An imperfect ten

by | Feb 19, 2016 | 2 comments

BURIED DEEP within the (Touch ID &) Passcode settings on our iPhones is a toggle switch that reads simply: “Erase Data.” Below this switch, a small block of help text adds the following explanation: “Erase all data on this iPhone after 10 failed passcode attempts.”

This tiny toggle, and those ten attempts, are at the heart of the current dispute between Apple and the FBI as regards a particular iPhone 5c used by one of the attackers in the recent San Bernardino shootings.

There are already a lot of words being bandied to and fro regarding this matter, and numerous notables have already taken sides (see Donald Trump’s; see the EFF’s). My purpose here is not to state my own position and the arguments appertaining thereto; rather, I’d prefer to assist in the general understanding of what it is precisely that the FBI wants, and what Apple does not.

BECAUSE THE iPhone in question may have been set to erase all its data after 10 failed password attempts, FBI investigators are unwilling to attempt their ten best guesses at the login and thereby lose any information that may yet be on the phone, as there is no way to know whether the “Erase Data” switch was enabled or not.

Apple chose to protect a dead ISIS terrorist’s p‎rivacy over the security of the American people. It’s unfortunate that the great company Apple is becoming the company of choice for terrorists, drug dealers, and sexual predators of all sorts.

Senator Tom Cotton, R-AR

Of course, the agents could simply break open the iPhone and remove its hard drive, but the data on that drive is encrypted in such a way that no one at Apple—or anywhere else—could unscramble it. And once the iPhone wipes the data after 10 unsuccessful password attempts, that information is also beyond recovery by mere mortals.

Therefore, the FBI’s legal team is employing a relatively obscure 1789 statute known as the All Writs Act to compel Apple to engineer a “back door” which can override this protection setting, and allow the data erasure to be prevented. By doing so, law enforcement IT personnel can then employ a computer program to enter tens of thousands of passwords into the phone in rapid succession until it’s unlocked.

IF THE PASSCODE were set to four digits, which allows for a meagre 10,000 possible combinations, the phone could be accessed in a matter of minutes. If there are six or more digits used, it would take the computer program a tad longer, but not much.

The FBI’s position on all this is that they are making this request for only this particular phone in this particular instance, and that no changes to Apple’s hardware or software are needed. In essence, they are asking Apple to build a tool for them that would allow them to circumvent the Erase Data option on this particular passcode-locked iPhone 5c running iOS 7, and nothing more.

Apple, for their part, is reluctant to willingly construct a back door that would allow any of their devices to be broken into. To that end, Tim Cook has penned a rather eloquent missive to the public at large, in which he states Apple’s position and the reasons for said position, with a particular emphasis on why he feels this carries the potential to do more harm than good.

YOU CAN—and should—read the letter here.

One of the great challenges with which all this amazing new technology confronts us is how to strike that delicate balance between personal privacy and the safety of our own data, versus the need to monitor threats and prevent terrorist attacks before they happen, as well as to access information after the fact that may reveal motives, accessories etc.

This will not be the last horrific event whose possible resolution could be on a smart phone. There will be many government agencies that many times in the future, point to Apple’s compliance as a precedent. Once this happens, we all roll down that slippery slope of lost privacy together.

Mark Cuban, Owner, Dallas Mavericks

However you may feel about it, this goes far beyond a legal dispute between Apple and the FBI; the eventual resolution of this battle will impact not only technology in general but our government and society as well.

SHOULD ANY of you feel the urge to share your feelings about this issue, from any perspective whatsoever, you are most welcome to share them here. There is no “wrong” answer to this, nor are there any “wrong” positions that can be taken. There is already, however, more than enough knee-jerk reaction flying about, so I’m just trying my best here to keep that to a minimum.

Thanks for listening.

2 Comments

  1. Carolyn

    I’m not torn at all. Why should the data on my phone be any more or less protected than my banking records, lists of contacts or people I call, the property in my house or the words I write in a diary? Law enforcement has the right to access all of that given “just cause” and only with the tool of a “warrant” which must be issued by a judiciary. That is the process by which our privacy is protected. Our phones are extensions of our physical and intellectual property but why should that particular data be more sacrosanct? If there is data on my phone that law enforcement believes could help protect the public, or prevent harm to others in a future event or help catch a criminal, I would hand my phone over easily. I would consider it my public duty. I am part of the public that wants to be protected too, and there is an increasing number of awful individuals who want and can do harm to law abiding citizens. Is privacy a right, or is it a luxury we’ve been afforded so long that we assume it is a right? Balance is not static; sometimes it needs to swing.

    Reply
  2. Jay

    Very thoughtful as usual. I have to say that I’m torn between the “small picture/big picture” attributes of the story. Small picture, take the phone into a room at Apple with an FBI agent present, unlock the phone without telling the agent how you’re doing it, get the bad guys. One phone, that’s it.

    Big picture, the FBI agent in my neighborhood decides I look suspicious, tells his boss, they want to look at my phone, I say no, they can’t figure out that my password is 1234, they say to Apple “you did it once, so do it again- lives are at stake!” Apple complies because of the precedent and finds pictures of my stupid cat and great kids and nothing else. Mark Cuban’s right, you can’t put the toothpaste back in the tube. Same deal with banning people from entering the country because of their religion or race. Once you do one, you can do them all.

    Longer than I thought, sorry.

    Reply

Leave a Reply to Carolyn Cancel reply

Your email address will not be published. Required fields are marked *