Apple CEO Time Cook: "We have no sympathy for terrorists...But now the govement has asked us for something we simply do not have, and something we consider too dangerous to create."
James Martin/CNET
There might have been an easier way.
According to senior Apple executives on Friday, the FBI might have been able to obtain data from an iPhone 5C belonging to Syed Farook, one of the San Beardino terrorists, by connecting it to a familiar Wi-Fi network and having it create a new backup on Apple's iCloud service.
The idea was foiled, the executives say, because the password to the terrorist's iCloud account was reset shortly after the FBI took possession of the phone. That meant iCloud and the iPhone couldn't recognize each other, the executives said.
The password reset is the newest wrinkle in the stand-off between the govement and Apple, which received a court order this week compelling it to create a custom version of its iOS operating system that bypasses security features on the iPhone. Apple rejected the order, saying it will fight the govement's request -- all the way to the Supreme Court, if necessary.
Apple has already provided the FBI with access to Farook's iCloud backups through mid-October, when he apparently stopped backing up his phone to iCloud servers. The data left on the phone is encrypted with 256-bit AES security, the same standard used to protect US govement computers.
One of the FBI's key arguments for forcing Apple to unlock the phone is that agents believed Farook intentionally stopped backing up his work phone to Apple's iCloud service to keep some information secret, according to the Feb. 16, 40-page Department of Justice request that led to the court order.
In January, while assisting the FBI and the Department of Justice with the ongoing investigation, Apple engineers suggested a simpler idea than bypassing the iPhone's passcode security. They recommended that the iPhone be connected to a known Wi-Fi network such as Farook's home or workplace and plug into a power source so it could automatically create a new iCloud backup oveight. If successful, that backup might have contained the missing information between the October backup and December 2, when the San Beardino massacre occurred.
It wasn't clear whether the auto-backup idea would work, but the FBI never got the chance to try, Apple said.
The FBI didn't respond to a request for comment. But the FBI told CBS News on Friday that someone with San Beardino County (Farook's employer, which actually owned the phone) remotely reset the password on Farook's account in the hours after the attack.
According to senior Apple executives, the password reset meant that someone would need to log in to the phone and enter the new password before it could sync with Apple's iCloud servers again. That wouldn't be possible without knowing Farood's iPhone passcode, which is the very thing that the FBI hopes to obtain by compelling Apple to modify its software and bypass its own security features.
In the court order, a federal judge offered Apple the ability to use "an alteate technological means" to provide the FBI with access to Farook's iPhone data, if one existed. According to Apple, the auto-backup scheme was the best idea to date.
On Tuesday, Apple CEO Tim Cook said company engineers had been advising the FBI and cooperating with the investigation, but that the call to rewrite iOS would create a "backdoor" into the iPhone that hackers and malicious govements could use to undermine privacy and security for all iPhone users.
"We have no sympathy for terrorists," Cook wrote in an open letter to customers explaining Apple's decision to challenge the court's order. "But now the govement has asked us for something we simply do not have, and something we consider too dangerous to create."