[cryptome] (no subject)

[Steve Kinney]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/20/2016 08:09 AM, Michael Best wrote:

>> On Sat, Feb 20, 2016 at 8:10 AM, John Young
>> <jya at pipeline.com <mailto:jya at pipeline.com>> wrote:
>> 
>> If Apple can hack its own security then the products are
>> backdoors.

> ... Being able to hack something doesn't mean there's a
> backdoor, even if you're the one who built it. Hacking !=
> backdoors
> 
> Good soundbite, though.

A little bit factual, though...

"There are a number of undocumented and hidden features and
services in Apple iOS that can be used to bypass the backup
encryption on iOS devices and remove large amounts of users’
personal data. Several of these features began as benign services
but have evolved in recent years to become powerful tools for
acquiring user data."

https://threatpost.com/researcher-identifies-hidden-data-acquisition
- -services-in-ios/

In practical terms, if Apple "can hack its own security" in
response to a Court order, that would mean that Apple had the
means to identify and repair the product defect(s) in question all
along but failed to do so until so ordered.  Which sounds a lot
more like "plausible deniability" of a back door, than the absence
of one.

:o)



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJWyG2bAAoJEDZ0Gg87KR0LolgQAIJM+/bv+cH1YhSjHZinK1sy
ol8NW6weTJ64dvOPA9BQfVMsqd7fhR7OiLnV46FdtvctCoD0/rB4aNRO4sVz+Snj
Eb7Q6bITVYXwAfqoyIezbqpPFH81+hIHRV4AHpREnYrlN7wRuNBrlBOBdAg3mY0e
vT3lhtbyMBJCVjleOkHTG+PsqVRzwpy6+tIfMRq+Xu43SDen1NOwdSTLdzdNOq3r
cGtFKkNhE7wtg1KWrmJC48WTKqhJTJYOXLLC/TPSN+9xSJllgbRvhh3mLY3IoK+9
WwecZR5OueAlHFGqXMBHxNJ3Z8B7kJ2yzV+uN7XbP5rLiqN22N/VilQy5nMMYbXe
wLJYP8YMJPGn9axuukHr8cG78f2iCNiG3Zvzue9mdxjll1oiwH5K3lCaNSt1w2gL
SHRQOt+DO1p8OcOf0cao40wxMjEorswx6H7X2YXYkDiNG8vGa4VHPF2x4xuiROpO
QcFhrcQg0vu3KkRBkP47tPO3M5RAVIoIA/29WCJ8OQ21L+8PHHlajGSJ0he3vlRv
rqeaX1cRMlw3UeYLuTvjL6SCp5dZr4xhNEgLMhtDdqgFwpuJlDwj07U0FCWJkF6L
+6mLfT6+Uzkr3RyA+uQZ/1aTTPeervJmTN/fdt2eA36h2XuF06oVWaREgs/9bhw3
3UOwhYhhrBpjqnqxPFg0
=6lQj
-----END PGP SIGNATURE-----