Live data from Hacker News

FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

404media.co

461–470 of 565 posts

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#461

Sadly, they still got to her Signal on her Desktop – her sources might still be compromised. It's sadly inherent to desktop applications, but I'm sad that a lot more people don't know that Signal for Desktop is much, much less secure against adversaries with your laptop.

Did she have Bitlocker or FileVault or other disk encryption that was breeched? (Or they took the system booted as TLAs seek to do?)

Bitlocker isn't secure, for several reasons, that I won't get into on here.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#462

Earlier quoted context omitted.

Did she have Bitlocker or FileVault or other disk encryption that was breeched? (Or they took the system booted as TLAs seek to do?)

There was a story here the other day, bitlocker keys stored in your Microsoft account will be handed over.

This has been known for a while, though I don't know if your typical layperson was aware until recently. People need to remember that any access a company has to a device, so does LE with a warrant. Even moreso once you get into federal resources and FISA courts.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#463
Every time I see these articles about iphones posing trouble for authorities, I always think of it as free (and fraudulent) advertisement.

I could be naive, but just don't think they'd really have any difficulty getting what they needed. Not that I give a fuck, but I guess I've seen one too many free ads.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#464

Earlier quoted context omitted.

They're not actually investigating her, they're investigating a source that leaked her classified materials.

If they're not investigating her she doesn't have any 5th-amendment protection and can be compelled to testify on anything relevant, including how to unlock her devices.

This here is true. 5th amendment protections only protect you from SELF-incrimination, and in some ways, your spouse. It does not apply to protecting others. Though some have tried arguing that they are protecting themselves, which then requires some form of admittance of them having been committing ANOTHER crime, which doesn't look good to a jury.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#465

Remember...they can make you use touch id...they can't make you give them your password. https://x.com/runasand/status/2017659019251343763?s=20 The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it.

I previously commented a solution to another problem, but it assists here too: https://news.ycombinator.com/item?id=44746992 This command will make your MacBook hibernate when lid is closed or the laptop sleeps, so RAM is written to disk and the system powers down. The downside is that it does increase the amount of time it takes to resume. A nice side benefit though, is that fingerprint is not accepted on first unlo…

> I believe secrets are still encrypted at this stage similar to cold boot.

Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#466
post #386

Earlier quoted context omitted.

[flagged]

I've seen corruption in the police. Government. Hospitals. Do you support immediately shuttering those offices with no replacements?

They could at least just get funded by their own government.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#467

Earlier quoted context omitted.

Serious question. If I am re-entering the US after traveling abroad, can customs legally ask me to turn the phone back on and/or seize my phone? I am a US citizen. Out of habit, I keep my phone off during the flight and turn it on after clearing customs.

If you are a US citizen, you legally cannot be denied re-entry into the country for any reason, including not unlocking your phone. They can make it really annoying and detain you for a while, though.

They can also practically keep your phone indefinitely.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#468
post #386

Earlier quoted context omitted.

Maybe. I don't think we yet have a good understanding of how many deaths he will have caused as a result of DOGE so abruptly cutting off assistance to so many vulnerable people around the world, but I've heard estimates hover around 600,000. Assuming that number turns out to be close to reality, how do you weigh so many unnecessary deaths against VTL rockets and the electric cars? Perhaps a practitioner of Effective…

[flagged]

There is corruption everywhere. But do you deny that these organizations by-and-large provided aid and therefore saves the lives of folks who may have otherwise died from illness?

This doesn't make corruption OK. But he tore out a lifeline for some people without giving them an alternative way to get aid.

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#469
post #386

Earlier quoted context omitted.

[flagged]

There is corruption everywhere. But do you deny that these organizations by-and-large provided aid and therefore saves the lives of folks who may have otherwise died from illness? This doesn't make corruption OK. But he tore out a lifeline for some people without giving them an alternative way to get aid.

[flagged]

Re: FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled

#470
post #444

Earlier quoted context omitted.

It's relatively well know that the NSO Group / Pegasus is what governments use to access locked phones.

This was known, in the past, but if its relying on zero-days Apple & Google are, adversarially, attempting to keep up with and patch, my assumption would not be that pegasus is, at any time, always able to breach a fully-updated iPhone. Rather, its a situation where maybe there are periods of a few months at a time where they have a working exploit, until Apple discovers it and patches it, repeat indefinitely.

It's always a game of cat and mouse, but NSO had a quarter billion USD in annual revenue in 2020. They are clearly providing highly effective spyware to governments around the world. It wouldn't surprise me if they have that many zero day, zero click exploits that they can always get in to a phone. We're talking nation state espionage here... they probably have insiders at Apple and Google who introduce subtle unnoticeable bugs in core OS stacks.
Post reply on HN