Slashdot Mirror


Slashdot Asks: Should FBI Reveal to Apple How to Unlock Terrorist's iPhone? (latimes.com)

After reports that the FBI managed to unlock an iPhone 5c belonging to one of the San Bernardino shooters without the help of Apple, Apple is now the one that needs the FBI's assistance. "The responsible thing for the government to do is privately disclose the vulnerability to Apple so they can continue hardening security on their devices," said Justin Olsson, product counsel at security software maker AVG Technologies. However, many experts in the field believe that the government isn't legally obligated to provide the information to Apple. As mentioned in Los Angeles Times, this creates a new ethical dilemma: Should tech companies be made aware of flaws in their products, or should law enforcement be able to deploy those bugs as crime-fighting tools?

286 comments

  1. Didn't by Anonymous Coward · · Score: 3, Insightful

    They didn't hack the phone - they're just trying to save face by saying they don't need Apple's help anymore.

    1. Re:Didn't by taustin · · Score: 3, Insightful

      And convince terrorists worldwide to use other - less secure - phones. It's not the best outcome for them, but it's better than getting handed their ass in the PR battle, like they were.

    2. Re:Didn't by sumdumass · · Score: 0, Troll

      Or Apple used a proxy to comply without betraying it's fan base.

    3. Re:Didn't by VernonNemitz · · Score: 5, Insightful

      Yeah, Apple is approaching the wrong party. That company in Israel found the flaw, and the FBI paid them to use it. Apple has so far been unwilling to encourage folks to expose bugs, by paying them, so....
      Logically, especially since it is well known that Apple has plenty of cash on-hand to buy things, Apple should buy the vulnerabililty, instead of expecting to get it for free from the Feds. How greedy do you think ordinary folks are willing to let Apple be, in such circumstances?

    4. Re:Didn't by Anonymous Coward · · Score: 0

      My thought too... FUD

    5. Re: Didn't by Anonymous Coward · · Score: 0

      Just patent the flaw. Then if anybody else uses it (including Apple) they are guilty of patent infringement and can be sued for loads of money. Source: http://www.anagram.com/jcrap/Volume_6/abramsonlayton.pdf

    6. Re: Didn't by meerling · · Score: 2

      They can't. They didn't create it.

    7. Re:Didn't by WinstonWolfIT · · Score: 0, Offtopic

      its

    8. Re:Didn't by mysidia · · Score: 0

      Apple has so far been unwilling to encourage folks to expose bugs, by paying them, so....

      Where 1 has been discovered; 100 lie in wait.

      I think Apple should stop trying to find the specific bug, and work on improving their code to address ALL Potential vulnerabilities.

      From what we understand, the device was fully encrypted, and someone was able to mod it to make it break-in-able....... Apple ought to know very well what elements of their architecture could be weak against that, and get changes to the design done to make all those classes of vulnerabilities unworkable.

    9. Re:Didn't by GrandCow · · Score: 1, Flamebait

      Apple has said from the start that the security on the phone in question was hackable, and that further generations include things like secure enclave that make the only possible means for hacking this particular phone obsolete.

      That's why the case was bullshit from the beginning. The FBI could give a fuck about this particular phone, they wanted a precedent on record that Apple had to write custom big brother software (and digitally sign it so it could be installed without wiping the phone, potentially even over the internet), so that future phones that are unhackable would be open to the government to snoop.

      --
      "Well kids, you tried your best, and you failed. The lesson is, never try." -Homer Simpson
    10. Re:Didn't by tlhIngan · · Score: 2

      Logically, especially since it is well known that Apple has plenty of cash on-hand to buy things, Apple should buy the vulnerabililty, instead of expecting to get it for free from the Feds. How greedy do you think ordinary folks are willing to let Apple be, in such circumstances?

      Well, you know how much iOS vulnerabilities go for? Bug bounties that are offered by Google, Microsoft and everyone else pale. $10K? peanuts. An iOS vulnerability sells for $1M. Yes, a million dollars. Hell, Android vulnerabilities go for $30K or less.

      Shoot, they offered 3 prizes of $1M each to break iOS - only one was collected.

      I suspect Apple will probably audit their code like they did after Heartbleed and found the "goto fail" bug.

    11. Re: Didn't by Anonymous Coward · · Score: 0

      I think they where trying to safe face off Apple that it was this easy and wanted tot set a precedent in the mean while.

    12. Re:Didn't by marcansoft · · Score: 5, Interesting

      Of course they hacked the phone.

      There is a very easy, very reasonable trick that is guaranteed to work to get the data out of that phone with minimal risk (assuming it has a 4-digit PIN). It's not a mistake, it's not a bug, it's not something anyone has to "discover". It's simply an attack outside the threat model that Apple used when designing that particular iPhone (and, with minor differences, all currently released iPhones). I have no doubt Apple knows full well it will work and knew it would work when they designed the phone (it's blatantly obvious, and Apple's security engineers aren't idiots) - protecting against it is just not trivial (it cannot be solved by software, it requires support hardware) so, to this date, they've chosen not to. In fact, they added a minor roadblock against it on newer phones (but only a minor one that can also be bypassed - because doing better is Hard(TM) and costs money), which demonstrates they are fully aware of it. I explained how it works here (search for "replay attack"). I'm not the first one to mention this approach.

      Making iPhone secure against all physical attacks is impossible. If your PIN is bruteforceable (as is the case here), then security relies on the PIN attempt counter. An attacker with physical possession of the phone can always find a way in. Apple just has to decide how much effort (and money) they want to put into making that harder. The current bar is at approximately the "a couple experienced hardware/software hackers and a couple thousand dollars in R&D costs" level. With some more money/effort they could raise it to the "a crazy dude like Chris Tarnovsky and a medium-budget silicon hacking lab" level. It's not going to get to the "noone will practically be able to do it" level without making the iPhone into a tamper-resistant hardware security module with physical defenses (i.e. not something likely to fit in your pocket).

      It still baffles me why everyone is so concerned about how the FBI got in, when we know an easy way in already.

    13. Re:Didn't by fastest+fascist · · Score: 2

      I've got my tinfoil hat on tight, so it's baseless speculation time: How do we know Apple didn't help them? They could have just done the court dance to keep up appearances, and help the Feds out on the sly. Win-win: Apple keeps their users happy and even gains extra points for standing up to the government, and they keep up good relations with the Feds.

    14. Re:Didn't by Anonymous Coward · · Score: 0

      Argghhhh! "couldn't give a fuck". Couldn't, couldn't, couldn't. If they could give a fuck then they at least gave some degree of fuckness!

      Seriously, when did you get so lazy that using the negative form of could with two additional letters and an apostrophe and taking no more than a tenth of a second longer to say, became a problem?

    15. Re:Didn't by Anonymous Coward · · Score: 0

      That's an interesting point. Here's a fun issue: Apple argued (correctly) that the government has no right to order them to do work they don't want to do. This alleged phone hack was done by another company. One wonders if the FBI will now try to defend this other company on the grounds of trade secrets or whatnot--rights after all are for people who support the government's position on everything.

      Yes, I know a lot of it hinges on what the contract between the FBI and the other company says about who owns what--then again, this nondisclosure crap has gone far enough, as the multiple Stingray cases continue to remind everyone. Nondisclosure in a government contract needs to be severely limited, and, far from being an investigative technique, parallel construction should be a felony.

    16. Re:Didn't by Anonymous Coward · · Score: 0

      I guess he could give a fuck.

    17. Re:Didn't by Lieutenant_Dan · · Score: 1

      I just wanted to say that your blog entry is outstanding and explains the replay scenario perfectly. Thank you for sharing.

      --
      Wearing pants should always be optional.
    18. Re: Didn't by Anonymous Coward · · Score: 0

      He might could...

    19. Re: Didn't by Anonymous Coward · · Score: 0

      Meh, I could care fewer...

    20. Re: Didn't by Mattcelt · · Score: 2

      Both the EU and US have first-to-file patent systems now. They don't have to create it first - they only have to patent it first.

      This is actually an interesting legal strategy. If someone were to patent a general method for, say, sql injection or a buffer overflow, they could theoretically sue anyone who used it. I wonder how that might play out.

    21. Re:Didn't by Anonymous Coward · · Score: 0

      Wow... For so much ego, you got some *very* basic facts wrong.

      We'll start with the most basic. You claimed the FBI wants custom firmware. That's incorrect. The FBI wanted a custom piece of *software*, which could be loaded and run *completely* RAM-resident, never written to *any* storage on the target iPhones(s).

      Why would the FBI want this rather than the 'custom firmware' you claimed? Simple. The moment the FBI writes anything to storage on the target iPhone(s), they've destroyed its value as evidence.

    22. Re:Didn't by Flea+of+Pain · · Score: 1

      Quick question...if the San Bernadino shooter had locked his own phone (by intentionally password failing 10 times) before he left, could anyone get into it?

      --
      Do not argue with an idiot. He will drag you down to his level and beat you with experience.
    23. Re:Didn't by Coren22 · · Score: 1

      The "bug" was that the key was not stored in a TPM like device. It was already corrected in the newer iPhone 6 phones.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    24. Re:Didn't by DWDuck · · Score: 1

      I think the FBI messed up on several levels here. When Apple said (not publicly) they wouldn't make the back door the FBI should have found another way in and not told us or Apple about it. Apple would infer that they figured out another way in when they told all of us they got in, but there would have been no big publicity thing that - it seems to me - the FBI lost.

      Also, before the announcement about hiring the Israelis to do it for $15K I had been placing the cost to break into an iPhone around $60K to $100K to decap the chips and read stuff out with an electron microscope. I still wonder if my estimate is about right for the decap method and the Israelis just know a shortcut that makes it cheaper.

    25. Re:Didn't by marcansoft · · Score: 1

      Assuming the "Erase data after 10 failed passcode attempts" option was enabled, no.

    26. Re:Didn't by marcansoft · · Score: 1

      RAM-resident firmware is still firmware. Ever used a Linux machine? Ever looked in /lib/firmware? All of those are firmware files to be loaded into RAM on various devices that require RAM-resident firmware to run.

      Originally I actually used the words software and firmware interchangeably in the article, because the distinction is pretty much moot with devices like the iPhone which blur the line between embedded devices and general purpose computers, but I changed them all to "firmware" for consistency, to avoid confusing someone who doesn't understand the lack of distinction in this context. The old meaning of the term "firmware" in the sense of "something programmed into a ROM" stopped applying once we got devices with re-writable memory like EEPROM and Flash. Now it just means "software for an embedded device" (usually excluding things like apps and other add-ons). It doesn't matter what kind of memory it is stored on. There are devices out there that download their firmware from the Internet every time they boot up. It's still firmware.

      If you want to be technically pedantic, what the FBI wants is a custom signed restore ramdisk (and associated iBEC and iBSS to boot it) that can be loaded from DFU mode. My article deliberately avoids going into pointless minutiae about the iPhone's boot process to keep it accessible to a wider audience.

    27. Re:Didn't by Anonymous Coward · · Score: 1

      To clarify, the data would still be on the drive, encrypted. However, the encryption key (which is unlocked/decrypted by the PIN) would have been changed/deleted. So you would then have to guess at the AES key to decrypt the phone.

      This attack, while possible, isn't really feasible. For all intents and purposes, a 'cryptographic erase', which is the only erase that can be done quickly on tons of data, is an actual erase.

    28. Re: Didn't by Anonymous Coward · · Score: 0

      Not in the EU... unless for very rare occurrences, code isn't patentable since it's regarded as math. But it's copyrightable.

    29. Re: Didn't by Anonymous Coward · · Score: 0

      "First to file" doesn't mean what you think it does. STFU, idiot.

    30. Re: Didn't by Hognoxious · · Score: 1

      You are Joe_Dragon AICMFP.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    31. Re:Didn't by marcansoft · · Score: 1

      Actually, the encryption key that would be erased is the data partition's full disk encryption key (which is not unlocked/decrypted by the PIN, it's unlocked/decrypted internally using the phone's UID key). So even though your PIN only protects user data at a higher level using a separate key (not metadata, and not all files on the phone), once your 10 attempts are gone, the entire data partition's lower level FDE key is wiped and all of it, data and metadata, is as good as gone.

      Personally, I think it's perfectly fair to say that a key-recovery attack on 256-bit AES is impossible. Modulo future cryptographic breaks (which are unpredictable), with currently known attacks, you need > 2^254 operations to perform key recovery on 256-bit AES. Assuming that happens at room temperature, Landauer's principle and some back of the envelope math says you'd need the entire power output of every single star in the Milky Way for about as long as the age of the Universe just to count that high, nevermind actually try an AES decryption operation. At some point it's just silly to keep talking about things like brute force being "possible but impractical" for certain key sizes. It's impossible, saying otherwise will just confuse people who don't understand the ridiculousness of the numbers involved.

    32. Re:Didn't by Anonymous Coward · · Score: 0

      Or the NSA slipped a back door into the hardware and/or software allowing them access without needing the encryption key.

      It's also quite possible the NSA purposefully created a (known only to them) weakness in AES and how it generates "random" numbers to greatly reduce the key space they would need to search.

      Snowden basically says as much in his leaks and it's likely the FBI was only looking for a parallel reconstruction so they can publicly use the information they've gotten without admitting NSA back doors.

      Or the FBI doesn't communicate at all with the NSA, which given how dysfunctional our government is,wouldn't be a big surprise either.

    33. Re:Didn't by Anonymous Coward · · Score: 0

      Currently this is true, but with the oncoming invention and use of quantum computing, a key-recovery attack on 256-bit AES will become trivial.

      I'm curious though, why would you just erase the key after 10 attempts. Surely they could just add a full 13-pass erase of all the data, and reset the phone back to factory settings. That would prove very hard to deal with, basically impossible. The key would be gone, the encrypted data would be gone, you'd basically have a factory settings phone, as if it just came off the line.

      Any legit terrorist would KNOW to destroy their data before an attack and use burner phones with simple anonymous pre-determined strike messaging setup between the participants. I just thought of that in five minutes, surely I'm not some terrorist genius. And you surely would avoid any services that left finger-prints in the cloud.

    34. Re:Didn't by Anonymous Coward · · Score: 0

      I agree. Someone probably figured out the unlock and was able to enter the phone normally.

    35. Re:Didn't by marcansoft · · Score: 1

      Or the NSA slipped a back door into the hardware and/or software allowing them access without needing the encryption key.

      Unlikely, since Apple designed the chip and it's not manufactured in the US, and Apple controls the software end to end (it's signed).

      It's also quite possible the NSA purposefully created a (known only to them) weakness in AES and how it generates "random" numbers to greatly reduce the key space they would need to search.

      Unlikely, since AES neé Rijndael was designed by two Belgian cryptographers, has no "magic" unexplained numbers (unlike the Dual-EC-DRBG "random" number generator that we know the NSA backdoored, or the ECDSA curves which we suspect they might have), and has been extensively cryptanalyzed. AES doesn't "generate" any random numbers. It's a block cipher.

      The NSA isn't some all-powerful entity. They're a bunch of sneaky bastards, but assuming they have backdoors in anything and everything is excessive application of a tinfoil hat. Snowden said so himself: good crypto works. And Apple are a bunch of paranoid bastards.

