21 ms·

About Lockdown Mode

374 points by hjuutilainen 4y ago

int_19h 4y ago
The trend towards disabling JIT for the sake of security is interesting. I wonder what effect this will have on wasm adoption.
teeray 4y ago
> Lockdown Mode is not a configurable option for Mobile Device Management by system administrators This is the best news. Otherwise, you can bet your IT department would be throwing that switch on for everyone.
- deathgripsss 4y ago
  I imagine in lockdown mode the device would be pretty much useless as a work device.
  - amself 4y ago
    Negative. I’ve been using it since the update with no issues.
    - kerblang 4y ago
      I would be interested in hearing more about your experience and whatever sort of things have come up...
      - Syonyk 4y ago
        I've been using Lockdown for a month or two now with the beta, and did some writing on it: https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browser-analysis/ https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browse... Results of enabling it and using my phone as I normally would: - Some websites don't display images. I've no idea what they encode to, but they won't display. Fine, don't care. - Animated GIFs don't play in Messages when coming in via SMS (perhaps iMessage too, haven't tried). Annoying when people communicate in animated GIFs, but... people just expect my tech to be weirdly broken, so this doesn't actually impact things significantly. And that's it. I couldn't tell you the performance delta in casual internet use, though I don't use my phone very heavily either.
  - masklinn 4y ago
    You can opt applications and website out.
- _joel 4y ago
  Could they not just implement the functionality in MDM policy anyway, or close enough?
  - bpye 4y ago
    Don’t think MDM could do stuff like disable JIT.
    - _joel 4y ago
      Probably can't, good point
    - GekkePrutser 4y ago
      No but Apple could of course add the option. They fully control the MDM API.
- gambiting 4y ago
  I imagine it's just yet another protection for the mode - it cannot be controlled by external policy, so no one can force it off externally.
- gregsadetsky 4y ago
  Sorry, I'm not sure that I follow. Why would it be a bad idea if some IT departments enabled Lockdown Mode (LM) via MDM..? The article says that in LM, you can't enrol the device in MDM -- I suppose that if you want LM functionalities, it makes some sense that you wouldn't want parts of your device to be remotely controllable by an entreprise (or your MDM profile overriding some of the Lockdown options..?) But... I don't understand what you mean by it being a bad thing that IT admins would want Lockdown Mode for everyone. Thanks
  - bgro 4y ago
    There are a lot of cases where you have to be available on chat. Either sit at your desk and do nothing for 12 hours straight, or do anything you want and just have your phone on you. This could either be a slow day at work, or an actual off day like being on call on a Saturday. A lot of companies aren't going to buy you a separate work phone. If there's a lazy security option that can be enabled, a lot of companies are just going to inappropriately turn it on because it doesn't bother them that your phone can't do anything fun. That doesn't cost them money. Even if you're a web designer for a small shoe store where obviously nuclear power plant level of security doesn't really make sense. I remember android phones like 10 years ago or so had some corporate policy option so any time the screen is locked, you need to enter a 20 character password that has uppers, lowers, capitals, symbols, and numbers. Any patterns / words it decided were too easy to guess were rejected for a password. This wasn't a "Lock after an hour of inactivity." It was "Lock immediately, and set screen timeout to 30 seconds."
    - blep_ 4y ago
      This is how you get me to start stubbornly claiming I don't have a smartphone. If you have special requirements for the devices I use, it's your responsibility to provide separate devices from my personal ones.
    - withinboredom 4y ago
      I refuse to sign in to my work gmail on my android exactly for this reason. It basically wants to lock down my phone. It doesn’t do that for my iPhone though, but I’m not logged in their either, FWIW. I refuse to use my personal devices for work, as a matter of principle. Need me to be on call?, flip phones are pretty darn cheap.
Arrath 4y ago
The ability to exclude apps or websites from the lockdown seems at the face of it to reintroduce attack surface that lockdown mode is meant to prevent. Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack?
- Shank 4y ago
  > Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack? What type of exploit would be able to add something to the exclusion list but not already perform arbitrary code execution and just attack the system directly? This seems incredibly unlikely -- and roundabout, because you'd still have to get the browser to load the page.
  - deleted 4y ago
    [deleted]
  - Arrath 4y ago
    I honestly haven't a clue, really just spit-balling after reading the link.
  - sideshowb 4y ago
    Maybe they could compromise the server of someone else's site that's on the exclusion list?
- 1f60c 4y ago
  The only way I can think of that could work is if an attacker made a website (and convinced the target to visit it) that said something like: > Tap Aa > Disable Lockdown Mode to view News Org secure content Similarly to how malicious Word docs get users to enable macros.
yuan43 4y ago
> Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats. Most people are never targeted by attacks of this nature. The list of restrictions doesn't seem to inhibiting - for those who have used it, what are the points that stand out? Is this something designed for habitual use or under specific situations?
- rooster8 4y ago
  Been using since it came out over a month ago. The biggest annoyances are: 1. You cannot tap on any links in iMessage. You have to hold your thumb down on the link, copy it to clipboard, switch to Safari, paste 2. If someone posts a gif in an iMessage thread, it doesn't show up 3. All inbound requests for FaceTime calls seem to be automatically blocked, even when they are coming from people who are favorites in my contacts. I haven't looked into why yet. Maybe it's because I don't have their phone number saved with a `+1` prefix in my contacts? Other than that it's hardly noticeable, and I think it's fantastic that we now have this option.
  - tylerhou 4y ago
    The linked article says > Incoming FaceTime calls are blocked unless you have previously called that person or contact. So you may have to call them first, even if they are a favorited contact.
    - rooster8 4y ago
      Thank you! TIL that I never initiate calls with the most important people in my life.
      - bee_rider 4y ago
        Can meet in person, after all, right?
    - dereg 4y ago
ievans 4y ago
Notable highlights for me: > Lockdown Mode is available in iOS 16 and coming soon in iPadOS 16 and macOS Ventura. > Web browsing - Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed, and images might be replaced with a missing image icon. The first sentence I believe is referring to disabling JIT (just in time compilation of Javascript), which is dangerous as it allocates W+X pages which are often used by the final stage of an exploit. Apple did an amazing job already of hardening iOS by severely restricting which applications can use JIT (and this is their justification for why non-Safari browser engines are not allowed on iOS) and even enabling per-thread memory page permissions. Many more details are in this fantastic post from Google's project Zero: https://googleprojectzero.blogspot.com/2020/09/jitsploitation-three.html https://googleprojectzero.blogspot.com/2020/09/jitsploitatio... Overall it's very interesting to see Apple invest so significantly in something that will benefit relatively few users -- not that I'm complaining!
