FBI paid less than $1M for iPhone hack -- and doesn't know how it works.

Any iPhone 5C running iOS 9 can now be hacked by the FBI. Apple

How much is it to hack an iPhone? Not as much as we thought.

The FBI has paid less than $ 1 million to hack the iPhone 5C of one of the shooters San Bernardino, Reuters reported Friday, a figure lower than some observers had previously estimated.


FBI Director James Comey said last week the government had spent more money than it has been to the rest of the running of the office term. This was calculated at $ 1.3 million.

The software mechanism bought by the FBI for an undisclosed security company can also be used by the government to unlock other 5C iPhone models running the latest software from Apple, although the FBI does not understand how it works, the sources cited by Reuters said.

The FBI declined to comment beyond what he has already said in public statements, but CNET directed to a page entitled "Going Dark show" about the interception of communications.

The agency purchased the mechanism after Apple refused to create a backdoor through its encrypted software, despite a court order demanding does.

Apple has opposed the government's request, saying it was impossible to break its own encryption and creating a workaround might jeopardize the safety of all iPhones. The transparency report the company released earlier this week shows met about 80 percent of the requests made by the US government in the second half of last year.

The technology industry has gathered around Apple lending support as he prepared to fight the FBI in court. But the government dropped the case after finding another way to break the security of the phone.

Comey could know that the hack was expensive, but the sources cited by Reuters said he does not know which company provided the technology, despite his seniority. Previous reports have suggested an Israeli security cabinet was behind the hack.


The mechanism was purchased with a single payment and can be used again.

The content of the iPhone, which belonged to San Bernardino shooter Rizwan Syed Farook, are still under consideration, but initial investigations are not considered to have produced remarkable discoveries. In particular, the FBI hopes to discover if Farook and his wife, Tashfeen Malik, co-conspirators.

The FBI authorized by the Supreme Court to hack any PC

Democratic Senator Ron Wyden considers that a massive intrusion hundreds of millions of computers would target the vast majority of people who have done nothing wrong.

The Supreme Court of the United States adopted amendments to the federal law on criminal procedures to enable police authorities and investigators to go away in any computer located anywhere in the world.These somewhat draconian amendments would take effect on 1 December.

We knew the US reluctant to comply in broad privacy - revelations of Snowden affair around the existence of a global surveillance program PRISM to support - and this may well continue.Despite all the efforts of the League of protection of freedoms and human rights and mobilization of major cloud players (Google, Microsoft, Apple ...) to try to preserve the privacy of individuals against large state espionage scale, the Supreme Court of the United States took a momentous decision accordingly.

The US institution has just approved several amendments to the federal law on criminal proceedings, including Section 41 levels, which allow investigators to take all necessary means to enable the authorities and investigators (police, FBI ... ) to enter remotely on any computer located anywhere in the world. "With these new rules, the government may now be able to get access and find information on hundreds of thousands or millions of computers at a time, most of the machines concerned may belong to victims rather than 'to people behind cybercrime, "said Democratic Senator Ron Wyden. The latter had already distinguished himself in December 2014 for presenting a bill to prevent the government from exploiting backdoors on software to facilitate its surveillance operations.

The Congress called upon to decide by December ¹

These amendments adopted by the US Supreme Court must now be approved by Congress by 1 December. Voting could be suspended from the US election results, the results will be announced on November 8, according to the political color of the winning candidate ...

A US senator proposes an explosive countermeasure against backdoors FBI

Democratic Senator Ron Wyden hope to forget the failure of the vote in the Senate of Freedom Act last month.

Ron Wyden, Democratic senator from Oregon, introduced a bill to prevent the government from exploiting backdoors and vulnerabilities of security technology products and solutions to facilitate its surveillance operations.

Democratic US Senator from the State of Oregon, Ron Wyden, hope to pass the US legislation aimed to preempt the actions of government's spying on users through products and technology solutions. Called Secure Data Act, this bill is extracted from a previous, broader named Freedom Act and presented last November in the Senate, but had then not get a final vote despite the support of the administration of Barack Obama.

With Secure Data Act, Ron Wyden said his bill is in response to proposals made ​​by US government officials forcing IT sector companies design backdoors (backdoors) in their products. "The strong encryption and security on the noise emitted from a computer are the best way to keep the data of the US safe from pirates and foreign threats," said Senator.

