN. Naturally it's trivial to defeat a four digit PIN if you have unlimited retries, which is why iOS limits you to, I think, ten successive attempts before the phone is wiped.

      It all boils down to the old security/convenience tradeoff. Yes, you'd like the security of a phone where all the data was encrypted with a high entropy key, but you prefer a phone that you can unlock in a few seconds then use in an unrestricted manner. What the FBI is asking for is a version of iOS in which they can rapidly try an unlimited number of PIN guesses. You could get into any phone in a matter of hours that way. Heck you could built a robot with a capacitive stylus that tries ten PINs/minute and go through all the possible PINs in 16 hours; what's more if you permuted the sequence to prioritize the PINs mostly likely to be chosen by humans it'd probably finish in a fraction of that.

      The notion that your iPhone data is somehow safe from the US Government is somewhat ludicrous. All the feds would have to do if the data on this phone were really critical to national security would be to take the phone apart, desolder the flash chips and dump the memory on them. Even if that data were encrypted, they could break the weak PIN trivially. A team of MIT course 6 juniors could probably do it.

      So what does the FBI get by making this demand? Two things. A legal precedent they can use to force vendors to build back doors into their products, and an insecure version of iOS they could potentially load on anyone's iPhone that was out of their possession for a few hours. That has a number of advantages if you're the FBI and you want to do things that are outside or legal oversight.

      What I'd propose is a compromise: we give the data to the FBI without giving them the sneaky side effects they want. After all, Apple has already handed over the backup, so we're talking about a marginal difference as far as customer privacy is concerned. Apple should create the compromised iOS version, and break into the iPhone, hand the data over to the FBI along with the totally wiped phone. That way the FBI is never in possession of a compromised version of iOS, and there is no legal precedent saying that vendors have to provide such a thing to them.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    4. Re:You're ALL Missing the Point by Anonymous Coward · · Score: 0

      I think you need to re-read how security works on these devices. The stuff I've read definitely does NOT support your thought.

    5. Re:You're ALL Missing the Point by hey! · · Score: 1

      I know how encryption works on these devices. Once you've got the passcode you've got the keys to the kingdom.

      Yes, they've got an AES chip, but it mainly facilitates a fast "wipe" of data on the phone. Storage is encrypted with a random key, which in turn is encrypted using the UID of the device. The encrypted key is stored in flash. When an emergency wipe is called for, the random key is erased and the data in storage, while still there, becomes inaccessible.

      It's a clever compromise between security and convenience, but it's not really all that secure if you're worried about national security agencies. If they can bypass the OS entirely and go straight to memory they can brute force the PIN, and everything is laid bare, provided they reassemble the device or spoof the UID. Or they can simply read the encryption key from flash then decrypt the data they've extracted.

      The scheme is plenty secure from ordinary thieves but not a three letter agency; probably not even organized crime. That doesn't make it bad; the lock on your back door isn't bad because it can't stop the CIA from doing a black bag job on you; you just have to be aware if that's a possibility.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    6. Re:You're ALL Missing the Point by david_thornley · · Score: 1

      The government can bypass the OS entirely and clone the memory, at which point they have a lot of stuff encrypted in AES-256 with not a clue about the password. The data to create the key is on a secure chip, and reading data from that chip will be difficult and risk destroying it forever. That chip has the ability to wipe its part of the key, rendering the contents of storage permanently unreadable. As long as the key isn't wiped, the only thing the key management unit will do is accept the PIN and use it to create the AES key that will allow access to the data. Without cracking AES-256 or figuring out how to get the random number from the chip, the only thing possible is to enter PINs into that chip and record the keys coming out.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    7. Re:You're ALL Missing the Point by hey! · · Score: 1

      The government can bypass the OS entirely and clone the memory, at which point they have a lot of stuff encrypted in AES-256 with not a clue about the password.

      That is simply not true. Apple's own documentation states the password is stored in flash.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  23. LOVE IT by Anonymous Coward · · Score: 0

    Love it how were are pretending like there really isn't a backdoor for the NSA in every non-open major OS (Windows, OS X, iOS & Android).

  24. Re:FBI is violating the Federal Aquistion Regualti by Lunix+Nutcase · · Score: 1

    All Writs Act.

  25. The Spy Who Really Does Spy On You by thexfile · · Score: 1

    Personal privacy is at a historic low do to security reasons.

  26. land of the afraid by Anonymous Coward · · Score: 0

    all of this is just a show, a distraction to keep the wheels of the machine turning. when you are more concerned with what people of prominence say rather than formulating your own ideas and conclusions you are no longer free.

    The ruling class has scared you into submission using a "terrorist" force that has no air force or naval force (so im quite confused as to how they are going to attack en-mass on this side of the world) which means that you are more likely to die in a car accident than to die by terrorist motive.

    people die, it happens and as a species we have only become more efficient in doing it. so as society crumbles, we allow those who have decided that they are in charge to distract us with boogey men across the world and yet no one sees the disenfranchised dying around us because we cannot even provide them with basic medicine, food and shelter.

    This world makes me sick, distract your selves some more and well see how far down the rabbit hole we can go.

  27. It's not Tech v. Main Street by BuckB · · Score: 1

    It's old vs. young. The youth in America trust for-profit companies more than the government and the young have some fantastic association of themselves with the devices they bought from a store.

    Apple's main argument is one of conspiracy and conjecture - if we do it this one time (with a Judge's order) then we'll have to do it whenever the police ask, and the keys will fall into the wrong hands and anyone can break into an iPhone.

    It's an iPhone. It's not your soul. It's not even your DNA or your fingerprints. Breaking open one phone does not cause the end of civilization because you know what?

    The iPhone 7 is coming out soon.

    1. Re:It's not Tech v. Main Street by MachineShedFred · · Score: 5, Insightful

      It's not conspiracy and conjecture, it's "legal precedent" and it's an actual thing. Once it's happened in a single instance, that single instance can be pointed to in future cases until it's refuted by a higher level judge. Which, in this case, would mean either the Federal Appeals Court, or the United States Supreme Court.

      It's how the whole legal system has worked for 225+ years. And you can bet that there are hundreds of phones in evidence lockers with assistant District Attorneys and assistant US Attorneys lining up to get a court order to have Apple unlock them, depending on how this plays out.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    2. Re:It's not Tech v. Main Street by Anonymous Coward · · Score: 1

      There's another reason too.
      It's one thing to intercept communications, but NOTHING puts a wrench in your takedown of a terrorist like finding out he wasn't actually a terrorist

      If they can take full control of what everyone puts their entire lives on nowadays, they can make damn sure that when they finally make the bust, the evidence they want is there (even if it wasn't before), and the evidence they don't.... is gone.

    3. Re:It's not Tech v. Main Street by NatasRevol · · Score: 1

      Here's a list of open cases trying to get Apple to hack iPhones, just waiting for the precedent.

      http://pdfserver.amlaw.com/nlj...

      And this is just federal cases - I'm sure there's many more state & local cases.

      --
      There are two types of people in the world: Those who crave closure
    4. Re:It's not Tech v. Main Street by Anonymous Coward · · Score: 0

      It's an iPhone. It's not your soul. It's not even your DNA or your fingerprints. Breaking open one phone does not cause the end of civilization because you know what? I don't know about you, but My niece's entire life is on her phone since her mother is so 'protective' of her. She can't use her computer to do much of anything, she doesn't have access to her friends without the phone since she moved to a new town. She reads and writes on the phone. To her, taking away her phone is tantamount to removing everything she has. Unfortunately a lot of laws were written when the amount of data that could be obtained is minimized by space constraints. A phone contains everything about her life. Take the data off the phone, you have her.

    5. Re:It's not Tech v. Main Street by Jason+Levine · · Score: 1

      And that's also just US cases. How many governments world wide would love to be able to break into an iPhone for law enforcement purposes? (Where "law enforcement purposes" might mean an actual crime was committed or that the phone's owner just did something to upset the ruling class.)

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    6. Re:It's not Tech v. Main Street by tricorn · · Score: 1

      If Apple prevails, there will still be other cases, they're just waiting on this one to see what specifically the courts find acceptable and not acceptable, and what they leave open.

      If the FBI prevails, that doesn't mean all those other cases get automatically approved, either.

  28. Thank you sir! May I have another? by Tolvor · · Score: 3, Informative

    I sure it is a coincidence that Microsoft is forcing Win 7/8 users to upgrade to Windows 10, which touts its higher security. Don't worry, if you have private information you can use the Microsoft recommended product BitLocker, made in the USA and subject to US laws. I'm certain there aren't any backdoors. I'm glad that Microsoft will share Office 365 users info with government agencies to protect us. After all, the FBI would never be abuse its power, like sharing accessing info on political opponents to discredit them. Pay no attention that Microsoft was somehow vulnerable to 'FREAK' encryption flaw (http://www.cnet.com/news/windows-vulnerable-to-freak-encryption-flaw-too/#!) - nothing to worry about here. I'm sure glad Microsoft is providing free email services like Hotmail. I'm sure Microsoft has the highest standards in protecting Hotmail users info and the times it has shared private information has been completely justified besides "you agreed to the service agreement".

    1. Re:Thank you sir! May I have another? by Anonymous Coward · · Score: 0

      What is your point, and why did this post get modded up. What does Microsoft have to do with anything in this topic? You know that bill gates completely retired from Microsoft 8 years ago, right?

    2. Re:Thank you sir! May I have another? by Anonymous Coward · · Score: 0

      1. Microsoft's technology doesn't have Apple-level security.
      2. If Apple-level security dies in court, then Microsoft's technology isn't at a disadvantage.
      3. Bill Gates still owns a lot of Microsoft stock.
      I hope these points clear things up.

