41–50 of 113 posts
Earlier quoted context omitted.
Even if Apple added that, it's trivially easy to pop the SIM. A phone without a network connection won't ping, so that won't help. You have to think about it from the attacker's point of view. Anyone they sell it to is going to power it on to test it. Once it's powered on, it'll ping back. Any black-market buyer knows to pop the SIM anyway before powering it on, and turn on the phone without any publicly-accessible W…
Going by eBay, a lot of people are still managing to sell stolen iPhones for $100-$300: http://www.ebay.com/sch/i.html?_nkw=icl0ud%20locked&LH_Compl...
As someone in a country with a serious mugging problem and having lost an iPhone already, one of the biggest security flaws I see is being able to power it off without providing any authentication. What is even the point of Find my Phone and all that if anyone can just instantly switch off all the tracking?? You can't even ring your own number after that, and even law enforcement cannot look up the cell tower logs to…
The ability to quickly turn off the phone is useful when you need to activate a long password so that you cannot be forced to use your fingerprint to unlock it.
The only place where you would not want to use biometrics are western* countries which would allow the police to compel you to give out your fingerprints to unlock the phone.
With the exception of the UK in which not giving out a password or decryption key in the course of an investigation even if you are not the suspect of a crime can land you 7 years in prison these days.
I think two security related changes could be made to iOS that would benefit many people. 1) PIN/TouchID locking of contacts, like you can do with notes. Don't allow messages and emails to and from the contact to be decrypted from the encrypted store without authenticating, like you can now do with notes. Would help with securing communications with legal counsel or other privileged parties from being captured. 2) A…
As someone in a country with a serious mugging problem and having lost an iPhone already, one of the biggest security flaws I see is being able to power it off without providing any authentication. What is even the point of Find my Phone and all that if anyone can just instantly switch off all the tracking?? You can't even ring your own number after that, and even law enforcement cannot look up the cell tower logs to…
>and even law enforcement cannot look up the cell tower logs to see where it's been. I'm not so sure about that... I worked at a TV news station in a major city where police told us they could track cell phones that were turned off. IIRC, it came up during an interview after they apprehended a suspect in a big rape/murder case. The suspect's phone was off, but they were able to track him. They told us they didn't rea…
As far as I know phones today don't do this.
To frame the post and the conversation, I am targeting a loose but not universal threat model. If threat of deadly force is higher up in your risk scale than shoulder-surfing, or Apple cooperation is a given, then you might want to make very different choices, but more importantly, you probably need better advice than a blog post.
The only things I want to add are pair-locking, maybe a forced VPN profile, and a correction on how to check the Whatsapp fingerprint. You can find all these things in the Twitter thread.
Earlier quoted context omitted.
Going by eBay, a lot of people are still managing to sell stolen iPhones for $100-$300: http://www.ebay.com/sch/i.html?_nkw=icl0ud%20locked&LH_Compl...
What do you do with a iCould locked phone? It seems like a completely worthless device if it is locked.
Earlier quoted context omitted.
Going by eBay, a lot of people are still managing to sell stolen iPhones for $100-$300: http://www.ebay.com/sch/i.html?_nkw=icl0ud%20locked&LH_Compl...
What do you do with a iCould locked phone? It seems like a completely worthless device if it is locked.
As someone in a country with a serious mugging problem and having lost an iPhone already, one of the biggest security flaws I see is being able to power it off without providing any authentication. What is even the point of Find my Phone and all that if anyone can just instantly switch off all the tracking?? You can't even ring your own number after that, and even law enforcement cannot look up the cell tower logs to…
Move to a place with thieves who know not to steal a really hard to move phone.
Earlier quoted context omitted.
What do you do with a iCould locked phone? It seems like a completely worthless device if it is locked.
Even if the answer is "nothing" it still makes sense they're selling on ebay—people don't know that they're buying a brick, and I'd bet that's extremely difficult to contest via ebay/paypal.