    36. Re:Didn't by marcansoft · · Score: 1

      Currently this is true, but with the oncoming invention and use of quantum computing, a key-recovery attack on 256-bit AES will become trivial.

      Nope. Even assuming practical QC is coming, it only halves the practical key size for symmetric ciphers. 256-bit AES becomes as strong as 128-bit AES. You don't need a Universe worth of time then, just the entire power output of the Sun for a few seconds (under impossibly ideal circumstances). Still not going to happen. And that's assuming Landauer's principle applies the same way to qubits, which I'm not even sure it does - qubits might be more expensive to handle energy-wise.

      QC breaks (currently in use) asymmetric crypto. It doesn't break symmetric crypto, only weakens it.

      Even with 128-bit keys, keep in mind that the largest symmetric key ever broken was a 64-bit key, and that was broken by a large distributed computing project (70k hosts). For QC to break a single 128-bit crypto key (64-bit difficulty in QC), we'd need to have quantum computing power equivalent to that. That's probably half a century away - QC is in its absolute infancy. And that's for a single key. By then we'll all be using 256-bit crypto for everything and it'll be completely moot. I use 128-bit FDE at home for my most important data and I don't feel the least bit insecure. I might switch to 256-bit in a couple years when I upgrade my boxes again and then I'll be set for eternity (unless some catastrophic flaw is discovered in AES).

      I'm curious though, why would you just erase the key after 10 attempts. Surely they could just add a full 13-pass erase of all the data, and reset the phone back to factory settings.

      The battery wouldn't last long enough for a 13-pass erase of the data. The whole point of FDE with an erasable key is that if you erase the key you don't have to do an actual data wipe. In practice, wiping the key is as good as wiping the data. Breaking that kind of crypto is outside the threat model, and if you can do that, then there are many other things you can do that would break security in other ways. Assuming an attacker can't break AES-256 is perfectly reasonable.

    37. Re: Didn't by david_thornley · · Score: 1

      We've got lots of prior art for buffer overflows and SQL injection. "First-to-file" means that neither patent office nor the courts have to determine who invented something first. It doesn't mean we don't look at prior art.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    38. Re: Didn't by Anonymous Coward · · Score: 0

      Wtf are you talking about? An Apple audit didn't reveal gotofail bug, it was reported and took months to resolve for somehow so trivial.

      This "patch error" is pretty much impossible to do without being incompetent to the extreme. It had to be intentional.

    39. Re:Didn't by exomondo · · Score: 1

      It's not the best outcome for them, but it's better than getting handed their ass in the PR battle, like they were.

      Yes because we all know if there's one thing the FBI fears it's bad PR.

    40. Re:Didn't by wvmarle · · Score: 1

      Those iOS vulnerabilities may not be what the FBI is looking for.

      What the FBI wants, is a total bypass of the security of a phone you have in your hands, but don't have the password for.

      What a criminal wants, is a way to snoop on a phone after it has been unlocked already by the user. They want is a remote access vulnerability to be able to install keyloggers, that kind of thing. To do so, of course you need the phone unlocked - well, the average user is doing that many times a day, so it's a matter of waiting for the user to have their phone unlocked. Having them open a link in their e-mail will do, as that moment the phone is normally unlocked.

      Most criminals will not be too interested in the information on a random locked phone. They don't care about specific phones, they care about them all and just hope to get into some of them to do their business. An unused phone (like that from a dead person) is not usually that interesting for a criminal.

    41. Re:Didn't by wvmarle · · Score: 1

      If he really wanted to make sure that phone could not be accessed, I suppose he'd use a different method. At least I know I would.

      Take a hammer, smash it to pieces, and dump in a random public trash bin. Or even down a storm drain. This makes it very unlikely to be found, and if found, nearly impossible to have any data recovered from the parts. No undelete option that can undo that!

      Instead, for whatever reason, he didn't care enough about the phone or the information it contained to destroy it.

    42. Re: Didn't by Anonymous Coward · · Score: 0

      It's like when people (I.e Americans) say "could care less" when they mean "couldn't care less." We British know the difference.
      I once asked an American why he and his fellow Americans don't speak the queen's English. He replied: "Because we ain't queens."

    43. Re: Didn't by Mattcelt · · Score: 1

      Agreed, absolutely. But patents must be original and non-obvious, both criteria that should be easily met by having it apply to your own software. Prior art is often cited within new patents, if only to show how yours is different. So while you're right, you couldn't patent a generic sql vulnerability, I would think it fairly easy to file one specifically for your own implementation.

    44. Re:Didn't by WinstonWolfIT · · Score: 1

      Bite me faggots

    45. Re:Didn't by Anonymous Coward · · Score: 0

      >Unlikely, since Apple designed the chip and it's not manufactured in the US, and Apple controls the software end to end (it's signed).

      This actually makes it much easier for the NSA to get their hands on since they can now work outside of US law.

      NSA has been known to steal private encryption keys: http://techcrunch.com/2015/02/19/the-nsa-reportedly-stole-millions-of-sim-encryption-keys-to-gather-private-data/

      I find it unlikely they would have any problems stealing private keys from Apple.

      They also have developed ways to steal data from iPhones/iPads requiring physical access, but remote access was (is) on their list of stuff to do:
      https://www.schneier.com/blog/archives/2014/02/dropoutjeep_nsa.html

    46. Re: Didn't by kaatochacha · · Score: 1

      Technically, you don't speak the Queens english either. Unless you sound exactly like her.

    47. Re:Didn't by goarilla · · Score: 1

      I just wanted to say that your blog entry is outstanding and explains the replay scenario perfectly. Thank you for sharing.

      Seconded, thank you for clearing up a lot of questions I had and more.
      I've linked to it on other local techsites.

  2. Obviously the FBI should keep quiet. by tlambert · · Score: 1

    Obviously the FBI should keep quiet.

    That way they can hack the phones of government officials with impunity.

    1. Re:Obviously the FBI should keep quiet. by LWATCDR · · Score: 1

      Actually I believe that they had a court order so this did follow all legal requirements for a search.
      Yea the FBI will not say a word.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    2. Re:Obviously the FBI should keep quiet. by ColdWetDog · · Score: 2

      Sure, if said government officials will hand over the phone to be disassembled. Recall that this particular hack is likely NAND mirroring. That requires removing the CPU. Not something you would tend to do in bulk.

      --
      Faster! Faster! Faster would be better!
    3. Re:Obviously the FBI should keep quiet. by peragrin · · Score: 2

      Not true the FBI did not ever have a warrant for the data.

      The FBI had permission.

      Example, a police officer knocks on your door. You invite him inside. The officer sees your heroin needle. The officer can arrest you, because you gave him permission to search your home.

      Or

      A police officer knocks on your door. You kerp him outside, you tell the officer to come back with a warrant. The officer suspects from the conversation you have drugs, he gets a court order to search your home.

      I really wish everyone understood the difference. It matters a lot.

      The phone was owned by the county of San berdino. The county gave the FBI permission to access the phone .

      The only court order was the order trying to force apple to help unlock the phone.

      Now the FBI should be showing the contents of the phone to the judge, so the judge can determine the status of the cyber pathogen. ///s

      --
      i thought once I was found, but it was only a dream.
    4. Re:Obviously the FBI should keep quiet. by AHuxley · · Score: 1

      Re "should keep quiet."
      The US gov had that hidden win with PRISM and ICREACH https://en.wikipedia.org/wiki/...
      The cost of parallel construction was not great but the risk of a court of expert teams finally asking questions about the origins of a case was not always risk free.
      Hidden cell phone tracking, voice prints and decryption get decades of easy access to start to build a public case.
      The press, lawyers, tech experts in the US could slowly see that not all cases got built on informants, ex convicts, traditional undercover or "luck". Long term computer and cell phone tracking built the case or was the origin of the case without any clear public court support as to just how that case started.

      Working back to make parallel construction seem to work in a public court is a risk with outside hardware costs been seen at a local government level or hardware in play (mass buying and use of stingrays, dirtboxes)
      The easy way out was to conscript a company into making encryption useless and giving the US gov, its workers, contractors, ex staff, former workers and others the masterkey to a generation of cell phones. The phone then becomes the court friendly informant and legal teams can ask all they want about how a case was built.
      Its two long term views, the NSA and GCHQ that hidden collect it all is the only secure long term goal, to keep interesting people trusting their decrypted cell phones, weak encryption on computers and poor quality OS's. Just never tell any court. vs
      Local city, state and federal task forces view that quick, in public court wins bring budget growth, more expert staff and political glory.
      The wider public is so addicted to digital technology that they cannot stop using devices that are gov ready live mics, tracking beacons, collect voice prints and are key loggers.
      With a cell phone been seen as the main aspect of building a case in public court will interesting people change their digital habits?

      The other option is to secure parallel construction by freezing funds to ensure nobody can ever afford to question the origins of their case.
      With all funds frozen, no legal team, no real experts to trace back the paperwork, just a gov appointed lawyer that will pass on the gov deal or do their best in public court with no experts or funding.
      Or just conscript a brand to provide the data to the gov on all phones and keep on selling phones.

      --
      Domestic spying is now "Benign Information Gathering"
    5. Re:Obviously the FBI should keep quiet. by mysidia · · Score: 1

      Example, a police officer knocks on your door. You invite him inside. The officer sees your heroin needle. The officer can arrest you, because you gave him permission to search your home.

      OK, so is it possible now that Apple will file a lawsuit against San Bernadino county for soliciting and giving the FBI permission to conduct activities such as reverse-engineering or disassembly which are prohibited by the software EULA?

      What happens if you're at a neighbor's house, and you let the officer in (without authorization from the neighbor), and the officer happens to see the neighbor's needle?

    6. Re:Obviously the FBI should keep quiet. by Anonymous Coward · · Score: 0

      The law, conveniently for them, treats that as permission too.

      Same with cars, a passenger can (bewilderingly) consent to a search of a car that they're riding in, even if they don't own it.

    7. Re:Obviously the FBI should keep quiet. by ripvlan · · Score: 1

      I don't think it matters. Apple must know that the phone can be broken into - and now have a large hint it is possible.

      But I don't believe it is the gov't who needs to tell Apple this - Apple could hire the same company and ask them how they did it.

      From an ethical hacking point of view - maybe the gov't does have a responsibility to report a vulnerability to the vendor if the attack is "simple" and poses a clear danger to the security of Americans. I believe it is a balancing act with two possibilities.

      If for example, the attack allows financial theft from consumers (bank wires or credit card) to occur the FBI remotely - then it should be reported. This is one defined Role of the FBI - protect people. However, if the attack is esoteric that allows access to encrypted data - and also requires the phone to be dismantled into individual nuts & bolts.... ehh.. it isn't a remote attack that would affect "millions." Rather just one person at a time with a lot of work.

    8. Re:Obviously the FBI should keep quiet. by LWATCDR · · Score: 1

      I was not aware of that permission was given.
      Seems even worse for Apple then. The owner of the device gave permission and Apple still refused to help. There was zero privacy issue in that case.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    9. Re: Obviously the FBI should keep quiet. by Anonymous Coward · · Score: 0

      So you're admitting that i devices ate never yours even if you bought it with your own money?

      You must like DRM on your content a lot.

    10. Re:Obviously the FBI should keep quiet. by Anonymous Coward · · Score: 0

      bonus points if they use the anti-circumvention laws from the DMCA!

    11. Re:Obviously the FBI should keep quiet. by david_thornley · · Score: 1

      Apple refused to create a tool that would defeat iPhone security to break into one phone. The FBI was perfectly within its rights to ask for Apple to cooperate. The question is how much the FBI can tell them to do in this cooperation. With the right legalities satisfied, the FBI can ask you for information you have available about me, and you have to turn it over. Suppose the FBI wants more information than you have. What should they be able to make you do?

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    12. Re:Obviously the FBI should keep quiet. by Number10 · · Score: 1

      (commenting here since previous discussion is now archived...)
      It looks like you may have predicted the latest FBI maneuver here. The FBI is now claiming to have paid a professional hacker group for the technique, not Cellebrite. Maybe they realized the possible legal exposure after reading your comments? The FBI is looking awfully incompetent when armchair lawyers are a step ahead of them.

  3. TAKE THE FBI TO COURT by Anonymous Coward · · Score: 0

    Eastern District of Texas for the win!

    1. Re: TAKE THE FBI TO COURT by Anonymous Coward · · Score: 0

      A DMCA violation charge against the Director would be good start. Then a conspiracy to commit human trafficking would be next

    2. Re: TAKE THE FBI TO COURT by TroII · · Score: 1

      The text of the DMCA explicitly exempts law enforcement. You didn't really think the rules would apply to the rulers, did you?

    3. Re: TAKE THE FBI TO COURT by scdeimos · · Score: 1

      The text of the DMCA explicitly exempts law enforcement.

      Even if it didn't the FBI didn't do the cracking - they hired an Israeli company to do the cracking and Israel never signed on for DMCA.

    4. Re: TAKE THE FBI TO COURT by Anonymous Coward · · Score: 0

      and Israel never signed on for DMCA

      If they want to do business within the US border they still need to follow US laws.

    5. Re: TAKE THE FBI TO COURT by kwbauer · · Score: 1

      And a LEO contractor is LEO. If you disagree then please explain how "the government" does anything if the people it is paying to do things aren't allowed to do government things. It's not like the government is an actual being capable of doing anything; it is an organization of people.

      Saying that LEO contractors aren't LEO and are therefore not bound by the DMCA is also saying that LEO contractors are not LEO and are not bound by warrants. It is turtles all the way down and LEO cannot constitutionally and legally buy its way out of the stack.

  4. i thought every one already knew by zlives · · Score: 1

    0000

    1. Re:i thought every one already knew by Anonymous Coward · · Score: 0

      oops i meant
      1111
      oops 1234

    2. Re:i thought every one already knew by zlives · · Score: 0

      aw crap.... ummm yes we were able to unlock it successfully

    3. Re:i thought every one already knew by Anonymous Coward · · Score: 0

      Note to self.... change luggage lock combination too.

    4. Re:i thought every one already knew by Anonymous Coward · · Score: 0

      .. unfortunately we didn't find anything useful on it. Yeah, that's not cool.

    5. Re:i thought every one already knew by Anonymous Coward · · Score: 0

      No matter, that's easily fixed

    6. Re:i thought every one already knew by maharvey · · Score: 0

      Hey paladin... squirrel!

  5. sure they should... by turkeydance · · Score: 1

    the FBI says to Apple: "we paid XYZ to do it". FBI off the hook, and XYZ company charges Apple $2B for the answer. profit!

  6. DMCA? by BuckaBooBob · · Score: 5, Insightful

    Shouldn't Apple be chasing after them for circumventing the encryption and digital rights management system on the phone? Its what they do to people coming up with jailbreaks... why would this be diffrent?

    --
    Who needs WiFi when we can have Packet Over Sheep! http://datacomm.org/PoS-InternetDraft.txt
    1. Re:DMCA? by zlives · · Score: 4, Funny

      because its not illegal when the president does it.

    2. Re:DMCA? by Duhfus · · Score: 4, Informative

      No, DMCA has exceptions for law enforcement.

    3. Re:DMCA? by Anonymous Coward · · Score: 0

      Because the DCMA contains a law enforcement exception, of course.

      Surely you don't expect the Government to abide by the same laws forced on us, do you?

