FBI demanding Apple build in a backdoor to the IPhone

N&P: Discuss governments, nations, politics and recent related news here.

Moderators: Alyrium Denryle, Edi, K. A. Pital

User avatar
Tribble
Sith Devotee
Posts: 3131
Joined: 2008-11-18 11:28am
Location: stardestroyer.net

FBI demanding Apple build in a backdoor to the IPhone

Post by Tribble »

Here is a customer letter posted by Tim Cook yesterday:
February 16, 2016 A Message to Our Customers

The United States government has demanded that Apple take an unprecedented step which threatens the security of our customers. We oppose this order, which has implications far beyond the legal case at hand.

This moment calls for public discussion, and we want our customers and people around the country to understand what is at stake.



The Need for Encryption

Smartphones, led by iPhone, have become an essential part of our lives. People use them to store an incredible amount of personal information, from our private conversations to our photos, our music, our notes, our calendars and contacts, our financial information and health data, even where we have been and where we are going.

All that information needs to be protected from hackers and criminals who want to access it, steal it, and use it without our knowledge or permission. Customers expect Apple and other technology companies to do everything in our power to protect their personal information, and at Apple we are deeply committed to safeguarding their data.

Compromising the security of our personal information can ultimately put our personal safety at risk. That is why encryption has become so important to all of us.

For many years, we have used encryption to protect our customers’ personal data because we believe it’s the only way to keep their information safe. We have even put that data out of our own reach, because we believe the contents of your iPhone are none of our business.



The San Bernardino Case

We were shocked and outraged by the deadly act of terrorism in San Bernardino last December. We mourn the loss of life and want justice for all those whose lives were affected. The FBI asked us for help in the days following the attack, and we have worked hard to support the government’s efforts to solve this horrible crime. We have no sympathy for terrorists.

When the FBI has requested data that’s in our possession, we have provided it. Apple complies with valid subpoenas and search warrants, as we have in the San Bernardino case. We have also made Apple engineers available to advise the FBI, and we’ve offered our best ideas on a number of investigative options at their disposal.

We have great respect for the professionals at the FBI, and we believe their intentions are good. Up to this point, we have done everything that is both within our power and within the law to help them. But now the U.S. government has asked us for something we simply do not have, and something we consider too dangerous to create. They have asked us to build a backdoor to the iPhone.

Specifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation. In the wrong hands, this software — which does not exist today — would have the potential to unlock any iPhone in someone’s physical possession.

The FBI may use different words to describe this tool, but make no mistake: Building a version of iOS that bypasses security in this way would undeniably create a backdoor. And while the government may argue that its use would be limited to this case, there is no way to guarantee such control.



The Threat to Data Security

Some would argue that building a backdoor for just one iPhone is a simple, clean-cut solution. But it ignores both the basics of digital security and the significance of what the government is demanding in this case.

In today’s digital world, the “key” to an encrypted system is a piece of information that unlocks the data, and it is only as secure as the protections around it. Once the information is known, or a way to bypass the code is revealed, the encryption can be defeated by anyone with that knowledge.

The government suggests this tool could only be used once, on one phone. But that’s simply not true. Once created, the technique could be used over and over again, on any number of devices. In the physical world, it would be the equivalent of a master key, capable of opening hundreds of millions of locks — from restaurants and banks to stores and homes. No reasonable person would find that acceptable.

The government is asking Apple to hack our own users and undermine decades of security advancements that protect our customers — including tens of millions of American citizens — from sophisticated hackers and cybercriminals. The same engineers who built strong encryption into the iPhone to protect our users would, ironically, be ordered to weaken those protections and make our users less safe.

We can find no precedent for an American company being forced to expose its customers to a greater risk of attack. For years, cryptologists and national security experts have been warning against weakening encryption. Doing so would hurt only the well-meaning and law-abiding citizens who rely on companies like Apple to protect their data. Criminals and bad actors will still encrypt, using tools that are readily available to them.



A Dangerous Precedent

Rather than asking for legislative action through Congress, the FBI is proposing an unprecedented use of the All Writs Act of 1789 to justify an expansion of its authority.