  29. No, he doesn't... by sumiciu · · Score: 5, Informative

    He disputes so in a video in Bloomberg..

    Bill Gates, co-founder at Microsoft and co-chair at Bill and Melinda Gates Foundation, addresses his view of Apple's battle against an FBI court order to unlock an iPhone belonging to a shooter involved in the San Bernardino, California terror attack and the need for a balance between privacy and government access.

    1. Re:No, he doesn't... by Anonymous Coward · · Score: 0

      LMFAO...what a WEAZEL...asked a simple question about whether Apple should or should not abide by the warrant Gates deflects in that video entirely...he does NOT dispute the headline he repeated himself that the government should have cause to have access...so I guess you could argue he doesn't necessarily back the FBI's position but he certainly is NOT backing Apple's position, which he fundamentally miss characterizes as Apple saying "we'll do whatever the courts tell us to do"....I"m sure Apple WILL do what the Supreme Court tells them to do but that is NOT Apple's position...

      Gates has always been a weazle so no surprise here at all.

  30. Way to Embrace the Dark Side Billy! by Irate+Engineer · · Score: 4, Funny

    Clippy: Hey! It looks like you are trying to violate U.S. citizen's Constitutionally-protected rights! Would you like help?

    --

    Left MS Windows for Linux Mint and never looked back!

    Vote for Bernie in 2016!

    1. Re:Way to Embrace the Dark Side Billy! by Anonymous Coward · · Score: 0

      How does it do that? The phone's owner is the terrorist's employers, and they have given consent to the FBI to examine the phone. Who's constitutional rights are being violated?

  31. Re:FBI is violating the Federal Aquistion Regualti by Anonymous Coward · · Score: 0

    It is really better[for everyone] if they bribe apple to do it?

  32. I'm starting to see their point. by mark-t · · Score: 3, Insightful
    I can see merit in Apple cooperating, but the biggest concern I would have about it is what happens if they are unsuccessful? What of a bug causes unexpected data loss? This isn't exactly a situation where they can get multiple chances because the crack is only supposed to be for one specific iPhone. What happens if developing this tool takes really long? Does Apple get paid for their time while this is being developed or do they only get paid upon completion? If the latter, if they find nothing on the allegedly decrypted phone, will the Feds refuse to pay? If the former, will they sue Apple because Apple cannot necessarily prove that their effort was entirely bug free?

    I completely understand Apple not wanting to do this, because there are far more ways it can end badly for them than positively, but I ultimately suspect that the only way they will ever see the end of this is if they try.

    1. Re:I'm starting to see their point. by thegarbz · · Score: 1

      but the biggest concern I would have about it is what happens if they are unsuccessful?

      Really! That is your biggest concern?

      If they are unsuccessful nothing changes.
      If they accidentally wipe the phone, nothing changes.
      If however they successfully actually access the data then we have a lovely precedence of a court mandated weakening of security. Consider all security to be a farce from this point forward. We'll be back to the days of "Click this link to download, or Click this other link to download with less encryption if outside the USA" Except this time it will be the opposite.

    2. Re:I'm starting to see their point. by mark-t · · Score: 1

      First of all, I am highly confident that Apple will not help the FBI unless or until it genuinely has absolutely no other choice.... that is to say, Apple would have to be directly ordered to cooperate by the supreme court, on pain of contempt charges, or else a new law will be passed that requires companies to assist law enforcement when they have appropriate orders from a court. I rather hope that does not happen, but I can easily see things going that way.

      From there, if they should accidentally wipe the phone, or even if they are unsuccessful in their attempt, what protects them from being criminally charged for failure to cooperate? What evidence can Apple *possibly* provide at that point, particularly given their adamant refusal up until this point, that such inability to recover the data, or even any such so-called "accidental" wiping of the data was not actually deliberate sabotage by someone at apple? In the case of data wipe, why should the FBI believe that a bug which might be plainly obvious to someone after the fact had simply gone unnoticed by the developers until it was too late?

      Clearly, this borders on the notion of being guilty until proven innocent, and it gravely concerns me that this is an all too realistic possibility.

      As for the possibility that Apple will help them and succeed, I'm fairly sure that if this were to happen, there will be a mass bailout of Apple devices by absolutely everyone who has any sincere concerns about their privacy, but at least the public will be in a position to know that. I'd rather be in a position where I know a device is insecure and have the option to not use it for things where I am concerned about privacy than I would wish to not realize that the device was actually insecure in the first place. Anything else is just guesswork.... and while anyone can always make assumptions on the side of caution, knowledge one way or the other will always be more useful.

  33. Gates does not understand the case... by fabrica64 · · Score: 1

    Does Bill Gates understand the case (and encryption technology) or not? This is not about Apple having the data and refusing to give it to FBI. Apple has no data and no key. It's about Apple refusing to create a software facilitating guessing weak passwords that can the be used on old iPhones.

    1. Re:Gates does not understand the case... by Anonymous Coward · · Score: 0

      It's about Apple refusing to create a software facilitating guessing weak passwords that can the be used on old iPhones.

      And by "creating software", you mean "changing one line of code and building". Heck, they can even make it so the software only runs on that one phone.

    2. Re:Gates does not understand the case... by fabrica64 · · Score: 1

      The FBI already put up a request for additional 11 iphones... Anyway Bill Gates discussion is just FUD because his point is misleading, so 1. he does not understand the case or 2. he has a vested interest in killing privacy

  34. Re:FBI is violating the Federal Aquistion Regualti by bobbied · · Score: 1

    You may have a point, but given that Apple isn't objecting on these grounds I'm driven to believe that their corporate lawyers don't consider that a strong argument. Not to mention that "It would cost us money!" wouldn't play well in the press. This is Apple, they have money to burn...

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  35. Apple picked the wrong poster child. by Anonymous Coward · · Score: 0

    I feel like Apple's argument is suffering from the same problem as the "Black Lives Matter" movement. Both are noble causes, but Michael Brown was a terrible example of police violence on an innocent man. Likewise, putting your company out there over a phone linked to two known terrorists doesn't seem well calculated. The privacy concerns aren't that important to the general public because the owner of the phone is already dead. If I were Apple I think I would have picked a different poster child for my "privacy theater".

    1. Re:Apple picked the wrong poster child. by Anonymous Coward · · Score: 0

      Apple got caught with their pants down: they had poor security on the iPhone 5c, and they don't want news stories about how the FBI trawled through that phone. So they are posturing now. All this bullshit about principles is just a way for them to cover up their incompetence and mistakes.

  36. families against unlocking? by Anonymous Coward · · Score: 0

    Which families of the victims are against unlocking the phone besides Carole Adams? According to this article, an attorney representing some of the families will be filing court papers in support of the FBI's position.

    "Velasco said the phone could reveal other extremist plots or that other people were involved in planning the San Bernardino attack.

    "The only way to find out is to open up that phone and get in there," he said. "A lot of the families of the victims, we're kind of angry and confused as to why Apple is refusing to do this."

  37. NSA backdoor by Framboise · · Score: 1

    Of course Windows has a long tradition to cooperate with spying agencies.
     

  38. Microsoft gets huge payments from the NSA? by Anonymous Coward · · Score: 4, Informative

    It appears to me that Microsoft is selling itself to secret U.S. government agencies. Who tried to kill the excellent TrueCrypt? The old original TrueCrypt web site pushes people toward a Microsoft product.

    Can Microsoft be trusted? Here are some articles:

    Windows 8: NSA Backdoor Exploit in Windows 8 Uncovered (Aug. 22, 2013)

    Windows: NSA "backdoor" mandates lead to a computer-security FREAK show Quote: "Microsoft Windows OS vulnerable to hackers, thanks to National Security Agency requirements." (March 6, 2015)

    Windows: NSA Built Back Door In All Windows Software by 1999 (June 7, 2013)

    Windows 10, Microsoft hiding what it is doing: Microsoft has no plans to tell us what's in Windows patches. Quote: "Each update is a black box, and it's going to stay that way." (Aug 21, 2015)

    Windows 10, Microsoft takes even more control: Windows 10 is spying on almost everything you do -- here's how to opt out But, of course, Microsoft can change the spyware to avoid blocking. (July 31, 2015)

    Microsoft can't be trusted: How Can Any Company Ever Trust Microsoft Again? (June 17, 2013)

    Microsoft releases EXTREMELY buggy software: Microsoft Kills Many Critical Flaws, Some 0-Days, Un-Trusts One Wildcard Cert It is likely that there are many bugs Microsoft hasn't yet found. Are Microsoft products intentionally made insecure? (December 9, 2015)

  39. How does this work with safes? by CODiNE · · Score: 1

    I don't think the entire concept being fought over is some brand new idea, it's a classic idea with the obligatory "with a computer".

    So how has this been handled in the past? If you buy a brand new top of the line "uncrackable" vault say for a bank or casino in Vegas... and refuse to open it for police, they just... make do on their own right? Spend a few days or weeks with hammers, chisels and drills until it's open?

    Nobody makes the vault company drop by and show you the secret access trick, am I right?

    --
    Cwm, fjord-bank glyphs vext quiz
    1. Re:How does this work with safes? by Jeremi · · Score: 1

      Nobody makes the vault company drop by and show you the secret access trick, am I right?

      The problem with the physical-vault analogy is that (to my knowledge) nobody has ever produced a physical-vault that was unbreakable by the federal government, so the precedent may stand merely because the government never felt it had the need to coerce a vault manufacturer.

      A better hypothetical might be a vault whose interior walls are lined with explosives, such that if anybody tries to cut in the vault will blow up, obliterating its contents. If the Feds were sufficiently motivated to obtain the contents of that vault, would they go after the vault's manufacturer with lawyers? Quite possibly.