- alerighi 4y ago
  > Apple did an amazing job already of hardening iOS by severely restricting which applications can use JIT Well they did that not because they care about users but because they want all software to pass trough the App Store (and thus the review and policies of Apple). If you would allow to run efficiently code from other sources (for example downloaded at runtime, put in a W+X memory page and executed) that code doesn't pass through the review process of Apple, thus one can publish an app that does something and then modify its code to make it do another thing (even load an entirely different thing). In the end I don't think this is a good thing for users.
  - GekkePrutser 4y ago
    Indeed this, it's more about platform control. I really hope the EU will succeed in forcing Apple to allow third party app stores. That would be a game changer. People that are happy to stay in the walled garden can simply not use any other app stores but for someone like me it will open up iOS as an actual option I can choose. Right now there's too many things I can't do on iOS. Though honestly, I'd be even happier with a real third option instead.
ffhhj 4y ago
> 3. Under Security, tap Lockdown Mode and tap Turn On Lockdown Mode. > 4. Tap Turn On Lockdown Mode. Tap twice? ;)
- duskwuff 4y ago
  This is correct. The first one is a menu option; the second one is in a dialog explaining what you're getting yourself into.
- deleted 4y ago
  [deleted]
Tomte 4y ago
I think lockdown mode prevented me from copying text on my iPad and pasting it on the iPhone in WhatsApp, but let me paste it in Apple Notes. I'm not sure though, it might have been a bug, it might have been a user error, but I wonder if inter-device copy and paste is limited, too. I haven't read anything about it, though. Otherwise I've noticed nothing, except a popup when starting apps for the first time after activating lockdown mode, that lockdown mode is active for the app. To me, lockdown mode is a no-brainer. But I don't use very JS-intensive web sites, and never use Apple messages.
- GekkePrutser 4y ago
  Are you sure this is the lockdown mode? If your phone is enrolled in an MDM the admin can control which apps you can copy/paste between and normally this includes just the corporate-sanctioned apps.
- alphabettsy 4y ago
  Paste from clipboard is also protected in iOS 16, has to be allowed.
_jal 4y ago
Unless I'm missing something, I think I plan to just run this all the time. I see very few downsides, personally. > web fonts might not be displayed Great, I almost always prefer system default fonts. > Incoming FaceTime calls are blocked Perfect, I don't use it, it is always some scammer. > Incoming invitations for Apple Services Perfect, I don't care. > Shared albums are removed from the Photos app I don't use this stuff, I don't care. > To connect your device to a USB accessory or another computer, the device needs to be unlocked. This seems like it should have always been the default. > Configuration profiles can’t be installed Perfect, nobody should be trying to manage my phone.
- nickv 4y ago
  >> Incoming FaceTime calls are blocked > Perfect, I don't use it, it is always some scammer. You get spam/scam FaceTime calls? (Not attacking, just generally curious... I've never in my life ever gotten or know anybody who has been spammed via FaceTime).
  - _jal 4y ago
    Yep, happened multiple times. In fairness, there is a setting to turn Facetime off entirely, that didn't have to wait for this feature.
- MBCook 4y ago
  The “unlock for USB” thing has been around for years, you don’t need Lockdown mode for it. Isn’t it on by default too?
  - KennyBlanken 4y ago
    Then why does the documentation for lockdown mode specifically mention unlock-for-USB as a feature? What baffles me is that damn near all of this stuff could also be a separate preference item, mostly because I don't want 90% of what they mention enabled anyway.
ThinkBeat 4y ago
These things are godo and bad. It is nice to make the effort, and it might be dome good. and allow a lot of people to feel l33t It is bad if people at proper risk think they are safe once it is enabled. (and those, to me, appear to be the people this is marketed for)
- GekkePrutser 4y ago
  You're never 'safe' by toggling any switch. Opsec needs to be approached holistically and goes far beyond technology. This setting could be part of that but not the core. I would expect the people really at risk to be fully aware of this (or have people in their entourage that are). The best thing to do if you have state-sponsored adversaries is to assume your phone is being hacked. I have seen some people in such positions and sometimes they don't even use a smartphone at all. I don't think they would be tricked into feeling 'safe' with something like this. I wonder if it will actually prevent the attack vectors used by something like Pegasus. I think it will make a lot of people feel badass though :) Like most people that bought Phil Zimmermann's Blackphone.
yosito 4y ago
I wonder why all of these settings are grouped together into a "mode" rather than giving users control over each of them individually. What if I want to block USB devices, but I want to be able to use shared photo albums?
- SkyPuncher 4y ago
  You can do that via MDM profiles, already. The value of grouping this into a mode is ensuring end operators don't miss important details.
- oneplane 4y ago
  I'd guess the following: if Apple is a company that is mostly trying too sell UX and seamless integration as a part of that, but has to break quite a lot of that every time an 'extreme' protection measure is used, then it stands to reason that they'd make the 'mess up the UX' thing all contained in one option. It makes for a very clear demarcation as to why the product doesn't work as it normally should, and an abundance of differentiation would remove all of the guessing as to "why is feature X not doing what I expect" for the user of the device.
  - gpt5 4y ago
    I imagine that it's more than that - by grouping them into one feature, Apple can continue and improve upon lockdown mode without needing to opt-in the user in every update.
- unethical_ban 4y ago
  Hm, it would be interesting if they had toggles for each feature with some kind of UI element/hint/incentive to have it all on. Think of how Apple maintains their image, and who they claim this is for. They don't want a journalist killed because they thought they had Lockdown Mode on, but they had link previews in SMS and got hit by a zero-day tracker.
- saagarjha 4y ago
  I assume it would be difficult for most users to make informed decisions on this
randyrand 4y ago
A big shortcoming - 3rd party apps. Many hacks these days exploit Whatsapp incoming message processing, etc. Every app with push notification support increases your attack surface.
- MBCook 4y ago
  Outside of something like turning off some kinds of decoding in the system libraries to all apps, what could lockdown mode realistically do to a 3rd party app to make it more secure?
  - randyrand 4y ago
    Limit the types of notifications they are allowed to process, perhaps. or perhaps disable their processing all together and just have notifications be a dumb pipe.
MMS21 4y ago
Looks like they're preparing for sideloading (LFG!)
- aembleton 4y ago
  What's LFG?
arecurrence 4y ago
I was very happy to see this feature announced! I turned it on immediately and so far it has had little negative impact on my life. Some apps like Gmail will warn you that Lockdown mode is activated and that it will impact your experience but I have not encountered any drawbacks beyond iMessage links not opening the browser. This is easily worked around by copying them. I hope this also blocks incoming calendar invites. Apple has as a feature the automatic addition of calendar invites... spammers soon noticed this and send out calendar invites with their favorite links that can clutter it up.