The government would have us remove security features and add new capabilities to the operating system, allowing a passcode to be input electronically. This would make it easier to unlock an iPhone by “brute force,” trying thousands or millions of combinations with the speed of a modern computer.

The implications of the government’s demands are chilling. If the government can use the All Writs Act to make it easier to unlock your iPhone, it would have the power to reach into anyone’s device to capture their data. The government could extend this breach of privacy and demand that Apple build surveillance software to intercept your messages, access your health records or financial data, track your location, or even access your phone’s microphone or camera without your knowledge.

Opposing this order is not something we take lightly. We feel we must speak up in the face of what we see as an overreach by the U.S. government.

We are challenging the FBI’s demands with the deepest respect for American democracy and a love of our country. We believe it would be in the best interest of everyone to step back and consider the implications.

While we believe the FBI’s intentions are good, it would be wrong for the government to force us to build a backdoor into our products. And ultimately, we fear that this demand would undermine the very freedoms and liberty our government is meant to protect.



Tim Cook
http://www.apple.com/customer-letter/

Letter in a nutshell:

FBI wants Apple to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during an investigation

The FBI claims it will only be used for a "specific case."

Apple disagrees and claims that it will inevitably be abused, regardless of good intentions or not.

The FBI is apparently going to use the All Writs Act of 1789 to force the issue rather than ask for legislative action in congress.

Apple claims that if the FBI is successfully able to expand their jurisdiction in that way, it would act as a very nasty precedent and no doubt lead to further demands.



What's more surprising? The FBI demand? The fact that Apple made the demand public via the customer letter? The FBI's attempt to bypass congress? Or the fact that the IPhone apparently doesn't have a backdoor yet?

For me it's the ladder, I find it very hard to believe that the IPhone up until now was "secure" from government backdoors and spying.

And what do you think is going to happen? Do you think Apple is actually going to ignore the order, or do you think they will build in the backdoor and simply claim that they didn't do it? Would user be able to figure out if a backdoor is built?
Last edited by Tribble on 2016-02-17 12:53pm, edited 1 time in total.
"I reject your reality and substitute my own!" - The official Troll motto, as stated by Adam Savage
User avatar
Elheru Aran
Emperor's Hand
Posts: 13073
Joined: 2004-03-04 01:15am
Location: Georgia

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Elheru Aran »

Frankly I'm a little more surprised, but highly appreciative, that Apple would make this public.

I'm not *too* surprised that the government hasn't figured out how to crack at least the current version of iOS. Corporate security can do a pretty damn good job sometimes. The FBI was just trying to take the shortcut of making Apple do the hard work. If Apple succeeds in defending their customers' right to privacy, the government will have to sort it out themselves, which they can do, but might (almost certainly?) not be able to do as easily as the company could.
It's a strange world. Let's keep it that way.
User avatar
Borgholio
Sith Acolyte
Posts: 6297
Joined: 2010-09-03 09:31pm
Location: Southern California

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Borgholio »

I'm surprised that the FBI is going for a full blown backdoor. I can understand and even support it if they were to go to Apple and say, "Hey this is a phone we have a warrant for that belongs to a terrorist. Can you help us break into it?" But instead they're wanting EVERYONE to have such a backdoor. That seems like way over-reaching to me. In the latter case, so help me I'd actually support Apple in refusing.
You will be assimilated...bunghole!
User avatar
Tribble
Sith Devotee
Posts: 3131
Joined: 2008-11-18 11:28am
Location: stardestroyer.net

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Tribble »

Elheru Aran wrote:Frankly I'm a little more surprised, but highly appreciative, that Apple would make this public.

I'm not *too* surprised that the government hasn't figured out how to crack at least the current version of iOS. Corporate security can do a pretty damn good job sometimes. The FBI was just trying to take the shortcut of making Apple do the hard work. If Apple succeeds in defending their customers' right to privacy, the government will have to sort it out themselves, which they can do, but might (almost certainly?) not be able to do as easily as the company could.
On the other hand they might have built in the backdoor (or at least built in some preparations) already, and the letter is just a way to deflect blame before tech savvy users discovered the potential exploit.
"I reject your reality and substitute my own!" - The official Troll motto, as stated by Adam Savage
User avatar
Eternal_Freedom
Castellan
Posts: 10418
Joined: 2010-03-09 02:16pm
Location: CIC, Battlestar Temeraire

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Eternal_Freedom »

From what the letter says the "backdoor" in question is a way to test unlock codes digitally, rather than physically typing them in (with a break of a minute or so if you get it wrong 5 times IIRC) so it's faster to brute-force the password. Whilst I am no expert on the matter that does not sound as threatening as the letter implies (and even that letter states you'd need to have the phone physically in your possession in order to work).

