FBI’s Comey Concedes Mistake Was Made Over iPhone in San Bernardino Case

Re:FBI’s Comey Concedes Mistake Was Made Over iPhone in San ... by cbsmith on Tuesday March 01, 2016 @09:01PM (#11207653)

There is nothing in the digital signature check that allows it to be locked to a device, so that's logic that has to kick in AFTER the trusted layer has validated the code. At that point, it is a simple matter of altering the device ID check in unsecured RAM and you've now got another cracked phone.

[ Parent | on HN ]

Re:FBI’s Comey Concedes Mistake Was Made Over iPhone in San ... by pilif on Wednesday March 02, 2016 @07:54AM (#11209597)

Actually, I would argue that this is not true. Before installing, the device wants a ticket to be signed by apple that contains a hash of the firmware to be installed, the phone's identifier and a nonce it has just generated. See here: https://www.theiphonewiki.com/wiki/SHSH

So by not signing any requests for that particular firmware hash, Apple can effectively neuter that firmware and make sure it's never installed anywhere but on the target phone.

The problem is though: If apple can be compelled to do this once, they can also be compelled to do this any other time.

[ Parent | on HN ]

Re:FBI’s Comey Concedes Mistake Was Made Over iPhone in San ... by cbsmith on Monday March 07, 2016 @04:19PM (#11241769)

That's not part of the boot chain. That's for OTA updates.

[ Parent | on HN ]

Re:FBI’s Comey Concedes Mistake Was Made Over iPhone in San ... by xerxe-sans-s on Tuesday March 01, 2016 @09:19PM (#11207711)

So would a signature check on the trusted layer against a signature generated with the device id (you'd need to distribute a different binary against every device id) permit the generation of an OS image that could only run on a single device?

[ Parent | on HN ]

Re:FBI’s Comey Concedes Mistake Was Made Over iPhone in San ... by cbsmith on Wednesday March 02, 2016 @03:46AM (#11208810)

It would, in theory. If there weren't any catches with this approach though... Apple could have avoided having itself in this position in the first place.

[ Parent | on HN ]