For now. I’m sure that the early implementations of Open firmware could be bypassed by booting from a CD or some method very mundane?It sounds like they are. I hope they are able to figure out how to put a firmware password on these phones like Macs. If you set a firmware password on a newer Mac with soldered RAM and forget it, you're screwed. It will only boot to the one drive it was assigned to and require that password to boot from anything else - even recovery mode or the boot selector. Couple that with FileVault and your machine is practically secure from thieves and and government.
Basically what this would do is any time the phone is asked to boot into any other partition or mode (like DFU or recovery) it would require a firmware password. That is what we need to make any backdoor that Apple might have to create for this case unusable. And I hope Apple has the heart to release this update to all iPhones ASAP, even older ones that aren't getting software updates anymore.
It sounds like they are. I hope they are able to figure out how to put a firmware password on these phones like Macs. If you set a firmware password on a newer Mac with soldered RAM and forget it, you're screwed. It will only boot to the one drive it was assigned to and require that password to boot from anything else - even recovery mode or the boot selector. Couple that with FileVault and your machine is practically secure from thieves and and government.
Basically what this would do is any time the phone is asked to boot into any other partition or mode (like DFU or recovery) it would require a firmware password. That is what we need to make any backdoor that Apple might have to create for this case unusable. And I hope Apple has the heart to release this update to all iPhones ASAP, even older ones that aren't getting software updates anymore.
FBI: create the key
Apple: no, it will have terrible consequences and unlock every iPhone
FBI: no it won't
Apple: yes it will
FBI: no it won't
Apple: *rolls eyes*
If absolute security and privacy is their raison d’etre, why haven’t they done it before?Device level encryption with a password to boot or with all upgrade modes disabled unless phone is unlocked first.
I have a Nexus 6P. You cannot unlock the bootloader unless you have access to the booted device.
When you unlock the bootloader you wipe the device.
Apple only needs to change the way the bootloader functions and close all back doors.
An example:
They only need to have a flag that can only be set by a phone that has the password/fingerprint correctly entered.
The flag is not persistent and only survives a single warm boot to upgrade.
There are many ways to close all backdoors.
It's not only that.There's absolutely no reason that Apple can't create a special FW version for this one phone that is rooted and doesn't apply to any other devices... get that phone upgraded to that FW release and make it vulnerable to an attack.
However I am opposed on any number of reasons to Apple doing it. Things like that have a tendency to get out into the wild and once they do, all bets are off.
Additionally, Apple does not keep the encryption keys of their devices any longer.... that's why they can no longer honor these types of requests. The drive of the phone is literally encrypted with a key that Apple does not have.
On the one hand there's probably no reason that Apple couldn't create a special firmware load for this device that would allow a brute attack to succeed and honor the DOJ request.
On the other hand that opens Pandora's Box when Apple will be asked to do the same thing hundreds of times a year anytime any local/state/national government wants the same thing.. they will have set the precedent.
The only debate is whether the people can hold back the government, or if democracy is truly gone.
The precedent. You are not considering the effect of setting such a precedent. ANY government agency, from ANY government, will ask the same. Sooner or lather our security will be breached.I am not picking sides here but...
Apple does have the power, considering all updates must be signed by their servers, to tailor build a software for said specific hardware and then destroy all traces of that software once it has been used to extract the data from the phone(s) in question.
We keep talking about a back door built into all installations of iOS, and that simply doesn't have to be the case. Apple has the ultimate power due to the very nature of how iOS installs work, and frankly have worked, from the very beginning.
Again, I am absolutely not picking sides. I am not saying that because they can do it they should have to do it. But there absolutely is a safe way to do this. Or at least a safer way than is really being discussed by the majority of folks. I haven't even discussed the precedent this sets, but I feel that has been pretty accurately portrayed both in news posts and in subsequent discussions.
They'd better work to prevent terrorists attacks, not to search terrorists phones after it happened.
Such an ignorant comment....This guy gets it. The average voter has no idea about politics either even though they like to think they have.
[doublepost=1457671390][/doublepost]
Yep. In short, we are all dishonest. If you seriously think that corporations are any less bent than the governement then I’d say you are extremely short sighted.
Lots of people here say Cook would make a great president, er……..sorry he’s spent years evading taxes. He’s done what the government do.
He’s found a loophole. We pay every dollar we owe, NO. We don't just comply with the law, we comply with the spirit of the law. NO, NO, NO! He funnels all his money through Ireland because it’s not illegal, the ironic thing is there aren’t even any Apple stores there.
The government found one too, when they want to waterboard somebody they take them to another country where it’s not illegal.
When it suits you because that guy being water boarded has an orange jumpsuit and a slightly arab sounding name or appearance it’s Ok is it?
The FBI are correct in one thing, (that they are also guilty of), and the press coverage has made it worse. Apple have devalued the discussion with excessive hyperbole. You all know that’s true.
If you’re familiar with their Keynotes or interviews you KNOW that hyperbole on maximum attack is the Apple SOP.
A lot of people from both sides need to weigh in here to balance the discussion. Ultimately the decision they come to will not please everybody but at least we may get to a compromise and make sure we have explored every avenue.
It already has more.
What bothers many is how many people prefer corporations governing we the people, instead of we the people. The anti-government folk have yet to put out anything that makes having big business do governing being a superior choice.
In rarefied cases as proven by deliberation to ask and receive a court order... people are blowing things so grossly out of proportion that it is beyond belief.
I think Apple has been trying to balance security and end user convenience. I expect iOS 10 and the next iPhone release to really tighten the screws. I think Apple is even more motivated now.If absolute security and privacy is their raison d’etre, why haven’t they done it before?
