Live data from Hacker News

Apple's new iPhone security setting keeps thieves out of your digital accounts

theverge.com

71–74 of 74 posts

Re: Apple's new iPhone security setting keeps thieves out of your digital accounts

#71
post #60
post #31

Earlier quoted context omitted.

Eh, fake receipts are fairly easy to knock out. When I managed a hospital's iPhone deployment I made it a point to always back up our receipts electronically because I have... had to make quite a few emails to AppleCare Security to release a few Activation Locked devices. It's not a terribly difficult process once you've done it a couple times, and I reasonably think I could release as many phones as I wanted these d…

The fake receipt Is the easy part, it’s the staffing and logistics and risk to send people into lots of Apple stores to use them. One, sure. But an organized theft ring stealing 1000 iPhones a month is probably not going to work at that scale.

There are lots of Apple Stores, many in jurisdictions that don't prioritize vigorous prosecution of small thefts or mere possession-of-stolen-property. There are lots of individuals who'd take the chance to make a quick buck. So it doesn't need to be one scaled organization: just a functioning black market.

Imagine the false docs are often accepted, rather than triggering a criminal prosecution. The practical maximum downside may be mere impoundment of the device, rather than a conviction/jailing.

(And, even that would require Apple's policy to be to assertive & confrontational: "you presented us suspicious documentation, we're holding this device – that you carried here, in your possession – until police sort it out." Does Apple want to take the risk of that backfiring on them? Or would store staff, in practice, simply say: "we can't accept that documentation, you and your device should leave.")

Then Apple's lenience here will support a positive resale value of stolen devices, enough for the weakness in their systems to be exploited.

Re: Apple's new iPhone security setting keeps thieves out of your digital accounts

#72

It's a welcome change, especially the time-lock is something that I always thought about. SMS and EMail as 2FA are dead when someone can unlock your phone. Still though, why don't iPhone owners use face unlock? Is it not good?

Say that to BofA. On my phone they still require email or text when I sign in.

Guess what I receive on this iPhone? Right, email & text.

On my PC it prompts for my YubiKey, but I cannot use it on iOS.

Re: Apple's new iPhone security setting keeps thieves out of your digital accounts

#73
post #38

Related: Set up screen time, and disable password changes and account changes, and set a (different to your regular passcode) screen time passcode. Then you have a separate passcode that keeps sensitive account changes locked.

Account changes doesn't lock changes to your Apple ID for example, it's just about email accounts and pass keychain. Passcode change is not useful, why would a thief do it anyway...

Re: Apple's new iPhone security setting keeps thieves out of your digital accounts

#74
post #46

Earlier quoted context omitted.

I'm unable to factory reset my own iPhone as it's linked to a friend's Apple account. I know the passcode. Apple are unwilling to do this for me unless I show proof of purchase (which I don't have as it was many years ago). Pretty high bar, so assuming must be inside job.

Is the friend not a friend anymore?

I haven’t spoken to that guy since he stole my iPhone.
Post reply on HN