3 ms·
So to boil it down: 1) observe victim entering passcode 2) steal victim's phone, which you now know the passcode for 3) use saved passwords on phone to acces
by Gordonjcp 4y ago
So to boil it down:
1) observe victim entering passcode
2) steal victim's phone, which you now know the passcode for
3) use saved passwords on phone to access victim's email, online banking, etc
How exactly is this specific to the iPhone?
- dpflan 4y agoExactly. What is this?
- itg 4y agoYou only need the pin code to reset the icloud password, and can lock people out of their accounts.
- 6502nerdface 4y agoThe iPhone "feature" referenced by the headline is that you can change the AppleID's password knowing only the phone's passcode; no need to enter old password, no 2FA (technically having phone + passcode is 2FA according to Apple), nothing but the passcode. This presumably shields Apple from a torrent of support requests by forgetful users, but seems like a major security hole in the case that someone steals your phone. Once they change your AppleID pw they have EVERYTHING -- FindMy disabled, all other devices forced logged out, photos gone forever, etc. And once they enable "Recovery Key" on your iCloud account, Apple will never let you back in no matter what you do.
- godzillafarts 4y agoYeah the reporting here is laughable. The article literally states > A similar vulnerability exists in Google’s Android mobile operating system.
- belltaco 4y agoI think the iPhone does not have a fingerprint reader like some high end Samsung Galaxy phones? Anyway, iPhone is advertised and considered as a secure and privacy conscious compared to Android. It doesn't allow sideloading stating that security is compromised. Plus it's very expensive compared to other phones. So it's bigger news than being the same as Android phones.