Slashdot Mirror


NSA Couldn't Hack San Bernardino Shooter's iPhone; Now Working On Exploiting IoT (theintercept.com)

The FBI did turn to NSA when it was trying to hack into the San Bernardino shooter's iPhone, according to an NSA official. But to many's surprise, one of the world's most powerful intelligence agencies couldn't hack into that particular iPhone 5c model. "We don't do every phone, every variation of phone," said Richard Ledgett, the NSA's deputy director. "If we don't have a bad guy who's using it, we don't do that." According to Ledgett, apparently the agency has to prioritize its resources and thus it doesn't know how to get into every popular gadget. According to the report, the agency is now looking to exploit Internet of Things, including biomedical devices. The Intercept reports: Biomedical devices could be a new source of information for the NSA's data hoards -- "maybe a niche kind of thing ... a tool in the toolbox," he said, though he added that there are easier ways to keep track of overseas terrorists and foreign intelligence agents. When asked if the entire scope of the Internet of Things -- billions of interconnected devices -- would be "a security nightmare or a signals intelligence bonanza," he replied, "Both."

5 of 90 comments (clear)

  1. Pinocchio nose by Anonymous Coward · · Score: 2, Interesting

    What a bunch of fucking liars. Some private company contracted by FBI could do it and the NSA couldn't ? Maybe the Sheeple believe it, but I don't.

  2. The good guys :) by axewolf · · Score: 1, Interesting

    See, the NSA isn't the evil organization that is treating you as an active threat to your own country for no reason.

    They are the good guys, the ones who try to stop the terrorists from doing mass shootings! And they aren't even omnipotent, they can't even crack your iPhone!

    You know it's true because it's in the news.

  3. Easy to test by cdsparrow · · Score: 3, Interesting

    1. Get an identical 5c and ios version that the SB phone was using.
    2. Put tons of links in the web history to places you can monitor hits.
    3. Lock the phone and reset the appleid password.
    4. Throw the phone over a fence at Fort Meade.
    5. Sit back and watch for those hits. I bet it won't take long.
    6. ???
    7. Profit!

  4. You're not thinking like an intelligence agency by Solandri · · Score: 5, Interesting

    The San Bernardino iPhone was too high-profile a case. If the NSA had cracked it for the FBI, then everyone would've known they could crack the iPhone's encryption. Apple would've immediately set about changing it, people with stuff to hide from the NSA would've immediately started adding an additional layer(s) of encryption on top, sources of intel the NSA was getting fro iPhones would've dried up. If the NSA could crack it, the last thing they would do is reveal they could. If you reveal it, that's the last time you get to use it. If you keep it secret, you get to use it over and over again.

    So the "fact" that the NSA couldn't crack it for the FBI doesn't really tell us anything - that would've been their story whether or not they could crack it. Heck, for all we know, the NSA did crack it, and this whole story about the FBI paying some random hacker is a charade to cover it up.

  5. Re: IoT is the new mesh. We should exploit it too by NotAPK · · Score: 3, Interesting

    You're absolutely right about the mesh network being insecure: but SO IS THE INTERNET (see NSA and Snowdon) and the physical and routing layers should always be regarded as untrusted.

    The only solution is to use a secure VPN at all times. Of course you'll need an end point at some point, but I'd rather my end point was on a different continent, and ideally a country with minimal treaties with my own.

    Of course performance for such a thing will be in the toilet. Ever used Tor? It's slow as well. But if faced with a choice between security and privacy (lumping them together) vs convenience, I know exactly which one I choose every time. Of course I'm not normal.