Hacker News new | ask | show | jobs
by andersh 5204 days ago
Google can give you a new password if you forget yours. There is no technical barrier to giving the FBI access and clearly no requirement for plaintext passwords anywhere (setting aside how the request was expressed in the article as a request for a password).
3 comments

That's assuming the device is associated with a Google account. It's not a requirement and losing the unlocking password/gesture may leave the phone completely unusable (except for 911 calls). Sadly, I speak from personal experience. I do not believe Google has a way of remotely associating a locked phone with a Google account to regain access.
You sure? I can't use my Android phone (Gingerbread) without a damn Google account - I have to use a throwaway one just to be able to use my smartphone...
They can even generate an application-specific password for the FBI, to be revoked after the time limit specified in the warrant is reached. (No idea if this is done or not, but in theory, there is no need to know the password in order to disclose one to the FBI. All they want to do is unlock the phone, but are too dumb to connect a USB cable and run adb.)
If the phone has a locked bootloader and USB debugging isn't turned on, which is most likely the case, then they can't do what you are suggesting.
OK. Open the mofo up and remove the flash chips. It's the government, they have the technology :)
> but are too dumb to connect a USB cable and run adb.

Or that would break the rules regarding forensic data retrieval, and make the information gleaned in that fashion inadmissible as evidence.

Physically unlocking the phone breaks the rules regarding forensic data retrieval as well, since the state of the phone has now been altered, how is the court to know that the FBI didn't plant the details.

This is why backup images are made first, which is not possible with phones when they are locked... the backup images are operated on when doing digital forensics, so that the result can be reproducible by a third party.

How does this violate the rules? He's already signed a waiver to his 4th amendment rights, so no court order is needed - he's essentially given them full control over his own property, including his phone (which I presume would include accessing the data via adb instead of the phone screen).
Because then the phone is no longer in the original state as when the defendant turned it over, and the FBI cannot prove it did not alter the contents of the phone (as images cannot be made while the phone is locked).
Even with the lock, how can they prove that? If they're able to get information off of it, they're able to modify it....
My initial thought was the same as the GP's then I read your statement. Then I thought about it for a moment.

I wonder. This is a subpoena, right? If so, it's not an order for Google to alter anything, just to give the FBI certain information that they have. It may very well be that Google cannot comply with the specific order as granted, but without the text of the order I can't be sure.

There is a difference between "Give us this user's password" and "Reset this user's password and provide the credentials to us."