pres candidate john mcafee. says can hack san bernardino attackers iphone in 3 weeks

[hater]

:wow bad ass modafuka

McAfee founder is running for president as a libertarian.

Says FBI's request to a judge to force apple to open up iPhones is not only gay as shit, but the beginning of the end for the USA :wow

He says his team of hackers can hack the san Bernardino iPhone in less than 3 weeks or else he will eat his own shoe in live television. On Neil Cavutos show :lmao

What a pimp! Fi ally talking truth

:lmao FBI :lol

:lol NSA

:lmao US military. They have 10,000 hackers on board while Chinese army has 100,000 full time hackers :lmao

[hater]

:lol FBI

Federal bureau of sucking dick :lol

"we can't do it" :cry "judge tell them to do it foe us" :cry

Pathetic sons of whores

[ChumpDumper]

http://cdni.wired.co.uk/620x413/k_n/McAfee.jpglol

[hater]

What a bad ass mofo.

Btw go to mcafee16.com

And click on any link. You get a 404 page :lol

[ChumpDumper]

His "team" should hack an iPhone and show them doing it with "social engineering."

[ElNono]

The real trick is the fused device UID. No amount of social engineering will get you that though. You certainly can get it off the CPU. Companies like chipworks can do it, I'm pretty sure the NSA and the FBI can too.

But that's not the point of this whole thing. What the FBI wants is a court precedent. They're not used to be told 'no' when there's a court order.

[ElNono]

You can read the entire security guide here, btw... it's not secret or anything like that... that's what's good about strong crypto:

http://www.apple.com/business/docs/iOS_Security_Guide.pdf

[boutons_deux]

They haven't asked Apple to crack the phone, but to remove the 10-bad-login-then-erase-phone protection, so the Feds could brute force the password.

[ElNono]

The haven't asked Apple to crack the phone, but to remove the 10-bad-login-then-erase-phone protection, so the Feds could brute force the password.

That's what Apple would need to do too though. Apple doesn't store the devices UIDs...

[Splits]

That's what Apple would need to do too though. Apple doesn't store the devices UIDs...

Bend over, I'll give you a fuckin' UID

[ElNono]

Bend over, I'll give you a fuckin' UID

Tim Cook might take you up on that offer :lol

[Winehole23]

apparently he has before:


Apple CEO Tim Cook declared on Wednesday that his company wouldn’t comply with a government search warrant (https://www.apple.com/customer-letter/) to unlock an iPhone used by one of the San Bernardino (http://www.thedailybeast.com/content/dailybeast/articles/2015/12/16/was-the-san-bernardino-massacre-really-isis-inspired-the-fbi-chief-just-called-that-into-question.html) killers, a significant escalation in a long-running debate between technology companies and the government over access to people’s electronically-stored private information.


But in a similar case in New York last year, Apple acknowledged that it could extract such data if it wanted to. And according to prosecutors in that case, Apple has unlocked phones for authorities at least 70 times since 2008. (Apple doesn’t dispute this figure.)



In other words, Apple’s stance in the San Bernardino case may not be quite the principled defense that Cook claims it is (http://www.thedailybeast.com/articles/2015/07/04/why-consumers-should-care-about-apple-s-war-on-big-data.html). In fact, it may have as much to do with public relations as it does with warding off what Cook called “an unprecedented step which threatens the security of our customers.”


http://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.htmlhttp://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.html

[boutons_deux]

apparently he has before:

http://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.htmlhttp://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.html

"since 2008"?

iOS 8, released in Sep '14, greatly increased encryption, so 08 to 14 encryption was weaker.

If the terrorists had an iOS8 or later, perhaps the encryption really isn't breakable by Apple.

http://arstechnica.com/apple/2014/09/apple-expands-data-encryption-under-ios-8-making-handover-to-cops-moot/

[hater]

McAfee does make a great point though. The US is far behind in cyber war fare because they won't hire the best hackers who might be weed smoking facial tattooed, pierced misfits. They only hire career IT technicians that would rather be at home collecting their federal retirement. Pathetic

USA is willing to hire jihadist terrorists to do their fighting for them but they wont hire a punk elite hacker??

Pathetic

[Sportcamper]

I don’t understand why the Feds have not ASKED the private sector for help a month ago?

[hater]

They are probably embarrassed :lmao pathetic animals

[hater]

Btw I am just getting back into Unix and holy shit how much more efficient it is than Windows or Crapple :wow

You can get shit accomplished in seconds what it takes ages under a UI OS and most of your time you are waiting for the hourglass to go away :lol


Are elite hackers still using Unix tbh????

