Barr Asks Apple to Unlock iPhones of Pensacola Gunman
1–10 of 11 posts
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#2The key sentence from the article for me is: the company has refused to help the F.B.I. open the phones themselves, which would undermine its claims that its phones are secure.
I would assume that even if the software/cryptography is secure, Apple would have a physical/hardware-based way to access the data. But they can't admit to this as its a big part of their marketing around the product.
I think there may be an Israel-based security company that has managed a hardware bypass. But this was a few iPhone generations ago. Not sure about the latest products.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#3If Apple were to cooperate, what’s to say they are even able to decrypt a device like this post-facto. If their crypto implementation is sensible it’ll be impossible. Perhaps because PINs are weak it’d be possible to get the secure element to release the key material by reflashing it, but again, in a sensible design, any secureROM reflash probably should wipe the chip.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#4Interesting quote from the article:
As in the investigation into the Pensacola shooting, the San Bernardino gunman, Syed Rizwan Farook, was also dead and no longer had a right to privacy.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#5Apple has a track record of only punching down, never up. In China, these histrionics would be brusquely ignored with threats of a sales ban and fines, which is why Apple promptly handed over iCloud-China operations to a government owned/approved cloud.
In this case, Barr has a better chance of Apple complying, by simply routing the request through China.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#6The key sentence from the article for me is: the company has refused to help the F.B.I. open the phones themselves, which would undermine its claims that its phones are secure. I would assume that even if the software/cryptography is secure, Apple would have a physical/hardware-based way to access the data. But they can't admit to this as its a big part of their marketing around the product. I think there may be an I…
Pegasus, by the NSO Group. Yes, for the right money you can get into any iPhone. It was pretty effective to help Saudi Arabia kill Khashoggi and also aide other gov'ts, like Mexico, in going after journalists and dissidents. NSO Group "carefully screens" who they sell their technology to, and the Israeli gov't "approves" the sales prior. https://www.cbsnews.com/news/interview-with-ceo-of-nso-group...
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#7The key sentence from the article for me is: the company has refused to help the F.B.I. open the phones themselves, which would undermine its claims that its phones are secure. I would assume that even if the software/cryptography is secure, Apple would have a physical/hardware-based way to access the data. But they can't admit to this as its a big part of their marketing around the product. I think there may be an I…
No, read the Apple security white paper. Apple can’t install software on the phone without the passcode, and the permanent storage is encrypted by keys held in the Secure Enclave - eg an HSM designed specifically to thwart physical attacks.
All the existing attacks have started with at least a partially unlocked phone.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#8The key sentence from the article for me is: the company has refused to help the F.B.I. open the phones themselves, which would undermine its claims that its phones are secure. I would assume that even if the software/cryptography is secure, Apple would have a physical/hardware-based way to access the data. But they can't admit to this as its a big part of their marketing around the product. I think there may be an I…
Why would you assume that? It's in Apple's interests to have no way at all to access a locked phone without the passcode. The best they can do is wipe the thing.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#9Interesting quote from the article: As in the investigation into the Pensacola shooting, the San Bernardino gunman, Syed Rizwan Farook, was also dead and no longer had a right to privacy.
In that case, the phone wasn't even his property. It was owned by the government agency he worked for, and still Apple refused to help.
Re: Barr Asks Apple to Unlock iPhones of Pensacola Gunman
#10The key sentence from the article for me is: the company has refused to help the F.B.I. open the phones themselves, which would undermine its claims that its phones are secure. I would assume that even if the software/cryptography is secure, Apple would have a physical/hardware-based way to access the data. But they can't admit to this as its a big part of their marketing around the product. I think there may be an I…
No, read the Apple security white paper. Apple can’t install software on the phone without the passcode, and the permanent storage is encrypted by keys held in the Secure Enclave - eg an HSM designed specifically to thwart physical attacks. All the existing attacks have started with at least a partially unlocked phone.
Maybe that's all true.
But can you discount a scenario where a hardware hookup and brute forces through all possible numeric security codes? Could take less than a minute. Who is to say there isn't a bypass that allows them to do this? Very hard to tell