Apple has reopened a privacy battle with the FBI after refusing to unlock the iPhones of the Saudi pilot who opened fire at Naval Air Station Pensacola Buzz60
NEW YORK Inside a steel-encased vault in lower Manhattan, investigators bombard an Apple iPhone 7 with ajumble of numerical codes generated by nearby computers.
The grinding exercise has continued for the past 21 months with a singular aim: Crack the phone's passcode, so police can extract potentialevidence in an aging attempted murder investigation.
Despite the formidable resources ofa $10 million cyberlaboperated by the Manhattan District Attorneys Office including costly assistance provided by privatesleuths the phone has won.
Last month, Attorney General William Barr revived the titanic struggle betweenlaw enforcement and Big Techwhen he disclosedthat the FBI couldn'tunlock two iPhones used by a Saudi officer who opened fireat a Navy base in Florida in December.
The breadth of the ground war wagedagainst encrypted phones, tablets and other devices seized in criminal inquiries is perhaps best appreciated withinthe securedoors of this Manhattanlaboratory.
Steven Moran, director of the High Technology Analysis Unit at the Manhattan District Attorneys Office, describes how investigators try to crack encrypted smartphones in a special steel-encased vault. It was built to block outside radio frequencies, preventing suspects from remotely erasing their devices.(Photo: Kevin Johnson, USA TODAY)
More than 8,000 devices have poured into the facility since 2014.Each year, more of them are locked, rising from 24% in 2014 to 64%last year. For Apple devices, it's gone from 60% to 82%.
Nearly 2,500 of the locked devices remain inaccessible to investigators, hindering investigations into child exploitation, financial fraud, theft, violence and other crimes.
The numbers illustrate afrustration shared by law enforcement agencies across the country.
"I don't think there is an awareness of the scope of the problem," Manhattan District Attorney Cyrus Vance said.
Duffie Stone, president of the National District Attorneys Association, describedthe challenge as a technological tidal wave overwhelming agencies across the country, particularly smaller oneswithout Manhattan's considerable resources.
It's been difficult to measurehow much of a problem locked devices are for law enforcement. There is no national data repository tracking how often investigators areblockedby phones "going dark," as they say.
In 2018, the FBI estimated federal authorities recovered nearly 8,000 locked phones for analysis,butthe bureau acknowledged that figure was overstated.The FBI has not publicly updated the data since, leaving Vance as law enforcements most vocal authority in the struggle between law enforcement and privacy interests.
Tech giant Apple is law enforcement's favorite target because of its commercial popularity and its efforts to bolster user privacy.In the past six years, law enforcement officials said, Apple and other companies have made their devices virtually warrant-proofby enabling encryption by default and moving fromfour-digit passcodes to six.
Law enforcement vs. consumer privacy: Should Apple help DOJ unlock terrorist's iPhones?
"We have always maintained there is no such thing as a backdoor just for the good guys," Apple said in a statement last month, responding to Barr's claims that the company had not helped unlock the two iPhones recovered from the Pensacola shooter.
"Today, law enforcement has access to more data than ever before in history, so Americans do not have to choose between weakening encryption and solving investigations," Apple said. "We feel stronglyencryption is vital to protecting our country and our users' data."
"We might need more shelving," says Steven Moran, director of the High Technology Analysis Unit. Inside the unit's vault, computers bombard seized smartphones with codes to crack encryptions and enable investigators to access their data.(Photo: Kevin Johnson, USA TODAY)
It looks like a bomb shelter. In a sense, it is.
Just off the main corridor of the Manhattan cyberlaboratory, protected by a heavy steel door, is a small chamber where some of the lab's most consequential work is carried out in isolation.
About 100 locked cellphones,seized in various criminal investigations, arestacked neatly on two shelves. Nearby,computerssilently batter the devices with spurts of numerals as they attempt toguess thepasscodes.
Only when the lights are offis the workvisible, in flashes of blinking lights.
Success can come in minutes, hours, days ormonths. Or not at all.
