Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Apple and encryption

Thread Tools
 
Search this Thread
 
Old 18 February 2016, 11:07 AM
  #31  
Laupy
Scooby Regular
iTrader: (2)
 
Laupy's Avatar
 
Join Date: Apr 2013
Location: Lyme Regis, Dorset
Posts: 125
Received 4 Likes on 4 Posts
Default

Originally Posted by JackClark
My first thought, but it's a 5c so no Touch ID. What I want to know is how any new code written to unlock it will get on it without the passcode. Nobody can answer that.
New firmware can be written in DFU mode but the phone will only accept a firmware that has been signed by Apple. This is essentially what the FBI are requesting.

http://blog.trailofbits.com/2016/02/...i-court-order/

Though I don't agree with some of the decisions Apple make I'm with them on this one. Back doors don't tend to stay secret or non-accessible forever...
Old 18 February 2016, 11:13 AM
  #32  
Geezer
Scooby Senior
 
Geezer's Avatar
 
Join Date: Dec 2000
Location: North Wales
Posts: 5,826
Likes: 0
Received 0 Likes on 0 Posts
Default

http://www.bbc.co.uk/news/technology-35601035


Explains it a bit better. The FBI are not asking Apple to compromise iOS security, it only applies to this phone. It even says Apple can destroy the one thing they need once it has been given to the FBI.


So Apple already have the tech to do it, it's a bit disingenuous of them to take the stance they. This is not opening up a back door to any other device.
Old 18 February 2016, 11:20 AM
  #33  
dpb
Scooby Regular
 
dpb's Avatar
 
Join Date: Nov 2003
Location: riding the crest of a wave ...
Posts: 46,493
Likes: 0
Received 13 Likes on 12 Posts
Default

"I'll give you my gun when you pry (or take) it from my cold, dead hands"
Old 18 February 2016, 11:34 AM
  #34  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Laupy
New firmware can be written in DFU mode but the phone will only accept a firmware that has been signed by Apple. This is essentially what the FBI are requesting.

http://blog.trailofbits.com/2016/02/...i-court-order/

Though I don't agree with some of the decisions Apple make I'm with them on this one. Back doors don't tend to stay secret or non-accessible forever...
You can definitely write new firmware in DFU mode, but everything I see is a reset not an update. I can't find anything that shows an update without the pin that leaves the data intact. I guess Apple could maybe write that.
Old 18 February 2016, 12:17 PM
  #35  
Torquemada
Scooby Regular
 
Torquemada's Avatar
 
Join Date: Oct 2006
Location: 'Murica
Posts: 3,676
Received 7 Likes on 4 Posts
Default

Originally Posted by JackClark
http://www.apple.com/customer-letter/

Fair to say I'm on their side, what say you?
I actually agree with you, Jack. This is a very un-cool move by US gov, great way to screw up more security for people than you would actually give them.

US and IT security aren't great buddies, stuxnet has been great since they released that into the wild...

Those of you arguing that it's fine, we have nothing to hide etc. clearly don't understand what is actually at stake here - it's not just a bleeding liberals thing, it's more about putting all of our data security at risk. The "I have nothing to hide" angle is completely irrelevant.
Old 18 February 2016, 12:42 PM
  #36  
Tidgy
Scooby Regular
 
Tidgy's Avatar
 
Join Date: Sep 2004
Location: Notts
Posts: 23,118
Received 150 Likes on 115 Posts
Default

Do you really think that iof someone was had the skill and determination they couldn't get in?

Apple arn't saying it cant be done, they are saying they wont. If apple can do it, other people can too. Give it a year and the hack will be out there anyway. How do you think security flaws are found?
Old 18 February 2016, 01:04 PM
  #37  
Geezer
Scooby Senior
 
Geezer's Avatar
 
Join Date: Dec 2000
Location: North Wales
Posts: 5,826
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by Torquemada
I actually agree with you, Jack. This is a very un-cool move by US gov, great way to screw up more security for people than you would actually give them.

US and IT security aren't great buddies, stuxnet has been great since they released that into the wild...

Those of you arguing that it's fine, we have nothing to hide etc. clearly don't understand what is actually at stake here - it's not just a bleeding liberals thing, it's more about putting all of our data security at risk. The "I have nothing to hide" angle is completely irrelevant.

But, it won't screw up security for anyone else. The solution can be applied to that single phone. Apple have not denied it can be done, they are denying a US warrant, which is as worrying a precedent as the one you claim for everyone's security (which in fact, it isn't!).