Whilst I agree with Apple on the issue (and I never thought I'd write that) I'm really not sure I would call this a genuine back-door or exploit. It's concerning certainly but not an "oh shit the evil US government does it again" kinda thing.
Baltar: "I don't want to miss a moment of the last Battlestar's destruction!"
Centurion: "Sir, I really think you should look at the other Battlestar."
Baltar: "What are you babbling about other...it's impossible!"
Centurion: "No. It is a Battlestar."

Corrax Entry 7:17: So you walk eternally through the shadow realms, standing against evil where all others falter. May your thirst for retribution never quench, may the blood on your sword never dry, and may we never need you again.
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Ace Pace »

Lets be technically clear. They are not talking about your classic backdoor (RAT/Trojan). They are requesting Apple remove, on a specific device, the safeguards against brute-forcing passwords and allowing them to try that digitally.

This is weakening device security, but not a backdoor.

That's completly aside from my opinion on this, but let's be clear on facts.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Purple
Sith Acolyte
Posts: 5233
Joined: 2010-04-20 08:31am
Location: In a purple cube orbiting this planet. Hijacking satellites for an internet connection.

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Purple »

The issue with such a thing is that if you remove those safeguards it becomes remarkably easy to brute force it via a remote software attack. Remember, a computer is not limited to your typing speed. It can try thousands of passwords per second. The combination of being able to enter a code remotely by digital means and not having a limiter to prevent brute force spam would allow anyone, anywhere with digital access to your phone to hack it very quickly even if it is using the simplest of brute force try every combination approach.

That is why you have all those annoying systems on websites that bug you if you keep forgetting your password. It's to prevent someone with 15 minutes of spare time to write a script from hacking the entire database.
It has become clear to me in the previous days that any attempts at reconciliation and explanation with the community here has failed. I have tried my best. I really have. I pored my heart out trying. But it was all for nothing.

You win. There, I have said it.

Now there is only one thing left to do. Let us see if I can sum up the strength needed to end things once and for all.
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Ace Pace »

Purple wrote:The issue with such a thing is that if you remove those safeguards it becomes remarkably easy to brute force it via a remote software attack. Remember, a computer is not limited to your typing speed. It can try thousands of passwords per second. The combination of being able to enter a code remotely by digital means and not having a limiter to prevent brute force spam would allow anyone, anywhere with digital access to your phone to hack it very quickly even if it is using the simplest of brute force try every combination approach.

That is why you have all those annoying systems on websites that bug you if you keep forgetting your password. It's to prevent someone with 15 minutes of spare time to write a script from hacking the entire database.
No shit sherlock, this is why they are asking for this and not something else which Apple cannot do. And infact, there are commercial companies which sell such features to law enforcement.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Tribble
Sith Devotee
Posts: 3131
Joined: 2008-11-18 11:28am
Location: stardestroyer.net

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Tribble »

Eternal_Freedom wrote:From what the letter says the "backdoor" in question is a way to test unlock codes digitally, rather than physically typing them in (with a break of a minute or so if you get it wrong 5 times IIRC) so it's faster to brute-force the password. Whilst I am no expert on the matter that does not sound as threatening as the letter implies (and even that letter states you'd need to have the phone physically in your possession in order to work).

Whilst I agree with Apple on the issue (and I never thought I'd write that) I'm really not sure I would call this a genuine back-door or exploit. It's concerning certainly but not an "oh shit the evil US government does it again" kinda thing.
I think they're looking at the bigger picture. If Apple built the hacking IOS as requested that's a precedent the FBI would almost certainly use elsewhere. And it would almost certainly lead to further demands down the road. What would stop the FBI and other agencies from one day demanding Apple to covertly install the software on every IPhone. Or developing more tools for the FBI to exploit? Better to fight this one out now rather than later.

