The feds exploited a security vulnerability in the iPhone

Mar 29, 2016 09:48 GMT  ·  By

The war between the FBI and Apple over an iPhone used by one of the San Bernardino terrorists finally came to an end this morning, when the DoJ announced that it managed to hack the device on its own, but another dispute is very likely to begin.

It appears that the fed might not inform Apple about the method used to unlock the iPhone and access the data stored on it, although this might involve exploiting a security vulnerability that might exist on other devices too.

A report by CNN, citing a law enforcement official who wanted to remain anonymous, says that for the moment it’s just premature to say whether the same security vulnerability exists on other iPhones too because the FBI focused specifically on the 5C used by a San Bernardino attacker.

But if it does, more security risks would be involved, as hackers and governments overseas could try to exploit the vulnerability in an attempt to spy on the United States. Unless Apple patches the issue, that is, which could only happen faster if the FBI indeed discloses the method used to unlock the iPhone and doesn’t force the company to look after it on its own.

Third party involved in the hacking

In a statement released this morning, United States Attorney Eileen M. Decker says unlocking the iPhone without compromising information stored on the phone was possible “with the recent assistance of a third party.” No other details have been provided on the name of this third party or the method used for unlocking it.

“Although this step in the investigation is now complete, we will continue to explore every lead, and seek any appropriate legal process, to ensure our investigation collects all of the evidence related to this terrorist attack. The San Bernardino victims deserve nothing less,” the statement concludes.

Apple has already issued a statement to point out that it would continue working on improving the security of its products, so no matter if the FBI provides this vital information or not, the vulnerability will be patched sooner or later. Or so the company hopes.