3 ms·
I'm curious what mitigations against this people would suggest. - Using a very long passcode? (Harder to shoulder surf) - Using a third-party password manager
by 6502nerdface 4y ago
I'm curious what mitigations against this people would suggest.
- Using a very long passcode? (Harder to shoulder surf)
- Using a third-party password manager instead of keychain (something with its own master password independent of Apple ID); in fact you could store intentionally wrong passwords in keychain as a decoy, heh.
- Configure financial apps to disable passcode authentication, requiring their own password/2FA on every login (this becomes inconvenient though... wonder if they can be configured for FaceID only without passcode auth)
- Some process (doesn't have to run on the phone) for rsyncing iCloud content to another service or NAS.
- pmontra 4y agoDo not unlock the phone with the PIN in public, use biometrics instead. If you really have to enter the PIN, protect yourself as on a ATM.
- izacus 4y agoOr maybe... This is a small issue and mitigations against this are all worse for users than the problem?
- 6502nerdface 4y agoIt is kind of BS though that someone who simply steals your phone and passcode can, with nothing else, completely lock you and all of your other devices out of your iCloud account (including photos and documents) for the rest of your life with no recourse. The article does a terrible job of burying this important detail.
- stonepresto 4y agoSome phones have a keypad scrambler to somewhat mitigate this sort of thing. At least from a distance.
- qaz_plm 4y agoSomeone further up suggested some Screen Time workarounds that could help in certain cases which seems interesting. https://news.ycombinator.com/item?id=34936304 https://news.ycombinator.com/item?id=34936304