Whilst I agree that the "nothing to hide argument" is somewhat fallacious, on the flip side, I doubt many of those people would be stood on the parapet shouting "it's ok government, I fully understand why my family was blown up when you could have prevented it by having access to intelligence that would have prevented it. I'd rather see my kids limbs strewn across the street than agree to that!".......


Choices, choices, eh?
Old 18 February 2016, 01:04 PM
  #38  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Tidgy
Do you really think that iof someone was had the skill and determination they couldn't get in?

Apple arn't saying it cant be done, they are saying they wont. If apple can do it, other people can too. Give it a year and the hack will be out there anyway. How do you think security flaws are found?
That's fair, very unlikely it will ever work but it's fair.
Old 18 February 2016, 01:06 PM
  #39  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Geezer
But, it won't screw up security for anyone else. The solution can be applied to that single phone. Apple have not denied it can be done, they are denying a US warrant, which is as worrying a precedent as the one you claim for everyone's security (which in fact, it isn't!).


Whilst I agree that the "nothing to hide argument" is somewhat fallacious, on the flip side, I doubt many of those people would be stood on the parapet shouting "it's ok government, I fully understand why my family was blown up when you could have prevented it by having access to intelligence that would have prevented it. I'd rather see my kids limbs strewn across the street than agree to that!".......


Choices, choices, eh?
You make it sound like Apple are the only company that offers encryption, they're not. You think this will be the first and last request, I very much doubt that. Google are backing Apple by the way.
Old 18 February 2016, 01:10 PM
  #40  
Geezer
Scooby Senior
 
Geezer's Avatar
 
Join Date: Dec 2000
Location: North Wales
Posts: 5,826
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by JackClark
You make it sound like Apple are the only company that offers encryption, they're not. You think this will be the first and last request, I very much doubt that. Google are backing Apple by the way.

Actually, Jack, I don't, it just so happens that Apple are in this case. I don't agree with Google who are backing them.


It just smacks of sour grapes after the NSA scandal was broken.


It's a tricky situation, to be sure, but this case, as it stands, does not carry any risk. Apple have not denied it can be done, the risk is already there.


If a subsequent request came out that would require a solution that affected everyone, well that is quite different.
Old 18 February 2016, 01:13 PM
  #41  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

http://www.nationalreview.com/articl...rnments-demand

Quite well put.
Old 18 February 2016, 01:16 PM
  #42  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Geezer
does not carry any risk
That's where our opinion differs, maybe this time it doesn't, maybe it does but next time when the FBI can draw on previous success at breaching security with a court order can you be so sure?
Old 18 February 2016, 01:20 PM
  #43  
neil-h
Scooby Regular
 
neil-h's Avatar
 
Join Date: Apr 2013
Location: Berks
Posts: 4,224
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by Tidgy
Do you really think that iof someone was had the skill and determination they couldn't get in?

Apple arn't saying it cant be done, they are saying they wont. If apple can do it, other people can too. Give it a year and the hack will be out there anyway. How do you think security flaws are found?
Given the FBI seemingly can't manage it with all there resources, I'd assume it's actually pretty dam hard.
Old 18 February 2016, 01:31 PM
  #44  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by neil-h
Given the FBI seemingly can't manage it with all there resources, I'd assume it's actually pretty dam hard.
10 guesses at a 4 digit passcode, good luck.
Old 18 February 2016, 01:42 PM
  #45  
markjmd
Scooby Regular
iTrader: (11)
 
markjmd's Avatar
 
Join Date: May 2009
Posts: 4,341
Received 70 Likes on 50 Posts
Default

Originally Posted by Geezer
But, it won't screw up security for anyone else. The solution can be applied to that single phone. Apple have not denied it can be done, they are denying a US warrant, which is as worrying a precedent as the one you claim for everyone's security (which in fact, it isn't!).


Whilst I agree that the "nothing to hide argument" is somewhat fallacious, on the flip side, I doubt many of those people would be stood on the parapet shouting "it's ok government, I fully understand why my family was blown up when you could have prevented it by having access to intelligence that would have prevented it. I'd rather see my kids limbs strewn across the street than agree to that!".......


Choices, choices, eh?
From a technical standpoint, I'm not at all convinced that there would be any way to prevent whatever tool Apple devise from being used on other phones. There's certainly nothing I've read or heard about this so far that suggests this would be the case (I debug closed-source operating systems for a living, so this is something I know a fair bit about).