- altairprime 4y ago
  Er, are you both under threat by nation-state attackers and also posting about your device security decisions on a public web forum? If so, you may wish to reconsider!
  - ruune 4y ago
    Fairly certain it's just another person wanting to go the extra mile of security. Sure, it may not do anything useful if you're just some guy Pegasus won't ever encounter. But if lockdown mode doesn't restrict OP in any way, what's the drawback of just enabling it to sleep that little bit better at night?
    - deleted 4y ago
      [deleted]
    - altairprime 4y ago
      Seems most likely, but there’s nothing I need to say in that scenario. May as well cover the long-odds case in the off chance that I save someone’s life.
      - Dylan16807 4y ago
        You might as well remind them the symptoms of a stroke, too. It's just not a helpful warning.
miles 4y ago
Still waiting for Apple to allow restricting network access (both cellular and WiFi) for specific apps on all devices, not just those sold in China: https://apple.stackexchange.com/a/312430/51806 https://apple.stackexchange.com/a/312430/51806 .
- nr2x 4y ago
  Since day one I’ve wanted this!!
- Melatonic 4y ago
  Seriously. Android has had these kinds of settings for awhile. iOS is behind the times on permission management
  - ajvs 4y ago
    This is actually a custom ROM feature, vanilla Android doesn't have it. You might be using LineageOS/GrapheneOS/etc.
- traceroute66 4y ago
  > Still waiting for Apple to allow restricting network access (both cellular and WiFi) for specific apps on all devices I think you will find you are partially mistaken here. Apple have provided the ability to disable cellular access from day one. Its right there for you as an option and has always been there (look under Settings->Mobile Data, you can toggle on/off for each specific app). Additionally, Apple have always provided the ability to disable background data refresh for apps. In other words, this takes you 3/4 of the way to providing the ability to restrict WiFi access. I know its cool to Apple bash, but at least get your facts right before you jump on the bandwagon.
  - smileybarry 4y ago
    That's still not good enough, and not what they meant at all. Disabling network access entirely is a great safety switch for apps that claim to be offline-only, or to ensure apps literally can't send your data away. I knew I'd trust a lot more apps this way.
maybelsyrup 4y ago
Does anyone think that Lockdown Mode was allowed to roll out without the American security state feeling comfortable that they're able to defeat it by pressing a button?
- JumpCrisscross 4y ago
  > Lockdown Mode was allowed to roll out without the American security state feeling comfortable that they're able to defeat it by pressing a button? There is growing political consensus that given the lawless conduct of our adversaries, and the semi-lawful conduct of American intelligence, a smaller overall security cross section is to our advantage.
mark_l_watson 4y ago
I have been running Lockdown Mode for several weeks. It is very rare that my iPhone can not access a web page correctly, etc. iMessage behaves a little differently but I am used to it.
calsy 4y ago
Obviously these types of features are welcome, even though they are apply to an incredibly small group of people. I cant help but feel the 'personal security' push from Apple and its marketing is rather self serving. Apple is under more legal pressure than ever for its apparent 'anti-competitive' practices. They have on many occasions pushed the line of user privacy and security to defend their business. Features like this benefit a small group of people, but help Apple enormously in defending itself from litigation. Edit: Downvote? Why are companies given the benefit of the doubt as if they were human and caring when they are clearly not! Large listed tech companies like Apple will ALWAYS act in their own interest first. User privacy is the advantage Apple has over its competitors who rely on free services and advertising. It is in their OWN INTEREST to pursue this path which in turn impacts others ability to compete. Must we continue to be so grossly naive?
- scarface74 4y ago
  I buy Apple devices specifically because the value proposition is simple. I give Apple money and they give me goods and services. Their interest are aligned with mine. If competitors that depend on tracking and advertising due, nothing of value is lost.
  - calsy 4y ago
    The issue isn't about personal preference. It's about the anti-competitive practices of large tech companies that remove competition, stifle innovation and allow monopolies to set the value of their own product rather than the market. 'Privacy and security' allows them to justify taking a cut of 30% from developers for simply allowing their apps to be installed on an Apple device, which is then passed onto you. 'Privacy and security' is why you need to update your perfectly capable phone after X amount of years because Apple stopped releasing updates for it. 'Privacy and security' is why they removed ad tracking on devices used by competitors, forcing developers into Apple's payment streams where.. you guessed it, they take a cut. They then created their own App Store advertising model in the process. No alternative payment methods are available on Apple devices because 'privacy and security'.
HL33tibCe7 4y ago
This further cements my opinion that Apple is just leaps ahead of anyone else wrt security and privacy these days. They should be applauded for this. I look forward to when this comes to iPad. An iPad with a Bluetooth keyboard is an excellent option over a traditional laptop for a high-risk target, and this’ll make it even better.
- 3pt14159 4y ago
  Privacy, yes. Security qua security (ie, not counting security loss due to privacy loss) it's pretty tight between Android and iOS: https://zerodium.com/program.html https://zerodium.com/program.html
  - judge2020 4y ago
    While rootkits et al. are bad, privacy loss can be just as bad ie. “reads your email” or “passively reads clipboard [containing passwords]”.
  - gpt5 4y ago
    To be fair, this mode is a direct counter to the zero-click attacks that Zerodium is offering the high payouts for. It specifically blocks all the (currently) known attack vectors. Maybe Zerodium will offer a new tier for a zero-click attack on an iPhone on Lockdown mode in the future.
    - 3pt14159 4y ago
      I wouldn't say that is fair in that very few people can use that mode, so the net security win is minor and there exist hyperlocked down Android versions for years on the open market. A friend of mine even worked on one. This space is murky at the top end. The Zerodium payout offering is a rough proxy, but for 99.99% of consumers the security win for a iPhone are mostly about how they don't have to think about the manufacturer (tell your tech illiterate friend to buy an iPhone is easier than saying "Android but only Google or XYZ manufacturer") and how the privacy differential helps out a bit. Also, plenty of people can't enable crazy hyper secure mode without bleeding information that they've enabled it. So this isn't as helpful as it may seem.
lizardactivist 4y ago
Important to understand is that "provisioned access" as given to the US government is not considered to be a cyber attack, and lockdown mode will not help you there. Also, it appears you cannot use configuration profiles in lockdown mode, meaning you may not be able to use DNS over TLS or HTTPS.
- mwint 4y ago
  Do you have a source for this provisioned access claim, or in fact that it exists at all? —- It says you can’t install new configuration profiles while lockdown mode is enabled, not that you can’t run lockdown mode with a profile enabled.
geoffeg 4y ago
