5 ms·

iOS devices have always required the device to "trust" the computer before allowing the backup. Looking at the article, the only real difference now appears to

iOS devices have always required the device to "trust" the computer before allowing the backup. Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode.

lern_too_spel 9y ago
You are correct. Android does not require you to enter a passcode to trust a computer if you have a fingerprint registered. The change is that Apple now requires you to enter a passcode if you have set up a passcode on the device in the past. If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.
- nemothekid 9y ago
  >If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection. You can't setup TouchID without a passcode. The "attack vector" only exists if you 0 security on your iPhone to begin with. (So , yes, technically the attack vector exists if you choose to use no locks at all).
  - 9935c101ab17a66 9y ago
    You misunderstand. The vector is: I take random persons phone, compel them to provide me their finger print, and now when I plug the phone in to a computer, I can unlock the device and then tap "trust" in order to back up the phone to the computer. If the iPhone was already powered on and the user had entered their passcode after it turned on, even if it was two weeks ago (there may be a time out I'm not aware of, but you get the point), I'd be able to backup their device to my computer.
    - matt_wulfeck 9y ago
      That's changed now, from the article: > Under iOS 11, this sequence has changed to also specifically require the passcode on the device after the "Trust This Computer?" prompt.
comex 9y ago
> Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode. That's part of it. Another part is that the passcode has to be entered after the device has been connected to the computer, as opposed to starting with an unlocked phone (maybe you took it while it was in use, maybe you forced the user to unlock it) and connecting it to a computer later.
- jaclaz 9y ago
  I am not sure to understand. Once the device is unlocked, what is the obstacle to change the passcode? Needing the old one? Or - if you prefer - what happens if you have a TouchID and forget the passcode? Do you need to reset the phone?
code_duck 9y ago
Not always... just since iOS 7.

lern_too_spel 9y ago

You are correct. Android does not require you to enter a passcode to trust a computer if you have a fingerprint registered. The change is that Apple now requires you to enter a passcode if you have set up a passcode on the device in the past. If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.

nemothekid 9y ago
>If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection. You can't setup TouchID without a passcode. The "attack vector" only exists if you 0 security on your iPhone to begin with. (So , yes, technically the attack vector exists if you choose to use no locks at all).
- 9935c101ab17a66 9y ago
  You misunderstand. The vector is: I take random persons phone, compel them to provide me their finger print, and now when I plug the phone in to a computer, I can unlock the device and then tap "trust" in order to back up the phone to the computer. If the iPhone was already powered on and the user had entered their passcode after it turned on, even if it was two weeks ago (there may be a time out I'm not aware of, but you get the point), I'd be able to backup their device to my computer.
  - matt_wulfeck 9y ago
    That's changed now, from the article: > Under iOS 11, this sequence has changed to also specifically require the passcode on the device after the "Trust This Computer?" prompt.

comex 9y ago

> Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode. That's part of it. Another part is that the passcode has to be entered after the device has been connected to the computer, as opposed to starting with an unlocked phone (maybe you took it while it was in use, maybe you forced the user to unlock it) and connecting it to a computer later.

jaclaz 9y ago
I am not sure to understand. Once the device is unlocked, what is the obstacle to change the passcode? Needing the old one? Or - if you prefer - what happens if you have a TouchID and forget the passcode? Do you need to reset the phone?

code_duck 9y ago

Not always... just since iOS 7.