News for hackers. Stuff that matters.
Re:A Message to Our Customers by berkeleynerd on Wednesday February 17, 2016 @03:45PM (#11121222)
A friend of mine at Apple reported multiple Black Vehicles (Lincoln Town Cars and Escalades) with at least one having MD License Plates at the Apple Executive Briefing Center this morning between 11AM and Noon. Occupants had ear pieces and sun glasses and were accompanied by a CHP (California Highway Patrol) cruiser and three motorcycle escorts. I suppose it's possible this was a quick (less than 1 hour) VIP stop but given Tim's message last night, as well as the reaction of folks on campus who were bandying about comments like "I don't want to work on this or because I don't want to be deposed" the impression certainly was it was not a friendly visit. Given Tim's very public push-back I'd think delivery of an NSL with accompanying intimidation is at least possible. I submitted this HN and updated in real-time. There's a bit more discussion here:

https://news.ycombinator.com/item?id=11120365

Re:A Message to Our Customers by archmikhail on Wednesday February 17, 2016 @04:42PM (#11121669)
Save people like me a trip to the Google: NSL = A national security letter (NSL) is an administrative subpoena issued by the United States federal government to gather information for national security purposes. NSLs do not require prior approval from a judge.
Re:A Message to Our Customers by tjohns on Wednesday February 17, 2016 @05:35PM (#11122085)
Not only do NSLs not require approval from a judge, they also include a very intimidating gag order that prevents you from discussing the issue with anyone else (including even your own family).

One of the big problems with NSLs is that you can't let anyone know that you've received or acted on one, so there's very little accountability.

Hence the recent trend of some companies including a warrant canary on their websites, under the assumption that a NSL can't prevent you from _not_ saying something (e.g. deleting the canary).

Re:A Message to Our Customers by dak1 on Wednesday February 17, 2016 @06:33PM (#11122457)
I think deleting something would be considered an active action. The trick with a canary is that you're choosing not to do something, so it can't compel you to act (as compared to, for example, telling you you can't delete the canary).

So for it to work, you need to issue a statement every month that says you haven't been issued a NSL, and then simply not issue a statement the month you finally were issued a NSL. That would then require the government to actually compel speech (compel you to post a new notice saying you didn't receive a canary).

Of course, the above should make it blatantly obvious how absolutely absurd the blanket gag order on NSLs are.

Re:A Message to Our Customers by adrusi on Wednesday February 17, 2016 @07:04PM (#11122627)
It's not necessarily deleting anything. Reddit states in its transparency reports that it has not received any NSLs. The idea is that if they ever received one they would simply omit that clause from the next report (not remove it from prior ones).
Re:A Message to Our Customers by dak1 on Wednesday February 17, 2016 @06:39PM (#11122492)
Interestingly, if you accept that code can be copyrighted, and that only things that are expressions (speech) are eligible for copyright ("A copyrighted work must be an original work of authorship which is fixed in a tangible medium of expression"), then code == speech.

So, by compelling Apple to code something that doesn't exist, the government would indeed actually be compelling speech.

Re:A Message to Our Customers by dragonwriter on Wednesday February 17, 2016 @06:51PM (#11122556)
Court processes involve compelled speech all the time. Heck, compelling witness testimony, which is one of the most well-established parts of the court process, is nothing but compelling speech.

So, I'm not sure what the value is of a clever argument that compelling Apple to comply with the order here is "compelling speech" is supposed to be (likewise, the upthread one about NSL canaries.)

Re:A Message to Our Customers by dak1 on Wednesday February 17, 2016 @08:07PM (#11122910)
Fair points that I concede. I'll note I also forgot the nuance mentioned by morsch (that a canary is compelling a lie, which is potentially different).

On a separate note though, I've always thought it would be interesting to see a member of Congress be issued a NSL and then have them read it on the floor of the House/Senate (since they have parliamentary immunity for anything they say on the floor of the House or Senate).

