Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
They're not breaking into the phone though. This is the Apple ID password, not the pin code to get into the device itself.

I know I'm confused. I admit it so. But it doesn't seem like you're following me. Device or iCloud - doesn't matter in my equation. What matters is the data.
 
Again - and not trying to sound obtuse. If you're breaking into the phone/accessing data that isn't yours - what's really the difference in method?
Sure. So the difference is in one case, what the FBI is proposing is to force Apple to make iOS less secure than what they feel they've worked very hard on vs handing over data that is in iCloud that isn't encrypted and does not require Apple to weaken its encryption methods. I suppose after this, at WWDC, Apple will announce that iOS 10 will create encrypted backups on iCloud.
 
Simple.
The iPhone connect automatically to the iCloud backup on an know wifi. But the FBI changed the password of the iCloud. So now the iPhone doesn't backup automatically because the changed password.
I understand the scenario.

What I don't understand is why is makes a difference. If access to the data was possible or would have taken place before the password change - why is it any "worse" to access it now?

Dare I ask - does that open up Apple's customers to know that ultimately, despite encryption/etc - their data CAN be accessed?
 
Simple.
The iPhone connect automatically to the iCloud backup on an know wifi. But the FBI changed the password of the iCloud. So now the iPhone doesn't backup automatically because the changed password.
Come on, anyone knows that you first connect the phone to a known WiFi network, let it do it's backup, THEN change the password.

I would say it's IT 101, but it's even lower level than that.
 
  • Like
Reactions: gigi1701
Sure. So the difference is in one case, what the FBI is proposing is to force Apple to make iOS less secure than what they feel they've worked very hard on vs handing over data that is in iCloud that isn't encrypted and does not require Apple to weaken its encryption methods. I suppose after this, at WWDC, Apple will announce that iOS 10 will create encrypted backups on iCloud.

OK - that I understand - future proofing, etc. I was being specific to this one case.
 
I understand the scenario.

What I don't understand is why is makes a difference. If access to the data was possible or would have taken place before the password change - why is it any "worse" to access it now?

Dare I ask - does that open up Apple's customers to know that ultimately, despite encryption/etc - their data CAN be accessed?
The reason is that in order to access it now, Apple must create an intentional backdoor that could be used by ANYONE to do anything they want.

Whereas if the phone was backed up via iCloud, it is a given that the government could come in and request that backup data, as anyone can recover data from these backups.
 
  • Like
Reactions: gigi1701
That means the only way that plan would have worked anyway was if he hadn't left the phone plugged in on a known wifi network for SIX WEEKS. Or, as the suggestion was in earlier articles, he deliberately disabled it, in which case this plan would not have worked.

I support Apple on this but this seems like using a get out of jail free card.

I was thinking the exact same thing. The phone hasn't backed up in 6 weeks, why should it back up now? I'm torn between the right for privacy and my love for justice, this country and what it stands for. From my short time on this planet I learned that there's rarely a black/white situation. I'm sure apple and the fbi could find a middle ground that would keep us safe and bring any accomplices to justice, while keeping the average Joe's privacy intact. Now it's a different story with the media on the case
 
ITS ONLY ONE PHONE, HOW MANY DIED... SMARTEN UP.... DON'T GET STUPID ON US

It's not just one phone, they cannot comprise one iOS device without comprising them all, something Apple stands firm against. And if what they said is true, then our government body is corrupt and incompetent.

Also I would argue that if the FBI and NSA were doing their jobs, the terror attacks at the heart of this issue wouldn't have happened.
 
Simple.
The iPhone connect automatically to the iCloud backup on an know wifi. But the FBI changed the password of the iCloud. So now the iPhone doesn't backup automatically because the changed password.

It's not that simple.

He can't have charged the phone himself while connected to known wifi for 6 weeks prior to the event. How do they know which wifi is known (I'm assuming iCloud Keychain is the answer here)?

I don't know his movements like the fbi would but it sounds like either he turned it off or it got turned off somehow. I'm often prompted to enter my iCloud password for verification nowadays; up to once a week and sometimes even more. It's likely this bug would also have put paid to apples plan working.

But this is a nice get out of jail free card.
 
Simple.
The iPhone connect automatically to the iCloud backup on an know wifi. But the FBI changed the password of the iCloud. So now the iPhone doesn't backup automatically because the changed password.

Oh bloody hell.

Let's think like a criminal hacker for a moment.

If it were plainly that simple, it all boils down to if the iPhone connects to iCloud over any SSL connection.

If it does, that's a bigger issue that they can't work themselves really out of.