[MultiTroll]

apparently he has before:

http://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.htmlhttp://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.html
Page Not FoundOops! That page doesn't exist!Did Apple get a court order to force them to take it down? :lol

[MultiTroll]

http://www.thedailybeast.com/articles/2016/02/17/apple-unlocked-iphones-for-the-feds-70-times-before.html

[Winehole23]

Schneier: "this is what a backdoor looks like"


Earlier this week, a federal magistrate ordered Apple (https://www.washingtonpost.com/world/national-security/us-wants-apple-to-help-unlock-iphone-used-by-san-bernardino-shooter/2016/02/16/69b903ee-d4d9-11e5-9823-02b905009f99_story.html) to assist the FBI in hacking into the iPhone used by one of the San Bernardino shooters. Apple will fight (https://www.apple.com/customer-letter/) this order in court.


The policy implications are complicated. The FBI wants to set a precedent that tech companies will assist law enforcement in breaking their users' security, and the technology community is afraid that the precedent (https://www.eff.org/deeplinks/2016/02/eff-support-apple-encryption-battle) will limit what sorts of security features it can offer customers. The FBI sees this as a privacy vs. security debate, while the tech community sees it as a security vs. surveillance debate.


The technology considerations are more straightforward, and shine a light on the policy questions.


The iPhone 5c in question is encrypted. This means that someone without the key cannot get at the data. This is a good security feature. Your phone is a very intimate device. It is likely that you use it for private text conversations, and that it's connected to your bank accounts. Location data reveals where you've been, and correlating multiple phones reveal who you associate with. Encryption protects your phone if it's stolen by criminals. Encryption protects the phones of dissidents around the world if they're taken by local police. It protects all the data on your phone, and the apps that increasingly control the world around you.


This encryption depends on the user choosing a secure password, of course. If you had an older iPhone, you probably just used the default four-digit password. That's only 10,000 possible passwords, making it pretty easy to guess. If the user enabled the more-secure alphanumeric password, that means a harder-to-guess password.


Apple added two more security features on the iPhone. First, a phone could be configured to erase the data after too many incorrect password guesses. And it enforced a delay between password guesses. This delay isn't really noticeable by the user if you type the wrong password and then have to retype the correct password, but it's a large barrier for anyone trying to guess password after password in a brute-force attempt to break into the phone


But that iPhone has a security flaw (https://blog.trailofbits.com/2016/02/17/apple-can-comply-with-the-fbi-court-order/). While the data is encrypted, the software controlling the phone is not. This means that someone can create a hacked version of the software and install it on the phone without the consent of the phone's owner and without knowing the encryption key. This is what the FBI * and now the court * is demanding Apple do: It wants Apple to rewrite the phone's software to make it possible to guess possible passwords quickly and automatically.


The FBI's demands are specific to one phone, which might make its request seem reasonable if you don't consider the technological implications: Authorities have the phone in their lawful possession, and they only need help seeing what's on it in case it can tell them something about how the San Bernardino shooters operated. But the hacked software the court and the FBI wants Apple to provide would be general. It would work on any phone of the same model. It has to.


Make no mistake; this is what a backdoor looks like. This is an existing vulnerability in iPhone security that could be exploited by anyone.

https://www.schneier.com/blog/archives/2016/02/decrypting_an_i.html

[hater]

This is not rally a vulnerability tied to apple. All phones, or all computing devices for that matter can be hacked by installing hacked or jailbroken versions of the firmware and OS.

Usually its very hard to create these hacked OS versions thats why probably FBI is asking apple. Niggas are pathetic.

im pretty sure china has hacked versions of every phone out there. This is the difference between USA pathetic IT resources compared to china or Russia for that matter

[hater]

Btw it blows my mind that FBI is still trying trying to get at the data by going through the stock OS. Thats basically the first step a college grad would take to get in a phone :lmao fucking primitive :lol

cant they build a hacked phone and physically move the storage units from that phone to it??? And then try brute force algos??? Are they really this retarded?

[spurraider21]

:lmao hater

John McAfee better prepare to eat a shoe because he doesn’t know how iPhones work (http://arstechnica.com/security/2016/03/john-mcafee-better-prepare-to-eat-a-shoe-because-he-doesnt-know-how-iphones-work/)

[Nbadan]

cant they build a hacked phone and physically move the storage units from that phone to it??? And then try brute force algos??? Are they really this retarded?

No...and yes....the info is wired into the hardware...

