What if the FBI asked a gun manufacturer to build a disabler for one gun the FBI already possesses? That's more analogous here.
It is that follow on that is the back door. So now Apple is in the position where they have to unlock phones on demand, and not doing so will subject them to fines and imprisonment (you cannot easily appeal an order to do something in a case which it is clear you have the capability to do).
What is worse, if they are forced to comply and develop this capability, and then design the next generation of phone so that they once again don't have a capability to break into it, that case then is even harder. The FBI can sue Apple for intentionally obstructing justice.
Don't be fooled, this isn't a case about one phone and one set of people who have shot a bunch innocent people. This is very much a calculated strategy on the Justice Department's behalf to get back doors into phones and create legal precedents for which they can compel those back doors.
That will force the group that doesn't want back doors to get Congress to create a law that specfically forbids them. And the Justice Dept knows that would be very hard for folks to achieve.
The answer now is no. Companies must provide access to information if they possess it, but that's not the same as writing new software to enable access to information they don't possess.
Once that Rubicon has been crossed, it is unclear what the legal test would be to limit the work that can be requested. If a court can require Apple to write some piece of software, why couldn't it require Apple to write some other piece of software? Or take any other affirmative action that might assist the FBI?
I know this might sound crazy but this is how common law works. Court decisions create precedents, which are often in the form of heuristics for constraining future decisions.
A very famous example is the Supreme Court precedent on abortion: before a fetus is viable, the government does not have a legal basis for considering it to have independent rights. Whether or not one agrees with it, the rule is clear.
Right now the rule is clear for what companies must do under court order. If the FBI succeeds in applying the All Writs Act in this case, that clear rule will be gone. What will take its place?
Edit to add a concrete example:
Apple announces that iOS 10 cannot be broken even by Apple. The FBI goes to court and says that they are tracking known terrorists who are using iPhones. If those terrorists get iOS 10 as announced, the FBI will be impeded. So Apple must alter iOS 10 to ensure that they can deliver retroactive access to phone contents in some way.
This would be the smartphone equivalent to CALEA, which requires network operators to build their networks in a way that permits wiretapping. The big difference is that CALEA was passed by Congress, whereas the FBI would only need a court order for smartphones!
The current request is for Apple to build a special version of their OS which can be loaded onto the suspect's phone. It seems to me that the precent this would create would be for similar actions: providing custom software. The gulf between that and altering the public builds of iOS is vast, and I don't see how the former precent could possibly lead to the latter. In fact, the order in question explicitly states that the software provided by Apple must be tied to the specific iPhone the FBI wants to crack.
The precent of providing custom software for a specific device could very well be dangerous in and of itself. This comment does a good job of discussing the possibilities there:
https://news.ycombinator.com/item?id=11120036
In short, the precent set here could very well lead to requiring Apple to turn on suspects' microphones remotely, or loading software that scrapes data as the user uses it. That could certainly be bad. But it's a huge leap from that to somehow preventing Apple from ever building and selling secure systems.
Edit: thinking about this a bit more, here's what I see as the really simple version of it all. The FBI's order is compelling Apple to build something, and the worry is that it sets a precedent for building more. But forcing Apple to build insecure devices in the future is not the same; that would be preventing Apple from building secure software and hardware, not compelling them to build something insecure.
Basically, the FBI can argue that Apple did this before and must keep doing it in the future. Making the device such that they cannot respond to a request could be viewed as going against the court. "I'd love to give you that document again, but now I burn them all so you cannot have them."
Once we permit the FBI to task private companies via court order, there's no way to predict how far that tasking will be permitted to go.
> If the FBI demands that you open a door for them, does that imply you're not allowed to brick up the entrance later on?
The FBI is not demanding that Apple open a door, it is demanding that Apple build a custom software system for them. If the FBI can tell Apple how to build software today, then the FBI can probably tell Apple how to build software tomorrow.
If they do this today, they can probably do it tomorrow, yes. But "this" doesn't mean compromising all iPhone hardware or software. It means building a special copy of the software to attack already insecure hardware and software.
Let's say Apple makes the iPhone 7 completely invulnerable to attack even from Apple. How does this precedent play out? The FBI goes to Apple and says, "Do that thing you did before." Apple replies, "Sorry, but we literally can't do it for this phone." How does the existing precedent cause a problem?
This whole line of argument feels too much like, "The FBI can demand something, this is something, therefore the FBI can demand this." People keep saying there's a connection and I just don't see it. When I ask what it is, people just reiterate that it's there.
Then they request a warrant that requires future iOS versions to permit similar access.
By what argument would Apple fight that warrant? The previous case would have already established that such access is necessary, that Apple can provide it, and that the court has the legal power to force them to.
In terms of the burden on Apple, the staff time burden to write software that will run on 50 million iPhones is no greater than software that will run on one iPhone. Code is code.
In terms of damage to the Apple brand, the FBI has already argued that that should not matter:
http://www.nytimes.com/2016/02/20/business/justice-departmen...
"By what argument would Apple fight that warrant?"
By what argument can Apple use to fight this current demand? They clearly can break into the phone.
Consider more traditional warrants. The police ask for a warrant to search your house. They get that warrant. Then afterwards they ask for another warrant, this time to enter everybody's house. Does the precedent set by the first warrant make a judge likely to grant the second one? I don't think so. Certainly I've never heard of any such warrant being issued by an American court (excluding the ridiculous FISA court, anyway), even though police would surely love to have one, and the precedent of search warrants for individual houses is extremely long standing.
The FBI can (and does) hire locksmiths and safe crackers to get into safes where they believe there is valuable information inside, but they don't compel the manufacturer of the safe to create a capability of bypassing its safeguards, but if they did criminals would seek it out so they could rob those safes, and customers would stop buying that safe because they knew criminals could probably get their hands on the same tools the government could to break into and defeat its countermeasures.
So having the government able to order a safe maker to build a safe that can be broken into, the safe maker loses customers and business because their customers don't want a safe that can be broken into, they want one that protects their valuables from everyone.
Many people equate this to demanding that Apple create a security vulnerability, and I don't get it. The vulnerability is already there. The iPhone 5c is already insecure against an attack by Apple. The government is just ordering Apple to exploit that existing insecurity.
There are compelling problems with that too, but it's not the same as requiring Apple to build something insecure.
If the safe company simply hadn't built in that capability, there would be nothing the FBI could demand of them, because it wouldn't be possible.
Remember the attorney general who molded the torture stance for the bush admin? John Yoo and Alberto Gonzalas? We need to be able to make these people accountable and be removed when they do stuff like this.
Those both are basically war criminals.
I'm not a lawyer, so I don't know if a company has to comply when the FBI demands information for a person. But if they do, this shouldn't be seen as any different.