Of the 1,035 devices that were locked on arrival at the lab last year, 405 remain inaccessible, according to lab records. The year before, 666 of the 1,047 locked phones could not be opened.
New batches of phones are moved into the chamber like unbaked cookies. Others are moved out before they're done.
"We might need more shelving," said Steven Moran, director of the High Technology Analysis Unit.
The room's heavy drape of security, Moran said, is not for show. It was built to block outside radio frequencies, preventingsuspects from remotely erasing their devices before examiners can break the locks.
"It is a real concern," Moran said, adding that some suspects released on bond have sought to do just that.
In particularlyurgent cases, or when devices prove especially resistant, they are hand-delivered to private contractors who subject the phones tonew types of hacking.
From 2014 to 2019, Vance said,his office paid those contractors $1.5 million for software and assistance.
New York District Attorney Cyrus Vance says there's a lack of awareness about the frustrations law enforcement faces over unaccessible cellphone data.(Photo: ANGELA WEISS, AFP via Getty Images)
Their help has become critical not only in Manhattan but in places such as South Carolina's 14th Judicial Circuit, a five-county area in the state's low countrywhere Duffie Stone is the prosecutor.
"The use of technology by criminals is probably the biggest change in the criminal justice system," Stone said. "We are confronting this kind oftechnology, and the challenge of penetrating it, in virtually every case we are prosecuting."
Stone credits Vance with helping other prosecutors take on the new investigative burdens.
"The value of digital evidence is not limited to proving a defendant's guilt," Vance told a Senate panel in December. "In some instances, evidence recovered from devices mitigates the culpability of an accused or exonerates a defendant entirely."
In 2018, Vance said, an internal survey revealed 17 casesin which his office "reduced or dismissed charges because of evidence recovered from a smartphone."
Ordinarily, few would confuse William Barr with Cyrus Vance.
As President Donald Trump's attorney general, Barr has shielded his boss from Vance's subpoenas and document requests. Their fight over the president's tax records is before the Supreme Court.
On the issue of encryption, they have found common ground.
Last month, Barr rekindled a long-standing dispute between the Justice Department and Apple when he accused the company of failing to provide "substantive assistance" in unlocking two iPhones used by the Saudi attacker who killed three people atNaval Air Station Pensacola in December.
Airman Mohammed Hathaim, Ensign Joshua Watson and Airman Apprentice Cameron Walters were killed in the shooting at Naval Air Station Pensacola. USA TODAY
One of the devices was damaged by a bullet, possibly fired by the gunman in an attempt to destroy anyevidence it contained.
The attorney general said investigators rebuilt both phones, but they had not been able to bypass the passcodes to gain access to the data.
"This situation perfectly illustrates why itis critical that investigators be able to get access to digital evidence once they have obtained a court order based on probable cause," Barr said.
Apple rejected Barr's rebuke, saying it responded quickly to investigators' many requests. The company said itlearned only a week earlier that the Justice Department needed help unlocking the phones.
Barr's criticismmirrored a standoff between the FBI and Apple over an iPhone recovered after a mass shooting in San Bernardino, California, that left 14 people dead in 2015.
In that case, the FBI went to federal court todemand Apple assist investigators in accessing the device recovered from terrorist Syed Farook, who was killed withhis wife, Tashfeen Malik, in a shootout with authorities after the attack.
The FBI's effort was led by then-director James Comey, whomaintained the bureau wanted accessonly in that case. Apple and other tech companies feared granting access to Farook's phone would ultimately require them to build so-called backdoors that would allowlaw enforcement around the country to access their devices.
Nothing to see here: FBI blacks out most details on hack of terrorist's iPhone
Law enforcement officers search for suspects in a mass shooting Dec. 2, 2015, in San Bernardino, Calif.(Photo: Patrick T. Fallon, AFP via Getty Images)
The FBI dropped its challenge after it secured the assistance of an outside contractor that bypassed the iPhone's passcode.
