[Cryptography] the consequences of changing the password on your AppleID

[Paul Ferguson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 2/20/2016 4:07 PM, Mark Seiden wrote:

> so now we discover that if you have an unchanged password on your 
> AppleID and you log on from a known network (known to the phone) 
> the phone will then automatically back up to the Apple Cloud and
> that backup will contain the current content of the phone.
> 
> But some clod at San Bernadino County changed the password for 
> Farook's AppleID (somehow without knowing the old password) 12
> hours after the phone was recovered by the government.
> 
> So why doesn't Apple just go to its backups and restore the hash of
> the old password and the timestamp of the last password reset?
> and then the government can force a backup which Apple can
> provide?

Most likely because the FBI and the DoJ probably want to establish a
precedent here which can be leveraged in the future.

- - ferg

> 
> Problem solved, End of World Averted, Peace and Harmony in the 
> iphone world again (except now we all know Apple is still a trusted
> party in this entire ecosystem).
> 
> _______________________________________________ The cryptography
> mailing list cryptography at metzdowd.com 
> http://www.metzdowd.com/mailman/listinfo/cryptography
> 


- -- 
Paul Ferguson
PGP Public Key ID: 0x54DC85B2
Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iF4EAREIAAYFAlbJClIACgkQKJasdVTchbKqFQEArwRlT11ftrvPjgHnfmRtSe4n
CUVCj37AiMSAIro/s4wA/2AKHBvK9FtWZjBq395jWq9Fp2FseOBy61RRtFRuypcP
=G9WI
-----END PGP SIGNATURE-----