Security

Breaking into an iPhone using external hardware

Quartz, writing about a black box you connect to a cracked open iPhone:

The hacking equipment is called IP Box, and can be found on eBay for about $200. It’s a black box that connects to an iPhone and systematically runs through every possible PIN combination to unlock it.

Can this be used to break into the San Bernardino iPhone 5c? It is running iOS 8.1.2. Jury still out on whether this technique will work on that particular version of iOS. Fascinating stuff.

The iCloud loophole

Walt Mossberg, writing for Re/code:

Unlike with the iPhone hardware itself, Apple does retain the ability to decrypt most of what’s in these backups. And the company does on occasion turn their contents over to the FBI and other law enforcement agencies when a proper legal warrant or court order is presented.

Inside the Secure Enclave

The Secure Enclave is a mechanism inside your iPhone and Apple Watch, walled off from the rest of iOS, that holds the key to verifying your identity. Read the post for a short explanation of this mechanism by Apple and a link to an excellent, more detailed explanation from Mike Ash.

The cost of what the FBI is asking Apple to do

Using the All Writs Act to force Apple to build custom software does not come cheap. When someone says, Apple should just give them to number or disable the encryption, it shows they do not understand the costs involved. Apple lays those costs out.

The Tim Cook interview

The video embedded in the post is now the full interview, with a transcription of a few of Tim’s comments.

Why Apple defends encryption

This is a terrific piece from Rich Mogull, writing for TidBITS, that looks at why Apple stands alone in defending encryption. But the article goes further. It lays out the history of government monitoring of communications, as well as the arguments that drive both sides. Important topic.

Ways to increase your iPhone and iPad security

Rene Ritchie walks through a variety of iOS security settings, shedding light on the recommended balance between security and convenience. Definitely worth reading.

Use PayPal? Read this.

This is frightening. If you use PayPal, read the whole post. Know your risks.