3 ms·

This is the USA's information[1], it's interesting to see the number of account requests increased from ~5k to almost ~8k accounts, and this is for 2019. Given

This is the USA's information[1], it's interesting to see the number of account requests increased from ~5k to almost ~8k accounts, and this is for 2019. Given the mass protects and how much phone live streaming was involved NEXT years report will be truly revealing. It's possible it wont jump all that much as when arrested many protestors had their phones at least temporarily siezed, and the Grayshift[2] boxes law enforcement have probably don't need Apple's involvement. [1] https://www.apple.com/legal/transparency/us.html https://www.apple.com/legal/transparency/us.html [2] https://en.wikipedia.org/wiki/Grayshift https://en.wikipedia.org/wiki/Grayshift

cybralx 6y ago
There are other tools available as well to collect 'cloud' data. Such as Magnet AXIOM Cloud[1] and Cellebrite UFED Cloud[2]. These still require legal process in most cases. [1] https://www.magnetforensics.com/products/magnet-axiom/cloud/ https://www.magnetforensics.com/products/magnet-axiom/cloud/ [2] https://www.cellebrite.com/en/ufed-cloud/ https://www.cellebrite.com/en/ufed-cloud/
Pryde 6y ago
Is there anywhere you know of with more details regarding those Grayshift boxes, or do we not publicly know much about them?
- thewebcount 6y ago
  I don't know anything about Grayshift boxes, but you can pair-lock your iPhone so it can't be accessed by devices that connect to it physically.[0] Note that there are some downsides like not being able to restore from a backup from a date before you pair-locked the device, and only being able to backup and restore from that device. (Better hope it never dies!) But if you've got a burner phone you don't want authorities to be able to get into (unless they take the device it's locked to, as well), it's a workable solution. [0]https://www.zdziarski.com/blog/?p=2589 https://www.zdziarski.com/blog/?p=2589
sneak 6y ago
See also: https://www.schneier.com/blog/archives/2020/10/new-report-on-police-decryption-capabilities.html https://www.schneier.com/blog/archives/2020/10/new-report-on... > Based on 110 public records requests to state and local law enforcement agencies across the country, our research documents more than 2,000 agencies that have purchased these tools, in all 50 states and the District of Columbia. We found that state and local law enforcement agencies have performed hundreds of thousands of cellphone extractions since 2015, often without a warrant.
- marricks 6y ago
  Oh cool, that's way worse than I thought it'd be in 2015. No doubt it's gotten way worse since then.
_jal 6y ago
This is why I am, for once, glad for the massive ewaste disaster that is old cell phones. They are perfect for protests. If you are not coordinating or worried about realtime Twitter, but instead documenting, you don't even need a cheapo prepaid SIM. Wipe them first, and don't leave them anything other than pictures of their own abusive behavior for them to find, unless you'd also like to gift them a copy of the Constitution or perhaps some personal musings on the role of policing in modern culture.
- AnthonyMouse 6y ago
  You don't actually need the ewaste disaster to have cheap old cellphones. You can get a 64-bit PC on eBay shipped to you for <$50. 10+ years old but will still run the latest Windows or Linux. If phones worked like this, people would keep them for many more years, but there would still be more than enough 10+ year old phones available for a close approximation to the shipping cost. It would also mean that the older phones would go to poor countries that could still use them instead of being slag, because "slow but runs current software" is usable whereas "not even old enough to be slow but can't run current software" means you can't use the thing because websites will throw certificate errors from missing roots, apps won't run on it and it will be full of known vulnerabilities and get malware.
- Thorrez 6y ago
  Why are old phones better than new ones? Is it simply because they're cheaper?

cybralx 6y ago

There are other tools available as well to collect 'cloud' data. Such as Magnet AXIOM Cloud[1] and Cellebrite UFED Cloud[2]. These still require legal process in most cases. [1] https://www.magnetforensics.com/products/magnet-axiom/cloud/ https://www.magnetforensics.com/products/magnet-axiom/cloud/ [2] https://www.cellebrite.com/en/ufed-cloud/ https://www.cellebrite.com/en/ufed-cloud/

Pryde 6y ago

Is there anywhere you know of with more details regarding those Grayshift boxes, or do we not publicly know much about them?

thewebcount 6y ago
I don't know anything about Grayshift boxes, but you can pair-lock your iPhone so it can't be accessed by devices that connect to it physically.[0] Note that there are some downsides like not being able to restore from a backup from a date before you pair-locked the device, and only being able to backup and restore from that device. (Better hope it never dies!) But if you've got a burner phone you don't want authorities to be able to get into (unless they take the device it's locked to, as well), it's a workable solution. [0]https://www.zdziarski.com/blog/?p=2589 https://www.zdziarski.com/blog/?p=2589

sneak 6y ago

See also: https://www.schneier.com/blog/archives/2020/10/new-report-on-police-decryption-capabilities.html https://www.schneier.com/blog/archives/2020/10/new-report-on... > Based on 110 public records requests to state and local law enforcement agencies across the country, our research documents more than 2,000 agencies that have purchased these tools, in all 50 states and the District of Columbia. We found that state and local law enforcement agencies have performed hundreds of thousands of cellphone extractions since 2015, often without a warrant.

marricks 6y ago
Oh cool, that's way worse than I thought it'd be in 2015. No doubt it's gotten way worse since then.

_jal 6y ago

This is why I am, for once, glad for the massive ewaste disaster that is old cell phones. They are perfect for protests. If you are not coordinating or worried about realtime Twitter, but instead documenting, you don't even need a cheapo prepaid SIM. Wipe them first, and don't leave them anything other than pictures of their own abusive behavior for them to find, unless you'd also like to gift them a copy of the Constitution or perhaps some personal musings on the role of policing in modern culture.

AnthonyMouse 6y ago
You don't actually need the ewaste disaster to have cheap old cellphones. You can get a 64-bit PC on eBay shipped to you for <$50. 10+ years old but will still run the latest Windows or Linux. If phones worked like this, people would keep them for many more years, but there would still be more than enough 10+ year old phones available for a close approximation to the shipping cost. It would also mean that the older phones would go to poor countries that could still use them instead of being slag, because "slow but runs current software" is usable whereas "not even old enough to be slow but can't run current software" means you can't use the thing because websites will throw certificate errors from missing roots, apps won't run on it and it will be full of known vulnerabilities and get malware.
Thorrez 6y ago
Why are old phones better than new ones? Is it simply because they're cheaper?