> "Building a version of iOS that bypasses security in this way would undeniably create a backdoor. And while the government may argue that its use would be limited to this case, there is no way to guarantee such control."
The part about being able to guarantee such control seems to indicate that future requests may not require Apple's involvement.
Cook could have lied and said building a special OS was impossible. But he didn't because he knows someone will find out. When you're facing a subpoena, you don't knowingly lie.
Not that I believe Apple's CEO is lying, however…
You don't knowingly lie if you think the risk of getting caught is unacceptably high. That last part is important, I think, and indeed, you state, "because he knows someone will find out", so I know you get it. However, I don't think we should forget that a great deal of the concern we have presently in this thread about the government's capability in introspecting our technology is indirectly the result of the DNI lying under oath¹.
¹I know your post says subpoena, but it seems similar enough that its worth reminding…
Additionally, that letter is written with very carefully fuzzy language so as to remain true-ish.
As in, Apple can't make this change and guarantee that nobody else will use it. In the same way that any software change (which they do regularly) could open up a security flaw. That doesn't mean it's likely, or any more likely than any other software update.
I wouldn't put it past the NSA to have snapped up a former iOS developer for explicitly the purpose of breaking into iPhones. An ex employee could certainly call him out.
> Additionally, that letter is written with very carefully fuzzy language so as to remain true-ish.
Cook is trying to be as clear as possible to a public who doesn't understand encryption or why Apple is standing up to the FBI. That's a lot to swallow, and yes his letter is carefully worded for good reason. Given that there is a backdoor that Apple could create, it's not unthinkable that with more details, 3rd parties could figure out how to get in too.
This sounds like a misunderstanding. No clever third parties are going to find a way to break code signing. To exploit the security hole Apple already created would require having Apple's signing certificate so that a phone could install the code. If it wasn't for the certificate, it would be quite a bit more trivial to hack a firmware to do a malicious thing and install it on any phone.
Except that invention != turning over information.
The Justice Department would like to change this, so that complying with the Writs act literally means doing anything they tell you to do.
Which is a massive, blatant power grab.
If the government wants to go past that, pass a law, and hope it doesn't run afoul of the Constitution.
For instance, there's also a law that compels telecom providers to give the government cooperation in installing monitoring equipment in their pipes. But that's an exceptional situation, which is why they had to pass an additional law: it does not just follow from All Writs.
It'd be the same if Apple was building a sewer system:
---
FBI: "Hey, company building a sewer system!"
Apple: Hi.
FBI: "We have an ongoing investigation, and need your cooperation."
Apple: Rock on. I'll comply with the law! I have access to the system at all of these points. If you need access to that, just ask.
FBI: "No, we need access to a specific toilet bowl in a specific house."
Apple: ... I don't have access to that. They haven't flushed it; it's still in their house.
FBI: "Yeah, but you designed the system. So to comply with our request for information, we need you to come up with an easy way for us to break the system."
Apple: Break it how? Gee, FBI, this sounds a lot more involved than just giving you access to some information.
FBI: "No, this is just like turning over some papers. Now, we need your engineers to drop everything and immediately come up with a foolproof way of suddenly, and violently, reversing the flow and pressure of any arbitrary customer's toilet so that we can use it to propel an FBI Fecal Trawler drone into their house."
Apple: Whoa. You're asking us to develop, for you, a massive new operational capability. But there's not a law that compels us to suddenly spend our time being FBI contractors! Also, if we develop this the way you are asking us, that means many of our engineers will be working on, and learn how to, turn our toilet connections literally into deadly weapons! That's just ... gross, and immoral! And probably a breach of our duty to our customers!
FBI: No. It's law. Turn over our writs.
Apple: This is insane. You got laws passed to make telecom companies do this kind of thing -- I'm sorry, but until you get a similar law passed, and have to take it before the public in the way that will entail, I really think this is government overreach! ... Why are you even talking to me about this? Go in through the front door or something.
FBI: We threw the key away.
---
And yet the reporting on this story continues to be "Oh, Apple, why you can't be like those good nerds on </scorpion> who know how to help their country?"