Just some food for thought…

JROppenheimer LosAlamos

I wasn’t planning on another piece about Apple v. The FBI. But here goes…

For all those pundits, wags, celebrities, politicians, and now Rabbis speaking out and telling Apple that they should decrypt the San Bernardino shooter’s iPhone, I submit this.

Apple is apparently applying the thought Robert Oppenheimer had after he helped create the atomic bomb.

When you see something that is technically sweet, you go ahead and do it and you argue about what to do about it only after you have had your technical success. That is the way it was with the atomic bomb.
– J. Robert Oppenheimer

I believe this quote is often paraphrased to;

Just because you CAN do a thing, doesn’t necessarily mean you SHOULD do a thing.

I’ve lived my life using that paraphrase as a test for certain actions. I look at it as a cautionary signpost for all scientists and researchers.

Project t virus by linkin368 d3gt57g

Just because you can modify the DNA of influenza to deliver a genetic update to all the people of the world… should you? What about murphy’s law? Can you really limit the unintended consequences? 

OR is it simply better to recognize that never creating the technology is the best course of action?

Thumb01m

All these people saying Apple should crack the phone, have no idea what they’re talking about. It’s not an easy task, even for Apple. Cracking encryption isn’t what you see in the movies. 

You don’t just plug a widget into a port, have some dialog about how cool you are and then hear a beep as the NSA computers start spilling all their information onto your impossibly small storage device.

At this point it’s unclear if the iPhone in question is using something as simple as a 4 digit code. It’s likely, but depending on the IOS version being used, the phone could be locked using a phrase.

If there’s a passphrase the odds of success hacking it with a brute force attack drop precipitously with each character added to the passphrase length.

James comey fbi

The brute force attack that the FBI is describing is crude and there is no guarantee that if they win in court, forcing Apple to be their bitch, that when they finally get into the phone there won’t be a nasty little application that has encrypted all the files the FBI wants using an entirely different algorithm, from another manufacturer.  If that’s the case, is the FBI going to get another court order? Probably not, because this is about the FBI making an example. Apple just happens to be the biggest target. 

It’s just as likely, this Jihadi fucker was using a messaging application that wiped the messages 5 minutes after they were read.

Federal and state fbi agent

If the guy was at all concerned about security, He probably turned off all the Apple Tracking software, I know I did right after Edward Snowden blew the whistle.

I’m not a criminal, but I value my privacy and am willing to forego my phone being able to tell me where the nearest Häagen-Dazs is, to maintain my privacy.

This means that Apple providing a custom operating system to disables the automatic wipe on the phone and allow unlimited access to the phone’s password system is likely not going to get the FBI anything more than they already have based on cell tower records.

By the way, because of the number of towers in the San Bernardino area, cell tower data can pinpoint the movements of this Jihadi asshole to within a couple hundred feet or less.

The NSA Actually Has A Program Called SKYNET

So the FBI is lying right from the get-go, when they say they want access to the phone so they can figure out where this Jihadi and his diseased rancid whore of a wife, were before, during the shooting, and after. 

The cell tower records would already provide that information and if the guy turned off his phone while visiting some nefarious underworld figure. Or dropped it in a Faraday bag or cage…

LOKSAK SHIELDSAK Flexible Fabric Faraday Cage Anti RF Protective Bag RF Fortress Radio Frequency Camouflage NDIA SOFIC 2014 David Crane DefenseReview com DR 10

Then the FBI would still get nothing from the phone because at that point the phone would have been cut off from the cell tower or any GPS information and likewise wouldn’t have been able to transmit any of that information.

But we know that the FBI has nine OTHER phones they want to force Apple to help them unlock. 

Apple icon apple

The problem here is that Apple has never created the software to unlock or hack their devices.

Why should they?

Apple tells you, “don’t lose your password, we cant help you if you do.”

So they have a secure device, and they can insure the device’s security because they’ve never created any software to undo their encryption or their locking mechanism.

Just because you CAN do a thing, doesn’t necessarily mean you SHOULD do a thing.

Achmed

Dear Apple customer… “If you loose your password, you can wipe the phone and start over. We strongly recommend you have the data backed up. Apple provides the iCloud service for this purpose.“

It’s recently come to light, that the FBI ordered the San Bernardino County IT department to change the password on the iCloud account and therefore broke a link that could, with Apple’s help, have gained access to the phone.

Now the FBI wants to use a court order to force Apple to UNFUCK their fuckup. But that’s not the end game.

The end game is that the FBI wants to force manufacturers to build government backdoors into all devices. 

