Earlier quoted context omitted.
In my jailbreak days, the DFU update did indeed wipe the device. I don't know how it works.
Did it actually write zeros to the flash memory or did it leave the data sitting around somewhere?
Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
201–210 of 364 posts
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#202Earlier quoted context omitted.
That would be terrible
Why?
Slavery? Restricted Suffrage? Genocide? Witch trials? Heroin?
Or stuff that's been illegal before
Inter-racial marriage? Hemp? Gay marriage?
Due process isn't enough for a legal system to work - the law has to change & revocable Axioms aren't exactly a thing.
In fact, my sister goes on and on about Jurisprudence in such discussions - letter of the law and the spirit of it.
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#203Earlier quoted context omitted.
But let's say that I/you killed your/my dog is not in question. The killer's notes on dog killing are relevant to the case. Your iOS notes are no closer to being part of your brain as a dead tree journal is. Other than (as someone else brought up) a hypothetical brain scanning technology that claims to reveal thoughts[0] I can't think of a category of digital evidence that is so substantively different from analogue…
If there's no question someone killed your dog, then you don't need to read what's in the phone, do you? There's a point to your analogy.
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#204Earlier quoted context omitted.
The court order refers to the need to load the custom OS image via DFU (device firmware upgrade) mode. I am not an iPhone user but I'm assuming that is exactly what the name implies. (some pre-boot recovery environment)
It's been a few years since I looked at DFU, but my impression was that installing a new OS via DFU would have the side-effect of erasing the device.
Basically jailbreak..
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#205Earlier quoted context omitted.
The court order refers to the need to load the custom OS image via DFU (device firmware upgrade) mode. I am not an iPhone user but I'm assuming that is exactly what the name implies. (some pre-boot recovery environment)
It's been a few years since I looked at DFU, but my impression was that installing a new OS via DFU would have the side-effect of erasing the device.
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#206Remember, this is an iPhone 5C, which doesn't have Touch ID or the Secure Enclave; the security model for this phone is significantly different from that of more recent iPhones. On phones with a Secure Enclave, the wipe-on-failures state is managed in the coprocessor (which runs L4), and is not straightforwardly backdoor-able. If you're worried about the police brute-forcing your phone, enable Touch ID and set a pass…
Also, don't use your actual fingerprint, since it's becoming harder to avoid giving it to the government, even if you're not a criminal.
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#207Earlier quoted context omitted.
There is no burden of proof. Apple says it's corrupted that's about it. I'm sure the other party will ask for details. If they don't believe Apple they'll explain that to the Judge and he'll go from there, but otherwise no one will demand proof of anything. I don't see how statues of limitations is connected to the question.
re: statue of limitations - if we are talking exponential levels of difficulty to crack vs. exponential increases in computing power (Moore's law) I wonder whether "we won't have the computing power to crack this for X years, so a statute of limitations of (X-1) years to solve this means that we are functionally unable to answer the question within the allotted time" becomes defensible as a reason to call something "…
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#208Earlier quoted context omitted.
There is no burden of proof. Apple says it's corrupted that's about it. I'm sure the other party will ask for details. If they don't believe Apple they'll explain that to the Judge and he'll go from there, but otherwise no one will demand proof of anything. I don't see how statues of limitations is connected to the question.
re: statue of limitations - if we are talking exponential levels of difficulty to crack vs. exponential increases in computing power (Moore's law) I wonder whether "we won't have the computing power to crack this for X years, so a statute of limitations of (X-1) years to solve this means that we are functionally unable to answer the question within the allotted time" becomes defensible as a reason to call something "…
The closest I can think of is a right to a speedy trial, but that has so many exceptions (for example if the person is out on bail) that I couldn't say how a judge would rule in this scenario. Especially if it was the defendant causing the delay by refusing to reveal the password and making the prosecutor get it the hard way. (Not applicable in this case, might be applicable in another.)
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#209Earlier quoted context omitted.
After five failed fingerprint attempts, your password is required to unlock the phone. That seems pretty safe to me. If you're ever ordered to unlock the phone, just touch an unregistered finger to it. Fingerprint sensors aren't foolproof. It'd be hard to prove you deliberately sabotaged the effort. Though, one feature I'd like would be to register a distress fingerprint. Then I could touch say... my left index finge…
>After five failed fingerprint attempts, your password is required to unlock the phone. How is that actually enforced? Is there an if statement and a counter somewhere? Couldn't that just be disabled by a sufficiently advanced attacker?
Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone
#210Earlier quoted context omitted.
Also, don't use your actual fingerprint, since it's becoming harder to avoid giving it to the government, even if you're not a criminal.
What is the alternative approach?
I'm only half joking. I wonder if a knuckle or something would work.