Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Samsung’s “repair mode” lets technicians look at your phone, not your data

arstechnica.com

Post reply on HN
Print view View original

61–70 of 94 posts

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#61

Post by ibejoeb »

627467 wrote: post #51

Companies (apple included) can invest all they want in features and press releases claiming that said features are to ensure customer privacy but - unless these features are open sourced and subject to public and recurrent scrutiny - it is just faith that they expect from customers. If you care deeply about the privacy of you data, don't hand your data on a physical device to anyone.

There are other practical indicators of how good things are. Apple, for instance, demonstrated that the iphone was sufficiently secure to provoke some novel legal maneuvering during the San Bernardino situation.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#62

Post by na85 »

Gigachad wrote: post #53
627467 wrote: post #51

Companies (apple included) can invest all they want in features and press releases claiming that said features are to ensure customer privacy but - unless these features are open sourced and subject to public and recurrent scrutiny - it is just faith that they expect from customers. If you care deeply about the privacy of you data, don't hand your data on a physical device to anyone.

You don't need open source. Just look at the business incentives. Samsung has no incentive at all to give 3rd party repair workers access to your private data. Even if the feature isn't bullet proof, its going to be a whole lot better than the current situation where you hand your phone and password over and come back later to pick up the phone.

National Security Letters or their equivalent in other jurisdictions render the "no business incentive" argument to be moot.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#63

Post by nolok »

liminalsunset wrote: post #16
leereeves wrote: post #10

> If the user executes 'Repair Mode' in the 'Battery and Device Care' menu in the 'Settings' of the smartphone, the smartphone is rebooted. But how do you enter repair mode if your phone is broken?

I think on Samsung phones, plugging them into a standard USB-C multiport hub with an HDMI monitor and a keyboard/mouse plugged in allows use of the "DeX" mode, even while locked. I would assume someone could plug the phone in, use the mouse to enter their password and operate the UI to activate such a feature.

You can just use a usb to hdmi cable or adapter

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#64

Post by nolok »

Nullabillity wrote: post #23
liminalsunset wrote: post #16

Earlier quoted context omitted.

I think on Samsung phones, plugging them into a standard USB-C multiport hub with an HDMI monitor and a keyboard/mouse plugged in allows use of the "DeX" mode, even while locked. I would assume someone could plug the phone in, use the mouse to enter their password and operate the UI to activate such a feature.

I'm sure that'll be helpful for the one person in the world who owns a USB-C multiport hub.

You can just use a usb to hdmi cable or adapter

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#65

Post by init2null »

Pakdef wrote: post #52
627467 wrote: post #51

Companies (apple included) can invest all they want in features and press releases claiming that said features are to ensure customer privacy but - unless these features are open sourced and subject to public and recurrent scrutiny - it is just faith that they expect from customers. If you care deeply about the privacy of you data, don't hand your data on a physical device to anyone.

Also, we know that if you use icloud, Apple saves a copy of your encryption key ...

That's true with iCloud Backup specifically, not iCloud. But unsecured notes and photos don't fall under the encryption umbrella, so syncing those means you lose privacy. Even syncing messages is safe, since messages are shared with your private encryption key. iCloud Backup and photo syncing are pretty much the bones thrown to US law enforcement.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#66

Post by greatgib »

I also call for bullshit feature. Most of the time, you send your phone because it is not working anymore, unreactive, so there will be no way to go into repair mode.

But, that being said, this does not address also one big hurdle for people sending their phone for repair, that is the opposite: losing all data. As a standard procedure, most technicians will reset to factory the device to see if it fixes the problem even when you send it for an unrelated issue.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#67

Post by Gigachad »

na85 wrote: post #62
Gigachad wrote: post #53

Earlier quoted context omitted.

You don't need open source. Just look at the business incentives. Samsung has no incentive at all to give 3rd party repair workers access to your private data. Even if the feature isn't bullet proof, its going to be a whole lot better than the current situation where you hand your phone and password over and come back later to pick up the phone.

National Security Letters or their equivalent in other jurisdictions render the "no business incentive" argument to be moot.

That is completely useless in the context of this feature. National security letters go direct to Samsung who already have full access. This feature is relating to creeps at 3rd party repair stores stealing your nudes.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#68

Post by pbhjpbhj »

karamanolev wrote: post #30
MrDresden wrote: post #24

What does PII stand for? Personal identifiable information? If so, there is much more stored on a device then identity information.

It's not so much identity information (i.e. data about your identity), as much as data that can personally identify you. The obvious PII is your full name and social security number. That's your identity. But your credit card number or your address aren't your identity, per se, but still can personally identify you, so also considered PII. Things that are not normally considered PII is for example your OS or even spe…

Things like IMEI are PII too, the number is printed on a label on the mobile phone box and recorded by the seller (in UK, I gather) when you make a purchase.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#69

Post by xeromal »

randombits0 wrote: post #35
63 wrote: post #3

This feels like a big win for privacy. I just hope that it's communicated well enough that users know to enable it when they send in their phone for repairs. I also wish there was a way to enable it if the touchscreen is inaccessible, as it usually is by the time I would consider seeking repairs.

It’s also bs. The promise is only as good as the maker and the technology. Has it been vetted? Are there independent evaluations? Is Samsung willing accept any liabilities in the event of failure? All hype, no substance. Delete your data (with no way of verifying) and restore it on return.

If you don't trust the manufacturer of your phone, don't buy the phone.

Re: Samsung’s “repair mode” lets technicians look at your phone, not your data

#70

Post by randombits0 »

xeromal wrote: post #69
randombits0 wrote: post #35

Earlier quoted context omitted.

It’s also bs. The promise is only as good as the maker and the technology. Has it been vetted? Are there independent evaluations? Is Samsung willing accept any liabilities in the event of failure? All hype, no substance. Delete your data (with no way of verifying) and restore it on return.

If you don't trust the manufacturer of your phone, don't buy the phone.

I can’t trust any of them. I still have a phone. I don’t trust it.
Post reply on HN