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    2. Re:How does this work with safes? by ooloorie · · Score: 1

      I think a better analogy is that of someone who holds a piece of evidence in a criminal case but refuses to disclose where it is, telling the FBI to go search for it themselves. https://en.wikipedia.org/wiki/...

  40. Re:you people are idiots by SecurityGuy · · Score: 5, Insightful

    Nice argument, but that's not what happened. Apple already made the contents of the iCloud account available to investigators, as they were ordered to. This is entirely different. They're being asked to build software that doesn't exist to subvert a security feature in iOS.

    It's more like going to a safe company and asking them to build you a key that unlocks every safe. It's more complex than that, really, but it's less wrong than your analogy.

  41. Made a tough choice much easier by Anonymous Coward · · Score: 0

    "John McAfee and Bill Gates on the pro-unlocking side, and Woz, Edward Snowden and even some of the victim's families on the con."

    Well, crazy as McAfee is, he's no Woz, Snowden, or anonymous grieving party who should be left alone by the media.

  42. Re:FBI is violating the Federal Aquistion Regualti by Anonymous Coward · · Score: 0

    All Writs Act.

    But the point is interesting. Newer laws supersede old laws, so if there is actually a federal law that specifies that work cannot be compelled without compensation or bidding and such, then the All Writs Act is probably constrained to only apply to trivial amounts of work that might be performed to further an investigation. Otherwise the government could cite an ongoing investigation and just order Boeing to give the government some jets without compensation... to help with the investigation.

    Forking the code base, changing iOS and running it through a QA cycle before trying it out on the phone is more than just ordering someone to allow access to equipment or unlocking a door. Conscription is really contrary to the freedoms we enjoy so there should be a tendency to limit its use as much as possible.

  43. The FBI's failure is crystal clear by RogueWarrior65 · · Score: 1

    What seems to be missing in all of this media-fueled discussion on this topic is that the iPhone doesn't operating in a vacuum. Assuming that the couple got their marching orders on this phone (which is unlikely since it was a work phone not a personal one), someone had to send those marching orders. That means that the Feds have totally failed to identify the source. Either that or the fact that our international surveillance capabilities have been totally borked in the last few years that they no longer have the capability to find the source or can't legally find the source. And then there's the other possibility that the Feds are hoping to make the case that no marching orders were given and the couple had no connection to terrorist groups and this was some sort of spontaneous attack thus justifying further erosion of civilian rights.

  44. Re:FBI is violating the Federal Aquistion Regualti by SecurityGuy · · Score: 1

    False. FAR is for executive agencies. This order came from the judiciary, which is not a executive agency at all.

  45. Conspiracy and Conjecture by BuckB · · Score: 1

    From Apple's Open Letter:

    "Second, the order would set a legal precedent that would expand the powers of the government and we simply don’t know where that would lead us. Should the government be allowed to order us to create other capabilities for surveillance purposes, such as recording conversations or location tracking? "

    That's what I'm referring to - breaking into an iPhone leads us to recording conversations. No judge in the US would ever use this case as precedence to tracking locations.

    1. Re:Conspiracy and Conjecture by Geoffrey.landis · · Score: 4, Insightful

      The point that you are missing is that the precedent to be set is that the government can make Apple write software.

      This isn't about breaking into a phone, it's about exactly how much the court can compel them to do It's not "use your key to unlock this door". It's "write new software to this exact set of specifications that the FBI has written."

      can the court compel Apple to write code? If they can, what else can they compel people to do?

      --
      http://www.geoffreylandis.com
    2. Re:Conspiracy and Conjecture by Anonymous Coward · · Score: 0

      The court can already compel Apple to write code. They do this all the time. It's pretty normal to be able to require companies to do things on behalf of the government. Typically they compensate them, which is what has been offered to Apple but it is not the least unusual to order a company to spend resources on behalf of a court order.

      Apple has very little legal defense here. Saying they won't comply with a court order because they might have to comply with another court order is not going to get them anywhere with the court.

      There only real legal argument is that the specific requirements of the order is outside of the bounds of the All Writs Act and overly burdensome on their company. Unfortunately they keep writing crap in the paper arguing stuff that the court is in fact not going to care about or completely disagree with and gives evidence that the reason they won't do it is not the one they might actually succeed with. Realistically they should lose the appeal.

      A court might see it as potential government over-reach but Apple isn't helping itself with its hyperbolic hysteria fit.

    3. Re:Conspiracy and Conjecture by Anonymous Coward · · Score: 1

      This!

      As others have said Apple would have to

      1) Write the software (in a timely and competent manner)
      2) Sign-It with their Private Key
      3) Not Add said private key to their public Certificate Revocation List.

      Item 1 allows them to delay indefinitely, unless the Justice department can find a way to compel them (fines for contempt, or imprisonment of corporate officers) which is unlikely. This could of course be done by a third-party. See McAfee or NSA or whomever.

      Items 2 and 3 - are quite concerning as they would require the abrogation of free speech, interference in operations, a potential loss of trust/business that could lead to an IDS issue...etc.

    4. Re:Conspiracy and Conjecture by Anonymous Coward · · Score: 0

      The court can already compel Apple to write code. They do this all the time.

      Citation needed.

    5. Re:Conspiracy and Conjecture by Jason+Levine · · Score: 2

      Usually companies served with a warrant can be compelled to provide something they already have. If the FBI needed the e-mails that someone sent via GMail, they could compel Google to serve them up. However, the question is can the government require a company to create something entirely new just to further an investigation? The FBI wants Apple to write software to remotely apply to the iPhone that would remove the "10 attempts and phone is wiped" restriction and that would let them try PINs in an automated fashion. This software doesn't exist right now in any form. The danger is that if Apple can be compelled to weaken their products "just this one time," then they'll be told to weaken them further for other investigations and they'll be told to write other software because the government demands it (and without compensation for their efforts).

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    6. Re:Conspiracy and Conjecture by tricorn · · Score: 1

      The only thing that needs to be written is a new request over USB to submit a passcode and report the result. The rest of ut is removing code, not writing it. I'm not sure that there's much difference, at that level, between writing code and clicking a button to change a setting or typing in a password or signing a firmware image.

      You're right that the primary issue is how far does the All Writs Act go, what are the limits on what they can require, but this case doesn't really show a very high burden on Apple.

    7. Re:Conspiracy and Conjecture by Anonymous Coward · · Score: 0

      The court can compel you to do anything that isn't illegal. Write software, open doors, make keys, provide services. All good. Does your business depend on doing those things? Too bad, you gotta help the govt. That's what a writ is.

      A writ cannot
      -compel an illegal action
      -create new jurisdictions where none existed before (basically create new laws; the writ is static)
      -must only be used when there is no existing law covering what is being asked

  46. Re:you people are idiots by Anonymous Coward · · Score: 0

    If the FBI stood up before a judge an showed just cause and got a search warrant for a communication device that was used in the commission of a federal crime, then Apple is WRONG and should cooperate *for this phone*.

    Absolutely not. The government has the warrant, the government can try to execute the warrant. They cannot compel someone else to do their dirty work for them. Slavery is a bad thing, remember?

  47. Taking sides: problem solved! [Re:Is that] by Geoffrey.landis · · Score: 5, Funny

    "...some pretty strange bedfellows: John McAfee and Bill Gates on the pro-unlocking side..."

    Actually, John McAfee is not on the side of forcing Apple to unlock the phone-- he's against that. He is on the side of don't force them to do it because he and his elite crew of hax0rz will do it for free with no need to bother Apple or use that all-writs thing.

    And this solves the problem, doesn't it? Give it McAfee, he will screw up and erase all the data on the phone, problem solved.

    --
    http://www.geoffreylandis.com
    1. Re:Taking sides: problem solved! [Re:Is that] by TheCarp · · Score: 1

      > And this solves the problem, doesn't it? Give it McAfee, he will screw up and erase all the data on the phone, problem solved.

      I cannot even begin to express how much I want the FBI to take him up on this offer.

      The idea of Presidential Candidate John McAfee's personal crack team of uberhackers being deployed in this case is just.... its everything a boy could hope for. Good work JM....go full Stark on that shit.

      --
      "I opened my eyes, and everything went dark again"
    2. Re:Taking sides: problem solved! [Re:Is that] by dcw3 · · Score: 1

      Give it McAfee, he will screw up and erase all the data on the phone, problem solved.

      Somehow I doubt they have only one copy of what's on the phone. Is there a way to image the encrypted data?

      --
      Just another day in Paradise
    3. Re:Taking sides: problem solved! [Re:Is that] by Anonymous Coward · · Score: 0

      Actually, John McAfee is not on the side of forcing Apple to unlock the phone-- he's against that. He is on the side of don't force them to do it because he and his elite crew of hax0rz will do it for free [businessinsider.com] with no need to bother Apple or use that all-writs thing.

      As much as McAfee is a lunatic, he's right on this one.

      Which is why the FBI won't take him - or anyone else - up on such an offer.

      FBI doesn't want to ask for volunteers or buy a zero-day/jailbreak/exploit. It wants the power to compel a manufacturer's engineers to break their own security. "Break this phone or go to jail."

    4. Re:Taking sides: problem solved! [Re:Is that] by Austerity+Empowers · · Score: 4, Insightful

      FBI doesn't want to ask for volunteers or buy a zero-day/jailbreak/exploit. It wants the power to compel a manufacturer's engineers to break their own security. "Break this phone or go to jail."

      Which is why the summary is so wrong that it hurts the brain, and while I understand slashdot editors aren't exactly professionals, they should have the dignity to remove that comment. Bill Gates wants cooperation with big brother, McAfee wants policework. There's a huge difference between them.

