FBI Might Have Way To Unlock Attacker's iPhone Without Apple
Follow CBSMIAMI.COM: Facebook | Twitter
LOS ANGELES (AP) — A much-anticipated court hearing on the federal government's effort to force Apple Inc. to unlock the iPhone used by one of the shooters in the San Bernardino terror attack was abruptly vacated Monday after the FBI revealed it may have a way to access data without the company's help.
Federal prosecutors made the surprising announcement on the eve of Tuesday's hearing in U.S. District Court in Riverside, California. In court papers they said the FBI has been researching methods to access the data on Syed Rizwan Farook's encrypted phone since obtaining it on Dec. 3, the day after the attack.
"An outside party" came forward over the weekend and showed the FBI a possible method, the government said in court papers requesting the hearing be postponed. Authorities need time to determine "whether it is a viable method that will not compromise data" on the phone.
If viable, "it should eliminate the need for the assistance from Apple," according to the filing.
The government did not identify the third party or explain what the proposed method entailed.
Magistrate Judge Sheri Pym granted that request and ordered the government to file a status report by April 5. Pym also stayed her Feb. 16 order compelling Apple to create software that would disable security features on the phone, including one that erases all information if a passcode is incorrectly entered more than 10 times.
The fact that a third party may have found a way into the phone without Apple's help appears to contradict every sworn affidavit and filing put that the Justice Department has put forward in the last month. The government has argued in each of its filings that Apple's help is necessary and that the company was the only entity that could provide investigators with what was needed.
FBI Director James Comey told the House Judiciary Committee in sworn testimony earlier this month that agency investigators had approached even the National Security Agency for help but did not have success.
Apple has said in its filings that the government did not exhaust all its options, and lawmakers have criticized the FBI for not doing more to try to crack the iPhone itself before seeking Apple's help.
"To me, it suggests that either the FBI doesn't understand the technology or they weren't giving us the whole truth when they said there is no other possible way" of examining the phone without Apple's help, said Alex Abdo, staff attorney for the American Civil Liberties Union. "Both of those are scary to me."
The ACLU has filed a court brief supporting Apple's position.
Robert Cattanach, a former U.S. Department of Justice attorney who handles cyber-security cases for the Dorsey & Whitney law firm, said the government would likely not have disclosed it had a lead on possibly unlocking the phone unless it was almost certain the method would work. That's because the disclosure weakens the government's case by introducing doubt that it could only access the phone with Apple's help, he said.
"They've created ambiguity in a place where they've previously said there is none," he said.
Prosecutors have argued that the phone used by Farook probably contains evidence of the Dec. 2 attack in which the county food inspector and his wife, Tashfeen Malik, slaughtered 14 at a holiday luncheon attended by many of his work colleagues. The two were killed in a police shootout hours later.
The FBI has said the couple was inspired by the Islamic State group. Investigators still are trying to piece together what happened and find out if there were collaborators.
The couple destroyed other phones they left behind, and the FBI has been unable to circumvent the passcode needed to unlock the iPhone, which is owned by San Bernardino County and was given to Farook for his job.
Apple has argued that the government was seeking "dangerous power" that exceeds the authority of the All Writs Act of 1789 it cited, and violates the company's constitutional rights, harms the Apple brand and threatens the trust of its customers to protect their privacy. The 18th-century law has been used on other cases to require third parties to help law enforcement in investigations.
It's not clear what method the government now wants to test. But even as the FBI has insisted that only Apple is able to provide the help it needs, some technical experts have argued there are other options.
The most viable method involves making a copy of the iPhone's flash memory drive, said Jonathan Zdziarski, a computer expert who specializes in iPhone forensics. That would allow investigators to make multiple tries at guessing the iPhone's passcode. A security feature in the phone is designed to automatically erase the data if someone makes 10 wrong guesses in a row.
But if that happens, Zdziarski said, investigators could theoretically restore the data from the backup copy they have created.
The data itself would remain encrypted until the phone is unlocked, but it would remain viable while investigators continued to guess the passcode, he added.
"It's a lot more involved than it sounds," Zdziarski cautioned, and no one has demonstrated that it would work in this case.
Some experts have also suggested that investigators could use lasers and acid to deconstruct the phone's memory chip, in order to physically examine the encrypted data and the encryption algorithm, in hopes of cracking the code. But hardware experts say that method has a high risk of destroying the memory during the process.
The notion of copying the flash memory was raised by U.S. Rep. Darrell Issa, a California Republican who previously ran a car alarm business, during a congressional hearing earlier this month, when Comey insisted that his bureau had explored all other possibilities. It has also been promoted by technical experts advising the ACLU.
(© Copyright 2016 The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten or redistributed.)