Slashdot Mirror


Drive-By Shooting Suspect Remotely Wipes iPhone X, Catches Extra Charges (appleinsider.com)

schwit1 shares a report from Apple Insider: A woman from Schenectady, N.Y. accused of being the driver in a shooting used Apple's remote wipe feature to destroy evidence on her iPhone X that might have been related to the event. The iPhone was seized as evidence in the case, but police say that shortly after she triggered the remote wipe, an option available via Find My iPhone in iCloud. Normally the tool is intended for people with lost or stolen devices. The suspected driver, Juelle Grant, was arrested on November 2nd and charged with two counts of tampering with physical evidence, and one count of hindering prosecution. As Apple Insider notes, only one of the tampering counts is connected to the iPhone.

31 of 218 comments (clear)

  1. No Faraday cage? by Arzaboa · · Score: 5, Insightful

    I'm surprised (I probably shouldn't be) that the police do not have some system in place so that these phones are cut off from communicating with anything once they have them. I'd have to think that a tampering charge is less than a murder charge.

    --
    Success is walking from failure to failure with no loss of enthusiasm. -- Winston Churchill

    1. Re:No Faraday cage? by Locke2005 · · Score: 2

      I'd also have to think that you can't prove in court who did it -- anybody with her icloud username and password COULD have wiped the phone. And yes, I'd think they would immediately put phones in as RF-proof bag as possible. It they don't, they are just being idiots.

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    2. Re:No Faraday cage? by Harlequin80 · · Score: 5, Insightful

      It's beyond reasonable doubt, not beyond ANY doubt.

      For example

      Someone logs into her iCloud account, from an IP address that is registered to her physical address and then wipes the phone immediately after an event that gives her motive to wipe the phone.

      You then have means, motive and opportunity with little to no reason to believe anything else was likely to occur. I don't see how you could argue that there was a reasonable doubt.

    3. Re: No Faraday cage? by hey! · · Score: 2

      That's actually my point: accuracy and confidence are two different things. From my experience serving on juries, voting to convict probably implies more than a 90% level of belief. As people near a conclusion they switch from reasoning to rationalizing, which means that last bit of certainty is spurious.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    4. Re: No Faraday cage? by DontBeAMoran · · Score: 3, Funny

      They're law enforcement officers. They don't have time to play the sims.

      --
      #DeleteFacebook
    5. Re:No Faraday cage? by ehlo · · Score: 5, Informative

      I work in a team that, among other things, does forensic acquisitions of electronic devices on a regular basis, including with the police.

      This type of scenario is what we scare the new recruits with when we have them in day-1 training. So much effort goes into acquiring devices (warrants, court orders, co-ordination, deployment, police presence, etc) and there's so much riding on the (potential) evidence on them that it would be devastating to go through all of that effort only to be foiled by a remote wipe.

      It is best practice to turn the device on airplane mode as soon as the device comes into your possession, and/or put it in a faraday bag. There are special ones made specifically for mobile phones that have windows in them so you can see the device's screen. They cost $200. The acquisition and chain of custody forms you have to fill in when acquiring a device in the field usually even have a box you have to tick to indicate that you have put it in flight mode.

      tldr; there are robust best practises in place, they weren't followed in this case.

    6. Re: No Faraday cage? by c6gunner · · Score: 3, Informative

      By using the airplane mode button. The one which shows up on the lock screen.

    7. Re: No Faraday cage? by blindseer · · Score: 4, Insightful

      Usually, turning a phone off is easy enough. It might need a password to do so - in which case you force it off by removing the battery. Oops - can't do that with some of the newer phones.

      A non-removable battery is a feature, not a bug. If you want a phone that can be wiped remotely to secure your data from being taken without your permission then you want the phone to stay powered so it can receive the wipe command. Alternately the storage could be volatile and removing the battery would wipe as well.

      I'm not terribly concerned if the police are inconvenienced in scraping data off our pocket computers. My electronic devices are for my convenience, not the government's.

      --
      I am armed because I am free. I am free because I am armed.
    8. Re: No Faraday cage? by piojo · · Score: 2

      Don't forget not all our laws are just. Also, don't forget police are also part of the group that solves problems by pointing guns at them.

      Have you ever called the police and subsequently been arrested yourself because of some tired cop's poor judgment or personal biases? That happens, too.

      My point is: I caution you against assuming all arrested people are violent thugs. Some of them are, most aren't.

      --
      A cat can't teach a dog to bark.
    9. Re: No Faraday cage? by c6gunner · · Score: 2

      The S7 is nowhere near stock android. It's heavily customized by Samsung.

      Yes, some manufacturers to remove that functionality from the lock screen.

