Federal judge FORCES Apple to help FBI decrypt San Bernardino killers iPhone 5C

[13CA350]

Original article: http://arstechnica.com/tech-policy/2016/02/judge-apple-must-help-fbi-unlock-san-bernardino-shooters-iphone/

Apple press release: http://www.apple.com/customer-letter/

 

Quote

On Tuesday, a federal judge in Riverside, California ordered Apple to help the government unlock and decrypt the iPhone 5C used by Syed Rizwan Farook, who shot up an office party in a terrorist attack in nearby San Bernardino in December 2015

 

Some may not remember this event. Just do a quick Google search for San Bernardino attacks and you will find more info.

 

Quote

Specifically, United States Magistrate Judge Sheri Pym mandated that Apple provide the FBI a custom firmware file, known as an IPSW file, that would likely enable investigators to brute force the passcode lockout currently on the phone, which is running iOS 9.

 

 

Now, I have mixed feelings on this. I do think that the attacker and all of his associates should be punished to the furthest extent possible for their actions. Carrying out a terrorist attack on innocent unsuspecting people deserves that.

 

However, I do not think that the government should force any company to decrypt anything. The article never mentions anything about Apple being reimbursed, so they're essentially being forced to lose money. And, Apple has already told the world that devices running iOS 8 and higher are "impossible" to decrypt and unlock. Read more about that here: http://www.bbc.com/news/technology-34591864 So unlocking it for the Feds would turn them into liars. I don't know how I feel about this. I'm sure you guys will have some good input too

 

========================

EDIT:

 

I just woke up and saw that Apple themselves have released a statement here: http://www.apple.com/customer-letter/

 

This statement basically says that they will not create the software that the FBI has demanded that they create.

 

Quote

Specifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation. In the wrong hands, this software — which does not exist today — would have the potential to unlock any iPhone in someone’s physical possession.

 

And they even said it was wrong for the government to do so

Quote

While we believe the FBI’s intentions are good, it would be wrong for the government to force us to build a backdoor into our products

 

Edited February 17, 2016 by 13CA350

[DeadEyeKozi]

So much for a Federal Bureau of Investigation if they can't decrypt an Iphone password, Anyway, I don't think Apple should provide them with the file, however they should just decrypt it themselves.

 

Edit: Read the rest of the post. Yeah, I don't think apple should be forced to supply the FBI with the file, but once again, for the people who lost their lives, they should at least decrypt this phone

[PlayStation 2]

I'm pretty sure under United States law that Apple doesn't have to unlock the killer's phone.

[Weak1ings]

I think as a gesture of good will, Apple should unlock the killers phone.

[comicsansms]

I really IDC, I feel that if you apple has a way to get the encryption key and it is going to affect the public safety if the FBI doesn't get it, it should be given to the FBI. But saying that, the FBI shouldn't be able to decrypt anyones phone.

[dalekphalm]

Apple has stated it's impossible for them to decrypt iOS 8+. Whether that is true or not? Only Apple knows for sure.

 

Personally, I feel that if court ordered (and technically feasible), Apple should decrypt the device themselves. The FBI should not get the means to decrypt things directly themselves.

[13CA350]

So much for a Federal Bureau of Investigation if they can't decrypt an Iphone password, Anyway, I don't think Apple should provide them with the file, however they should just decrypt it themselves.

 

Edit: Read the rest of the post. Yeah, I don't think apple should be forced to supply the FBI with the file, but once again, for the people who lost their lives, they should at least decrypt this phone

I really IDC, I feel that if you apple has a way to get the encryption key and it is going to affect the public safety if the FBI doesn't get it, it should be given to the FBI. But saying that, the FBI shouldn't be able to decrypt anyones phone.

I wonder if they'll do it but tell the FBI to keep quiet about it. Then it'll be on the news that the FBI "suddenly decrypted" the phone

[Enderman]

ISPs are already required to give the government all your internet data on demand by law anyway...

[Yoinkerman]

it sounds like they're fishing and trying to set a precedent with a "omg but hes a terrorist" case in order to get their foot in the door.

 

the offender is dead.  He can't be tried.

[carolkarine]

BTW guys, this file apple has been ordered to provide doesn't decrypt the phone. All it does is change the unlock procedures so that the FBI won't get locked out while brute-forcing the password

[dalekphalm]

9 minutes ago, carolkarine said:

BTW guys, this file apple has been ordered to provide doesn't decrypt the phone. All it does is change the unlock procedures so that the FBI won't get locked out while brute-forcing the password

Well it certainly begs the question, if Apple can rewrite the firmware to prevent lockout, then perhaps they could also rewrite the firmware to change the limitations of the encryption - eg: Force the device to output the encryption key stored in the hardware?

 

But I digress, none of us can say for certain what Apple could do with the right motivations.