Vance, who supported Comey's efforts, said theSan Bernardino caseraised public awareness of the problem,but it"deflated because there was mutual finger-pointing."
If Barr were to challengeApple again, Vance said, he probably would support it, thoughthe district attorney said courts won't offer a long-term solution.
"Nothing really has changed" since San Bernardino,Vance said.
"Companies are not going to redesign their devices to open for search warrants," he said. "The only way to move forward is the threat of federal legislation."
Read or Share this story: https://www.usatoday.com/story/news/politics/2020/02/11/manhattan-vault-investigators-try-unlock-encrypted-iphones/4670518002/
See the article here:
The code breakers: This vault is the epicenter in law enforcement's battle to unlock encrypted smartphones - USA TODAY
- WhatsApp overhauling status tab with encrypted Snapchat Stories-like feature - 9 to 5 Mac [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- GOP demands inquiry into EPA use of encrypted messaging apps - CNET [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- Encryption Apps Help White House Staffers Leakand Maybe Break the Law - WIRED [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- World Wide Web Creator Calls for Internet Decentralization & Encryption - The Data Center Journal [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- What It Means to Have an 'Adult' Conversation on Encryption - Pacific Standard [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- Confide in me! Encryption app leaks sensitive info from Washington DC - SC Magazine UK [Last Updated On: February 21st, 2017] [Originally Added On: February 21st, 2017]
- Gmail v7.2 Prepares to Add Support for S/MIME Enhanced Encryption - XDA Developers (blog) [Last Updated On: February 26th, 2017] [Originally Added On: February 26th, 2017]
- Top 6 Data Encryption Solutions - The Merkle [Last Updated On: February 26th, 2017] [Originally Added On: February 26th, 2017]
- Your Guide to the Encryption Debate - Consumer Reports - ConsumerReports.org [Last Updated On: February 26th, 2017] [Originally Added On: February 26th, 2017]
- Google helps put aging SHA-1 encryption out to pasture - Engadget [Last Updated On: February 26th, 2017] [Originally Added On: February 26th, 2017]
- Decipher your Encryption Challenges - Infosecurity Magazine [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- How the Politics of Encryption Affects Government Adoption - Freedom to Tinker [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- How Encryption Makes Your Sensitive Cloud-Based Data an Asset, Not a Liability - Security Intelligence (blog) [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- Set up VMware VM Encryption for hypervisor-level security - TechTarget [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- How The Media Are Using Encryption Tools To Collect Anonymous Tips - NPR [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- Encryption patent that roiled Newegg is dead on appeal | Ars Technica - Ars Technica [Last Updated On: February 28th, 2017] [Originally Added On: February 28th, 2017]
- Research proposes 'full-journey' email encryption - The Stack [Last Updated On: March 1st, 2017] [Originally Added On: March 1st, 2017]
- Database-as-a-service platform introduces encryption-at-rest - BetaNews [Last Updated On: March 1st, 2017] [Originally Added On: March 1st, 2017]
- Encrypted Messaging Service 'Signal' Adds Video Call Option - Top Tech News [Last Updated On: March 2nd, 2017] [Originally Added On: March 2nd, 2017]
- Germany, France lobby hard for terror-busting encryption backdoors ... - The Register [Last Updated On: March 2nd, 2017] [Originally Added On: March 2nd, 2017]
- How to Send Encrypted Nudes, a Guide for the Discerning Lover - Inverse [Last Updated On: March 2nd, 2017] [Originally Added On: March 2nd, 2017]
- Ironclad Encryption Corporation Announces New Ticker Symbol OTCQB: IRNC - Yahoo Finance [Last Updated On: March 2nd, 2017] [Originally Added On: March 2nd, 2017]
- The Best Email Encryption Software of 2017 | Top Ten Reviews [Last Updated On: March 2nd, 2017] [Originally Added On: March 2nd, 2017]
