Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

vice.com

Post reply on HN
Print view View original

91–100 of 109 posts

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#91

Post by jen20 »

maleldil wrote: post #82
jen20 wrote: post #38

Earlier quoted context omitted.

Congratulations on discovering XKCD 538 [1]. Depending on your exact threat model (i.e. barring a very surprise attack), this actually can be defended against in many cases, too. [1]: https://xkcd.com/538/ [2]: https://daringfireball.net/2022/06/require_a_passcode_to_unl...

Is there a way to do [2] on Android? I know you can hold the power button and choose Lockdown, but that requires actually looking at the phone, which would be difficult in some situations.

I haven't used an Android phone for more than about 5 minutes in total ever so perhaps someone more informed in that ecosystem can weigh in, but a quick Google did not find a way. It's also worth checking that the same properties of "before first unlock" hold for Android as they do for iPhones even if you can reset it in such a way.

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#93

Post by jen20 »

dylan604 wrote: post #59
jen20 wrote: post #39

Earlier quoted context omitted.

What exactly do you think the wrench-holder would do upon discovering the use of this?

stop hitting you with the wrench as it is no longer a useful option

Because people willing to hit you with a wrench to recover a password are definitely going to stop when they discover that you actually destroyed the thing they were looking for, thus "getting one over" on them...

Although to be fair, they might just switch to a pistol at that point. After all, you are no longer useful once the data has gone.

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#94

Post by Aaargh20318 »

socalgal2 wrote: post #69
Aaargh20318 wrote: post #37

Earlier quoted context omitted.

Every time I had to send in an iDevice for repair they required me to factory-reset it before sending it in. They never asked me for passcodes.

Every time I've gone to the Apple store they've asked for the passcode

No Apple Store near me so I’ve only dealt with their mail-in support.

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#95

Post by jdlshore »

zerof1l wrote: post #15

> This case shows how, even when Apple tightly controls its repair infrastructure, it cannot prevent disastrous cases like this Customers should be able to choose where to repair their device, or even be able to repair it themselves. Just because it's an "official" repair shop doesn't mean its the best and the safest. Louis Rossmann has been saying this for years.

And they can. https://support.apple.com/self-service-repair

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#97

Post by matt-attack »

dreamcompiler wrote: post #34
falcor84 wrote: post #28

Earlier quoted context omitted.

The word "easily" is doing some work here, as your scenario is already in the area of "rubber-hose cryptanalysis", where passcodes don't stay private for long either.

Fair enough. The threat model I have in mind here is cops and customs agents violating one's (US) fourth amendment rights. With FaceID they don't need your passcode to unlock your phone. With a passcode, they cannot legally arrest you [yet] for refusing to provide it.

I actually wonder if it’s possible to coerce someone to use Face ID. If you have it set properly it requires your eyes to be open and looking at the phone, so someone can’t use it while you’re sleeping. They would have to hold your eyes up at that point Their hand is in front of your face. And how can someone force you to look in the right direction?

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#98

Post by djhn »

dreamcompiler wrote: post #34
falcor84 wrote: post #28

Earlier quoted context omitted.

The word "easily" is doing some work here, as your scenario is already in the area of "rubber-hose cryptanalysis", where passcodes don't stay private for long either.

Fair enough. The threat model I have in mind here is cops and customs agents violating one's (US) fourth amendment rights. With FaceID they don't need your passcode to unlock your phone. With a passcode, they cannot legally arrest you [yet] for refusing to provide it.

I thought it was common knowledge that for privacy and security you should have FaceID (and before that, fingerprint reader) disabled in favour of a password.

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#99

Post by squigz »

_fat_santa wrote: post #20

Unfortunately this occurred in 2016, long before they added "repair mode" in iOS 17. But I should mention, I was in the middle of writing a comment along the lines of "apple really needs to add a repair mode to iOS" before going to look it up and realizing that it's actually been there since iOS 17. For me this highlights another issue with iOS which is it has many awesome features that you just won't know about unle…

You can't overwhelm the user with 300 "Here's what you can do with your phone!" tips when they first start it, so maybe something like a push notification every few days telling the user about a couple features.

Re: She Sent Her iPhone to Apple. Repair Techs Uploaded Her Nudes to Facebook (2021)

#100

Post by chihuahua »

matt-attack wrote: post #97
dreamcompiler wrote: post #34

Earlier quoted context omitted.

Fair enough. The threat model I have in mind here is cops and customs agents violating one's (US) fourth amendment rights. With FaceID they don't need your passcode to unlock your phone. With a passcode, they cannot legally arrest you [yet] for refusing to provide it.

I actually wonder if it’s possible to coerce someone to use Face ID. If you have it set properly it requires your eyes to be open and looking at the phone, so someone can’t use it while you’re sleeping. They would have to hold your eyes up at that point Their hand is in front of your face. And how can someone force you to look in the right direction?

By telling you that you'll spend the next 10 years at CECOT in Honduras if you don't look in the right direction.
Post reply on HN