[ElNono]

Btw it blows my mind that FBI is still trying trying to get at the data by going through the stock OS. Thats basically the first step a college grad would take to get in a phone :lmao fucking primitive :lol

cant they build a hacked phone and physically move the storage units from that phone to it??? And then try brute force algos??? Are they really this retarded?

That's how it's designed. The "pin" they're trying to hack is hashed, then encrypted with an AES key that's fused into the CPU at first run, and that Apple doesn't have and the OS can't read out.

The two options are:
1) Run all combinations of the pins until it unlocks on the actual device (with the caveat that the OS slows down attempts after a certain number of incorrect guesses and/or deletes the data after a certain number of incorrect guesses)
2) Extract the key by other means (costly, time consuming, likely destroys the chip in the process and it's not 100% foolproof).

Pretty sure the FBI already imaged the encrypted flash. They could even prevent the data erasure with a hardware flash sim or locking up the chip. The slowdown though has to be worked around from the OS.

I'm also pretty sure they can do 2), but it's costly, time consuming and because it doesn't always yield results, not the preferred route, especially if they can get a court to order Apple to write what basically amounts to a bootable shell that gives them unfettered access to the hardware AES engine (which uses the fused key).

[hater]

Well my respects to apple tbh. I might have to get an iPhone if that's the case :lol

I am pretty sure my windows phone is the same way. I learned the hard way :lol Wonder if chingsung phones also?

My point is why they can't completely separate the storage unit from the rest and plug it in to a device that will try different combinations. Basically a modern Touring machine that would try to hack nazi codes.

Sure it would take time. But welcome to encryption 101.,this shit has been existing for decades. It's nothing new.

Crazy that the FUckBI makes it seem apple invented encryption :lol dumb assses :lol

[hater]

FBI's latest quote: "the door is there, we just want apple to remove the ferocious dog that is guarding ot"

:lol they literally said that

Might as well go like the guy in menace to society and say "I'll suck yo diiiick...."

[baseline bum]

LOL how does McAfee not know what a fucking hash function is? :lol

[pgardn]

That's how it's designed. The "pin" they're trying to hack is hashed, then encrypted with an AES key that's fused into the CPU at first run, and that Apple doesn't have and the OS can't read out.

The two options are:
1) Run all combinations of the pins until it unlocks on the actual device (with the caveat that the OS slows down attempts after a certain number of incorrect guesses and/or deletes the data after a certain number of incorrect guesses)
2) Extract the key by other means (costly, time consuming, likely destroys the chip in the process and it's not 100% foolproof).

Pretty sure the FBI already imaged the encrypted flash. They could even prevent the data erasure with a hardware flash sim or locking up the chip. The slowdown though has to be worked around from the OS.

I'm also pretty sure they can do 2), but it's costly, time consuming and because it doesn't always yield results, not the preferred route, especially if they can get a court to order Apple to write what basically amounts to a bootable shell that gives them unfettered access to the hardware AES engine (which uses the fused key).

The OP does not care.

He wants someone to be a badass.

"Shits getting real, China is sending warships to Syria. Badass Putin will have this cleared up quickly. "

Hater enjoys comic book characters and special powers.

[boutons_deux]

FBI Admits It Urged Change Of Apple ID Password For Terrorist’s iPhone

The Apple ID password linked to the iPhone belonging to one of the San Bernardino terrorists was changed soon after the government took possession of the device, Apple, San Bernardino County, and federal officials have acknowledged over the past 48 hours.

If that password change hadn’t happened, senior Apple executives said on Friday afternoon, a backup of the information the government was seeking may have been accessible.

http://www.buzzfeed.com/johnpaczkowski/apple-terrorists-appleid-passcode-changed-in-government-cust#.xa08POB9A

[ElNono]

"As shown above, even with a supercomputer, it would take 1 billion billion years to crack the 128-bit AES key using brute force attack. This is more than the age of the universe (13.75 billion years)."

http://www.eetimes.com/document.asp?doc_id=1279619

The CPU UID key is a 256-bit AES key. That's double of the above.

The "storage unit" (flash) is always encrypted with a random 256-bit AES key, even when there's no pin. When there's no pin, that "storage AES key" is written out on the flash and readily readable off it.

When there's a pin, the pin is hashed and encrypted with the CPU UID key, then that is used as a key to encrypt the "storage AES key" which is then stored in the flash.