    5. Re:Taking sides: problem solved! [Re:Is that] by Bob+the+Super+Hamste · · Score: 1

      They should. The problem is that they have a an encrypted image which does fuck-all for getting at the unencrypted data assuming that Apple didn't screw up the encryption and instead decided to do a reasonable implementation of a well studied encryption algorithm. This ignores the actual issue of the device being erased after 10 PIN attempts. Having never dealt with apple hardware I do wonder if one just imaged the device they could do the following:
      1. attempted 10 PINs
      2. let it get wiped
      3. put the image back on the device
      4. repeat steps 1 to 3 until you unlock it
      Can this be done or is there something that would prevent that? I now want to see if I can do this an android device, maybe some time when I won't care if my phone is out of commission for a few days when I screw the pooch when attempting this.

      --
      Time to offend someone
    6. Re:Taking sides: problem solved! [Re:Is that] by currently_awake · · Score: 1

      The pin you type in is used to decode an encryption key inside an IC, that they (hopefully) can't copy. If they can access that key to back up the data then they can decode the phone memory directly.

    7. Re:Taking sides: problem solved! [Re:Is that] by currently_awake · · Score: 1

      They want the power to order ANY phone maker to decode ANY encrypted phone. That would discourage phone makers from putting good crypto on the phones they sell, and bypass the need to change the laws.

    8. Re:Taking sides: problem solved! [Re:Is that] by Anonymous Coward · · Score: 0

      This story has been going on for quite some time and people still aren't aware of the encryption issue? The encryption key is not part of the software image, it is embedded in hardware. Imaging the encrypted data is of no practical use.

    9. Re:Taking sides: problem solved! [Re:Is that] by mmell · · Score: 1

      Chill it down to around -160C, remove power and read the current state of the RAM device. Brute force away - preferably in a completely sandboxed virtual environment, but if you enjoy restoring your illicitly gained RAM image every ten attempts, hey - be my guest!

    10. Re:Taking sides: problem solved! [Re:Is that] by Viewsonic · · Score: 1

      Bill Gates is also against it as well. He was upset people are posting these stories saying otherwise.

    11. Re:Taking sides: problem solved! [Re:Is that] by tsa · · Score: 1

      That is actually very smart. Oops, sorry, I deleted all the info on it and bricked the phone. Good luck! :)

      --

      -- Cheers!

    12. Re:Taking sides: problem solved! [Re:Is that] by macs4all · · Score: 1

      This story has been going on for quite some time and people still aren't aware of the encryption issue? The encryption key is not part of the software image, it is embedded in hardware. Imaging the encrypted data is of no practical use.

      Not on that particular model. The Secure Enclave chip was added with the 5s. That phone is a 5c. JUST missed it, dammit; or Apple would seriously not be able to do anything. On this particular phone, no one but Apple really knows (as well it should be).

    13. Re: Taking sides: problem solved! [Re:Is that] by Anonymous Coward · · Score: 0

      Neither the FBI nor Apple would even consider the idea because:

      What if he succeeded ?

      Both the FBI and Apple would look pretty stupid. The FBI for being incompetent and Apple for peddling snake oil security.

    14. Re:Taking sides: problem solved! [Re:Is that] by david_thornley · · Score: 1

      Wouldn't the key have to be in RAM already for that to work? The whole issue is getting the phone unlocked, which means getting the key into RAM. The old freeze trick can keep information that's in RAM, but it can't produce new information.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  48. Re:FBI is violating the Federal Aquistion Regualti by oh_my_080980980 · · Score: 1

    Follow the case would you. There isn't newer law that OVER-TURNS the old law.

  49. precedent for what? by ooloorie · · Score: 1

    He states that it is for this specific case, but seems to miss the point that there are other law enforcement officials waiting on the wings with their requests should this precedent be set.

    The only real protection against such government intrusions is technological, not some wimpy legal precedent. Since the iPhone 5c apparently can be unlocked after the fact with the help of Apple, it is not secure. That problem isn't going to get fixed by legal posturing, it's only going to get fixed by fixing the phone hardware and software.

    1. Re:precedent for what? by Xylantiel · · Score: 1

      Yes! A vendor-held backdoor, or vendor ability to insert one after the fact, is the same security risk whether the government mandates it and can use it or not.

    2. Re:precedent for what? by ooloorie · · Score: 1

      Yes it is the same. Glad you realize it.

    3. Re:precedent for what? by Jack+Griffin · · Score: 1

      It's not a backdoor!
      All it is is Apple preventing the phone from wiping after 10 attempts so the FBI can use Brute force on the crypto. The encryption is just as robust as it ever was.

  50. Restore iCloud password then back it up by awkScooby · · Score: 1

    Apple should investigate whether or not they can restore the password (the hash of the password) for just this one user. This assumes they have backups that cover the relevant time period. I'm sure it's not completely trivial, but it's probably a lot less work than rolling out a one-off OS. If so, then the FBI could then take the phone to a trusted Wifi, plug it in and let it back up to iCloud. Apple has already turned over the 6 week old backup that's in iCloud and could easily turn over the new data too.

  51. And that by mitcheli · · Score: 3, Insightful

    is why I don't have any Microsoft products in my home. And that I must begrudgingly use them at work.

    --
    Select from tblFriends where interesting >= 4;
    1. Re:And that by TheCastro1689 · · Score: 0

      Pssh, I have a Windows Phone running 10 beta and it's awesome. Apple already said the FBI could have used the icloud backup if they hadn't changed the icloud password, MSs services are inherently no different.

    2. Re:And that by Anonymous Coward · · Score: 0

      backs up everly(sic) last secret it can find on your computer to server in the US

      Simply put, if you believe this hyperbole you're a dumb motherfucker.

    3. Re:And that by Anonymous Coward · · Score: 0

      incorrect, you are a paranoid nutbar is the correct answer

  52. Says he's misinterpreted by Geoffrey.landis · · Score: 4, Informative

    He's refuting he said that he supports the FBI.

    He has very slightly backed off, claims that people have misinterpreted his position:
    (see the "update:" in this gizmodo article: http://gizmodo.com/bill-gates-... )

    But here is Gates' actual quote from the Financial times article; what do you think-- was he misinterpreted?
      http://www.ft.com/cms/s/2/3559...

    “This is a specific case where the government is asking for access to information. They are not asking for some general thing, they are asking for a particular case,” Mr Gates told the Financial Times.

    “It is no different than [the question of] should anybody ever have been able to tell the phone company to get information, should anybody be able to get at bank records. Let’s say the bank had tied a ribbon round the disk drive and said, ‘Don’t make me cut this ribbon because you’ll make me cut it many times’.”

    --
    http://www.geoffreylandis.com
    1. Re:Says he's misinterpreted by Anonymous Coward · · Score: 0

      And in that, Bill Gates is wrong. He said that "it's not different than [stuff business already does]". Except that it is different.

      It's different because Apple will be working for the FBI, under coercion.
      It's different because Apple has to break a security system that was not meant to be broken.
      It's different because once the magic phone breaking system is created, it will be exercised forever and into infinity.
      It's different because my privacy gets violated eventually, even though the FBI and Bill Gates claims "oh it's just for this one terrorist phone."

      Let's face facts. One of the reasons Apple created this security system is to keep the FBI, the CIA, the NSA and all other Three Letter Agencies out. The entire technology world is doing the same. Why? Because the Three Letter Agencies have made it their mission to spy on everyone. It makes no difference if you are innocent or guilty. It makes no difference if you are under suspicion or not. It makes no difference if they have a warrant or not.

      Security is no longer just about crime and criminals. The security apparatus has taken upon itself the authority to spy on anyone, at any time, and for any reason. Due process is a quaint artifact of the past which they can always get around "because terrorism".

      The security agencies have stolen rights from the citizens and they will find any reason, say anything, to keep their stolen rights.

  53. icloud password rollback by Anonymous Coward · · Score: 0

    Why can't the Icloud password be rolled back? I know that's not something they do for everyone but surely it's technologically possible. more possible than what the FBI is asking?

  54. Color me SHOCKED by EmagGeek · · Score: 1

    I am SO shocked that the man behind the worst privacy environment in the history of modern computing would come down on the side of the FBI.

    Shocked, stunned, and completely amazed.

    Not.

  55. _NSAKEY by CauseBy · · Score: 1

    The same Bill Gates of _NSAKEY fame?

  56. So all you Microsoft users by JustNiz · · Score: 2

    Are you REALLY still feeling warm and fuzzy about putting everything into Microsofts cloud, and believing Windows 10 isn't really spying on you, and that Microsoft aren't fundamentally aligned to sell out your private data at the first opportunity?

    1. Re:So all you Microsoft users by OpinOnion · · Score: 1

      I feel safer than putting it ALL in google cloud as an alternative. Diversity is almost always safer. If you use any of the big name webmails, you've getting mined pretty hardcore, especially if you search while logged on. Windows 10 isn't as bad as google normally because most people don't use the built in search and of course it's easy to turn off. Apple was stupid to pick a terrorism case to make this stand against.. unless it's a ploy to get terrorists to use iPhone as then spy on them that way.. terrorism honey pot. I find Apple's statement to be a bit disingenuous and Gates statement to be sad, but true. The law says Apple must obey any reasonable request. Can Apple prove this is an unreasonable request in court? What does Apple really have to lose? All they are doing is follow the law and providing data by court order. They are not complying with some secret mass data request. It's pretty darn standard request and against terrorists at that. I agree with Gates on this. They have a court order.. it's a terrorism case... Apple doesn't honestly have anything to lose other than this silly public spat they created.

