{"id":17447,"date":"2020-01-15T06:30:07","date_gmt":"2020-01-15T14:30:07","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2020\/01\/15\/news-11183\/"},"modified":"2020-01-15T06:30:07","modified_gmt":"2020-01-15T14:30:07","slug":"news-11183","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2020\/01\/15\/news-11183\/","title":{"rendered":"Breaking iPhone encryption won&#039;t make anyone safer"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/09\/cio_cw_binary_at_symbol_with_keyhole_security_email_encryption_by_warchi_gettyimages-164301677_2400x1600-100811102-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Wed, 15 Jan 2020 05:06:00 -0800<\/strong><\/p>\n<p>Imagine all your tax documentation could be examined by officials from any government merely on suspicion. That\u2019s the future some governments are <a href=\"https:\/\/www.computerworld.com\/article\/3514209\/apple-refuses-latest-government-iphone-unlock-request.html\">pushing for<\/a> when they demand Apple puts security <a href=\"https:\/\/nakedsecurity.sophos.com\/2020\/01\/15\/apple-says-no-to-unlocking-shooters-phone-ag-and-trump-lash-back\/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29\" rel=\"nofollow\">backdoors<\/a> into its products.<\/p>\n<p>Think about the nature of security backdoors:<\/p>\n<p>\u201cBut the keys will be kept with secure government agencies,\u201d some say.<\/p>\n<p>So what?<\/p>\n<p>It only takes one disaffected government employee, one deeply inserted spy in government or a tech company, or one sophisticated criminal attack to successfully extract that key.<\/p>\n<p>After that, it\u2019s only a matter of time before such keys end up in the hands of security agencies from every government, including those who cannot be trusted.<\/p>\n<p>As these keys are deliberately designed the operating system vendor will not be in position to patch them.<\/p>\n<p>Those keys won\u2019t just reach other governments, they will also reach the hands of various criminal entities who will see the huge opportunity for theft, profit and blackmail inherent in gaining access to every smartphone owner\u2019s digital life.<\/p>\n<p>Things leak.<\/p>\n<p>Think back just a year ago when police-grade iPhone hacking tools suddenly <a href=\"https:\/\/www.computerworld.com\/article\/3346023\/now-you-can-buy-police-grade-iphone-hacking-tools-on-ebay.html\">appeared for sale on eBay<\/a>, for example. Or ponder <a href=\"https:\/\/www.applemust.com\/graykey-iphone-hack-in-a-box-proves-you-need-complex-passcodes\/\" rel=\"nofollow\">the fate of the GrayKey box<\/a>.<\/p>\n<p>That\u2019s even before you consider how such access threatens connected systems of every kind, from enterprise relationship management software to enabling unknowns to access the log in codes for your local power station.<\/p>\n<p>In fact, it seems to me that criminals and hostile governments have the most to gain from any move to make mobile devices less secure.<\/p>\n<p>I imagine they are already thinking about the money they will make and chaos they can create as mobile security is deliberately broken.<\/p>\n<p>That\u2019s even before discussing how this undermines privacy.<\/p>\n<p>These are just some of the many reasons Apple\u2019s statement in response to the born again move to force it to break security in its devices should be supported.<\/p>\n<p>It isn\u2019t as if Apple is not prepared to help law enforcement \u2013 it says it has provided a huge amount of information, including iCloud backups and more. It is also true that other entities (including carriers) are also providing evidence.<\/p>\n<p>In a statement on the current furore, Apple said:<\/p>\n<p>\u201cWe have always maintained there is no such thing as a backdoor just for the good guys. Backdoors can also be exploited by those who threaten our national security and the data security of our customers. Today, law enforcement has access to more data than ever before in history, so Americans do not have to choose between weakening encryption and solving investigations. We feel strongly encryption is vital to protecting our country and our users\u2019 data.\u201d<\/p>\n<p>Apple has made similar arguments before.<\/p>\n<p>In a <a href=\"https:\/\/www.apple.com\/customer-letter\/\" rel=\"noopener nofollow\" target=\"_blank\">letter to its customers<\/a> following the San Bernardino case, it said:<\/p>\n<p>\u201cFor years, cryptologists and national security experts have been warning against weakening encryption. Doing so would hurt only the well-meaning and law-abiding citizens who rely on companies like Apple to protect their data. Criminals and bad actors will still encrypt, using tools that are readily available to them.\u201d<\/p>\n<p>There\u2019s another problem.<\/p>\n<p>After all, if one government demands such security backdoors, then every government will do the same. This may have a chilling effect on religious minorities, for example.<\/p>\n<p>There is no tech company that can realistically deny some governments and not others. If Apple weakens encryption for one nation, it will be forced to do so in others.\u00a0<\/p>\n<p>And mobile device security will weaken one encryption backdoor at a time.<\/p>\n<p>The effect?<\/p>\n<p>We will all be poorer and less secure.<\/p>\n<p>Those security keys will inevitably end up in the hands of criminals and hostile actors.<\/p>\n<p>Bank accounts will be robbed, data stolen, and digital terrorism (including attacks on critical infrastructure) enabled on an international scale.<\/p>\n<p>The end result will not be more security, but far less.<\/p>\n<p>Or, as you might put it in 130 characters or less:<\/p>\n<p>\u201cSecurity backdoors and broken encryption will enable more criminal and terrorist activity than they prevent.\u201d\u00a0<\/p>\n<p>Consider the consequences, rather than being seduced by the soundbite.<\/p>\n<p>Please follow me on<em>\u00a0<a href=\"https:\/\/twitter.com\/jonnyevans_cw\" rel=\"nofollow\">Twitter<\/a>, or join me in the\u00a0<a href=\"https:\/\/mewe.com\/join\/appleholics_bar_and_grill\" rel=\"nofollow\">AppleHolic\u2019s bar &amp; grill<\/a>\u00a0and\u00a0<a href=\"https:\/\/mewe.com\/join\/apple_discussions\" rel=\"nofollow\">Apple Discussions<\/a>\u00a0groups on MeWe.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3514409\/breaking-iphone-encryption-wont-make-anyone-safer.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/09\/cio_cw_binary_at_symbol_with_keyhole_security_email_encryption_by_warchi_gettyimages-164301677_2400x1600-100811102-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Wed, 15 Jan 2020 05:06:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Imagine all your tax documentation could be examined by officials from any government merely on suspicion. That\u2019s the future some governments are <a href=\"https:\/\/www.computerworld.com\/article\/3514209\/apple-refuses-latest-government-iphone-unlock-request.html\">pushing for<\/a> when they demand Apple puts security <a href=\"https:\/\/nakedsecurity.sophos.com\/2020\/01\/15\/apple-says-no-to-unlocking-shooters-phone-ag-and-trump-lash-back\/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29\" rel=\"nofollow\">backdoors<\/a> into its products.<\/p>\n<h2><strong>Making no one safe<\/strong><\/h2>\n<p>Think about the nature of security backdoors:<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3514409\/breaking-iphone-encryption-wont-make-anyone-safer.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[2211,10480,10554,714],"class_list":["post-17447","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-apple","tag-ios","tag-mobile","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17447"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17447\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17447"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}