Apple has reopened a privacy battle with the FBI after refusing to unlock the iPhones of the Saudi pilot who opened fire at Naval Air Station Pensacola Buzz60
NEW YORK Inside a steel-encased vault in lower Manhattan, investigators are bombarding an Apple iPhone 7 with ajumble of numerical codes generated by nearby computers.
The grinding exercise has continued for the past 21 months with a singular aim: Crack the phone's passcode so police can extract potentialevidence in an aging attempted murder investigation.
Despite the formidable resources ofa $10 million cyber laboperated by the Manhattan District Attorneys Officeincluding costly assistance provided by privatesleuthsso far the phone has won.
Last month, Attorney General William Barr revived the titanic struggle betweenlaw enforcement and Big Techwhen he disclosedthat the FBI couldn'tunlock two iPhones used by a Saudi officer who opened fireat a Navy base in Florida in December.
Yet the breadth of the ground war wagedagainst encrypted phones, tablets and other devices seized in criminal inquiries is perhaps best appreciated withinthe securedoors of this Manhattanlaboratory.
Steven Moran, director of the High Technology Analysis Unit at the Manhattan District Attorneys Office, describes how investigators try to crack encrypted smartphones in a special steel-encased vault. It was built to block outside radio frequencies, preventing suspects from remotely erasing their devices.(Photo: Kevin Johnson, USA TODAY)
More than 8,000 devices have poured into the facility since 2014.Each year, more of them are locked, rising from 24% in 2014 to 64%last year. For Apple devices, it's gone from 60% to 82%.
Nearly 2,500 of the locked devices remain inaccessible to investigators, hindering investigations into child exploitation, financial crimes, theft, violence and other crimes.
The numbers illustrate afrustration shared by law enforcement agencies across the country.
"I don't think there is an awareness of the scope of the problem," Manhattan District Attorney Cyrus Vance said.
Duffie Stone, president of the National District Attorneys Association, describedthe challenge as a technological tidal wave overwhelming agencies across the country, particularly smaller oneswithout Manhattan's considerable resources.
However, it's been difficult to measurehow much of a problem locked devices are for law enforcement. There is no national data repository tracking how often investigators areblockedby phones "going dark," as they say.
In 2018, the FBI estimated federal authorities had recovered nearly 8,000 locked phones for analysis. Butthe bureau acknowledged that figure was overstated.The FBI has not publicly updated the data since, leaving Vance as law enforcements most vocal authority in the struggle between law enforcement and privacy interests.
Tech giant Apple is law enforcement's favorite target because of its commercial popularity and its efforts to bolster user privacy.In the past six years, law enforcement officials maintain, Apple and other companies have made their devices virtually warrant-proofby enabling encryption by default and moving fromfour-digit passcodes to six.
Law enforcement vs. consumer privacy: Should Apple help DOJ unlock terrorist's iPhones?
"We have always maintained there is no such thing as a backdoor just for the good guys," Apple said last month, responding to Barr's claims that the company had not helped unlock the two iPhones recovered from the Pensacola shooter.
"Today, law enforcement has access to more data than ever before in history, so Americans do not have to choose between weakening encryption and solving investigations," Apple said. "We feel stronglyencryption is vital to protecting our country and our users' data."
Steven Moran, director of the High Technology Analysis Unit at the Manhattan District Attorneys Office, stands outside the vault where computers bombard seized smartphones with codes in order to guess the passcodes and enable investigators to access their data. New batches of phones are moved into the chamber like unbaked cookies and others are moved out before they're done.(Photo: Kevin Johnson, USA TODAY)
It looks like a bomb shelter. In a sense, it is.
Just off the main corridor of the Manhattan cyber laboratory, protected by a heavy steel door, is a small chamber where some of the lab's most consequential work is carried out in isolation.
About 100 locked cell phones,seized in various criminal investigations, arestacked neatly on two shelves. Nearby,computerssilently batter the devices with spurts of numerals as they attempt toguess thepasscodes.
Only when the lights are offis the workvisible, in flashes of blinking lights.
Success can come in minutes, hours, days ormonths. Or not at all.
Of the 1,035 devices that were locked on arrival at the lab last year, 405 remain inaccessible, according to lab records. The year before, 666 of the 1,047 locked phones could not be opened.
New batches of phones are moved into the chamber like unbaked cookies. Others are moved out before they're done.