    4. Re:DMCA? by Anonymous Coward · · Score: 0

      I doubt they could succeed in this manner. Regardless of what the DMCA says, there's the principle of rex non potest paccare, translated roughly to the King can do no wrong. It's not codified in US law anywhere, but this is the legal doctrine of sovereign immunity. I don't see any exception to sovereign immunity that would allow Apple to succeed in bringing such a suit against the US government. The only way this would work is for Congress to specifically allow such a lawsuit, which seems highly unlikely.

    5. Re:DMCA? by macs4all · · Score: 1

      Shouldn't Apple be chasing after them for circumventing the encryption and digital rights management system on the phone? Its what they do to people coming up with jailbreaks... why would this be diffrent?

      I was thinking about that federal law about "Unauthorized Access to a computer" and/or the "circumventing security measures" law. Both the FBI and/or the supposed "hackers" are guilty of these felonies, period.

      And before you say "Court Order", I believe it was just a PROPOSED Order; I don't think it ever became a real Order. And besides, even a Court can't enter an Order to Break the Law...

    6. Re:DMCA? by Anonymous Coward · · Score: 0

      Do those exceptions apply when you aren't law enforcement, but your customers are? Apple doesn't have to hit back at the FBI.

    7. Re:DMCA? by macs4all · · Score: 2

      I doubt they could succeed in this manner. Regardless of what the DMCA says, there's the principle of rex non potest paccare, translated roughly to the King can do no wrong. It's not codified in US law anywhere, but this is the legal doctrine of sovereign immunity. I don't see any exception to sovereign immunity that would allow Apple to succeed in bringing such a suit against the US government. The only way this would work is for Congress to specifically allow such a lawsuit, which seems highly unlikely.

      Fine. But what about the NON governmental agency that allegedly did the hacking? I'm not at all sure they inherit that bogus Sovereign Immunity, especially since there was never actually a Court Order, only a Proposed Order.

    8. Re:DMCA? by Anonymous Coward · · Score: 0

      You tried being funny or sarcastic, but you were accidentally correct.

    9. Re:DMCA? by aliquis · · Score: 1

      because its not illegal when the president does it.

      Say who and what army?!

    10. Re:DMCA? by Anonymous Coward · · Score: 1

      Do those exceptions apply when you aren't law enforcement, but your customers are? Apple doesn't have to hit back at the FBI.

      I'm pretty sure Israeli courts can be relied on to exonerate Israeli companies for doing something illegal in the name of defeating the threat of international Islamic terror just like they routinely exonerate Israeli soldiers for murdering civilians on the battlefield.

    11. Re:DMCA? by Anonymous Coward · · Score: 0

      Do those exceptions apply when you aren't law enforcement, but your customers are? Apple doesn't have to hit back at the FBI.

      If a private company working for themselves or a private customer does it, then the exception doesn't apply since there is no law enforcement involved. If a private company or person does it at the direction of law enforcement, then they are an agent of law enforcement and share the exemption. If someone does it to help law enforcement without law enforcement having requested it, then the private party broke the law. That last one gets argued at times (i.e. as a defense) when people claim that law enforcement encouraged them in some way without directly asking or engaging the party.

    12. Re:DMCA? by Anonymous Coward · · Score: 0

      because its not illegal when the president does it.

      Say who and what army?!

      The president and the US army.

      Do you have anything to counter with?

    13. Re:DMCA? by sumdumass · · Score: 1

      That would essentially make them their agents. I don't mean it like an actual FBI agent but someone representing their interest which technically makes them the same.

      http://legal-dictionary.thefre...

    14. Re:DMCA? by Anonymous Coward · · Score: 0

      Says who? Says me and everyone who works with me. (When's lunch?)

    15. Re:DMCA? by Etherwalk · · Score: 1

      I was thinking about that federal law about "Unauthorized Access to a computer" and/or the "circumventing security measures" law. Both the FBI and/or the supposed "hackers" are guilty of these felonies, period.

      Be specific.

      Laws often have exceptions for law enforcement, and even when they don't, prosecutors have a massive amount of discretion in who they prosecute.

      It turns out the FBI is allowed to do a lot of things we would not want private citizens to do. Like running their own heavily armed hostage rescue team.

      Realistically, this is a balancing question--needs of the state vs. privacy, for a relatively old phone that will be out of circulation in a few years anyway. So it's not terribly important whether the hack is shared either way. Whether the next hack is shared is more of an issue.

    16. Re:DMCA? by Anonymous Coward · · Score: 0

      Uh, where do you get the notion that Apple goes after jailbreakers with the DMCA? I don't see that happening anywhere.

    17. Re:DMCA? by Anonymous Coward · · Score: 0

      I don't think so. See this Washington Post article for some prior history of derivative sovereign immunity and related matters. Generally speaking, if a contractor is doing something authorized by the government and they don't exceed the authorization, they probably have immunity. Unless Cellebrite did something not authorized by the government, they probably can't be sued successfully. If the FBI acted within their powers granted by Congress, and searching the terrorist's phone is clearly within these powers, they should have immunity. I don't think there's any way to successfully bring a lawsuit against either the federal government or against Cellebrite.

    18. Re:DMCA? by Anonymous Coward · · Score: 0

      "period" belongs to spoken language. In written language there is a symbol for it.

    19. Re:DMCA? by zlives · · Score: 1

      the courts, citing sovereign immunity

      Nixon must be rolling in his grave.

    20. Re:DMCA? by mark-t · · Score: 2

      Because the DMCA explicitly "does not prohibit any lawfully authorized investigative, protective, information security, or intelligence activity of an officer, agent, or employee of the United States, a State, or a political subdivision of a State, or a person acting pursuant to a contract with the United States, a State, or a political subdivision of a State."

    21. Re:DMCA? by LynnwoodRooster · · Score: 2

      Well, first it was Eric Holder. But now Loretta Lynch says so... Awfully hard to prosecute when the Justice Department acts like the political enforcement arm of the Administration rather than, well, an actual Department of Justice.

      --
      Browsing at +1 - no ACs, I ignore their posts. So refreshing!
    22. Re:DMCA? by mark-t · · Score: 1

      Yes, those exceptions apply even when you aren't law enforcement, but only if you are acting pursuant to a contract that you have with either law enforcement or the government.

    23. Re: DMCA? by Anonymous Coward · · Score: 0

      The owner of the device (the county) gave the fbi permission to search it.

    24. Re:DMCA? by pixelpusher220 · · Score: 1

      I believe he has the united militia of unoccupied wilderness refuges...

      --
      People in cars cause accidents....accidents in cars cause people :-D
    25. Re:DMCA? by swb · · Score: 1

      It turns out the FBI is allowed to do a lot of things we would not want private citizens to do. Like running their own heavily armed hostage rescue team.

      I think you could make a case for a private armed hostage rescue team, and I would guess that such an entity has existed for a long time, whether it was the Pinkertons or something like Blackwater.

      Arguably it would be preferable to have the police handle a kidnapping rescue, but you can probably invent circumstances where involving the police didn't work somehow -- expediency, corruption of local law enforcement, some kind of overseas situation.

      There's obviously a huge legal minefield here when you get into the use or application of deadly force, but we already allow all manner of armed private security and bounty hunters.

    26. Re: DMCA? by Anonymous Coward · · Score: 0

      I think the Nixon-esque was deliberate.

    27. Re:DMCA? by macs4all · · Score: 1

      "period" belongs to spoken language. In written language there is a symbol for it.

      You have a weak grasp on the English language, period.

    28. Re:DMCA? by Anonymous Coward · · Score: 0

      The DMCA wouldn't apply to the FBI, since they didn't crack it, but to the third-party, who supplied the crack.

    29. Re:DMCA? by Onthax · · Score: 1

      I wonder about this, i think the DMCA is still relevant, since they could pursue the 3rd party company that did the hack, and compel the FBI to reveal who that was?

    30. Re:DMCA? by Anonymous Coward · · Score: 0

      Poor butthurt baby! Teh police can go faster than the speed limit to catch your speeding ass. Wah! Grow up.

    31. Re:DMCA? by Anonymous Coward · · Score: 0

      >> murdering civilians on the battlefield
      Of cause any palestinian is "civilian", no matter whether he hold gun or RPG. After all, they don't have an army, right? Now, even by your fscked up definition, there's no "civilians" on the battlefield. That's why it's called "battlefield".

    32. Re: DMCA? by Anonymous Coward · · Score: 0

      I think the Nixon-esque was deliberate.

      Yes and Nixon was correct. Basically the rule of power is that as president you can violate any law as long as you have the support of more than 1/3 of the Senate and a majority of the Supreme Court. Note: that means that if the Supreme Court has previously ruled something unconstitutional then the president is politically on thin ice.

    33. Re:DMCA? by Anonymous Coward · · Score: 0

      So... By your logic, the 5 year-old, cowering in her home as bullets fly outside, and artillery shells level the house next door is... What? A soldier? An 'unlawful combatant'? A terrorist?

      Civilians *often* exist in, on, and around battlefields. *Especially* when you're talking about battlefields which are inside towns and cities.

    34. Re:DMCA? by Anonymous Coward · · Score: 0

      And they can go faster than the limit when in need of coffee, end of shift, just wanting to have fun or especially when craving donuts...

    35. Re:DMCA? by kwbauer · · Score: 1

      As I noted above, yes, the exceptions cover you if you are contracted by law enforcement to act on behalf of law enforcement because you are then law enforcement while acting under the terms of the contract.

      What question would you ask if law enforcement simply hired some guy off the street to break into houses and search them for evidence if no judge were willing to sign a search warrant? Do you really think law enforcement would even bother with search warrants if all they had to do was contract the search out?

    36. Re:DMCA? by kwbauer · · Score: 1

      Technically, no they cannot. I've never seen a speeding law (state or local) that exempts LEO except in actual emergency response situations. I even had a teacher tell me about how his neighbor (a local PD officer) went speeding past on the way home and he talked to the guy and the officer wrote himself a ticket and did end up paying the fine. I was told by my drivers ed instructor that ambulances are technically never allowed to violate the speed limit but nobody cares up until they get involved in an accident and then they do get in all kinds of trouble if they were speeding or running stop signs/lights and that was the cause of the accident.

      In reality, do they get away with stuff because they turn a blind eye to each other? Yes.

    37. Re:DMCA? by kwbauer · · Score: 1

      Spend 2 seconds thinking before spending 10 seconds writing.

      Samuel Clemens expressed the concept in less flattering terms.

    38. Re:DMCA? by david_thornley · · Score: 1

      I've never seen an ambulance or fire truck speeding. Around here, they all seem to go the limit at most, using the lights and siren and horn to avoid having to go slower than the limit.

      Ever been in an ambulance as a patient? When I was, the ride was uncomfortable, as I couldn't brace myself against anything and got pushed around inside the straps. (Of course, what was really uncomfortable was the heart attack.) I'd rather not have an ambulance driver pretending to be a race driver.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    39. Re:DMCA? by Anonymous Coward · · Score: 0

      what proposed order? there was a court order, it just wasn't enforced as in the end it wasn't needed. and the NON-American company inherited the not bogus at all but in fact the original intention of sovereign Immunity from the FBI as they were working as their agents.

      I mean really? are you THAT much of a fanboy?

    40. Re:DMCA? by kwbauer · · Score: 1

      No, I am fortunate to have never been in an ambulance but I have seen them speeding many times. I have seen them gaining on me as I drive down the road when I am at or slightly above the speed limit and they gain ground very quickly before they are to the point where I need to pull over. I have also seen them stop completely before entering intersections when the light is against them and at stop signs when the cross streets are not visible for quite a distance. I have also seen them blow right through stop signs out in the country when it is possible to a half mile or so down the cross roads.

  7. It's expensive, that's why they asked Apple by Anonymous Coward · · Score: 0

    It's expensive and specialised equipment and time consuming, to perform the steps the crackers performed. They had to mirror the NAND, or stream the drives contents and crack the encrypt key. It's not unknown science, its just laborious and takes an expert. Apple knows how to do it.

  8. The "bad guys" want to know too by sgrover · · Score: 2

    If the FBI does not reveal the hack so they can hack other phones, well that means the bad guys can also continue using that hack. After all we know that there are now at least 3 organizations who can access a locked iPhone 5c without the owner's password.

    1. Re:The "bad guys" want to know too by Black+Parrot · · Score: 2

      They're probably living in a fantasy world where the Good Guys(tm) have secure encryptions, but anyone else can be cracked.

      How that's quite supposed to work, I cannot guess.

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re:The "bad guys" want to know too by bigfinger76 · · Score: 1

      We know nothing of the sort. We can assume Apple can do so, but with no further evidence besides an official statement from the FBI, there is no reason to believe that any other organization has such capability.

  9. Nope, Due Process. by MobileTatsu-NJG · · Score: 3, Informative

    ...or should law enforcement be able to deploy those bugs as crime-fighting tools?

    Um, no, law enforcement doesn't get to skirt around due-process just because it's inconvenient.

    --

    "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    1. Re:Nope, Due Process. by Black+Parrot · · Score: 1

      ...or should law enforcement be able to deploy those bugs as crime-fighting tools?

      Um, no, law enforcement doesn't get to skirt around due-process just because it's inconvenient.

      My, aren't *you* old fashioned!

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re:Nope, Due Process. by MobileTatsu-NJG · · Score: 1

      Hah yep. This case in particular irks me because if I were to take an agent's phone and use an exploit to get into their personal info (not even official bidness data, I'm talking just pulling out a photo of his cat or something) I'd end up in a PMITA prison.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    3. Re:Nope, Due Process. by Tony+Isaac · · Score: 1

      Due process only applies to findings of guilt in court. It does not cover investigative actions by law enforcement, that don't lead to prosecution. That's why governments can get away with things like Stinger fake cell towers--they can never use the evidence from these devices in court, but they certainly can use them to gather information about their targets.

  10. Why ask? by Anonymous Coward · · Score: 0

    Just file a Freedom of Information Act request.

    Our tax dollars paid for this hack.

    1. Re:Why ask? by Anonymous Coward · · Score: 0

      Just file a Freedom of Information Act request.

      I guarantee you the government will push back claiming the methods are classified.

  11. What makes you think they don't already know? by kheldan · · Score: 1

    Apple probably already knows, or could know in a day or less, and in either case the next version of the iPhone will probably be made immune to it.

    --
    Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
  12. just pay the company by Anonymous Coward · · Score: 0

    Surely for $15000 Apple could just go to the people that did the work for the FBI and get them to demonstrate it. Probably cheaper than the lawyer fees it would take to send a letter to the FBI.

  13. We Should Just Bend Over And Take It. by zenlessyank · · Score: 4, Insightful

    O wait....we have already bent over. It is too late folks. No one cares what you think anymore. The system is established. Only blood will wash it away. Enjoy.

    1. Re: We Should Just Bend Over And Take It. by Anonymous Coward · · Score: 0

      Oh, you mean like the blood and gray matter splattered on the walls in San Bernardino? That blood?

    2. Re: We Should Just Bend Over And Take It. by Anonymous Coward · · Score: 0

      I think that's what he means, yes.

  14. Let them keep it secret (see how long that lasts) by Anonymous Coward · · Score: 0

    This should be a good test if the Apple argument holds water, that such a solution could never be kept out of the hands of hacker criminals. See how long before the vulnerability is discovered while the FBI attempts to protect it.