Re:A Message to Our Customers by morsch on Wednesday February 17, 2016 @06:53PM (#11122567)
Compelling speech is a thing that happens under certain circumstances. E.g. subpoenas, witnesses in court. Though those are clearly different from a canary, not least because producing such a canary would not just be compelling speech, but compelling a lie.
Re:A Message to Our Customers by lisper on Wednesday February 17, 2016 @08:11PM (#11122923)
That's not how canaries work. You don't delete them, you fail to update them.
Re:A Message to Our Customers by iamdave on Wednesday February 17, 2016 @05:16PM (#11121921)
IANAL, but how is it a subpoena if it doesn't originate from the judiciary?
Re:A Message to Our Customers by berkeleynerd on Wednesday February 17, 2016 @05:34PM (#11122077)
Nicholas Merrill famously fought a 11 year legal battle (and finally won) the right to reveal all aspects of a National Security Letter (NSL) served to him. Almost all such letters are accompanied by a complete gag order.

https://www.calyxinstitute.org/news/federal-court-invalidate...

EDITED / CORRECTIONS - Thanks commenters - The battle was won by Nicholas Merrill not Ladar Levison of Lavabit fame as I originally posted.)

Re:A Message to Our Customers by uxp on Wednesday February 17, 2016 @06:18PM (#11122365)
It was Nicholas Merrill from a little ISP called Calyx Internet Access that famously challenged the NSL process.

LavaBit's Lamar Levinson is assumed to be under a gag order from some request he was given by the US government, of which he declined by way of folding his company and claiming that he could not comply moving forward if he was no longer the middleman of some form of communications.

Re:A Message to Our Customers by schoen on Wednesday February 17, 2016 @07:02PM (#11122616)
As a further correction, the Lavabit founder's name is spelled Ladar Levison.

Rather than making assumptions, you can read about the specific kinds of legal process involved in the Lavabit case at

https://en.wikipedia.org/wiki/Lavabit

You can also read the Fourth Circuit decision on his appeal, among other things.

Re:A Message to Our Customers by baddox on Wednesday February 17, 2016 @05:27PM (#11122032)
I guess you can argue semantics, but it's an order accompanied by a credible threat of violence if the order is not obeyed.
Re:A Message to Our Customers by aback on Wednesday February 17, 2016 @06:15PM (#11122343)
I know it requires Tim Cook to be willing to martyr himself, but do we really see Obama whisking the CEO of Apple Computer off to Guantanamo or some supermax prison?

I'd maybe call the bluff, and take my political stand.

Re:A Message to Our Customers by ThrustVectoring on Wednesday February 17, 2016 @06:23PM (#11122389)
Cook wouldn't have to go that far. The court order specified Apple, not Tim Cook personally. He can simply resign instead of following the court order. For that matter, so can the engineers that Apple would need to work on this project.
Re:A Message to Our Customers by aback on Wednesday February 17, 2016 @06:36PM (#11122479)
That's interesting.

IANAL but seems like you're missing something.

Apple can simply let Employee B take Employee A's place after A quits. When the authorities come for B, B can quit, and Apple can re-hire A.

Apple never has to comply.

Re:A Message to Our Customers by ThrustVectoring on Wednesday February 17, 2016 @06:49PM (#11122541)
Employee A doesn't have to actually quit, they just have to credibly threaten to. Say, by signing an open letter that says that they'd quit before helping backdoor the iPhone. Apple can then claim that they cannot bring together a team that is willing and able to backdoor that iPhone.

When you break down the process of having a private company comply with an order to create a particular piece of software, there's many failure points.

The counter from the governmental side is "we will give your company massive fines until and unless your company complies".

As a note, the actual text of the court order (https://www.documentcloud.org/documents/2714001-SB-Shooter-O...) explicitly says that Apple can appeal it on grounds that it is an unreasonable request. Uncooperative engineers can make it an unreasonable request, and have the legal right to be as uncooperative as they want to be in this case. And, they're on the same side as the CEO of Apple ethically, so it isn't career suicide.

