News for hackers. Stuff that matters.

A comment on Apple to Close iPhone Security Hole That Police Use to Crack Devices. Parent comment

Re:Apple to Close iPhone Security Hole That Police Use to Cr... by tzs on Wednesday June 13, 2018 @10:29PM (#17308790)
Briefly, use a secret sharing protocol to distribute the device key to 500 lawyers around the world from countries other than the country the device holder resides in, with 400 key shares needed to reconstruct the device key. A requester can get the device key if he can convince 400 of the 500 lawyers that his request is legitimate according to whatever the criteria was that the lawyers agreed to when they agreed to become key share holders.
[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by olliej on Thursday June 14, 2018 @12:34PM (#17312897)
Which layers? Do those lawyers have the competence to handle securing such a key? What happens when those keys are compromised? What is a legal order that would be valid? The US already has warrant exclusions for “emergencies”, how careful will these lawyers be when they’re getting thousands of requests a day? What happens when they get an NSL?

What happens when you’re investigating a criminal act sponsored by one of the governments you supposedly trust? What if they compel the lawyers in their countries to not provide the keys?

I generally dislike “what if” but given the problem space you do actually need to explain how your system works, and how it resolves these problems.

Remember there are plenty of countries with terrible human rights records, but they also still have regular crimes happen.

[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by s73v3r_ on Wednesday June 13, 2018 @11:11PM (#17308963)
Your argument fell apart when you said "secret". What do you do to prevent widespread abuse when the secret gets out?
[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by mirimir on Wednesday June 13, 2018 @11:54PM (#17309159)
I'm sure that's a reference to Shamir's Secret Sharing Scheme,[0] which is hardly a secret.

0) http://point-at-infinity.org/ssss/

[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by davidgay on Wednesday June 13, 2018 @11:37PM (#17309087)
per-device key.
[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by mcny on Thursday June 14, 2018 @04:42AM (#17310299)
Who holds the per device key? If someone holds all the per device keys (or parts of the per device key) you've painted a bulls eye on their face. In all honesty, I cannot trust the US government with secrets like this because I don't see us being willing to secure it at the same level that we secure our nukes. And dear lord even that level of security likely won't be enough to fend off internal and external threats.
[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by natch on Wednesday June 20, 2018 @03:49PM (#17359072)
Lawyers? Gross. You didn't address what you do when the key is leaked, and then worse you propose to give decision power to scummy people. Not to mention that some of your worldwide lawyers will be sharia "lawyers" and such.

Then when people point out the problems, you don't answer. You make a lot of assertions that are flat out wrong.

[ Parent | on HN ]
Re:Apple to Close iPhone Security Hole That Police Use to Cr... by fauigerzigerk on Thursday June 14, 2018 @03:15AM (#17309945)
What law would those lawyers apply and who would select them?
[ Parent | on HN ]