I find it interesting that Lockdown Mode doesn't (yet) enable multiple lock screen authentication methods. Requiring Face ID AND a pass code could be useful. (There are rumors that Apple will add Touch ID back to their phones in the future. I'm not sure they'd keep Face ID on a phone with Touch ID but combining those two methods AND requiring a pass code would seem to be the most secure.) I'd also like to see some method for quickly wiping the phone or severely disabling it. A friend mentioned that a new scheme for thieves is to ask you for your unlocked phone at gunpoint and then use a cash app to transfer money to one of their accounts. Some way to very quickly (and covertly) wipe your phone would help defend against that attack. (Related: https://www.startribune.com/warrant-grifters-targeting-cash-apps-suspected-in-over-100-cell-phones-thefts-downtown-minneapolis/600202085/ https://www.startribune.com/warrant-grifters-targeting-cash-...)
- gregoryl 4y ago
  "If you wipe your phone, I will shoot you." A more practical defence is keeping a low balance on any account that can be easily accessed from the phone. Not seeing any real use for this functionality when faced with an adversary physically.
  - 1123581321 4y ago
    In the theft as described from the article, it would’ve helped since the scam was based on escalating a phone borrowing to theft while acting like a crime wasn’t happening.
  - geoffeg 4y ago
    True. If there was some way to de-auth or remove high target apps that might allow some level of deniability? (edit: I used the wrong word initially.)
- 1123581321 4y ago
  Lock or mark iPhone as lost from the watch would be a nice feature.
  - 4y ago
notart666 4y ago
I don't really see why this matters when Apple also installs backdoors into their phones and grants nation states the exploits to attack dissidents for any person or group that would need a feature like this, apple is the last company I'd trust to protect me from an authoritarian regime.
- saagarjha 4y ago
  Source?
  - rfrec0n 4y ago
    They are referring to the NSA program known as PRISM that was revealed by documents leaked by Edward Snowden. https://www.theguardian.com/world/2013/jun/06/us-tech-giants-nsa-data https://www.theguardian.com/world/2013/jun/06/us-tech-giants...
    - astrange 4y ago
      They're referring to something they made up in their head. PRISM is where the government keeps their subpoena responses, not a spy program.
steve_john 4y ago
Lockdown Mode is an optional, it is a extreme protection that's designed for the very few individuals who, because of who they are or what they do, Lockdown might be personally targeted by some of the most sophisticated digital threats.
larsnystrom 4y ago
My only worry with this is that Lockdown Mode will be a reason to let the “default” mode be less secure. I understand some security features can cause major inconveniences, and so Apple needs to weigh security against convenience as part of their design process. I just hope they keep striking a good balance there, and won’t use Lockdown Mode as an easy way out of those design questions.
- zwkrt 4y ago
  considering that it seems like lockdown mode pretty much breaks the internet, I wouldn't be overly concerned. Average user use cases will still need to be accounted for. My guess is that these are security features that they would ideally like to add to all phones but found that they were too much of a hassle for the end user.
jaimex2 4y ago
Basically, Windows Server mode.
- fomine3 4y ago
  I hate IE ESC mode
  - jaimex2 4y ago
    Oh, did you want to use the Internet? No!
nr2x 4y ago
Does lockdown mode also disable iCloud backup?
- nitrohorse 4y ago
  Trying LockDown mode; looks like backups are still occurring as expected.
  - nr2x 4y ago
    Soooooo, it's "wide open to the FBI and any state agencies that get access to Apple's servers"-mode?
    - minerva23 4y ago
      Yup. My naive impression of it is “we don’t trust our code to not back door your device, so we let you turn the highest risk portions of it off now. Mostly, gifs, because we’re don’t know how to safely parse a 35 year old standard.”
      - nr2x 4y ago
        Lol, meanwhile they store Chinese data in CCP data centers. What a joke.
calo_star 4y ago
> FaceTime - Incoming FaceTime calls are blocked unless you have previously called that person or contact. Apple Services - Incoming invitations for Apple Services, such as invitations to manage a home in the Home app, are blocked unless you have previously invited that person. Well I would like to have these two enabled in regular situation.
- mmis1000 4y ago
  Sounds like a reasonable config for me too. Operations that will definitely leak your identity to everywhere (camera, gps) should never being prompt by random people actively (Who the heck will want to allow that?) unless you click the option yourself first.
MuffinFlavored 4y ago
"jeff bezos get caught cheating on his wife by saudi prince" mode?
mikotodomo 4y ago
Wow, with this and the iPhone 14's camera, they are massively ahead of all other companies. It makes me happy that I bought their products and helped create this.
walterbell 4y ago
Any startup employees working directly on technology trade secrets or otherwise non-public intellectual property should enable iOS16 lockdown mode. Thanks to years of invasive online targeting, bulk data breaches and mobile phone network structural insecurity, it has never been cheaper to screen for higher-than-average-value targets with digital assets that can be exfiltrated. Since targeting costs have fallen, it is profitable to target employees below the C-suite, e.g. those in strategic or development roles who routinely need to access sensitive information and digital assets. This applies to enterprise, mobile and WFH environments, e.g. leveraging mobile phone foothold to reach other devices like a home router.
etaioinshrdlu 4y ago
The funny thing is that someone notable (and likely rich and successful) gets a much worse-functioning device because of this mode.
perryizgr8 4y ago
Will lockdown mode stop your phone from scanning your photos and sending them to Apple/FBI? https://www.apple.com/child-safety/pdf/CSAM_Detection_Technical_Summary.pdf https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
aborsy 4y ago
I try it and the experience is good. Barely noticeable. Maybe the sites load a bit slower, and occasionally fonts on some websites don’t render correctly. Otherwise it’s something that many people could just keep turned on. Private relay and locked down mode are two of the recent good features in iPhone. I am wondering how much is it effective against NSO-style spyware? Like, are they going to still come up with exploits and zero days hacking locked down iPhones, maybe adding 25% to their fees? Is there a similar mode in desk and server Linux?
aborsy 4y ago
The audience for this is broader than journalists and human rights activists. Executives, politicians, government figures, engineers and scientists with access to intellectual property, lawyers, … will all benefit from this mode. Think of nations stealing trade secrets and technological know-how from each other. Or how much money you could make hacking iPhone of an employee or CEO of a company that might provide inside information.
jbverschoor 4y ago
Lockdown Mode should be the default, and people should actively enable it. There's nothing anyone would want, except maybe shared albums. Those are from people you trust not to upload any images that exploit something.
- jbverschoor 4y ago
  And it should be time limited when enabled.
smarterthanyou_ 4y ago
I am not sure if Lockdown Mode is a lot of help if it can easily be detected by websites: https://www.vice.com/en/article/epzpb4/websites-can-identify-if-youre-using-iphones-new-lockdown-mode https://www.vice.com/en/article/epzpb4/websites-can-identify...
Nifty3929 4y ago
Why can’t I have the option to turn off my GPS? That seems so important and easy. Question: If I turn off cell, like with airplane mode, is it truly, completely off, with no cell tower pings and such?

