Roger Fingas
The FBI recently ordered a suspect to unlock his iPhone X via Face ID, in the first known example of police doing so anywhere in the world.
The incident occurred on Aug. 10, when the FBI searched the house of Grant Michalski in Columbus, Ohio during a child abuse investigation, Forbes reported on Sunday, citing court documents. Special agent David Knight ordered Michalski to face the iPhone, triggering Face ID.
Michalski was ultimately charged with receiving and possessing child pornography. The search uncovered related Kik conversations, including a chat with someone who was really an undercover officer.
Only some data was obtained from the iPhone however as the FBI didn't have Michalski's passcode, which put up roadblocks for forensic tools after the device had been locked for more than an hour. Knight noted he wasn't able to document things like app use or deleted files, but added that he'd discovered that the Columbus Police Department and the Ohio Bureau of Investigation have "technological devices that are capable of obtaining forensic extractions from locked iPhones without the passcode," presumably referring to hardware offered by Cellebrite and/or Grayshift.
A lawyer for Michalski, Steven Nolder, told Forbes that the FBI turned to Cellebrite, but has so far failed to get anything useful. He also commented that police are now using boilerplate language in warrants to cover Face ID.
Mandatory Touch ID unlocks have been happening for years, even being used on corpses. Though controversial the practice is currently legal, and sometimes claimed to be necessary by U.S. law enforcement since suspects can't be forced to turn over their passcodes. Conventional forensic tools are often defeated by the full-disk encryption and other security measures in iOS.
Cellebrite and Grayshift recently scored major contracts with the U.S. Secret Service, valued at $780,000 and $484,000, respectively. Grayshift also picked up a $384,000 deal with Immigration Customs Enforcement.
Charles Martin
Malcolm Owen
William Gallagher
Christine McKee
Wesley Hilliard
61 Comments
1) If you're going to be a criminal then don't use a fricken a biometric (which I shouldn't be telling them, but I figure if they were smart enough to come to this forum then they'd already know better).
2) I'm glad he was dumb enough to use Face ID if it gets a child pornographer and child abuser off the streets.
3) Slight segue, but still very much the same issue: a recent study has shown that the one thing all human traffickers have in common is that they use the internet for sales. I wish we had better tools to stop this.
According to FaceID security guide, FaceID can be disabled by simultaneously holding volume down and power for two seconds.
I hope the bastard gets worse than life. I support law enforcement gaining access to child abusers’ devices so they can put them away.
If you suspect the cops or FBI are after you disable FaceID or TouchID by triggering Emergency SOS mode.