FBI asks Apple to hack iPhones from San Bernadino attacks

[46Tbird]

I too watched the Britishname Complicated movie "The Imitation Game".

I don't know what that is. I just read a lot of books about WWII.

[Chili]

I dislike Apple, generally, but this makes me like them more..

[abecx]

I come to dfwmustangs.net when I need to get informed on the latest in decryption methodologies. The theyHave2HaveIt exploit has to be the most disconcerting one to date, thanks everyone for the insight.

[lowthreeohz]

I come to dfwmustangs.net when I need to get informed on the latest in decryption methodologies. The theyHave2HaveIt exploit has to be the most disconcerting one to date, thanks everyone for the insight.

Come on man, don't be obtuse..

Semi relevant, but Cruz did you see this?

http://motherboard.vice.com/read/how-white-hat-hackers-stole-crypto-keys-from-an-offline-laptop-in-another-room

[Murph Tang]

I'm going with Govt. on this one.

The phone could have info linking the attackers to other potential terrorists planning other attacks.

Apple could unlock phone and give to FBI without providing how they did it.

Apple sees it as good advertising how solid their encryption is and how they protected it......that's about it.

[Tremor14]

set your iphones date to 1970 and they cant hack it.

[Chili]

I'm going with Govt. on this one.

The phone could have info linking the attackers to other potential terrorists planning other attacks.

Apple could unlock phone and give to FBI without providing how they did it.

Apple sees it as good advertising how solid their encryption is and how they protected it......that's about it.

From the story, it appears to me that Apple (or Cook, actually) is more worried about the Pandora's box dilemma..

Rather than impel Apple to unlock the phone, the FBI wants Apple to help it develop a way to “bruteforce” the password—guess until it finds a match—without triggering a mechanism that deletes the key that decrypts the data. Currently, 10 wrong password tries will make the iPhone’s data inaccessible forever. The FBI would like to lift that restriction, along with the mandatory delays between password attempts that will slow their progress considerably.

While this isn’t a “backdoor” in the traditional sense, Cook argues that it amounts to one.

“The FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation,” says Cook. “In the wrong hands, this software—which does not exist today—would have the potential to unlock any iPhone in someone’s physical possession. The FBI may use different words to describe this tool, but make no mistake: Building a version of iOS that bypasses security in this way would undeniably create a backdoor. ”

In his missive, Cook vows to fight any attempts to weaken the iPhone’s encryption.

“In today’s digital world, the ‘key’ to an encrypted system is a piece of information that unlocks the data, and it is only as secure as the protections around it,” says Cook. “Once the information is known, or a way to bypass the code is revealed, the encryption can be defeated by anyone with that knowledge.” Anything that helps the FBI compromise the security of an iPhone, in other words, also helps any bad actors.

Based on that, the FBI isn't just asking Apple to provide them with the data from the phone. Besides, Apple's point is that there is currently no way to do that, and by helping the FBI develop a tool like that, they are risking it getting into the 'wrong hands'.

And many people believe that the 'wrong hands' is as likely to be the Federal government as it is a hacker or criminal.

[David]

Or how about the Federal govt can't keep themselves from being hacked so it isn't safe there.

[abecx]

Semi relevant, but Cruz did you see this?
http://motherboard.vice.com/read/how...n-another-room

I wrote that theory.

Generated encryption is only as random as the power consumption being supplied, all the more reason to use a UPS in front of your device ( firewall ).

But the encryption on a phone is far different, the hash keys were not created by the phone.

[Murph Tang]

http://appleinsider.com/articles/16/02/17/white-house-says-fbi-wants-access-to-one-iphone-not-blanket-backdoor-from-apple

In a press briefing on Wednesday, spokesman Josh Earnest said the government does not want Apple to "create a new backdoor to its products," according to Reuters. Instead, he suggested the issue is related to just one case: The December terrorist shooting in San Bernardino, Calif., that resulted in 16 deaths and 24 injuries.



I don't think this is unreasonable. Also it announces to terrorists.....use Apple products. Again its just one phone that they are asking for in regards to national defense and safety.. If it was about Jim Bob sending pics of his dingus to a coworker that's one thing but this is different.

[abecx]

spokesman Josh Earnest said the government does not want Apple to "create a new backdoor to its products,"

I think most dont understand that for a company to be able to decrypt their own platform requires for them to install a backdoor. You cant have one without the other. If apple could decode their own platform, then it can not claim it is encrypted.

Also it announces to terrorists.....use Apple products.

No it doesn't. There are already loads of ways to encrypt your data that the government can not decode, at least not in any reasonable time frame.

Again its just one phone that they are asking for in regards to national defense and safety..

Where does it stop? This mentality is the reason we are in the eternal conundrum of government boundaries. Next, I'll be called a terrorist because all of my data is encrypted. Go ahead and ask me why is it encrypted if I have nothing to hide.

[fordracing19]

I don't see how Apple cant just plug in the phone and pull the data.

[Murph Tang]

I think most dont understand that for a company to be able to decrypt their own platform requires for them to install a backdoor. You cant have one without the other. If apple could decode their own platform, then it can not claim it is encrypted.


no it doesnt.


Where does it stop?

So Apple doesn't trust their own employees to keep the back door guarded?

The attackers gave up their right for privacy when they killed their first victim.

[abecx]

So Apple doesn't trust their own employees to keep the back door guarded?

What does their employees have anything to do with it? The recent CANBUS attacks on some of Chrysler/Dodges cars were "backdoors" that companies knew about that people still figured out. Knowing there is a backdoor makes it easier to figure out how to get in. If all providers were required to supply a back door for government purposes, it would be fairly straight forward to reverse engineer the how and then brute force the way in.

The attackers gave up their right for privacy when they killed their first victim.

That's not in question.

[8mpg]

I'm going with Govt. on this one.

The phone could have info linking the attackers to other potential terrorists planning other attacks.

Apple could unlock phone and give to FBI without providing how they did it.

Apple sees it as good advertising how solid their encryption is and how they protected it......that's about it.

The .gov is going to sit there with a thumb up their ass even if they had the info.