Live data from Hacker News

Apple update looks like Czech mate for locked-out iPhone user

theregister.com

121–130 of 237 posts

Re: Apple update looks like Czech mate for locked-out iPhone user

#122
Tangentially related, a relative bought a new Apple laptop a few weeks ago, and I was tasked with setting it up. The computer came pre-equipped with a Czech keyboard (apparently the US models weren't in stock and that relative needed a new computer as soon as possible, so they bought a Czech one).

Since the user doesn't speak Czech, I promptly removed the Czech layout and installed two other layouts, US English and Hebrew, for the languages that the relative uses to type on the computer.

For some reason, login screen just after boot still uses Czech layout, which means Z and Y are swapped and numbers must be typed with Shift (just pressing numbers outputs Czech letters like ěščř). So when booting up the machine (remember that you can't use fingerprint during first unlock), the user must type the password in whatever layout is physically printed on the keys, even though the rest of the OS doesn't even have a mention of that layout. Somehow afterwards the OS "can" see the list of the layouts and lock screen correctly chooses the English US layout.

Alongside of that, for some reason, the key that's supposed to type ` and ~ in the US layout types some nonsense instead (a plus-minus sign and a section sign), whereas the backtick key is for some reason located between left Shift and Z (good luck unlearning years of muscle memory typing ~/Documents in the terminal)

Re: Apple update looks like Czech mate for locked-out iPhone user

#123

Earlier quoted context omitted.

Biggest lesson is Apple should allow you to downgrade OS, especially on old devices. Or release some sort of open version once device is EOL'd.

Then an attacker could load an older, exploitable OS and gain access.

Weirdly I care more about my rights as the owner of the device than the rights of a theoretical attacker.

Re: Apple update looks like Czech mate for locked-out iPhone user

#124
post #36
post #15

Earlier quoted context omitted.

[flagged]

I agree with you and don't really get what Apple gets from removing a valid Czech character, but how would you test if all existing passcodes remain inputable without knowing the passcodes of all iPhone users? The one way to do this that I could see is to include both the new keyboard and the old one and if someone fails to unlock with the new one auto report that to Apple (not the code, just that the unlock failed a…

It's literally a matter of an automated test that sets a password using every character on every possible keyboard type, then tries to type that password in on the lock screen. There's not even that many keyboards, that test would take what, an hour to run?

Re: Apple update looks like Czech mate for locked-out iPhone user

#125

As a non-English speaker I can really relate to this. I think the real mistake was Apple allowing to enter a non-ASCII password in the first place. E.g. on macOS the password fields have been locked to English character set, and I'm not sure why it changed on iOS.

> As a non-English speaker I can really relate to this.I think the real mistake was Apple allowing to enter a non-ASCII password in the first place.

As a non-English speaker (Czech, actually), it is clear to me to not use non-ASCII characters in passwords, or generally not use characters that are at different position on default English keyboard and locally used keyboards, i.e. use only ASCII alphanumeric chars except 'Y' and 'Z'.

As keyboard setting is per-user setting, keyboard may be different on login screen than on regular desktop (and once-login password prompts).

Re: Apple update looks like Czech mate for locked-out iPhone user

#126

Earlier quoted context omitted.

Then an attacker could load an older, exploitable OS and gain access.

Weirdly I care more about my rights as the owner of the device than the rights of a theoretical attacker.

So don’t buy an iPhone if you don’t care about the security of your device and personal information. That would introduce a massive security hole that would negatively affect far more users than it would help.

Re: Apple update looks like Czech mate for locked-out iPhone user

#127
post #9

I used to have an emoji password for my Android phone, and had the exact same issue after a reset! It's an odd but pretty terrible failure mode for locking oneself out...

You say locking oneself out, but I decline to consider any situation where a password can be set but not later entered as one where the user bears even a modicum of fault.

I remember a website that silently removed everything but the first 8 characters from the "password" field upon registration but somehow didn't do the same on the login page. It took me several hours and several password resets to actually log in after registration, since for some reason the trimming happened client-side and only when typing the password manually (and I was pasting my password from a password manager).

Re: Apple update looks like Czech mate for locked-out iPhone user

#128
post #66

Majority of California based companies employee English only or English and Spanish speakers possibly with some Indian language as well. This leads to lots of problems when you are bilingual or bilingual in other languages such as German in French. Neither Apple nor Microsoft under this sort of language swapping well. Never mind rarer languages like Czech or Greek.

Netflix can't even auto-translate subtitles (in the age of genai where we are close to generating entire movies from scratch). Let alone ever imagine that you'd want to see subtitles in two languages at once. Language support is still such an enigma.

We run into this issue when watching Korean movies/dramas. My wife prefers Japanese subtitles and I prefer English/German. I haven’t found a way to enable two subtitles in Firefox (via extensions). So in those cases I usually download a release which contains subtitles in both languages and use a script to extract them via ffmpeg and then combine them into a single srt. Now the issue is that the lines of the different languages don’t always appear/disappear at the same time. This leads to text jumping up and down. I have tried to mitigate it by injecting white space where only one line is visible, but this again fails when the video player breaks long lines or when the location of the subs change to the top (because there is hard-coded text in the image). I feel like there must be a better way…

Re: Apple update looks like Czech mate for locked-out iPhone user

#130
post #115

Earlier quoted context omitted.

> Steve Jobs would be rolling in his grave if he could see the software quality of the products that Apple releases today. lol, nah he wouldn't. He would of upgraded his coffin to plush and got a big screen to watch the money roll in. I recommend reading up on his 80/90's antics. All he cared about was money and that the world was crafted by him. He was widely known for intense bullying, lacking empathy, and ruthless…

Yes, and "his obsessive drive for perfection" as you put it is what would make him "rolling in his grave if he could see the software quality of the products that Apple releases today" as the parent put it.

Didn't he also say you are holding it wrong?
Post reply on HN