  2. Product idea? by b0s0z0ku · · Score: 4, Interesting

    How about a one-way drop box on police cars that's a Faraday cage, grounded to the car's chassis with a lock that only management can open. Should prevent phones from being wiped, and preserve the chain of evidence -- if a body cam shows the phone being dropped into the secure box and the box is only opened in the presence of two people, it would reduce the risk of accusations of evidence tampering. Better yet, design the box to be sent directly to a trustworthy lab equipped with a Faraday cage where they can work on the phone. (i.e. PD can only put the phone in, they can't unlock it at all).

    1. Re:Product idea? by b0s0z0ku · · Score: 2

      Don't some iPhones use an eSIM these days?

    2. Re:Product idea? by yarbo · · Score: 2

      It could be triggered by being cut off for more than 10 minutes, it could shut itself down to make the only venue for attack the drive encryption (rather than memory, or screenlock attacks). It could require a password entered within 30 minutes to prevent wiping.

      There are a lot of ways to approach this problem that balance how much data to destroy or inconvenience to impose along with how sensitive it could be.

      For some people, false positives are strongly preferred to false negatives.

  3. Re:Not supporting shootings, but... by Anonymous Coward · · Score: 3, Insightful

    There is a big difference between tampering with evidence and being required to assist in your own conviction...

    There is a thing called a Constitution and the right against self incrimination, maybe you have heard of it?

  4. Re:Like Schoedinger's cat, kinda by rogoshen1 · · Score: 4, Insightful

    I think it's one of those "we're gonna charge you, and you can fight it; but you'll get the maximum penalty -- OR you can fess up and we'll give you 5 years and probation" type shake-downs.

    And definitely, this round will definitely go to the bad guys (overreaching DA's and police)

  5. You don't have to prove anything in court by Anonymous Coward · · Score: 2, Insightful

    I'd also have to think that you can't prove in court who did it

    Not really. IRL something like 98% of cases are plea-bargained, so generally you don't have to prove a damn thing.

  6. Re:Faraday cage by dlleigh · · Score: 4, Informative

    That is incorrect. Faraday cages do not require a ground and can be very portable.

    A simple roll of aluminum foil would work. Just tear off a large sheet, wrap it around the phone and crimp the edges with your fingers. Done!

    The aluminum foil would be quite effective at blocking the RF signals going to and from the phone, and it would also detune the phone's internal antennas, increasing the effectiveness even more.

  7. Re:Not supporting shootings, but... by s4080326 · · Score: 2

    Refusing to give up the encryption key would be contempt of court depending or your fifth amendment right depending on the price of your lawyer.

  8. Re:Not supporting shootings, but... by mentil · · Score: 2

    It was an iPhone X, so the police would hold it up to her face to unlock it. This has happened before.

    --
    Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
  9. Re:Faraday cage by cdsparrow · · Score: 2

    Yeah, just put my phone in microwave, it didn't lose either cell or wifi signal. Signal strength went down some, but still played youtube for a couple minutes just fine.

  10. Re:Like Schoedinger's cat, kinda by Kjella · · Score: 5, Informative

    So? If you're served with a subpoena wiping the records instead is a crime, they don't have to prove the records would have been incriminating. I think it's obvious the same should apply to remotely wiping a seized device. You're free to set up any security policy you like in advance, even a dead man's switch if you want but taking active hostile action against a police investigation is not accepted in any legal system. Now I'm sure the US legal system has a lot of other issues, but I really fail to see how this makes them the bad guy. Not even a little.

    --
    Live today, because you never know what tomorrow brings
  11. Just write a security app and be done with it by nehumanuscrede · · Score: 2

    Of course you'll have to call it a " security " or " privacy protection " app before Apple would even consider such a thing on the App Store.
    Make sure to think of a catchy name for it. . . .

    Conditions:

    1) User has not logged into phone in $user_defined number of hours ( user is detained )
    2) No signal ( cellular or wifi ) present ( phone is in a signal denied environment )
    3) User has the paranoid feature enabled

    #2 is fun because they have to choose to either leave the phone connected to a network ( risking a remote wipe ) or denying the connection and running the risk of the phone wiping itself. Decisions, decisions . . . . . .

    User selectable payloads:

    a) Phone wipes itself
    b) Phone rekeys with a random password ( user plausible deniability - I really don't know the password )
    c) Phone overwrites data with random gibberish or lyrics from your favorite anti-police music ( NWA can help you out here )

    If you're the forgetful criminal type, you can always add a setting to flash a warning, beep, vibrate, whatever telling you bad things are about to happen to your phone if you don't log into it soon.

    Done.

    Or you could, you know, leave your damn phone at home if you plan on doing something stupid. . . . . .
    ( # 2 answer right behind don't do anything stupid to begin with )

    *afterthought*

    This whole " they-might-wipe-the-phone-remotely-so-put-it-in-a-shielded-bag-or-faraday cage " thing wouldn't be an issue if there was a user removable battery in these things.

    Just sayin . . . .

