海角大神

US Attorney General Loretta Lynch has waded into the melee surrounding Apple and the FBI, posing some fundamental questions about the issues at stake.

The comments, made Tuesday during the RSA cybersecurity conference in San Francisco, came the same day as a congressional hearing on the other side of the country, in which both Apple and the Federal Bureau of Investigation voiced their opinions.

During that session in Washington, FBI director James Comey claimed that 鈥�all parts of the US government鈥� had been consulted in the effort to crack open the iPhone at the center of this storm 鈥� and none was able to help.

鈥淒o we let ?鈥� said the attorney general, in a Bloomberg interview at the RSA conference. 鈥淒o we want one company to say this is how investigations are going to be conducted and no other way?鈥�

And so she drilled down to the heart of this debate, which goes far beyond a single iPhone, a single company, or even the FBI. The question is one of precedent, of how much access law enforcement agencies should be granted, both today and going forward.

Yet to portray the struggle as simply between privacy and security is to miss some of the most integral facets of the issues at stake, as Susan Landau, professor of cybersecurity policy at Worcester Polytechnic Institute, who gave evidence at Tuesday鈥檚 congressional hearing as a technical expert, tells 海角大神 in a telephone interview.

鈥淭his isn鈥檛 about security versus privacy, it鈥檚 security versus security,鈥� says Dr. Landau. 鈥淭here is a long queue of phones the FBI and state law enforcement agencies also want Apple to open. The problem with more than one is that you鈥檒l need to set up a process, which doesn鈥檛 have the same level of scrutiny as a one-off or once-in-a-while event.鈥�

With a process in place, it would then become easier for those engaged in organized crime, as well as nation states, to take advantage of weaknesses and gain access to devices.

This matters, says Landau, because phones are not just for photos or text messages. Increasingly, we access our email, our calendars 鈥� a whole plethora of personal and business-related information 鈥� as well as using mobile devices to assist in authentication.

鈥淚f you look at how systems are broken into, the most valuable thing to get hold of is log-in credentials,鈥� Landau tells the Monitor. 鈥淲hat the FBI is pushing for will make phones less secure.鈥�

Indeed, at the inaugural in San Francisco at the end of January, Rob Joyce, chief of Tailored Access Operations at the National Security Agency, underscored the importance of log-in details as a means of access for hackers.

鈥淚n the world of advanced persistent threat actors (APT) like the NSA, for gaining access to systems,鈥� wrote Kim Zetter in Wired. 鈥淣ot the login credentials of your organization鈥檚 VIPs, but the credentials of network administrators and others with high levels of network access and privileges that can open the kingdom to intruders.鈥�

Moreover, as an illustration of the kind of chaos that can be unleashed when access information is acquired by those with dubious intentions, one only needs to consider a Department of Homeland Security report released on Feb. 25 about the cyberattack last year on Ukraine鈥檚 critical infrastructure:

鈥淭he companies believe that prior to the cyber-attack to facilitate remote access.鈥�

The issues at stake are complex but crucial. The outcome of the debate will 鈥渟et a precedent for security of our citizens,鈥� as Jamie Winterton, director of strategy for Arizona State University's Global Security Initiative, wrote in the Monitor. 鈥淚t's healthy to have a vibrant debate about the iPhone case 鈥� and matters of privacy and national security more generally 鈥� but the way [some presidential] candidates have talked about risks is encouraging a toxic tug-of-war between government and tech."

鈥淣o one benefits from animosity between the two," she wrote. "But the country would also suffer if one were enslaved to the other.鈥澛