If it does not, all the FBI would have needed to do was use a packet sniffer (like Wireshark), sniff the packets at the WiFi router (hint: if not over SSL, VPN, or some other secure connection, data contained in the packets could be in plain text format), grab the password in question, and they would be done.

Now they've shot themselves in the foot here and are going to the well to get help for something that can't be done.

BL.
 
I know I'm confused. I admit it so. But it doesn't seem like you're following me. Device or iCloud - doesn't matter in my equation. What matters is the data.
I think everyone is confused. It appears that after October 19 this device stopped backing up to iCloud. And less than 24 hours after the attack the county changed the password associated with this Apple ID. The FBI wants access to the phone to get information in between that time that wasn't backed up to iCloud. My question is had the password not been changed what would Apple engineers had been able to do if iCloud backup was turned off in settings? Even if they connected it to a known network it wouldn't back anything up if that setting was turned off would it? And what other reason would there be for no iCloud backups after Oct 19 other than iCloud backup being turned off in settings?
 
  • Like
Reactions: ohio.emt and TropN
Hold up! So there is a way access data in the iPhone? **** that ****. Fix that bug Apple. I pay a lot of money for these reasons. Steve Jobs would never allow this to happen.
No. The FBI was able to get the iCloud backup but once the county changed the password, they screwed themselves from further iCloud backups. That's how I understand it.
BTW, I think the "Steve Jobs would never allow this to happen" deal is a bit old, don't you think? I imagine iCloud backups would have happened in his presence and if that is the case, then this would be the same situation.

I don't back up to the cloud, though I've recently seen a good reason why, and I change my password every 30 days because of my job. Simple.
 
They only want that phones info, get it for them. what is more important privacy or life ?

How is hacking an iPhone going to bring dead back to life? This is not about single incident or iPhone. This is about creating a backdoor to every iPhone in the world. Also, it's worth noticing that they are not asking Apple to provide the actual information. They want the backdoor instead.
 
I think everyone is confused. It appears that after October 19 this device stopped backing up to iCloud. And less than 24 hours after the attack the county changed the password associated with this Apple ID. The FBI wants access to the phone to get information in between that time that wasn't backed up to iCloud. My question is had the password not been changed what would Apple engineers had been able to do if iCloud backup was turned off in settings? Even if they connected it to a known network it wouldn't back anything up if that setting was turned off would it? And what other reason would there be for no iCloud backups after Oct 19 other than iCloud backup being turned off in settings?

Perhaps access to logs/gps data, etc? Not that those are uploaded (that we know of)
 
Oh bloody hell.

Let's think like a criminal hacker for a moment.

If it were plainly that simple, it all boils down to if the iPhone connects to iCloud over any SSL connection.

If it does, that's a bigger issue that they can't work themselves really out of.

If it does not, all the FBI would have needed to do was use a packet sniffer (like Wireshark), sniff the packets at the WiFi router (hint: if not over SSL, VPN, or some other secure connection, data contained in the packets could be in plain text format), grab the password in question, and they would be done.

Now they've shot themselves in the foot here and are going to the well to get help for something that can't be done.

BL.

That's not the plan at all.

1) an iCloud ENCRYPTED backup; do you think Apple would be silly enough to transmit the passwords in plain text? Really?

2) they already have the password.

I'm relieved your criminal hacker skills are so poor.
 
Naturally most people would ask how they change the password for the Apple ID - well it's quite easy. If they hacked or have access to this email account, they simply request a password reset change via https://iforgot.apple.com and reset the password via email then access the email to reset the password.

Alternatively this can be reset via security questions, but this is more difficult and can eventually lock you out of your account for 24 hours. Once the password is reset they can access the Apple ID account and anything iCloud based as well.
 
I think everyone is confused. It appears that after October 19 this device stopped backing up to iCloud. And less than 24 hours after the attack the county changed the password associated with this Apple ID. The FBI wants access to the phone to get information in between that time that wasn't backed up to iCloud. My question is had the password not been changed what would Apple engineers had been able to do if iCloud backup was turned off in settings? Even if they connected it to a known network it wouldn't back anything up if that setting was turned off would it? And what other reason would there be for no iCloud backups after Oct 19 other than iCloud backup being turned off in settings?
I think if iCloud backups are off then there would be nothing. Access to the device would be key there. I think that's the rub and why they want that backdoor. No?
 
  • Like
Reactions: TropN
Add me to the "confused" category. The FBI had access to earlier iCloud backups, but then made it impossible to get future ones. Okay, fine. But, didn't the FBI make this password change after they had the phone in their custody? If so, what new information could they possibly get if the password was left alone?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.