Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
So the lesson is - Make sure someone else has access to your iCloud, and have them remote wipe as soon as the cuffs are on. I'm not sure if it's 100% effective though, or if it's like hard drives, and can be recovered.

That's a felony, brotha!
 
nly Apple can make their ramdisk work on the device because they have to codesign it with their private key AND obtain the proper personalisation signing for the device's identifiers and random NONCE. (Getting all these signatures for production devices could be time consuming without a lot of pre-existing tools to automate it. The personalisation process also varies between 4S/5/iPad 2/iPad 3/iPad mini. Normally iTunes mediates this during device restores to production iOS releases).

If Apple can do it, somebody else can too. It's just a matter of time ....
 
"Backlog of requests from police" ???

Shouldn't "requests" go in the trash?

Why would Apple respond to anything other than a court order? It's too bad the sheeple don't demand that corporations stop voluntarily selling us out to the government.

----------

Uuuuuuh, you are totally incorrect. If there is a subpoena issued (which there would be if they are searching a suspect device) then Apple is required to provide any help they can. If they had the ability to remove the device password and did not, they could be cited with obstruction of justice and the *****torm that would cause for them. :rolleyes:

um. YOU are totally incorrect. There is a difference between a subpoena and a court order. A court order is issued by a judge, and compliance is required. A subpoena can be issued by an attorney or a law enforcement agency. Not only is compliance NOT required, but releasing non-public information to law enforcement in response to a subpoena can violate statute.

Lesson:
Court Orders should be complied with only to the letter of the law, nothing more.
Subpoenas go in the trash.
 
it hurt my head , ive lived in San Diego USA and Manchester UK, and no where in the UK can i find anywhere i would call a MALL, although the trafford centre does come close.

Haha I live near the Trafford Center! I've always wanted that piano that plays itself :) Anytime I go I just send the missus off shopping and tell her "I'll either be in the Apple Store, the Gadget Shop or the arcade" :p
 
Why?

Truecrypt seems to be available for OS X.


Because, for me, safe means only I can read the encrypted data. In this case it's most probably me, and Apple. I don't consider that safe.

No it's not availible as FDE for /.

----------

FileVault 2 is perfectly safe from everyone but perhaps a few government agencies. AES256 is to my knowledge still unbroken.

Safe is when you are the only one able to read your data. I actually thought Apple did not have a backdoor in it's encryption. Seems wrong, so I need to look at other solutions.
 
Last edited:
Of course! All those obscure combinations of pressing buttons for specific amounts of times to get around the lockscreen aren't bugs - they're the secret backdoor Apple left for themselves!

er ...

DOJ: iPhones 'too secure'; A key moment for the enterprise?

ZDNet said:
According to MIT's Technology Review, Apple's iOS designed for iPhones and iPads, has security tough enough to cause even the U.S. Department of Justice headaches in criminal investigations.

A Justice Dept. official spoke at the 2012 Digital Forensics Research Conference, describing the popular smartphone platform as one of law enforcement's worst nightmares.

"I can tell you from the Department of Justice perspective, if that drive is encrypted, you're done," said Ovie Carroll, director at the Justice Dept.'s Computer Crime and Intellectual Property Section, during his address earlier this month.

"When conducting criminal investigations, if you pull the power on a drive that is whole-disk encrypted you have lost any chance of recovering that data."
 
Haha I live near the Trafford Center! I've always wanted that piano that plays itself :) Anytime I go I just send the missus off shopping and tell her "I'll either be in the Apple Store, the Gadget Shop or the arcade" :p

Best apple store to use for any repairs, took my iMac in for a screen replacement and went and watched spider-man whilst they did it.

Perfect timing. crappy film
 
If Apple can do it, somebody else can too. It's just a matter of time ....

Apple can do it because they made the device and have all the cryptographic keys for any software they want to run on the device.

Somebody else will be able to do it once there is an exploit that allows unsigned code execution over USB (particularly an iBoot or bootrom exploit: almost impossible to find after 6 years of refinement) OR a way access to the backup daemon while passcode locked (more likely, but the code that mediates this is rather secure as it is).
 
Because, for me, safe means only I can read the encrypted data. In this case it's most probably me, and Apple. I don't consider that safe.

Safe is when you are the only one able to read your data. I actually thought Apple did not have a backdoor in it's encryption. Seems wrong, so I need to look at other solutions.

There is no backdoor. What Apple has is expertise that makes it possible for example to try out 10,000 possible four digit passcodes without the device erasing itself. Basically the information that some hacker or the police might figure out, Apple has it already because they built the device. The difference between police and Apple here is that the police didn't spend time figuring out how to do it, that's all.

Apple still has no choice other than trying out all possible passcodes. With four digits, that's no big deal. With a password of 8 random letters and digits, it is basically impossible. Apple also has built-in some protection against brute force attacks like this by making the encryption so that trying each passcode takes considerable time (about a tenth of a second. More and users would complain that unlocking the phone with their passcode takes too long).

----------

Apple probably has some kind of JTAG type debugging interface which allows them to read the raw contents of the flash die (this might take hours or days though). Then using the secret Apple private key, they can start to unroll the boot sectors and keychain using an ICE or perhaps Xcode debugger, just like the normal iPhone cpu does at boot time. Then they read the file system, and then find the PIN, and then return it to the cops.

The PIN is not stored anywhere. Never.

