11 ms·

I'm not sure it _is_ a poor product decision though. There are a large number of hurdles between "I have a functioning device" and "I can no longer use my devi

I'm not sure it _is_ a poor product decision though. There are a large number of hurdles between "I have a functioning device" and "I can no longer use my device". Passcodes, password resets, account ownership claims, device ownership claims. There's an extensive path of steps to follow which allow a legitimate user to regain access. In this situation we have: - Someone who has disabled their access, probably through entering the wrong password a few times - No knowledge of the security details on the linked account - No access to the email address associated with the account - No proof of ownership of the device In other words, from Apple's perspective, the user in question could easily be using a stolen device. I'm curious though – what's the 'correct' product decision that should have been made here? Is it possible to build a system which is both secure and allows _any_ user to gain access to their device, no matter how many safeguards they have avoided?

Gupie 8y ago
Couldn't Apple make it be standard to provide a name and address when buying such a product? You could then for example take ti to your local apple store with some ID to get it unlocked.
- matthewmacleod 8y ago
  And then you sell it to someone else (as happened in this case) and don't update the record, and suddenly you're locked out again. But it's possible that there are specific lessons to learn here, so it's always worth examining failure cases!
  - Gupie 8y ago
    That's true, the article was unreachable so I had only read these comments. But what I don't understand is why her iCloud account was locked.
ghaff 8y ago
Make it easy to regain access to a device under these sorts of circumstances and, instead of this story, you have one about how a thief was able to gain access to my stolen device even though they had almost none of the information they should have needed. The more forgiving you are the more exposed you are to social engineering and other attempts to work around security systems.

Gupie 8y ago

Couldn't Apple make it be standard to provide a name and address when buying such a product? You could then for example take ti to your local apple store with some ID to get it unlocked.

matthewmacleod 8y ago
And then you sell it to someone else (as happened in this case) and don't update the record, and suddenly you're locked out again. But it's possible that there are specific lessons to learn here, so it's always worth examining failure cases!
- Gupie 8y ago
  That's true, the article was unreachable so I had only read these comments. But what I don't understand is why her iCloud account was locked.

ghaff 8y ago

Make it easy to regain access to a device under these sorts of circumstances and, instead of this story, you have one about how a thief was able to gain access to my stolen device even though they had almost none of the information they should have needed. The more forgiving you are the more exposed you are to social engineering and other attempts to work around security systems.