News for hackers. Stuff that matters.
Re:The FBI could have broken into San Bernadino shooter's ph... by rgbrenner on Thursday April 05, 2018 @11:16AM (#16765656)
I agree with the EFF.. but:

They write At the same time, according to the OIG report, the chief of the FBI’s Remote Operations Unit (the FBI’s elite hacking team, called ROU) knows “that one of the vendors that he worked closely with was almost 90 percent of the way toward a solution that the vendor had been working on for many months.”

90% finished with no definitive end in sight? That doesnt sound like a solution.. then the EFF concludes:

March 1, 2016: Comey testifies... The OIG report concluded that Director Comey didn’t know that his testimony was false at the time he gave it. But it was false, and technical staff in FBI’s own ROU knew it was false.

No it was not false. It was completely true at the time. 90% is not a solution. Comey does not have a time machine to see when/if the exploit would be completed.

March 16, 2016: An outside vendor for the FBI completes its work on an exploit for the model in question.

Now they have an exploit.. and what does the FBI do? They drop the their alternative approach involving the courts and apple.

Making weak, clearly disingenuous (or worse, technically clueless if they really believe 90% is the same as 100%) arguments do not help the EFF. This will be the first part that their opponents latch on to and attack.

Re:The FBI could have broken into San Bernadino shooter's ph... by V2hLe0ThslzRaV2 on Thursday April 05, 2018 @11:40AM (#16765879)
The FBI's chief of its elite hacking unit has a clear conflict of interest in stating what the status of hacking into the phone related to the San Bernadino shooting -- and unless the OIG confirmed the vendor's status at that point forensically, verbal statements to me are meaningless.

Saying that the vendor was "90 percent of the way toward a solution" could mean anything; for example, they had the hack, but were testing it to see if would work for all iPhone models.

Re:The FBI could have broken into San Bernadino shooter's ph... by rgbrenner on Thursday April 05, 2018 @11:44AM (#16765917)
The vendor the FBI contracted with to develop the exploit says they demonstrated it on March 20th. The FBI says they demonstrated on March 20th. In fact, they postponed a court hearing to attend the demonstration, and the following day informed the court. This is also 3 weeks after Comey's testimony to congress.

If you're going to throw out a conspiracy theory, you should have something to back it up.

Re:The FBI could have broken into San Bernadino shooter's ph... by hinkley on Thursday April 05, 2018 @12:48PM (#16766546)
Imagine you’re the attorney for the other side and you asked the agent under oath if they were tainted by information they were sworn not to reveal.

For some of these agencies I would almost expect them to, let’s say embellish or fabricate, under oath to protect highly classified information. Does that not make them a tainted witness if they have to speak in half truths under oath?

The only way to get an absolutely fair trial would be if all of the information were declassified, or the judge, jury, and lawyers had security clearance. And who without a high clearance could judge what is pertinent to the case?

I think we have always known that justice and secrets clash, which is why we have (had) watchdog groups as a compromise.

Re:The FBI could have broken into San Bernadino shooter's ph... by V2hLe0ThslzRaV2 on Thursday April 05, 2018 @11:47AM (#16765963)
My statements purely state that the FBI is very aware of how to take actions and make statements that are true, but misleading. What is the issue is that the OIG took statements that were clearly meaningless -- but assigned meaning to them.

In fact, if you read the report, which includes these statements, "In the (FBI elite hacking unit) Chief’s view, the fact that he was not asked for help sooner was not a mistake in judgment or communication breakdown on CEAU’s part, but rather the result of a long-standing policy that the ROU Chief understood created a “line in the sand ”against using national security tools in criminal cases." -- which if true, given the events were a known terrorist attack, would have made the events a national security matter.

Re:The FBI could have broken into San Bernadino shooter's ph... by oculusthrift on Thursday April 05, 2018 @03:42PM (#16768251)
so easy to dismiss something by calling it a "conspiracy theory". The only conspiracy is by the FBI on the American people, with their warrantless surveillance. How about the fact they lie around 100 pct of the time about these matters?
Re:The FBI could have broken into San Bernadino shooter's ph... by tlb on Thursday April 05, 2018 @11:38AM (#16765858)
"90% complete" can mean a very wide range of things. If it means having bypassed 9 out of 10 security layers, there's no guarantee it'll ever work. If it means that the system works in the lab and they're adding UI and documentation, then it's reasonable to be confident. I've heard situations both worse and better described as "90% complete".

I would guess that coming from a company selling security solutions to law enforcement, it'd be more like the latter (ie, it basically works and needs polishing).