IMO the main reason why the FBI wants Apple to make the software, apart from trying to establish more precedent setting powers, is that they don't want people monitoring their activities. While Apple was apparently being fully cooperative to cover their asses they'd still be making notes whenever the FBI requested access. If this software is made the FBI would be able to do it without anyone's knowledge. And once they have the software, it's possible they'd be able to further develop it further (such as being able to hack phones and access their data wirelessly).
"I reject your reality and substitute my own!" - The official Troll motto, as stated by Adam Savage
User avatar
aerius
Charismatic Cult Leader
Posts: 14801
Joined: 2002-08-18 07:27pm

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by aerius »

Did some looking around and found the actual court order
https://assets.documentcloud.org/docume ... iPhone.pdf

It looks to me that they want to install a device specific hack that will allow the FBI to brute force the password on the device in question, and only that device. Which is fine, except for the precedent. If Apple complies there's now legal precedent that they have to install device hacks when asked to do so, and the future ones may not be this focused & specific. Also note the part which covers acceptable device inputs, which is all of them including wireless.

Sidenote. Donald Trump is on the record as fully in favour of the hack. Let's say he become your next president. We already know how much he loves migrants, especially illegals. Would you want him ordering that all phones be backdoored so that he can find the illegals and kick them out of America?
Image
aerius: I'll vote for you if you sleep with me. :)
Lusankya: Deal!
Say, do you want it to be a threesome with your wife? Or a foursome with your wife and sister-in-law? I'm up for either. :P
User avatar
Tribble
Sith Devotee
Posts: 3131
Joined: 2008-11-18 11:28am
Location: stardestroyer.net

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Tribble »

aerius wrote:Did some looking around and found the actual court order
https://assets.documentcloud.org/docume ... iPhone.pdf

It looks to me that they want to install a device specific hack that will allow the FBI to brute force the password on the device in question, and only that device. Which is fine, except for the precedent. If Apple complies there's now legal precedent that they have to install device hacks when asked to do so, and the future ones may not be this focused & specific. Also note the part which covers acceptable device inputs, which is all of them including wireless.

Sidenote. Donald Trump is on the record as fully in favour of the hack. Let's say he become your next president. We already know how much he loves migrants, especially illegals. Would you want him ordering that all phones be backdoored so that he can find the illegals and kick them out of America?
I'm actually kind of surprised they don't have these kinds of hacks already. Maybe the difference is that this way they can do it legally?
"I reject your reality and substitute my own!" - The official Troll motto, as stated by Adam Savage
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Ace Pace »

Tribble wrote: I'm actually kind of surprised they don't have these kinds of hacks already. Maybe the difference is that this way they can do it legally?
It's very likely they have similar debug hooks in debug versions, but having this in consumer versions is liable for a giant fuckup. Similar to what's been happening to a few IT companies over the last few months.

In modern iPhones, this will actually not be possible, since they're using a seperate hardware chip with non-upgradable firmware protection (Secure Enclaveis their marketing term) that will itself enforce the limitation, making this backdoor less useful.

For all the more technically inclined people, Trail of Bits has a decent writeup.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
Grumman
Jedi Council Member
Posts: 2488
Joined: 2011-12-10 09:13am

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Grumman »

Is James Clapper in prison or dead yet? No? Then the FBI can fuck off.
Adam Reynolds
Jedi Council Member
Posts: 2354
Joined: 2004-03-27 04:51am

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Adam Reynolds »

It is interesting that Apple took the step of going public with this information. Quite good that they took this step. Though it is actually on par with their previous direction on this issue.