  15. Of course not by Anonymous Coward · · Score: 0

    The FBI isn't Apple's QA department. If Apple wants people to do security research for them, they can damn well pay them for their efforts.

  16. No, they should not by Anonymous Coward · · Score: 0

    Apple refused to assist the FBI on this case, so why should the FBI turn around and help Apple out? Turn about fair play.

  17. this is not unknown by supernova87a · · Score: 5, Informative

    Well, actually, we don't need to leave it to a bunch of internet commenters to decide this issue -- there is an actual process described as "equities review" which the Executive Branch is responsible for, when a cyber vulnerability is known, but not yet disclosed to the public:

    https://www.whitehouse.gov/blo...>href=https://www.whitehouse.gov/blog/2014/04/28/heartbleed-understanding-when-we-disclose-cyber-vulnerabilities

    The considerations described here (in whether to reveal or keep secret a vulnerability) cover:

    -- How much is the vulnerable system used in the core internet infrastructure, in other critical infrastructure systems, in the U.S. economy, and/or in national security systems?
    -- Does the vulnerability, if left unpatched, impose significant risk?
    -- How much harm could an adversary nation or criminal group do with knowledge of this vulnerability?
    -- How likely is it that we would know if someone else was exploiting it?
    -- How badly do we need the intelligence we think we can get from exploiting the vulnerability?
    -- Are there other ways we can get it?
    -- Could we utilize the vulnerability for a short period of time before we disclose it?
    -- How likely is it that someone else will discover the vulnerability?
    -- Can the vulnerability be patched or otherwise mitigated?

    In this case, I might argue that this is becoming so well known (though the technical specifics have not been revealed), that the FBI/US had better tell Apple to make sure that other users of the affected phones can be secured -- while the intelligence value of the exploit is rapidly decreasing due to its publicity.

    1. Re:this is not unknown by Anonymous Coward · · Score: 0

      Well, actually, we don't need to leave it to a bunch of internet commenters to decide this issue

      But page views count (when you are trying to value your property). And this topic will bring in the page views.

      Given that this was a 5C, there is suggested to be more than one way to have skinned that cat, and at least one of them appears to just require a lot of hot air......

    2. Re:this is not unknown by Anonymous Coward · · Score: 0

      Something else is very very wrong with this, and that's the idea that "Here is a list of rules, the breaking of any of them means you have to make it open".

      Lists like that promptly get interpreted as a list of "If any of these rules apply, we can keep it a secret".

      It's a bit like the Constitution, actually. It was supposed to be a list of rules that said "The Government may do these things, and no others" and has turned into "If the Constitution (and the USSC) doesn't say we can't, then we can."

      AC

      PS - Dirty solution: Make it that no new law can be enforced UNTIL the courts have determined it constitutional... AC.

    3. Re:this is not unknown by bigpat · · Score: 1

      Well, actually, we don't need to leave it to a bunch of internet commenters to decide this issue -- there is an actual process described as "equities review" which the Executive Branch is responsible for, when a cyber vulnerability is known, but not yet disclosed to the public:

        https://www.whitehouse.gov/blo...>href=https://www.whitehouse.gov/blog/2014/04/28/heartbleed-understanding-when-we-disclose-cyber-vulnerabilities

      The considerations described here (in whether to reveal or keep secret a vulnerability) cover:

      -- How much is the vulnerable system used in the core internet infrastructure, in other critical infrastructure systems, in the U.S. economy, and/or in national security systems?
      --
      Does the vulnerability, if left unpatched, impose significant risk?
      --
      How much harm could an adversary nation or criminal group do with knowledge of this vulnerability?
      --
      How likely is it that we would know if someone else was exploiting it?
      --
      How badly do we need the intelligence we think we can get from exploiting the vulnerability?
      --
      Are there other ways we can get it?
      --
      Could we utilize the vulnerability for a short period of time before we disclose it?
      --
      How likely is it that someone else will discover the vulnerability?
      --
      Can the vulnerability be patched or otherwise mitigated?

      In this case, I might argue that this is becoming so well known (though the technical specifics have not been revealed), that the FBI/US had better tell Apple to make sure that other users of the affected phones can be secured -- while the intelligence value of the exploit is rapidly decreasing due to its publicity.

      In bureaucratic speak all that means that as long as you can write a well worded memo of justification then you can do whatever you want.

  18. Not the FBI's Responsibility by Anonymous Coward · · Score: 0

    Do I need to start going to my neighbors and checking their computers for malware infections? Seeing if they have their WIFI protected properly? Checking that their HDTV is connected properly?

    No, and the FBI has no responsibility to disclose the method they used to access the iPhone. Odds are the FBI isn't even aware of the vulnerability, and that the vendor they chose keeps it proprietary... Unless the FBI wanted to pay some really big $$$,$$$,$$$.

  19. Let's reword this by Eloking · · Score: 0

    Ok let's reword this :

    Is the potential lost of privacy of everyone worth the potential lives of a few.

    To the opposite of many people here, I value human lives a lot and each preventable death is a death too many. So if helping the FBI could save even one person, in my eyes it'll be worth it. And I know some people will put it to the extreme and ask me if a human live worth living in a "v for vendetta" society, but I found it hard to draw the line.

    --
    Elok
    1. Re:Let's reword this by Black+Parrot · · Score: 1

      Ok let's reword this :

      Is the potential lost of privacy of everyone worth the potential lives of a few.

      To the opposite of many people here, I value human lives a lot and each preventable death is a death too many. So if helping the FBI could save even one person, in my eyes it'll be worth it.

      OTOH, repressive regimes might also use it to find, tordure, and dissenters.

      Meanwhile, the cnyical half of my brain is waiting for the FBI to tell us how many thousands of lives this saved.

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re:Let's reword this by ColdWetDog · · Score: 2

      So, you think the national speed limit should be 35 mph?

      That would save lots of lives.

      Or making cigarettes and alcohol completely illegal.

      Again, life is precious, gotta save every last one of them.

      "Every sperm is sacred ... "

      --
      Faster! Faster! Faster would be better!
    3. Re:Let's reword this by Eloking · · Score: 1

      Meanwhile, the cynical half of my brain is waiting for the FBI to tell us how many thousands of lives this saved.

      Well, that's the heart of the question isn't?

      Here on /. we seem to focus a lot on the negative from the FBI, the NSA and the likes (unsurprising considering the only tech news about them are, most of the time, about privacy void on their part). But I actually wonder how much good they do. How many lives they directly and indirectly saved. And I guess keeping their accomplishment secret is part of their work.

      It's in my nature, but I want to think those people too take their job to heart.

      --
      Elok
    4. Re:Let's reword this by Eloking · · Score: 1

      So, you think the national speed limit should be 35 mph?

      That would save lots of lives.

      Or making cigarettes and alcohol completely illegal.

      Again, life is precious, gotta save every last one of them.

      "Every sperm is sacred ... "

      I don't see how you could make this comparaison.

      In all of your exemple, it's mostly about adult willingly deciding to take those risk. Nobody is stopping you from not smoking, drinking alcohol, driving safely to extent your life expectancy. The way you say it, why should we have a speed limit at all? Your exemples are basically a critic of all safety laws.

      In this exemple, we're talking about potentially stopping terrorist attack (And I'm talking in general, from what I heard from this specific case, the iPhone was a work phone with about zero change to have any useful data).

      --
      Elok
    5. Re:Let's reword this by R3d+M3rcury · · Score: 1

      First, in answer to the actual question, I don't think the FBI should be required to tell Apple how they're doing it--mostly because they're not doing it. Some other company is doing it. So, as another poster put it, if the FBI can be forced, the answer is, "We hired XYZ company to do it. Talk to them and leave us out of it."

      I value human lives a lot and each preventable death is a death too many.

      Which is not a bad way to feel. The problem is with that word: "preventable."

      "Preventable" is usually assessed in hindsight. "Oh, if only we'd known, we could have prevented this." Yes, if you knew everything that was going to happen, you could prevent a lot of bad things from happening. Unfortunately, outside of fiction, it's rare that we know anything. And therein lies the problem.

      Imagine that the police suspect I am the culprit in a string of bank robberies. If that is true, then my phone/computer/tablet may have information that would lead to my arrest and conviction. Of course, my phone/computer/tablet may not have that information and I may still be guilty. Or it may not have that information and I may be still be innocent. Is giving up your privacy worth catching a possible bank robber?

      Well, it's not like I'm murdering people. I'm taking money from a corporation. But, let's be honest here, people have been known to be killed in bank robberies. So by stopping me from robbing banks, you could possibly be preventing somebody from being killed down the line. Or not, depending on whether I am the bank robber and whether or not I have incriminating evidence on my phone/computer/tablet.

      As you can see, it's starting to get a bit hazy. There's lots of ifs, maybes, and possiblies in those paragraphs.

      In the world of fiction, we usually know who the bad guy is and it's a race to see if the good guy figures out the bad guy's dastardly scheme before the bad guy can do it. We cheer for the brave cop who knows who the bad guy is and has to take the law into his own hands when the police department can't seem to understand how dangerous this guy is and how we need to take care of him right now. Of course, in fiction, the hero is always right, the bad guy is usually killed, and the attractive woman is rescued.

      The real world has quite a bit more grey than most fiction.

    6. Re:Let's reword this by Eloking · · Score: 1

      An interesting argument. Just one little thing.

      Imagine that the police suspect I am the culprit in a string of bank robberies. If that is true, then my phone/computer/tablet may have information that would lead to my arrest and conviction. Of course, my phone/computer/tablet may not have that information and I may still be guilty. Or it may not have that information and I may be still be innocent. Is giving up your privacy worth catching a possible bank robber?

      Here's where I find there's a major difference.

      AFAIK, "One of the most sacred principles in the American criminal justice system, holding that a defendant is innocent until proven guilty!"

      So, until proven guilty, I don't think we should hack into your phone. But, if you are proven guilty, I think the police should have the right to build a case to get a warren from a judge to hack into your phone if there's solid evidence that the said phone could hold information to block another bank robberies.

      Still, I know there's a major flaw in my logic. Let's take Belgium terrorist attack. We arrested a culprit that could hold information about a potential terrorist attack. They doesn't have the time to wait that the terrorist is declared guilty to act. And it's where common sense should come in. If they found a cellphone in a apartment with explosive and kalashnikovs, they should discard it "to protect civil right"? I mean, they already busted their door open and shoot themthat's quite again civil right in my book don't you think so?

      --
      Elok
    7. Re:Let's reword this by Anonymous Coward · · Score: 0

      You mean like in Europe? (Paris, Burssells?) You're "funny".

    8. Re:Let's reword this by adhdengineer · · Score: 1

      >

      Imagine that the police suspect I am the culprit in a string of bank robberies. If that is true, then my phone/computer/tablet may have information that would lead to my arrest and conviction. Of course, my phone/computer/tablet may not have that information and I may still be guilty. Or it may not have that information and I may be still be innocent. Is giving up your privacy worth catching a possible bank robber?

      It would depend on why the police suspect you are the culprit. If they can convince and independent authority (e.g. a judge) that they have a reasonable suspicion backed up with the evidence behind it then there is a compelling argument to be made for them to access devices that could substantiate the claim that you are behind the robberies.
      Of course the action the police want to take should be granted only if the evidence leading to the suspicion is compelling enough. For example the mere fact you were seen near the location of some of the robberies should not be sufficient to grant a warrant for a midnight raid of your property and the seizure of all your worldly possessions, but it may (or may not) be enough for them to obtain your phone records (mainly the location data) to see if you were present at the other robberies too.
      I think in this case arguing that the FBI should not be allowed to unlock the phone of someone who was responsible for a crime and died in the act is grossly unwise. But that's just me.

    9. Re:Let's reword this by Anonymous Coward · · Score: 0

      And it's where common sense should come in. If they found a cellphone in a apartment with explosive and kalashnikovs, they should discard it "to protect civil right"? I mean, they already busted their door open and shoot themthat's quite again civil right in my book don't you think so?

      Of coarse not that's stupid.

      However, that's also not the typical use case for unlocking phones.
      What's really being asked for is the ability to root though your phone at the TSA checkpoint every time to travel anywhere, or at traffic stops when you were "driving while black".

      In the rare case with a specific phone found among a pile of weapons, you could break out the acid and electron microscope and defeat any amount of security on the device. And the case where the police "know" something but can't "prove it" is fictional. If the police can't prove their suspicions they don't know anything they juts suspect.

    10. Re:Let's reword this by david_thornley · · Score: 1

      I think you're taking things too far. The Fourth Amendment has certain requirements for getting a search warrant. If there was good reason to think you were involved in a string of bank robberies, that would be probable cause, and a judge would be justified in signing a warrant to search your phone for information about bank robberies. Current US jurisprudence, from what I've seen, is that you wouldn't be required to unlock the device, but the police would be within their rights to try to get the information once they had the warrant.

      "Innocent until proven guilty" doesn't prevent investigation. Being accused of a crime, particularly with good evidence, does have its costs. I don't see any good way of avoiding that, unfortunately.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  20. Fuck Apple by Anonymous Coward · · Score: 0

    They aren't standing up for anyone's freedom but their own. They are standing up only for their own ability to keep control all to themselves. Would anyone here who advocates that the FBI provide the details of how they got in also mandate that any jailbreaks found also must be disclosed?

    1. Re:Fuck Apple by Darinbob · · Score: 1

      The FBI is not standing up for anyone's freedom either.

    2. Re:Fuck Apple by Eloking · · Score: 1

      The FBI is not standing up for anyone's freedom either.

      I don't think it's their job to protect the population's freedom. No more than it's the job of a dentist.

      --
      Elok
    3. Re:Fuck Apple by ChrisMaple · · Score: 1

      I don't know for sure, but it's likely that many in the FBI take an oath to protect the Constitution.. That includes the Bill of Rights, which expresses a large part of our freedoms.

      --
      Contribute to civilization: ari.aynrand.org/donate
    4. Re:Fuck Apple by Eloking · · Score: 1

      I don't know for sure, but it's likely that many in the FBI take an oath to protect the Constitution.. That includes the Bill of Rights, which expresses a large part of our freedoms.

      You're talking about protecting the freedom and the population. That other guy talked about standing up for people's freedom. My interpretation is that he expect the FBI to publicly position themselves to defend the freedoms of the population. To take position on debate in the media or something.

      --
      Elok
  21. Yes, but... by Anonymous Coward · · Score: 1

    Should FBI Reveal to Apple How to Unlock Terrorist's iPhone?

    Not to Apple specifically, but in future court cases if they want to use any evidence gained in a court of law, they should be required to divulge how they broke in. How can the defense be sure the data is legit otherwise?

    1. Re:Yes, but... by Anonymous Coward · · Score: 0

      Should FBI Reveal to Apple How to Unlock Terrorist's iPhone?

      Not to Apple specifically, but in future court cases if they want to use any evidence gained in a court of law, they should be required to divulge how they broke in. How can the defense be sure the data is legit otherwise?

      Scenario 1: FBI says they did X, then Y, then Z, and it unlocked the phone, and the data they found is ..., they swear.

      Scenario 2: FBI doesn't say how they unlocked the phone, but found the data and it is ..., they swear.