Re:A Message to Our Customers by baddox on Wednesday February 17, 2016 @07:04PM (#11122625)
> The counter from the governmental side is "we will give your company massive fines until and unless your company complies".

At which point is becomes worth it for Apple to pay an engineer to do the job. I doubt it wouldn't take much of a bonus to get someone to do it.

Re:A Message to Our Customers by Alupis on Wednesday February 17, 2016 @07:55PM (#11122864)
> > The counter from the governmental side is "we will give your company massive fines until and unless your company complies".

> At which point is becomes worth it for Apple to pay an engineer to do the job. I doubt it wouldn't take much of a bonus to get someone to do it.

What happens if Apple says they aren't paying these unjust fines? Theoretically, court order, law, or what-have-you, Apple can just straight refuse to participate (and hopefully other big tech companies would follow suit).

Sure the gov't can make arrests, threats, seize assets -- but in the end, the gov't still don't get what they want (but they do get a ton of very, very bad PR in the process). At a point, the gov't would have to stop -- destroying the world's most valuable company, and one of America's sweetheart companies, all over this... wouldn't play out well.

Re:A Message to Our Customers by dragonwriter on Wednesday February 17, 2016 @08:12PM (#11122927)
> What happens if Apple says they aren't paying these unjust fines?

Then they'll be subject to additional penalties, seizure of property, etc., and quite possibly shareholder lawsuits stemming from the decision to incur those losses.

> Sure the gov't can make arrests, threats, seize assets -- but in the end, the gov't still don't get what they want

Maybe, given the recent discussion of mandatory limits on encrypted communication services without up-front backdoors, what the government wants is a clear demonstration that the operation of those services interferes with evidence and intelligence gathering in terrorism cases to build the case for new laws restricting the operations of such services.

Re:A Message to Our Customers by baddox on Wednesday February 17, 2016 @08:33PM (#11123023)
Yeah, I mean it seems like the other commenter is implying that, at the end of the day, the government can't actually do anything to a big company. Clearly that's not true. The Us government has completely broken up companies, which is a heck of a lot more intrusive than forcing them to decrypt phones.
Re:A Message to Our Customers by Alupis on Wednesday February 17, 2016 @08:50PM (#11123106)
> implying that, at the end of the day, the government can't actually do anything to a big company

I wasn't trying to imply this at all - of course the government can destroy companies.

What I was implying is that, given the past few years of heightened public awareness of domestic government programs and efforts, perhaps this time public pressure would be exerted on the government to lay off the issue. Apple is one of the most loved companies in the country, people would be very interested in knowing why it's suddenly being torn down.

Re:A Message to Our Customers by aback on Thursday February 18, 2016 @02:25PM (#11128539)
I think he's arguing that government's power to destroy big companies is only as strong as the popular distaste for those companies.

A company like Apple, which is practically an icon of "everything America still gets right," would be a very politically dangerous target to go after.

Re:A Message to Our Customers by Alupis on Wednesday February 17, 2016 @08:46PM (#11123088)
It would be quite unfair for anyone to expect martyrdom of Tim Cook, however, the action taken could send a very powerful message. Apple is one of the most loved companies in the US, if Cook and gang put the foot down firmly, surely the public struggle would generate immense discussion.

People would want to know why their favorite company was drawing a hard line, hopefully lead to a more educated debate.

We couldn't possibly expect this to take place as it would imply huge fallout for Apple. The only real course of action is to keep up the public debate in a loud way.

Re:A Message to Our Customers by dragonwriter on Wednesday February 17, 2016 @07:06PM (#11122641)
If an order is directed to Apple, and Apple fails to comply, the court can order sanctions against Apple for contempt.

The authorities don't have to "come for" any person (they might follow up with orders directed at particular persons, in which case those persons would be at risk of personal sanctions, as well.)

