Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It sounds like they are. I hope they are able to figure out how to put a firmware password on these phones like Macs. If you set a firmware password on a newer Mac with soldered RAM and forget it, you're screwed. It will only boot to the one drive it was assigned to and require that password to boot from anything else - even recovery mode or the boot selector. Couple that with FileVault and your machine is practically secure from thieves and and government.

Basically what this would do is any time the phone is asked to boot into any other partition or mode (like DFU or recovery) it would require a firmware password. That is what we need to make any backdoor that Apple might have to create for this case unusable. And I hope Apple has the heart to release this update to all iPhones ASAP, even older ones that aren't getting software updates anymore.
For now. I’m sure that the early implementations of Open firmware could be bypassed by booting from a CD or some method very mundane?
 
It sounds like they are. I hope they are able to figure out how to put a firmware password on these phones like Macs. If you set a firmware password on a newer Mac with soldered RAM and forget it, you're screwed. It will only boot to the one drive it was assigned to and require that password to boot from anything else - even recovery mode or the boot selector. Couple that with FileVault and your machine is practically secure from thieves and and government.

Basically what this would do is any time the phone is asked to boot into any other partition or mode (like DFU or recovery) it would require a firmware password. That is what we need to make any backdoor that Apple might have to create for this case unusable. And I hope Apple has the heart to release this update to all iPhones ASAP, even older ones that aren't getting software updates anymore.

Device level encryption with a password to boot or with all upgrade modes disabled unless phone is unlocked first.
I have a Nexus 6P. You cannot unlock the bootloader unless you have access to the booted device.
When you unlock the bootloader you wipe the device.

Apple only needs to change the way the bootloader functions and close all back doors.
An example:
They only need to have a flag that can only be set by a phone that has the password/fingerprint correctly entered.
The flag is not persistent and only survives a single warm boot to upgrade.

There are many ways to close all backdoors.
 
Device level encryption with a password to boot or with all upgrade modes disabled unless phone is unlocked first.
I have a Nexus 6P. You cannot unlock the bootloader unless you have access to the booted device.
When you unlock the bootloader you wipe the device.

Apple only needs to change the way the bootloader functions and close all back doors.
An example:
They only need to have a flag that can only be set by a phone that has the password/fingerprint correctly entered.
The flag is not persistent and only survives a single warm boot to upgrade.

There are many ways to close all backdoors.
If absolute security and privacy is their raison d’etre, why haven’t they done it before?
 
  • Like
Reactions: SirCheese
There's absolutely no reason that Apple can't create a special FW version for this one phone that is rooted and doesn't apply to any other devices... get that phone upgraded to that FW release and make it vulnerable to an attack.

However I am opposed on any number of reasons to Apple doing it. Things like that have a tendency to get out into the wild and once they do, all bets are off.

Additionally, Apple does not keep the encryption keys of their devices any longer.... that's why they can no longer honor these types of requests. The drive of the phone is literally encrypted with a key that Apple does not have.
It's not only that.
They are looking for a precedent. Once Apple does that for DoJ, any foreign government could ask the same .... even Chinese gov....
 
On the one hand there's probably no reason that Apple couldn't create a special firmware load for this device that would allow a brute attack to succeed and honor the DOJ request.

On the other hand that opens Pandora's Box when Apple will be asked to do the same thing hundreds of times a year anytime any local/state/national government wants the same thing.. they will have set the precedent.

This is key. The FBI assertions are (1) this is only about this one phone, (2) Apple will destroy the software after this one use, (3) it is only asking for 10 engineers' time for 3 weeks (they chose to quote the low-end estimate of 6 engineers for 2 weeks, but even that is prior to QA and FBI training as Apple detailed it). They then "prove" that the AWA law applies to this case by pointing to previous cases which were "almost" as relevant and "not much" lower in cost to comply with. Which is exactly Apple's point: if Apple does this then the "precedent" bar changes one more rung, and the FBI and various DAs already have tens of thousands of iPhones lined up for this process afterwards. The cost of setting this precedent is not just 30 engineer-weeks, but at least three hundred thousand engineer-weeks, which is to say, 6,000 engineer-years. This is a multi-million-dollar ask, and that is the low-end estimate just of the existing phones the FBI and other federal authorities have lined up.

So, of course, Apple can't devote a team of ten engineers for the next 600 years just to keep recreating the same hack for each individual phone then immediately securely destroy the hack as the FBI asserts is easy to do (because the FBI is full of idiots, apparently). Instead, they would need to create this software once with proper engineering procedures, then keep it on hand for the next ten thousand phones. Which is exactly what Apple says is completely untenable from a software perspective: they need to keep s global "free entry" key under wraps at the Apple campus. This is not a business Apple is in and not one they seek to be in. It is a completely unreasonable request for them to be conscripted to be in this business from now through the end of time by the FBI.
 
