News for hackers. Stuff that matters.

A comment on San Bernardino County tweets it reset attacker iCloud password at FBI's request.

Re:San Bernardino County tweets it reset attacker iCloud pas... by lasdfas on Saturday February 20, 2016 @04:00PM (#11141937)
Why can't the FBI just work directly on the phone hard drive (removed the hard drive from the phone and connect it to another computer)? Why are the going through IOS operating system?
[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by skocznymroczny on Saturday February 20, 2016 @05:11PM (#11142196)
The hard drive content is encrypted. Assuming there are no backdoors, seems like the only thing they can try is to make bruteforcing easier.
[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by darylteo on Saturday February 20, 2016 @10:08PM (#11143110)
Should note that John McAfee is offering to "break the encryption" of the data within 3 weeks of commencement using "social engineering".

His intentions: good. His success probability: unlikely (unless they have knowledge of how the encryption key is built from the passcode)

Source: http://www.businessinsider.com/john-mcafee-ill-decrypt-san-b...

[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by jessaustin on Sunday February 21, 2016 @10:06AM (#11144747)
Social engineering?

"Mr. Cook, it's John McAfee on line three, again. He says, quote, 'pretty pretty please.'"

[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by lasdfas on Saturday February 20, 2016 @11:28PM (#11143296)
The FBI wasn't asking for the device to be decrypted. They were asking for a new operating system to be installed that circumvented the 10 wrong tries and the phone is erased.

My original question still stands

[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by mindslight on Sunday February 21, 2016 @12:33AM (#11143446)
The half-solution security chip plus the device's software form a psuedo trusted computing module.

It does seem that if the FBI desoldered the security chip and subpoenaed the KDF algorithm, they could recover the raw encryption key using their own hardware. But perhaps I'm missing a detail.

[ Parent | on HN ]