Live data from Hacker News

Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

techdirt.com

271–280 of 364 posts

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#272
It bothers me that Tim Cook lied: he stated in his open letter that if they provided the modified OS it could be used on other phones, but the court order specifically says Apple should make the software only work on the specific phone in question.

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#273

It bothers me that Tim Cook lied: he stated in his open letter that if they provided the modified OS it could be used on other phones, but the court order specifically says Apple should make the software only work on the specific phone in question.

Why do you think he lied?

The court order may have said that, but I don't think it's possible.

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#274

It bothers me that Tim Cook lied: he stated in his open letter that if they provided the modified OS it could be used on other phones, but the court order specifically says Apple should make the software only work on the specific phone in question.

the second software like this exists that was signed with Apple's release key, the second they can no longer control it

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#275
post #106

Earlier quoted context omitted.

Ironically, many .gov organizations are rolling out iPhones by the thousand because of the strong security controls available on the platform.

Cite your source(s), please.

I'm not at liberty to say. :)

That said, Apple's enterprise business grew 40% in 2015 to $25B. (http://appleinsider.com/articles/15/10/27/apples-enterprise-...). .gov is a big part of that. When you attend Apple enterprise-focused events, the attendance has grown beyond the old media/field service crowd to include finance,police and .gov attendees.

If you need to comply with various federally mandated compliance regimes, (ie. FIPS 140-2, CJIS, IRS Pub 1075, etc) iOS is very clearly the easiest and most straightforward platform to achieve that compliance on. It's not as trivial as it was with legacy BlackBerry, but it's pretty close.

With Android, the carrier and manufacturer variance makes it more difficult to achieve, demonstrate and maintain compliance. That said, Android offers a number of advantages from an application perspective, but when in production, you'll commonly see licensed third party software in place to perform typical mail and other functions.

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#276

Earlier quoted context omitted.

Interesting. Let's take this current tech you described and apply it to this situation, what happens. You did some unspeakable act and you are dead. * You have securely enabled touchID Even if you have 10 tries, barring using random appendages your phone can be unlocked right? Edit: on my phone so far it is password OR touchID. Making this easily defeatable with the physical device and my: 1. Hand if I am dead or ali…

After 5 tries with your finger, an iPhone will require passcode for any further unlocks. Also, after 48 hours an iPhone requires a passcode to be unlocked, even if TouchID is enabled. So you have limited time, and have to hope you guess the right finger to use and it reads the finger within that 5 try period.

this is an interesting vector of attack. Can by software modify those limits?

Instead after 5, make it after 100; instead after 48 hours make it after 40000.

And then, can a fake finger with the correct fingerprints be made so it fools the reader? Lets say make it of silicone or gummy bears?

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#277
post #157

A thought experiment: Let's say the government makes hardware encryption standards in the style of FedRAMP that sets standards for preventing tampering by foreign governments. Then, imagine that a consumer electronics company voluntarily makes all devices comply with this standard. Could a court attempt to compel the company to defeat the standards which the government set as tamper-proof against governments? A secon…

1: Yes. 2: Yes. 3: No, but they will probably be the ones asked anyway, and then yes, they would be legally required. 4: Apple. 5: What's the question? Is the question will they be compensated? Then yes. 6: They can't. They don't own their stock. Bad PR is not a good enough reason. You are treating the court like a mathematical proof and finding edge cases. I used to as well. But courts don't work that way at all - t…

6. Wrong, Yes they can, a company can suspend public trading of its stock any time it wishes.

https://www.sec.gov/litigation/suspensions.shtml

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#278

Earlier quoted context omitted.

Also, don't use your actual fingerprint, since it's becoming harder to avoid giving it to the government, even if you're not a criminal.

What is the alternative approach?

I've legitimately tried using my bellend and it doesn't work, unfortunately.

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#279
post #131

Earlier quoted context omitted.

Blackberry's collapsing business model.

Why is that?

BlackBerry failed to keep the positive aspects of it's legacy platform fucntioning when modernizing the platform.

I used to run an environment with something like 25k devices... Provisioning and management was braindead simple with legacy BlackBerry, and it's integration model for mail & calendar was robust and reliable. Most users considered BB more reliable than any other mail access methodology. PIN messaging was device-centric vs. identity centric, which made it attractive or many use cases. That also went away, along with the perceived and real security benefits.

That benefit became a liability -- BlackBerry was very "enterprise telecom" and mail-centric. So the people who were responsible for BlackBerry were very much affected by tunnel vision. That's why BlackBerry was surprised by the market shifts -- their customers were very happy, but were ultimately people with an overly narrow focus who were disconnected from the business.

When BlackBerry switched to the ActiveSync model, they became just another ActiveSync device, with the added "benefit" that the rest of the platform was a mess. They are now trying to leverage their past reputation for good management to become an MDM vendor for some reason.

iPhone slaughtered Blackberry by attacking their strengths... BBM/PIN messaging with iMessage (with the added feature that you cannot intercept the messages if the feature is enabled), the obvious improvements of iOS vs. Blackberry OS and an easy institutional management model.

Re: Apple ordered to bypass auto-erase on San Bernadino shooter's iPhone

#280
post #157

Earlier quoted context omitted.

1: Yes. 2: Yes. 3: No, but they will probably be the ones asked anyway, and then yes, they would be legally required. 4: Apple. 5: What's the question? Is the question will they be compensated? Then yes. 6: They can't. They don't own their stock. Bad PR is not a good enough reason. You are treating the court like a mathematical proof and finding edge cases. I used to as well. But courts don't work that way at all - t…

6. Wrong, Yes they can, a company can suspend public trading of its stock any time it wishes. https://www.sec.gov/litigation/suspensions.shtml

My understanding is that it's the SEC who suspends trading on a stock, not the company itself.
Post reply on HN