No iPhone is Safe from the FBI

Image credit: Macitynet.it

The US government has successfully accessed data stored on the San Bernardino gunman's iPhone, thus ending a six week-long clash between Apple and the FBI. Apple were refusing to unlock the device, citing privacy issues, however the FBI enlisted a third-party company to do the job for them. But the question remains, could a law enforcement agency have forced Apple to unlock the device?

This definitely won't be the first or the last Apple device that the FBI will want to crack, in fact it has been reported that there are a dozen other cases where the law enforcement agency want access to an individual's personal device. Does this now mean that the FBI can access any iPhone with a passcode? 

Originally, the court order filed by the FBI had instructed Apple to come up a new version of it's operating system that would have prevented the iPhone from deleting its data or imposing long lock out periods if too many incorrect passcodes were entered. It's important to note that the latest court filings do not say that someone else has now done this, but merely that a third-party company had helped the FBI to retrieve some data stored on the device. 

The firm who reportedly helped the FBI with the case is called Cellebrite and they had previously discussed bypassing the passcode lock rather than trying to figure out the number. However, by doing this it would yield a limited amount of handset data and even if it works once, Apple upgrade their software regularly, so it might not work again if security fixes have been made. 

Theresa May is also intending to bring in a new surveillance law that will make tech firms hand over information if the law enforcement requests it through "equipment interference warrants". 

While it is always going to be possible that someone could hack into your phone, it doesn't mean that you should make it easy for them. Update the iOS software as soon as Apple releases it and use encryption-enabled apps to digitally scramble data. 

Feeling a little unsure of your company's security? Get in touch with 360ict today for more information on how to keep your business secure. 

360ict provides managed IT services and support for SMEs in central London and the south-east, including Croydon and Bromley. For more advice on gaining competitive advantage as a mid-sized company, give us a call on 0208 663 4000 or head to our website. 

What to expect from Theresa May’s new Surveillance Bill AKA Spy Bill

Image credit: Tech Week Europe

Yesterday Home Secretary Theresa May revealed her plans to fight crime and terror through a new surveillance law. The law will track the internet activity of everyone in the UK and all data will be stored for at least a year by service providers. This will allow the police and intelligence officers to check what sites people have visited anytime and without a warrant.

This bill will bring Britain in to the “digital age” according to May, as it will make “provision for the retention of internet connection records (ICRs) in order for law enforcement to identify the communications service to which a device has connected. This will restore capabilities that have been lost as a result of changes in the way people communicate.”

May hopes to bring together all the powers already available to law enforcements and intelligence agencies to obtain communications. This will also allow the state to hack devices and run operations to sweep up large amounts of data through the internet. This is the exact activity that was uncovered by whistleblower Edward Snowden.

So other than keeping a log of everyones browser activities, what else can we expect from the controversial Spy Bill:

• A panel of judges will have the power to block spying operations
• It will be a criminal offence to “knowingly or recklessly obtaining communications data from a telecommunications operator without lawful authority”
• Local councils will retain some investigatory powers
• The Wilson doctrine - preventing surveillance of Parliamentarians' communications - to be written into law
• Journalistic sources can’t be accessed without authorisation of a judge
• UK companies will be expected to help agencies hack devices and acquire information

Some have hailed the bill as a necessity to protect against crime, but others have warned about the unforgivable intrusion on the UK citizens personal information. Where do you stand?