BMZ9g3ZCMAAvZN2

The FBI is using “terrifying terrorists” and criminals, to spook congress and the courts into passing legislation that mandates government access be built into all machines. They and their supporters are using the time honored B.S. line;

For the safety and security of the public…” or that old favorite “We do this for THE CHILDREN

I’m not sure I believe in the slippery slope argument but I do think it’s a very short walk to losing rights that we’ll never get back.

That walk begins with statements that start out, “It’s worth losing a little privacy, or freedom, or changing the laws, or, or, or,  for safety.” see; The Patriot Act

 When I see our government behaving this way, and I hear people saying, “it’s just a little invasion,” I can’t help but think of the poem The Hangman.


I could see a time in the future when it’s illegal for you not to have your phone on your person.

After all, the government would only want to keep track of your movements and communications to insure your safety… Right?

Back doors in our devices are, I think just a stepping stone to full surveillance.

You have nothing to fear, if you have nothing to hide.

Obviously I’m missing something.

La me ln apple san bernardino security 2016021 001

The FBI went to a judge and apparently whined they couldn’t access the data in one of the San Bernardino Terrorist’s phones. 

A Judge ordered Apple to assist the FBI.

Apple responded that the programming doesn’t exist (by design) which would allow even them (Apple) to break into the phone.

Then Trump gets in on the action and says we need to get the information on that phone.

To which I say;

NO WE DON’T

I’d like to tell Trump to be quiet and let the adults talk.

Just because the information happens to exist on a phone, doesn’t mean that we have to access it. If the data were written on paper that had been burned, the FBI wouldn’t have access to it would they? Data locked on a phone is essentially the same.

The FBI does have other phones belonging to the San Bernardino Terrorists. They have access to all the bills and phone records of calls made to and from each of the phones in question.

Along with that information the FBI no doubt has access to all the text messages, or at least the source and destination phone numbers associated with those text messages. Just as I have that information for SMS messages printed on my cell phone bill every month.

What the FBI doesn’t have is information that may have been sent from that iPhone 5C to other iPhones, iPads, or Macs. This is because the information was sent via data channels instead of via SMS.

To quote another famous phrase, “What does it matter at this point anyway?

The FBI has the terrorist’s computers, the odds are damn high that any communications carried out on the phone were replicated on the computers.  These terrorists are dead on the pavement, they’ve been disavowed by ISIS, Al Qaeda, and the Taliban. 

This strikes me as nothing more than an end run around the issues of encryption by the FBI. 

Apple doesn’t have the software to break into the phone, because creation of that software would eventually mean that the software would get out. After all we all know how secure Data at the Office of Personnel Management was. How about the IRS data? Or the Healthcare.GOV data? Or, Or, Or…

Once a program capable of cracking the encryption on an iPhone or Samsung phone is out in the world, no-one has privacy.

This is the fundamental argument Tim Cook of Apple has been making all along.

Apple is very explicit in their encryption warnings on their computers. If you loose this password and you don’t have a recovery key we can’t help you. My computer’s drive is encrypted, I have the key stored and I know the password. But I don’t expect Apple to be able to decrypt my drive, or my iPhone, or my iPad. Even if I was stupid enough to loose or forget the passwords…

I don’t want Apple to be able to decrypt my stuff ever!

Beyond that is this point.

MIT recently reported there were something like 586 different encryption programs freely available from a variety of sources. So even if Apple compromises it’s principals (I hope to God they don’t) Criminals will simply choose an alternative encryption technique.

When that happens, what’s the FBI going to do? Bitch, piss, and moan their way into making a manufacturer in Switzerland, for example build them a backdoor?  If that day comes I’d be curious to see the response the FBI gets.

According to the LA Times article Farook disabled the icloud backup 6 weeks prior to the attack. It’s entirely likely that Farook disabled the GPS function and deleted messages as well. So even if the FBI gains access, it’s questionable if there will be any useful data recovered.

Regardless, the damage done to American privacy will be done.

At the Neighborhood watch meeting the other night…

Shooter

There was a very informative “Active Shooter” presentation by the Sheriff’s department, complete with a pump shotgun being fired outside the building.

I’d never heard what one of those sounds like if it was outside and I was inside. The sound was far different from what I’d have expected. It was more of a thump-pop and the volume was low enough that if I’d been further away I might not have even paid it any attention.

And that’s the point of training isn’t it? It’s one thing to hear the sound of a rifle, shotgun, or handgun when you’re the one firing it with ear and eye protection. It’s quite a different thing to be inside a building, hearing the shots outside or coming from another building.

runhidefight

The officers were professional and awesome. I generally like our police, I just wish they’d re-open the substation here in town.  Right now they’re 30 minutes away, so often by the time they get here whatever was going on is already done. The big difference is when the snow players are up then we’ve got a pretty good police presence.

active-shooter-hoodieActive shooters aren’t like average criminals. They’re out to hurt as many people as possible and they’re usually very young. I was shocked that the average age is 16.