On that basis, the smart way forward as I see it would be for Apple to comply, but only on terms that would mean the phone and the special tool only ever come together in a neutral lab, and Apple are then allowed to destroy or wipe the phone before it leaves the lab again, once the Feds have got whatever data they want off it. It'll be interesting to see if that's eventually the way this plays out.
Old 18 February 2016, 01:54 PM
  #46  
Torquemada
Scooby Regular
 
Torquemada's Avatar
 
Join Date: Oct 2006
Location: 'Murica
Posts: 3,676
Received 7 Likes on 4 Posts
Default

Originally Posted by Geezer
But, it won't screw up security for anyone else. The solution can be applied to that single phone. Apple have not denied it can be done, they are denying a US warrant, which is as worrying a precedent as the one you claim for everyone's security (which in fact, it isn't!).


Whilst I agree that the "nothing to hide argument" is somewhat fallacious, on the flip side, I doubt many of those people would be stood on the parapet shouting "it's ok government, I fully understand why my family was blown up when you could have prevented it by having access to intelligence that would have prevented it. I'd rather see my kids limbs strewn across the street than agree to that!".......


Choices, choices, eh?
I hear what you are saying but this would never be for just one phone, realistically. US and UK governments have been trying to get access to encryption workarounds/keys and methods of access to our data for a long time, it's not good news. The problem is that the goal is building in such 'vulnerabilities', more broadly, for easier access, and that really is something to be concerned about here.
Old 18 February 2016, 03:17 PM
  #47  
SwissTony
Scooby Regular
iTrader: (19)
 
SwissTony's Avatar
 
Join Date: Mar 2003
Location: In the Doghouse
Posts: 28,226
Received 12 Likes on 3 Posts
Default

Completely agree with Tim Cook and a large majority agree in his/apple stance

http://techcrunch.com/2016/02/17/why...he-government/

well apart from Donald trump but then he's an idiot.

I think the only compromise is if apple made the changes (if they can) and brute forced the passcode hack themselves. if it worked then all good, if it didn't then nothing lost and everyone who worked on the hack would have to be killed to ensure no-one knew the method
Old 18 February 2016, 04:56 PM
  #48  
Torquemada
Scooby Regular
 
Torquemada's Avatar
 
Join Date: Oct 2006
Location: 'Murica
Posts: 3,676
Received 7 Likes on 4 Posts
Default

Originally Posted by SwissTony
everyone who worked on the hack would have to be killed to ensure no-one knew the method
Old 18 February 2016, 04:57 PM
  #49  
Tidgy
Scooby Regular
 
Tidgy's Avatar
 
Join Date: Sep 2004
Location: Notts
Posts: 23,118
Received 150 Likes on 115 Posts
Default

Mcaffe said give us 3 weeks and we'll be in.

I cant believe that anyone woudl believe someone hasnt already hacked the iphone
Old 18 February 2016, 05:04 PM
  #50  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Tidgy
Mcaffe said give us 3 weeks and we'll be in.

I cant believe that anyone woudl believe someone hasnt already hacked the iphone
That depends on what you consider hacked? If you mean hacked it to disable the wait time between passcode attempts and disable the deletion of all data after 10 attempts then I totally believe that nobody has done it. If you mean entered #30102 on the keypad and you get some undocumented options then that's quite likely.
Old 18 February 2016, 06:46 PM
  #51  
neil-h
Scooby Regular
 
neil-h's Avatar
 
Join Date: Apr 2013
Location: Berks
Posts: 4,224
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by JackClark
10 guesses at a 4 digit passcode, good luck.
Was referring to producing the programme to do it. Not doing it manually.
Old 18 February 2016, 07:20 PM
  #52  
hodgy0_2
Scooby Regular
 
hodgy0_2's Avatar
 
Join Date: Jul 2008
Location: K
Posts: 15,633
Received 21 Likes on 18 Posts
Default

Originally Posted by Geezer
http://www.bbc.co.uk/news/technology-35601035


Explains it a bit better. The FBI are not asking Apple to compromise iOS security, it only applies to this phone. It even says Apple can destroy the one thing they need once it has been given to the FBI.


So Apple already have the tech to do it, it's a bit disingenuous of them to take the stance they. This is not opening up a back door to any other device.
yes this was my point, either it simply can't be done - or Apple have the knowledge to develop a tool, because one would hope the know how the software has been designed, so whether the "tool" actually exist is a moot point imo

if a back door exists - Apple can craft a key

obviously it is a tricky situation - my inclination is always to personal privacy

but on the flip side this was a person who went on a shooting spree - not someone who the authorities simply don't like the "cut of their Jib"

and if Apple (or any tech company) have the ability to limit the tool to this phone - i.e. not give it to the authorities - simply hand back a unlocked phone

then it does look a little like "grandstanding"
Old 18 February 2016, 09:02 PM
  #53  
markjmd
Scooby Regular
iTrader: (11)
 