      How does scenario 1 prove the data valid any more than scenario 2? Both scenarios are based on the word of the FBI that the data presented is the data that was on the phone. All scenario 1 buys is the defense's ability to claim the FBI is lying since what they are stating is impossible, and that will probably fly like a lead balloon in court.

    2. Re: Yes, but... by Anonymous Coward · · Score: 0

      Because a third party can replicate #1 and independently recover the data

    3. Re:Yes, but... by Darinbob · · Score: 1

      FBI is not legally obliged to share the details, but ethically and morally they should. If the FBI actually cared about the citizens and residents of its country then it would naturally want to cooperate in order to provide a more secure phone that could not be easily hacked by enemies of its country. If the FBI actually cared about the rule of law and the rights and limits granted to the people and government, then it would voluntarily limit itself instead of continually overreaching its power.

    4. Re:Yes, but... by Darinbob · · Score: 1

      Because if someone says "X, then Y, then Z will not unlock an iPhone 5c" then it casts doubt on the whole case.

      Law enforcement must learn to be like Caesar's wife and be above suspicion and avoid anything with even an appearance of impropriety. Except that law enforcement has a long history of bending, breaking, and ignoring the rules. When people say "trust me!" at the same time their hands are down our underwear looking for evidence then that's a good sign that they can't be trusted. It's so incredibly obvious that the FBI only wanted this court order to set a precedent and that it really wasn't about this phone at all, so how is one supposed to trust anything they say in the future?

      "Your honor, permission to treat the government as a hostile witness?"
      "Granted."

    5. Re: Yes, but... by Anonymous Coward · · Score: 0

      Because a third party can replicate #1 and independently recover the data

      That proves the FBI had the ability but doesn't address the issue of whether the data presented (and is NOW on the phone) is what was originally there. Both scenario 1 and 2 require trusting the FBI hasn't tampered with the data since once they access the phone, or fail to, they can put whatever they want onto the phone, including removing the wipe setting if it was enabled, then say, "Gee, that feature wasn't set. We just brute forced it."

    6. Re: Yes, but... by david_thornley · · Score: 1

      A third party can verify the FBI's findings. If the FBI says "We cracked this iPhone and found the decryption key to be this, and here's a copy of the original flash memory that you can verify is legit by these means", it's easy to try the key and verify the decryption and resulting plaintext.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  22. It's a 5C by bill_mcgonigle · · Score: 5, Informative

    Apple already knows it's hackable, that's why the 5S and newer have Secure Enclave.

    Still, they should make the FBI rue the day they tried to destroy Apple's market, however they can. Revealing the San Bernadito phone as a ploy is the minimum they should pursue.

    Yet, ultimately I hope Apple loses an inquiry about this break because it's better for all of us if they see the unconstitutional law enforcement agencies as adversaries.

    There, now I've disagreed with both camps.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    1. Re:It's a 5C by ras · · Score: 1

      that's why the 5S and newer have Secure Enclave.

      And Apple also knows the Secure Enclave can be by-passed too, by anybody who has the firmware signing key. If you have it, you just upload new firmware bypassing the checks. Currently only Apple has it of course. But that is where this all started.

      Still, they should make the FBI rue the day they tried to destroy Apple's market,

      Which is real simple to do. Put the Secure Enclave firmware in ROM, so it can't be upgraded. Then it becomes truly uncrackable from software, so the LEA's would be reduced to attacking the silicon. It's their worst nightmare.

      This is possible because the SecureEnclave is stand-alone, and compared iOS itself it is almost trivial. It's unlikely the API it provides is ever going to change. Besides, there is a public standardised API for such things: TPM 2.0. (Not that Apple's into standards, but TPM 2.0 is documented and thoroughly vetted, and includes rate limiting for passwords.) The one remaining reason to provide upgrades is to fix a bug, but as the old saying goes "only trivial software contains no bugs", and for someone of Apples resources this, to repeat myself, trivial. Besides in things like Secure Enclave's allowing firmware upgrades IS A BUG.

    2. Re:It's a 5C by Anonymous Coward · · Score: 0

      You can't update the security enclave as it is flashed once and then it burns a circuit that makes it impossible to update again.

    3. Re:It's a 5C by ras · · Score: 1

      You can't update the security enclave as it is flashed once and then it burns a circuit that makes it impossible to update again.

      Source? It would be nice if it was true, but if it's true I'd expect to hear Apple trumpeting it from the roof tops. As far a I know, Apple have never said anything publicly. The reference document they publish on security says nothing about firmware upgrades for the Secure Enclave.

    4. Re:It's a 5C by marcansoft · · Score: 1

      Your source is an ex-Apple engineer who worked on iPhone security: https://twitter.com/JohnHedge/...

      The Secure Enclave doesn't have "firmware updates" because it doesn't have nonvolatile firmware memory. Its firmware is loaded on every boot, and is part of the overall firmware of the phone. The Secure Enclave has no control over what firmware runs on it other than ensuring that it is signed by Apple, and it has no persistence of its own - it's a completely state-less CPU that depends on external EEPROM and Flash memory that can be externally tampered with and rolled back/replayed.

    5. Re:It's a 5C by marcansoft · · Score: 1

      And Apple also knows the Secure Enclave can be by-passed too, by anybody who has the firmware signing key.

      It is also vulnerable to exactly the same external memory replay attack that non-Secure-Enclave-equipped phones are vulnerable to (i.e. the Secure Enclave is completely irrelevant to what is currently the easiest, most likely way the FBI got into the phone). I explained how all the pieces fit together in this blog post.

      Which is real simple to do. Put the Secure Enclave firmware in ROM, so it can't be upgraded.

      That's not the solution - Apple needs to be able to update the Secure Enclave firmware too, it's too complex to be reasonable to bake into a ROM forever. What they need to do, which I also explained in that article, is two things: tie user encryption keys to the hash of the firmware running on the SEP (so that a malicious firmware update renders user data inaccessible), and harden anti-replay protection with a secure anti-rollback counter (either using authenticated external memory or burying the EEPROM inside the main SoC package).

    6. Re:It's a 5C by ras · · Score: 1

      That's not the solution - Apple needs to be able to update the Secure Enclave firmware too, it's too complex to be reasonable to bake into a ROM forever.

      TPM's are more complex, simply because the solve a more general version of the same problem. Billions have been sold, and most of them have got along just fine without a firmware upgrade. We do know how to get bugs below 1 per 100k LOC, and I have no doubt Apple is capable of it. It's not cheap, but I doubt the expense concerns them overly.

    7. Re:It's a 5C by Anonymous Coward · · Score: 0

      so the LEA's would be reduced to attacking the silicon. It's their worst nightmare.

      Do you *really* want law enforcement to build the capacity to attack the silicon? It's not infeasible, any reasonably sized government can afford to build the necessary facilities, and, once they have the ability, they have it forever.

      Here's a blog post by Andrew "bunnie" Huang, one of the people who hacked the original Xbox, on decapping a PIC chip and circumventing its security: http://www.bunniestudios.com/blog/?page_id=40.

    8. Re:It's a 5C by Anonymous Coward · · Score: 0

      The Replay attack is trivially stoppable with a secure enclave by keeping the pin-counter on chip, your article claims that they do not do this, but I don't know why they could not, I mean 4 bits of flash (to count to 10) on a CPU shouldn't be beyond what they can do.

    9. Re:It's a 5C by Anonymous Coward · · Score: 0

      Strong rumor has it that Apple has already (before this mess) issued an iOS update that included a Secure Enclave update, because the previous SE sw misbehaved if you turned the phone off after N failed logins.

      Anyhow the price for making the SE sw write-once is that you could have to recall, scrap and replace an entire production run (as in million of units).
      Unlikely, but the impact would be huge even for Apple and likely end numerous careers.

      Further burning a fuse to prevent reprogramming is great against remote attacks, nosy gf/bfs, anyone with shorttime access etc.
      But if you have physical access and has access to the proper equipment bridging the fuse is not that hard.

      Using actual ROMs or PROMs would be an effective defense, but those are getting pretty rare these days.

    10. Re:It's a 5C by david_thornley · · Score: 1

      Apple is trying to push security and use it as a selling point. If it was easy to put the PIN counter inside the Secure Enclave, they would have. I'm curious why it's not myself.

      Apple may figure out how to make that work well for the 7 or 7S, for all I know. There could still be vulnerabilities, of course, but the replay attack wouldn't work.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    11. Re:It's a 5C by ras · · Score: 1

      Do you *really* want law enforcement to build the capacity to attack the silicon?

      It's expensive - far more expensive than getting a judge to sign a piece of paper. And it's not easy. In fact it's very, very hard. The security of SIM's, Credit and Debit cards, pay TV encryption, ATM's and a long list of other things rely on silicon guarding it's secrets. If you don't have several million, a gear normally found only in Uni's and chip manufacturers, a few PhD's and months of time it's out of the question.

      So, no I don't want it. And I'm not particularly worried about them building it.

    12. Re:It's a 5C by ras · · Score: 1

      Anyhow the price for making the SE sw write-once is that you could have to recall, scrap and replace an entire production run (as in million of units).

      No, it's doesn't have to be that serious. The price is the Secure Enclave destroys the secrets it's guarding before allowing an upgrade. In effect, it's the same as purchasing a new phone.

      Even if it is was you say, there is always another alternative - live with the bug. It is after all a question of what you consider to be the biggest bug - your privacy stuff not being really private, or the remote chance you turn the phone off after a few failed password attempts.

      Using actual ROMs or PROMs would be an effective defense, but those are getting pretty rare these days.

      On the contrary, they are the cheapest way to place firmware on a chip. And more to the point, something has to boot the chip to the point it can load real firmware. If you allow whatever does that booting to upgraded, you are also allowing it to be corrupted and the device (CPU, phone, or whatever) to be bricked. How many bricked CPU's have you seen? I'd wager none. That's because they all have ROM. It's not rare at all.

    13. Re:It's a 5C by ChrisMaple · · Score: 1

      Nice citation, thanks.

      Once a designer is given the requirement that his chip be resistant to cracking by decapping, there are a lot of tricks he can play to make the cracker's job very difficult. Things like replacing metal conductors with doped silicon to hide their existence, or adding intrusion-detection flash cells that disable memory reads when UV is used to erase memory-protection flash cells. Things like 2 layers of metal protecting flash areas (with plenty of overhang), and critical conductors breaking those layers in a few places so that if the metal protection is eroded away, the critical conductors are lost, also. Light-sensitive areas that trigger a flash erase routine if a decapped chip is exposed to light while running. Chemical fuses triggered by decapping chemicals.

      --
      Contribute to civilization: ari.aynrand.org/donate
  23. The ethical choice by Macdude · · Score: 3, Insightful

    The choice is between helping Apple secure the phones of millions of Americans against phone-thieves, identity-thieves, virus, mal-ware and ransom-ware writers or continuing to leave their citizens vulnerable to the above so that the government can spy on it's own people.

    I know what choice I think they should make.

    --
    "Grab them by the pussy" -- President of the United States of America
    1. Re:The ethical choice by Eloking · · Score: 1, Insightful

      so that the government can spy on it's own people.

      ....aren't you going a little too far?

      --
      Elok
    2. Re:The ethical choice by Anonymous Coward · · Score: 0

      How is that too far? It's exactly what they were (and are) working for. Maybe the most recent Apple BS wasn't entirely manufactured but you can be sure if they get a precedent they will be checking your phone at traffic stops to make sure you haven't been texting and driving. If you believe otherwise you need to wake up. The abuse of power is not speculation. It's been demonstrated over and over again.

    3. Re:The ethical choice by Anonymous Coward · · Score: 0

      It depends on what the FBI defines as ethics. Currently their ethical standard seems to be "anything which makes our jobs easier".

      I'd like to say that ethical standards are independent of the organization. However the evidence is that any Three Letter Agency can set their own ethical standard and make it stick, to a level good enough for government work.

  24. B-b-but... that bounty program by Anonymous Coward · · Score: 0

    If Apple just offers a big enough bounty the white hat hackers will tell them...

    Right?

    Remember we had this conversation last week?

  25. 3rd party hack by tommeke100 · · Score: 1

    Wasn't this a 3rd party hack? Who says the FBI knows how they did it in the first place?

  26. Why assume it was a software bug? by Anonymous Coward · · Score: 0

    My bet is that there is a way to bit copy the chips without touching the security wipe executable on the boot security chain. That way they can take their time using powerhouse routines on real computers to decrypt the bits instead of relying on the phone hardware to do the decrypt. Most likely the password used was only a short pass word or a known Arabic word of simple short very common phrase. All of these possibilities can easily be programmed into a routine to crack a password or phrase. One would guess that because the jerk believed that he was about to go to heaven he would use something like this Dar es Salaam only with the spaces filled or as a truncated phrase with no spaces like this DaresSalaam

    Either way the data would be quickly cracked because the encryption algorithm used on the security chips is not that hot a system otherwise it would run like a dog if you choose to encrypt your storage on the phone and set a password.

    1. Re: Why assume it was a software bug? by Anonymous Coward · · Score: 0

      People who don't understand anything about the technical issue they're commenting on should refrain from posting.

  27. LOL... by Anonymous Coward · · Score: 0

    Oh how the tables have turned....

    Yeah..good luck apple...

  28. Re:Let them keep it secret (see how long that last by Anonymous Coward · · Score: 0

    This should be a good test if the Apple argument holds water, that such a solution could never be kept out of the hands of hacker criminals. See how long before the vulnerability is discovered while the FBI attempts to protect it.

    Strawman - Apple didn't say it couldn't be kept out of the hands of the hackers/criminals, they said such things often get leaked and it was too dangerous to create for that reason.

  29. Re:Better idea: by meadow · · Score: 3, Interesting

    The *reality* of who the FBI actually are - the people in your community - who you don't know about - who work there - is that they are basically a secret mafia, usually very connected to your local law enforcement and oligarchy that runs your city - and they have super powers that you cannot even imagine to be able to raid and invade anyone's life at will. They are a separate class and truly a branch of the oligarchy, and in ways far more frightening than the mafia/thug class associated historically with other regimes because their powers and secrecy go way beyond - whereas with the former historical ones they tended to be more overtly violent thugs.

    The very existence of FBI - and in fact also police in the United States - is a violation of the pact between people and government, and a clear sign that this is a de facto oligarchy, and that just because its an *oligarchy* and not some other type of fascist regime, is no less human-rights violating and dictatorial than any other.

    That said, the conduct of the NSA and other federal agencies is totally reprehensible. From the viewpoint of basic human decency, if you happen to notice a problem with your neighbor - perhaps something unusual or wrong with their house or any of their possessions - it is universally understood that you should tell them about it.

    The analogy with our federal government is that they are like the most shitty, disgusting neighbor who knows all these things are wrong with their neighbor's house and they are actually glad for it and refuse to tell the neighbor about it because they view those vulnerabilities as an advantage or asset to be potentially exploited. That is the EXACT OPPOSITE of how they should be acting and is more than justification for their complete and immediate disbandment and a major reform of our federal, state, and local governments from the ground up.

    Wake up people.

    The level of delusion, apathy, and disregard one sees in Silicon Valley is truly appalling given the seriousness of our situation in America. Our elections are a complete joke. Our entire system is becoming more and more a farce based not on the basic concept of rule of law but rather groups of thugs - usually identified as liberal - who see their jobs as entailing the constant breaking and bending of rules for one selected class or another.

