> Apple has the ability to install new software on a locked device.
People keep saying this but it probably isn't true. When law enforcement has physical access to the hardware, they can take apart the phone and flash it with new software and put it back together.
To prevent this kind of attack surface the mechanism for applying new firmware needs to wipe access keys for the encrypted data, and for these keys to not be accessible without changing the firmware.
but i already have to enter my password to apply the update and again when my device boots? Can you link to technical details please, I have been following these developments and have seen no technical explanation of the vector.
People keep saying this but it probably isn't true. When law enforcement has physical access to the hardware, they can take apart the phone and flash it with new software and put it back together.