It's a clever design, because it allows:
1) Change the pin anytime without having to decrypt and re-encrypt the storage
2) A full device erase can be done immediately by simply generating a new "storage EAS key" (changing just 256 bits, 32 bytes, wipes the device).
3) Brute forcing a pin can only be done in-device (unless the CPU UID is extracted by other means)

Obviously Apple didn't invent this, but arguably they did make it massively popular due to their phones using it.

Only recently Google has started to have devices with secure boot chains, but the fact you can root almost any phone makes it difficult to know which one has backdoors or not.

[hater]

Well they said nazi codes would never be broken. IMO breaking it just takes intellect and time. Too bad the FBI does not have either. Especially the intellect :lol

[ElNono]

With the advent of computers, it's a mathematical question now. Funnily though, AES (https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) is the encryption standard NIST picked in 2001 to secure all federal government information after a 5 year competition... and the only cipher ever approved by the NSA to transmit TOP SECRET data.

[ChumpDumper]

Well they said nazi codes would never be broken. IMO breaking it just takes intellect and time. Too bad the FBI does not have either. Especially the intellect :lolSo how many iPhones has McAfee unlocked so far?

Should be an expert by now.

[hater]

No need to attack the storage unit itself. I would make an exact replica at the molecular level using infrared, molecular microscopes and a 3d printer.

Then its all zeros and ones.

[pgardn]

No need to attack the storage unit itself. I would make an exact replica at the molecular level using infrared, molecular microscopes and a 3d printer.

Then its all zeros and ones.

Exact replica at the molecular level using a 3D printer?

What? Please explain?

You have invented a 3D printer that can reproduce molecules exactly?
Where did you get this from, something has been lost in translation?

[hater]

Btw it blows my mind that FBI is still trying trying to get at the data by going through the stock OS. Thats basically the first step a college grad would take to get in a phone :lmao fucking primitive :lol

cant they build a hacked phone and physically move the storage units from that phone to it??? And then try brute force algos??? Are they really this retarded?

:lmao I was fucking right. Experts have basically now described what I did in this post weeks ago :lol

I should be in charge of an IT mega company and not a cartel TBQH :lol

Over a video link appearance at Blueprint for a Great Democracy conference on Tuesday, Snowden took Apple’s side.

“That's Horse shit! The FBI says Apple has the ‘exclusive technical means’ to unlock the phone,” Snowden told the audience from Moscow. “Respectfully, that’s horse sh*t.”

Snowden later tweeted a link to an American Civil Liberties Union blog post titled “One of the FBI’s Major Claims in the iPhone Case Is Fraudulent,” which argues that the government doesn’t actually need Apple’s help to bypass the “auto-erase” feature on the iPhone in question.

"This sentiment echoes that of many tech experts, as well as some lawmakers.

At a hearing last week, Representative Darrell Issa, a California Republican who made his fortune in electronic car alarms, asked FBI Director James Comey if he considered the possibility of creating enough copies of the phone’s data to try hundreds of passwords. Apple likely wouldn’t have objected to this simple method, and the FBI couldn’t answer why they didn’t consider it."

[ElNono]

Pretty sure the FBI already imaged the encrypted flash. They could even prevent the data erasure with a hardware flash sim or locking up the chip. The slowdown though has to be worked around from the OS.

Already pointed out here... they still need to run the brute force on the device... which would take some time for 9999 passwords, but could be done.

Again, this has nothing to do with this particular phone, the FBI simply wants a court precedent...

[hater]

Already pointed out here... they still need to run the brute force on the device... which would take some time for 9999 passwords, but could be done.

Again, this has nothing to do with this particular phone, the FBI simply wants a court precedent...

yup my point is you can copy the data many hundreds or thousand times over and run parallel algos. cut down time immensely. Especially if you run smart algos that will try the most likely passwords first. (dates, addresses, etc)

[ElNono]

yup my point is you can copy the data many hundreds or thousand times over and run parallel algos. cut down time immensely. Especially if you run smart algos that will try the most likely passwords.

Nah, you can't do that in this case. You have to run it on the device. The device will:

- Let you try 3 codes
- Wait one minute
- Let you try 2 codes
- Wait 5 minutes
- Let you try 1 code
- Wait 10 minutes
- Let you try 1 code
- Wait 15 minutes
- Let you try 1 code
- Wait 30 minutes
- Let you try 1 code
- Wait 60 minutes
- Let you try 1 code
- Erase

When it erases, they can either block the erase or reflash the image back and continue going through it.

Basically, that allows you to test 10 codes every 2 hours. That's 5 codes an hour, or for the entire 10000 codes range = 2000 hours = 83 days (worst case)

In a nutshell, they probably already have this device unlocked by now. The fact they could do this was never a question, but what they really want isn't just access to this device, but a court precedent so they can access the devices much quicker and at will.