Re:A Message to Our Customers by baddox on Wednesday February 17, 2016 @07:02PM (#11122618)
I presume it would just be significant fines, or perhaps some FCC or FTC regulations that would harm Apple's business.
Re:A Message to Our Customers by ipsin on Wednesday February 17, 2016 @06:47PM (#11122527)
Re:A Message to Our Customers by csmajorfive on Wednesday February 17, 2016 @07:25PM (#11122733)
This is all very standard for a VIP visit and the president of Indonesia was at Facebook and Twitter today. So there's probably a simpler, less exciting explanation here.
Re:A Message to Our Customers by ianhawes on Wednesday February 17, 2016 @09:11PM (#11123196)
FYI the DOJ/FBI does not utilize Lincoln Town Cars or Escalades for ops. You'll want to keep an eye out for Chevy Impala, Ford Crown Victoria, Chevy Suburban, and in rarer cases Dodge Charger (no spoiler) and GMC Denali. Typically they're darker colors, but the easiest indicator is a massive amount of tint on all windows. Remember, official vehicles will have the default state license plates without any sort of bumper stickers or license plate holders. In Maryland, unmarked LE vehicles typically use an older license plate instead of the newer design.
Re:A Message to Our Customers by sandworm101 on Wednesday February 17, 2016 @05:22PM (#11121970)
Many Apple employees are not allowed to refuse. I suggest that any employee, especially those on any sort of work visa or with any connection to the military/intel community, seek legal advice prior to signing or saying anything. There are big forces involved here that will not hesitate to squash/fire/blacklist little people.
Re:A Message to Our Customers by awad on Wednesday February 17, 2016 @05:38PM (#11122112)
Weirdly enough, I saw a blacked out SUV with Virginia plates and a CHP SUV in front of our office at 2nd and Harrison that looked extremely out of place. Among other things, it's a no stop area on our block and there isn't really much here to begin with.

It hung out for a few minutes and then made off taking a left on Harrison (101 South, FWIW). This was around 12:30p.

Re:A Message to Our Customers by hn9780470248775 on Wednesday February 17, 2016 @04:15PM (#11121463)
> at least one having MD License Plates

Don't vehicles used by federal agencies typically bear U.S. Government license plates?

Re:A Message to Our Customers by berkeleynerd on Wednesday February 17, 2016 @04:20PM (#11121497)
According to @HillRat in the other thread : "Based on open sources, NSA has a fleet of about 100 vehicles at most in CONUS, so they would be more likely to fly vehicles cross-country if DIRNSA needed to use a fleet vehicle. Having said that, NSA doesn't just arbitrarily get involved in domestic law enforcement cases, even ones involving crypto, so let's wait to see if there's more evidence than a random HN post to support this allegation." Good information and an entirely fair statement. I'm hoping someone from Apple can chime in directly.
Re:A Message to Our Customers by officemonkey on Wednesday February 17, 2016 @06:53PM (#11122566)
The majority of federal government travel is done with commercially available rental cars.

The likelihood of the federal government driving a GSA-plate vehicle from Maryland to California to meet with Apple is about zero.

Re:A Message to Our Customers by ethbro on Wednesday February 17, 2016 @10:15PM (#11123444)
Commercially available rental vehicles seem an extraordinarily bad idea for the NSA to drive to and from sensitive meetings in.

What? They just drive silently to and from the meeting or listen to the radio?

Re:A Message to Our Customers by mapmap on Wednesday February 17, 2016 @05:03PM (#11121821)
"I don't want to be deposed"

I'm not familiar with that phrase. What does it mean in this context?

Re:A Message to Our Customers by leesalminen on Wednesday February 17, 2016 @05:10PM (#11121870)
A deposition in the American judicial system is a legal proceeding in which a witness provides testimony to the courts. The witness may be examined by members of either sides legal team. This is a routine proceeding in civil cases. [0]

Interestingly, people usually don't want to be deposed when they have something to hide.

