The FBI hacked into an iPhone, without Apple’s help
SAN FRANCISCO — The Justice Department said Monday that it had unlocked an iPhone without help from Apple, allowing the agency to withdraw its legal effort to compel the tech company to assist in a mass-shooting investigation.
The decision to drop the case — which involved demanding Apple’s help to open an iPhone used by Syed Rizwan Farook, a gunman in the December shooting in San Bernardino, Calif., that killed 14 people — ends a legal standoff between the government and the world’s most valuable public company. The case had become increasingly contentious as Apple refused to help authorities, inciting a debate about whether privacy or security were more important.
Yet law enforcement’s ability to unlock an iPhone through an alternative method raises new uncertainties, including questions about the strength of security in Apple devices. The development also creates potential for new conflicts between the government and Apple about the method used to open the device and whether that technique will be disclosed. Lawyers for Apple have previously said the company would want to know the procedure used to crack open the smartphone, yet the government may classify the method.
“From a legal standpoint, what happened in the San Bernardino case doesn’t mean the fight is over,” said Esha Bhandari, a staff lawyer at the American Civil Liberties Union. She notes that the government generally goes through a process whereby it decides whether to disclose information about certain vulnerabilities so that manufacturers can patch them.
“I would hope they would give that information to Apple so that it can patch any weaknesses,” she said, “but if the government classifies the tool, that suggests it may not.”
In Boston, the FBI had made a similar request for Apple’s help to unlock the iPhone of Desmond Crawford, a suspected member of the Columbia Point Dawgs gang who authorities believe was involved in the shooting of a rival.
It was unclear Monday evening whether the method used to break into the San Bernadino phone could be used in the Boston case, which involves a newer iPhone 6 Plus that has additional security features.
But Jonathan Zdziarski, author of several books on iPhone software hacking and a consultant to law enforcement agencies, suspected that the FBI’s phone hacking technique would probably work on Crawford’s phone.
“I’m not convinced that it’s impossible,” Zdzairski said. “It might take you a week to brute-force instead of a couple of hours.”
Apple has said the federal government has requested its help in nine other cases, including the one in Boston. And law enforcement officials in New York, Los Angeles, and other jurisdictions have said they have hundreds of locked iPhones they want to access.
But if the FBI said it still needs Apple’s help to get into the iPhone 6 in the Boston case, Zdziarski expects the company to argue that the agency made the same claim in the Farook case.
“The FBI has kind of shot themselves in the foot on this,” said Zdziarski.
In a two-paragraph filing on Monday, the Justice Department said it had “now successfully accessed the data stored on Farook’s iPhone and therefore no longer requires the assistance from Apple.”
FBI investigators have begun examining the contents of the phone but would not say what, if anything, they have identified so far. A senior federal law enforcement official who spoke on the condition of anonymity said it was possible that law enforcement might not find anything useful on the phone.
The Justice Department also remained tight-lipped about how it was able to finally get into the smartphone after weeks of furious public debate.
A second law enforcement official who spoke on the condition of anonymity to reporters in a conference call said that a company outside the government provided the FBI with the means to get into the phone used by Farook, which is an iPhone 5C running Apple’s iOS 9 mobile operating system. The official would not name the company or discuss how it was accomplished, nor would officials say whether the process would ultimately be shared with Apple.
Melanie Newman, a spokeswoman for the Justice Department, signaled in a statement that the broader battle over access to digital data from devices was not over.
“It remains a priority for the government to ensure that law enforcement can obtain crucial digital information to protect national security and public safety, either with cooperation from relevant parties, or through the court system when cooperation fails,” Newman said. “We will continue to pursue all available options for this mission, including seeking the cooperation of manufacturers and relying upon the creativity of both the public and private sectors.”
Apple did not immediately respond to calls for comment.
The conflict between Apple and the government erupted openly last month when a federal magistrate judge in California ordered the Silicon Valley company to help unlock the smartphone used by Farook. Timothy D. Cook, Apple’s chief executive, opposed the court order in a public letter, saying that “compromising the security of our personal information can ultimately put our personal safety at risk.”
The resistance led to heated rhetoric from both sides in dueling court filings, and the issue spurred debates and divided the public. Apple and the Justice Department had been due in court last week in Riverside, Calif., and the case was seemingly headed toward appeals and even the Supreme Court.
Then last Monday, the Justice Department said it had been approached by a third party with a potential alternative method for opening the iPhone.
The Justice Department’s cracking of the iPhone has implications for other cases that involve locked iPhones. Last month, a federal magistrate judge in the Eastern District of New York refused to grant an order, requested by the government, that asked Apple to extract data from an iPhone used by a drug dealer in Brooklyn. The Justice Department is in the process of appealing that decision.
The federal law enforcement official who spoke on the condition of anonymity to reporters on Monday said it was premature to say whether the method it used to open the phone in the San Bernardino case could be used on phones in other cases. The phone in the Brooklyn case was an iPhone 5S running the iOS 7 mobile software.
“Courts should be skeptical going forward when the government claims it has no other option besides compelling a device maker’s assistance,” said Riana Pfefferkorn, a cryptography fellow at the Stanford Center for Internet and Society.
“Now that the FBI has accessed this iPhone, it should disclose the method for doing so to Apple,” she added. “Apple ought to have the chance to fix that security issue, which likely affects many other iPhones.”