Apple ordered to create software to help unlock a phone for FBI

[photon]

http://arstechnica.com/tech-policy/2...ooters-iphone/

On Tuesday, a federal judge in Riverside, California, ordered Apple to help the government unlock and decrypt the iPhone 5C used by Syed Rizwan Farook, who shot up an office party in a terrorist attack in nearby San Bernardino in December 2015.

Specifically, United States Magistrate Judge Sheri Pym mandated that Apple provide the FBI a custom firmware file, known as an IPSW file, that would likely enable investigators to brute force the passcode lockout currently on the phone, which is running iOS 9.

Apple's posted a letter in repsonse

https://www.apple.com/customer-letter/

The United States government has demanded that Apple take an unprecedented step which threatens the security of our customers. We oppose this order, which has implications far beyond the legal case at hand.
...
The government suggests this tool could only be used once, on one phone. But that’s simply not true. Once created, the technique could be used over and over again, on any number of devices. In the physical world, it would be the equivalent of a master key, capable of opening hundreds of millions of locks — from restaurants and banks to stores and homes. No reasonable person would find that acceptable.

The government is asking Apple to hack our own users and undermine decades of security advancements that protect our customers — including tens of millions of American citizens — from sophisticated hackers and cybercriminals. The same engineers who built strong encryption into the iPhone to protect our users would, ironically, be ordered to weaken those protections and make our users less safe.

[Resolute 14]

Here's hoping appeals courts reverse this. It represents a very dangerous precedent. Especially since the FBI demanded it in this case for no real reason. It was a fishing expedition designed to use a 'terrorist attack' to generate emotional sympathy for a request that is completely unethical.

[northcrunk]

There goes apple supporting terrorists again

Seriously though there is a way for Apple to allow the FBI to search this phone that doesn't cripple the privacy of everyone else they are just grandstanding. I hate apple anyway so I have my bias but Apple is a #### company.

[HotHotHeat]

Originally Posted by northcrunk

There goes apple supporting terrorists again

Seriously though there is a way for Apple to allow the FBI to search this phone that doesn't cripple the privacy of everyone else they are just grandstanding. I hate apple anyway so I have my bias but Apple is a #### company.

Let's do an exercise.

Replace Apple with Google in the OP. How does your opinion change?

This story isn't about Apple. It's about privacy.

[Looch City]

Originally Posted by HotHotHeat

Let's do an exercise.

Replace Apple with Google in the OP. How does your opinion change?

This story isn't about Apple. It's about privacy.

The story wouldn't exist with Google, they'd be happy to help.

[calumniate]

Colour me naïve, but I didn't think this would be a precedent setting event!

Don't FBI access computers, or even 'macbooks' if a warrant justifies it? If so, how is a cellphone any different?

[northcrunk]

Originally Posted by HotHotHeat

Let's do an exercise.

Replace Apple with Google in the OP. How does your opinion change?

This story isn't about Apple. It's about privacy.

I didn't really say I disagree with Apples decision. I just hate Apple as a company. Always have.

[northcrunk]

Here is a decent article on the subject:

http://blog.trailofbits.com/2016/02/...i-court-order/

[photon]

Originally Posted by Iggy City

The story wouldn't exist with Google, they'd be happy to help.

No they wouldn't, Google has sided with Apple and many other tech companies in saying back doors and weakening security isn't the right way to do thing.

https://www.itic.org/membership/member-companies

[photon]

Originally Posted by northcrunk

Seriously though there is a way for Apple to allow the FBI to search this phone that doesn't cripple the privacy of everyone else they are just grandstanding.

Uh no there isn't. Software is digitally signed with a private key, the whole point of a private key is that it's private.

This is ordering Apple to use their private key to create software that weakens the security of the private key.

It's like the court ordering someone to create a master key to all the houses in the world. I'm sure they'll promise not to use it again right? It'll never get stolen or borrowed right? You can't un-make it, and you can't change all the locks in the world.

[Resolute 14]

Originally Posted by northcrunk

There goes apple supporting terrorists again

Seriously though there is a way for Apple to allow the FBI to search this phone that doesn't cripple the privacy of everyone else they are just grandstanding. I hate apple anyway so I have my bias but Apple is a #### company.

No, there isn't a way that Apple could develop a back door that only the FBI could use. Either the code would get out, or more likely, given proof that it is possible, black hats would program their own bypass.

More to the point, the FBI absolutely should not be trusted with such a power in the first place.

[Azure]

Originally Posted by northcrunk

There goes apple supporting terrorists again

Seriously though there is a way for Apple to allow the FBI to search this phone that doesn't cripple the privacy of everyone else they are just grandstanding. I hate apple anyway so I have my bias but Apple is a #### company.

Apple might be whatever you think they are as a company, but Tim Cook is looking at the whole privacy issue the right way as a CEO of a multi-billion dollar company.

[Azure]

Originally Posted by calumniate

Colour me naïve, but I didn't think this would be a precedent setting event!

Don't FBI access computers, or even 'macbooks' if a warrant justifies it? If so, how is a cellphone any different?

I would imagine they can't get access here through the normal channels so they're demanding Apple do something fancy and unheard of to get access.

[Resolute 14]

The FBI would have similar difficulty accessing a macbook or other computer if it was encrypted and no back door was available.

And, of course, it is notable that the FBI is abusing a 227 year old law to try and undermine personal privacy and security.

[Fuzz]

Curious, do those laws apply when you are dead?

From what I have read, Apple has no way of providing a device decryption key, and the FBI knows this, which is why they are asking for a change to the operating system that would bypass the lockout so they could brute force it.

[photon]

Originally Posted by Iggy City

The story wouldn't exist with Google, they'd be happy to help.

Further to this:

https://twitter.com/sundarpichai

Important post by @tim_cook. Forcing companies to enable hacking could compromise users’ privacy

[Violator]

I don't get it cant the FBI just walk into apple and ask them to unlock the phone and then that's it?

[Fuzz]

Apple can't unlock the phone, unless they have a back door, which they have assured everyone they don't have. The best they can do is what the FBI requested. The encryption key, from what I have read is very secure and device specific.

[DoubleK]

Does breaking the law render the user's EULA invalid?

Can't Apple use that as a scapegoat?

[Resolute 14]

You're missing the point, DoubleK. The only way to get the data is to hack the phone. This isn't a case of EULAs or simply asking for access. The FBI is demanding that Apple undermine the technology itself, and it is completely impossible for this to happen on a one-off scenario. If they are forced to break the encryption in once case, they break it for every case, for every single iPhone and iPad owner. Everywhere.