21–30 of 30 posts
If you don't select the option to block Siri without entering a passcode, then you can use Siri without entering a passcode. Shocking.
It's that the option is enabled by default if you have Siri active. It's not obvious, and frankly, should be fixed.
Earlier quoted context omitted.
It's that the option is enabled by default if you have Siri active. It's not obvious, and frankly, should be fixed.
It's reasonably obvious. The option appears on the screen you get as soon as you choose your passcode.
You know what else is reasonably obvious? Those checkboxes saying "Yes, I want to also subscribe to this other site for an addition 29.95", pre-checked on the final checkout screen.
It's not reasonably obvious that after turning the passcode on, that it effectively doesn't secure anything, and it's irresponsible to think that way.
I also found that if you have iOS5 on an iPhone 4, the new camera button allows you to access apps and what-not without unlocking the phone - though it thinks its locked. Double click the home button to get the camera icon, go to camera and press home button and you can access all apps. But if you try to go to the photo gallery, the phone tells you its locked and wont go there.
Incorrect. That only works if the device doesn't require a passcode to get past the homescreen.
> In a default setting, Siri let's [sic] a complete stranger see > your calendar on your passcode locked iPhone 4S, as well as get > contact information, make a call and send texts and e-mails. A complete stranger could also steal your phone. Solution: don't leave your phone accessible to complete strangers.
Earlier quoted context omitted.
It's reasonably obvious. The option appears on the screen you get as soon as you choose your passcode.
> It's reasonably obvious. You know what else is reasonably obvious? Those checkboxes saying "Yes, I want to also subscribe to this other site for an addition 29.95", pre-checked on the final checkout screen. It's not reasonably obvious that after turning the passcode on, that it effectively doesn't secure anything, and it's irresponsible to think that way.
Earlier quoted context omitted.
> It's reasonably obvious. You know what else is reasonably obvious? Those checkboxes saying "Yes, I want to also subscribe to this other site for an addition 29.95", pre-checked on the final checkout screen. It's not reasonably obvious that after turning the passcode on, that it effectively doesn't secure anything, and it's irresponsible to think that way.
There are a grand total of 6 fields on that screen. One of those fields is prominantly labelled as "Siri". It's not like it's being hidden in small print.
Earlier quoted context omitted.
Incorrect. That only works if the device doesn't require a passcode to get past the homescreen.
Yes, I thought that might be the case - and I createda passcode after I typed this and this is true -- however it still does not allow you to access photos through the process I described. It shows you a locked screen.
The phone iPhone passcode thing is kind of a joke, unfortunately -- it's fairly easy to extract the encrypted image from a locked phone, then brute force it. Since almost everyone just uses a 4-digit simple PIN, doing an exhaustive search is faster than syncing to iTunes. What I'd really like is TPM-type security built into the phone (and used correctly) to protect from brute forcing a short authentication code, and…
Biometrics are evil. If someone wants what's in your phone that bad, you don't want them cutting off your thumb to get it.
Earlier quoted context omitted.
There are a grand total of 6 fields on that screen. One of those fields is prominantly labelled as "Siri". It's not like it's being hidden in small print.
Yes, of course I want Siri secure as well. That's why Siri's button is turned on, to enable security. On a page where you are turning on security.
The phone iPhone passcode thing is kind of a joke, unfortunately -- it's fairly easy to extract the encrypted image from a locked phone, then brute force it. Since almost everyone just uses a 4-digit simple PIN, doing an exhaustive search is faster than syncing to iTunes. What I'd really like is TPM-type security built into the phone (and used correctly) to protect from brute forcing a short authentication code, and…
You're allowed to use a password instead of a 4 digit passcode if you want. Biometrics are evil. If someone wants what's in your phone that bad, you don't want them cutting off your thumb to get it.
I'm not so afraid of someone's stealing my phone, then coming back and cutting off my thumb. If I were using the phone, it'd be easier to come up at gunpoint and grab the phone while it's unlocked, if you're that paranoid (one of the reasons highly sensitive data isn't unlocked "in the wild" in sensitive organizations).
Simple theft or losing the phone is still the most likely, and a biometric+PIN, securely stored on device, solves this.
High-end luxury cars have great engine immobilizer systems, which led to a lot of carjackings, since it was easier than unattended theft, which is basically the problem you've identified.
There are LOTS of other issues with biometrics, but they mainly come up when they're part of a centralized service and can't be completely controlled by the user.