Because they’re out to hurt a lot of people, the police are going to engage quickly and will likely not be taking the shooter into custody.  The reason is, Active Shooters often kill themselves or do something that forces the police to shoot them.

If you get an opportunity to attend an Active Shooter presentation I highly recommend it.

Escaping is bestThe main take-aways for me were confirmation that what I’d already been doing, was in fact prudent not paranoid.

1) Note exits (In fire, attack, flood, earthquake, etc. it’s a good idea to know which direction is likely to get you out of harms way.)

2) Plan (Run a quick scenario of how you’d get to an exit in an emergency. Don’t dwell on it, just note obstacles, and realize the closest exit may not be the “Best” exit.)

3) In an Active Shooter situation you’ve got three options. a) Exit / Escape, b) Hide / Shelter in place, c) Fight.

The thing I liked about the presentation was that the officers covered all three of the options in a pragmatic realistic way. They didn’t dwell on Islam, or Schools, or allow the training be taken off into the merits of concealed carry.

They simply discussed what is known about Active Shooters. And gave some tips that may be helpful in surviving an event if you were to ever find yourself in a shitty situation.

EvacuateThey talked about how to behave if you’ve been able to evacuate and come face to face with a group of armed officers entering the building. Easy answer… HANDS UP! Fingers spread, and do exactly what the officers tell you to do.

Don’t fight, argue, or bitch about it. These folks have no freaking idea what they’re walking into and have no idea if you’re the good guys or bad guys.  That was useful to me because I’d be worried about running out of a building and spooking an officer then getting shot because I didn’t know what I was supposed to do.

Baracade

If you’re hiding / sheltering in place, get into a space that can be locked. Turn off the lights and your phone sound makers, and be quiet. It seems that Active Shooters get into a predatory mode. So don’t attract their attention in any way.

Shooters will typically pass by locked or barricaded doors because their goal is to hurt a lot of people. If a space looks empty and the door isn’t easily opened they’re not going to waste time, they’re going to look for obvious and easy targets.

Runhidefight

If you’ve got no choice FIGHT!  And when fighting your aim is to KILL you are fighting for your life and possible the life of your loved ones. All bets are off, there are no Queensbury rules.

Curb stomp the fucker if you can, severely fuck him up if you have the opportunity.  This person is no longer a person. Something inside them is horribly broken and there is no reasoning with them. Don’t try talking, don’t negotiate, they’re not going to hear you.

Dylan ThomasRemember almost anything in the local environment can be used as a weapon. A heavy object swung with intent and force can do enough blunt force damage that the threat is neutralized.

The police were very clear, leaving is the first, best option.

Not getting into a situation is even better. If something looks strange, or someone is behaving strangely it’s not paranoid or un-politically correct to report it.

A person might be acting strangely because they’re having a medical event. Think about this, the sooner that person gets medical help, the less likely whatever is happening will kill them. If on the other hand someone is acting strangely because they’re about to snap, then police intervention sooner rather than later may well stop a massacre.

02-053625-active_shooter_reported_in_san_bernardino_caEither way, the right people get on scene to handle a situation.

The thing they left unsaid and that I inferred is after you’ve reported the issue, either person or unattended bag, purse, backpack, package, etc. Leave the area.

This ties into my “Time to leave the party” instinct.

There are times when things are starting to get out of hand, at a party, or event, and I’ll just head to the exit. It’s not that I’m chicken (I do have a well honed sense of self preservation), I just don’t want to be involved in someone else’s drama. I may stick around if the drama involves someone I genuinely like or care about.

Generally if someone has issues, those issues aren’t my concern and I have zero desire to be sucked into the insanity.

So if I’m at a shopping center, or company party, or restaurant, and some craziness walks in the front door, I’m walking out the back, before the crazy spreads or the shooting starts.

The point is not to live in fear, and not to be paranoid.

The point is, be actively aware of what’s going on around you. Have an awareness of your surroundings and have a sketched out plan of what to do if, God Forbid, there is some kind of emergency.

In view of all the information the police were presenting, I suddenly flashed on the whole New Years Eve debacle.  On the one hand I was glad to have the police verify that my normal operating behavior wasn’t insane or paranoid.

On the other hand, I’d have loved to have the dumbass that kept repeatedly telling me I was a fearful paranoid dumbshit, duct-taped to a chair being forced to listen to this presentation. I’d like to do that only because I wonder how long it would take before his head exploded.

Then again, people like him would serve as distraction while I make like Elvis and… leave the building.