Live data from Hacker News

Apple update looks like Czech mate for locked-out iPhone user

theregister.com

181–190 of 237 posts

Re: Apple update looks like Czech mate for locked-out iPhone user

#181
post #57
post #48

Earlier quoted context omitted.

Nope, the ”trust this computer” dialog needs you to enter your passcode before any other actions are possible

Probably the only hope is jailbreaking.

Jailbreaking a locked, inaccessible iphone?

Re: Apple update looks like Czech mate for locked-out iPhone user

#182
post #150

Someone on twitter had the idea that he could use the camera to take a picture of the character (or his whole password) and copy/paste it using the built-in ocr feature. I don't have a text password on my iphone so I don't know whether you can paste into that field.

The article mentions that he tried that and it scans as a different character.

Re: Apple update looks like Czech mate for locked-out iPhone user

#183

This really should be escalated to the point where Apple engineers build a one-off / custom iOS so that this person can unlock their phone and change their passcode. I'm sure this is in the realm of possibilities. It is such a bad look.

That seems very unlikely if only because Apple probably has the equivalent of big flashing nuclear stockpile grade warning signs internally around anything that involves the phrase "one off firmware release", since they have every interest in convincing any nation-state or anyone else that it would be quite difficult and something they have no interest in to do if they ever try to compel them to make one.

Re: Apple update looks like Czech mate for locked-out iPhone user

#184

> During in-house testing, which involved taking an iPhone 16 from iOS 18.5 to iOS 26.4.1, The Register found that Apple has kept the háček in the Czech keyboard, but removed the ability to use it in a custom alphanumeric passcode. The OS will not allow users to input the háček as a character. The key's animation triggers, as does the keyboard's key-tap sound, but the character is not entered into the string. Sounds…

I remember something like 10 years ago there was an article here in HN, where someone created a user on macOS with password out of emojis.

Then he couldn’t login, because login screen does not have a special character keyboard.

EDIT: found it https://news.ycombinator.com/item?id=10742351 (apparently I remember it slightly wrong, but idea still the same)

Re: Apple update looks like Czech mate for locked-out iPhone user

#185

Tangentially related, a relative bought a new Apple laptop a few weeks ago, and I was tasked with setting it up. The computer came pre-equipped with a Czech keyboard (apparently the US models weren't in stock and that relative needed a new computer as soon as possible, so they bought a Czech one). Since the user doesn't speak Czech, I promptly removed the Czech layout and installed two other layouts, US English and H…

This feels like it's probably a stupid oversight chain like, keyboard layouts are user-specific data, so they're not decrypted before first unlock/set globally because the machine might have multiple users with different keyboard layouts.

Re: Apple update looks like Czech mate for locked-out iPhone user

#186

Earlier quoted context omitted.

Then an attacker could load an older, exploitable OS and gain access.

Weirdly I care more about my rights as the owner of the device than the rights of a theoretical attacker.

[dead]

Re: Apple update looks like Czech mate for locked-out iPhone user

#187
post #119

Earlier quoted context omitted.

Plugging in a USB keyboard is way higher level than what I'm talking about. You can contact a digital forensics firm, and they'll do it for you. It'd be custom hardware. Cellebrite-type stuff.

Why would they do it for free?

Why would it have to be free?

Re: Apple update looks like Czech mate for locked-out iPhone user

#189
post #99

Earlier quoted context omitted.

You can but you have to tie it to actual devices and a point in time, not simply a specific OS version. Essentially, all devices that existed before the change must still support the old set of characters and devices produced (or sold or activated) afterwards can support the reduced set. Or wait until a future OS version that will not support any device currently in existence.

This fails if they let you keep your password migrating between devices, though, so you probably need a version somewhere in the middle that flags it as an issue and flags it as not allowing migration without changing the passphrase.

Yeah, they could force a password update at some point to ensure passwords meet the new requirements.

Re: Apple update looks like Czech mate for locked-out iPhone user

#190

Tangentially related, a relative bought a new Apple laptop a few weeks ago, and I was tasked with setting it up. The computer came pre-equipped with a Czech keyboard (apparently the US models weren't in stock and that relative needed a new computer as soon as possible, so they bought a Czech one). Since the user doesn't speak Czech, I promptly removed the Czech layout and installed two other layouts, US English and H…

This feels like it's probably a stupid oversight chain like, keyboard layouts are user-specific data, so they're not decrypted before first unlock/set globally because the machine might have multiple users with different keyboard layouts.

Even if it is, why is there no way to change the system-wide settings? All other operating systems that I know either have an explicit button "Apply settings to login screen" or do it automatically (I'm sure 99% of the consumer-level computers sold worldwide never have more than one user on them, moreso with different keyboard layouts).
Post reply on HN