The EFF's Andrew Crocker suggests that the "Vulnerabilities Equities Process" (the result of a previous EFF lawsuit) might legally require them to reveal how it

The EFF's Andrew Crocker suggests that the "Vulnerabilities Equities Process" (the result of a previous EFF lawsuit) might legally require them to reveal how it was done: https://www.eff.org/deeplinks/2016/03/fbi-breaks-iphone-and-we-have-some-questions https://www.eff.org/deeplinks/2016/03/fbi-breaks-iphone-and-... Regardless of the legal requirement, others (and likely Crocker) don't think that this is that likely to happen, though.