News for hackers. Stuff that matters.
Re:A Message to Our Customers by mmcconnell1618 on Wednesday February 17, 2016 @08:05AM (#11117558)
Why doesn't the FBI simply clone the current device, make brute force attempts and then clone again if locked out? Yes, lots of work but also doesn't force Apple to participate.
Re:A Message to Our Customers by pflats on Wednesday February 17, 2016 @08:24AM (#11117635)
I thought @csoghoian's take was interesting. The FBI doesn't want one specific phone unlocked, they want precedent.

https://twitter.com/csoghoian/status/699841360963108864

Re:A Message to Our Customers by ParadoxOryx on Wednesday February 17, 2016 @08:25AM (#11117641)
The iPhone uses AES encryption which would prevent cloning the flash storage [1]. There was an informative discussion of this over on AppleInsider - http://forums.appleinsider.com/discussion/191851

[1] http://www.darthnull.org/2014/10/06/ios-encryption

Re:A Message to Our Customers by jobead on Wednesday February 17, 2016 @01:24PM (#11120005)
from that discussion, super informative details on how secure enclave is actually implemented:

http://forums.appleinsider.com/discussion/comment/2832533/#C...

Re:A Message to Our Customers by ethbro on Wednesday February 17, 2016 @08:23AM (#11117632)
Would it be infeasible to construct part of the private key out of hardware-specific id's + time-of-creation hashes? I assume it's not only the PIN?
Re:A Message to Our Customers by acdha on Wednesday February 17, 2016 @08:50AM (#11117797)
That's what the A7 (iPhone 5S and later) design does:

“Each Secure Enclave is provisioned during fabrication with its own UID (Unique ID) that is not accessible to other parts of the system and is not known to Apple. When the device starts up, an ephemeral key is created, entangled with its UID, and used to encrypt the Secure Enclave’s portion of the device’s memory space. Additionally, data that is saved to the file system by the Secure Enclave is encrypted with a key entangled with the UID and an anti-replay counter.”

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

The device in question is an iPhone 5C, which uses the older A6 design.

Re:A Message to Our Customers by ethbro on Wednesday February 17, 2016 @03:42PM (#11121185)
Thanks for the link! I knew there had to be more technical information out there but couldn't find it on an initial search.
Re:A Message to Our Customers by acdha on Wednesday February 17, 2016 @07:44PM (#11122814)
Yeah, it wasn't exactly unknown before but it wasn't terribly common outside of certain security / compliance circles. I think I've seen more links today than in the previous year.
Re:A Message to Our Customers by conradev on Wednesday February 17, 2016 @03:00PM (#11120790)
Each device has a device-specific AES key (UID) burned into it such that you cannot clone devices (or move flash chips between them).

Everything is encrypted with a derivative of this UID, and extracting the UID is not a thing you can do without destroying the device.