Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Always-on Processor magic: How Find My works while iPhone is powered off

naehrdine.blogspot.com

Post reply on HN
Print view View original

251–260 of 267 posts

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#251

Post by ewzimm »

heydabop wrote: post #141
harry8 wrote: post #116

Earlier quoted context omitted.

Without disagreeing with anything you've said there, even if you /think/ you have nothing to hide now and happen to be correct in practice, it's a terrible assumption to think that you can count on that being true forever. Imagine you witness a murder in a restaurant, cold blooded and it's dirty cops working for a three letter institution that did it. You want to give evidence like a law abiding, upstanding citizen w…

You don't even have to get that radical with "nothing to hide". Next time someone says that ask if they use blinds in their house/apt, if you could setup a webcam in their living room, or if you could just read some texts between them and a significant other. Or ask for their passwords, date of birth, SSN, credit card numbers, pets' names, and parents' names. Simple things like this are why I talk to people via Signa…

I'm curious about your concerns about a Nest/Ring doorbell. Since it would presumably face a public space, if there was a privacy concern, it would seem easier for a third party to set up their own camera for surveillance. If I was worried about being watched, I would think the best strategy would be to set up vulnerable cameras on my own network, monitor them for access, and hope that someone would try to use them instead of installing their own.

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#252

Post by mmis1000 »

Jensson wrote: post #231
mmis1000 wrote: post #211

Earlier quoted context omitted.

Due to how battery designed. A actually fully discharged battery can't be charged normally.(the power control chip on the battery need a bit power to function normally) Typically this can't happen because your phone will shutdown before that. But if you used up the battery and not charge for a long time (1 months or so). This can happen because batteries discharge themselves slightly even not being used.

Why can't the power control chip also get power from the charging power? That wouldn't be particularly hard to do.

It turns out my memory is incorrect. The lithium-ion batteries damage itself when the under certain voltage due to how it works. The control chip is there to stop the battery from having too low voltage. However they can't help with self discharging caused low voltage.

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#253

Post by beckman466 »

thefr0g wrote: post #233
beckman466 wrote: post #177

Earlier quoted context omitted.

And most devices have backdoored CPUs too (Intel ME) I wonder what the next Crypto AG (CIA front) will be

> I wonder what the next Crypto AG (CIA front) will be NSA: VPN and "secure" webmail providers CIA: They don't need fronts anymore, they have CISCO, Juniper, Netgear, etc.

many argue that silicon valley firms are de facto extension of the US government [1]. a swiss army knife (haha) in their toolkit that allows complete control over the flow of information. i mean seriously, just look at how fast the Crypto AG story was forgotten. only this Dutch article [1] and a handful of others properly dives into the profound impacts that the CIA backdoored Crypto AG devices likely had on world events in the past 50 years. [2]

so yeah if SV firms were not extensions of the US govt. (hardware firms too, not just software), they would have already been broken up years ago.

the senate hearings are just a charade used to stroke the ego's of the 'visionary' SV tech bro CEOs. they also show us how tech illiterate the working class has been made. [2]

[1] https://www.youtube.com/watch?v=6pVfYmttcag, https://www.youtube.com/watch?v=q9oMYL2M_tE

[2] https://www.vpro.nl/argos/lees/onderwerpen/cryptoleaks/2020/...

[3] https://jacobinmag.com/2015/03/socialism-innovation-capitali...

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#254

Post by okamiueru »

apetresc wrote: post #236
okamiueru wrote: post #199

Earlier quoted context omitted.

What is the use case that feature? I get an active "what is this song".

It demoes well at I/O.

But.. What is the use case? That... The phone can give you statistics of what music you've been listening to?

Sort of like a "here is the locations you've been to, because we've been tracking you at every step", but instead "here is the music you've listened to, because we've been eavesdropping at all times"?

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#256

Post by heydabop »

ekianjo wrote: post #238
heydabop wrote: post #183

Earlier quoted context omitted.

Gee, thanks for contributing to the conversation and providing a useful alternative. The only semi-popular better option I can think of is Matrix, but getting people on Signal is already hard enough and using Matrix on a mobile device is (last I checked) far from ideal. Security is a gradient, not an all-or-nothing. Signal is vastly better than almost every other electronic communication method.