[0] http://litigation.findlaw.com/filing-a-lawsuit/what-is-a-dep...

Re:A Message to Our Customers by mintplant on Wednesday February 17, 2016 @05:11PM (#11121879)
> Interestingly, people usually don't want to be deposed when they have something to hide.

Or because the process is a huge hassle to deal with, it sucks up days and days of your time, and it's very easy to mess something up.

Re:A Message to Our Customers by uxp on Wednesday February 17, 2016 @06:27PM (#11122417)
"'I've Got Nothing to Hide' and Other Misunderstandings of Privacy" [0] is a really good paper on why the argument of "only bad people have secrets" is such a fallacy.

[0] http://scholarship.law.gwu.edu/cgi/viewcontent.cgi?article=1...

Re:A Message to Our Customers by sandworm101 on Wednesday February 17, 2016 @05:31PM (#11122057)
> Interestingly, people usually don't want to be deposed when they have something to hide.

You don't need to have done anything wrong to fear a deposition. Go to youtube and watch any number of "do not talk to police" lectures. An innocent person can end up trapping themselves in a lie, or bow to pressure. Or you may say something that you think is harmless but in fact damns you. Depositions should be avoided wherever possible.

Re:A Message to Our Customers by dragonwriter on Wednesday February 17, 2016 @05:14PM (#11121900)
> Interestingly, people usually don't want to be deposed when they have something to hide.

Interestingly, people usually don't want to be deposed, period.

Sure, its a routine proceeding in civil cases; guess what, people generally don't want to be involved in civil cases -- as plaintiffs, defendants, or called witnesses -- either.

Re:A Message to Our Customers by paraxisi on Wednesday February 17, 2016 @05:13PM (#11121895)
> Interestingly, people usually don't want to be deposed when they have something to hide.

That's a pretty... er, dubious claim at best?

Re:A Message to Our Customers by amalcon on Wednesday February 17, 2016 @05:27PM (#11122027)
I mean, it's an accurate statement. It's just also true that people usually don't want to be deposed even if they have nothing to hide. The "when they have something to hide" part is just superfluous.
Re:A Message to Our Customers by alexwebb2 on Wednesday February 17, 2016 @09:05PM (#11123167)
It's not just superfluous, it changes the meaning of the statement. It's like saying "I like women when they aren't driving". You can't follow that up with, "oh, but I also like them when they are driving, so it's okay to say that".
Re:A Message to Our Customers by lawnchair_larry on Wednesday February 17, 2016 @05:19PM (#11121941)
No, people don't want to be deposed because they want to do their job and mind their own business, instead of get pulled in to a national spectacle, be inconvenienced with new travel plans that require child care arrangements or other disruptions, and potentially face stressful scrutiny on record.
Re:A Message to Our Customers by jonathankoren on Wednesday February 17, 2016 @05:20PM (#11121951)
> Interestingly, people usually don't want to be deposed when they have something to hide.

You know who really talks a lot about their rights? Terrorists.

Re:A Message to Our Customers by tsunamifury on Wednesday February 17, 2016 @05:54PM (#11122214)
This is both patently false and the single most deeply un-American mindset you can have.

Your statement is so deeply naive and insulting to the patriots who fought for the rights you enjoy today.

Those who made major strides for:

1) Black Civil Rights

2) Gay Marriage

3) Women's Rights

4) Anyone who fought government intimidation based on speech

5) Democratic Socialists

6) Abortion Activists

7) Environmentalists

8) Your workers rights (i.e. your weekends and pay)

10) Many more... who made sure you could help move society forward and make it better for everyone.

Edit: I assume the downvotes are coming from those who would rather we lock up the above than have a free American society.