  • Like
Reactions: jmpage2
I am not picking sides here but...

Apple does have the power, considering all updates must be signed by their servers, to tailor build a software for said specific hardware and then destroy all traces of that software once it has been used to extract the data from the phone(s) in question.

We keep talking about a back door built into all installations of iOS, and that simply doesn't have to be the case. Apple has the ultimate power due to the very nature of how iOS installs work, and frankly have worked, from the very beginning.

Again, I am absolutely not picking sides. I am not saying that because they can do it they should have to do it. But there absolutely is a safe way to do this. Or at least a safer way than is really being discussed by the majority of folks. I haven't even discussed the precedent this sets, but I feel that has been pretty accurately portrayed both in news posts and in subsequent discussions.
The precedent. You are not considering the effect of setting such a precedent. ANY government agency, from ANY government, will ask the same. Sooner or lather our security will be breached.
 
  • Like
Reactions: JamesPDX
This guy gets it. The average voter has no idea about politics either even though they like to think they have.
[doublepost=1457671390][/doublepost]
Yep. In short, we are all dishonest. If you seriously think that corporations are any less bent than the governement then I’d say you are extremely short sighted.
Lots of people here say Cook would make a great president, er……..sorry he’s spent years evading taxes. He’s done what the government do.
He’s found a loophole. We pay every dollar we owe, NO. We don't just comply with the law, we comply with the spirit of the law. NO, NO, NO! He funnels all his money through Ireland because it’s not illegal, the ironic thing is there aren’t even any Apple stores there.
The government found one too, when they want to waterboard somebody they take them to another country where it’s not illegal.

When it suits you because that guy being water boarded has an orange jumpsuit and a slightly arab sounding name or appearance it’s Ok is it?

The FBI are correct in one thing, (that they are also guilty of), and the press coverage has made it worse. Apple have devalued the discussion with excessive hyperbole. You all know that’s true.
If you’re familiar with their Keynotes or interviews you KNOW that hyperbole on maximum attack is the Apple SOP.

A lot of people from both sides need to weigh in here to balance the discussion. Ultimately the decision they come to will not please everybody but at least we may get to a compromise and make sure we have explored every avenue.
Such an ignorant comment....
I don't like Irish government, at all. They are playing a dirty game here in Europe.
But Apple isn't evading any taxes. They are paying accordingly with the agreement with Irish government.
That kind of agreement shouldn't exist since the beginning, so blame Ireland for that....
But don't say TIM COOK IS EVADING TAXES because that's plain false.
 
  • Like
Reactions: eac25 and spinnyd
It already has more.

What bothers many is how many people prefer corporations governing we the people, instead of we the people. The anti-government folk have yet to put out anything that makes having big business do governing being a superior choice.

I absolutely do not condone Apple being able to compel the FBI to unlock FBIphones either. Happy now?

In rarefied cases as proven by deliberation to ask and receive a court order... people are blowing things so grossly out of proportion that it is beyond belief.

How much consideration was given to the technical effects of carrying out this order before the order was granted? The FBI went to a judge with a request, and the judge immediately granted that request. The judge didn't even ask Apple for its analysis on the request when it was granted!

To claim that the government is the right place for this capability to be, you have to somehow reconcile the reckless, political, and fear-mongering behavior of the FBI in this one case, and the fact that the judge fell for it hook line and sinker, with your faith that the need to obtain a warrant is protection enough.

The only arguments that Apple legally has are that they are being compelled to do something which is out of bounds of the law and precedent. If they do it this time, that argument completely and permanently goes away. Without that argument, the judge's initial order here stands, so by extension the next ten thousand times this request is made by a federal authority with enough vociferous fear mongering that a judge falls for it, Apple needs to comply and has no grounds to ask that the order be vacated.

To me, the facts of this case and the process it has followed have completely destroyed my faith that the need for a warrant is anything more than a pro forma fig leaf of protection of privacy and constitutional rights. I don't see how someone could look at this and still remain convinced that the system here is "working".
 
The precedent. You are not considering the effect of setting such a precedent. ANY government agency, from ANY government, will ask the same. Sooner or lather our security will be breached.
I wanted to keep precedent out of the discussion becasue I felt that has been discussed rather accurately in the multitude of discussions on the subject. In fact, I think precedent is about the only thing the community (here on MR) has gotten right. People largely still seem to be calling this some sort of back door to be built into all iPhones, and that really isn't the case.

