Live data from Hacker News

Under iOS 11, authorities won’t be able to image your device without a passcode

arstechnica.com

71–80 of 296 posts

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#71
post #57

I have never seen a company both so technically capable and supportive of user privacy as Apple. It stands completely apart from all of the tech giants of today.

It's great. They essentially have a monopoly on providing privacy, which is and will continue to be a bigger competitive advantage.

totally agree. i think designing software so you dont have access to customer data (zero knowledge or customer held keys) will eventually be a big selling point for SaaS companies

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#72

Earlier quoted context omitted.

This is the only reason why I moved from Android to iOS even though I enjoy the Android phones and Google Fi more. I wish Google Fi would support iOS devices.

> I wish Google Fi would support iOS devices. I'm curious - how can a carrier support and not support certain networks? Isn't that like saying I wish my ISP supported Linux?

Google Fi only allows Their Nexus and Pixel phones on their network. It is like an ISP seeing that you are running Linux and not letting your traffic through, just a bit more complicated than that. (SIM Card, Modems, Frequencies)

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#73

Earlier quoted context omitted.

This is the only reason why I moved from Android to iOS even though I enjoy the Android phones and Google Fi more. I wish Google Fi would support iOS devices.

> I wish Google Fi would support iOS devices. I'm curious - how can a carrier support and not support certain networks? Isn't that like saying I wish my ISP supported Linux?

Project Fi does some things to switch between several carriers (T-Mobile, US Cellular, others) behind the scenes that doesn't work as well on iOS. Also, you need a Pixel or Nexus device to activate initially anyways.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#74
post #61

Earlier quoted context omitted.

There is a reference for this as Apple published a security white-paper about it prior to the release of TouchID. Unfortunately, I'm not at a point where I can search for it. If I find the time today, I will update this post with a link.

Cheers. I'd appreciate it. Edit to add: I came across this one: https://www.apple.com/business/docs/iOS_Security_Guide.pdf It was linked from an article in 2014[1], though this PDF document is dated March 2017. [1]: http://www.biometricupdate.com/201402/apple-publishes-whitep...

Yeah, that's the updated one. Prior to the release of TouchID, something similar was released.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#75

Earlier quoted context omitted.

As mentioned elsewhere, Apple can't prevent "rubber hose decryption" (where someone compels/coerces/tortures you to get access to an unlocked phone). I suspect this feature wasn't designed to prevent that threat. My guess is this somehow foils or mitigates the workaround that the Israeli company sold to the FBI after the San Bernadino phone issue.

They could add a "duress passcode", with an alternate reality of data. I don't expect them to, but it's possible. Bitcoin hardware wallets have this kind of feature to help avoid wrench attacks.

Lying to a federal agent is a crime.

Edit: No seriously. See https://en.wikipedia.org/wiki/Making_false_statements. Refusing to unlock your device is one thing. Claiming that you did unlock it but in fact just used a "duress passcode" is a lie and can land you in jail.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#76
post #38

Earlier quoted context omitted.

The alternative was passcodes and Apple's research suggested that people disabled passcodes rather than use anything secure. TouchID was determined to be far more secure than no passcode and having both TouchID and a passcode is secure enough for most users. You can't add devices without both (along with an Apple ID password) and, at that point, you have physical access to the device which negates most security featu…

Interesting and pragmatic. Do you have a reference for this? I'd be interested in reading more.

Here's the whitepaper about iOS security: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#77

I have never seen a company both so technically capable and supportive of user privacy as Apple. It stands completely apart from all of the tech giants of today.

This is the only reason why I moved from Android to iOS even though I enjoy the Android phones and Google Fi more. I wish Google Fi would support iOS devices.

Largely the same here, I'm giving up on Windows too, and I've been using MS OS' since DOS. I'll pay a premium to keep my data secure.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#78
post #31
post #28

Face ID is going to screw this all up. Cops won't even need your cooperation to unlock.

Apple is adding a kill switch to iOS 11 that lets you discreetly disable Touch ID (and presumably Face ID) by hitting the power button 5 times. And of course if you're concerned you can opt out of Touch or Face ID entirely and simply use a pass-code. https://www.theverge.com/2017/8/17/16161758/ios-11-touch-id-...

Thanks for sharing that info, but I think the problem is that Apple is marketing these methods of identification as methods of authentication. Sacrificing security for convenience.

Even if they have a kill switch in place, the users least likely to know about it are the users who are most likely to use insecure methods to "secure" their phone, I would think.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#80

I have never seen a company both so technically capable and supportive of user privacy as Apple. It stands completely apart from all of the tech giants of today.

I thought the same thing reading this title and it makes me want to invest. Companies who ignore user privacy are in for a hit I think, in the wake of equifax.

I'd support companies with excellent privacy / data security records being exclusive brokers of my information. Apple is on that very short list.

Post reply on HN