"We might need more shelving," said Steven Moran, director of the High Technology Analysis Unit.
The room's heavy drape of security, Moran said, is not for show. It was built to block outside radio frequencies, preventingsuspects from remotely erasing their devices before examiners can break the locks.
"It is a real concern," Moran said, adding that some suspects released on bond have sought to do just that.
In particularlyurgent cases, or when devices prove especially resistant, they are hand-delivered to private contractors who subject the phones tonew types of hacking.
From 2014 to 2019, Vance said,his office paid those contractors $1.5 million for software and assistance.
New York District Attorney Cyrus Vance arrived in October for a federal court hearing on his efforts to get several years of tax returns from President Donald Trump's longtime accounting firm.(Photo: ANGELA WEISS, AFP via Getty Images)
Their help has become critical not only in Manhattan but in places like South Carolina's 14th Judicial Circuit, a five-county area in the state's low countrywhere Duffie Stone is the local prosecutor.
"The use of technology by criminals is probably the biggest change in the criminal justice system," Stone said. "We are confronting this kind oftechnology, and the challenge of penetrating it, in virtually every case we are prosecuting."
Stone credits Vance with helping other prosecutors take on the new investigative burdens.
"The value of digital evidence is not limited to proving a defendant's guilt," Vance told a Senate panel in December. "In some instances, evidence recovered from devices mitigates the culpability of an accused or exonerates a defendant entirely."
In 2018, Vance said, an internal survey revealed 17 casesin which his office "reduced or dismissed charges because of evidence recovered from a smartphone."
Ordinarily, few would confuse William Barr with Cyrus Vance.
As Donald Trump's attorney general, Barr has shielded his boss from Vance's subpoenas and document requests. Their fight over the president's tax records is now before the Supreme Court.
On the issue of encryption, however, they have found common ground.
Last month, Barr rekindled a longstanding dispute between the Justice Department and Apple when he accused the company of failing to provide "substantive assistance" in unlocking two iPhones used by the Saudi attacker who killed three people atNaval Air Station Pensacola in December.
Airman Mohammed Hathaim, Ensign Joshua Watson and Airman Apprentice Cameron Walters were killed in the shooting at Naval Air Station Pensacola. USA TODAY
One of the devices was believed to have been damaged by a bullet fired by the gunman in an attempt to destroy anyevidence it contained.
The attorney general said investigators rebuilt both phones, but they had not been able to bypass the passcodes to gain access to the data.
"This situation perfectly illustrates why itis critical that investigators be able to get access to digital evidence once they have obtained a court order based on probable cause," Barr said then.
Apple rejected Barr's rebuke, saying it had responded quickly to investigators' many requests. The company said itlearned only a week earlier that the Justice Department needed help unlocking the phones.
Barr's criticismmirrored a standoff between the FBI and Apple over an iPhone recovered after a 2015 mass shooting in San Bernardino, California, that left 14 people dead.
In that case, the FBI went to federal court todemand Apple assist investigators in accessing the device recovered from terrorist Syed Farook, who was killed withhis wife, Tashfeen Malik, in a shootout with authorities following the attack.
The FBI's effort was led by then-director James Comey, whomaintained the bureau wanted accessonly in that case. Apple and other tech companies feared granting access to Farook's phone would ultimately require them to build so-called backdoors that would allowlaw enforcement around the country to access their devices.
Nothing to see here: FBI blacks out most details on hack of terrorist's iPhone
Law enforcement officers search for the suspects of a mass shooting Dec. 2, 2015 in San Bernardino, Calif. A man and a woman suspected of carrying out a deadly shooting at a center for the disabled were killed in a shootout with police, while a third person was detained, police said. (Photo: Patrick T. Fallon, AFP via Getty Images)
The FBI dropped its challenge after it secured the assistance of an outside contractor that successfully bypassed the iPhone's passcode.
Vance, who supported Comey's efforts at the time, said theSan Bernardino caseraised public awareness of the problem. But itultimately "deflated because there was mutual finger-pointing."
If Barr were to challengeApple again, Vance said he probably would support it. Yet the district attorney said courts won't offer a long-term solution.
"Nothing really has changed" since San Bernardino,Vance said.
"Companies are not going to redesign their devices to open for search warrants," he said. "The only way to move forward is the threat of federal legislation."
