Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Evidence that the FBI can hack into private Signal messages on a locked iPhone

forbes.com

Post reply on HN
Print view View original

11–20 of 243 posts

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#11

Post by tprynn »

sprt wrote: post #6
ostrophonics wrote: post #3

is partial AFU mode anything less than a backdoor?

I suspect it's a needed trade-off between security and practicality. I have no idea how "needed" it is though, can someone shed some light on this? Also, couldn't Signal add their own encryption layer?

Signal could add app-level encryption, but who would this serve? Signal can't do anything better than what the OS/hardware provides in terms of encryption. Even if they let you specify your own signal-specific password/encryption key:

* Non-technical users either won't use it, or will use a weak key

* Technical users are better served by making sure their device is secure and hard-locked with a strong passcode (tip: 5 presses of the lock button on iPhone wipes in-memory encryption keys, essentially exiting "AFU mode")

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#13

Post by jaywalk »

DC1350 wrote: post #7

How is it possible that the FBI has so much advanced stuff when I’ve never met a skilled developer willing to work for what the government pays? Are their tools developed by high paid contractors?

You clearly didn't read the article, since they call out the two companies who supply this type of technology to law enforcement organizations.

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#15

Post by kuyan »

tprynn wrote: post #11
sprt wrote: post #6

Earlier quoted context omitted.

I suspect it's a needed trade-off between security and practicality. I have no idea how "needed" it is though, can someone shed some light on this? Also, couldn't Signal add their own encryption layer?

Signal could add app-level encryption, but who would this serve? Signal can't do anything better than what the OS/hardware provides in terms of encryption. Even if they let you specify your own signal-specific password/encryption key: * Non-technical users either won't use it, or will use a weak key * Technical users are better served by making sure their device is secure and hard-locked with a strong passcode (tip:…

> (tip: 5 presses of the lock button on iPhone wipes in-memory encryption keys, essentially exiting "AFU mode")

Is this the same thing as holding down the lock button and one of the volume buttons on one of the newer iPhones? I'm referring to this doc: https://support.apple.com/en-us/HT208076

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#18

Post by DC1350 »

jaywalk wrote: post #13
DC1350 wrote: post #7

How is it possible that the FBI has so much advanced stuff when I’ve never met a skilled developer willing to work for what the government pays? Are their tools developed by high paid contractors?

You clearly didn't read the article, since they call out the two companies who supply this type of technology to law enforcement organizations.

I’m more interested in their compensation than how they get paid. I know lots of work is done by contractors.

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#19

Post by tprynn »

kuyan wrote: post #15
tprynn wrote: post #11

Earlier quoted context omitted.

Signal could add app-level encryption, but who would this serve? Signal can't do anything better than what the OS/hardware provides in terms of encryption. Even if they let you specify your own signal-specific password/encryption key: * Non-technical users either won't use it, or will use a weak key * Technical users are better served by making sure their device is secure and hard-locked with a strong passcode (tip:…

> (tip: 5 presses of the lock button on iPhone wipes in-memory encryption keys, essentially exiting "AFU mode") Is this the same thing as holding down the lock button and one of the volume buttons on one of the newer iPhones? I'm referring to this doc: https://support.apple.com/en-us/HT208076

Yes, it's basically a side effect of activating Emergency SOS. The five-press shortcut works on all iPhones as far as I'm aware. As the doc says:

"If you use the Emergency SOS shortcut, you need to enter your passcode to re-enable Touch ID, even if you don't complete a call to emergency services. "

Re: Evidence that the FBI can hack into private Signal messages on a locked iPhone

#20

Post by brandmeyer »

Universal encryption is a defense against blanket vacuuming of communications for later offline analysis. Its a defense against a massive parallel MITM attack against the world's communications infrastructure.

Its not a defense against targeted attacks of individual devices.

Post reply on HN