The FBI missed a trick to hack the San Bernardino iPhone
The FBI told Congress it couldn’t hack the San Bernardino shooter’s phone without Apple’s aid, but a researcher has proved that claim was inaccurate. “The process does not require any expensive and sophisticated equipment,” wrote University of Cambridge researcher Sergei Skorobogatov. “All needed parts are low cost and were obtained from local electronics distributors.”
Security firm Trail of Bits argued earlier this year that it would be possible to replace the iPhone firmware with a chip that doesn’t block multiple password attempts. You could then try every single one until you’re in, a process that would take less than a day with a four-digit code, and a few weeks with a six-digit one.
Despite government comments about feasibility of the NAND mirroring for iPhone 5c it was now proved to be fully working.
That’s not to say it didn’t require some know-how. It’s dead easy to brute-force a password using special devices that tap every single possible code. The problem is that the iPhone firmware blocks any attempts to enter more than four codes, and can wipe the entire phone after 10 failed attempts.
The FBI claimed that Trail of Bits’ system wouldn’t work, but Skorobogatov proved otherwise. Removing the NAND is the trickiest part — a thin-blade knife and temperature over 300 degrees Celcius (572 degrees F) is needed to loosen the epoxy holding the chip in place. Special care must be taken to not damage it permanently.
From there, he created an exact backup of the NAND’s virgin state and copied it to a special test board. After six password attempts (which sets off a one minute delay) the NAND backup is restored. That allows six fresh passwords to be tried every 90 seconds, so it takes about 40 hours to try all 1,667 combinations and crack a four-digit code.
Skorobogatov’s system is just a proof of concept, but it wouldn’t be difficult to build a fully automatic emulator that could reliably crack a passcode. “Despite government comments about feasibility of the NAND mirroring for iPhone 5c it was now proved to be fully working,” the paper says.
That again lends credence to FBI critics who said that the FBI was only pushing for Apple’s assistance to create a precedent in court. A magistrate judge ruled against Apple, so law enforcement could use that decision to make other companies cooperate in encryption cases. After withering criticism from Congress, however, it eventually dropped the case, saying it had figured out how to hack the iPhone itself. It’s now believed the FBI was aided by Israel’s Cellebrite, according to Tel Aviv daily Yedioth Ahronoth.
Researcher Matthew Green told Wired that the FBI may have had legitimate concerns about frying the NAND chip when removing it. However, Skorobogatov maintains that even an experienced iPhone repair tech could do what he did. “The more chips you de-solder, the more experienced you become,” he says. “If one researcher can accomplish this relatively quickly, I would think a team of FBI forensics experts with the right hardware and resources could do it even faster.”
Via: Matthew Green (Twitter)
Source: Arxiv
Netflix and Spike Lee are making a ‘She’s Gotta Have it’ series
Netflix has ordered 10 episodes of a series based on She’s Gotta Have It, Spike Lee’s 1986 independent film. Lee will direct each 30-minute show and serve as the executive produce with his wife and production partner, Tonya Lewis Lee. The movie, made in just 12 days for $175,000, was considered trailblazing for breaking cliche Hollywood representations of African-American culture. It also opened the door to black filmmakers like John Singleton, and put Brooklyn’s Fort Greene neighborhood on the map.
The film centers around Brooklyn artist Nola Darling and her three lovers, a culivated male model, an investment banker and sneaker seller Mars Blackmon, portrayed by Lee himself. “We are hyped that Netflix is onboard with this vision … we are getting an opportunity to revisit these memorable characters who will still be relevant and avant garde three decades later,” says Lee.
The series will be a “contemporary update” of the original, according to Netflix. The idea of doing a series based on the film actually came from partner Tonya Lewis Lee, Spike Lee says, and was originally developed for Showtime. He recently released a film in collaboration with Amazon, Chiraq.
Via: Variety
Source: Netflix
Samsung Addresses Note 7 Customer Concerns in Video Message Apology
Amid a global recall of its Galaxy Note 7 smartphones which have been identified as a potential fire hazard, Samsung has taken the unusual step of directly addressing customers in a video message posted on its website.
In the video, Samsung America president and COO Tim Baxter admits that “we did not meet the standard of excellence that you expect and deserve”.
Samsung America president and COO Tim Baxter addresses customers.
For that, we apologise, especially to those of you who were personally affected by this. To those of you who love the Note, the most loyal customers in our Samsung family, we appreciate your passion and your patience. We take seriously our responsibility to address your concerns about safety. And we work every day to earn back your trust, through a number of unprecedented actions and with the extraordinary support of our carrier partners, suppliers, and the United States Consumer Productions Safety Commission.
Here are the facts: the CPSC has worked closely with us to develop, expedite and execute a plan to protect American consumers. We notified them of a potential defect in the original Note 7 batteries and then issued a global directive to stop sales immediately. To date, we have already exchanged a 130,000 units – a fast and meaningful start. And with the CPSC’s partnership, we will continue implementing corrective steps to exchange every single Note 7 on the market.
