THE FBI cracked a San Bernardino terrorist's phone with the help of professional hackers who discovered and brought to the bureau at least one previously unknown software flaw, according to people familiar with the matter.
The new information was then used to create a piece of hardware that helped the FBI to crack the iPhone's four-digit personal identification number without triggering a security feature that would have erased all the data, the individuals said.
The researchers, who typically keep a low profile, specialize in hunting for vulnerabilities in software and then in some cases selling them to the U.S. government. They were paid a one-time flat fee for the solution.
Cracking the four-digit PIN, which the FBI had estimated would take 26 minutes, was not the hard part for the bureau. The challenge from the beginning was disabling a feature on the phone that wipes data stored on the device after 10 incorrect tries at guessing the PIN code. A second feature also steadily increases the time allowed between attempts.
The bureau in this case did not need the services of the Israeli firm Cellebrite, as some earlier reports had suggested, people familiar with the matter said.
The U.S. government now has to weigh whether to disclose the flaws to Apple, a decision that probably will be made by a White House-led group.
The people who helped the U.S. government come from the sometimes shadowy world of hackers and security researchers who profit from finding flaws in companies' software or systems.
Some hackers, known as "white hats," disclose the vulnerabilities to the firms responsible for the software or to the public so they can be fixed and are generally regarded as ethical. Others, called "black hats," use the information to hack networks and steal people's personal information.
The individuals who helped the FBI in the San Bernardino, California, case fall into a third category, often considered ethically murky: researchers who sell flaws to governments, companies that make surveillance tools or groups on the black market.
This last group, dubbed "gray hats," can be controversial since critics say they might be helping governments spy on their own citizens. When selling exploits to governments or on the black market, researchers do not disclose the flaws to the companies responsible for the software, as the exploits' value depends on the software remaining vulnerable.
In the case of the San Bernardino iPhone, the solution found by the hackers has limited shelf life.
FBI Director James B. Comey has said that the solution works only on iPhone 5Cs running the iOS 9 operating system - what he calls a "narrow slice" of phones.
Apple said last week that it would not sue the government to gain access to the San Bernardino solution.
Still, many security and privacy experts have been calling on the government to disclose the vulnerability data to Apple so that the firm can patch it.
If the government shares data on the flaws with Apple, "they're going to fix it and then we're back where we started from," Comey said in a discussion at a privacy conference last week. Nonetheless, he said Monday in Miami, "we're considering whether to make that disclosure or not."
The White House has established a process in which federal officials weigh whether to disclose any security vulnerabilities they find. It could be weeks before the FBI's case is reviewed, officials said.
"When we discover these vulnerabilities, there's a very strong bias towards disclosure," White House cybersecurity coordinator Michael Daniel said in an interview in October 2014, speaking generally and not about the Apple case. "That's for a good reason. If you had to pick the economy and the government that is most dependent on a digital infrastructure, that would be the United States."
But, he added, "we do have an intelligence and national security mission that we have to carry out. That is a factor that we weigh in making our decisions."
The decision-makers, which include senior officials from the Justice Department, FBI, National Security Agency, CIA, State Department and Department of Homeland Security, consider how widely used the software in question is. They also look at the utility of the flaw that has been discovered. Can it be used to track members of a terrorist group, to prevent a cyberattack, to identify a nuclear weapons proliferator? Is there another way to obtain the information?
In the case of the phone used by the San Bernardino terrorist, "you could make the justification on both national security and on law enforcement grounds because of the potential use by terrorists and other national security concerns," said a senior administration official, speaking on the condition of anonymity because of the matter's sensitivity.
A decision also can be made to disclose the flaw - just not right away. An agency might say it needs the vulnerability for only a few months or that its utility will quickly diminish.
"A decision to withhold a vulnerability is not a forever decision," Daniel said in the earlier interview. "We require periodic reviews. So if the conditions change, if what was originally a true [undiscovered flaw] suddenly becomes identified, we can make the decision to disclose it at that point."
The Washington Post
Wed Apr 13 2016
![FBI paid hackers to get cell data FBI paid hackers to get cell data](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/http://img.astroawani.com/2015-08/51440314462_cybercrime.jpg)
Some hackers, known as "white hats," disclose the vulnerabilities to the firms responsible for the software or to the public so they can be fixed and are generally regarded as ethical. - File Photo
![KDNK suku kedua dijangka lebih baik, hasil positif ekonomi MADANI - Ahli ekonomi KDNK suku kedua dijangka lebih baik, hasil positif ekonomi MADANI - Ahli ekonomi](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2023-04/71682503318_PEMANTAUANUDARAAPM.jpg)
KDNK suku kedua dijangka lebih baik, hasil positif ekonomi MADANI - Ahli ekonomi
Prestasi paling penting ialah peningkatan perbelanjaan isi rumah, disebabkan oleh keyakinan isi rumah yang semakin baik.