Also of note is that while this particular device has a 4 number pin, iPhones now allow you to enter 6 or even any size codes, which makes this impracticable going forward.

Trying to crack the AES256 key outside the device takes a couple billion years, even with parallel computers.

[ChumpDumper]

lol hater

[ElNono]

You could even accelerate the process by reflashing and rebooting before the 60 min wait period... probably can cut down the time needed in half...

[hater]

Nah, you can't do that in this case. You have to run it on the device. The device will:

- Let you try 3 codes
- Wait one minute
- Let you try 2 codes
- Wait 5 minutes
- Let you try 1 code
- Wait 10 minutes
- Let you try 1 code
- Wait 15 minutes
- Let you try 1 code
- Wait 30 minutes
- Let you try 1 code
- Wait 60 minutes
- Let you try 1 code
- Erase

When it erases, they can either block the erase or reflash the image back and continue going through it.

Basically, that allows you to test 10 codes every 2 hours. That's 5 codes an hour, or for the entire 10000 codes range = 2000 hours = 83 days (worst case)

In a nutshell, they probably already have this device unlocked by now. The fact they could do this was never a question, but what they really want isn't just access to this device, but a court precedent so they can access the devices much quicker and at will.

Also of note is that while this particular device has a 4 number pin, iPhones now allow you to enter 6 or even any size codes, which makes this impracticable going forward.

Trying to crack the AES256 key outside the device takes a couple billion years, even with parallel computers.

that's the point. you don't run it on the device.

[ElNono]

that's the point. you don't run it on the device.

Can't do that*. What you can do is avoid the auto-erase, which is what Snowden was pointing out. The CPU holds the key.

*(you only can if you can extract the key from the CPU, but that could destroy the key in the process, or if you take a couple billion years to try to crack the 256 bit key, which is impractical as there's a quicker way).

But in this particular case, hacking it on the device, even with the delay, is not insurmountable or even really that bad. The suspect is dead, there's no ticking time bomb.

[ChumpDumper]

lol hater

[MultiTroll]

He says his team of hackers can hack the san Bernardino iPhone in less than 3 weeks or else he will eat his own shoe in live television. On Neil Cavutos show :lmao
Has pussy assed Apple commented?
FBI?

[hater]

Can't do that*. What you can do is avoid the auto-erase, which is what Snowden was pointing out. The CPU holds the key.

*(you only can if you can extract the key from the CPU, but that could destroy the key in the process, or if you take a couple billion years to try to crack the 256 bit key, which is impractical as there's a quicker way).

But in this particular case, hacking it on the device, even with the delay, is not insurmountable or even really that bad. The suspect is dead, there's no ticking time bomb.

I still believe you can.

And even if you try onto the CPU, you can adjust electromagnetic forces on the CPU to adjust its clock to whatever speed you want. You could speed up the delay to a second or 2

[pgardn]

Exact replica at the molecular level using a 3D printer?

What? Please explain?

You have invented a 3D printer that can reproduce molecules exactly?
Where did you get this from, something has been lost in translation?

You are always making crazy shit up without understanding.

You are a superhero worshipper.
If something appears fantastic it must be.

[DisAsTerBot]

lmao hater. thread backfire

[ElNono]

lol @ electromagnetic overclocking...

it's not uncommon to hear peeps talk about magical pixie dust that's gonna undo math or the laws of physics though, the unknown always bring creativity, especially if mixed in with a joint, or in mcafee's case prescription drugs and alcohol, tbh...

[hater]

lol @ electromagnetic overclocking...

it's not uncommon to hear peeps talk about magical pixie dust that's gonna undo math or the laws of physics though, the unknown always bring creativity, especially if mixed in with a joint, or in mcafee's case prescription drugs and alcohol, tbh...

Ever heard of over clocking or under clocking CPUs?? Lol

IT CAN BE DONE

[ElNono]

:lmao yeah, ok

[ChumpDumper]

lol hater

[MultiTroll]

OP by hater
He says his team of hackers can hack the san Bernardino iPhone in less than 3 weeks or else he will eat his own shoe in live television. On Neil Cavutos show :lmao



lol @ electromagnetic overclocking...

it's not uncommon to hear peeps talk about magical pixie dust that's gonna undo math or the laws of physics though, the unknown always bring creativity, especially if mixed in with a joint, or in mcafee's case prescription drugs and alcohol, tbh...

Any chance McAfee could be contractually obligated in a shoe deal?