To be clear, the Note 7 with the new battery is safe. The battery cell issue is resolved. And this finding has been affirmed by a recognized independent lithium-ion battery expert. To our Note 7 owners, if you have not yet replaced your original Note 7, please, please, power it down, and return it.
The video was timed to coincide with an official CPSC announcement of the recall that came on Thursday, which prohibits by U.S. federal law the sale of Note 7 handsets.
The directive comes 13 days after Samsung first acknowledged the magnitude of the problem and Consumer Reports urged the company to prevent all sales of the potentially dangerous phone, which has caused 55 recorded cases of property damage and 26 burn cases so far.
According to the Wall Street Journal, U.S. officials say that the company has “exacerbated the situation in the way it has communicated with regulators and consumers” by offering initially “conflicting information”. The video appears to be a response to that charge.
Samsung promises that replacement phones will be ready for exchange no later than next Wednesday, September 21.
Tag: Samsung
Discuss this article in our forums
When is The Grand Tour on TV and how can I watch it?
It’s been a year and a half since Jeremy Clarkson was sacked from Top Gear – well, since the BBC decided not to renew his contract to be more accurate – and we’ve been waiting almost that entire time to see what he and fellow ex-presenters Richard Hammond and James May could deliver next.
We’ve known for a fair while that they were snapped up by Amazon for an extraordinary amount of money to make an all-new car show, but solid details have been few and far between.
Now the on-air date for the first episode of The Grand Tour has been revealed, so here is our handy guide on when and where you can watch Clarkson, May and Hammond attempt to grind the BBC’s refreshed Top Gear into dust.
What is The Grand Tour?
The Grand Tour is the new car show featuring Jeremy Clarkson, James May and Richard Hammond. It differs from Top Gear in that it is being filmed in different locations around the world. The studio, which houses a live audience, is based in a large tent that visits different countries and cities. These include Johannesburg in South Africa and California. It is bound to visit the UK soon too.
There are features and larks that the presenters have been filming globally in 2016 and more about the content itself will be revealed in time.
When is The Grand Tour on TV?
The Grand Tour starts on Friday 18 November, with the first episode airing globally on that day. It will then continue over the following 11 weeks, with each new episode being aired on subsequent Fridays. There are 12 episodes in season one.
How can I watch The Grand Tour on my TV?
Sadly, as Amazon paid big bucks for the exclusive rights to The Grand Tour, you will only be able to watch the show on Amazon Video. You’ll also need a Prime subscription.
As there are applications for Amazon Video across a vast number of connected devices, including Smart TVs, set-top-boxes and mobile devices, you’ll be able to watch it in a number of ways – including when out and about.
Amazon Video also allows for offline viewing for the vast majority of its in-house programming, so we expect you’ll also be able to download the show to an iPad, say, and watch it when travelling.
There are currently no indications on whether Amazon plans to sell second screening rights to conventional broadcasters.
PlayStation platformer ‘Shu’ has Vita-exclusive goodies
Sony isn’t showing the PS Vita handheld any love, but indie developers sure are. The latest example is the 2.5D platformer Shu. “Shu feels right at home on the handheld and is a great experience, especially since it’s running at 60 FPS,” a post by developer Coatsink on the European PlayStation Blog reads. More than that, the Vita version will have some exclusive bits and bobs when the game comes out sometime later this year. Coatsink says that supporting the handheld is something that the team feels “very strongly about” and it’s been hard at work ensuring that the portable version isn’t a lazy port.
Which probably explains the lack of a firm release date. The game will release October 4th on PlayStation 4, and buying it for the home console will net you a free copy of it for Vita. Maybe one of those handheld-exclusive goodies will be an avatar modeled after Sony’s head of worldwide studios, Shuhei “Shu” Yoshida. It’d be fitting, no?
Source: PlayStation Blog (Europe)
Apple Removed HomeKit Support for Third-Generation Apple TV With iOS 10
Apple is quietly phasing out HomeKit hub support for the third-generation Apple TV, meaning users who update their iPhones and iPads with iOS 10 will not be able to use the remote access feature in the Home app unless they have a fourth-generation set-top box.
Since HomeKit’s announcement in 2014, iOS device owners running iOS 8.1 or later have been able to communicate with their third-generation Apple TV over iCloud remote access, which enables the set-top box to relay commands to HomeKit accessories when they’re away from home.
However, Apple has been confirming via its Twitter support account that once users update their devices to iOS 10, only a fourth-generation Apple TV or later is able to act as a HomeKit hub using the Home app to communicate remotely with the home automation platform. Apple has updated its support document on HomeKit remote access to reflect the change.
The news will no doubt come as a blow to owners of third-generation Apple TVs who use the feature, with the lack of HomeKit support in iOS 10 signaling another nail in the coffin for the older set-top box, which lacks native tvOS features like the App Store and Siri integration only available on the later model.