374 points by hjuutilainen 4y ago

The trend towards disabling JIT for the sake of security is interesting. I wonder what effect this will have on wasm adoption.

teeray 4y ago

> Lockdown Mode is not a configurable option for Mobile Device Management by system administrators This is the best news. Otherwise, you can bet your IT department would be throwing that switch on for everyone.

deathgripsss 4y ago
I imagine in lockdown mode the device would be pretty much useless as a work device.
- amself 4y ago
  Negative. I’ve been using it since the update with no issues.
  - kerblang 4y ago
    I would be interested in hearing more about your experience and whatever sort of things have come up...
    - Syonyk 4y ago
      I've been using Lockdown for a month or two now with the beta, and did some writing on it: https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browser-analysis/ https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browse... Results of enabling it and using my phone as I normally would: - Some websites don't display images. I've no idea what they encode to, but they won't display. Fine, don't care. - Animated GIFs don't play in Messages when coming in via SMS (perhaps iMessage too, haven't tried). Annoying when people communicate in animated GIFs, but... people just expect my tech to be weirdly broken, so this doesn't actually impact things significantly. And that's it. I couldn't tell you the performance delta in casual internet use, though I don't use my phone very heavily either.
- masklinn 4y ago
  You can opt applications and website out.
_joel 4y ago
Could they not just implement the functionality in MDM policy anyway, or close enough?
- bpye 4y ago
  Don’t think MDM could do stuff like disable JIT.
  - _joel 4y ago
    Probably can't, good point
  - GekkePrutser 4y ago
    No but Apple could of course add the option. They fully control the MDM API.
gambiting 4y ago
I imagine it's just yet another protection for the mode - it cannot be controlled by external policy, so no one can force it off externally.
gregsadetsky 4y ago
Sorry, I'm not sure that I follow. Why would it be a bad idea if some IT departments enabled Lockdown Mode (LM) via MDM..? The article says that in LM, you can't enrol the device in MDM -- I suppose that if you want LM functionalities, it makes some sense that you wouldn't want parts of your device to be remotely controllable by an entreprise (or your MDM profile overriding some of the Lockdown options..?) But... I don't understand what you mean by it being a bad thing that IT admins would want Lockdown Mode for everyone. Thanks
- bgro 4y ago
  There are a lot of cases where you have to be available on chat. Either sit at your desk and do nothing for 12 hours straight, or do anything you want and just have your phone on you. This could either be a slow day at work, or an actual off day like being on call on a Saturday. A lot of companies aren't going to buy you a separate work phone. If there's a lazy security option that can be enabled, a lot of companies are just going to inappropriately turn it on because it doesn't bother them that your phone can't do anything fun. That doesn't cost them money. Even if you're a web designer for a small shoe store where obviously nuclear power plant level of security doesn't really make sense. I remember android phones like 10 years ago or so had some corporate policy option so any time the screen is locked, you need to enter a 20 character password that has uppers, lowers, capitals, symbols, and numbers. Any patterns / words it decided were too easy to guess were rejected for a password. This wasn't a "Lock after an hour of inactivity." It was "Lock immediately, and set screen timeout to 30 seconds."
  - blep_ 4y ago
    This is how you get me to start stubbornly claiming I don't have a smartphone. If you have special requirements for the devices I use, it's your responsibility to provide separate devices from my personal ones.
  - withinboredom 4y ago
    I refuse to sign in to my work gmail on my android exactly for this reason. It basically wants to lock down my phone. It doesn’t do that for my iPhone though, but I’m not logged in their either, FWIW. I refuse to use my personal devices for work, as a matter of principle. Need me to be on call?, flip phones are pretty darn cheap.

Arrath 4y ago

The ability to exclude apps or websites from the lockdown seems at the face of it to reintroduce attack surface that lockdown mode is meant to prevent. Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack?

Shank 4y ago
> Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack? What type of exploit would be able to add something to the exclusion list but not already perform arbitrary code execution and just attack the system directly? This seems incredibly unlikely -- and roundabout, because you'd still have to get the browser to load the page.
- deleted 4y ago
  [deleted]
- Arrath 4y ago
  I honestly haven't a clue, really just spit-balling after reading the link.
- sideshowb 4y ago
  Maybe they could compromise the server of someone else's site that's on the exclusion list?
1f60c 4y ago
The only way I can think of that could work is if an attacker made a website (and convinced the target to visit it) that said something like: > Tap Aa > Disable Lockdown Mode to view News Org secure content Similarly to how malicious Word docs get users to enable macros.

yuan43 4y ago

> Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats. Most people are never targeted by attacks of this nature. The list of restrictions doesn't seem to inhibiting - for those who have used it, what are the points that stand out? Is this something designed for habitual use or under specific situations?

rooster8 4y ago
Been using since it came out over a month ago. The biggest annoyances are: 1. You cannot tap on any links in iMessage. You have to hold your thumb down on the link, copy it to clipboard, switch to Safari, paste 2. If someone posts a gif in an iMessage thread, it doesn't show up 3. All inbound requests for FaceTime calls seem to be automatically blocked, even when they are coming from people who are favorites in my contacts. I haven't looked into why yet. Maybe it's because I don't have their phone number saved with a `+1` prefix in my contacts? Other than that it's hardly noticeable, and I think it's fantastic that we now have this option.
- tylerhou 4y ago
  The linked article says > Incoming FaceTime calls are blocked unless you have previously called that person or contact. So you may have to call them first, even if they are a favorited contact.
  - rooster8 4y ago
    Thank you! TIL that I never initiate calls with the most important people in my life.
    - bee_rider 4y ago
      Can meet in person, after all, right?
  - dereg 4y ago

ievans 4y ago

Notable highlights for me: > Lockdown Mode is available in iOS 16 and coming soon in iPadOS 16 and macOS Ventura. > Web browsing - Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed, and images might be replaced with a missing image icon. The first sentence I believe is referring to disabling JIT (just in time compilation of Javascript), which is dangerous as it allocates W+X pages which are often used by the final stage of an exploit. Apple did an amazing job already of hardening iOS by severely restricting which applications can use JIT (and this is their justification for why non-Safari browser engines are not allowed on iOS) and even enabling per-thread memory page permissions. Many more details are in this fantastic post from Google's project Zero: https://googleprojectzero.blogspot.com/2020/09/jitsploitation-three.html https://googleprojectzero.blogspot.com/2020/09/jitsploitatio... Overall it's very interesting to see Apple invest so significantly in something that will benefit relatively few users -- not that I'm complaining!

