3 ms·

New Windows Feature to Spy on iPhones

15 points by colinprince 3y ago

hulitu 3y ago
> Cyberstalkers with physical access to their victim’s iPhone can set up Phone Link with their own Windows PC They can setup a lot of things. They can even see pictures or read messages. What is new here ?
- nneonneo 3y ago
  One-time access can be translated into persistent access. The phone needs to be connected to the computer via Bluetooth, but this’ll happen automatically whenever the phone is nearby, so the attack scenario is applicable to people who live together. Imagine, for example, that a roommate or spouse finds your phone unlocked while you’re out of the room - they set up Phone Link, and return the phone before you notice it’s gone. Thereafter, whenever your phone is near their computer, they’re getting a copy of all your messages.
diebeforei485 3y ago
Apple needs to crack down on this. I don't see why any computer needs access to notifications. Unless they are a genuine wearable device they do not need this access.
olliej 3y ago
Sorry, so this seems to require physical access and the passcode for the device? It would seem at that point an attacker could do a lot of things. Setting up one app that allows stalking via a windows feature is not meaningfully different from any other app that allows forwarding the same data. Not sure what windows is doing wrong, and I’m not sure what any device - iOS or android - could do without simply breaking the ability of any product to receive forwarded messages and notifications.
jraph 3y ago
Seems like an ad that wants you to be afraid and which is pointing fingers to something that's a feature, not a bug or a security threat. This reads a lot like "This feature that allows you to link a phone with a computer... allows you to link a phone to a computer!" Why the focus on iPhone by the way? Someone who wants to spy on you does not specifically need this Windows feature to do it and as the article says "Mac users have had this ability for many years now". So... (but indeed, a small indicator that the phone is linked to a computer might ne useful... but would the vulnerable people notice it?) It's not the first time an ad devoid of insightful content submitted to HN reaches the front page, last time was not long ago.

15 points by colinprince 3y ago

> Cyberstalkers with physical access to their victim’s iPhone can set up Phone Link with their own Windows PC They can setup a lot of things. They can even see pictures or read messages. What is new here ?

nneonneo 3y ago
One-time access can be translated into persistent access. The phone needs to be connected to the computer via Bluetooth, but this’ll happen automatically whenever the phone is nearby, so the attack scenario is applicable to people who live together. Imagine, for example, that a roommate or spouse finds your phone unlocked while you’re out of the room - they set up Phone Link, and return the phone before you notice it’s gone. Thereafter, whenever your phone is near their computer, they’re getting a copy of all your messages.

diebeforei485 3y ago

Apple needs to crack down on this. I don't see why any computer needs access to notifications. Unless they are a genuine wearable device they do not need this access.

olliej 3y ago

Sorry, so this seems to require physical access and the passcode for the device? It would seem at that point an attacker could do a lot of things. Setting up one app that allows stalking via a windows feature is not meaningfully different from any other app that allows forwarding the same data. Not sure what windows is doing wrong, and I’m not sure what any device - iOS or android - could do without simply breaking the ability of any product to receive forwarded messages and notifications.

jraph 3y ago

Seems like an ad that wants you to be afraid and which is pointing fingers to something that's a feature, not a bug or a security threat. This reads a lot like "This feature that allows you to link a phone with a computer... allows you to link a phone to a computer!" Why the focus on iPhone by the way? Someone who wants to spy on you does not specifically need this Windows feature to do it and as the article says "Mac users have had this ability for many years now". So... (but indeed, a small indicator that the phone is linked to a computer might ne useful... but would the vulnerable people notice it?) It's not the first time an ad devoid of insightful content submitted to HN reaches the front page, last time was not long ago.