News for hackers. Stuff that matters.
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by bb88 on Wednesday June 13, 2018 @05:41PM (#17307231)
> The question is can the government be trusted with a backdoor into our personal devices that "only they" can use?

I think a better question is what happens when we go to a paperless society? Because it's coming, and search warrants will be useless in such a society.

And while some of your rhetoric about the abuses of government spying on citizens is justified (e.g. COINTELPRO, Watergate, etc.), search warrants as a whole do far more good than harm.

And I'd hate to see this power for prosecutors disappear just because drug dealers started using iPhones to keep their illegal activities hidden from police.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Wednesday June 13, 2018 @07:24PM (#17307894)
I think a better question is what happens when we go to a paperless society? Because it's coming, and search warrants will be useless in such a society.

Were this true, crimes would have been practically unsolvable before about the mid 1990s. Back then nobody carried pocket computers/communicators (encrypted or otherwise) and criminals also largely failed to make paper records of their crimes.

You can't smuggle guns via SMS. You can't vandalize shop windows over the Internet. You can't kill people with a digital photograph. Most crimes, and especially the violent crimes that scare people the most, require physical actions that leave physical traces.

The major exception would seem to be certain white collar crimes: insider trading, trade secret theft, perhaps tax evasion and other financial shenanigans. That's where I can see secure electronic devices making law enforcement significantly harder. But when LEOs speak against encryption in public they usually seem to invoke killers and kidnappers, as if victims' bodies were now regularly hidden inside encrypted iPhones instead of car trunks and shallow graves. Maybe LEOs believe their own rhetoric or maybe they just realize that "think of the victims of inside trading!" isn't the sort of terrifying scenario that will get the public on their side.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by robocat on Wednesday June 13, 2018 @07:42PM (#17307998)
> You can't vandalize shop windows over the Internet. You can't massacre people at a concert [snip]. You can't smuggle weapons over a border [snip].

I could commit these crimes over the internet by using others to perform them. So the people you catch are not the prime cause of the crimes. This was not feasible before the internet, and digital monitoring would be the only way to catch me.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Wednesday June 13, 2018 @09:14PM (#17308471)
Even in the 20th century, heads of organized crime and terrorist groups generally weren't the ones actually smashing the windows of businesses that didn't pay protection money or blowing themselves up in crowded markets. If lower level criminals were guided by phone call, then law enforcement could get call records after the fact but not the actual contents of the past calls. If all communication was face-to-face, they wouldn't get even that. It seems about the same to me today. Phone service providers still have call records. PGP encryption on email bodies doesn't keep recipients secret. Apple can supply analogous iMessage metadata in response to a warrant.

Perhaps law enforcement is angry at the passing of a brief golden age where most Americans carried a cell phone and that phone's security was almost always terrible. I'd put that era roughly between 2000, when American cell phone ownership rates rose past 50%, and 2009, when Apple introduced iOS full disk encryption and began regularly improving other data-at-rest protections.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by bb88 on Wednesday June 13, 2018 @10:28PM (#17308780)
I don't mean to be a jerk here by constantly raising counter examples because I think you have some good points. But apps like Signal prevent all that data from being collected. It just stays on the phone, locked by the secure enclave.

> Perhaps law enforcement is angry...

I wonder if what they're truly feeling is worried. Would that change the way you thought about them?

I get that whole thing with "COINTELPRO", and Watergate where there were abuses. But assuming everyone is of the honest type here, wouldn't you want them to have more tools?

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Thursday June 14, 2018 @01:22AM (#17309499)
I wonder if what they're truly feeling is worried. Would that change the way you thought about them?

I want to see the evidence that forms the basis for their worry, if they're feeling worried. Sincere feeling is better than pretending, but sincere feeling isn't enough.

The most compelling evidence would show:

- A statistically significant decline in solving violent crimes or serious property crimes now over the 1990s.

- A statistically significant increase in solving these serious crimes among police departments with access to phone-unlocking (e.g. GrayKey devices) vs. otherwise-comparable police departments without access to such devices.

If nothing regarding smartphones shows a statistically significant correlation to serious crime solution rate, then everyone will just go with their gut feelings. The gut feeling of police is, apparently, that they need to be able to look at the contents of phones. My gut feeling is that they don't. It's an impasse.

If serious crimes are solved at a higher rate in departments with phone-unlocking capabilities, but the rate in the departments without unlocking tech is still no worse than in the 1990s, I still would resist weakening phone protections. It would make me think that maybe things have become harder since 2008, when phones were widespread and insecure, but that secure phones aren't a notable hazard to public safety.

If it turns out that departments with phone-unlocking tech are doing significantly better than departments without it, and that departments without it are now solving crimes of violence and serious property crimes at a lower rate than in the late 20th century, I'd have to have a long, hard think about my personal stance on this issue. There would still be gnarly technical issues even if I decided that less secure phones were a net benefit to society.

But I have changed my stance on security issues before. For example, I changed my mind about video surveillance of public streets. I find it more reassuring than dystopian. I'm more worried about hit-and-run drivers than about the cameras being used by a future dictatorship against the resistance. I've yet to be convinced that monitoring should extend to private spaces like my domicile or phone.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by sosborn on Wednesday June 13, 2018 @11:44PM (#17309120)
It’s not about honesty here, it’s about honesty in law enforcement/government.
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by bb88 on Wednesday June 13, 2018 @10:08PM (#17308695)
> Most crimes, and especially the violent crimes that scare people the most, require physical actions that leave physical traces.