  12. Re:Faraday cage by Raenex · · Score: 4, Funny

    Parent is correct. I can confirm 5G does not penetrate my aluminum hat.

  13. Re:Faraday cage by Anonymous Coward · · Score: 2, Funny

    Yeah, just put my phone in microwave, it didn't lose either cell or wifi signal. Signal strength went down some, but still played youtube for a couple minutes just fine.

    You forgot to turn on the microwave.

  14. Re:Faraday cage by Sarten-X · · Score: 5, Informative

    Speaking of microwaves, I am puzzled as to why we consider them shielded enough for human safety

    Because the general public has no idea how microwave ovens work, or what microwave radiation does to humans. It's just a magic box that makes food hot, and probably doesn't kill the operator too quickly.

    The size and shape of the oven is actually important. The microwaves bounce around inside, and produce standing waves. If you disable the motor on an oven (or put an upside-down plate over the spinning hub), and heat a large chocolate bar, you'll see some places get hot quickly (at the antinodes of the standing waves), and other places stay cool (where the reflecting waves aren't reinforcing each other). The motor acts to move food around through the hot spots, to more evenly expose the food to the high points of radiation.

    Now about that radiation... It's really just a really bright light at a particular "color" (like all electromagnetic waves). It's in the 2.45 GHz range, just like 802.11 WiFi and Bluetooth signals. At that frequency, it makes molecules a bit more active, especially water molecules. It's not energetic enough to move atoms or electrons, so it won't change your DNA or cause cancer, but water will absorb microwave energy very nicely. Notably, that includes all the water just under your skin, so there's almost no radiation getting through more than about 17 millimeters of tissue.

    Yes, that means that if your oven's shielding isn't particularly good, you will actually get "cooked" if you stand close to it... but because you aren't inside the oven, the microwaves aren't reinforcing each other, so there aren't any of those "hot spots" that actually cause significant heating. Essentially, you're getting hit with radiation, but usually not enough, and in too small of an area to matter (unless you do something particularly hazardous, like stand in front of a high-power microwave transmitter).

    In short, it doesn't matter much if your microwave oven is a little leaky. It might disrupt WiFi and Bluetooth a bit, but it won't cause any more harm than eating a few bananas... the radiation from those will actually be inside you, passing right by your vital organs! However, you do still want your oven to leak as little radiation as possible, but for a different reason: any energy that escapes the oven isn't going to be heating your food.

    So are all of them poorly shielded and leaking acceptable non-cooking radiation?

    Yep.

    --
    You do not have a moral or legal right to do absolutely anything you want.
  15. Re: Faraday cage by hey! · · Score: 2

    If your small faraday cage is perfect and infinitely conductive, it will work perfectly. If is reasonably well constructed and fairly conductive, it will work well enough.

    I suspect real world behavior for such shields is more complex than the simple high school physics model, and that the device inside is less than perfectly shielded. The shield in a shielded cable can be thought of as an imperfect Faraday cage, and depending on application it may not require grounding or it may need to be grounded at one or both ends.

    In any event grounding never hurts and in practice sometimes it helps.

    The idea that grounding is mandatory may come from preppers building room sized Faraday cages so their stuff survives a post EMP apocalypse. Not only is such a large build likely to have numerous imperfections, in some situations the cage and it's contents can acquire a large static charge relative to ground.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  16. Re:Not supporting shootings, but... by Actually,+I+do+RTFA · · Score: 4, Informative

    You don't have to provide an encryption key - you don't have to help them. But you cannot hinder them.

    Similarly, lawyers and big corporations shred documents regularly, because that's legal. But once they are subpoenaed, it's illegal

    --
    Your ad here. Ask me how!
  17. Re: Faraday cage by houghi · · Score: 5, Funny

    Haha. We made him type this.

    --
    Don't fight for your country, if your country does not fight for you.
  18. Re:Faraday cage by thegarbz · · Score: 2

    Faraday cages require a ground, i.e. they are not portable. But there should be some way of blocking radio reception. In our Faraday cage at work, I was still able to communicate with WiFi routers outside the cage; they are not perfect.

    It depends on what you are doing. If your goal is to block a radio signal you don't need to ground a faraday cage. If your goal is to protect people or equipment including from the faraday cage itself then it should be grounded to avoid a charge building up on it or currents flowing through it when you touch it.

  19. Re: Time-Based Remote Wipe by c6gunner · · Score: 2

    Assuming you have a rooted Android phone you can probably accomplish that with Tasker.

  20. Re:Not supporting shootings, but... by Actually,+I+do+RTFA · · Score: 2

    She may "explain better", but I'm not going to watch a video to reply to a slashdot comment. Care to summarize? (Or is your point that you can be forced to help with biometric locks? Yeah, that's why you should have a PIN if you really care.) Also, offer only good in the USA..

    --
    Your ad here. Ask me how!