Re:A Message to Our Customers by PhasmaFelis on Wednesday February 17, 2016 @06:10PM (#11122319)
I didn't downvote you, but you're probably being downvoted because jonathankoren was sarcastically mocking leesalminen's "the innocent have nothing to hide" attitude.
Re:A Message to Our Customers by mentat on Wednesday February 17, 2016 @07:24PM (#11122728)
As sibling says, you're being downvoted because you've failed to recognize sarcasm.
Re:A Message to Our Customers by aback on Wednesday February 17, 2016 @06:17PM (#11122353)
Yes, the Founding Fathers of the USA probably were considered terrorists, and they talked an awful lot about freedom.
Re:A Message to Our Customers by hitekker on Wednesday February 17, 2016 @07:09PM (#11122655)
Please tell me you said 'Interestingly, people usually don't want to be deposed when they have something to hide.' off-the-cuff.

I would associate this view/tone with a corrupt, small-town, sheriff in a movie, rather than a real, human citizen who shares the the values of our society, which includes due process, the right of the accused, and presumption of innocence.

Re:A Message to Our Customers by atmosx on Wednesday February 17, 2016 @05:36PM (#11122097)
Re:A Message to Our Customers by rrmm on Wednesday February 17, 2016 @05:14PM (#11121902)
Depositions aren't usually that fun regardless of what you have to hide. I'd probably want to avoid one if I had the chance.
Re:A Message to Our Customers by berkeleynerd on Wednesday February 17, 2016 @04:24PM (#11121537)
According to my source at Apple HQ a TV van is on the way. We should see some news coverage soon.
[dead]
Re:A Message to Our Customers by rudolf0 on Wednesday February 17, 2016 @04:06PM (#11121406)
Nothing. Bringing a bunch of special agents along with you to a meeting is intimidating, though.

I suppose in their defense, they may be the particular agents working on the San Bernadino case, who arrived to explain exactly why they need the access or whatever.

[dead]
Re:A Message to Our Customers by d4nt on Wednesday February 17, 2016 @05:03PM (#11121816)
The way powerful people often maintain control of a situation is through contrivances such as unusual dress, unusual ways of speaking, unusual rituals or by having a large entourage.

If you analyse each element closely it's clear that they're silly. Why do they need earpieces in when visiting Apple? Why must all the cars match? Why must they dress in the same way? Why do they need to bring all those people, what are they all doing?

But the point is, when faced with something new and strange, people often pause and withdraw. This allows you to dominate the situation and prevent dissent.

Re:A Message to Our Customers by jsprogrammer on Wednesday February 17, 2016 @08:22PM (#11122983)
Earpieces are probably worn routinely, just as many other people you may see walking around.

Large organizations typically procure fleets of vehicles that are all the same model. This reduces development and maintenance costs.

Many institutions, particularly law enforcement, have strict dress regulations and many distribute their own uniforms appropriate to the particular position.

Re:A Message to Our Customers by nitrogen on Wednesday February 17, 2016 @10:33PM (#11123518)
Yes, and those things are done for the exact reasons the parent comment mentioned. Even comedies like Brooklyn Nine Nine recognize this fact (one episode had a bit about a detective refusing to wear a tie). They wouldn't bother with uniforms if they had no effect.
Re:A Message to Our Customers by calhoun137 on Wednesday February 17, 2016 @05:03PM (#11121814)
Its intimidating for the same reason that having the kgb show up for a russian companies meeting would be intimidating.
Re:A Message to Our Customers by PhasmaFelis on Wednesday February 17, 2016 @06:39PM (#11122486)
Special agents who wear earpieces are people who have been trained to respond swiftly and decisively when violence is called for. That's what the earpiece is for, to coordinate tactical action if necessary. Having a swarm of them show up at your place of business is obviously intimidating even if they're not actually planning or expecting violence.
Re:A Message to Our Customers by rudolf0 on Wednesday February 17, 2016 @05:27PM (#11122025)
You would expect the higher level officers and directors to be in plain clothes, normally.