The device has an encryption key which is a random 128 bit number, and a master key which is another random 128 bit number. The encryption key is stored encrypted with the master key. The master key is stored encrypted with the PIN. The PIN isn't stored anywhere. In the case of MacOS X FileVault encryption, when encryption is turned on and the encryption key and master key are created, you are given an opportunity to write down the master key so you can unlock the hard drive if you lose the password. There is also a way that companies can store master keys for the computers they own, so when an employee leaves and "forgets" the password, they can recover the data on the computer.
 
We haven't seen these requests so for all we know they are court orders.

Agreed. I would assume that it would have been specified if it were court orders, tho. Also, law enforcement regularly "requests" cooperation from corporations when they lack the evidence or probable cause to get court orders. And the corporations are more than happy to just give any information they are asked for.
 
1 billion dollars a year Apple could have saved... bet the share holders are not too pleased this was not implement earlier.
 
There is a guy in my local mall who will do it for them for only £15...

I work at some "place" that needs this too. And I see you guys have no ****ing clue. Do they bypass 6 digit secure code on an iPhone 5 ? Really?

Sorry guys but get more into the topic and then speak about it.

These "programs" you talk about are UFED and Xray.
 
I work at some "place" that needs this too. And I see you guys have no ****ing clue. Do they bypass 6 digit secure code on an iPhone 5 ? Really?

Sorry guys but get more into the topic and then speak about it.

These "programs" you talk about are UFED and Xray.

Who's talking about UFED & Xray? It was a 'throw away' post more for humour value than anything else.

Why the swearing?

Anger management issues...?

Beat the wife much.....?

Loser.
 
passcode.jpg

Aw man, subliminal advertising for the new star trek movie, made from scenes that star trek already did 30 years ago but now has bigger effects and half the content!


Hmm...this seems a little vague:

Of course it is, and deliberately so.

Yup. We lack ethics in society so we can make loopholes to make nefarious deeds 'acceptable'. And it's easier to regurgitate old product than to dare be creative - something that the real Star Trek show will tell you can't be done in a day, you cannot wake up on any given day, snap your fingers, and say Genius doesn't work on an assembly line basis. You can't simply say, 'Today I will be brilliant.'" ... real life isn't like that, but we try to give the impression of that and then blame everybody when the impossibility of that is realized...

Then we wonder why the world is such a grubby place with people who'd sell their own mothers to 'prosper', since nobody wants to take risks...
 
£ and 'mall' in the same sentence - culture clash!

There are plenty of shopping centres that call themselves "Malls" in the UK.

In fact there's a property company called "The Mall Co", and all of their shopping centres are branded as "Malls".

Also, Westfield's shopping centres could well and truly be called malls, even if they don't describe them as such.
 
lol..

"...and investigators contacted Apple for assistance after they were unable to locate any law enforcement agency in the country with the forensic capabilities to unlock an iPhone crucial to the case."

unbelievable.... not even within the country..........

I would bet a steak dinner knowing there is al kinds of backdoors within IOS for law enforcement...
 
There are plenty of shopping centres that call themselves "Malls" in the UK.

In fact there's a property company called "The Mall Co", and all of their shopping centres are branded as "Malls".

Also, Westfield's shopping centres could well and truly be called malls, even if they don't describe them as such.

England doesn't have malls, in the same way it doesn't have Elevators or Sidewalks... its just a matter of Americanisation of the English language
 
it hurt my head , ive lived in San Diego USA and Manchester UK, and no where in the UK can i find anywhere i would call a MALL, although the trafford centre does come close.

We have shopping centres here in the North East (Boro) simply called 'the Mall', I assume he does as well.
 
England doesn't have malls, in the same way it doesn't have Elevators or Sidewalks... its just a matter of Americanisation of the English language

That certainly doesn't stop shopping centres calling themselves malls (e.g. "The Mall Luton").
 
We haven't seen these requests so for all we know they are court orders.

It doesn't really matter, because any information gathered from your phone without a search warrant will be thrown out in a court case. Including any information that is found later elsewhere, based on information gathered from your phone without a search warrant. So we know that the police would have a search warrant.

There's also precedence that if they have a search warrant, you would have to supply the passcode anyway. (There are exceptions. If a thief or murdered dropped their phone at a crime scene, the phone is found but the identity of the thief is not known, then supplying the passcode would tell the police that you were the owner, and that would be self-incrimination. But if they know that the phone is yours, and the fact that you know the password is not incriminating, then you have no right to refuse handing over the password).
 
That certainly doesn't stop shopping centres calling themselves malls (e.g. "The Mall Luton").

That's correct!

Also in London you have "The Mall Wood Green"....., which therefore should hopefully answer the apparent 'confusion' and 'excitement' stemming from my original post..... :rolleyes: UK shopping centres often refer to themselves as "Mall's". An Americanism? Of course, but who really cares? ;)

Maybe I will edit my post to say: "There is a guy in my local shopping centre [which is called a Mall, but apparently I should not call it so, because it is a blatant Americanism, which will invite disparaging comment and confusion. Also it compares less favourably to US Mall's, which are apparently the best in the world. In fact it is a dump which should not even be considered a shopping centre. I am now so depressed coming to this realisation, that I will go and kill myself now] who will do it for them for only £15..."

The original post itself, was merely a tongue in cheek comment, which amusingly enraged at least one resident MR "security expert"... LOL :D
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.