alerighi 4y ago
> Apple did an amazing job already of hardening iOS by severely restricting which applications can use JIT Well they did that not because they care about users but because they want all software to pass trough the App Store (and thus the review and policies of Apple). If you would allow to run efficiently code from other sources (for example downloaded at runtime, put in a W+X memory page and executed) that code doesn't pass through the review process of Apple, thus one can publish an app that does something and then modify its code to make it do another thing (even load an entirely different thing). In the end I don't think this is a good thing for users.
- GekkePrutser 4y ago
  Indeed this, it's more about platform control. I really hope the EU will succeed in forcing Apple to allow third party app stores. That would be a game changer. People that are happy to stay in the walled garden can simply not use any other app stores but for someone like me it will open up iOS as an actual option I can choose. Right now there's too many things I can't do on iOS. Though honestly, I'd be even happier with a real third option instead.

ffhhj 4y ago

> 3. Under Security, tap Lockdown Mode and tap Turn On Lockdown Mode. > 4. Tap Turn On Lockdown Mode. Tap twice? ;)

duskwuff 4y ago
This is correct. The first one is a menu option; the second one is in a dialog explaining what you're getting yourself into.
deleted 4y ago
[deleted]

Tomte 4y ago

I think lockdown mode prevented me from copying text on my iPad and pasting it on the iPhone in WhatsApp, but let me paste it in Apple Notes. I'm not sure though, it might have been a bug, it might have been a user error, but I wonder if inter-device copy and paste is limited, too. I haven't read anything about it, though. Otherwise I've noticed nothing, except a popup when starting apps for the first time after activating lockdown mode, that lockdown mode is active for the app. To me, lockdown mode is a no-brainer. But I don't use very JS-intensive web sites, and never use Apple messages.

GekkePrutser 4y ago
Are you sure this is the lockdown mode? If your phone is enrolled in an MDM the admin can control which apps you can copy/paste between and normally this includes just the corporate-sanctioned apps.
alphabettsy 4y ago
Paste from clipboard is also protected in iOS 16, has to be allowed.

_jal 4y ago

Unless I'm missing something, I think I plan to just run this all the time. I see very few downsides, personally. > web fonts might not be displayed Great, I almost always prefer system default fonts. > Incoming FaceTime calls are blocked Perfect, I don't use it, it is always some scammer. > Incoming invitations for Apple Services Perfect, I don't care. > Shared albums are removed from the Photos app I don't use this stuff, I don't care. > To connect your device to a USB accessory or another computer, the device needs to be unlocked. This seems like it should have always been the default. > Configuration profiles can’t be installed Perfect, nobody should be trying to manage my phone.

nickv 4y ago
>> Incoming FaceTime calls are blocked > Perfect, I don't use it, it is always some scammer. You get spam/scam FaceTime calls? (Not attacking, just generally curious... I've never in my life ever gotten or know anybody who has been spammed via FaceTime).
- _jal 4y ago
  Yep, happened multiple times. In fairness, there is a setting to turn Facetime off entirely, that didn't have to wait for this feature.
MBCook 4y ago
The “unlock for USB” thing has been around for years, you don’t need Lockdown mode for it. Isn’t it on by default too?
- KennyBlanken 4y ago
  Then why does the documentation for lockdown mode specifically mention unlock-for-USB as a feature? What baffles me is that damn near all of this stuff could also be a separate preference item, mostly because I don't want 90% of what they mention enabled anyway.

ThinkBeat 4y ago

These things are godo and bad. It is nice to make the effort, and it might be dome good. and allow a lot of people to feel l33t It is bad if people at proper risk think they are safe once it is enabled. (and those, to me, appear to be the people this is marketed for)

GekkePrutser 4y ago
You're never 'safe' by toggling any switch. Opsec needs to be approached holistically and goes far beyond technology. This setting could be part of that but not the core. I would expect the people really at risk to be fully aware of this (or have people in their entourage that are). The best thing to do if you have state-sponsored adversaries is to assume your phone is being hacked. I have seen some people in such positions and sometimes they don't even use a smartphone at all. I don't think they would be tricked into feeling 'safe' with something like this. I wonder if it will actually prevent the attack vectors used by something like Pegasus. I think it will make a lot of people feel badass though :) Like most people that bought Phil Zimmermann's Blackphone.

yosito 4y ago

I wonder why all of these settings are grouped together into a "mode" rather than giving users control over each of them individually. What if I want to block USB devices, but I want to be able to use shared photo albums?

SkyPuncher 4y ago
You can do that via MDM profiles, already. The value of grouping this into a mode is ensuring end operators don't miss important details.
oneplane 4y ago
I'd guess the following: if Apple is a company that is mostly trying too sell UX and seamless integration as a part of that, but has to break quite a lot of that every time an 'extreme' protection measure is used, then it stands to reason that they'd make the 'mess up the UX' thing all contained in one option. It makes for a very clear demarcation as to why the product doesn't work as it normally should, and an abundance of differentiation would remove all of the guessing as to "why is feature X not doing what I expect" for the user of the device.
- gpt5 4y ago
  I imagine that it's more than that - by grouping them into one feature, Apple can continue and improve upon lockdown mode without needing to opt-in the user in every update.
unethical_ban 4y ago
Hm, it would be interesting if they had toggles for each feature with some kind of UI element/hint/incentive to have it all on. Think of how Apple maintains their image, and who they claim this is for. They don't want a journalist killed because they thought they had Lockdown Mode on, but they had link previews in SMS and got hit by a zero-day tracker.
saagarjha 4y ago
I assume it would be difficult for most users to make informed decisions on this

randyrand 4y ago

A big shortcoming - 3rd party apps. Many hacks these days exploit Whatsapp incoming message processing, etc. Every app with push notification support increases your attack surface.

MBCook 4y ago
Outside of something like turning off some kinds of decoding in the system libraries to all apps, what could lockdown mode realistically do to a 3rd party app to make it more secure?
- randyrand 4y ago
  Limit the types of notifications they are allowed to process, perhaps. or perhaps disable their processing all together and just have notifications be a dumb pipe.