One interesting issue is that the ACLU points outthat the NSA almost certainly has the technical capabilities to pull this off, but that the FBI is attempting to do this legally to set a precedent that would allow them to take further steps at a later date.
bilateralrope
Sith Acolyte
Posts: 6179
Joined: 2005-06-25 06:50pm
Location: New Zealand

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by bilateralrope »

There are probably good business reasons for Apple's stance here. If they build such a tool, but no equivalent is built for a competing smartphone (say, because the OS is developed in China and the devs tell the FBI to fuck off when they make a similar request), then they lose any customer who wants a secure smartphone.
aerius wrote:Did some looking around and found the actual court order
https://assets.documentcloud.org/docume ... iPhone.pdf

It looks to me that they want to install a device specific hack that will allow the FBI to brute force the password on the device in question, and only that device. Which is fine, except for the precedent. If Apple complies there's now legal precedent that they have to install device hacks when asked to do so, and the future ones may not be this focused & specific. Also note the part which covers acceptable device inputs, which is all of them including wireless.
The problem is that Apple can not build something that complies with the court order without building something that can be used on any IPhone and, once Apple creates such a tool, they have no control over who uses it.
User avatar
Solauren
Emperor's Hand
Posts: 10386
Joined: 2003-05-11 09:41pm

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Solauren »

Someone should point out to the FBI the best thing to do would be to hand Apple the phone and say 'crack the password on it, then hand us that password and the phone back'.

Apple can then crack that specific phone, hand it to the FBI, and keep how they did it 'in house'.
I've been asked why I still follow a few of the people I know on Facebook with 'interesting political habits and view points'.

It's so when they comment on or approve of something, I know what pages to block/what not to vote for.
bilateralrope
Sith Acolyte
Posts: 6179
Joined: 2005-06-25 06:50pm
Location: New Zealand

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by bilateralrope »

Solauren wrote:Someone should point out to the FBI the best thing to do would be to hand Apple the phone and say 'crack the password on it, then hand us that password and the phone back'.

Apple can then crack that specific phone, hand it to the FBI, and keep how they did it 'in house'.
That still requires Apple to create a method that could crack any IPhone. Which is the part they are opposed to. Probably because they don't think that they can keep it secret, especially after people know it exists and decide that they are willing to break into Apple to get it.
User avatar
Terralthra
Requiescat in Pace
Posts: 4741
Joined: 2007-10-05 09:55pm
Location: San Francisco, California, United States

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Terralthra »

A properly designed passcode system shouldn't be able to be broken even by the team that designed and implemented it. That's the point, after all. If Apple could circumvent a passcode protection, anyone can.
User avatar
K. A. Pital
Glamorous Commie
Posts: 20813
Joined: 2003-02-26 11:39am
Location: Elysium

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by K. A. Pital »

Hope the FBI loses this one. Enough with the total-surveillance cyberpunk. And why would anyone in their right mind trust the US government not to abuse its power massively? Actually I did not expect Apple to come forward with this. Perhaps they're doing this for PR, but in this case... Well, they have succeeded. It is good PR. Even to someone who despises corporations, like myself.
Lì ci sono chiese, macerie, moschee e questure, lì frontiere, prezzi inaccessibile e freddure
Lì paludi, minacce, cecchini coi fucili, documenti, file notturne e clandestini
Qui incontri, lotte, passi sincronizzati, colori, capannelli non autorizzati,
Uccelli migratori, reti, informazioni, piazze di Tutti i like pazze di passioni...

...La tranquillità è importante ma la libertà è tutto!
Assalti Frontali
Channel72
Jedi Council Member
Posts: 2068
Joined: 2010-02-03 05:28pm
Location: New York

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Channel72 »

Terralthra wrote:A properly designed passcode system shouldn't be able to be broken even by the team that designed and implemented it. That's the point, after all. If Apple could circumvent a passcode protection, anyone can.
If it's just a matter of brute forcing a password, then Apple just needs to disable the time delay after each failed attempt. Then anybody with a decent cluster (or even just an iPhone really...) can brute force it in a matter of time, depending on how long the password is. In theory, for each byte in the password, the number of possible guesses increases exponentially, but in practice the password is likely limited to a subset of the ASCII character range and not very long.

