Apple Is Said to Be Working on an iPhone Even It Can’t Hack
1–10 of 415 posts
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#2They're presumably already 99% of the way there. If the Secure Enclave can be updated on a locked phone, all they need to do is stop allowing that, right?
To me, the more profound consideration is this: if you use a strong alphanumeric password to unlock your phone, there is nothing Apple has been able to do for many years to unlock your phone. The AES-XTS key that protects data on the device is derived from your passcode, via PBKDF2. These devices were already fenced off from the DOJ, as long as their operators were savvy about opsec.
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#3One aspect of what all this comes down to is that governments don't want to have to do real work or even prioritize their tracking and surveillance.
What encryption and security really does is create scarcity of access to information and data in order to force a market solution where government groups have to prioritize their efforts and apply them deliberately.
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#4They'd have to be crazy not to. Weird that no one else who makes phones seems to give a shit, though.
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#5What is to stop the DOJ from requiring them to produce a phone that has a hardware backdoor? If they are required to produce a software backdoor then building an iphone which is immune to such vulnerabilities seemingly solves that problem but I don't see the leap towards compelling Apple to build vulnerabilities into hardware as a large one.
I'm not well versed in security so excuse me for my ignorance but what if there were a way to solder chip onto the board that allows access to the secure enclave. Every time an iphone is made a companion chip is produced that contains some kind of access key which only works for that device and someone is required to foot the bill for storing them.
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#6that's the endgame of government surveillance requests: it's increasingly in a company's best interest to have the best security possible so they can't be compelled to hack their own devices.
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#7Don't they just need to tell people to switch away from 4 or 6 digit pins and use longer passwords?
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#8They're presumably already 99% of the way there. If the Secure Enclave can be updated on a locked phone, all they need to do is stop allowing that, right? To me, the more profound consideration is this: if you use a strong alphanumeric password to unlock your phone, there is nothing Apple has been able to do for many years to unlock your phone. The AES-XTS key that protects data on the device is derived from your pas…
> if you use a strong alphanumeric password to unlock your phone, there is nothing Apple has been able to do for many years to unlock your phone
Is this true even if you use Touch ID?
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#9that's the endgame of government surveillance requests: it's increasingly in a company's best interest to have the best security possible so they can't be compelled to hack their own devices.
Surely it is a company's best interests to have 'good enough' looking security to serve their PR purposes while also secretly providing government access to maximise government kudos and all the benefits that would entail?
Re: Apple Is Said to Be Working on an iPhone Even It Can’t Hack
#10They're presumably already 99% of the way there. If the Secure Enclave can be updated on a locked phone, all they need to do is stop allowing that, right? To me, the more profound consideration is this: if you use a strong alphanumeric password to unlock your phone, there is nothing Apple has been able to do for many years to unlock your phone. The AES-XTS key that protects data on the device is derived from your pas…
> if you use a strong alphanumeric password to unlock your phone, there is nothing Apple has been able to do for many years to unlock your phone Is this true even if you use Touch ID?
TouchID disables itself after 48 hours and requires the password again.