4 ms·
I skipped that part because you're talking about guessable passwords, but the threat the artice is talking about is someone watching you type in your passcode a
by larsnystrom 3y ago
I skipped that part because you're talking about guessable passwords, but the threat the artice is talking about is someone watching you type in your passcode and then stealing your iPhone. The point I'm trying to make is that I don't think that should be game over, there should be additional barriers to prevent escalation from single device access to Apple account/multi-device access.
Guessable passwords are of course not good, but to a human a six digit password is actually pretty hard to guess.
The auto-wipe feature introduces a new vulnerability where anyone with physical access to your phone for a minute can wipe it for you. This is a very high-risk threat scenario for people with toddlers in their home.
Remote-wiping the phone from the Apple website is fine, but from what I understand in the article, the thief has already taken control of your account by the time you're home/have access to a second device to do so.
However, it seems Apple actually does provide the tools to avoid the issue in the article, which is to use a second password for Screen Time and add some restrictions. So we can agree on that point :)
- traceroute66 3y ago> The auto-wipe feature introduces a new vulnerability where anyone with physical access to your phone for a minute can wipe it for you. Its called backup. What happens if you loose your phone or drop it in a river ? You'll be in the same boat in those scenarios as you would if someone local-wiped your phone.
- misnome 3y agoDropping your phone in a river won’t lock you out of your account for accessing those backups.
- elephanlemon 3y agoI just went to set up a screen time passcode after reading the article… you are limited to a four digit code. It does limit the number of attempts you can make, but I can’t believe a four digit code is all that’s standing in the way of total account ruin.
- danso 3y agoThat seems like it should be enough protection. The goal of most thieves is to drain your bank account/Apple Pay. Changing your account password gives them more time to take advantage of your account, but most of them aren't interested in doing a deep dive in your personal life, or care that you're locked out of your Apple account. A rate-limited 4-digit passcode gives you breathing room to login to your Apple account and report your phone as stolen.