Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

twitter.com

Post reply on HN
Print view View original

351–360 of 475 posts

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#351

Post by waihtis »

elzbardico wrote: post #310
dolmen wrote: post #243

Earlier quoted context omitted.

> You're betting on the fact that there will never be an event where a malicious party comes in contact with your phone. For example, you might take a flight, the plane break in flight and your phone is sucked out, falls on the ground and a stranger finds it. Don't tell me I'm paranoid and that this scenario is not realistic.

You have a few too many beers. While your uber drive is taking you home, you sleep while using your phone and it falls from your hand without you noticing. The next passenger is not an honest person.

I think dolmen was saying that if its likely that a phone can be found after being sucked out of an airplane, a scenario like yours is also prone to happen

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#352

Post by pc86 »

astrange wrote: post #264
donkeyd wrote: post #261

Earlier quoted context omitted.

> I also almost never use apps like dedicated banking apps or social media apps; instead, using Safari. Nearly every bank I know of recommends using apps over their website, since in general they're safer than using their websites. But I'm in The Netherlands and I don't know whether banking apps in different countries have the same security standards.

That is probably true because phones are less susceptible to keyloggers or evil browser extensions, but "security standards" have approximately nothing to do with it beyond "using HTTPS". The security model for US banks is that it's illegal to do crimes to people's bank accounts. It doesn't involve "super secure apps", bank account numbers and credit card numbers are super insecure and there is little reason you shou…

This might be true for credit cards but for the vast majority of people, even completely irrespective of income, getting your checking account number leaked to a nefarious party can absolutely cause you a hell of a lot of trouble.

Credit cards will give you the benefit of the doubt with a credit while they investigate. Banks (and credit unions) are going to be VERY hesitant to give you a 5-figure advance into a new checking out while they investigate how your account got drained when it initially looks like you did it. Even the most pro-customer policies practicable won't help when now all your automatic payments start failing. It's certainly a recipe for ruining your week and you'll likely spend the next month or two dealing with the fallout, and that's assuming you don't face crippling financial penalties because of it, which the majority of Americans would.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#353

Post by inetknght »

imgabe wrote: post #163
neilv wrote: post #91

I would've preferred that the identifying information of the person had been edited out. The phone's owner experienced a traumatic incident. Which furthermore is under investigation. Posting some kind of photo feels OK, however, since finding the phone is arguably newsworthy. And the Twitter poster says that it was open to that email, suggesting that they didn't go snooping through the phone. A little privacy redacti…

It's crazy to me that the phone hasn't locked automatically. Do people really walk around with their phones set to never lock and turn the screen off? Mine times out after 5 minutes.

> Do people really walk around with their phones set to never lock and turn the screen off?

I set mine to lock and auto-turn off after a short moment.

Nonetheless, I have found that the phone will sometimes get in a state or screen which prevents autolocking. It does this usually at the same state or screen but it's easy to trigger accidentally without noticing.

...just pull down the top bar. That might happen if you're holding your phone and it gets sucked out of your fingers. Or stolen right out of your hand.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#354

Post by quesera »

b112 wrote: post #322
downut wrote: post #299

Earlier quoted context omitted.

> I solve that, by not doing banking with my phone. Even though some scum corps like Chase make it a PITA to manage my account from a desktop through firefox, that's the only way I'm going to interact with them. "Download the app!" Hard no! In fact these are the only apps I think that appear regularly on my phone, but only when I'm traveling: AirBnB, Uber/Lyft, and whatever airline I'm currently flying on next. I thi…

I don't use Chase in the US, but I had issues with firefox and some financial websites. My fix was to create an entirely new profile, with no customization, no cookies restrictions, no add-ons, and use it only for financial sites. I then exit my current FF, and switch to it, and back again. All my issues vanished after doing that. You could also create a different user in Linux, and isolate that way. Hope it helps.

> I then exit my current FF, and switch to it, and back again.

FWIW, you can also run multiple profiles simultaneously. They are independent processes, sharing no resources or permissions.

This is my model for difficult sites. If I'm really concerned, I use FF network config to allow access only to the domains I think are proper.

Although in the case of banking, I prefer to use the official mobile apps. Some are actually pretty good. Others are awful. But I trust the iOS app sandbox and I trust my banks.

I also block traffic at the network level, so if the bank app attempted something egregious (e.g. tracking via the basket of Internet deplorables), it would fail.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#355

Post by pc86 »

ChrisMarshallNY wrote: post #308
alpaca128 wrote: post #306

Earlier quoted context omitted.