MMS21 4y ago

Looks like they're preparing for sideloading (LFG!)

aembleton 4y ago
What's LFG?

arecurrence 4y ago

I was very happy to see this feature announced! I turned it on immediately and so far it has had little negative impact on my life. Some apps like Gmail will warn you that Lockdown mode is activated and that it will impact your experience but I have not encountered any drawbacks beyond iMessage links not opening the browser. This is easily worked around by copying them. I hope this also blocks incoming calendar invites. Apple has as a feature the automatic addition of calendar invites... spammers soon noticed this and send out calendar invites with their favorite links that can clutter it up.

altairprime 4y ago
Er, are you both under threat by nation-state attackers and also posting about your device security decisions on a public web forum? If so, you may wish to reconsider!
- ruune 4y ago
  Fairly certain it's just another person wanting to go the extra mile of security. Sure, it may not do anything useful if you're just some guy Pegasus won't ever encounter. But if lockdown mode doesn't restrict OP in any way, what's the drawback of just enabling it to sleep that little bit better at night?
  - deleted 4y ago
    [deleted]
  - altairprime 4y ago
    Seems most likely, but there’s nothing I need to say in that scenario. May as well cover the long-odds case in the off chance that I save someone’s life.
    - Dylan16807 4y ago
      You might as well remind them the symptoms of a stroke, too. It's just not a helpful warning.

miles 4y ago

Still waiting for Apple to allow restricting network access (both cellular and WiFi) for specific apps on all devices, not just those sold in China: https://apple.stackexchange.com/a/312430/51806 https://apple.stackexchange.com/a/312430/51806 .

nr2x 4y ago
Since day one I’ve wanted this!!
Melatonic 4y ago
Seriously. Android has had these kinds of settings for awhile. iOS is behind the times on permission management
- ajvs 4y ago
  This is actually a custom ROM feature, vanilla Android doesn't have it. You might be using LineageOS/GrapheneOS/etc.
traceroute66 4y ago
> Still waiting for Apple to allow restricting network access (both cellular and WiFi) for specific apps on all devices I think you will find you are partially mistaken here. Apple have provided the ability to disable cellular access from day one. Its right there for you as an option and has always been there (look under Settings->Mobile Data, you can toggle on/off for each specific app). Additionally, Apple have always provided the ability to disable background data refresh for apps. In other words, this takes you 3/4 of the way to providing the ability to restrict WiFi access. I know its cool to Apple bash, but at least get your facts right before you jump on the bandwagon.
- smileybarry 4y ago
  That's still not good enough, and not what they meant at all. Disabling network access entirely is a great safety switch for apps that claim to be offline-only, or to ensure apps literally can't send your data away. I knew I'd trust a lot more apps this way.

maybelsyrup 4y ago

Does anyone think that Lockdown Mode was allowed to roll out without the American security state feeling comfortable that they're able to defeat it by pressing a button?

JumpCrisscross 4y ago
> Lockdown Mode was allowed to roll out without the American security state feeling comfortable that they're able to defeat it by pressing a button? There is growing political consensus that given the lawless conduct of our adversaries, and the semi-lawful conduct of American intelligence, a smaller overall security cross section is to our advantage.

mark_l_watson 4y ago

I have been running Lockdown Mode for several weeks. It is very rare that my iPhone can not access a web page correctly, etc. iMessage behaves a little differently but I am used to it.

calsy 4y ago

Obviously these types of features are welcome, even though they are apply to an incredibly small group of people. I cant help but feel the 'personal security' push from Apple and its marketing is rather self serving. Apple is under more legal pressure than ever for its apparent 'anti-competitive' practices. They have on many occasions pushed the line of user privacy and security to defend their business. Features like this benefit a small group of people, but help Apple enormously in defending itself from litigation. Edit: Downvote? Why are companies given the benefit of the doubt as if they were human and caring when they are clearly not! Large listed tech companies like Apple will ALWAYS act in their own interest first. User privacy is the advantage Apple has over its competitors who rely on free services and advertising. It is in their OWN INTEREST to pursue this path which in turn impacts others ability to compete. Must we continue to be so grossly naive?

scarface74 4y ago
I buy Apple devices specifically because the value proposition is simple. I give Apple money and they give me goods and services. Their interest are aligned with mine. If competitors that depend on tracking and advertising due, nothing of value is lost.
- calsy 4y ago
  The issue isn't about personal preference. It's about the anti-competitive practices of large tech companies that remove competition, stifle innovation and allow monopolies to set the value of their own product rather than the market. 'Privacy and security' allows them to justify taking a cut of 30% from developers for simply allowing their apps to be installed on an Apple device, which is then passed onto you. 'Privacy and security' is why you need to update your perfectly capable phone after X amount of years because Apple stopped releasing updates for it. 'Privacy and security' is why they removed ad tracking on devices used by competitors, forcing developers into Apple's payment streams where.. you guessed it, they take a cut. They then created their own App Store advertising model in the process. No alternative payment methods are available on Apple devices because 'privacy and security'.

HL33tibCe7 4y ago

This further cements my opinion that Apple is just leaps ahead of anyone else wrt security and privacy these days. They should be applauded for this. I look forward to when this comes to iPad. An iPad with a Bluetooth keyboard is an excellent option over a traditional laptop for a high-risk target, and this’ll make it even better.

3pt14159 4y ago
Privacy, yes. Security qua security (ie, not counting security loss due to privacy loss) it's pretty tight between Android and iOS: https://zerodium.com/program.html https://zerodium.com/program.html
- judge2020 4y ago
  While rootkits et al. are bad, privacy loss can be just as bad ie. “reads your email” or “passively reads clipboard [containing passwords]”.
- gpt5 4y ago
  To be fair, this mode is a direct counter to the zero-click attacks that Zerodium is offering the high payouts for. It specifically blocks all the (currently) known attack vectors. Maybe Zerodium will offer a new tier for a zero-click attack on an iPhone on Lockdown mode in the future.
  - 3pt14159 4y ago
    I wouldn't say that is fair in that very few people can use that mode, so the net security win is minor and there exist hyperlocked down Android versions for years on the open market. A friend of mine even worked on one. This space is murky at the top end. The Zerodium payout offering is a rough proxy, but for 99.99% of consumers the security win for a iPhone are mostly about how they don't have to think about the manufacturer (tell your tech illiterate friend to buy an iPhone is easier than saying "Android but only Google or XYZ manufacturer") and how the privacy differential helps out a bit. Also, plenty of people can't enable crazy hyper secure mode without bleeding information that they've enabled it. So this isn't as helpful as it may seem.

lizardactivist 4y ago

Important to understand is that "provisioned access" as given to the US government is not considered to be a cyber attack, and lockdown mode will not help you there. Also, it appears you cannot use configuration profiles in lockdown mode, meaning you may not be able to use DNS over TLS or HTTPS.

mwint 4y ago
Do you have a source for this provisioned access claim, or in fact that it exists at all? —- It says you can’t install new configuration profiles while lockdown mode is enabled, not that you can’t run lockdown mode with a profile enabled.