    2. Re:So all you Microsoft users by JustNiz · · Score: 1

      >> Apple doesn't honestly have anything to lose other than this silly public spat they created.

      You're not seeing the global picture. Most of Apple's business is not in the US. If Apple bend over for US government then what do you think is going to happen in all the other markets, especially places with governments like China's.

  57. Good by Anonymous Coward · · Score: 0

    Glad to see Bill is still a nutter. I side with Apple.

  58. Already destroyed the actual phones used by Geoffrey.landis · · Score: 5, Informative

    The biggest problem is that people are reacting to the headline - not the back story.

    1) This was the terrorist's WORK phone. He tried (and failed) to destroy his personal phone - and the FBI have all of the data from that. If he didn't destroy the work phone, there probably wasn't anything important on it.

    Close, but no.

    He tried, and succeeded, in destroying his personal phones:
    http://www.foxnews.com/us/2016...

      The couple took pains to physically destroy two personally owned cellphones, crushing them beyond the FBI's ability to recover information from them. They also removed a hard drive from their computer; it has not been found despite investigators diving for days for potential electronic evidence in a nearby lake.

    Farook was not carrying his work iPhone during the attack. It was discovered after a subsequent search.

    So, the question is: given that they went to great lengths to destroy the phones and hard drives that they used in planning the attack, why in the world would anybody think that this phone they didn't think were worth bothering to destroy would have anything on it?

    --
    http://www.geoffreylandis.com
    1. Re:Already destroyed the actual phones used by Anonymous Coward · · Score: 0

      Right, so your argument is, because there might not be anything on this phone (although we don't know for sure) we should ignore it even if there is.

      How do you know they didn't mean to destroy this one but in the heat of the moment forgot about it? There could be potential damning evidence on that phone, but its lost to us unless apple stops dragging their feet over some bullshit marketing strategy, that's pointless anyway, because the damage has been done - its possible.

      Also, if you don't think that providers of encryption and encrypted services are the next target, you haven't been paying attention...

    2. Re:Already destroyed the actual phones used by RyoShin · · Score: 1

      Everyone makes mistakes. Maybe they needed it as a last-gap for confirming something or looking up something between smashing the other phones and murdering people.

      Completely ignoring how ham-fisted the FBI is in trying to retrieve the data and how bad their "request" is in every way, they can't know the iPhone data is useless until they've seen it.

  59. SPAT? by lexlthr · · Score: 2

    Spat - a petty quarrel. This legal battle may set precedent that determines the course of security for the foreseeable future. It is hardly a "spat".

  60. Re:FBI is violating the Federal Aquistion Regualti by omnichad · · Score: 1

    Apple isn't objecting on these grounds

    You don't play that card on the first round.

  61. Where do you want to go today? by Anonymous Coward · · Score: 0

    Where do you want Bill Gates to go today?

  62. The whole point by Geoffrey.landis · · Score: 1

    You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor,

    No. The whole point is that "their own personal backdoor" does not exist.

    so why should they be immune to court orders? No business or person is immune to it. They can only (try to) refuse to provide general access software, but every time they will get court order to provide data from specific phone, they should be legally required to comply with court order.

    Again. Apple is not being asked to "provide data from the phone"; they're not even being asked to decrypt the phone. They are being commanded to write new software to the FBI's specification.

    --
    http://www.geoffreylandis.com
    1. Re:The whole point by UnknowingFool · · Score: 1

      They are being commanded to write new software to the FBI's specification.

      And while Apple isn't being ordered to create a backdoor, the FBI's specifications basically create one. First it requires Apple to somehow load a new iOS FBI Special Edition to the phone even if the phone settings do not allow for updating the software onto the phone. If Apple could do that, they don't really need to change the security settings and could take control and unlock the phone. If the phone has been setup to auto-update, it lowers the inherent security so that brute force attacks are now possible.

      First, disable the Erase Data feature which will wipe out data after 10 failed passcode attempts. Second allow passcode attempts from WiFi, Bluetooth, or cable even which would make it easier to automate passcode entry and allow a program to do so instead of manually. This will create a new vector of attack not in the current phone. Lastly, disable or remove the delay feature of passcode attempts. After 6 failed attempts, the phone will not accept new attempts without waiting for increasing amounts of time. After 10 attempts, it could erase the data or use the user's setting of delay time. Set at the highest setting (1hr) significantly increases the amount of time it will to brute force attack the phone. A 6-digit passcode will require 1 billion attempts. If the phone delays attempts to 1 hour, it will take 114 years to brute force attack. If removed and there is no delay, it takes 80 milliseconds per attempt (minimum theoretical time per attempt). That takes only 133 minutes.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    2. Re:The whole point by Anonymous Coward · · Score: 0

      All bullcrap. They don't need to decrypt the data. They need to bypass the login, which they can do in three seconds after flashing the firmware with the key THAT THEY HAVE.

      They also need to comply with lawful warrants. This isn't about the FBI being able to see everyone's nudes. It's about this specific case.

      This is just a marketing ploy by Apple. I can't believe people are dumb enough to fall for it.

    3. Re:The whole point by Bob+the+Super+Hamste · · Score: 1

      A 6-digit passcode will require 1 billion attempts.

      I think you meant 1 million attempts given the other numbers in your analysis.

      --
      Time to offend someone
    4. Re:The whole point by UnknowingFool · · Score: 1

      Sorry I meant one meeeeeeelyon.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    5. Re:The whole point by Pseudonym · · Score: 1

      They also need to comply with lawful warrants.

      ...and that's precisely one of the issues in this case. It's not clear that the warrant is lawful because we're in genuinely new territory here.

      Is there any precedent at all for a warrant which compels a company to build a special-purpose product (which previously did not exist) for the benefit of law enforcement? Has a warrant of this nature ever been tested in court and found to be legal?

      It's about this specific case.

      ...and that's the other issue. Once the new technology exists, other courts will compel its use for other cases. Law enforcement elsewhere is already drooling.

      Maybe the next case will be a child pornography case. Maybe the one after that will be a stalking case. Eventually, it will be a tool used in divorce cases. Or perhaps a Chinese dissident case.

      Now, I know that James Comey said that it was about this specific case, so I don't blame you for believing it, but it turns out he was flat-out lying about that. This is actually the 13th case.

      Why didn't you know that? Because the 12 previous cases were sealed. Apple also requested that this one be sealed, and the DOJ refused. Now it's all come out.

      So while, yes, Apple is fighting a PR battle, they didn't want to. The DOJ chose to wait until it had a high-profile sexy case to fight it out in the court of public opinion. The DOJ fired the first shot, and Apple responded in kind.

      There are lots of things I hate about Apple. This is not one of them.

      --
      sub f{($f)=@_;print"$f(q{$f});";}f(q{sub f{($f)=@_;print"$f(q{$f});";}f});
    6. Re:The whole point by rch7 · · Score: 1

      You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor,

      No. The whole point is that "their own personal backdoor" does not exist.

      Of course it exists. Changing software remotely without device owner permission is backdoor. You may argue about words and go around in circles as lawyers like but this request would not be possible at all if backdoor didn't existed. Apple can't tell that it is impossible for them - it is possible.

      so why should they be immune to court orders? No business or person is immune to it. They can only (try to) refuse to provide general access software, but every time they will get court order to provide data from specific phone, they should be legally required to comply with court order.

      Again. Apple is not being asked to "provide data from the phone"; they're not even being asked to decrypt the phone. They are being commanded to write new software to the FBI's specification.

      Maybe, but public perception is different. And it is not "new software", it is just small and quick switch for existing software. Apple can and should argue about giving copy of this modified signed software to law enforcement. But Apple can use it in their own house and provide data only from unlocked phone back if they really want to check every court order themselves.

      All this would unlikely to occur in some communist dictatorship like China. Nobody would go public and use some legal system there and would not tell Apple anything unless necessary. They would just write their own hack and use it without telling anybody even if it requires some hardware tweaks. Iphones are made in China after all, their electronics engineers know it better.

    7. Re:The whole point by rch7 · · Score: 1

      I don't know about this specific iPhone, but in general they should have some service software that would allow to flash whatever phone, including bricked phone with corrupt software, whatever phone settings were before.

    8. Re:The whole point by UnknowingFool · · Score: 1

      Recovering a phone is easy. The problem is recovering the data on the phone. At any time, the FBI could wipe out everything on the phone and restore to factory settings but everything means everything. Reading the Flash memory directly does no good as it permanently removes the keys. Now if the county had used a MDM (mobile data management) software, they could have done everything the FBI is asking of Apple. Instead, they didn't so Apple has to hack their own system.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
  63. Cracking iPhones by Zorbitor · · Score: 1

    Just ask U2 how they did it

  64. Re:FBI is violating the Federal Aquistion Regualti by bobbied · · Score: 2

    No, a good lawyer plays ALL his cards UPFRONT. This Matlock style last second cropping up of evidence to get your client off you see on TV is not how these things work.

    If you are making a motion or responding to something you put ALL of your arguments into your filings because each of these arguments must be individually dealt with by the court and you won't have the chance to go back and amend your response without a good reason. Your best chance at prevailing is at the first strike, going back later and trying to add additional arguments when your previous ones have failed is usually not allowed.

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  65. Bill Gates' Understanding of Computing is Minimal by Anonymous Coward · · Score: 0

    The more Bill opens his mouth these days, the dumber he sounds. His support of faux, pop-science non-sense like Bostom's "Super Intelligence" betrays a massive inability to understand 1.) the cutting edge of CS, and 2.) the constraints of basic/modern computing -- as is the case here. Allowing someone to circumvent one system means allowing others to circumvent it later, without fail. Imagine how much money an Apple hack tool would be worth on the open market. Imagine how much that'd undermine Apple's model -- no more locking of devices, no more message security, no more spam prevention, etc. It's all based on the same cryptographic assumptions, after all. And Microsoft shows this, too -- it's core values are still hugely hostile to the customer. Fuck Bill.