Where I live having the app for 2FA is mandatory for online banking unless you can convince them to give you a hardware TAN generator. So transferring money is actually much less convenient in the browser because everything I do has to be confirmed with my pin in the app, so I might as well just do it in the app directly and only login on one device instead of two. Of course this is actually "phone factor authenticat…

Ugh. Sorry to hear that. I use 1Password for TFA, and I haven't had to use an app. When I first run an app, and it asks for access to camera, microphone, photos, calendar, contacts, and location, I tend to immediately plonk it; regardless of its purpose. I have a PMB, and the store has an app that uses the phone to unlock the door, after hours. There is a keypad, but that hasn't actually worked, in months, and the st…

I just recently started a job that uses 1Password, which I've used personally for years, but they also recommend the 2FA built into 1Password. It's incredibly convenient, and I "know" it's as secure or more secure than using my phone, but man I just haven't been able to get over that mental hurdle of putting all my auth eggs in that 1Password basket.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#356

Post by pc86 »

downut wrote: post #299
ChrisMarshallNY wrote: post #286

Earlier quoted context omitted.

I solve that, by not doing banking with my phone. Social media and store loyalty apps are basically just PID harvesters. In fact, I have a couple of solitaire games that are constantly nagging me to join leaderboards and take community challenges. All my financial transactions are done with my Mac, which sits behind a fairly robust home network. I know, for certain, that banking apps are the #1 first target, for hack…

> I solve that, by not doing banking with my phone. Even though some scum corps like Chase make it a PITA to manage my account from a desktop through firefox, that's the only way I'm going to interact with them. "Download the app!" Hard no! In fact these are the only apps I think that appear regularly on my phone, but only when I'm traveling: AirBnB, Uber/Lyft, and whatever airline I'm currently flying on next. I thi…

I use Chase on my phone and desktop (Brave, not FF) and have noticed zero issues doing anything on the desktop.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#357

Post by nojvek »

It seems crazy to me how much attention flying accidents get vs car accidents. No fatalities in this flight.

Flying is one of the safest modes of transport. And we have FAA and stringent training / maintenance processes to thank.

https://en.m.wikipedia.org/wiki/Motor_vehicle_fatality_rate_...

US has the highest death rate per million inhabitants. Even Russia is lower now.

~100 people die every day from car accidents.

If only car accidents were investigated with the rigor of flight accidents.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#358

Post by deadbabe »

inetknght wrote: post #353
imgabe wrote: post #163

Earlier quoted context omitted.

It's crazy to me that the phone hasn't locked automatically. Do people really walk around with their phones set to never lock and turn the screen off? Mine times out after 5 minutes.

> Do people really walk around with their phones set to never lock and turn the screen off? I set mine to lock and auto-turn off after a short moment. Nonetheless, I have found that the phone will sometimes get in a state or screen which prevents autolocking. It does this usually at the same state or screen but it's easy to trigger accidentally without noticing. ...just pull down the top bar. That might happen if you…

The autolocking fails is why I wish I could lock my whole photo library behind an additional layer of unlock instead of just the hidden album.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#359

Post by m463 »

Shank wrote: post #210
imgabe wrote: post #163

Earlier quoted context omitted.

It's crazy to me that the phone hasn't locked automatically. Do people really walk around with their phones set to never lock and turn the screen off? Mine times out after 5 minutes.

I disable auto-lock. The primary reason for this is that I’m extremely intentional about using my phone. If I have some content open, I don’t want the screen turning off. This is an atypical choice, but I always lock when I’m done and don’t encounter any issues from this choice.

I sometimes do it when I have to use my phone with gloves or in the rain (temporarily)

My phone has the fingerprint sensor. I don't use faceid.

Re: iPhone that fell from hole in Alaska 737 MAX flight is found, still open to Mail

#360

Post by Daneel_ »

esrauch wrote: post #278
Daneel_ wrote: post #222

Earlier quoted context omitted.

Precisely. I’ll choose when to lock the screen - what if I’m using it to read a recipe, or looking up documentation, or I have a map on screen? Etc etc.

It seems like you should still have an auto lock to 30 minutes? Events way less drastic than an airplane door blowing off can cause you to not be able to lock your phone, like someone just snatching it out of your hand on the subway (where in theory they could keep it awake indefinitely with a 30 minute timeout but they very probably won't)

The maximum on iOS is only 5 minutes, and I regularly leave my phone untouched for longer periods than that while cooking.

I hear your point, but everything really important on my phone is behind another wall of passwords/pin protection, and I am meticulous about backups. The physical device doesn’t matter much. I’ll put it on stolen mode remotely, force an email sign out, and just assume it’s dead because they won’t be able to turn off Find My.

I also work from home, so I’m more suited to having it in this mode of operation.

Post reply on HN