News for hackers. Stuff that matters.
Re:San Bernardino County tweets it reset attacker iCloud pas... by sehugg on Saturday February 20, 2016 @01:22PM (#11141183)
Wired reports: "...the company’s engineers had first suggested to the government that it take the phone to the suspect’s apartment to connect it to the Wi-FI there. But since reporters and members of the public had swarmed that crime scene shortly after the shootings occurred, it was likely that any Wi-Fi there had been disconnected" [1]

[1] http://www.wired.com/2016/02/apple-says-the-government-bungl...

Re:San Bernardino County tweets it reset attacker iCloud pas... by ryao on Sunday February 21, 2016 @01:02AM (#11143521)
Am I the only one concerned that an iCloud backup translating into information disclosure is a major security weakness in Apple's platform?

Also, since Apple remembers old iCloud passwords to prevent reuse for a year, what stops them from setting it to the original value in their database? Even if there were information lost in their database when the password changed, surely they have backups, right?

Re:San Bernardino County tweets it reset attacker iCloud pas... by GhotiFish on Sunday February 21, 2016 @11:39AM (#11145134)
backups I can see being a problem. Though just because you can prevent people from using duplicate passwords doesn't mean you can reset it to that password. Just use a hash.
Re:San Bernardino County tweets it reset attacker iCloud pas... by camillomiller on Sunday February 21, 2016 @04:42AM (#11143924)
I don't think they can do that
Re:San Bernardino County tweets it reset attacker iCloud pas... by sschueller on Saturday February 20, 2016 @05:07PM (#11142182)
This is like the icing in the cake! If it turns out the FBI's incompetence to secure the apartment prevented them from reconnecting the iPhone to the wifi in order to get a fresh backup off of it.
Re:San Bernardino County tweets it reset attacker iCloud pas... by Houshalter on Saturday February 20, 2016 @06:42PM (#11142522)
Isn't securing the scene the job of the local police? How far away was the nearest FBI office?
Re:San Bernardino County tweets it reset attacker iCloud pas... by ryanlol on Sunday February 21, 2016 @11:20AM (#11145057)
11.3 mi via I-215 N
Re:San Bernardino County tweets it reset attacker iCloud pas... by tlrobinson on Saturday February 20, 2016 @01:33PM (#11141236)
So plug it back in...?
Re:San Bernardino County tweets it reset attacker iCloud pas... by everly on Saturday February 20, 2016 @02:03PM (#11141384)
Seems like that part is just bad reporting. I presume they mean the Comcast (or whatever provider it is) account is no longer active, not that a router has been simply unplugged (annoyingly, the average user/journalist doesn't understand the relationship between a copper connection, modem, and router/WiFi and that hasn't been helped by Comcast bundling them as a single device).

It would still be relatively trivial to restore the connection so it's not a valid reason for requiring the backdoor, but I think that was the writer's intent.

Also, even if they didn't restore the broadband at the guy's apartment, couldn't they just take the router and plug it in back at the station, since the login credentials have already been established?

Even the mention of the reporters swarming the apartment highlights the absurdity of the FBI's logic. How can they justify needing to scour every last digital crevice when they couldn't even be bothered to secure and scour the physical space they had access to?

Re:San Bernardino County tweets it reset attacker iCloud pas... by singlow on Saturday February 20, 2016 @06:10PM (#11142427)
But if it is just the access point they need, go get it and connect it to a network connection that is working.
Re:San Bernardino County tweets it reset attacker iCloud pas... by everly on Saturday February 20, 2016 @06:28PM (#11142473)
That's exactly what I said in the comment that you replied to:

"Also, even if they didn't restore the broadband at the guy's apartment, couldn't they just take the router and plug it in back at the station, since the login credentials have already been established?"

However, the sibling comment below my original asserts that iOS won't re-connect to WiFi after booting until the pin has been entered (and thus no backup will occur). If that's true, and if the phone had been powered down at any point, then retrieving the router isn't a viable solution anyway.

Re:San Bernardino County tweets it reset attacker iCloud pas... by tehalex on Saturday February 20, 2016 @02:20PM (#11141464)
Actually, iOS devices do not automatically connect to wifi until they are unlocked for the first time after a reboot - I'm not sure about the cellular networks.
Re:San Bernardino County tweets it reset attacker iCloud pas... by sneak on Saturday February 20, 2016 @03:40PM (#11141846)
They do connect to cellular networks, but will not do an automatic iCloud Backup unless they are a) on wifi and b) connected to power, so this method would not have worked.