  30. Why is apple special? (Re: The ethical choice by Anonymous Coward · · Score: 0

    So wait. If the fbi can spy - with a court order - on a whole slew of conversations. They can plant bugs and have CIs wear wires. All which the fbi is under no obligation to disclose how they did so.

    So tell me. Why is Apple so special?

    I'm really keen to understand - not being snarky, just want consistent arguments.

    1. Re:Why is apple special? (Re: The ethical choice by Darinbob · · Score: 1

      Because Apple is big enough to actually fight back.

    2. Re:Why is apple special? (Re: The ethical choice by Anonymous Coward · · Score: 0

      no they really really aren't

      they go too far they end up locked up just like anyone else

    3. Re:Why is apple special? (Re: The ethical choice by david_thornley · · Score: 1

      Apple isn't special. The FBI is making a special demand.

      If you're suspected of interplanetary piracy, and both Apple and I have information on you, and the FBI has probable cause, it can get my information and Apple's information. No difference. Now, suppose that both Apple and I can do significant things that are detrimental to our own interests that can provide more information. Neither of us has to do what the FBI wants. No difference.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  31. It depends on perspective by TsuruchiBrian · · Score: 2

    Does the FBI care more about fighting crime or reducing crime? There is a common tendency to for people and organizations to try to increase their own importance. So maybe the FBI could help to prevent X amount of crime (in the form of hacking, fraud, etc) from ever happening by helping Apple fix some security flaws. But maybe they will get more credit for allowing this vulnerability to remain and exploiting the vulnerability to catch a few more criminals. It's harder to appreciate crime prevention than punishment of criminals after the fact.

    If someone invented a magic security system for houses that eliminated home invasions, this might actually be bad for the prestige of law enforcement. While it will probably reduce crime (one of the purposes of law enforcement), it reduces the reliance of the population on law enforcement and therefore decreases their importance. A flaw in the security system would create the opportunity for more people to be criminals and more opportunity for law enforcement to come to the rescue. If law enforcement can in addition actually exploit this weakness to catch a few more criminals then even better.

    If the damage done by leaving the hole open exceeds the damage prevented by leaving the hole open, then it is better for society to have the hole closed, but it is not necessarily better for the FBI to have the hole closed. They won't get the blame for damage caused by an security hole unknown to the public, and they won't get any credit for the damage prevented by closing it.

    It would be nice if everyone (especially public officials) did what was best for society rather than what was best for themselves, but this is a rather hard standard to hold human beings to.

    I suspect it would be better for society to have the hole closed, but I wouldn't expect the FBI to have the kind of deep dedication to the improvement of society necessary to see that. Maybe it will be easier for them to see if they somehow become the victim (e.g. a scandal resulting from the FBI director's iphone getting hacked, etc).

    Take for example Nancy Pelosi. She was all for government surveillance. It was only until she became one of the targets of government surveillance, that she was able to be outraged.

    1. Re:It depends on perspective by Anonymous Coward · · Score: 0

      Does the FBI care more about fighting crime or reducing crime?

      Yes. The FBI is not one monolithic organization. No large organization is. Different parts emphasize different priorities, and individuals may, or may not, agree with everything that the organization spins.

    2. Re:It depends on perspective by Darinbob · · Score: 1

      But the head of the FBI overall approved these actions against Apple publicly. Sure some parts of the FBI are full of very fine people, I have a friend in the FBI. But there is rot setting in at the higher levels of FBI management. They think that there is no step too far in their quest to find the bad guys, even if those steps are on top of people. Conviction counts are the goal, they make the budgets bigger and get people promotions and bonuses, and it's a flaw in most law enforcement bodies.

    3. Re:It depends on perspective by orgelspieler · · Score: 1

      You point out something most people don't like to think about regarding the true nature of law enforcement. Without crime, they would be out of work and/or funding. So the only way to stay employed is to make sure there is something "bad" like drugs or homelessness or terr'ists that needs to be addressed. My favorite is when they do something truly abominable in the interest of "public safety." And it happens at all levels of law enforcement.

      Do you think the local PD shortened all those yellow lights because they wanted safer intersections or more profitable ones? If they really wanted to reduce accidents, they could have made longer yellow lights, and enforced existing "following too closely" laws. But it's a lot cheaper to mail people tickets by machine when they roll through a red light on a right turn. The irony is that most of the money paid actually went to an out of state contractor! So they even did "doing your job wrong" wrong.

    4. Re:It depends on perspective by david_thornley · · Score: 1

      Rot isn't setting in at the FBI higher levels. It's been there for a long, long time.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  32. Re:Better idea: by Sax+Russell+5449D29A · · Score: 1

    The FBI should be disbanded.

    Considering the anti-democratic and privacy violating practices the FBI has been involved throughout its history, I can easily concur.

    --
    -SR
  33. Knock off the bullshit by PopeRatzo · · Score: 2

    Stop pretending the FBI didn't already have the crack before they brought Apple to court. They were just looking for a legal precedent.

    Second, stop pretending that Apple doesn't know how to crack your phone. This entire story was nothing but theater.

    --
    You are welcome on my lawn.
    1. Re:Knock off the bullshit by Anonymous Coward · · Score: 0

      Second, stop pretending that Apple doesn't know how to crack your phone. This entire story was nothing but theater.

      Who's pretending? Apple admitted in their court filings that they could crack this phone (the last model without a secure enclave), though they didn't have the ability on hand and it would take time and effort to create it. It was the precedent and danger such a creation posed that they were fighting against.

    2. Re:Knock off the bullshit by Anonymous Coward · · Score: 0

      I bet we see more celebrity and public figure iphone hacks now that it's obvious those phones aren't secure.

    3. Re:Knock off the bullshit by PopeRatzo · · Score: 1

      though they didn't have the ability on hand

      Do you believe they didn't have the ability "on hand"? Of course they did.

      --
      You are welcome on my lawn.
    4. Re:Knock off the bullshit by Anonymous Coward · · Score: 0

      though they didn't have the ability on hand

      Do you believe they didn't have the ability "on hand"? Of course they did.

      Please provide proof. Apple stated in their filings that they didn't have the required tools available and would need to create them to perform the actions in the order. The government filings did not dispute Apple's statement, only argue why Apple should be forced to create it. Unless you have proof to the contrary, you are just a person claiming that because you THINK something is true, it must therefore BE true. That is a psychosis.

  34. DMCA the FBI can get around that by Joe_Dragon · · Score: 1

    DMCA the FBI can get around that and all it will take is patriot act 2 to fix it.

  35. DMCA by Anonymous Coward · · Score: 0

    Isn't circumventing copy and encryption protections (no matter how weak or flawed they are) a violation of the law?

    1. Re:DMCA by Anonymous Coward · · Score: 0

      Maybe if I read the other comments first... :p

  36. Emergency Call mode hack? by Joe_Dragon · · Score: 1

    Now can some like the fbi have a fake cell tower and use Emergency Call mode to bypass some security? Use it to reset a timeout on password guesses

  37. How's that shilling indifference going for you? by Rujiel · · Score: 1

    Yesterday's flavor was indignance, so today's is defeatism? Does switching it up make your boss happy?

    1. Re:How's that shilling indifference going for you? by zenlessyank · · Score: 1

      HeHe. What the fuck is indgnance? At least learn how to troll proper. Since I am the boss, yes, it does make me happy. I like to keep on my toes, flow like the wind. I already know what is going on and have done something about it. You will notice that was put in a 3rd person perspective. Maybe if you go back to school, you too will understand sentence structure and overall meaning. Sometimes humor is woven in also to weed out the trolls like your self. You validated my point perfectly. Thank you.

    2. Re:How's that shilling indifference going for you? by Anonymous Coward · · Score: 0

      I pity anyone that has to work for you and wait for the day one of them kills you. Feel free to tell me how awesome you are and how everyone love you. They don't. Also indignance is a word, you moron.

    3. Re:How's that shilling indifference going for you? by Rujiel · · Score: 1

      No, thank you--I waa hoping for more evidence of paid shilling, and you just gave me plenty. And if you were any sort of boss, you certainly wouldn't be shitposting filler like this on slashdot. Oh yeah, and nice try with the followup AC. Tell cold fjord i said hi.

  38. A few things. by Anonymous Coward · · Score: 0

    First, lol no the FBI has no legal obligation to tell Apple shit. I'm not even sure who would think it's even vaguely possible.

    Second, I don't think this is as complex as people think if you have the resources. The data, keys, etc... are all on flash chips, and flash chips can be pulled, copied, restored, etc...

    So I don't think you give a shit, in reality, about Apples secure chip wiping keys or anything like that. You just back them up and restore and try again.

    This was a combination of the FBI being cheap and lazy, and the FBI wanting to pave the road for this to be easier in the future. Eventually the lazy route became saying "meh, fuck off then" to Apple and dropping the legal shit and just paying/putting in the work to break the phone.

  39. Re:Better idea: by Type44Q · · Score: 1

    If we did that, this "BeauHD" individual would likely be out of a job...

  40. Apple adds a condition to its contract by Bruce66423 · · Score: 1

    If you become aware of a means of breaching the security of this device that you own, you are required to reveal it to Apple. Get all other mobile firm companies to add the term to the contract. Then they either have to stop operating mobiles, or hand it over.

    1. Re:Apple adds a condition to its contract by ooloorie · · Score: 1

      Real world contracts don't work that way. Such clauses would simply be considered invalid.

    2. Re:Apple adds a condition to its contract by Anonymous Coward · · Score: 0

      wow you are the most clueless poster I've seen on /. in years, gratz!
      you do realise the phone is not owned by either the FBI OR the company that actually cracked it?
      so basically your new (completely unenforceable, and if it was sales destroying) contract still would achieve nothing

    3. Re:Apple adds a condition to its contract by wvmarle · · Score: 1

      Besides the issue of whether this could be legal in any individual country, good luck enforcing it across borders. Or from someone who bought the device second hand, preferably from a third country, and who never had contact with Apple about the sale so can't reasonably be expected to have any kind of contract with Apple.

  41. Informing about problems like this not necessary by tp_xyzzy · · Score: 1

    Phone companies do not need this information. The reason is that whatever software ordinary people can get access to, it is definitely several iterations too old software. Finding problems from stuff that was created 3 years ago is simply not useful activity. The hardening of the software needs to happen with the bleeding edge software that only the companies themselves have access to. Thus end users reporting vulnerabilities to phone companies is completely useless activity. They're way too late in their reporting. Worse, while reporting the problems, they might reveal them to the criminals too, and there might be millions of devices on the open with the existing vulnerabilties in it. Fixing just newest versions of the software simply wouldn't work either, if criminals gets access to the information. Automatic updates are helping a little, and can solve some of the problems, but basically requires that phone companies are actively updating versions of the software that are like 4 years old. This takes significant amount of effort to keep old software versions updated. But the basic problem is that the information is coming in way too late.

  42. Re:Better idea: by rtb61 · · Score: 3, Insightful

    From an external view point the Federal Bureau of Investigation is the only real US police force. County mounties, the law en-FORCE-rs are all too often out of control, trigger happy, lard arse morons. Seriously, all local law enforcement should be disbanded in favour of state based policing overseen by Federal investigators to ensure more uniform policing across a state and equal access to investigatory powers and police oversight across the state. Sure the FBI fucks up on occasion and most of that is caused by ill-informed political appointees seeking to politicise the offices of the FBI, really dangerous and crazy stuff that should be exposed and prosecuted.

    --
    Chaos - everything, everywhere, everywhen
  43. Conflict of interest by sjbe · · Score: 1

    there is an actual process described as "equities review" which the Executive Branch is responsible for

    Since the FBI is a part of the Executive Branch that is pretty much textbook conflict of interest in this instance. The FBI obviously prefers to keep the ability to circumvent encryption without respect to whether this is either a good idea.

  44. No different by sjbe · · Score: 3, Insightful

    In all of your exemple, it's mostly about adult willingly deciding to take those risk.

    No different here. I'm well aware I could be killed by a drunk driver tomorrow (FAR more likely than a terrorist incidentally) and yet I think it would be inappropriate of us to ban alchohol. In fact we tried that and it didn't go well...

    In this exemple, we're talking about potentially stopping terrorist attack

    I'm an adult willing to take the risk of a terrorist attack in order to protect my civil rights. I value my civil rights more than I fear any terrorist or terrorist group. If that makes the FBI have to work harder to convict a criminal then so be it.

    1. Re:No different by Eloking · · Score: 1

      In all of your exemple, it's mostly about adult willingly deciding to take those risk.

      No different here. I'm well aware I could be killed by a drunk driver tomorrow (FAR more likely than a terrorist incidentally) and yet I think it would be inappropriate of us to ban alchohol. In fact we tried that and it didn't go well...

      In this exemple, we're talking about potentially stopping terrorist attack

      I'm an adult willing to take the risk of a terrorist attack in order to protect my civil rights. I value my civil rights more than I fear any terrorist or terrorist group. If that makes the FBI have to work harder to convict a criminal then so be it.

      I'm still not convinced. Drunk driving is illegal after all.

      And I agree about protecting your civil rights (After all, it took wars to have them), but saving the civil rights of an actual terrorist....

      Unless of course you're insinuating that allowing the FBI to force Apple for a terrorism will mean that tomorrow they'll hack every single cellphone in the USA. But if it take a warren for the FBI to crack a phone each time, I think the justice system could handle it (I think I'll regret writing this...).

      --
      Elok
  45. Imaging? by stevent1965 · · Score: 1

    Perhaps I've gone crazy but I'd swear I saw an article online a few days ago, right after the announcement that a third party had assisted the FBI, to the effect that the way it was done was by imaging the phone and using virtual copies of the image to run the passcode combinations until they hit the right one, which was then used on the actual, physical phone. Am I crazy?

    1. Re:Imaging? by david_thornley · · Score: 1

      Nope. The count of failed PIN tries is somewhere in the phone memory. It's not necessarily clear where, and it's not necessarily possible to change it arbitrarily. It is possible to copy it and duplicate it. So, every few tries, restore the appropriate memory to what it used to be, so the phone loses track of how many failed tries and never wipes the key or demands a lockout delay.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  46. No device is secure and they may never be so. by dsmatthews9379 · · Score: 1

    If you keep data on a phone that can be unlocked with a key that the phone is able to check then that data is not secure, it is just very hard to get at. Why? Because the laws of physics do not allow the integrated circuits to be magical black boxes that cannot be monitored, copied and emulated. It is that simple. If you need a 100% secure phone it has to keep all of it's data in the cloud and even then only certain uncommon types of encryption are guaranteed to never be circumvented. This is important as the data could be intercepted and decrypted in the future when technology improves enough to allow it. i.e. Quantum computing.

    So can you build a 100% secure phone, yes, but can you actually buy one? No. Will you ever be able to buy one, as a civilian? I doubt it. So is that a bad thing? Well that depends on how justified your fear of your particular government is. 20 years from now I'd be more worried by what a rouge AI may do with my data than any bunch of humans may do now.

    1. Re:No device is secure and they may never be so. by marcansoft · · Score: 1

      You got the "magical black box" part right, but you got the rest wrong.

