Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Under iOS 11, authorities won’t be able to image your device without a passcode

arstechnica.com

Post reply on HN
Print view View original

11–20 of 296 posts

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#11

Post by [deleted] »

DanBC wrote: post #6
EGreg wrote: post #5

Earlier quoted context omitted.

Rubber Hose Cryptanalysis? Can't wait for iOS to have the deniability factor of having different passwords unlock different things :) For the sensitive stuff, have periods of time that require several computers to solve cryptographic challenges in order to unlock the phone. Some of which may be your friends' devices. If they don't hear from you and your intended hosts in a certain amount of time, phone stays locked.…

That's the worst case for rubber hose. Even if you give up all your passwords they can still keep beating you to get the "real" pass.

[deleted]

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#12

Post by DigitalJack »

DanBC wrote: post #6
EGreg wrote: post #5

Earlier quoted context omitted.

Rubber Hose Cryptanalysis? Can't wait for iOS to have the deniability factor of having different passwords unlock different things :) For the sensitive stuff, have periods of time that require several computers to solve cryptographic challenges in order to unlock the phone. Some of which may be your friends' devices. If they don't hear from you and your intended hosts in a certain amount of time, phone stays locked.…

That's the worst case for rubber hose. Even if you give up all your passwords they can still keep beating you to get the "real" pass.

They should have an "erase everything" password.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#13

Post by adekok »

mtgx wrote: post #2

> These changes are coming in conjunction with another privacy-minded feature that will disable Touch ID by pressing the power button five times. Wow, that's really nice. I wish Google was so forward thinking about things like this. I see no reason why a fingerprint authentication should be forced upon someone anymore than a password unlock would be. The only reason this is how it works today is because it's much "ea…

> I see no reason why a fingerprint authentication should be forced upon someone anymore than a password unlock would be.

In Canada, there is a difference. A fingerprint is something you have. A password is something you know. Police can compel you to use your fingerprint to unlock the phone. They can't compel you to disclose the password.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#14

Post by sdca »

mtgx wrote: post #2

> These changes are coming in conjunction with another privacy-minded feature that will disable Touch ID by pressing the power button five times. Wow, that's really nice. I wish Google was so forward thinking about things like this. I see no reason why a fingerprint authentication should be forced upon someone anymore than a password unlock would be. The only reason this is how it works today is because it's much "ea…

It's not "forward thinking" to put that feature in 4 years after Touch ID debuted and people have already been forced to unlock their phones. They should be issuing warnings that fingerprint sensors are for convenience and reduce security unless they're used in multi-factor authentication.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#15

Post by mahyarm »

ianferrel wrote: post #4

In the February 2017 case of a California artist who was questioned at San Francisco International Airport upon re-entry, after he finally agreed to unlock his iPhone, it was taken out of his sight for several minutes and could have been imaged without his knowledge. Under iOS 11, unless the artist, Aaron Gach, decided to actually give up the passcode (rather than type it in himself), he could at least have been reas…

It does. But if your a US citizen or are ok to be barred from entering the US for a long time, then you have the option to not unlock.

If you go the US citizen route, be prepared to never get your phone back and many future border crossings to be 4+hr affairs where they confiscate most of your things.

As a US citizen they have to let you in.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#16

Post by Prefinem »

matt_wulfeck wrote: post #8

I have never seen a company both so technically capable and supportive of user privacy as Apple. It stands completely apart from all of the tech giants of today.

This is the only reason why I moved from Android to iOS even though I enjoy the Android phones and Google Fi more.

I wish Google Fi would support iOS devices.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#17

Post by thephyber »

ianferrel wrote: post #4

In the February 2017 case of a California artist who was questioned at San Francisco International Airport upon re-entry, after he finally agreed to unlock his iPhone, it was taken out of his sight for several minutes and could have been imaged without his knowledge. Under iOS 11, unless the artist, Aaron Gach, decided to actually give up the passcode (rather than type it in himself), he could at least have been reas…

As mentioned elsewhere, Apple can't prevent "rubber hose decryption" (where someone compels/coerces/tortures you to get access to an unlocked phone). I suspect this feature wasn't designed to prevent that threat.

My guess is this somehow foils or mitigates the workaround that the Israeli company sold to the FBI after the San Bernadino phone issue.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#18

Post by dogma1138 »

EGreg wrote: post #5
ianferrel wrote: post #4

In the February 2017 case of a California artist who was questioned at San Francisco International Airport upon re-entry, after he finally agreed to unlock his iPhone, it was taken out of his sight for several minutes and could have been imaged without his knowledge. Under iOS 11, unless the artist, Aaron Gach, decided to actually give up the passcode (rather than type it in himself), he could at least have been reas…

Rubber Hose Cryptanalysis? Can't wait for iOS to have the deniability factor of having different passwords unlock different things :) For the sensitive stuff, have periods of time that require several computers to solve cryptographic challenges in order to unlock the phone. Some of which may be your friends' devices. If they don't hear from you and your intended hosts in a certain amount of time, phone stays locked.…

So you are afraid of actors that would torture you to get access to the data.

And your "solution" is to share this experience with your friends by tying their devices to yours and setting up a device in such a manner that that actor would not be able to verify if they indeed have access to the real data stored on it.

This is a recipe for a one way ticket to a very dark place for you and your friends.

For the most part the number one rule of actual data safety is that never implement protection that would put your well being or the well being of others at risk, unless you are protecting the nuclear launch codes no data is worth being physically harmed for.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#19

Post by dogma1138 »

DigitalJack wrote: post #12
DanBC wrote: post #6

Earlier quoted context omitted.

That's the worst case for rubber hose. Even if you give up all your passwords they can still keep beating you to get the "real" pass.

They should have an "erase everything" password.

If you are under the threat of violence that won't save you.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#20

Post by LeoNatan25 »

matt_wulfeck wrote: post #8

I have never seen a company both so technically capable and supportive of user privacy as Apple. It stands completely apart from all of the tech giants of today.

All other tech giants today make money from advertisement and /or “big” data, which are inherently anti-privacy. This is why Microsoft has done 180° on privacy and has filled their first part apps with ads.
Post reply on HN