If the phone/desired data is protected by proper public key cryptography and the FBI/Apple doesn't have the private key, then in theory it should be impossible for anybody (even Apple) to crack it in any reasonable amount of time.
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Ace Pace »

Channel72 wrote:
Terralthra wrote:A properly designed passcode system shouldn't be able to be broken even by the team that designed and implemented it. That's the point, after all. If Apple could circumvent a passcode protection, anyone can.
If it's just a matter of brute forcing a password, then Apple just needs to disable the time delay after each failed attempt. Then anybody with a decent cluster (or even just an iPhone really...) can brute force it in a matter of time, depending on how long the password is. In theory, for each byte in the password, the number of possible guesses increases exponentially, but in practice the password is likely limited to a subset of the ASCII character range and not very long.

If the phone/desired data is protected by proper public key cryptography and the FBI/Apple doesn't have the private key, then in theory it should be impossible for anybody (even Apple) to crack it in any reasonable amount of time.

Why are you all discussing this when the technical details are all given. It's an old model iPhone with no hardware protection. It's password locked with a timeout. What the FBI wants is not an ability to break the encryption, which is impossible. What the FBI is requesting is an ability to brute force the password without wiping the device and without having timeouts.
There is nothing here about breaking encryption or brute forcing encryption keys. It's a locked iPhone.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Jaepheth
Jedi Master
Posts: 1055
Joined: 2004-03-18 02:13am
Location: between epsilon and zero

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Jaepheth »

Seems like they could just clone the encrypted memory to a virtual iPhone emulator and then use save-states and/or multiple instances to brute force it in a reasonably short time. Doesn't even need to be a fully functional emulator, just enough to figure out what the password is.

I could be wrong though; it's not really my area of expertise.
Children of the Ancients
I'm sorry, but the number you have dialed is imaginary. Please rotate the phone by 90 degrees and try again.
ndryden
Redshirt
Posts: 9
Joined: 2013-11-09 11:47am

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by ndryden »

Jaepheth wrote:Seems like they could just clone the encrypted memory to a virtual iPhone emulator and then use save-states and/or multiple instances to brute force it in a reasonably short time. Doesn't even need to be a fully functional emulator, just enough to figure out what the password is.

I could be wrong though; it's not really my area of expertise.
Even an old iPhone 5C like the one in question "tangles" the user's passphrase with a unique hardware key that you can't read off (perhaps unless you have an electron microscope and a lot of time), so brute-force attacks need to be performed on the device. But on a 5C, the password delay and attempt limits are implemented in software, so with a firmware patch (signed by Apple), you can get around them. On later phones, these are enforced in hardware using the Secure Enclave, so you can't get around them.
User avatar
Terralthra
Requiescat in Pace
Posts: 4741
Joined: 2007-10-05 09:55pm
Location: San Francisco, California, United States

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Terralthra »

A signed firmware update that disables the delay after entering too many incorrect passwords would circumvent that delay for all iPhone 5Cs. I don't understand what is so hard to understand about this. If Apple gives this piece of software to the FBI, every iPhone 5C is compromised, not just this one. The FBI can break into any of them, and so can any other nation with the power to compel Apple (China, Russia, Japan, the EU, Iran...), and so can every criminal or criminal organization capable of infiltrating the network of any of those nation-states. The FBI is asking Apple to break passcode protection on all iPhone 5Cs. Apple is refusing, and I think they're right to do so.
Channel72
Jedi Council Member
Posts: 2068
Joined: 2010-02-03 05:28pm
Location: New York

Re: FBI demanding Apple build in a backdoor to the IPhone

Post by Channel72 »

Ace Pace wrote:Why are you all discussing this when the technical details are all given. It's an old model iPhone with no hardware protection. It's password locked with a timeout. What the FBI wants is not an ability to break the encryption, which is impossible. What the FBI is requesting is an ability to brute force the password without wiping the device and without having timeouts.
There is nothing here about breaking encryption or brute forcing encryption keys. It's a locked iPhone.
Right, sorry - the OP itself seemed pretty vague. Specifically, Tim Cook's letter says:
Tim Cook wrote:In today’s digital world, the “key” to an encrypted system is a piece of information that unlocks the data, and it is only as secure as the protections around it. Once the information is known, or a way to bypass the code is revealed, the encryption can be defeated by anyone with that knowledge
So here he's clearly referring to public key cryptography, which is completely misleading if all they're talking about here is a password-protected iPhone.
Post Reply