I have read a couple articles on this, if true than Apple won’t be able to hack 
a phone…which takes a rogue “authority" out of the loop BUT it also means we 
CAN’T forget our security info. or we will cook our goose…they are implementing 
this for the iCloud backup as well.

John







Apple developing iPhone and iCloud encryption that counters FBI-requested 
workaround, reports say

Amid government pressure on Apple to build an iOS encryption workaround, the 
company is said to be developing stronger iPhone and iCloud safeguards that 
would render obsolete any exploit it might be compelled to create.




Source: ABC News


A pair of reports on Friday cite unnamed sources as saying Apple is in the 
process of designing next-generation encryption technology that would nullify 
government-requested decryption methods at the heart of a court case against 
involving the FBI.

It is unclear what, exactly, is being developed to thwart future incursions, 
but The New York Times reports Apple is working to negate 
<http://www.nytimes.com/2016/02/25/technology/apple-is-said-to-be-working-on-an-iphone-even-it-cant-hack.html>
 a workaround requested by the FBI in its investigation of an iPhone used by 
San Bernardino shooter Syed Rizwan Farook. Law enforcement officials are asking 
Apple to design and install a custom operating system on Farook's iPhone 5c 
designed to bypass iOS' passcode counter, leaving the device open to a 
brute-force attack. 

A separate report from the Financial Times claims the company is also looking 
to shore up 
<http://www.ft.com/intl/cms/s/0/cd295840-db6c-11e5-98fd-06d75973fe09.html#axzz419Tas5q0>
 its cloud service security, a task potentially more complex than devising 
viable on-device encryption. According to sources, Apple plans to restrict 
access to iCloud passkeys in much the same manner as the on-device encryption 
method introduced with iOS 8. 

In the case of Farook's iPhone, for example, Apple suggested law enforcement 
agents attempt an automated iCloud backup by connecting the device to a known 
Wi-Fi network. Unfortunately, the FBI changed the Apple ID password Farook used 
to sync up the device, but if it hadn't — and Farook left automated iCloud 
backups enabled — Apple could have downloaded the resulting backup file from 
its servers. Apple's planned security upgrade addresses such vulnerabilities. 

Without an iCloud account's encryption key, the company is technically unable 
to access backup data, meaning it is also incapable of handing over said data 
to authorities. Implementing such unforgiving security runs the risk of 
creating zombie iCloud accounts, however, as customers who forget their 
passcode likely can't ask Apple for a reset.

For Apple, a company embroiled in a high-stakes fight it claims has 
implications far beyond iPhone, the extra assurance might be worth the 
frustration.

When Apple CEO Tim Cook spoke with ABC News anchor David Muir on Wednesday, he 
likened 
<http://appleinsider.com/articles/16/02/24/tim-cook-fbi-is-asking-apple-to-create-software-equivalent-of-cancer>
 the FBI's requested workaround to the "software equivalent of cancer." What 
Cook didn't mention is that Apple is developing a cure for that cancer, one 
that would effectively knock the FBI back to square one even if the agency 
manages to compel a workaround for Farook's phone. 

That Apple is working on a contingency plan for its upcoming legal battle is 
unsurprising — iOS has for years been touted as incredibly secure. Apple's 
focus on data privacy is commensurate with iPhone's proliferation, a smartphone 
now in the hands of hundreds of millions of customers worldwide. End-to-end 
encryption was introduced with iOS 8, while the latest Apple gadgets feature 
biometric Touch ID protection and built-in secure data enclaves. 

"Our job is to protect our customers, and our customers have incredibly 
detailed information on their phones. There's probably more information about 
you on your phone than there is in your house," Cook said in Friday's ABC 
interview, noting many people keep contact information, health records, private 
communications and more on their smartphones. "So it's not just about privacy, 
but it's also about public safety."

_______________________________________________
MacGroup mailing list
Posting address: [email protected]
Archive: <http://www.mail-archive.com/[email protected]/>
Answers to questions: <http://erdos.math.louisville.edu/macgroup/>

Reply via email to