  66. Killing markets? by seven+of+five · · Score: 1

    I can see Gate's lack of concern about privacy rights and the notion that a customer 'owns' the software or computer he just bought. But if he had any working brain cells he'd have to see the long-term damage to U.S. tech companies... if back doors become the new normal, nobody's going to want to buy our crap anymore, if the competition does not have back doors.

    Going a step further, if the tech sector suffers losses, that's a big impact to the tax base, and the Feds lose big time.

  67. "Gates Disputes Report That He Backs FBI in Apple" by destinyland · · Score: 1

    "In an interview with Bloomberg, Bill Gates says he was 'disappointed' by reports that he supported the FBI in its legal battle with Apple, saying "that doesn't state my view on this.' "

    http://www.theverge.com/2016/2...

  68. Best listen to Billy Boy by Anonymous Coward · · Score: 0

    Or you're next inline for one of his famous vaccines....

  69. He'll say anything to sell a Windows phone by Anonymous Coward · · Score: 0

    640k of security is enough for everyone

  70. Change of Argument by BuckB · · Score: 1

    Yes, the government can compel Apple to write code. The government can compel Ford to make a truck that gets 30MPG, compel a mining company to dig another shaft to let air into a mine, and make me pay for health insurance I do not want. If you think the direction the country is going in is to have more freedom than the past, you are sorely wrong.

    Case in point - the government's suit against Microsoft and their inclusion of Internet Explorer bundled tightly with Windows. The terms of the settlement included Microsoft having to divulge all internal APIs and allow 3 people to have access to all their code. Microsoft wrote a ton of software to isolate IE from the OS in order to minimize exposed APIs.

    In many other cases, companies have had to write scripts, etc. in order to search their systems for data.

    What is the extent of the government's power? Well, we have three branches of government that figure all of that out for us. Currently, all three agree with the FBI. When the abuse is too much, we have the right to petition and make changes. But Apple, in this case, is on the wrong side of history.

    1. Re:Change of Argument by Geoffrey.landis · · Score: 2

      Yes, the government can compel Apple to write code. The government can compel Ford to make a truck that gets 30MPG, compel a mining company to dig another shaft to let air into a mine, and make me pay for health insurance I do not want.

      No, they can't; no, they can't; and no, they can't do that either.

      They can enact regulations that include penalties if Ford's truck doesn't get 30 MPG, but if Ford says "no, we're not going to build that truck," a court writ can't force them to make trucks. They can enact safety regulations that mean mines have to have adequate ventilation, but if the company doesn't want to drill the draft, a court writ can't make them operate a mine. They can enact a tax to make you pay the costs incurred by your not having health insurance (even if they don't call it a tax), but, so far at least, they can't actually make you pay for health insurance.

      They can, however, make you pay tax. That power turns out to be written in the constitution.

      If you think the direction the country is going in is to have more freedom than the past, you are sorely wrong.

      In some ways we are getting more freedom, in some ways less.

      But that's always been the case.

      --
      http://www.geoffreylandis.com
    2. Re:Change of Argument by david_thornley · · Score: 1

      The government cannot compel Ford to make a truck. The government cannot compel a mining company to operate a mine. It can sometimes force people to spend money, but not to do work.

      The government can make certain actions illegal, and Microsoft violated anti-trust law. There are things the government can do about it, and there are hard limits on those. The government, for example, can't make Microsoft divulge APIs, but it can arrive at an agreement with Microsoft where Microsoft will divulge them in exchange for reduced penalties. Similarly, if you are on probation for drunk driving, the government can't force you to install a breathalyzer lockout in your car, but it can make not driving without one a condition of probation. You're free to stay in jail, or just not drive, because the government can jail you if you've committed certain crimes but not force you to install a device.

      The government can make Apple divulge information they've already got, or use tools they've already got. The question is whether Apple can be legally forced to make a tool.

      Currently, the executive branch is attempting to use the All Writs act to make Apple write the software. They got one court to rule that they can indeed use that law to that effect, but Apple can appeal. The judicial branch has not decided which side of the case it's on, since a court decision like this will not be final until it's been appealed all the way up Apple feels like taking it. The legislative branch passed the All Writs act, but Apple and the FBI have different opinions on what it means in this case, and they're resorting to the courts to settle the matter. This is a textbook example of how government is supposed to work.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  71. Bill is the new Dick Cheney by Spudboy2003 · · Score: 1

    Bill, retire already. Go play golf.

  72. None of this matters by Anonymous Coward · · Score: 0

    The only reason the FBI wants Apple's help, is because a brute-force attack (usually the final, losing move) happens to be feasible (because it's just a phone, and nobody has made a phone that doesn't have a shitty UI for data-entry, so nobody uses good passphrases).

    Change one thing (improve UI (not saying it's easy or someone would have done it by now), have removable-media keys, or $YOUR_IDEA_HERE) and the brute-force attack becomes just as infeasible as we usually think of such things. Whatever precedent is established, is eventually going to be obsoleted.

    It also doesn't matter because the phone probably isn't going to have any interesting information, so the stakes are low. (And they're going to remain low for most peoples' phones, until phones become decent terminals.) If this had been about a desktop PC instead of a handheld one, the FBI would have already given up, because of an invention called The Keyboard. (Yes, I realize some phones have keyboards, and they're better-than-nothing(!), but even so, I doubt many people are entering decent passphrases with 'em.)

    If there is any serious privacy issue here, it's just the usual reminder that you only get privacy when you try to have it (never by default (*)), and part of that involves thinking about the parties that you think are on your side (e.g. your PC's or OS's manufacturer) being coerced into working against you. I think it's hilarious that people are debating whether or not Apple should pay attention to the loaded gun that someone has put in their face. Under any other circumstances, you assume that whoever has a gun pointed at them, is going to do whatever they're told. If Apple successfully resists, fine, but you would never count on that anyway, so it's never going to be part of your computer's defense.

    Apple's resistance doesn't matter, and the FBI's coercion is assumed to succeed -- even if it doesn't succeed this time (though it probably will).

    (*) Yes, I realize Europeans disagree. You think you have privacy because of privacy laws. In America, we realize that most laws are irrelevant and instead we think about a lawless adversary's capabilities and it's the capabilities that we address whenever we're serious about anything. (You people and your civilization! We would never fall for that old trick! ;-)

  73. You Lose! by Anonymous Coward · · Score: 0

    You do realize that the game is "Make scum like Hillary Clinton look good enough to win an election." Bashing trump simply ensures the victory at this point in the game. That does not mean she will win, but look at the choices now? Oh yeah.. Game Over!

    FWIW, other Republicans like Cruz and Rubio are just as scummy as Clinton. Sanders may not be scum, but he believes in Utopia, so is a delusional fool who never studied a lick of history.

    1. Re:You Lose! by ewibble · · Score: 1

      Sanders, does not believe in Utopia. I may not agree with all his ideas but he is right that the US political system is systemically corrupt, and the only way to solve any of the other problems is to solve that first. He may not succeed in fixing the system (probably not, it is a big job, with lots of corrupt people against him), but it needs be fixed, and it is better that the US elect someone who will at least try to fix the broken system, than someone who will continue to ignore it.

      The reason that he says he will fix system as opposed to saying I'll give it my best gosh darn try, is it not politically expedient. No politician says they will try there best, they say this is what they will do.

  74. Gates missed the point? by OpinOnion · · Score: 1

    Doesn't he have have like a 160-180 IQ and pretty good poker skills? I doubt he missed something so obvious unless his mind has deteriorated over the years. Maybe he is saying you have to pick your battles on these things sometimes, which seems reasonable enough. Apple and Google and MS can make a stand against the FBI, but making it against a terrorism case might not have been the most tactful approach. Either way the law seems to say if Apple can get that data, they have to try or prove it's just too darn hard. The alternative is Apple ensures it designs systems that it honestly can't get into (without perhaps an active wiretap and login) if it really wants that level of data security for it's users. The precedent that technology overrides law is more dangerous than the idea that courts have the right to make corporations "un-hide" data. Apple, like an US business has a legal obligation to abide to court ordered data requests. I don't see how, if they have the capacity, they can argue they have any right to decline. Honestly, corporations that can decline to hand over data to the courts is the more dangerous precedent. It's a core principle of the justice system to be able to demand data as evidence for due process to work right. Encryption is little more than a fancy term for hiding your data. Apple has a secret file cabinet that it doesn't read, like a bank with a lock box. When asked to 'un-hide' the contents of that container, if they have the capacity to do so, they must. Why would there be any different interpretation. Will Apple plead the 5th instead? I don't know how hard it would be for Apple to do this, I don't know their systems at all. If they can do it, they really have to by law. It's a precedent that was set long before computers ever existed. If you have record you need to do your BEST to legally abide by the court order and provide them. That means providing them in readable format, not purposely printing them in very fine font, not purposely damaging the data or 'losing' it. These are all concepts that apply to physical documents too. You can't obstruct an investigation by dragging your feet in compliance because you don't like the law. You change the law with votes, not by breaking it unless you're ok with being charged with the crime you're committing and ideally when you know you can garner mass public support. So again I ask, why did Apple pick a terrorism case to make this stand against?

  75. Is that the same Woz... by Anonymous Coward · · Score: 0

    Is that the same Woz that wants to be a citizen of Australia...

    * the country that deports refuge babies?
    * the country that bans the press from covering off shore refuge camps?

    I guess he's siding with Snoden who put his chips with Russia...

