Apple developing iPhone and iCloud encryption that counters FBI-requested workaround, reports say
Amid government pressure on Apple to build an iOS encryption workaround, the company is said to be developing stronger iPhone and iCloud safeguards that would render obsolete any exploit it might be compelled to create.
Source: ABC News
A pair of reports on Friday cite unnamed sources as saying Apple is in the process of designing next-generation encryption technology that would nullify government-requested decryption methods at the heart of a court case against involving the FBI.
It is unclear what, exactly, is being developed to thwart future incursions, but The New York Times reports Apple is working to negate a workaround requested by the FBI in its investigation of an iPhone used by San Bernardino shooter Syed Rizwan Farook. Law enforcement officials are asking Apple to design and install a custom operating system on Farook's iPhone 5c designed to bypass iOS' passcode counter, leaving the device open to a brute-force attack.
A separate report from the Financial Times claims the company is also looking to shore up its cloud service security, a task potentially more complex than devising viable on-device encryption. According to sources, Apple plans to restrict access to iCloud passkeys in much the same manner as the on-device encryption method introduced with iOS 8.
In the case of Farook's iPhone, for example, Apple suggested law enforcement agents attempt an automated iCloud backup by connecting the device to a known Wi-Fi network. Unfortunately, the FBI changed the Apple ID password Farook used to sync up the device, but if it hadn't -- and Farook left automated iCloud backups enabled -- Apple could have downloaded the resulting backup file from its servers. Apple's planned security upgrade addresses such vulnerabilities.
Without an iCloud account's encryption key, the company is technically unable to access backup data, meaning it is also incapable of handing over said data to authorities. Implementing such unforgiving security runs the risk of creating zombie iCloud accounts, however, as customers who forget their passcode likely can't ask Apple for a reset.
For Apple, a company embroiled in a high-stakes fight it claims has implications far beyond iPhone, the extra assurance might be worth the frustration.
When Apple CEO Tim Cook spoke with ABC News anchor David Muir on Wednesday, he likened the FBI's requested workaround to the "software equivalent of cancer." What Cook didn't mention is that Apple is developing a cure for that cancer, one that would effectively knock the FBI back to square one even if the agency manages to compel a workaround for Farook's phone.
That Apple is working on a contingency plan for its upcoming legal battle is unsurprising -- iOS has for years been touted as incredibly secure. Apple's focus on data privacy is commensurate with iPhone's proliferation, a smartphone now in the hands of hundreds of millions of customers worldwide. End-to-end encryption was introduced with iOS 8, while the latest Apple gadgets feature biometric Touch ID protection and built-in secure data enclaves.
"Our job is to protect our customers, and our customers have incredibly detailed information on their phones. There's probably more information about you on your phone than there is in your house," Cook said in Friday's ABC interview, noting many people keep contact information, health records, private communications and more on their smartphones. "So it's not just about privacy, but it's also about public safety."
Source: ABC News
A pair of reports on Friday cite unnamed sources as saying Apple is in the process of designing next-generation encryption technology that would nullify government-requested decryption methods at the heart of a court case against involving the FBI.
It is unclear what, exactly, is being developed to thwart future incursions, but The New York Times reports Apple is working to negate a workaround requested by the FBI in its investigation of an iPhone used by San Bernardino shooter Syed Rizwan Farook. Law enforcement officials are asking Apple to design and install a custom operating system on Farook's iPhone 5c designed to bypass iOS' passcode counter, leaving the device open to a brute-force attack.
A separate report from the Financial Times claims the company is also looking to shore up its cloud service security, a task potentially more complex than devising viable on-device encryption. According to sources, Apple plans to restrict access to iCloud passkeys in much the same manner as the on-device encryption method introduced with iOS 8.
In the case of Farook's iPhone, for example, Apple suggested law enforcement agents attempt an automated iCloud backup by connecting the device to a known Wi-Fi network. Unfortunately, the FBI changed the Apple ID password Farook used to sync up the device, but if it hadn't -- and Farook left automated iCloud backups enabled -- Apple could have downloaded the resulting backup file from its servers. Apple's planned security upgrade addresses such vulnerabilities.
Without an iCloud account's encryption key, the company is technically unable to access backup data, meaning it is also incapable of handing over said data to authorities. Implementing such unforgiving security runs the risk of creating zombie iCloud accounts, however, as customers who forget their passcode likely can't ask Apple for a reset.
For Apple, a company embroiled in a high-stakes fight it claims has implications far beyond iPhone, the extra assurance might be worth the frustration.
When Apple CEO Tim Cook spoke with ABC News anchor David Muir on Wednesday, he likened the FBI's requested workaround to the "software equivalent of cancer." What Cook didn't mention is that Apple is developing a cure for that cancer, one that would effectively knock the FBI back to square one even if the agency manages to compel a workaround for Farook's phone.
That Apple is working on a contingency plan for its upcoming legal battle is unsurprising -- iOS has for years been touted as incredibly secure. Apple's focus on data privacy is commensurate with iPhone's proliferation, a smartphone now in the hands of hundreds of millions of customers worldwide. End-to-end encryption was introduced with iOS 8, while the latest Apple gadgets feature biometric Touch ID protection and built-in secure data enclaves.
"Our job is to protect our customers, and our customers have incredibly detailed information on their phones. There's probably more information about you on your phone than there is in your house," Cook said in Friday's ABC interview, noting many people keep contact information, health records, private communications and more on their smartphones. "So it's not just about privacy, but it's also about public safety."
Comments
Yeah even terrorists that kill people in a mental hospital, great idea.
If you are going to put your whole life in your cellphone then your are asking for trouble. I don't think Apple or any other Tech company should be the guarantor of privacy. That should be my choice on how i want to do that. Nor do I want the FBI running roughshod over the country either.
I have to wonder why this wasn't worked out behind closed doors. A mass murder was committed let's not forget. Both sides by exploiting this are now potentially putting people at risk.
If the govt is so worried about terrorists, then here's a novel idea, secure the damn borders and don't just let any old riffraff into the country. Send all terrorist sympathizers to Guantanamo. And most important of all, quit being so damn PC, a most despicable and cowardly behavioral trait which infects a certain percentage of the population and ends up being extremely benefical to all terrorists. Yeah, I know, what a crazy and outrageous idea.
It seems like detective work has increasingly been getting easier and easier, because of the digital and internet age. How did people like Sherlock Holmes ever get any crimes solved before? This is the same govt that would like nothing better than to disarm American citizens, so that they wouldn't even stand a chance at defending themselves, should they find themselves under attack by terrorists.
Those who are fearful of a gunless society, just look at chrime and homicide rates in developed countries with strict gun regulation. USA have 10 times more gun related homicides per capita than Germany...Why? Because of an almighty weapons industry with a huge economical incentive to continue the ongoing civil war...
https://en.wikipedia.org/wiki/List_of_countries_by_firearm-related_death_rate
Seriously, we cannot continue to pretend that we live in the wild west and allow underaged gunslingers to roam the streets... Let's evolve as a species like the rest of the world.