<story><title>Apple ordered to bypass auto-erase on San Bernadino shooter&apos;s iPhone</title><url>https://www.techdirt.com/articles/20160216/17393733617/no-judge-did-not-just-order-apple-to-break-encryption-san-bernardino-shooters-iphone-to-create-new-backdoor.shtml</url></story><parent_chain><item><author>gst</author><text>If you do this on purpose after asked to unlock your phone you will probably be charged with destruction of evidence or something like that.&lt;p&gt;However, while a court is (afaik) able to ask you to put your finger on the fingerprint reader, you do not need to tell them which of the fingers the correct one is. So instead of purposely using a wrong finger, I&amp;#x27;d ask the court to explicitly tell me which of my fingers I should use to unlock the phone.</text></item><item><author>ggreer</author><text>After five failed fingerprint attempts, your password is required to unlock the phone. That seems pretty safe to me. If you&amp;#x27;re ever ordered to unlock the phone, just touch an unregistered finger to it. Fingerprint sensors aren&amp;#x27;t foolproof. It&amp;#x27;d be hard to prove you deliberately sabotaged the effort.&lt;p&gt;Though, one feature I&amp;#x27;d like would be to register a distress fingerprint. Then I could touch say... my left index finger to require a password unlock.</text></item><item><author>randyrand</author><text>Even if touch id, it would be of no use. TouchID requires a password after 48 hours. or after the device resets.&lt;p&gt;Which is interesting. If you happen to use TouchID, is your best bet to hope a court will not be able to compel you to unlock it within 48 hours of arrest? That sounds very probable.</text></item><item><author>tptacek</author><text>Remember, this is an iPhone 5C, which doesn&amp;#x27;t have Touch ID or the Secure Enclave; the security model for this phone is significantly different from that of more recent iPhones.&lt;p&gt;On phones with a Secure Enclave, the wipe-on-failures state is managed in the coprocessor (which runs L4), and is not straightforwardly backdoor-able.&lt;p&gt;If you&amp;#x27;re worried about the police brute-forcing your phone, enable Touch ID and set a passcode that is approximately as complex as the one on your computer.</text></item></parent_chain><comment><author>azernik</author><text>I think the court would similarly consider that obstruction and contempt. If they tell you to unlock your phone and you try to play some &amp;quot;first you have to guess which finger&amp;#x27;s the right one!&amp;quot; game, the judge will slap you with either contempt of court or refusal to comply with a subpoena.</text></comment>
<story><title>Apple ordered to bypass auto-erase on San Bernadino shooter&apos;s iPhone</title><url>https://www.techdirt.com/articles/20160216/17393733617/no-judge-did-not-just-order-apple-to-break-encryption-san-bernardino-shooters-iphone-to-create-new-backdoor.shtml</url></story><parent_chain><item><author>gst</author><text>If you do this on purpose after asked to unlock your phone you will probably be charged with destruction of evidence or something like that.&lt;p&gt;However, while a court is (afaik) able to ask you to put your finger on the fingerprint reader, you do not need to tell them which of the fingers the correct one is. So instead of purposely using a wrong finger, I&amp;#x27;d ask the court to explicitly tell me which of my fingers I should use to unlock the phone.</text></item><item><author>ggreer</author><text>After five failed fingerprint attempts, your password is required to unlock the phone. That seems pretty safe to me. If you&amp;#x27;re ever ordered to unlock the phone, just touch an unregistered finger to it. Fingerprint sensors aren&amp;#x27;t foolproof. It&amp;#x27;d be hard to prove you deliberately sabotaged the effort.&lt;p&gt;Though, one feature I&amp;#x27;d like would be to register a distress fingerprint. Then I could touch say... my left index finger to require a password unlock.</text></item><item><author>randyrand</author><text>Even if touch id, it would be of no use. TouchID requires a password after 48 hours. or after the device resets.&lt;p&gt;Which is interesting. If you happen to use TouchID, is your best bet to hope a court will not be able to compel you to unlock it within 48 hours of arrest? That sounds very probable.</text></item><item><author>tptacek</author><text>Remember, this is an iPhone 5C, which doesn&amp;#x27;t have Touch ID or the Secure Enclave; the security model for this phone is significantly different from that of more recent iPhones.&lt;p&gt;On phones with a Secure Enclave, the wipe-on-failures state is managed in the coprocessor (which runs L4), and is not straightforwardly backdoor-able.&lt;p&gt;If you&amp;#x27;re worried about the police brute-forcing your phone, enable Touch ID and set a passcode that is approximately as complex as the one on your computer.</text></item></parent_chain><comment><author>giancarlostoro</author><text>You better hope they don&amp;#x27;t say the one that you designated to unlock your phone?</text></comment>