Once its compromised there is no gradient anymore and you never know when things are compromised because three letter agencies will anyway not tell you.

So what do you use instead?

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#257

Post by robotguy »

heydabop wrote: post #141
harry8 wrote: post #116

Earlier quoted context omitted.

Without disagreeing with anything you've said there, even if you /think/ you have nothing to hide now and happen to be correct in practice, it's a terrible assumption to think that you can count on that being true forever. Imagine you witness a murder in a restaurant, cold blooded and it's dirty cops working for a three letter institution that did it. You want to give evidence like a law abiding, upstanding citizen w…

You don't even have to get that radical with "nothing to hide". Next time someone says that ask if they use blinds in their house/apt, if you could setup a webcam in their living room, or if you could just read some texts between them and a significant other. Or ask for their passwords, date of birth, SSN, credit card numbers, pets' names, and parents' names. Simple things like this are why I talk to people via Signa…

>Next time someone says that ask if they use blinds in their house/apt

I think this is the closest analogy I've heard yet, but not in windows on suburban, tree-lined street. People walk down those streets and the windows are at eye level. Someone could accidentally see into those windows. No, I think if we consider windows in hi-rise buildings in a major city, the analogy is getting much closer. Seeing into one of those windows requires a bare minimum of intent and possibly an inexpensive tool, say binoculars or a telescope. However I would be willing to bet that a large portion of hi-rise dwellers do NOT close their blinds on the theory of "No one is looking in MY window."

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#258

Post by hellojesus »

ekianjo wrote: post #238
heydabop wrote: post #183

Earlier quoted context omitted.

Gee, thanks for contributing to the conversation and providing a useful alternative. The only semi-popular better option I can think of is Matrix, but getting people on Signal is already hard enough and using Matrix on a mobile device is (last I checked) far from ideal. Security is a gradient, not an all-or-nothing. Signal is vastly better than almost every other electronic communication method.

Once its compromised there is no gradient anymore and you never know when things are compromised because three letter agencies will anyway not tell you.

Given the risk of xyz agency, there seem to be only a couple options to me:

- side-load a peer reviewed apk so you can check the sigs and make sure all crypto is being done locally (and to make sure that the implementation is solid)

- manage your own keys like you would with traditional pgp emails. Give your public to your friend. Force them to send anything sensitive using it. Maybe change to symmetric keys from asym but rotate occasionally. But you still have to trust the app you use to do this unless you want to do it manually each time.

*These don't necessarily solve the Metadata issue

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#259

Post by widowlark »

okamiueru wrote: post #254
apetresc wrote: post #236

Earlier quoted context omitted.

It demoes well at I/O.

But.. What is the use case? That... The phone can give you statistics of what music you've been listening to? Sort of like a "here is the locations you've been to, because we've been tracking you at every step", but instead "here is the music you've listened to, because we've been eavesdropping at all times"?

for me, its like a soundtrack recorder for my life - sometimes ill remember that there was a cool song playing at the bar and with this feature, its likely that my phone captured the song and tells me what it is - there are 3rd party apps that will give you location based info for when and where you heard the song as well, so it creates a music map and timeline for you. its a very niche feature.

Re: Always-on Processor magic: How Find My works while iPhone is powered off

#260

Post by heydabop »

hellojesus wrote: post #258
ekianjo wrote: post #238

Earlier quoted context omitted.

Once its compromised there is no gradient anymore and you never know when things are compromised because three letter agencies will anyway not tell you.

Given the risk of xyz agency, there seem to be only a couple options to me: - side-load a peer reviewed apk so you can check the sigs and make sure all crypto is being done locally (and to make sure that the implementation is solid) - manage your own keys like you would with traditional pgp emails. Give your public to your friend. Force them to send anything sensitive using it. Maybe change to symmetric keys from asy…

> side-load a peer reviewed apk

Signal has open sourced clients with reproducible builds (on Android) and their encryption library has been reviewed by multiple 3rd parties to great acclaim.

PGP lacks forward secrecy, meaning if a key does get compromised all of your past correspondence is now also compromised.

Post reply on HN