Re:The FBI could have broken into San Bernadino shooter's ph... by tedunangst on Thursday April 05, 2018 @12:03PM (#16766124)
In the case of developing an exploit, one might reasonably claim that getting 0xdeadbeef in %rip is 90% done. A lot of researchers would stop at that point, because it's sufficient to demonstrate that it's exploitable. Some years ago, before various mitigations, you'd just have to polish up the payload and then you'd be 100%. But today, there might be a fair bit of work turning a demo crasher into a weaponized exploit.
Re:The FBI could have broken into San Bernadino shooter's ph... by mannykannot on Thursday April 05, 2018 @11:55AM (#16766047)
On the other hand, as the immediate goal was to decrypt one specific device and it was regarded as urgent, I would guess that the former is more likely. Your alternative scenario would amount to what would have been possibly the first time ever a software product was completed before it was released.
Re:The FBI could have broken into San Bernadino shooter's ph... by tedunangst on Thursday April 05, 2018 @11:33AM (#16765814)
After you're 90% done, you only have the other 90% to finish. Easy, peasy.
Re:The FBI could have broken into San Bernadino shooter's ph... by celticninja on Thursday April 05, 2018 @11:56AM (#16766060)
The first 90% takes 90% of the project time the last 10% takes the other 90% of the time.
Re:The FBI could have broken into San Bernadino shooter's ph... by SketchySeaBeast on Thursday April 05, 2018 @12:21PM (#16766279)
We have a project manager who asks "are you done, or done done?"

The two are very different.

Re:The FBI could have broken into San Bernadino shooter's ph... by hinkley on Thursday April 05, 2018 @12:38PM (#16766446)
When I was young and impressionable it was done done. My last contracting gig the project manager (who was honestly too good for the customer and noped out after about 14 months and told me countless times “you can’t fix stupid”) started saying done done done.

And still people would say, when asked if they were done done done, “yes, but...”

At some point the developer is done with a task even if the task isn’t done with them. And they will make any rationalization necessary to take partial credit for completion.

Re:The FBI could have broken into San Bernadino shooter's ph... by kolpa on Thursday April 05, 2018 @01:25PM (#16766902)
> Making weak, clearly disingenuous (or worse, technically clueless if they really believe 90% is the same as 100%) arguments do not help the EFF.

Sadly, this has been the EFF's Mo in recent years. They have an ongoing series of blog posts where they try to make hay out of some patent or copyright court ruling that they deeply misinterpret.

Re:The FBI could have broken into San Bernadino shooter's ph... by DataWorker on Thursday April 05, 2018 @02:14PM (#16767442)
Lawyers doing what lawyers do. Blame the state of our legal system, or society. Trial in the court of public opinion is accepted by society, consequences be damned.
Re:The FBI could have broken into San Bernadino shooter's ph... by rayiner on Thursday April 05, 2018 @03:21PM (#16768090)
Lawyers talk to decision makers (judges or juries) who hear both sides of the story. Lawyers are charged with presenting the best possible version of their client's story, because it is the job of the decision maker (not the lawyer) to weigh the facts, judge credibility, and reach a conclusion.

The situation is a bit different where an organization like the EFF is talking directly to the public.

Re:The FBI could have broken into San Bernadino shooter's ph... by ericd on Thursday April 05, 2018 @03:10PM (#16768017)
I imagine that this kind of thing has some consequences for them specifically, though, given that they're funded by donations. I'm certainly less likely to keep donating if I think they're being dishonest and sensationalizing their work.
Re:The FBI could have broken into San Bernadino shooter's ph... by jstarfish on Thursday April 05, 2018 @03:37PM (#16768214)
I agree with your sentiment (their SESTA coverage was a bit ridiculous) but that's exactly what opposing interests are doing.

It's not a fair fight by nature. Why hold the only defender in the arena to a higher set of standards?

Re:The FBI could have broken into San Bernadino shooter's ph... by tedunangst on Thursday April 05, 2018 @03:38PM (#16768220)
Nevertheless people gobble it up. They are the advocates we deserve, not the advocates we need.
Re:The FBI could have broken into San Bernadino shooter's ph... by jacquesm on Thursday April 05, 2018 @12:00PM (#16766098)
I find it impressive that they would even know they are '90% done'. Usually that's a good indication the person speaking has no clue about how long it will take to get it completed but they feel they have done a lot of work already. And then they hit a snag or some unforeseen obstacle and suddenly that 90% is unrealistically optimistic.
Re:The FBI could have broken into San Bernadino shooter's ph... by rayiner on Thursday April 05, 2018 @03:10PM (#16768020)
Also: consider how likely it is that some engineer in ROU would tell the director of the FBI they were 90% of the way to a solution. The FBI has 33,000 employees, more than Facebook. How many 90% solutions exist at Facebook that Zuckerberg does not know about?
Re:The FBI could have broken into San Bernadino shooter's ph... by valuearb on Thursday April 05, 2018 @12:11PM (#16766188)
It's also unclear whether the ROU chief even was able to tell Comey what he knew. I also agree with the EFF, but I think they should focus on the real problem, which is the FBI's cavalier insistence than creating encryption backdoors can ever be save.
Re:The FBI could have broken into San Bernadino shooter's ph... by jedimastert on Thursday April 05, 2018 @02:24PM (#16767556)
> Making weak, clearly disingenuous (or worse, technically clueless if they really believe 90% is the same as 100%) arguments do not help the EFF. This will be the first part that their opponents latch on to and attack.

I feel the same way about marijuana supporters.

Re:The FBI could have broken into San Bernadino shooter's ph... by OldSchoolJohnny on Thursday April 05, 2018 @12:06PM (#16766147)
We know that as developers, but many wouldn't understand this.
Re:The FBI could have broken into San Bernadino shooter's ph... by ozim on Thursday April 05, 2018 @03:35PM (#16768195)
I expect EFF to be rather technical organisation.