I don;t disagree about your statements on precedent at all. But if this does go through, that doesn't mean all of our phones are going to have some new and innate vulnerability that wasn't there before. A lot of people seem to think that's how it has to work. I can look back on the last half dozen respones to this thread and note this erroneous thought process. I will add that Apple has a lot to do with that too.
[doublepost=1457676853][/doublepost]
Such an ignorant comment....
I don't like Irish government, at all. They are playing a dirty game here in Europe.
But Apple isn't evading any taxes. They are paying accordingly with the agreement with Irish government.
That kind of agreement shouldn't exist since the beginning, so blame Ireland for that....
But don't say TIM COOK IS EVADING TAXES because that's plain false.
In the US we use "tax evasion", probably erroneously, but politicians do ti too, so it has sort of stuck. Ireland is a tax haven that Apple (and other companies) take advantage of, among others. The entire idea behind a tax haven is keeping money (assets) where you pay the least to own them. It is completely legal but, depending on who you ask, considered a loophole that needs closing (and we can get into an incredibly large politcal discussion on how to close that and why and how it would or wouldn't work).

Anyway, the terminology used is probably technically wrong, but has been used incorrectly so much here, that it really doesn't mean what it is supposed to mean anymore. Evading taxes implies you;ve done something illegal. Apple hasn't (at least not to our knowledge or in the context we are talking about).
 
  • Like
Reactions: tgara and Max(IT)
It's been half-gone for years, but we'll find out what's left in early November. In the meantime, why aren't the feds just getting data from PRISM? https://en.wikipedia.org/wiki/File:Prism-slide-7.jpg
Is there no longer inter-departmental cooperation? Maybe they should work on getting a key to Room 641A instead.
https://en.wikipedia.org/wiki/Room_641A
Prism? Why not the aliens caged in the Area 51? They should have the same probability to have the same data....
 
Such an ignorant comment....
I don't like Irish government, at all. They are playing a dirty game here in Europe.
But Apple isn't evading any taxes. They are paying accordingly with the agreement with Irish government.
That kind of agreement shouldn't exist since the beginning, so blame Ireland for that....
But don't say TIM COOK IS EVADING TAXES because that's plain false.

So read the post again. Properly. Now read it again. Properly. Where did I say he was evading taxes?
Oh and BY THE WAY, ignorance of the law is no defence. If Apple have cooked up an illegal agreement they are guilty. The agreememt pretty sure is illegal and this is what the EU are saying.
If the Irish government are playing a dirty game surely you can see that they have to have players on the other team? That other team is Apple. They are entering into an agreement that sees billions of dollars being ‘cleaned', Apple should/could have said to the EU - This is what we are proposing to do, is it Ok?
If all was above board then Apple and the irish would be fine.

Complying with the spirit of the law means not funnelling billions through a small company in which you don’t even have any bloody stores. Please tell me you can see that.

A parallel that you may or not agree with;
  • I drive down a road and go over the posted limit of 60mph - I get done for excess speed. That’s the letter of the law.
  • I drive down a road and stay under the posted limit of 60mph - I still get done for excess speed but it was due to road conditions. That’s the spirit of the law.
ie. you know what you are supposed to be doing. Tim knows what he is supposed to be doing. As the CEO of a large multi billion dollar company though understandably he chooses to take action that nets him more money and at the same time purports this image of moral crusader.
Please don’t suggest that he doesn’t know what he should be doing.
[doublepost=1457677509][/doublepost]
In the US we use "tax evasion", probably erroneously, but politicians do ti too, so it has sort of stuck. Ireland is a tax haven that Apple (and other companies) take advantage of, among others. The entire idea behind a tax haven is keeping money (assets) where you pay the least to own them. It is completely legal but, depending on who you ask, considered a loophole that needs closing (and we can get into an incredibly large politcal discussion on how to close that and why and how it would or wouldn't work).

Anyway, the terminology used is probably technically wrong, but has been used incorrectly so much here, that it really doesn't mean what it is supposed to mean anymore. Evading taxes implies you;ve done something illegal. Apple hasn't (at least not to our knowledge or in the context we are talking about).
In the UK we have a distinction.
Tax Evasion means you’ve done something most definitely illegal.
Tax avoidance means you’ve done something at worst underhanded possibly but still legal.
 