      All you have to do is use a passphrase (not a PIN) long enough to not be bruteforceable. Building a 100% secure device that limits the number of attempts at guessing an insecure PIN is impossible. Building a 100% secure device that protects your data using a secure passphrase is trivial: just use good encryption at rest.

      Putting data in the cloud, at best, does nothing for you security-wise, and at worst, makes it that much easier to get to. It doesn't matter whether your data is in the cloud or on your phone. What matters is that it is encrypted with strong crypto, and that only you know the key. Then, as long as the crypto isn't broken, your data is safe. No (practical) crypto is "guaranteed" to never be circumvented, but modern crypto algorithms properly implemented are getting pretty close to there being a good chance nobody will ever be able to break them in a practical manner. Only time will tell.

      If you want a phone secure against data extraction after being seized, you have two decent options: get an iPhone, or get an Android Nexus phone (anything else is probably not trustworthy, if only because most other manufacturers suck at security). The Nexus line has better data security at rest (it uses full disk encryption), while the iPhone line only encrypts most, but not all, data, and no metadata. In both cases, if you make sure the phone is powered down before it falls into the hands of an attacker, there is just about nothing they can do to get at your data.

      Incidentally, we're talking about symmetric crypto here, not asymmetric crypto - quantum computing can implement a practical attack against current common asymmetric crypto algorithms, but not against symmetric crypto.

  47. Switch unlock code to alphanumeric in options by Anonymous Coward · · Score: 0

    Done.

  48. Caesar what is Caesar's by argee · · Score: 1

    I think the government should be allowed to develop whatever they want. They do not need to
    disclose it. However, to APPLY it should take a court order.

    By the same token, private individuals and companies are entitled to encrypt whatever they
    want.

  49. tit by Anonymous Coward · · Score: 0

    In the same spirit, Apple shouldn't reveal any info they have to the authorities that the authorities are being unknowingly hacked.

  50. It's not a "new ethical dilemma" by GPS+Pilot · · Score: 1

    Good intelligence officers have never revealed sources or methods, and never will.

    What would be new is if this principle weren't applied to the method used to crack the iPhone that San Bernardino County issued to the terrorist.

    --
    That that is is that that that that is not is not.
  51. They are legally required to by Anonymous Coward · · Score: 0

    And no I won't look the law up for you to only dispute it.

    Research this for yourself.

    1. Re:They are legally required to by Tempest451 · · Score: 1

      No they are not! And no I won't look up the law that says they aren't. Research this for yourself!

  52. How to hack the phone by Anonymous Coward · · Score: 0

    Hacking the phone should be fairly straight forward.
    1. Pull the memory off the board and read it (ok so it is encrypted)
    2. Use probes to put ram in place of the memory load the RAM with the memory contents. A little messing about to give the ram the same electrical interface as the flash not too bad, a few hours of FPGA programming should get that sorted and a board layout to hold the ram and give it interface from the device and from a master controller.
    Now you can see if it will erase all data after 10 failed entries. Not that it really matters as you can bring the ram back to original.
    Make a interface to digitally control the touch screen and start simulating screen presses to enter the code. Now just a matter of time. 4 digit pin is only 10000 tries 5 digit is 100000.

    Probably a few ways to speed it up even more. It helps if you have the device that you are hacking and it has a simple passcode instead of fingerprint sensor.

  53. The Govt Doesn't Follow The Rules by Anonymous Coward · · Score: 0

    It doesn't matter what rules you find that prohibit their behavior, the government will do whatever it wants to, and you can do nothing about it.

  54. Fear the right thing by Anonymous Coward · · Score: 0

    I'm much more afraid of the government than some theoretical terrorists. The government is real. We can all agree on that. The government does great evil. That's also easy to agree about. The government does more evil when the government is more powerful. Very easy to see. Fear the government and don't give it any more power.

  55. Re:Apple wants the FBI to help stop the FBI ... by Darinbob · · Score: 1

    The FBI is the government. Technically the people are the FBI's boss and not vice versa.

    Apple owed the FBI nothing, it was not obligated by any law to support the FBI and there was no final appeal to create an obligation. On the other hand, the government of which the FBI is a part have an obligation to defend and support Apple and uphold its rights. Apple was never charged with any crime or even any rumors of criminal activity and yet the government treated it with disdain and hostility.

  56. Apple should pay like anyone else by ender8282 · · Score: 1

    Many companies offer cash bounties in exchange for security bugs. This means hackers can 'sell' their bugs to the manufacture who can then pass it. The hacker gets cash and they get to feel good about what they did; but mostly they get cash. I don't believe apple pays for bugs. If they did this the company might have 'sold' their bug to apple instead of the FBI and any agency/country wanting to access an IPhone.

  57. a bootloader hack that unbelieviable? by gl4ss · · Score: 2

    is it really that far fetched for the israeli company to have a bootloader hack or code injection-after-boot-but-before-unlock hack?

    because that's all that was needed for hacking the pin protection system on iphone 5C. if you have that, then you can prevent the system from wiping the encryption key after 10 attempts and can attempt the right pin code infinitely.

    and apple 99.99999% probably already knows how they did it, so whats there to tell.

    and has usa gov been telling such things? no.

    fbi is just pissed that beyond 5c they can't do that nor contract anyone to do that so simply. they're longing for the "good old days" when they could just hook it up to an app they bought from some "security" company and have everything and not even bother with a warrant.

    --
    world was created 5 seconds before this post as it is.
    1. Re:a bootloader hack that unbelieviable? by Anonymous Coward · · Score: 0

      is it really that far fetched for the israeli company to have a bootloader hack or code injection-after-boot-but-before-unlock hack?

      Yes because it's Apple and the FBI is very worried about bad press so told everybody they worked with the Israelis to break security on American devices made by an American company and that means they don't get bad PR. Seriously with all the phones Apple has already unlocked for the government they aren't opposed to unlocking devices for government agencies and they could have quite easily created the custom iOS version, unlocked the phone and then deleted that iOS version so the concern about compromising security of all iPhones was also a lie. The FBI's bizarre use of the 'all writs act' and perverse entitlement complex wrt the public's data is abhorrent but Apple's position is also hypocritical, contradictory and disingenuous. To take either side is to present oneself as a blithering idiot.

      The answer, for the public, is strong encryption with more than a 4-digit numeric passcode.

  58. No hacking required... by American+Patent+Guy · · Score: 1

    I'm sure all they're doing is taking the plastic off of the NV memory part, attaching a probe, and reading out what's there. Those dies are tested that way at the factory: there will be lands on there for a probe. The government can buy a few phones of the same model for experimentation to get it right, then read out the contents of the NV memory of the phone they care about.

    Once they have those contents, it's just a matter of brute-force decrypting whatever is in the personal/confidential files. Remember it is the files that are encrypted, not the memory itself. All that is needed is enough processing power to run through all the likely password combinations until they get something that looks like it was humanly input. It's not that difficult if you have the phone in your possession and a supercomputer cluster at your disposal.

    1. Re:No hacking required... by Anonymous Coward · · Score: 0

      haha yeah that's all they need to do, brute force the AES256 encryption with a supercomputer! let's see. with a 256-bit key, there are only 2^256 possible combinations ... how long could it possibly take?

      oh wait, somebody did the math on that ...

      https://www.reddit.com/r/theydidthemath/comments/1x50xl/time_and_energy_required_to_bruteforce_a_aes256/

      spoiler -- it turns out if you constructed a supercomputer out of one billion high-end GPUs (which by the way would require roughly 150 nuclear power plants to operate), it would only take somewhat longer than the age of the known universe to exhaust half of the possible keys. so with a little patience, it can certainly be done!

    2. Re:No hacking required... by American+Patent+Guy · · Score: 1

      You'd have a point, if it were possible to use all combinations of a 256-bit key. It's not, however, Chances are the key is an alphanumeric sequence, less than 8 characters long (most users don't have the patience to do more than that, and most websites don't require more.) That gets you down to the neighborhood of 50^8=3.9 x 10^13, which is far less than 2^256. But they probably don't even need to do that: the password is likely a short phrase out of the Quorran or a close variation on the name of a friend or relative. They might even analyze the wear pattern on the touch screen to find likely members of the password set. I'm sure they've already realized which sets to look at to bring this down to the neighborhood of 10^10 likely combinations, which in your example would yield a solution in less than 10 iterations per GPU. Assuming they have a likely-passphrase-generator that operates using the equivalent work as the decrypting engine, 20000 GPUs operating at 100 attempts per second would take 10^(10-4-2)=10,000 seconds, or about seven days. Brute-force seems very do-able to me.

    3. Re:No hacking required... by marcansoft · · Score: 1

      The NV memory part is also encrypted with a key derived from a unique key fused into the CPU SoC (that is too long to be bruteforceable). To do the attack as you describe, they'd have to take the plastic off of the SoC (not the NV part, you can just pull that off the board and read it), and then use a FIB workstation to modify the metal routing and read off the fused UID key to be able to decrypt the external memory and attempt a PIN bruteforce. I explained this and other attacks here. That attack is technically possible, but unlikely, as it has a high chance of failure and it's very expensive.

      What they're likely actually doing is not that. They're probably just reading off the NV (NAND Flash) memory chip, then attaching an emulator to the phone instead, performing 4-5 PIN tries using the phone itself, then rolling back the emulated memory contents and trying again. This doesn't require any silicon-level hacking, just desoldering one chip and instead soldering in a (custom, but not terribly hard to develop) NAND emulator instead.

    4. Re:No hacking required... by American+Patent+Guy · · Score: 1

      Interesting...

      Those unique keys are probably recorded at the time of manufacture and saved to a DB (against the serial number of the phone or board). Apple complained about modifying their firmware to put in a backdoor bypassing the PIN entry procedure. I don't think they complained about handing over that CPU key when subpoenaed, or perhaps merely upon a request by the FBI. If the attacker knows the encryption function used by the NV memory controller, then they should be able to emulate that too.

      For an attack using an emulated PIN entry, I would wonder how fast that could be done: I'd expect the software would filter out touches less than 10ms or so. (The touchscreen scan rate would have a period around that.) Using a single phone, I'd imagine you'd wind up with less than 10 potential key tries per second. Add to that the time needed to reset the emulated NAND, whatever that is, every 5 attempts or so. I think your procedure would work for a short numeric pin (with 10 possible characters, sequence length 5 or less), but more than that would seem impractical to me.

    5. Re:No hacking required... by marcansoft · · Score: 1

      Those unique keys are probably recorded at the time of manufacture and saved to a DB (against the serial number of the phone or board).

      According to Apple, they UID key is generated during manufacturing and not recorded anywhere except on the device itself.

      I'd expect the software would filter out touches less than 10ms or so.

      Chinese PIN cracking devices for older versions of iOS (exploiting pin attempt counter flaws no longer available) did it via USB. I think it accepts USB HID input or something dumb like that. However, the retry time is dominated by the reboot required after every rollback. So you get 4-5 tries in a few seconds, then 90 or so seconds of waiting for it to reboot. The NAND reset can be instantaneous (for a decently designed emulator), but you still need to reboot the phone. Indeed, as I mention in the blog post, this is practical for 4-digit PINs (days), 5-digit PINs (a month or so), and gets annoying for 6-digit PINs (that's closer to a year, still useful if you really want the data, but not as much).

    6. Re:No hacking required... by American+Patent+Guy · · Score: 1

      Your article is well-thought out. I would wonder, though, if the UID could be read with a simple optical microscope. Presumably the UID is written to a memory cell on the SoC using links that open (like a fuse) when a high current is passed through (like the old PROM memories used to). Those links wouldn't be embedded in layers of silicon: the opening of the link would heat up and perhaps emit material that would need to be dissipated. (The link would look like this ===-=== or this === === if open.) If such a cell is on the top, then its links are exposed and can be observed. If one didn't know the pattern used for that cell, then one could use the procedure you suggest on separate phones to deduce what it is. If one could get to that point, then one could read the UID on the target phone without modifying the SoC part (but the 'lid' would still have to come off). That makes the procedure I'm thinking about much more viable.

    7. Re:No hacking required... by marcansoft · · Score: 1

      Presumably the UID is written to a memory cell on the SoC using links that open (like a fuse) when a high current is passed through (like the old PROM memories used to).

      Ah, this is where it gets fun. There are actually quite a few OTP storage technologies. Fuses, like what you mention, are one. They're not necessarily on top (indeed, they'd usually be on lower, finer pitch layers, since the whole point of a fuse is that it has to be thin), though, so to read them you'd still need to strip off metallization layers, but that's just a matter of a controlled acid bath. It's not really so much about burning/melting the fuse like a traditional macroscopic one: what actually happens is accelerated electromigration of the metal trace due to excessive current density, so it's not driven primarily by temperature and there isn't a need for the fuse to be on top (and no material is emitted, just somewhat scattered outward as the metal migrates). You'd probably need a scanning electron microscope at the densities used in modern chips, but even I have access to one of those, so that's not a huge deal (turns out secondhand SEMs are cheap these days).

      However, these days antifuses are common. Those work, broadly speaking, by causing a short circuit across gate oxide in a transistor using excessive voltage, or a similar technology. You can't really read those out trivially because the change is buried in a thin layer somewhere. Can you come up with a process that would make them visible to a SEM? Maybe. This is actually something I'm interested in researching, personally. But it's far from trivial (and I'm relatively clueless about silicon design).

      I have no idea what technology Apple used in their SoC, though they're paranoid enough about security that they probably chose something hard to read out.

    8. Re:No hacking required... by GuB-42 · · Score: 1

      You are confusing the key and the password.
      In a well designed cryptosystem, the key is derived from the password using a complex function that takes a long time to execute and may take several secret parameters. This is to make sure that all 256 bits of the key count, and that bruteforcing passwords is a difficult and time consuming process.
      In the case of the terrorist iPhone, the password is laughably simple (it is a 4 digit PIN). However the function that generates the key is has hidden parameters and the software makes sure that you only have 10 tries before it destroys everything.

    9. Re:No hacking required... by American+Patent+Guy · · Score: 1

      Yes ... and now that I think about it, it would make more sense to place that into EEPROM, because there would already be that kind of memory on the SoC part (or perhaps something close by) that would hold the firmware. To convert EEPROM to PROM, all the designer would need to do is prevent the erasing voltage from reaching the memory bits. That's as simple as leaving out the path from the charge pump (or whatever is used) to the UID memory cell. I have no idea whether an EEPROM can be read without turning the circuit on. There may be no color change (in an optical/UV/XRay wavelength) to pick up on with the state change of a bit. Bummer.

      An SEM must be a fun toy to fiddle with ... a lot more fun than the microscopes in Biology class.

    10. Re:No hacking required... by American+Patent+Guy · · Score: 1

      I'm assuming that the function that produces the key used by the decrypter is well-known or is obtainable through experimentation (on other instances of the same model of phone). Even if Apple was using AES, it could still vary the function in non-cryptographically significant ways to obfuscate what it was doing (add a constant to the key, XOR particular bits, etc.) Provided that function is in hand, the set of 256-bit keys isn't numbered 2^256, but the number of likely/possible passwords. Where the password is a 4-digit PIN, that is a set comprised of 10,000 elements, which is trivial to brute-force.

