Live data from Hacker News

Under iOS 11, authorities won’t be able to image your device without a passcode

arstechnica.com

81–90 of 296 posts

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#81

Earlier quoted context omitted.

They should have an "erase everything" password.

If you are under the threat of violence that won't save you.

But maybe death is preferable to living with your anime collection out there.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#82
post #75

Earlier quoted context omitted.

They could add a "duress passcode", with an alternate reality of data. I don't expect them to, but it's possible. Bitcoin hardware wallets have this kind of feature to help avoid wrench attacks.

Lying to a federal agent is a crime. Edit: No seriously. See https://en.wikipedia.org/wiki/Making_false_statements . Refusing to unlock your device is one thing. Claiming that you did unlock it but in fact just used a "duress passcode" is a lie and can land you in jail.

Has the 5th amendment been officially repealed?and the 4th?

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#83
post #75

Earlier quoted context omitted.

They could add a "duress passcode", with an alternate reality of data. I don't expect them to, but it's possible. Bitcoin hardware wallets have this kind of feature to help avoid wrench attacks.

Lying to a federal agent is a crime. Edit: No seriously. See https://en.wikipedia.org/wiki/Making_false_statements . Refusing to unlock your device is one thing. Claiming that you did unlock it but in fact just used a "duress passcode" is a lie and can land you in jail.

Beating a human is a crime.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#84
post #56

Earlier quoted context omitted.

Android has required the user to enter the unlock code to back up the device for years now. This is Apple playing catch-up.

iOS devices have always required the device to "trust" the computer before allowing the backup. Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode.

You are correct. Android does not require you to enter a passcode to trust a computer if you have a fingerprint registered. The change is that Apple now requires you to enter a passcode if you have set up a passcode on the device in the past. If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#85

In the February 2017 case of a California artist who was questioned at San Francisco International Airport upon re-entry, after he finally agreed to unlock his iPhone, it was taken out of his sight for several minutes and could have been imaged without his knowledge. Under iOS 11, unless the artist, Aaron Gach, decided to actually give up the passcode (rather than type it in himself), he could at least have been reas…

As mentioned elsewhere, Apple can't prevent "rubber hose decryption" (where someone compels/coerces/tortures you to get access to an unlocked phone). I suspect this feature wasn't designed to prevent that threat. My guess is this somehow foils or mitigates the workaround that the Israeli company sold to the FBI after the San Bernadino phone issue.

With the facial recognition tech they might be able to measure duress. Or geofence known customs checkpoints. Would love to reasonably claim that I can't give up my data while I fear for me freedom.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#86

Earlier quoted context omitted.

What data does Google collect that Apple doesn't collect? The only difference I can see is that Google is competent at making the data it collects useful to the user and barely usable to advertisers. Your comment looks like trolling. We were discussing a feature to prevent others from backing up your device.

To answer your first question: a lot. Apple makes all your data locally encrypted by default, in Messages, Siri, iCloud, Maps, etc - they don't have the key to access it. See more at https://www.apple.com/lae/privacy/approach-to-privacy/

All of a user's device data is encrypted by default on Android as well. In this respect, they are no different.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#87

Earlier quoted context omitted.

What data does Google collect that Apple doesn't collect? The only difference I can see is that Google is competent at making the data it collects useful to the user and barely usable to advertisers. Your comment looks like trolling. We were discussing a feature to prevent others from backing up your device.

In the first part, you're setting up a premise that nobody here can or will answer publicly even if they have the knowledge of the exact information collected by either company. That gives you a free run at the second part without anything supporting it.

The information they collect is in their OSes' respective privacy policies. I've looked at them. They are pretty much exactly the same.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#88
post #79
post #28

Face ID is going to screw this all up. Cops won't even need your cooperation to unlock.

Too soon to tell. For all we know, Face ID may give you the option to provide a facial expression to unlock.

That's a great capability I hadn't considered. Your passcode isn't just a 3d composite of your face, but instead could be a 3d composite of your face performing a specific gesture over a short amount of time (wink, kiss, tilt, etc). Would be harder to spoof.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#89

When you need Apple or any technology to fight for your privacy against your own government you know you are in serious trouble. The government has no right to interfere with your personal effects, this is fundamental to freedom and democracy, and the idea of the private individual. Yet it seems this too is 'normalized' and citizens are more interested in technology workarounds to deal with this abuse from the state.

[deleted]

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#90
post #57

Earlier quoted context omitted.

It's great. They essentially have a monopoly on providing privacy, which is and will continue to be a bigger competitive advantage.

totally agree. i think designing software so you dont have access to customer data (zero knowledge or customer held keys) will eventually be a big selling point for SaaS companies

The first time I saw the concept (and got mind blown by it) was when I discovered the original version of Passpack (online password manager) made by @sullof
Post reply on HN