- No, you shouldn't delete Signal or other encrypted apps - TechCrunch [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- Best encryption software: Top 5 - Computer Business Review [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- Encryption Backdoors, Vault 7, and the Jurassic Park Rule of Internet Security - Just Security [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- That Encrypted Chat App the White House Liked? Full of Holes - WIRED [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- What the CIA WikiLeaks Dump Tells Us: Encryption Works - New York Times [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- Snake-Oil Alert Encryption Does Not Prevent Mass-Snooping - Center for Research on Globalization [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- Customer Letter - Apple [Last Updated On: March 11th, 2017] [Originally Added On: March 11th, 2017]
- Don't Let WikiLeaks Scare You Off of Signal and Other Encrypted Chat Apps - WIRED [Last Updated On: March 12th, 2017] [Originally Added On: March 12th, 2017]
- BT to offer customers encryption service for data - Capacity Media (registration) [Last Updated On: March 12th, 2017] [Originally Added On: March 12th, 2017]
- Encryption - technet.microsoft.com [Last Updated On: March 12th, 2017] [Originally Added On: March 12th, 2017]
- Use FileVault to encrypt the startup disk on ... - Apple Support [Last Updated On: March 12th, 2017] [Originally Added On: March 12th, 2017]
- Viber launches secret chats to go beyond encryption - SlashGear [Last Updated On: March 13th, 2017] [Originally Added On: March 13th, 2017]
- Zix wins 5-vendor email encryption shootout - Network World [Last Updated On: March 13th, 2017] [Originally Added On: March 13th, 2017]
- A lesson from the CIA WikiLeaks dump: Encryption works - The Seattle Times [Last Updated On: March 13th, 2017] [Originally Added On: March 13th, 2017]
- What the CIA WikiLeaks Dump Tells Us: Encryption Works - NewsFactor Network [Last Updated On: March 18th, 2017] [Originally Added On: March 18th, 2017]
- Panicked Secret Service Says It Lost Encrypted Laptop But It's Fine, Everything's Fine - Gizmodo [Last Updated On: March 18th, 2017] [Originally Added On: March 18th, 2017]
- Google Cloud adds new customer-supplied encryption key partners ... - ZDNet [Last Updated On: March 18th, 2017] [Originally Added On: March 18th, 2017]
- Preseeding Full Disk Encryption - Linux Journal [Last Updated On: March 18th, 2017] [Originally Added On: March 18th, 2017]
- Bypassing encryption: 'Lawful hacking' is the next frontier of law enforcement technology - Boston Business Journal [Last Updated On: March 18th, 2017] [Originally Added On: March 18th, 2017]
- SecurityBrief NZ - Gemalto introduces on-prem encryption key solution for 'highly regulated' organisations - SecurityBrief NZ [Last Updated On: March 21st, 2017] [Originally Added On: March 21st, 2017]
- 'Always Be Concerned': US Court Slaps Down Fifth Amendment Defense of Encryption - Sputnik International [Last Updated On: March 21st, 2017] [Originally Added On: March 21st, 2017]
- Quantum Key System Uses Unbreakable Light-Based Encryption to Secure Data - Photonics.com [Last Updated On: March 21st, 2017] [Originally Added On: March 21st, 2017]
- Wikileaks Only Told You Half The Story -- Why Encryption Matters More Than Ever - Forbes [Last Updated On: March 21st, 2017] [Originally Added On: March 21st, 2017]
- EPA Sued For Withholding Info On Encrypted Text Messages | The ... - Daily Caller [Last Updated On: March 22nd, 2017] [Originally Added On: March 22nd, 2017]
- Opinion Data encryption efforts ramp up in face of growing security threats - Information Management [Last Updated On: March 22nd, 2017] [Originally Added On: March 22nd, 2017]
- Bypassing encryption: Lawful hacking is the next frontier of law enforcement technology - Salon [Last Updated On: March 22nd, 2017] [Originally Added On: March 22nd, 2017]
- NeuVector Announces Container Visualization, Encryption, and Security Solution for NGINX Plus - DABCC.com [Last Updated On: March 23rd, 2017] [Originally Added On: March 23rd, 2017]
- Is encryption one of the required HIPAA implementation specifications? - TechTarget [Last Updated On: March 23rd, 2017] [Originally Added On: March 23rd, 2017]
