Hacker News new | ask | show | jobs
by vitd 3707 days ago
That's a lot of double-speak. They know that removing the timeout so they can try thousands of passwords per second opens up a huge security hole. What he's saying is "we want it both ways". We don't want to take away security for users, we just want to make it easier for someone who's not the owner of the phone to get into it.
1 comments

The government owned the iPhone in question.
If the government org in question had followed iOS deployment best-practices, they would have already had sanctioned access to this phone.
Which is a bigger flag for mismanagement. If the phone had had device management software as most major companies provision, no hack would have been necessary.
But it didn't own the software, which is still patented and copyrighted by Apple, and merely licensed to end users.
So an EULA just protected people?
"The government" is not one organization.
That doesn't seem relevant unless there's a dispute over ownership, which there isn't.
Well reset it, and start downloading pictures of cats, what's the problem?
In what sense of ownership?
Public funds purchased the phone. I'm not sure what you mean?
"public funds" is not a single shared bucket of loot that everyone puts into. In this case it was a county owned device.

County governments are typically recognized incorporated organizations that have no real line of authority or connection with the federal government.

So no, the FBI or federal doesn't have some ownership claim that makes it ok to break into. As others point out they have basically seized the device from its owner in the course of investigation.

Unless the county was forced to hand it over, this is not relevant.
can you explain the comment on relevance a bit more? You said it twice but I'm not seeing your point.

Regarding the Director's double speak I think it is relevant. The FBI or federal government is still not the owner. Regardless of whether the device was seized or surrendered the property is still owned by the county.

> What he's saying is "we want it both ways". We don't want to take away security for users, we just want to make it easier for someone who's not the owner of the phone to get into it.

The phone is evidence in a police investigation, they didn't buy it, while its owners are dead surely it belongs to their hiers? or does that whole rule of law thing mean nothing
The phone was a work phone issued by the San Bernardino Health Department, so no - the heirs of the killers didn't assume ownership of the phone. It was always the property of the San Bernardino Health Department.