![Jenazah Nidza Afham dikebumi di Puncak Alam Jenazah Nidza Afham dikebumi di Puncak Alam](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/81723691432_NidzaAfham.jpg)
Jenazah Nidza Afham dikebumi di Puncak Alam
Solat jenazah akan diadakan di Masjid Puncak Alam sebelum dikebumikan di Tapak Perkuburan Felda Bukit Cherakah selepas solat Zohor hari ini.
![Ibu Menteri Besar Kedah meninggal dunia Ibu Menteri Besar Kedah meninggal dunia](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/51723690075_ibumeninggalduni.jpg)
Ibu Menteri Besar Kedah meninggal dunia
Allahyarham Meriam Ahmad menghembuskan nafas terakhir pada usia 74 tahun di Hospital Sultanah Bahiyah, Alor Setar.
![Skuad bola tampar pantai Pulau Pinang berlatih di Songkhla Skuad bola tampar pantai Pulau Pinang berlatih di Songkhla](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/51723688922_bolatamparsukma.jpg)
Skuad bola tampar pantai Pulau Pinang berlatih di Songkhla
Pasukan bola tampar pantai Pulau Pinang di Pantai Samila, Songkhla selama lima hari sebagai persediaan menggalas cabaran membawa pulang pingat pada SUKMA 2024.
![Pemandu treler maut, nahas lima kenderaan di PLUS arah utara Pemandu treler maut, nahas lima kenderaan di PLUS arah utara](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/51723688542_KemalanganMaut.jpg)
Pemandu treler maut, nahas lima kenderaan di PLUS arah utara
Kemalangan melibatkan lima buah kenderaan termasuk tiga buah treler, sebuah lori satu tan dan sebuah MPV Toyota Vellfire.
Niaga AWANI: Jiwa SME: Kuih tradisonal sejuk beku 'diterbangkan' ke Tanah Suci
Inovasi pembuatan makanan sejuk beku, terutama kuih muih tradisional telah berjaya membawa produk itu ke peringkat global, terutama dalam memenuhi citarasa jemaah haji dan umrah rakyat Malaysia di Tanah Suci Mekah dan Madinah.
Global Financial Shifts: What emerging economies need to know
We're looking at recent shifts in the global financial scene. Today, we'll talk about how lower inflation and possible Fed rate cuts could impact investor confidence, global stability, and important sectors like tech and real estate. We'll also see how these changes might affect emerging economies like Malaysia, a key player in global trade. Let's break down these topics to understand what they mean for the future.
![MyJPJ rekod lebih RM28 juta transaksi dalam tempoh sebulan MyJPJ rekod lebih RM28 juta transaksi dalam tempoh sebulan](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/61723687760_AedyFadlyRamli.jpg)
MyJPJ rekod lebih RM28 juta transaksi dalam tempoh sebulan
JPJ merekodkan kutipan lebih RM28 juta menerusi aplikasi MyJPJ bulan lepas iaitu sebulan selepas transaksi dalam talian diperkenalkan pada Jun.
Urban Redevelopment Act: A comprehensive solution or a temporary fix?
Datuk Chang Kim Loong, Secretary-General of the National House Buyers Association (HBA), will speak about tackling one of the most pressing urban issues of our time: the Urban Redevelopment Act. Is this legislation the comprehensive solution we’ve been waiting for to eradicate urban slums, or is it merely a temporary fix?
![Ringgit kekal dibuka tinggi, menjelang data KDNK suku kedua Malaysia esok Ringgit kekal dibuka tinggi, menjelang data KDNK suku kedua Malaysia esok](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-01/41705320699_TBringgitmalaysia.jpg)
Ringgit kekal dibuka tinggi, menjelang data KDNK suku kedua Malaysia esok
Pada 8 pagi, ringgit meningkat sedikit kepada 4.4150/4250 berbanding dolar AS daripada 4.4170/4235 ketika ditutup pada Rabu.
![FBI sahkan telinga Trump memang terkena peluru semasa cubaan bunuh FBI sahkan telinga Trump memang terkena peluru semasa cubaan bunuh](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-07/81720920437_DonaldTrump.jpg)
FBI sahkan telinga Trump memang terkena peluru semasa cubaan bunuh
Bekas Presiden Amerika Syarikat (AS) Donald Trump terkena peluru semasa percubaan pembunuhannya awal bulan ini, menurut kenyataan FBI.