Read or Share this story: https://www.usatoday.com/story/news/politics/2020/02/11/manhattan-vault-investigators-try-unlock-encrypted-iphones/4670518002/
Follow this link:
The code breakers: This vault is ground zero for law enforcement's battle to unlock encrypted smartphones - USA TODAY
- Report: NSA building comp to crack encryption types [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Report: NSA looking to crack all encryption with quantum computer [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Sound Advice: Explaining Comcast cable encryption [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- NSA Building Encryption-Busting Super Computer [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- NSA researches quantum computing to crack most encryption [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Advanced Encryption Standard - Wikipedia, the free encyclopedia [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- How Encryption Works - HowStuffWorks "Computer" [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Email Encryption - MB Technology Solutions - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Email Encryption - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Reversible Data Hiding in Encrypted Images by Reserving Room Before Encryption - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Toshiba WT8 Full Disk Encryption, Miracast, Easy Stand - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- Australian Encryption | Text encryption software for the protection of your privacy - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- njRAT v0 6 4 server Clean Encryption - Video [Last Updated On: January 5th, 2014] [Originally Added On: January 5th, 2014]
- AlertBoot New Encryption Compliance Reports Prepare Covered Entities For HIPAA Audits [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- BlackBerry denies using backdoor-enabled encryption code [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- What Is Encryption? (with pictures) - wiseGEEK [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- HowStuffWorks "How Encryption Works" [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- Gambling with Secrets Part 5 8 Encryption Machines - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- The Benefits of Hosted Disk Encryption - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- Quill Encryption - what's that? - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- WhatsApp Encryption - Shmoocon 2014 by @segofensiva @psaneme - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- encryption demo2 - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- encryption demo - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- Seven - Encryption Official Lyric Visual - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- Quantum Computers - The Ultimate Encryption Backdoor? - Video [Last Updated On: January 23rd, 2014] [Originally Added On: January 23rd, 2014]
- Eric Schmidt: Encryption will break through the Great Firewall of China [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- From NSA to Gmail: Ex-spy launches free email encryption service [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- Tennessee bill takes on NSA encryption-breaking facility at Oak Ridge/SHUT. IT. DOWN. - Video [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- Substitute for:Measurements. 1 Episode. Strength of the encryption algorithm - Video [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- RSA Encryption Checkpoint - Video [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- Gambling with Secrets 8 8 RSA Encryption 1 - Video [Last Updated On: January 24th, 2014] [Originally Added On: January 24th, 2014]
- Google chairman says 'encrypting everything' could end China's censorship, stop NSA snooping [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- Ex-spy launches free email encryption service [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- 3 2 The Data Encryption Standard 22 min - Video [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- RSA Encryption step 3 - Video [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- RSA Encryption step 2 - Video [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- aes tutorial, cryptography Advanced Encryption Standard AES Tutorial,fips 197 - Video [Last Updated On: January 26th, 2014] [Originally Added On: January 26th, 2014]
- Townsend Security Release First Encryption Key Management Module for Drupal [Last Updated On: January 27th, 2014] [Originally Added On: January 27th, 2014]
- RSA Encryption step 5 - Video [Last Updated On: January 27th, 2014] [Originally Added On: January 27th, 2014]
- Lavabit case highlights legal fuzziness around encryption rules [Last Updated On: January 28th, 2014] [Originally Added On: January 28th, 2014]
- A Beginner's Guide To Encryption: What It Is And How To Set It Up [Last Updated On: January 28th, 2014] [Originally Added On: January 28th, 2014]
- How App Developers Leave the Door Open to NSA Surveillance [Last Updated On: January 28th, 2014] [Originally Added On: January 28th, 2014]
