Apple’s iPhone Passcode Problem WSJ
youtube.com
Apple’s iPhone Passcode Problem WSJ
1–10 of 33 posts
Re: Apple’s iPhone Passcode Problem WSJ
#2Can the submitter provide a summary? Unlike a text article, you can't quickly skim a 9-minute video to figure out its main point.
Re: Apple’s iPhone Passcode Problem WSJ
#3There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care.
The remediations recommended are:
- alphanumeric passcode
- different passcodes for financial apps
- not using the native password manager
- not storing credentials for financial apps in any password manager
- if you have to enter the code do not do so in public or hide it
Why MFA or tokens are not recommended, I do not know.
Re: Apple’s iPhone Passcode Problem WSJ
#4There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care. The remediations recommended are: - alphanumeric passcode - different passcodes for financial apps - not using the native password manager - not storing credentials for financial apps in any pas…
What would you like Apple to do?
Re: Apple’s iPhone Passcode Problem WSJ
#5Can the submitter provide a summary? Unlike a text article, you can't quickly skim a 9-minute video to figure out its main point.
Thieves are watching people input their PINs into phones and then stealing the phones. They can then gain access to any apps that use the "sign-in with Apple" feature that uses Face ID or PIN to log instead of the app's own login.
Re: Apple’s iPhone Passcode Problem WSJ
#6There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care. The remediations recommended are: - alphanumeric passcode - different passcodes for financial apps - not using the native password manager - not storing credentials for financial apps in any pas…
What would you like Apple to do?
not letting banking or TOPT apps work or showing validation sms codes without biometric unlocking even if you type in the password or pin.
I wouldn't mind it a bit if biometric face id triggers every time I need to read a validation sms or use a security sensitive app, even if the phone is unlocked.
time lock important changes like biometric info or anything that may result in an account takeover.
Re: Apple’s iPhone Passcode Problem WSJ
#7There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care. The remediations recommended are: - alphanumeric passcode - different passcodes for financial apps - not using the native password manager - not storing credentials for financial apps in any pas…
What would you like Apple to do?
Not allow resetting from a device only with the pin?
Also don’t allow the pin for some operations (or let you disable this). E.g. for viewing passwords or other sensitive operations besides login, it’d be safer for me to not allow pin access and only Face ID.
Re: Apple’s iPhone Passcode Problem WSJ
#8Can the submitter provide a summary? Unlike a text article, you can't quickly skim a 9-minute video to figure out its main point.
6 digit Iphone passcode can open a treasure box. Never store bank password in iPhone password manager.
Re: Apple’s iPhone Passcode Problem WSJ
#9There is a sophisticated scam targeting apple iPhone users, that starts with stealing the phone and ends with draining all financial accounts, there are hundreds of cases with damage in the five digits and apple doesn't care. The remediations recommended are: - alphanumeric passcode - different passcodes for financial apps - not using the native password manager - not storing credentials for financial apps in any pas…
What would you like Apple to do?
I'd say real MFA, so buy an iPhone and get at least to tokens for free.
Immediately deliver a software update that remedies the various steps in the attack.
The victims loose all iCloud data including all photos of sometimes ten years or more. There needs to be another layer to protect backups.
Have two pins like with the SIM cards with pin and puk. Should actually be something that apple should have thought of from the getgo.
Re: Apple’s iPhone Passcode Problem WSJ
#10Earlier quoted context omitted.
What would you like Apple to do?
not letting banking or TOPT apps work or showing validation sms codes without biometric unlocking even if you type in the password or pin. I wouldn't mind it a bit if biometric face id triggers every time I need to read a validation sms or use a security sensitive app, even if the phone is unlocked. time lock important changes like biometric info or anything that may result in an account takeover.
[deleted]