To borrow a page from your argument book, if physical evidence alone were enough, we wouldn't have so many unsolved homicides. Look at the KC unsolved murder list for 2017:

http://kcmo.gov/police/homicide-3/2017-unsolved-homicides/#....

> You can't smuggle guns via SMS.

Technically, you can send the plans for a plastic gun over the internet now, which just needs to be printed on the other side.

You can also send a virus, if the other side has a gene sequencer.

> You can't vandalize shop windows over the Internet.

You can vandalize digital signage over the internet. As well a steal credit cards from the store's credit card readers.

> You can't kill people with a digital photograph.

Well... technically it's animated gif. But yeah you can.

http://fortune.com/2017/03/22/twitter-epilepsy-gif/

> Maybe LEOs believe their own rhetoric or maybe they just realize that "think of the victims of inside trading!" isn't the sort of terrifying scenario that will get the public on their side.

Honestly, I think law enforcement believes that they need more tools. I don't think they want unsolved murders any more than the citizens do. So telling law enforcement officers, "you can pry open my iPhone from my cold dead hands" tends to ring hollow, especially if they really are of the honest kind and really do want to put criminals away as well as respecting your privacy.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by krapp on Thursday June 14, 2018 @08:40AM (#17311166)
>Honestly, I think law enforcement believes that they need more tools. I don't think they want unsolved murders any more than the citizens do.

The US Constitution makes it clear that the rights of the people to be secure in their persons and possessions is paramount, but for a narrowly defined list of exceptions. That crimes may go unsolved because the state is kept on too short a leash, or because modern technology has made their job more difficult, is a feature, not a bug. A government with perfect knowledge about its citizens behavior and correspondence, or one that can perfectly enforce its laws, is indistinguishable from tyranny.

>So telling law enforcement officers, "you can pry open my iPhone from my cold dead hands" tends to ring hollow, especially if they really are of the honest kind and really do want to put criminals away as well as respecting your privacy.

They can pry my iPhone from my cold dead hands, or my live warm hands will hand it over if they have a warrant, but it will remain encrypted either way, for no other reason than I have the right to do so, and they have no right to demand otherwise.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Wednesday June 13, 2018 @10:44PM (#17308860)
Is the murder clearance rate worse than it was in the late 20th century? Also worse than before iOS implemented full disk encryption? Your hyperbolic original claim was that search warrants will be useless in a paperless society. Had you made a mild and reasonable claim like "the contents of a phone, if available in unencrypted form, can help to solve crimes" I wouldn't have bothered to reply.

As for the rest, I can't tell if you are just trying to demonstrate that you can think creatively, or if you actually think that iOS disk encryption is an important element of a scheme to get away with murdering someone with a pathogenic virus recreated from sequence data. (Or to get away with 3D printing guns under illegal circumstances, or deliberately inducing an epileptic fit.)

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by bb88 on Thursday June 14, 2018 @01:59AM (#17309631)
> Is the murder clearance rate worse than it was in the late 20th century?

Why do you insist on this artificial restriction on whether or not police officers should have access to the data on an iPhone? It seems to me this would help the clearance rate if anything. It's another tool in the arsenal.

> As for the rest, I can't tell if you are just trying to demonstrate that you can think creatively...

The internet allows new styles of crimes, perhaps crimes you or I have never really thought about yet. Or maybe I've been paying attention to crimes on the internet lately. And for the record, I'm not the first to think about resequencing viruses. See point #5 here:

https://www.vox.com/2014/5/22/5739380/why-were-never-really-...

And to answer the rest of your comment, your rhetoric reads stronger than it truly is.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Thursday June 14, 2018 @02:55AM (#17309868)
It's a high bar to show that encrypted devices enable a new era of unsolvable crimes. Isn't that what you were originally warning about, with the line about search warrants being useless in a paperless society? Such bold claims call for at least a bit of empirical evidence, like statistically significant solve rate declines vs. the immediate pre-mobile era.
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by CossieRay on Wednesday June 13, 2018 @09:13PM (#17308469)
I am amazed that you completely throw out the window the wisdom in preventive measures and simply wait for the crimes to physically happen then respond to them. It's a no-brainer that most of the extreme and mass violent crimes have been facilitated and coordinated digitally.
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by JetSpiegel on Thursday June 14, 2018 @02:41AM (#17309803)
There were no iPhones in 2001 and 9/11 still happened. All the coordination was done by unsecure communications and face to face.

Having access to more worthless data only makes it harder to find the information amongst the sea of data.

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by philipkglass on Wednesday June 13, 2018 @09:31PM (#17308552)
Even if Apple could unlock iPhone storage given the phone and a valid warrant, law enforcement would still need to get the warrant and take the phone from the owner. Unlocking individual devices is not broadly useful as a preventive measure; it's something that could be done only after you have probable cause and don't mind alerting the target that law enforcement is interested in him.
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by sjy on Wednesday June 13, 2018 @09:22PM (#17308506)
> Back then nobody carried pocket computers/communicators (encrypted or otherwise) and criminals also largely failed to make paper records of their crimes.

But they did use fixed-line telephones and talk in person. These communications can be monitored with a warrant for the use of a telephone intercept or listening device.