- Intro to RSA Encryption step 1 - Video [Last Updated On: January 28th, 2014] [Originally Added On: January 28th, 2014]
- “Honey Encryption” Will Bamboozle Attackers with Fake Secrets [Last Updated On: January 30th, 2014] [Originally Added On: January 30th, 2014]
- Encryption - A Life Unlived (DEMO) - Video [Last Updated On: January 30th, 2014] [Originally Added On: January 30th, 2014]
- Baffle thy enemy: The case for Honey Encryption [Last Updated On: January 31st, 2014] [Originally Added On: January 31st, 2014]
- New AlertBoot Encryption Reports Make Dental HIPAA Compliance Easier [Last Updated On: January 31st, 2014] [Originally Added On: January 31st, 2014]
- Encryption - The Protest - Video [Last Updated On: January 31st, 2014] [Originally Added On: January 31st, 2014]
- Encryption - New Life - Video [Last Updated On: February 1st, 2014] [Originally Added On: February 1st, 2014]
- Encryption - Intro - Video [Last Updated On: February 1st, 2014] [Originally Added On: February 1st, 2014]
- Encryption - Blank Canvas - Video [Last Updated On: February 1st, 2014] [Originally Added On: February 1st, 2014]
- Security First SPxBitFiler-IPA encryption pattern for the IBM PureApplication System - Video [Last Updated On: February 3rd, 2014] [Originally Added On: February 3rd, 2014]
- Revolutionary new cryptography tool could make software unhackable [Last Updated On: February 4th, 2014] [Originally Added On: February 4th, 2014]
- viaForensics webinar: Mobile encryption - the good, bad, and broken - Aug 2013 - Video [Last Updated On: February 4th, 2014] [Originally Added On: February 4th, 2014]
- K.OStream 0.2 File Encryption Test - Video [Last Updated On: February 4th, 2014] [Originally Added On: February 4th, 2014]
- Tumblr adds SSL encryption option, but not as the default [Last Updated On: February 5th, 2014] [Originally Added On: February 5th, 2014]
- Latest Java Project Source Code on Chaotic Image Encryption Techniques - Video [Last Updated On: February 5th, 2014] [Originally Added On: February 5th, 2014]
- Encryption - University of Illinois at Urbana–Champaign [Last Updated On: February 6th, 2014] [Originally Added On: February 6th, 2014]
- A Beginner's Guide to Encryption: What It Is and How to ... [Last Updated On: February 6th, 2014] [Originally Added On: February 6th, 2014]
- Real Data Encryption Software is More Important than Ever ... [Last Updated On: February 8th, 2014] [Originally Added On: February 8th, 2014]
- Caesar Cipher Encryption method With example in C Language - Video [Last Updated On: February 8th, 2014] [Originally Added On: February 8th, 2014]
- Hytera DMR 256 bit encryption - Video [Last Updated On: February 9th, 2014] [Originally Added On: February 9th, 2014]
- Townsend Security Releases Encryption Key Management Virtual Machine for Windows Azure [Last Updated On: February 10th, 2014] [Originally Added On: February 10th, 2014]
- Unitrends Data Backup Webinar: Utilizing The Cloud, Deduplication, and Encryption - Video [Last Updated On: February 10th, 2014] [Originally Added On: February 10th, 2014]
- Main menu [Last Updated On: February 12th, 2014] [Originally Added On: February 12th, 2014]
- Use of encryption growing but businesses struggle with it – study [Last Updated On: February 12th, 2014] [Originally Added On: February 12th, 2014]
- SlingSecure Mobile Voice Encryption Installation Video for Android - Video [Last Updated On: February 12th, 2014] [Originally Added On: February 12th, 2014]
- Data breaches drive growth in use of encryption, global study finds [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- Darren Moffat: ZFS Encryption - Part 2 - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- Darren Moffat: ZFS Encryption - Part 1 - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- How do I configure User Local Recovery in Endpoint Encryption Manager 276 - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- Symmetric Cipher (Private-key) Encryption - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- SafeGuard File Encryption for Mac - Installation and Configuration - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- Fundamentals of Next Generation Encryption - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- Tutorial: Einrichten der EgoSecure Endpoint Removable Device Encryption - Video [Last Updated On: February 14th, 2014] [Originally Added On: February 14th, 2014]
- 'PGP' encryption has had stay-powering but does it meet today's enterprise demands? [Last Updated On: February 15th, 2014] [Originally Added On: February 15th, 2014]
- Fact or Fiction: Encryption Prevents Digital Eavesdropping [Last Updated On: February 15th, 2014] [Originally Added On: February 15th, 2014]
- RHCSA PREP:answer to question 20 (Central Authentication Using LDAP with TLS/SSL Encryption) - Video [Last Updated On: February 15th, 2014] [Originally Added On: February 15th, 2014]
- Protect+ Voice Recorder with Encryption - Video [Last Updated On: February 15th, 2014] [Originally Added On: February 15th, 2014]