    * the country the persecutes LGBT people?
    * the country that is supporting the regime that is creating a bunch of these refugees?

    *BTW* this has nothing to do with encryption, just illustrating the point that single issue agreement doesn't make *bedfellows*

  76. False Equivalency by Anonymous Coward · · Score: 0

    Gates did create lots of back door crap for the Chinese Government. It was required for MS to do business and sell Windows in China.

    The sending people to jail issue then becomes a question of whether his submission to the Chinese Government, is the responsible aspect of people being jailed? I'm sure that I could find examples you would agree he is indirectly responsible for.

  77. An unprecedented ask, and a disingenuous response by Anonymous Coward · · Score: 0

    The FBI is asking for something fairly significant from Apple: for them to make a custom iOS build that will only work on this singular phone, that will do three things: disable the phone being wiped after 10 failed guesses, eliminate any wait time between guesses, and allow for passcodes to be entered via USB, so the brute force can be automated. That is a pretty significant chunk of software, and only Apple can produce it, since they are the only ones that can digitally sign iOS files.

    But the FBI isn't asking Apple to create a backdoor; that is at best misleading, at worst, an outright lie. The backdoor already exist, because Apple already didn't live their (very recent and convenient) mantra of user privacy. The backdoor is that iOS software can be updated via USB with no user interaction - that's there and an existed long before this case. What makes this case unique is that it is specifically an iPhone 5C, which lacks the secondary encryption chip that every other iPhone since the 5 has had (as in, Apple intentionally cut out the key component to protecting user privacy for this specific model - living that privacy mantra indeed). Without the secondary encryption chip, the security is left to the main chip and iOS and can be manipulated as the FBI has requested. Every other iPhone, however, can NOT be exploited this way, as the passcode guesses are handled by the encryption chip directly, and it can not be patched via USB with no user interaction. So if this was an iPhone 5, 5S, 6 or 6S, this wouldn't be an issue, because it what the FBI is asking would be impossible.

    It's hard to argue that it's a slippery slope case either, since the technique will only work with a phone that came out in 2013, and since the custom build of iOS will ONLY work with the serial number of the phone in question, the FBI can't really re-porpose the software after the initial use.

    TL;DR: The FBI is asking a lot, but only to use a backdoor Apple already created and has since closed on all phones since. Apple is playing fast and loose with the verbiage, trying to spin the backdoor as something of the FBI's creation when they did it

  78. Litigation records prove you wrong by Anonymous Coward · · Score: 0

    Forcing OEMs to install Windows, forcing Shops to remove competitive applications, forcing shops to remove advertisements for competitors, forcing vendors to hide competitive software, and countless other examples of "Predatory Monopolistic Practices" has put MS in the first place for the Most Successfully sued for Anti-Trust company in History.

    Court records are on the US Department of Justice, several State supreme court cases (see Iowa), and finally German and EU courts.

  79. LOL by Anonymous Coward · · Score: 0

    You think Apple and Google don't mine your cloud storage for advertising metrics? Unless you still use a flip phone without data capabilities they have some info on you.

  80. Is there a simple explanation of the case? by ardmhacha · · Score: 1

    In the customer letter that Apple released http://www.apple.com/customer-... they said

    "Specifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation."

    If the phone is locked how can Apple install a new operating system on it?

    1. Re:Is there a simple explanation of the case? by Jack+Griffin · · Score: 1

      If the phone is locked how can Apple install a new operating system on it?

      The existing backdoor which Apple fanboys refuse to acknowledge.

  81. Bad Summary by GoCats1999 · · Score: 1

    The commentary about it being pro-unlocking vs. anti-unlocking is inaccurate.

    It's really pro-FBI Compliance vs. anti-FBI Compliance (or if you want to use stronger language, pro-Backdoor vs. anti-Backdoor).

    When it comes to allowing the FBI access to the data, note that almost *all* parties involved (including Apple) *does* agree that the FBI should have access to the data. In fact, Apple has done quite a lot to try and get FBI access to the data, including providing any available iTunes Cloud backups to Farook's phone.

    The problem is the *how* -- meaning, *how* should the FBI get access to that data, and to what extent can the FBI compel Apple to provide the data by having Apple compromise the security of the iPhone itself.

    Furthermore, in terms of the "two sides", the summary provides a very inaccurate portrayal of the two sides of this argument. If you read thru John McAfee's quotes, he actually *agrees* with Apple, and states that Apple should *not* be compelled to comply with the FBI / court order. (What he then stated is that he could get access to Farook's data *without* requiring Apple to create the backdoor, which is what he was arguing.)

    Also, to say that "even some of the victim's families on the con" is also inaccurate. In fact, there has only been *one* victim's family (specifically Carol Adams -- http://nypost.com/2016/02/18/m...) that has been on the record stating that they think Apple should not be compelled to comply with the FBI, not "some".

    EDIT: Gates actually says that his quote was misinterpreted, and he does *not* necessarily side with the FBI -- http://www.bloomberg.com/news/...

  82. More phones too by phorm · · Score: 1

    Yup. I saw an update video here which interestingly enough also details that the FBI *ISN'T* just looking for access to one phone as they currently claim, but that they have court-orders in-progress for twelve other iPhones (unrelated to San-Bernardino).

  83. Not so fast by Curunir_wolf · · Score: 1

    Gates doesn't seem to think he said what people are saying he said. He was quoted today saying "I was disappointed because that doesn’t state my view on this."

    Nuanced? Or freaking out about the blow-back?

    --
    "Somebody has to do something. It's just incredibly pathetic it has to be us."
    --- Jerry Garcia
  84. You're drunk Bill by Barlo_Mung_42 · · Score: 1

    Go back to curing polio.

  85. Hold FBI to their statement? by myid · · Score: 1

    Assuming FBI head James Comey is telling the truth when he says he's not trying to set a precedent, I side with the FBI and Bill Gates on this case.

    Any lawyers out there? Is there a way for Apple to comply with this particular request from the FBI, and in a later case, hold the FBI to their statement that they're not trying to set a precedent?

    1. Re:Hold FBI to their statement? by david_thornley · · Score: 1

      The FBI is using the All Writs act as justification. There's court precedent that says a company can be required to use capabilities it already has. The legal precedent isn't the only thing here: it's whether Apple has an available way to do what the FBI wants. If Apple does it once, then it's obviously one of Apple's abilities and Apple can be compelled to use it, so if Apple develops the software it will be required to use it on court order, even if this particular court order is overturned on appeal.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  86. Re:Windows backdoor confirmed. by PetiePooo · · Score: 1

    So this is as good a place as any in this thread to remind some of the difference between espionage and surveillance. The simplest way I've heard it explained is that surveillance tracks who you call and when you call them. Espionage, on the other hand, listens in on your conversations.

    Whenever people say things to the effect of, "it's just meta-data," please explain this comparison to them and point out that meta-data is surveillance. It doesn't have to be full-on espionage to qualify as an invasion of privacy.

    It's sad to see Microsoft has tied themselves so closely to the income stream they must be generating from the meta-data (aka metrics) Windows 10 collects. Whether it's from advertisers or surveillance agencies, I can't say, but to stick to their guns so intransigently in the face of such withering public criticism is an indication how much that income must mean to them... They're figuratively hoisting themselves with their own petard.

    Sir Gates' latest comment simply confirms to me what I already believed.

  87. Apple should take the next step by Barlo_Mung_42 · · Score: 1

    and close the loophole that lets them load a new OS image on the phone without the user's key.
    Then they couldn't even comply with this request.

    1. Re:Apple should take the next step by jschultz410 · · Score: 1

      I definitely agree with that, but if just changing the OS allows a 3rd party to decrypt the data, then the security is still horribly broken. For the data to be secure, Apple, the govt., whomever, should be able to access the full contents of the phone, know all the algorithms involved, etc., and still not be able to decrypt the data. If the user used too short of a password that allows it to be brute forced, then that's their fault.

    2. Re:Apple should take the next step by david_thornley · · Score: 1

      A way of changing the software without Apple's signing key doesn't mean security is horribly broken. However, Apple is no longer selling any phones this trick will work on, so they are improving their security.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  88. Irony by DriveDog · · Score: 1

    I do realize that I'm contributing to the noise associated with Gates.

    Gates has never demonstrated that he's skilled or knowledgeable about anything unrelated to accumulating money, so why would anyone care what he thinks? Report what Bruce Schneier, an independent and recognized expert in security and technology, thinks instead.

  89. Re:FBI is violating the Federal Aquistion Regualti by omnichad · · Score: 1

    Maybe so, but they aren't the only one holding back information.

  90. Why... by Anonymous Coward · · Score: 0

    Why would encryption not be protected by the first amendment?

  91. THIS IS YOUR MEDIA PEOPLE... apk by Anonymous Coward · · Score: 0

    They have NO SHAME, & no problem misquoting people to "sell their agenda" (which IS often paid for by 'concerned parties') - this goes for your ADVERTISERS TOO who fund them especially...

    * YOU KNOW - the ones that infected the HELL out of people worldwide MILLIONS OF TIMES tracking us like cattle (which their kind feels we are) to use the MOST DANGEROUS SCIENCES OF ALL ON THE WEAK MINDED AMONGST US (ala sociology, the psychology of societies with AMAZING parallels to psychology of the individual which COMPOSES said societies they work their "jedi mind tricks" on ala marketing techniques like "JUMP ON THE BANDWAGON" & be "part of the 'winning' team" which is really TONS OF SOCKPUPPETS for the ILLUSION of the "majority"...)

    They just don't give a shit WHO they toss "under the bus" as long as its AD VIEWS galore!

    (Do I personally believe King Billy, whom I call that out of respect NOT ridicule, is so stupid he'd just offer an opinion on something as complex as this MINUS deep consideration? No - no way: That's just NOT his way!)