The Secure Data Act in the crosshairs of the FBI director

Ron Wyden also says that technological mandates driven by the government to weaken the security of data in order to facilitate government investigations, compromise the national and economic security and privacy. "An integrated backdoor in a security system it is compromised, and companies will have less incentive to invest in new security technologies," he also said. By allowing these backdoors, already weakened customer confidence in the products and services because of revelations about the government surveillance program, would further erode a little more after him.

The Secure Data Act therefore seeks to establish that no agency is able to mandate a manufacturer, developer or seller of computers, software or electronic terminals to change or develop safety functions in order to monitor any any user of these products. Unless they are already covered by CALEA (Communications Assistance for Law Enforcement Act), which requires telecommunications operators and broadband providers to make available to the Justice of interception capabilities. "Adopted 20 years ago, this measure does not cover the latest communication technologies," stressed however James B. Comey, FBI Director. According to him, seeing also a very dim view of proposals Apple and Google started encrypting by default the data of users of iOS and Android, the same Congress should pass legislation requiring all tools communication allow police access to user data.

Confident, however, Ron Wyden said his bill has a number of support within the House of Representatives, Thomas Massie and Zoe Lofgren, who last June adopted an amendment to ban electronic vulnerability warrants. 

DDoS attack on global DNS root servers

Unknown launched a large-scale DDoS attacks on the servers that hold the top-level addresses of the global Internet. The attack was made by strangers in the 13 servers that are the root of the global Internet, because in them is the matching of top-level domain name [.com, .org, .net and those relating to specific countries] with the IP addresses of websites .

According to a report from root-servers.org, The first barrage took place on Monday, November 30, and lasted for about two hours and 40 minutes. The second one happened a day later and lasted for almost exactly an hour. Most but not all of the 13 root servers that form the Internet's DNS root zone were hit. The attacks started and stopped on their own and consisted of billions of valid queries for just two undisclosed domain names, one for each incident. There's no indication of who or what was behind the attack.

Users encountered the problem as a timeout in their applications to their servers.

The attack took place between November 30 and December 1.

See the root-servers.org report here.

The "happy hacker" money distributed to the Palestinians who "stole" from banks

If Robin Hood lived in modern times probably did that and the Algerian Hamza Bendelladj, who violate US computer banking systems, take away large sums of money and distributed to charitable organizations for Palestinians.

According to Al jazeera , the 27 year old programmer, for the case, which is expected during the current week's court decision, Georgia, USA, developed and used malware against 200 US banks and financial institutions. Then, it seems dollars handed out millions to charities for financial support for the Palestinians.

The Hamja Bendelladj has admitted guilt and faces jail almost 70 years, and a fine of more than $ 13 million.

The young man, who was known by the nickname Bx1, was arrested in Thailand and deported to the United States in 2013, while the press called the "happy hacker" because the pictures of the switching of the airport was smiling.

After the news, however, that funded organizations for the relief of Palestinians, the Bejdelladjcharacterized by many as a "hero". When not, rumors reported that the hacker threatened even with death penalty, dozens of his supporters launched a campaign in favor of the Internet with messages of solidarity, calling on the authorities not to execute him.

Gmail: Two new security features

The company Google has announced two new features to Gmail email service, which will provide a safer environment for its users.

The first new feature is a "sign" when you receive or send an email. For example when you receive or send a message to an address that does not use TLS encryption then you see an open padlock next to the address and vice versa.

The second new feature to be added is: when a user receives a message from an address that can not be verified, then the position of the logo of the company or the sender's photo will display a question mark.

According to the second update, if you receive an email that the userdoes not can be certified , then you will see a question mark in place of the sender's photo or logo of the company.

The roll out of new services has started .

WebUSB: goes to another level connecting devices!

Two engineers Goolge developed an API, which named WebUSB. The WebUSB allows a user to connect a USB device to the internet safely bypassing the need for local drivers.

The development was made by Reilly Grant and Ken Rockot.

What is WebUSB;

Today, when you connect a device to our computer, we expect that will somehow find the correct driver (driver) and that it will work properly with a WEB application. For many devices, such as keyboards, hard drives, cameras, etc. this is possible because there are standard drivers built into the operating system. But what about other devices which have not yet been standardized? This is where comes the need for that API, which go to the next level to connect devices to the Internet regardless of the operating system, making the device truly "plug and play".

The development is still in progress and you can see more information here.