    11. Re:No hacking required... by marcansoft · · Score: 1

      Actually, there is no EEPROM in the SoC. The ROM firmware is, well, a true mask ROM (the first stage), and the rest is loaded from external NAND flash. It's actually impractical to put EEPROM onto the same chip as a modern high-end SoC: it would be too cost-prohibitive or take too long to develop, because EEPROM needs special processing steps that regular CMOS chips don't. You'll never find EEPROM/Flash on a leading edge, high-end process, it's always older stuff. This is why eFuses and other OTP technologies are used, because some of them can be done without any special processing steps. And why just about any decently powerful device always has a little 8-pin flash chip to hold the firmware next to the main SoC. You only get embedded flash with low-end microcontrollers.

      Some (particularly older) OTP chips are just EPROM (one "E") - the kind you erase with UV light - without the UV window. EEPROM is actually UV-erasable too, and one of the things often done to reset security "fuses" in EEPROM-based microcontrollers is to apply UV light in the right spot. Chip designers end up using shield metal above the bits, sometimes not very successfully (I recall one such chip was hacked by putting the light at an angle to get in under the upper metal shield). But this is the realm of lower-end microcontrollers with embedded EEPROM/Flash.

    12. Re:No hacking required... by david_thornley · · Score: 1

      I assume we can get the algorithm that transforms PIN to 256-bit key. However, this algorithm involves a 256-bit random number that is kept in hardware where it can't be directly accessed, and I suspect Apple is competent enough to use all 256 bits of randomness and make it impossible to deduce from the PIN and key. It is not possible to brute-force the key.

      The set of PINs is more limited, and if the attacker can guess the PIN the phone is cracked. This is why Apple put limits on the number of tries anyone get. Unfortunately, in all current iPhones, it's possible to circumvent those limits. Apple also supports 6-digit PINs, which take a little time to brute-force (the key-generation process isn't instant), and actual passwords. If you can stand to enter a strong password through the iPhone keyboard whenever you need to, you can make that pretty much impossible to brute-force.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  59. FOIA by ayesnymous · · Score: 1

    Apple should file an FOIA.

  60. Re:Apple wants the FBI to help stop the FBI ... by cold+fjord · · Score: 1

    The people are "technically" the FBI's "boss" in the same way that you are "technically" the "boss" of your local civil servants. To have a better understanding of the implications of that I suggest you go down to your local Department of Motor Vehicles office, fire station, or police station, and start ordering the employees around using your authority as their "boss". Try rearranging their work, make them pick up the place, maybe clean the windows. (If they don't obey, you might want to consider raising your voice, and maybe threatening their jobs.) Let us know how that works our for you.

    You may have a say in selecting their actual boss, the executive (president, governor, mayor, ...), but that authority doesn't pass through the executive to empower you to boss them around.

    --
    much of left-wing thought is a kind of playing with fire by people who don't even know that fire is hot - George Orwell
  61. Re:Better idea: by connect4 · · Score: 1

    holy shit +seventy trillion awesome comment you must be new here etc

    The FBI isn't going to shoot a guy five times who's trying to crawl along the floor while begging for his life

  62. Re:Better idea: by connect4 · · Score: 0

    Hah you got moderated down because someone was offended by the realities contained in your post.

    Oh well, for what it's worth, some of us read Slashdot at -1, even if only to find the one grown up comment amongst all the kids yelling at each other.

  63. Black vs white hat by Anonymous Coward · · Score: 0

    The difference between a black hat and a white hat is that the white hat tells how he got in, where as the black hat uses the hole for his own gain.

    If the government wants to be a government "of the people, by the people", they need to be the good guys, not just the largest gang of bad guys.

  64. Legal position.... by Anonymous Coward · · Score: 0

    This would be an interesting one in the US court system:

    If company X finds a flaw in an apple product
    then someone dies|harm|etc because of said flaw a year later in the US
    but in the mean timethe US govt used said flaw to access the product for other reasons (meaning it knew about the flaw)
    who gets sued?

  65. Ethical dilemma only for immoral psychopaths by Anonymous Coward · · Score: 0

    Anyone with a scrap of American morals knows that the government's job is to protect The People. The "governments" refusal to disclose security problems so that they can oftentimes illegally access people's phones is outright TREASON. I think that the US government is totally treasonous and sold out to the highest bidder. It's a sad day when we have to rely on corporations to protect our constitutional rights.

  66. Sure they should... by Anonymous Coward · · Score: 0

    As soon as Apple reimburses the government for every manhour expended by FBI and the material cost of the unlocking...

  67. No vulnerability only the FBI can use exists by sjbe · · Score: 1

    I'm still not convinced. Drunk driving is illegal after all.

    So is terrorism. What's your point? Something being illegal doesn't keep it from happening.

    And I agree about protecting your civil rights (After all, it took wars to have them), but saving the civil rights of an actual terrorist....

    That's what having rule of law means. It means EVERYBODY gets treated fairly under the law, including terrorists. The Constitution enumerates several rights which are there to protect from the government abusing its power. Frankly for most of us the government is FAR more likely to be a threat to our life and liberty than any terrorist could ever hope to be. Ask any black citizen and they'll tell you that they are far more afraid of the police then they are of a criminal - and with good reason. Even our current president has been harassed by the police for no legitimate reason.

    Unless of course you're insinuating that allowing the FBI to force Apple for a terrorism will mean that tomorrow they'll hack every single cellphone in the USA.

    What it means is that there is a vulnerability. If the FBI can do it, so can others and the other groups are likely to be FAR more motivated to exploit it. The same security that protects the data you don't want criminals to get is what blocks the FBI too. You can't have it both ways. There is no such thing as a backdoor that only works for special groups with a warrant. Furthermore you can be quite sure that any technical flaw in the iPhone security will be repeatedly exploited by the FBI. They have a century long history of not respecting civil rights and due process and I don't see that being any different now.

    But if it take a warren for the FBI to crack a phone each time, I think the justice system could handle it (I think I'll regret writing this...).

    First off if you think the FBI would wait for a warrant you are being extremely naive. Second, there is no possible way to have an exploit the FBI can crack that others cannot crack as well. Even if we completely trust the FBI (which you shouldn't) there is no crack they can utilize that will not be available to other bad actors. Encryption that can be cracked is functionally identical to having NO encryption. If makes the phone extremely dangerous to rely upon for anything sensitive even if you are doing nothing illegal.

  68. Silliness by Anonymous Coward · · Score: 0

    In all seriousness, if this scandal is even real (which I doubt), it took the FBI way too long to hack an iphone.
    We're not talking full security here, we talking just a plain old vanilla iphone.

        If I want to hack something, NO WAY it would take me from the court case to when the FBI announced it, especially as the FBI must have many many hackers working together and inside info from Apple. I have much less than them and I am sure I could have done it faster... I just don't bother as it would be unethical without a reason. The FBI had a reason and I do not, so I choose not to.

          This whole case is just silliness... I am focusing on doing good things, presentations, research, new software, you know useful stuff.... not wasting time on a fake case. We should all do the same.

  69. Go to the source? by Rastl · · Score: 1

    Apple has the money so why not buy Cellebrite (the company that did the work) and take care of that little security vulnerability? Go right to the source and then they have no concerns about ~how~ things are done.

  70. Seriously? by The-Ixian · · Score: 1

    Apple spits in the eye of the FBI and then people expect them to disclose the vulnerability (if that is what it was) to Apple?

    Yeah... right.

    I think it would be better if Apple spent some of its money on finding the vulnerability themselves.

    --
    My eyes reflect the stars and a smile lights up my face.
  71. Re:Better idea: by Ralph+Wiggam · · Score: 1

    Like most modern libertarian ideas, that one was tried in the late 19th century, and went terribly. You just end up with an army of private contractors who have even less oversight.

    https://en.wikipedia.org/wiki/Pinkerton_(detective_agency)

  72. Oy vey by Hognoxious · · Score: 1

    Overheard at the synagogue: "... and I said why sell it once when you can sell it twice? Do these goyim take me for a schlemiel already?"

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  73. Really?! by martinfb · · Score: 1

    Do you really think Apple needs help? Chances are they already know how it was done. I am more concerned about the lack of intelligence that slashdoters - and publishers - are showing!

    --


    Self-importance and self-indulgence is the root of ALL evil.
  74. ethical dilemma? by Anonymous Coward · · Score: 0

    this creates a new ethical dilemma: Should tech companies be made aware of flaws in their products

    Well, here in the civilized world, not making tech companies aware of flaws in their products borderlines the illegal. But I don't mind if USA wants to blast their tech industry back to the stone-age. More wealth for us.
    But I really don't get it why americans want to do this to themselves? Perhaps what Hollywood spews out is not just propaganda - life in the USA is pure hell due to rampant crime? I really should visit some day. But I'm not sure I am brave enough.

  75. Re:Better idea: by dl_sledding · · Score: 2

    The problem with this idea is that local law enforcement (the county Sheriff, the highest local law enforcement official) is elected by the people that they are enforcing the law over, making them (and their subordinates) answerable to those citizens. The FBI is not answerable to the common citizen, and can (not that they do, but they can) therefore run roughshod with no immediate chance of consequence.

    This is a basic premise of the ideals formed by our forefathers and written in the Constitution: that the citizen has ultimate power over the Government, not the other way around. This premise is carried all the way down from the federal to the local level. State-based policing (as you put it, meaning Federal policing) is exactly the problem in many, many countries. For instance, the final judgement call for a concealed carry permit in many (if not all) counties in the country is the local Sheriff, who may personally know the permit requester, and has the final yea or nay in the process, making it a very informed, local decision, rather than a decision made by some bureaucrat 2,000 miles away. This is government by the people, for the people, as opposed to our federal system that has a difficult time representing everyone and typically ends up typically being very right or left leaning.

    I think you do not give enough credit to the local law enforcement, and calling them "lard arse morons" shows exactly how far out of touch you are. You've been watching too many movies, and until you live here and work with these ladies and gentlemen, who are as professional and courteous as any Federal official, you can happily keep your silly, uninformed, and childish opinions to yourself.

  76. Re:Better idea: by david_thornley · · Score: 1

    On the other hand, small groups of people go wacko a lot easier than large groups do. A sheriff and deputies can run roughshod over minority rights as long as the majority doesn't disagree. It's harder (but not impossible) to do that at a higher level.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  77. didn't the fbi break the law here? by mr_java66 · · Score: 0

    Didn't the fbi break the law here?

    Consider:
    https://en.wikipedia.org/wiki/...

    Consider:
    Whoever ... intentionally accesses a protected computer without authorization, and as a result of such conduct, causes damage and loss.

    I want the FBI to be very prosecuted on this.

  78. Huh? Why not? by Bruce66423 · · Score: 1

    It's not a case of it being ruled 'invalid'. It's that the companies refuse to sell unless the governments sign up to the terms. Otherwise - no phones. The idea of the government forcing a company to sell it a product on the government's terms is... interesting.

    1. Re:Huh? Why not? by ooloorie · · Score: 1

      It's not a case of it being ruled 'invalid'. It's that the companies refuse to sell unless the governments sign up to the terms. Otherwise - no phones.

      Whether they sign up to those terms is not the issue, the issue is whether those terms are enforceable and what the remedies would be. Courts don't just rubber-stamp "if-then-else" clauses in contracts, they look at what kinds of damages either party suffered, what kinds of valuable consideration was exchanged, how the parties would stand if the contract had never been entered. In addition, governments generally can simply refuse to be the target of lawsuits at all.

  79. Re: Better idea: by Anonymous Coward · · Score: 0

    Dear Apple
    Remember how we asked you to help us hack a terrorist's phone so we could save American lives and you told us to take a hike? Well now we've managed to hack the phone without your help and so we'd like to tell you how we did it and help you make it harder for us to save American lives in the future.
    To this end we have put all the data on how we did it onto a locked iphone. We would like to give you the phone and let you get on with it. Remember, the key is in the box.
    Yours sincerely,
    The FBI

  80. We're talking GOVERNMENT here by Bruce66423 · · Score: 1

    As a big purchaser, government usually looks for discounts - which would be unavailable. All of us who are interested in enforcing the thing will be looking to see if our politicians, police officers, judges, and civil servants have a mobile. The use of a mobile by an investigator in a crime investigation could render a conviction unsustainable, since the police would have been acting illegally.

    All a bit unrealistic maybe - or maybe not.

  81. And the vendors refuse to sell by Bruce66423 · · Score: 1

    There is no duty to sell to any person regardless of the terms you as vendor are imposing. This is why such clauses would be 'enforceable', not because a court wouldn't enforce them.

    1. Re:And the vendors refuse to sell by ooloorie · · Score: 1

      This is why such clauses would be 'enforceable', not because a court wouldn't enforce them.

      How does Apple refusing to sell phones to someone make unenforceable contract clauses enforceable? Apple's option of not selling devices to some customers has nothing to do with the clauses they put into the sales contract or their enforceability.

  82. Apple wants to find out what the breach is by Bruce66423 · · Score: 1

    If they - and all other tech companies - impose a duty on government purchasers of their products to reveal any security breaches, then if the government fails to do so, it doesn't get any more toys until it conforms to the requirements of the contract.

    1. Re:Apple wants to find out what the breach is by ooloorie · · Score: 1

      If they - and all other tech companies - impose a duty on government purchasers of their products to reveal any security breaches, then if the government fails to do so, it doesn't get any more toys until it conforms to the requirements of the contract.

      What you describe is basically a boycott. Apple can certainly boycott the US government if they want to, but that has nothing to do with "adding conditions to a contract".

  83. BREAKING: Apple buys that Israelian company! by MessageDrivenBean · · Score: 0

    Apple could buy that Israelian company; problem solved. They have the money to do that. But I don't believe the iPhone was opened at all. It is just a statement to diverse the attention away from the FBI.

    --
    Quisque verborum suorum optimus interpres...
  84. Re:Better idea: by eric_harris_76 · · Score: 1

    How about burn dozens of people to death? Would they do that?

    It was an accident, of course, not deliberate and not negligent.

    --
    There's no time like the present. Well, the past used to be.
  85. Re:Better idea: by dl_sledding · · Score: 1

    On the other hand, history has shown that local issues are much better dealt with at a local level, rather than having a heavy-handed federal agency handling a situation. And, in reference to your "wacko" comment, most of what has been coming in from the feds in the last 20 years has been wacko, in a local frame-of-mind. The feds do not understand what is happening at the local level, and worse, do not care.

    The Constitution expressly gives power to the local level over the federal level on any subject not directly stated in the Constitution. Which has been bastardized and abused to the fullest by the feds in their quest over the last 150 years for power over the populace and states.

    I do understand what you are saying, though. The Civil Rights movement and protection of citizens who are being unlawfully persecuted is the classic case brought up in these discussions, and was entirely justified and needed to happen. On a daily basis, in normal situations, it is a bad, bad idea and is completely unconstitutional, and many times escalates to a very deadly outcome. I.E: Waco, Oregon, Miami, Pine Ridge, Ruby Ridge, etc.

  86. And the pot called the kettle black! by cyberzephyr · · Score: 1

    Hey.

    The F.B.I. asked APPLE for help but they said NO!

    With a mighty middle finger i might add!

    The F.B.I. found away around it. Get over it.

    Checkmate!

    --
    I'm here for the experience, not the Hyperbole.