fbiOS

Ethical Hacking Society edition.

Transcript

1. fbiOS Mikey @MikeyJck Abertay Ethical Hacking Society
2. Not a lawyer or cryptographer. Sorry if I rant.
3. San Bernardino • 14 Killed, 22 Seriously injured • Syed (Rizwan) Farook (28) & Tashfeen Malik (29) • “inspired by foreign terrorist organizations” - FBI • more of a going postal than ISIS • Amateur hour attack…
4. SUBJECT DEVICE • Syed Farook’s iPhone 5c running iOS 9 • Supplied by employer, San Bernardino County Department of Public Health • Auto Erase after 10 failed passcode attempts enabled • Stopped backing up to iCloud 6 weeks prior • FBI locked themselves out with iCloud p/w reset • Farook & Malik destroyed their personal devices wired.com/wp-content/uploads/2016/02/SB-shooter-MOTION-seeking-asst- iPhone.pdf
5. All Writs Act • “allows a court to require third parties’ assistance to execute a prior order of the court” • Can’t override existing statue • “unreasonable burdens may not be imposed” • U.S v. New York Telephone Co. 1977 • Freedom of speech motherfucker https://www.eff.org/deeplinks/2015/10/judge-doj-not-all-writs
6. — Feb 2016: Judge Orenstein “The implications of the government’s position are so far-reaching — both in terms of what it would allow today and what it implies about congressional intent in 1789 — as to produce impermissibly absurd results.” https://assets.documentcloud.org/documents/2728372/Orenstein-Order.pdf
7. — Feb 2016: Judge Orenstein “Fuck off #” https://assets.documentcloud.org/documents/2728372/Orenstein-Order.pdf
8. Court Order https://assets.documentcloud.org/documents/2714001/SB-Shooter-Order- Compelling-Apple-Asst-iPhone.pdf
9. Is it possible? Yes.
10. Secure Enclave • “The Secure Enclave is a coprocessor fabricated in the Apple A7 or later A-series processor. It utilizes its own secure boot and personalized software update separate from the application processor.” • iPhone 5S & newer (Sept 2013)
11. Is it possible? Yes.
12. Apple Response • Fuck You # • “something we consider too dangerous to create.” https://assets.documentcloud.org/documents/2722203/Motion-to-Vacate-Brief-and-Supporting-Declarations.pdf
13. Case Precedent • Auto update • Not Never just about one phone • OPSEC bitches
18. Questions? @MikeyJck me@mikeyjck.io Slack Tor Messenger?