San Bernadino, Apple and Data Encryption

[mirth]

http://www.zdnet.com/article/apple-must-to-help-fbi-unlock-san-bernardino-gunmans-phone-judge/

http://www.nbcnews.com/storyline/san-bernardino-shooting/judge-forces-apple-help-unlock-san-bernardino-shooter-iphone-n519701

http://www.apple.com/customer-letter/

I find this interesting from a technical standpoint. It stretches belief that the FBI or NSA cannot gain access to a device that they physically possess.

Here's the kicker:

The iPhone is owned by Farook's employer, the San Bernardino County Department of Public Health, which assigned it to him. The county consented to investigators' requests to search its contents.

So basically, the IT Dept at the Dept of Public Health screwed up. They should already have admin access to the phone.

[Huw the Poo]

It stretches belief that the FBI or NSA cannot gain access to a device that they physically possess.

The best encryption technology in the world is freely available.  In combination with good security practise and a decent passphrase, this isn't so far fetched.

[mirth]

I'm not buying it. If they have the phone they can get to the data.

The issue, apparently,  isn't even the encryption. It's the 6-digit passcode to unlock the phone. Once they're in, the FBI will brute force the encryption. They're asking Apple to give them a way to bypass the passcode.

[mirth]

More

http://qz.com/618348/this-is-why-the-fbi-cant-hack-into-iphones/

blog.trailofbits.com/2016/02/17/apple-can-comply-with-the-fbi-court-order/

https://cdn2.vox-cdn.com/uploads/chorus_asset/file/6053155/in-the-matter-of-the-search.0.pdf

[mirth]

Sounds like this is they essential piece blocking the FBI from monkeying with the phone without Apple's help:

As many jailbreakers are familiar, firmware can be loaded via Device Firmware Upgrade (DFU) Mode. Once an iPhone enters DFU mode, it will accept a new firmware image over a USB cable. Before any firmware image is loaded by an iPhone, the device first checks whether the firmware has a valid signature from Apple. This signature check is why the FBI cannot load new software onto an iPhone on their own — the FBI does not have the secret keys that Apple uses to sign firmware.

[Huw the Poo]

I'm not buying it. If they have the phone they can get to the data.

How?

[mirth]

I'm not buying it. If they have the phone they can get to the data.

How?

I betting the NSA could figure it out. They're a pretty clever lot.

Rule number one of cyber security is that if you have the physical device you can get access to it with enough time and effort.

[bayonetbrant]

The issue, apparently,  isn't even the encryption. It's the 6-digit passcode to unlock the phone. Once they're in, the FBI will brute force the encryption. They're asking Apple to give them a way to bypass the passcode.

As soon as Apple does, iPhone sales are done.

[mirth]

The issue, apparently,  isn't even the encryption. It's the 6-digit passcode to unlock the phone. Once they're in, the FBI will brute force the encryption. They're asking Apple to give them a way to bypass the passcode.

As soon as Apple does, iPhone sales are done.

Yeah. That's why Tim Cook said, "No, thanks".

[Huw the Poo]

Rule number one of cyber security is that if you have the physical device you can get access to it with enough time and effort.

The key words here being "enough time and effort".  The point of strong encryption is to make it too expensive to succeed (or even attempt).  A seven word diceware passphrase, for example, is not crackable using any known technology due to the sheer amount of entropy in such a phrase.  Eight, nine or ten word passphrases are estimated by cryptologists to be uncrackable for decades at least.

[mirth]

John McAfee, you so crazy! 

http://www.businessinsider.com/john-mcafee-ill-decrypt-san-bernardino-phone-for-free-2016-2

[bbmike]

The NSA should ask China. They've probably already figured it out.

[OJsDad]

http://www.msn.com/en-us/news/us/apple-unlocked-at-least-70-iphones-before-refusal/ar-BBpFBbK?ocid=spartanntp

[Huw the Poo]

No, Apple has not unlocked 70 iPhones for law enforcement

[airboy]

Apple does not have a legal leg to stand on.

This is all a big PR stunt by the Apple CEO.