![FBI kenal pasti suspek penembak Trump sebagai Thomas Matthew Crooks FBI kenal pasti suspek penembak Trump sebagai Thomas Matthew Crooks](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-07/61720938687_DonaldTrump.jpg)
FBI kenal pasti suspek penembak Trump sebagai Thomas Matthew Crooks
FBI berkata mereka masih berusaha untuk mencari motif di sebalik cubaan pembunuhan itu.
![FBI anggap tembakan di perhimpunan Trump sebagai 'cubaan bunuh' FBI anggap tembakan di perhimpunan Trump sebagai 'cubaan bunuh'](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-07/51720935938_DonaldTrump.jpg)
FBI anggap tembakan di perhimpunan Trump sebagai 'cubaan bunuh'
Biro Penyiasatan Persekutuan (FBI) masih belum mengenal pasti suspek penembak dalam serangan terhadap bekas Presiden Donald Trump di Pennsylvania, Amerika Syarikat (AS).
![Peluru mengenai telinga kanan saya - Trump Peluru mengenai telinga kanan saya - Trump](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-07/81720929828_PresidentDonaldTru.jpg)
Peluru mengenai telinga kanan saya - Trump
Kejadian tembakan itu sedang disiasat dan Perkhidmatan Rahsia telah memaklumkan secara rasmi kepada Biro Penyiasatan Persekutuan (FBI).
![Faizal Ismail guna platform media sosial beri motivasi tunai haji Faizal Ismail guna platform media sosial beri motivasi tunai haji](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-06/61717899792_TBFaizalIsmail.jpg)
Faizal Ismail guna platform media sosial beri motivasi tunai haji
Walaupun menyedari dirinya banyak kekurangan, FBI terus berdakwah ke arah kebaikan, berbekalkan sedikit ilmu.
![FBI tawar ganjaran AS$10 juta tangkap pembangun perisian tebusan Lockbit FBI tawar ganjaran AS$10 juta tangkap pembangun perisian tebusan Lockbit](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-05/71715228627_FBIjpg.jpg)
FBI tawar ganjaran AS$10 juta tangkap pembangun perisian tebusan Lockbit
PERISIAN tebusan Lockbit menyerang dunia siber sejak 2019 tetapi mula mendapat perhatian orang ramai selepas syarikat terkemuka seperti Thales, Royal Mail, TSMC dan Continental menjadi mangsa.
![Hakim tangguh perbicaraan dokumen sulit Trump Hakim tangguh perbicaraan dokumen sulit Trump](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-05/81714980397_DonaldTrump.jpg)
Hakim tangguh perbicaraan dokumen sulit Trump
Perbicaraan berkemungkinan tidak akan bermula sebelum pilihan raya presiden AS pada November.
![Pas gesa kerajaan tidak ikut telunjuk luar isu keselamatan, kedaulatan negara Pas gesa kerajaan tidak ikut telunjuk luar isu keselamatan, kedaulatan negara](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2023-10/81697887951_DatukSeriTuanIbra.jpg)
Pas gesa kerajaan tidak ikut telunjuk luar isu keselamatan, kedaulatan negara
Tuan Ibrahim berkata, perkara ini mesti diuruskan dengan kewibawaan kerajaan Malaysia sendiri tanpa didorong oleh campur tangan asing.
![KDN dapatkan gambaran tepat 3 pemimpin NGO Islam dalam senarai FBI KDN dapatkan gambaran tepat 3 pemimpin NGO Islam dalam senarai FBI](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-02/81708319166_SaifuddinNasution.jpg)
KDN dapatkan gambaran tepat 3 pemimpin NGO Islam dalam senarai FBI
KDN sedang mendapatkan gambaran tepat dan akan menyemak fakta berkaitan tiga pemimpin badan bukan kerajaan (NGO) Islam negara ini yang berada dalam senarai FBI.
![Bekas anggota CIA dipenjara, bocor rahsia ke WikiLeaks Bekas anggota CIA dipenjara, bocor rahsia ke WikiLeaks](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-02/41706836007_CIA.jpg)
Bekas anggota CIA dipenjara, bocor rahsia ke WikiLeaks
Joshua Schulte didapati bersalah atas tuduhan pengintipan dan lain-lain kesalahan pada 2022, dalam tragedi yang digelar 'Pearl Harbor digital.'