@lexgardner419 We want to help. iOS 10 & HomeKit hubs are now only compatible with AppleTv 4th Gen. Check this out: https://t.co/2DyWMh9Smz
— Apple Support (@AppleSupport) September 16, 2016
Apple’s staggered depreciation of the third-gen device was also reflected in news last week that the company is pulling the device from its retail stores, with staff instructed to remove any remaining models from store shelves.
On Tuesday, Apple released tvOS 10 for the fourth-gen Apple TV, which added Siri support for managing HomeKit accessories, the ability to control HomeKit using third-party apps, and a whole host of other new features.
Related Roundups: Apple TV, tvOS 10, iOS 10
Buyer’s Guide: Apple TV (Neutral)
Discuss this article in our forums
Fess up: Who’s buying an iPhone 7 today?
Spend a night in the rain to buy a smaller version of the phone you actually wanted.
For Android people, today is Friday — a good day, to be sure. Elsewhere though, it’s iPhone launch day, a magical, revolutionary time that (usually) comes just once a year. It’s the time of year when people camp outside a glowing retail cuboid only to be told the phone they actually want is out of stock. That’s right: today is the first day actual humans, as opposed to weirdo tech bloggers, can get their hands on the iPhone 7 and 7 Plus.
The controversy this time around is that the popular iPhone 7 Plus has sold out completely, meaning you’re SOL if you’d been hoping to sacrifice your dignity in an Apple Store line in exchange for a day-one purchase of Apple’s 5.5-incher. Similarly the scratch- micro-abrasion-prone Jet Black finish isn’t available in either size — back-ordered to sometime in the mid-2050s — so you’ll have to settle for matte black like a damned caveman. (Unless for some reason you’re buying silver, gold or pink, in which congrats — case your new iPhone looks basically the same as your old one.)
Something something something headphone jack.
Anyway.
We’re not here to judge. In fact, some of us on the AC team have iPhones on the way too — makes sense to have ’em around to compare to the latest and greatest Android stuff. And all snark aside, the new iPhones have some legitimately exciting features, like the 7 Plus’s telephoto camera, water resistance (still way too rare among Android flagships, outside of Samsung’s lineup), and the option of a ridiculous 256GB of storage.
So if you’re dropping some cash on an iPhone today, be sure to let us know. Which model (and color) did you go for? Will it be your daily driver, or a secondary device? And which Android phone will you be parting ways with?
Go on — join us in the comments. All it takes is a little #courage.
Amazon’s ‘The Grand Tour’ car show launches November 18th
If you’ve been missing Jeremy Clarkson, Richard Hammond and James May, then it’s time to mark your calendar. The old Top Gear trio’s new show is called The Grand Tour, and will begin streaming its episodes on November 18th. You’ll need a subscription to Amazon Prime to watch, but there’s no word on if or where it will air in countries where the subscription video service isn’t available yet.
The Grand Tour’s new episodes will appear every Friday, and all three hosts are signed on for three seasons. A date reveal/teaser trailer asks “What could go wrong?,” and while the trio’s exit from Top Gear after Clarkson punched a producer provides a possible answer, we hope things work out better this time (and, better than they have so far for their replacements on Top Gear).
Source: Amazon
Scan photos into Office 365 with Office Lens on Windows 10
Microsoft’s Office Lens app has let folks upload photos from their iOS and Android devices since April 2015. But now your Windows 10-running phone, tablet, PC can snap photos — or even the Hololens, if that’s your thing.
With integration in the latest Windows OS, though, they’ve also added support for Office 365 if your business or personal accounts use that instead. It’s still got all the optical character recognition you’ve enjoyed with OneNote since 2013, meaning the text and figures are searchable once you’ve uploaded the images to OneDrive.
Source: Office blog
Tesla: Mobileye tried to stop our in-house chip development
Tesla and former pal Mobileye aren’t quite done airing controversial statements against each other. After the company behind Autopilot’s image recognition hardware said it severed its ties with the automaker because it was “pushing the envelope in terms of safety,” Tesla fired back with its own feisty response. A company spokesperson told Reuters that Mobileye wasn’t happy when it learned that Tesla decided to work on its own vision chips for Autopilot. She said Mobileye “attempted to force Tesla to discontinue this development, pay them more and use their products in future hardware.”
Mobileye and Tesla parted ways following the fatal Model S crash in Florida that put the carmaker’s Autopilot feature in hot water. The exchange of words started after that — Musk’s company once said that its ex-partner couldn’t keep up with its rate of innovation.
Besides revealing that Mobileye tried to dissuade Tesla from developing its own chips, the spokesperson also said that the other company started talking about safety concerns only after the EV manufacturer refused to give in:
“When Tesla refused to cancel its own vision development activities and plans for deployment, Mobileye discontinued hardware support for future platforms and released public statements implying that this discontinuance was motivated by safety concerns.”
Source: Reuters