markjmd's Avatar
 
Join Date: May 2009
Posts: 4,341
Received 70 Likes on 50 Posts
Default

Originally Posted by hodgy0_2
yes this was my point, either it simply can't be done - or Apple have the knowledge to develop a tool, because one would hope the know how the software has been designed, so whether the "tool" actually exist is a moot point imo

if a back door exists - Apple can craft a key

obviously it is a tricky situation - my inclination is always to personal privacy

but on the flip side this was a person who went on a shooting spree - not someone who the authorities simply don't like the "cut of their Jib"

and if Apple (or any tech company) have the ability to limit the tool to this phone - i.e. not give it to the authorities - simply hand back a unlocked phone

then it does look a little like "grandstanding"
That's the point though. Everything I've seen and read so far suggests the Feds want to be given the tool to do the unlocking themselves.
Old 18 February 2016, 09:49 PM
  #54  
hodgy0_2
Scooby Regular
 
hodgy0_2's Avatar
 
Join Date: Jul 2008
Location: K
Posts: 15,633
Received 21 Likes on 18 Posts
Default

Originally Posted by markjmd
That's the point though. Everything I've seen and read so far suggests the Feds want to be given the tool to do the unlocking themselves.
Well that would be a deal breaker

But that's not what I got from Geezer's link - it read like the authorities would allow apple to do the unlocking, they just want the phone data

They would be daft to ask for the tool
Old 18 February 2016, 10:48 PM
  #55  
Geezer
Scooby Senior
 
Geezer's Avatar
 
Join Date: Dec 2000
Location: North Wales
Posts: 5,826
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by markjmd
That's the point though. Everything I've seen and read so far suggests the Feds want to be given the tool to do the unlocking themselves.
The impression I got was that it wouldn't make any difference. To break that phone, the file supplied by Apple would be for that device only. If that really is the case, then I see no problem whatsoever.

If that really is the case, then Apple are essentially trying to resist a warrant, for whatever reason, and that is not good. No company is above the law, no matter what their stance is.

If it's not the case, the things are indeed a bit more complex. Still not sure whether that justifies their stance, considering what is concerned. It's not like it's some burglar, is it?
Old 18 February 2016, 11:32 PM
  #56  
markjmd
Scooby Regular
iTrader: (11)
 
markjmd's Avatar
 
Join Date: May 2009
Posts: 4,341
Received 70 Likes on 50 Posts
Default

Yup, hadn't seen the bit about the FBI being happy for the whole process to actually be done at Apple HQ. For some reason all the other news pieces (much of the tech press included) left that out.

In that case, I'd agree that Apple are mostly just posteuring, which they're completely entitled to do, of course. It makes them look like heroes for personal liberty, and in the end they know they'll have to bend over for the Feds anyway, once people are threatened with jail time or something along those lines.
Old 19 February 2016, 10:27 AM
  #57  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Interesting read.

Google Wants You to Think It’s Supporting Apple in Its Fight Against the FBI. It Isn’t.

http://www.slate.com/blogs/future_te...over_data.html
Old 19 February 2016, 11:49 AM
  #58  
Tidgy
Scooby Regular
 
Tidgy's Avatar
 
Join Date: Sep 2004
Location: Notts
Posts: 23,118
Received 150 Likes on 115 Posts
Default

Originally Posted by neil-h
Given the FBI seemingly can't manage it with all there resources, I'd assume it's actually pretty dam hard.
Do you think the FBI can afford to buy someone for their skills no mater how much they ask for?

When a company like apple (just for example in this case but applies to any of the biggies) can throw millions at someone and not even blink about it then police/fbi etc have no chance.

Security services are a tad different because some people are that dedicated to their country they will take a much much lower pay out.
Old 19 February 2016, 11:50 AM
  #59  
JackClark
Scooby Senior
Thread Starter
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Default

Originally Posted by Tidgy
Do you think the FBI can afford to buy someone for their skills no mater how much they ask for?
Yes.
Old 19 February 2016, 12:40 PM
  #60  
neil-h
Scooby Regular
 
neil-h's Avatar
 
Join Date: Apr 2013
Location: Berks
Posts: 4,224
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by Tidgy
Do you think the FBI can afford to buy someone for their skills no mater how much they ask for?

When a company like apple (just for example in this case but applies to any of the biggies) can throw millions at someone and not even blink about it then police/fbi etc have no chance.

Security services are a tad different because some people are that dedicated to their country they will take a much much lower pay out.
You appear to be forgetting the fact we're talking about the Americans and national security here.


Quick Reply: Apple and encryption



All times are GMT +1. The time now is 06:01 PM.