[Mew]

We need LMG John to tell us if Apple legally had to decrypt the phone. 

[bcredeur97]

I really hope it's impossible so they can't.

[ionbasa]

4 minutes ago, kurahk7 said:

We need LMG John to tell us if Apple legally had to decrypt the phone. 

Apple could appeal the order, but I doubt that would be the case. Unless they appeal, legally, they have to do what the court order mandates by the All Writs Act. 

[Bensemus]

16 minutes ago, ionbasa said:

Apple could appeal the order, but I doubt that would be the case. Unless they appeal, legally, they have to do what the court order mandates by the All Writs Act.

What if it is impossible like Apple keeps saying? Can you be fined for not complying with an impossible court order?

[ionbasa]

18 minutes ago, Bensemus said:

What if it is impossible like Apple keeps saying? Can you be fined for not complying with an impossible court order?

The court order doesn't ask Apple to decrypt the phone. It asks for Apple to flash the firmware so that there isn't an timeout period for bruteforcing the password, something which is possible to do. 

 

Apple isn't decrypting the device, but rather adjusting an firmware setting.

EDIT:

Apple also has 5 days to respond to the court order. If it isn't feasible, they have to prove to the court that is so.

Edited February 17, 2016 by ionbasa

[Trik'Stari]

9 hours ago, Yoinkerman said:

it sounds like they're fishing and trying to set a precedent with a "omg but hes a terrorist" case in order to get their foot in the door.

 

the offender is dead.  He can't be tried.

My thoughts exactly.

 

It always begins with "Terrorism" or "won't somebody think of the children!".

[Misanthrope]

Apple should just hook up like a single 486 based PC and tell em "Ok, we're working on it, it will be ready at one point between now and the next 342 trillion years"

[Trik'Stari]

6 minutes ago, Misanthrope said:

Apple should just hook up like a single 486 based PC and tell em "Ok, we're working on it, it will be ready at one point between now and the next 342 trillion years"

That would be a good tactic.

[Thony]

Its their own device with their own software. They can any data off of it.

 

If law forces them to do so, then they probably will. 

[emille26]

I am a lawyer, but this is not what I practice... BUT

 

Apple's issue is not that it is being asked to help bruteforce this phone, but that they are being asked to change ALL phones so that they can be brute forced by the government. 

 

Apples issue is that the fix (firmware update) that the FBI wants would affect every customer, not just this one. 

 

This might give a bit more info http://www.bbc.com/news/technology-35594245

[13CA350]

10 hours ago, Enderman said:

ISPs are already required to give the government all your internet data on demand by law anyway...

 

10 hours ago, Enderman said:

ISPs are already required to give the government all your internet data on demand by law anyway...

Yes, but there are easy ways around that. Theres no easy way to encrypt your own phone yourself

 

22 minutes ago, Misanthrope said:

Apple should just hook up like a single 486 based PC and tell em "Ok, we're working on it, it will be ready at one point between now and the next 342 trillion years"

Lol yea

 

10 minutes ago, Thony said:

Its their own device with their own software. They can any data off of it.

 

If law forces them to do so, then they probably will. 

Look at the OP. They said it's impossible

[rockking1379]

9 hours ago, ionbasa said:

The court order doesn't ask Apple to decrypt the phone. It asks for Apple to flash the firmware so that there isn't an timeout period for bruteforcing the password, something which is possible to do. 

 

Apple isn't decrypting the device, but rather adjusting an firmware setting.

EDIT:

Apple also has 5 days to respond to the court order. If it isn't feasible, they have to prove to the court that is so.

Them proving it isn't feasible is like telling politicians encryption is good for the world. These hot heads don't understand what they are messing with. They only hear terrorist and apple and think apple can stop terrorists. Honestly I hope Apple can't flash a firmware. Actually I want Apple to hand the fbi a new damn fine ware file, let the phone into DFU mode and flash the fucker clean. I get San whatever was a tragedy. But I'll be damned if I have to sacrifice my digital privacy and use of encryption because some unstable ass hole who was probably paid off by the govnerment anyway went on a shooting spree

[TroubleKlef]

I used to be the guy that said "if you don't have anything to hide then it shouldn't matter".

 

Now I've learned that things such as privacy are huge issues here in the US. Cook and Apple are correct in saying if Apple is indeed "forced" to create a back door then that would create huge legal precedents in terms of privacy. It would give not only the US government but anyone with basic knowledge of this backdoor free access to possibly any iPhone. And if I had to name the most dangerous entity (whether it be foreign nations, terrorists, etc) that could wield such power, I think I would pick the US government.

[Centurius]

On the one hand I do feel this specific iPhone should be decrypted, on the other hand I agree with Apple that a backdoor that could potentially affect every iPhone is a horrible precedent.