海角大神

海角大神 / Text

Why FBI won't share details of iPhone hack with White House

The FBI announced Wednesday it would not share the vulnerability that allowed hired hackers to unlock the iPhone of San Bernardino shooter聽Syed Rizwan Farouk last month.

By Ben Thompson, Staff

Story updated at 1:45 p.m. Eastern time.

The Federal Bureau of Investigation announced that it will not share the mechanism used to hack into the San Bernardino, Calif., shooter's iPhone with other government agencies.

Earlier this week, the FBI's director had said that he was still considering whether to inform Apple, and the public, of the device vulnerability that enabled a contractor to hack into the phone.

鈥淲e are in the midst of trying to sort that out,鈥 FBI Director James Comey said Tuesday. 鈥淭he threshold (for disclosure) is, are we aware of the vulnerability, or did we just buy a tool and don't have sufficient knowledge of the vulnerability to implicate the process?鈥

The FBI successfully unlocked the San Bernardino County-issued cell phone belonging to Syed Rizwan Farouk, one of the two attackers in the December rampage, following a drawn-out legal battle with Apple聽pertaining to the tech company鈥檚 obligation to aid law enforcement.

The FBI eventually gained access to the iPhone after it聽paid hackers well over $1 million聽to crack Apple鈥檚 security measures, an estimate that has been derived from Mr. Comey's current salary based on comments that the contract cost more than he expects to earn in the remainder of his FBI tenure.聽Despite the hefty price tag, Comey said that the successful penetration 鈥渨as, in my view, worth it.鈥

The FBI has yet to disclose the identity of the hacker or hackers who aided in the unlocking process, although Reuters sources reported that the help came from outside of the United States. Comey鈥檚 earlier statements suggested that the FBI does not own the secret method used by the hackers, or perhaps even know exactly what vulnerability was exploited.

Now, Comey's agency has decided to keep all of the details surrounding the hack private. Following a loose protocol established by the White House for such situations, mostly favoring a policy of disclosure, the FBI announced its intentions in a statement by聽Science and Technology Branch head Amy Hess.

The FBI did not "purchase the rights to technical details about how the method functions," from the hired hackers, meaning that its technology experts do not "have enough technical information about any vulnerability," according to Ms. Hess,聽per Reuters.

While the procedure for deciding on the disclosure of similar information favors transparency, White House cybersecurity coordinator Michael Daniel acknowledged in a 2014 release that 鈥渢here are no hard and fast rules鈥 on the issue in place.

鈥淒isclosing a vulnerability can mean that we forego an opportunity to collect crucial intelligence... or even discover more dangerous vulnerabilities that are being used by hackers or other adversaries to exploit our networks,鈥 Mr. Daniel wrote.

鈥淏uilding up a huge stockpile of undisclosed vulnerabilities while leaving the Internet vulnerable and the American people unprotected would not be in our national security interest,鈥 he added.

An earlier statement by Comey suggests that he didn't want to sent the clash with Apple back to square one in the event that the vulnerabilities were disclosed.

鈥淚f we tell Apple, they're going to fix it and we're back where we started,鈥 he told AP earlier this month. 鈥淎s silly as it may sound, we may end up there. We just haven't decided yet.鈥

This report contains material from Reuters and the Associated Press.