    APK

    P.S.=> Wake up America - before it's TOO late: They're keeping you STUPID playing video games & watching 'reality TV', the WWF, & HOOKING YOU ON HEROIN vs. reading GOOD solid books to educate yourselves vs. their bullshit to be able to think critically (imo, the ONLY reason we are allowed to learn to read @ all? They couldn't have a TECHNOLOGICAL SOCIETY minus 'we cattle' being able to read technical directions)... apk

  92. Gates didn't say that by davesque · · Score: 1

    If FT's claims are based on the interview material they show in the posted video, they're making a very liberal interpretation. As far as I can see, Gates only made a few specific points:

    1. 1) The debate on the level of access the government should have to its citizens' information is an important one.
    2. 2) The government should have some level of access in order to have a shot at preventing extreme acts of terrorism (such as with nuclear or biological weapons) and enforcing taxation.
    3. 3) In some ways, the question of whether or not Apple is being asked to create a backdoor is not the real issue. Gates thinks that, ultimately, Apple is only being asked to provide the information from one phone. However, he did acknowledge that once a company provides access (he used the example of a bank turning over financial information), there is some expectation by the public and other interested parties that the company could provide access again and more easily.

    Overall, he seemed to take a lot of care to avoid taking a clear stance with Apple or with the FBI and framed the whole situation as though it was an important legal question that should be settled by due process. The claim that he said "technology companies should be forced to co-operate with law enforcement" is misleading.

  93. Easy guide to taking sides by GrahamCox · · Score: 1

    Confused about the issues? Don't be! Here's my easy one-step guide to taking sides on this issue.

    Ask yourself one question: are you a douchebag?

    Y: FBI
    N: Apple

  94. Gates isn't 'missing the point' by Anonymous Coward · · Score: 0

    Seriously? I don't like him, I don't like his software & how MS set back technology for years through anti-competitive behaviour but Gates is NOT an idiot. He isn't 'missing the point', he no longer runs a technology company, he made his Billions & ran, as such he can say whatever he likes regardless of the implications for his old company, the technology landscape in general & privacy. It doesn't surprise me in the least that Gates would come out in support of his friends in high places, he isn't going to ever have to worry about the implications & he's demonstrably shown in the past that 'freedom' is not a word in his vocabulary unless it is "i'm free to make as much money as I can & do whatever I like regardless of the law, the constitution or people's freedoms"...

  95. Re:you people are idiots by Anonymous Coward · · Score: 0

    Besides the fundamental basic premise that this sets a precedent in making 'insecure phones' (the only one who should be able to unlock my data is me, thank you very much) you're missing the point that the request from the FBI has yet to be shown to be constitutional. Apple is fully in their rights to contest the order in court, until such time that all appeals have been exhausted, up to including the Supreme Court than NOTHING is 'constitutional' or 'unconstitutional' for that matter.

    The FBI could get a judge to issue an order for you to be sodomized until you give up your passwords/bank accounts/documents etc., the order is 'valid' on its face. We could argue all we want that it is 'unconstitutional' but unless you can afford to hire a lawyer & make appeals & be prepared to fight all the way to the Supreme Court the order isn't unconstitutional.

    This is ultimately why you also need 'precedents', so that the lowest judge on the totem pole, the lowest policeman etc. knows that their actions can result in 'censure' or other acts of consequence against them. Unfortunately 'precedent' isn't always all its cracked up to be & as the people in the Supreme Court change their opinions can change such that something that was unconstitutional even 20 years ago could be made constitutional (or vice-versa) by the latest Supreme Court ruling.

    Personally, I believe that a Supreme Court ruling should never be up for 'reinterpretation', regardless of how non-sensical or against current 'public opinion' people may find it. For example, the Constitution says 'all MEN are created equal', as reasonable as I am in suggesting this could reasonably interpreted to be read as meaning 'every human' this goes against the original actual meaning of MEN...if society believes it should say 'all humans are created equal' than it should be very easy to pass an amendment to have it interpreted as such or changed to be read as such. As soon as you allow Courts to 'interpret the meaning of words' or 'what the government meant to say' then law is entirely open to whomever is holding those 9 Supreme Court positions at any time, making it a political appointment as we've seen.

    Does this potentially make it much harder to get society to change in a direction we might want it to go, sure, except that if it is something so obviously fundamental (as the above example is) than it should be DROP DEAD EASY to get an amendment passed. If it isn't super easy than whatever the open question is being debated clearly can't have widespread support.

  96. Law by Smiddi · · Score: 1

    It just goes to show that privacy is a personal thing and everyone has different levels of personal privacy. No single law suits all people.

  97. spot the con? by rewindustry · · Score: 1

    dear tfa - did you do that deliberately?

    we (mostly) all know and understand the old latinate legalese in re pro and con, but we all also know that the meanings of the word "con" has changed, in current use, and are no longer "polite".

    therefore, dear author, pray tell - was that a deliberate con there?

  98. Not Remote [Re:The whole point] by Geoffrey.landis · · Score: 1

    You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor,

    No. The whole point is that "their own personal backdoor" does not exist.

    Of course it exists. Changing software remotely without device owner permission is backdoor.

    They are not changing anything remotely. The whole point is that the FBI physically has the phone.

    This has nothing whatsoever to do with changing software by remote access. This is about breaking into a phone that they have in front of them and have opened up to directly get to via the physical access ports.

    ...

    Again. Apple is not being asked to "provide data from the phone"; they're not even being asked to decrypt the phone. They are being commanded to write new software to the FBI's specification.

    ...Maybe, but public perception is different...

    Exactly. That's the point I've been shouting about. Public perception is not in line with the actual facts.

    --
    http://www.geoffreylandis.com
    1. Re:Not Remote [Re:The whole point] by rch7 · · Score: 1

      You don't need "that" phone. You need to get any iPhone and you can debug it and get whatever access to it in general way that will apply to similar hardware/software, most likely just by changing single byte in machine code instructions. It would cost time/money though. Apple already has access to it though through their own personal backdoor,

      No. The whole point is that "their own personal backdoor" does not exist.

      Of course it exists. Changing software remotely without device owner permission is backdoor.

      They are not changing anything remotely. The whole point is that the FBI physically has the phone.

      This has nothing whatsoever to do with changing software by remote access. This is about breaking into a phone that they have in front of them and have opened up to directly get to via the physical access ports.

      Apple has left option for themselves to change software remotely to whatever they choose as long as it is signed. Obviously having physical access to the phone doesn't make this software update more difficult or very different. So Apple can do it quite easily. And as long it can do it, there always be legal options to force them to do it. Will they be doing it individually for each phone after verifying rubber-stamped court orders, or just provide general way for law enforcement and forget it, is another story. But it will be done one way or another.

  99. He's Irrelevant by RH434 · · Score: 1

    Bill Gates opinion ceased to be relevant years ago. Why is this even a debate?

  100. Not remote because it is not remote by Geoffrey.landis · · Score: 1

    No, that is not what this is about.

    Really.

    Apple may or may not be able to remotely change this or that software, or alter this or that firmware, and reflash this or that ROM remotely-- but that is not what this specific issue is about. This specific issue is not about remote access.

    Look, the FBI wrote a clear and specific statement of what they want Apple to do. It does not involve remote software updates. Period. Some other issue may be about remote software updates, but not this one.

    There seem to be so many people say "well, what the FBI specifically, clearly, and directly asked for is that, but that's not how I would do it, I would do it this other way, and that would be really easy; so that must what the FBI actually wants even if it isn't what they said, and Apple must be lying, and I know that because if they did it my way it would be really really simple."

    --
    http://www.geoffreylandis.com
  101. Re:you people are idiots by Jack+Griffin · · Score: 1

    They're being asked to build software that doesn't exist to subvert a security feature in iOS.

    "Build" might be an exaggeration. The FBI only need the OS to have the max_number_of_retries=10 line commented out and sign the new version to this device. The right person could probably knock it over in an hour.
    Let's not pretend this is more complicated than it is.

  102. Always chooses the wrong side - Bill Gates. by lucien86 · · Score: 1

    And Bill turns back to the dark side yet again..

    --
    Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
  103. End of Slashdot by BuckB · · Score: 1

    Clearly, the people on Slashdot are on the side of privacy over all else.

    But how does illogical, hyperbolic reasoning like this (and other similar alarmist posts) keep getting modded up?

    Tim Cook is now protecting the gays? And somehow if you're for the FBI being able to access a phone, with the owner's permission and under a warrant and followed up by a court order, then why would you want a PIN anyway?

    As Tim Cook said recently, "You probably have as much private information on your phone as you do in your house." Maybe - and the police have full, legal, and acceptable procedures for going into someone's house and looking for evidence.

    The idea that something that's been created in the past 1 or 2 years is now the one and only thing that is protecting civilization is an argument only the very young can make. It's a phone. If being caught being gay is a threat to your life, don't put it on instagram.

  104. Re:you people are idiots by BuckB · · Score: 1

    No, it's like going to a safe company and saying "hey - disable that mechanism for this safe that causes it to self destruct."

    "That's just like what we make other safe manufacturers do, and what we have safe deposit boxes do, and what we have for all telecom equipment. I know you're the best safe company in the world and we just have this little old court order and it's part of your responsibility for being an American company (and by the way, can you onshore some of those profits you've been squirreling away in China and perhaps think about hiring some Americans to build the safes)"

    Or, I suppose for the members of the Slashdot community, it's like saying "hey, Apple sucks and you're all a bunch of losers and we want to control your lives by screening every pixel on your monitor and we want to kick your dog while we go through your desk which will cause the end of civilization"