I wanted to keep precedent out of the discussion becasue I felt that has been discussed rather accurately in the multitude of discussions on the subject. In fact, I think precedent is about the only thing the community (here on MR) has gotten right. People largely still seem to be calling this some sort of back door to be built into all iPhones, and that really isn't the case.The precedent. You are not considering the effect of setting such a precedent. ANY government agency, from ANY government, will ask the same. Sooner or lather our security will be breached.
In the US we use "tax evasion", probably erroneously, but politicians do ti too, so it has sort of stuck. Ireland is a tax haven that Apple (and other companies) take advantage of, among others. The entire idea behind a tax haven is keeping money (assets) where you pay the least to own them. It is completely legal but, depending on who you ask, considered a loophole that needs closing (and we can get into an incredibly large politcal discussion on how to close that and why and how it would or wouldn't work).Such an ignorant comment....
I don't like Irish government, at all. They are playing a dirty game here in Europe.
But Apple isn't evading any taxes. They are paying accordingly with the agreement with Irish government.
That kind of agreement shouldn't exist since the beginning, so blame Ireland for that....
But don't say TIM COOK IS EVADING TAXES because that's plain false.
Prism? Why not the aliens caged in the Area 51? They should have the same probability to have the same data....It's been half-gone for years, but we'll find out what's left in early November. In the meantime, why aren't the feds just getting data from PRISM? https://en.wikipedia.org/wiki/File:Prism-slide-7.jpg
Is there no longer inter-departmental cooperation? Maybe they should work on getting a key to Room 641A instead.
https://en.wikipedia.org/wiki/Room_641A
FBI: create the key
Apple: no, it will have terrible consequences and unlock every iPhone
FBI: no it won't
Apple: yes it will
FBI: no it won't
Apple: *rolls eyes*
Such an ignorant comment....
I don't like Irish government, at all. They are playing a dirty game here in Europe.
But Apple isn't evading any taxes. They are paying accordingly with the agreement with Irish government.
That kind of agreement shouldn't exist since the beginning, so blame Ireland for that....
But don't say TIM COOK IS EVADING TAXES because that's plain false.
In the UK we have a distinction.In the US we use "tax evasion", probably erroneously, but politicians do ti too, so it has sort of stuck. Ireland is a tax haven that Apple (and other companies) take advantage of, among others. The entire idea behind a tax haven is keeping money (assets) where you pay the least to own them. It is completely legal but, depending on who you ask, considered a loophole that needs closing (and we can get into an incredibly large politcal discussion on how to close that and why and how it would or wouldn't work).
Anyway, the terminology used is probably technically wrong, but has been used incorrectly so much here, that it really doesn't mean what it is supposed to mean anymore. Evading taxes implies you;ve done something illegal. Apple hasn't (at least not to our knowledge or in the context we are talking about).
Oh there's a distinction here too. I'm just saying colloquialism has taking this over, somewhat. Saying someone is evading taxes, outside of some form of legal document, doesn't necessarily imply laws were broken.In the UK we have a distinction.
Evading taxes means you’ve done something illegal.
Avoiding taxes implies you’ve done something at worst underhanded possibly but still legal.
Maybe I’m being a bit pedantic then but TC et al are for sure avoiding taxes. Depending on the outcome of this Europe thing thay may also have even been evading tazes.Oh there's a distinction here too. I'm just saying colloquialism has taking this over, somewhat. Saying someone is evading taxes, outside of some form of legal document, doesn't necessarily imply laws were broken.
They had legislation to back up the requests.
Unfortunately, both sides in this TV discussion used totally wrong arguments. The side _for_ the hacking basically had the argument "let's do it". Yes, that's their argument. Nothing else. The side _against_ the hacking said that it would be illegal. It isn't. There is a search warrant, and the owner of the phone is not the killer but the San Bernardion county, where he was an employee, so hacking into this phone is legal. If the FBI asked Apple to hack into my phone without my permission and without a search warrant, then it would be illegal for Apple to do so, but not here.
Apple's real argument (one that for example the NSA fully agrees with) is that anything created to hack into this phone can get out and endanger the security of millions of iPhone users, which incidentaly includes politicians, FBI agents, military and so on. That's the reason why the FBI shouldn't even ask Apple, because it breaks everyone's security.
Do you mean this one?There are no terrorists. Watch the movie Brazil.
Maybe they are. I don't know for a fact. I was just providing some insure on how the phrase may be used as I know we aren't all native English speakers. And even those that are can find that the phrase may be used differently depending on what part of the world it's coming from.Maybe I’m being a bit pedantic then but TC et al are for sure avoiding taxes. Depending on the outcome of this Europe thing thay may also have even been evading tazes.
EDIT : Sorry, evading taxes, not tazes. I wouldn’t blame him for avoiding tazes.
Yeah I gotcha. We’re all human, that’s the rpoblem.Maybe they are. I don't know for a fact. I was just providing some insure on how the phrase may be used as I know we aren't all native English speakers. And even those that are can find that the phrase may be used differently depending on what part of the world it's coming from.
I don't know enough about the Irish situation or law to give a very valid opinion. I do know there are absolutely valid and legal tax havens that we Americans refer to as tax evasion despite that not being a truly correct term or phrase.
If you follow any of the current (sometimes scary sometimes funny) presidential primary campaigning and debates you will probably hear this very phrase used in the context I am describing once or twice in any given day. At least from a certain candidate who I'll leave unnamed as to not start going (further) off topic.