Live data from Hacker News

iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

eff.org

311–320 of 342 posts

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#311
post #50
post #6

> In an attempt to keep you connected to Apple devices and services, iOS 11 compromises users' security. No. It is in an attempt to resolve the real loss of money experienced by everyday users who turn off WiFi when it’s flakey and then forget to turn it back on, costing them cash on their cellular data plan. (And the very real frustration when things don’t work they expect to work, and they don’t know why.) Meanwhil…

> No. It is in an attempt to resolve the real loss of money... Naked apologism. So unthoughtful, and delivered with such a righteous tone. If this was their intention, they could have implemented the feature honestly, informing users about what was happening, and offering a clear choice, such as an immediate popup, between "turn off for this location" and "turn off completely." That would have been fine. But the exis…

Prompting the user every time for a nuance they likely don't understand instead of just doing the thing they want 99% of the time is bad UX.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#312

Earlier quoted context omitted.

I agree it's not a huge security vulnerability, just bad design by Apple. There are also a few other reasons for disabling wifi - battery life, tracking, debugging connections, and of course security as well (not in response to specific vulnerabilities, but on the principle of less attack surface being safer).

> I agree it's not a huge security vulnerability Until the next Broadcom WiFi radio vulnerability.

If that's our threat model then we're already hosed. It's not like "turn off your wireless" is a solution to vulnerabilities like this outside of security circles.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#313
post #29
post #23

I hate this. I have a ton of wifi hotspots setup in the city, some of them require authentication, some of them don't. I leave work, mount my phone on my bike, "turn off" WiFi and cycle before realizing that nothing (like maps) is updating because I connected to a wifi point that needs authentication, or a point that is now far away because I already cycled by. While cycling, I reach to my phone and switch it "off" a…

Right, I feel like this is a bigger issue than the privacy angle too. For privacy/security, I feel like it's only really going to help to turn off all radios (airplane mode).

Just so you know, this feature change also affects airplane mode; that is, when you turn on airplane mode, only the cellular modem turns off. The WiFi and Bluetooth radios remain on if they're currently connected to something, only turning off completely if not connected.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#315

Earlier quoted context omitted.

Turn off ‘ask to join networks’ - mine been that ways for 10 years and it’s much better.

I...don't want my phone to automatically connect to random open access points? I live in a city where there are at least 5 separate open networks available at nearly all times if you're just walking around, most of which I do not want to connect to.

Not sure you understand the feature here - this controls wether you are prompted to join a network you've never seen. It doesn't automatically join those networks if you disable it, it merely silences the incessant prompts.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#316

Earlier quoted context omitted.

Turn off ‘ask to join networks’ - mine been that ways for 10 years and it’s much better.

I hate both. If "ask" is on, it's constantly harassing me. If "ask" is off, I have to search hard to find the setting that lets me connect to a wifi network in a tool that also lets me change the language I'm using.

2 taps hardly qualifies as having to 'search hard' - and even that is only the first time you need to connect to a brand new network. This smacks of exaggeration for the sake of creating drama where there is none.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#317
post #225

Earlier quoted context omitted.

> You can't use 3D touch to turn off wifi. According to Apple you have go into settings to do so. Indeed, the detailed block of controls does not present the three possible states to the user. In the same zoomed in block, the Airdrop toggle does. Conversely, going to Settings is binary and allows only for On/Off, not that very practical Disconnect state. The difference between Off and Disconnected is a light bar acro…

I agree it's not a huge security vulnerability, just bad design by Apple. There are also a few other reasons for disabling wifi - battery life, tracking, debugging connections, and of course security as well (not in response to specific vulnerabilities, but on the principle of less attack surface being safer).

Manually managing your radio state is almost certainly going to have a net negative impact on your battery life.

Your smartphone screen uses several orders of magnitude more energy lighting up than btle and wifi use while idle.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#318
post #93

Earlier quoted context omitted.

The WiFi radio uses less power than the LTE one, so if you’re in range of WiFi you save battery by leaving it on.

I don't have a data plan so I always have mobile data off.

That's a pretty rare use case, and not one that I expect most smartphone makers to optimize for.

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#319
post #6

> In an attempt to keep you connected to Apple devices and services, iOS 11 compromises users' security. No. It is in an attempt to resolve the real loss of money experienced by everyday users who turn off WiFi when it’s flakey and then forget to turn it back on, costing them cash on their cellular data plan. (And the very real frustration when things don’t work they expect to work, and they don’t know why.) Meanwhil…

[deleted]

Re: iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security

#320
post #39

In general, iOS isn’t very friendly to users who favour 3G/4G over WiFi. I’ve got unlimited data on my LTE plan but very shaky WiFi at home. I can’t start an iCloud backup without WiFi and can’t download apps or updates over a certain size. And now WiFi miraculously turns itself back on after I turn it off in Control Center (as I’ve done for some time). If I want it off I’ve got to dig through Settings. Changing defa…

> If I want it off I’ve got to dig through Settings. Yeah: press Home button, tap Settings, tap Wi-Fi, tap the toggle. A lot of digging indeed. Like, come on.

In that case, why have the quick access menu at all?
Post reply on HN