- Paper Spells Out Tech, Legal Options for Encryption Workarounds - Threatpost [Last Updated On: March 23rd, 2017] [Originally Added On: March 23rd, 2017]
- Encryption debate needs to be nuanced, says FBI's Comey - TechTarget [Last Updated On: March 25th, 2017] [Originally Added On: March 25th, 2017]
- Comey Renews Debate Over Encryption - 550 KTSA [Last Updated On: March 25th, 2017] [Originally Added On: March 25th, 2017]
- UK minister says encryption on messaging services is unacceptable - Reuters [Last Updated On: March 28th, 2017] [Originally Added On: March 28th, 2017]
- The why and how of encrypting files on your Android smartphone - Phoenix Sun [Last Updated On: March 28th, 2017] [Originally Added On: March 28th, 2017]
- UK targets WhatsApp encryption after London attack - Yahoo News [Last Updated On: March 28th, 2017] [Originally Added On: March 28th, 2017]
- Critical flaw alert! Stop using JSON encryption | InfoWorld - InfoWorld [Last Updated On: March 28th, 2017] [Originally Added On: March 28th, 2017]
- SecureMyEmail is email encryption for everyone - TechRepublic - TechRepublic [Last Updated On: March 28th, 2017] [Originally Added On: March 28th, 2017]
- Apple iOS 10.3 will introduce encryption which makes it MORE difficult for cops and spooks to crack into ISIS nuts ... - The Sun [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- How to Analyze An Encryption Access Proposal - Freedom to Tinker [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- Questions for the FBI on Encryption Mandates - Freedom to Tinker [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- Justice Department anti-terror chief keeps pressing on encryption - Politico (blog) [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- UK government can force encryption removal, but fears losing, experts say - The Guardian [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- Encryption FAQs [Last Updated On: March 29th, 2017] [Originally Added On: March 29th, 2017]
- Why isn't US military email protected by standard encryption tech? - Naked Security [Last Updated On: April 9th, 2017] [Originally Added On: April 9th, 2017]
- How have ARM TrustZone flaws affected Android encryption? - TechTarget [Last Updated On: April 9th, 2017] [Originally Added On: April 9th, 2017]
- Keeping the enterprise secure in the age of mass encryption - Information Age [Last Updated On: April 9th, 2017] [Originally Added On: April 9th, 2017]
- Lack of encryption led to Dallas siren hack - WFAA [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- Internet Society tells G20 nations: The web must be fully encrypted - The Register [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- Make Encryption Ubiquitous, Says Internet Society - Infosecurity ... - Infosecurity Magazine [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- Can we encrypt the web while giving governments a backdoor to snoop? - SC Magazine UK [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- Why we need to encrypt everything - InfoWorld [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- Hacked Dallas sirens get extra encryption to fend off future attacks - Computerworld [Last Updated On: April 12th, 2017] [Originally Added On: April 12th, 2017]
- SHA-1 Encryption Has Been Broken: Now What? - Forbes [Last Updated On: April 14th, 2017] [Originally Added On: April 14th, 2017]
- Hewlett Packard Enterprise touts encryption tool for federal clients - The Hill [Last Updated On: April 14th, 2017] [Originally Added On: April 14th, 2017]
- Encryption on the Rise in Age of Cloud - Infosecurity Magazine - Infosecurity Magazine [Last Updated On: April 14th, 2017] [Originally Added On: April 14th, 2017]
- Lawmaker Pushes Bill That Requires Encryption by Pennsylvania State Employees - Government Technology [Last Updated On: April 14th, 2017] [Originally Added On: April 14th, 2017]
- Disk encryption - Wikipedia [Last Updated On: April 14th, 2017] [Originally Added On: April 14th, 2017]
- The apps to use if you want to keep your messages private - Recode [Last Updated On: April 15th, 2017] [Originally Added On: April 15th, 2017]