21–30 of 33 posts
Earlier quoted context omitted.
There was a thread yesterday where someone suggested using a screen time pin, different from device pin, and disabling access to iCloud settings as a potential way to protect yourself too.
Where was that? Might be interesting
Earlier quoted context omitted.
So the 6 digit iPhone passcode overrides the iCloud master password? That's insane.
Yeah I don't understand why Apple would even know my iPhone passcode. I always assumed it stayed on the device.
There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care. The remediations recommended are: - alphanumeric passcode - different passcodes for financial apps - not using the native password manager - not storing credentials for financial apps in any pas…
What would you like Apple to do?
Earlier quoted context omitted.
Thieves are watching people input their PINs into phones and then stealing the phones. They can then gain access to any apps that use the "sign-in with Apple" feature that uses Face ID or PIN to log instead of the app's own login.
> uses Face ID or PIN to login I just tried this and neither LastPass nor any of my banks accept PIN. It’s FaceID or the full 3rd party password only. Is this a real issue? What banks and password managers allow pin? Only Apples built in manager?
I’m stunned you can change your Apple password with just a passcode and the device.
Since then, Apple has changed iCloud log-in to use a derived key that requires the 6-digit passcode. This has reduced the problem dramatically.
It's very strange that they don't require the old password or any sort of 2FA (for users with multiple Apple products) to change the password though.
Can the submitter provide a summary? Unlike a text article, you can't quickly skim a 9-minute video to figure out its main point.
Summary: Due to the complexity and recursive nature of modern digital authentication, it turns out that often all that is really really actually protecting a user's identity at the end of the day is a 4 digit PIN code that they happily type in front of anyone and everyone hundreds of times per day. An attacker with knowledge of someone's PIN can use it to gain temporary access to a user's device, and then they have b…
Earlier quoted context omitted.
Summary: Due to the complexity and recursive nature of modern digital authentication, it turns out that often all that is really really actually protecting a user's identity at the end of the day is a 4 digit PIN code that they happily type in front of anyone and everyone hundreds of times per day. An attacker with knowledge of someone's PIN can use it to gain temporary access to a user's device, and then they have b…
Does the video claim this is unique to Apple/iPhone in any way?
"A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life"
Earlier quoted context omitted.
Does the video claim this is unique to Apple/iPhone in any way?
The journalist interviews a police chief in the video who claims "99% of these cases" involve an iPhone rather than Android
Thieves would simply target people with iPhones because they're more likely to have money, and in particular people with the newest flagship iPhones.