geoffeg 4y ago

I find it interesting that Lockdown Mode doesn't (yet) enable multiple lock screen authentication methods. Requiring Face ID AND a pass code could be useful. (There are rumors that Apple will add Touch ID back to their phones in the future. I'm not sure they'd keep Face ID on a phone with Touch ID but combining those two methods AND requiring a pass code would seem to be the most secure.) I'd also like to see some method for quickly wiping the phone or severely disabling it. A friend mentioned that a new scheme for thieves is to ask you for your unlocked phone at gunpoint and then use a cash app to transfer money to one of their accounts. Some way to very quickly (and covertly) wipe your phone would help defend against that attack. (Related: https://www.startribune.com/warrant-grifters-targeting-cash-apps-suspected-in-over-100-cell-phones-thefts-downtown-minneapolis/600202085/ https://www.startribune.com/warrant-grifters-targeting-cash-...)

gregoryl 4y ago
"If you wipe your phone, I will shoot you." A more practical defence is keeping a low balance on any account that can be easily accessed from the phone. Not seeing any real use for this functionality when faced with an adversary physically.
- 1123581321 4y ago
  In the theft as described from the article, it would’ve helped since the scam was based on escalating a phone borrowing to theft while acting like a crime wasn’t happening.
- geoffeg 4y ago
  True. If there was some way to de-auth or remove high target apps that might allow some level of deniability? (edit: I used the wrong word initially.)
1123581321 4y ago
Lock or mark iPhone as lost from the watch would be a nice feature.
- 4y ago

notart666 4y ago

I don't really see why this matters when Apple also installs backdoors into their phones and grants nation states the exploits to attack dissidents for any person or group that would need a feature like this, apple is the last company I'd trust to protect me from an authoritarian regime.

saagarjha 4y ago
Source?
- rfrec0n 4y ago
  They are referring to the NSA program known as PRISM that was revealed by documents leaked by Edward Snowden. https://www.theguardian.com/world/2013/jun/06/us-tech-giants-nsa-data https://www.theguardian.com/world/2013/jun/06/us-tech-giants...
  - astrange 4y ago
    They're referring to something they made up in their head. PRISM is where the government keeps their subpoena responses, not a spy program.

steve_john 4y ago

Lockdown Mode is an optional, it is a extreme protection that's designed for the very few individuals who, because of who they are or what they do, Lockdown might be personally targeted by some of the most sophisticated digital threats.

larsnystrom 4y ago

My only worry with this is that Lockdown Mode will be a reason to let the “default” mode be less secure. I understand some security features can cause major inconveniences, and so Apple needs to weigh security against convenience as part of their design process. I just hope they keep striking a good balance there, and won’t use Lockdown Mode as an easy way out of those design questions.

zwkrt 4y ago
considering that it seems like lockdown mode pretty much breaks the internet, I wouldn't be overly concerned. Average user use cases will still need to be accounted for. My guess is that these are security features that they would ideally like to add to all phones but found that they were too much of a hassle for the end user.

jaimex2 4y ago

Basically, Windows Server mode.

fomine3 4y ago
I hate IE ESC mode
- jaimex2 4y ago
  Oh, did you want to use the Internet? No!

nr2x 4y ago

Does lockdown mode also disable iCloud backup?

nitrohorse 4y ago
Trying LockDown mode; looks like backups are still occurring as expected.
- nr2x 4y ago
  Soooooo, it's "wide open to the FBI and any state agencies that get access to Apple's servers"-mode?
  - minerva23 4y ago
    Yup. My naive impression of it is “we don’t trust our code to not back door your device, so we let you turn the highest risk portions of it off now. Mostly, gifs, because we’re don’t know how to safely parse a 35 year old standard.”
    - nr2x 4y ago
      Lol, meanwhile they store Chinese data in CCP data centers. What a joke.

calo_star 4y ago

> FaceTime - Incoming FaceTime calls are blocked unless you have previously called that person or contact. Apple Services - Incoming invitations for Apple Services, such as invitations to manage a home in the Home app, are blocked unless you have previously invited that person. Well I would like to have these two enabled in regular situation.

mmis1000 4y ago
Sounds like a reasonable config for me too. Operations that will definitely leak your identity to everywhere (camera, gps) should never being prompt by random people actively (Who the heck will want to allow that?) unless you click the option yourself first.

MuffinFlavored 4y ago

"jeff bezos get caught cheating on his wife by saudi prince" mode?

mikotodomo 4y ago

Wow, with this and the iPhone 14's camera, they are massively ahead of all other companies. It makes me happy that I bought their products and helped create this.

walterbell 4y ago

Any startup employees working directly on technology trade secrets or otherwise non-public intellectual property should enable iOS16 lockdown mode. Thanks to years of invasive online targeting, bulk data breaches and mobile phone network structural insecurity, it has never been cheaper to screen for higher-than-average-value targets with digital assets that can be exfiltrated. Since targeting costs have fallen, it is profitable to target employees below the C-suite, e.g. those in strategic or development roles who routinely need to access sensitive information and digital assets. This applies to enterprise, mobile and WFH environments, e.g. leveraging mobile phone foothold to reach other devices like a home router.

etaioinshrdlu 4y ago

The funny thing is that someone notable (and likely rich and successful) gets a much worse-functioning device because of this mode.

perryizgr8 4y ago

Will lockdown mode stop your phone from scanning your photos and sending them to Apple/FBI? https://www.apple.com/child-safety/pdf/CSAM_Detection_Technical_Summary.pdf https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

aborsy 4y ago

I try it and the experience is good. Barely noticeable. Maybe the sites load a bit slower, and occasionally fonts on some websites don’t render correctly. Otherwise it’s something that many people could just keep turned on. Private relay and locked down mode are two of the recent good features in iPhone. I am wondering how much is it effective against NSO-style spyware? Like, are they going to still come up with exploits and zero days hacking locked down iPhones, maybe adding 25% to their fees? Is there a similar mode in desk and server Linux?

aborsy 4y ago

The audience for this is broader than journalists and human rights activists. Executives, politicians, government figures, engineers and scientists with access to intellectual property, lawyers, … will all benefit from this mode. Think of nations stealing trade secrets and technological know-how from each other. Or how much money you could make hacking iPhone of an employee or CEO of a company that might provide inside information.

jbverschoor 4y ago

Lockdown Mode should be the default, and people should actively enable it. There's nothing anyone would want, except maybe shared albums. Those are from people you trust not to upload any images that exploit something.

jbverschoor 4y ago
And it should be time limited when enabled.

smarterthanyou_ 4y ago

I am not sure if Lockdown Mode is a lot of help if it can easily be detected by websites: https://www.vice.com/en/article/epzpb4/websites-can-identify-if-youre-using-iphones-new-lockdown-mode https://www.vice.com/en/article/epzpb4/websites-can-identify...

Nifty3929 4y ago

Why can’t I have the option to turn off my GPS? That seems so important and easy. Question: If I turn off cell, like with airplane mode, is it truly, completely off, with no cell tower pings and such?