Last edited:
  • Like
Reactions: Benjamin Frost
In the UK we have a distinction.
Evading taxes means you’ve done something illegal.
Avoiding taxes implies you’ve done something at worst underhanded possibly but still legal.
Oh there's a distinction here too. I'm just saying colloquialism has taking this over, somewhat. Saying someone is evading taxes, outside of some form of legal document, doesn't necessarily imply laws were broken.
 
Oh there's a distinction here too. I'm just saying colloquialism has taking this over, somewhat. Saying someone is evading taxes, outside of some form of legal document, doesn't necessarily imply laws were broken.
Maybe I’m being a bit pedantic then but TC et al are for sure avoiding taxes. Depending on the outcome of this Europe thing thay may also have even been evading tazes.


EDIT : Sorry, evading taxes, not tazes. I wouldn’t blame him for avoiding tazes.
 
  • Like
Reactions: JamesPDX
Unfortunately, both sides in this TV discussion used totally wrong arguments. The side _for_ the hacking basically had the argument "let's do it". Yes, that's their argument. Nothing else. The side _against_ the hacking said that it would be illegal. It isn't. There is a search warrant, and the owner of the phone is not the killer but the San Bernardion county, where he was an employee, so hacking into this phone is legal. If the FBI asked Apple to hack into my phone without my permission and without a search warrant, then it would be illegal for Apple to do so, but not here.

No one is asserting that the terrorist's rights are being violated here. The argument is that the justification for the order - the All Writs Act - does not apply here because (1) Apple is too far removed from the crime and the phone for the act to apply, (2) the work being required of Apple is more significant than that required of any previous assertion of the AWA authority, and significantly so, (3) requiring this work violate's Apple's first amendment rights by forcing speech (SCOTUS has previously ruled that computer code is 'speech' and that compelling speech is a violation of the first amendment), (4) forcing Apple to do this would violate Apple's fifth amendment rights to avoid being deprived of property without due process of law, (5) does not apply to this case because Congress considered the legal area and did not write a law to allow what the FBI is asking today in CALEA as well as the never-emerged-from-committee CALEA II, and (6) can not be done to the specs the FBI has specified because the precedent being set would require Apple to devote the same unprecedented resources for each of the remaining tens of thousands of phones in custody and awaiting unlocking.

Apple's real argument (one that for example the NSA fully agrees with) is that anything created to hack into this phone can get out and endanger the security of millions of iPhone users, which incidentaly includes politicians, FBI agents, military and so on. That's the reason why the FBI shouldn't even ask Apple, because it breaks everyone's security.

That is an argument that Apple has also advanced, although it doesn't necessarily apply directly to the law in question. The applicability of the AWA law is really Apple's trump card in the court; the other arguments are interesting and might sway judgement in a near-wash scenario, but primarily are being advanced for public consumption and as prelude to the inevitable Congressional fight once the court agrees with Apple's cast of the AWA's authority in this specific case.
 
Maybe I’m being a bit pedantic then but TC et al are for sure avoiding taxes. Depending on the outcome of this Europe thing thay may also have even been evading tazes.


EDIT : Sorry, evading taxes, not tazes. I wouldn’t blame him for avoiding tazes.
Maybe they are. I don't know for a fact. I was just providing some insure on how the phrase may be used as I know we aren't all native English speakers. And even those that are can find that the phrase may be used differently depending on what part of the world it's coming from.

I don't know enough about the Irish situation or law to give a very valid opinion. I do know there are absolutely valid and legal tax havens that we Americans refer to as tax evasion despite that not being a truly correct term or phrase.

If you follow any of the current (sometimes scary sometimes funny) presidential primary campaigning and debates you will probably hear this very phrase used in the context I am describing once or twice in any given day. At least from a certain candidate who I'll leave unnamed as to not start going (further) off topic.
 
Maybe they are. I don't know for a fact. I was just providing some insure on how the phrase may be used as I know we aren't all native English speakers. And even those that are can find that the phrase may be used differently depending on what part of the world it's coming from.

I don't know enough about the Irish situation or law to give a very valid opinion. I do know there are absolutely valid and legal tax havens that we Americans refer to as tax evasion despite that not being a truly correct term or phrase.

If you follow any of the current (sometimes scary sometimes funny) presidential primary campaigning and debates you will probably hear this very phrase used in the context I am describing once or twice in any given day. At least from a certain candidate who I'll leave unnamed as to not start going (further) off topic.
Yeah I gotcha. We’re all human, that’s the rpoblem.
Know what’s funny, there are lots of people that move from business into politics. Whilst in business they moan about red tape and how the system and laws are outdated. When they get into government they suddenly go quiet on the subject.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.