6 ms·

I fail to see how Apple's corporate policy robbing you of your device is somehow an anti-theft capability. If you are permanently deprived of your rightful pro

I fail to see how Apple's corporate policy robbing you of your device is somehow an anti-theft capability. If you are permanently deprived of your rightful property, you are a victim of theft. Whether it's via EULA and private keys, or via street thug with a wrench, I'm not sure it makes any realistic difference.

heinternets 3y ago
How would you provide this type of locking system without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?
- teraflop 3y ago
  A system where users can recover their devices if they successfully hold onto their private keys is much better than a system where they can't recover their devices at all without Apple's reluctant help.
  - chongli 3y ago
    Maybe for power users, sure. But for regular people (Apple’s biggest market) it’s not an issue: they just register their devices and don’t have to worry about it.
  - ffgjgf1 3y ago
    Isn’t the issue in this case that the use didn’t enable “find my mac” in the first place, the thief was able to tie the device to their account and then brick it? I assume he would’ve been able to recover it if he had “held on to his private key” (having the device be linked to his account being the current equivalent)?
- torstenvl 3y ago
  Keep the private key with Apple. But also... Sell an HSM (free when you buy a Mac > $2000? discounted in conjunction with AppleCare?) that will remove activation lock on the Mac it's purchased with.
- beeboobaa 3y ago
  I wouldn't. It's unethical and frankly evil. Physical access should always trump any remotely installed policies, otherwise you can never truly own something. This, and remote attestation, are tools to enforce DRM. The anti theft stuff is just a marketing strategy you fell for.
  - KerrAvon 3y ago
    [flagged]
    - beeboobaa 3y ago
      What are you even talking about? That's just a bunch of exaggerated nonsense lol
    - matheusmoreira 3y ago
      Millions of children are gonna die if iPhones don't have DRM? No.
  - fsckboy 3y ago
    >Physical access should always trump any remotely installed policies so if you steal something and therefore have physical access to it, that should trump the original owner who no longer has it because you stole it even if they have the receipt with the serial number on it?
    - beeboobaa 3y ago
      Yeah. Techbros aren't the new police.
  - ffgjgf1 3y ago
    > It's unethical and frankly evil. Physical access should always trump any remotely installed policies, Isn’t that what happened here? The thief and not the owner reported it as “stolen” and thus bricked. The thief could’ve as well just thrown an actual brick on it with similar effects > The anti theft stuff is just a marketing strategy you fell for. Also it works. Both for deincentivizing theft and allows you to recover the device had you actually enabled the feature (so not this case)
- Volundr 3y ago
  > without giving users access to their own private keys I wouldn't. If someone has a device that is unusable without keys they don't have, they don't actually own that device. Far be it from me to quote the crypto crowd but "not your keys...."
- cycomanic 3y ago
  You seriously can't think of other ways? I can easily think of at least 10 other ways just of the top of my head.
- ShadowBanThis01 3y ago
  That doesn't make sense. First of all, "this type of locking system" is clearly a failure because it allowed an unauthorized random person to report a computer as "lost" when he didn't own it. So the answer to your first question is: You wouldn't. Second, what does this even mean: "without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?" What scenario exactly does that refer to?
  - ffgjgf1 3y ago
    > because it allowed an unauthorized random person to report a computer as "lost" Because (if I under the article correctly?) the owner hadn’t actually enabled “find my mac”?
    - ShadowBanThis01 3y ago
      The (admittedly vague article) said it was "wiped," though. By whom?
      - ffgjgf1 3y ago
        By the thief/shop who linked it to their account? IIRC you can still wipe macs without having the password as long as all the theft protection stuff isn’t enabled.
deleted 3y ago
[deleted]

heinternets 3y ago

How would you provide this type of locking system without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?

teraflop 3y ago
A system where users can recover their devices if they successfully hold onto their private keys is much better than a system where they can't recover their devices at all without Apple's reluctant help.
- chongli 3y ago
  Maybe for power users, sure. But for regular people (Apple’s biggest market) it’s not an issue: they just register their devices and don’t have to worry about it.
- ffgjgf1 3y ago
  Isn’t the issue in this case that the use didn’t enable “find my mac” in the first place, the thief was able to tie the device to their account and then brick it? I assume he would’ve been able to recover it if he had “held on to his private key” (having the device be linked to his account being the current equivalent)?
torstenvl 3y ago
Keep the private key with Apple. But also... Sell an HSM (free when you buy a Mac > $2000? discounted in conjunction with AppleCare?) that will remove activation lock on the Mac it's purchased with.
beeboobaa 3y ago
I wouldn't. It's unethical and frankly evil. Physical access should always trump any remotely installed policies, otherwise you can never truly own something. This, and remote attestation, are tools to enforce DRM. The anti theft stuff is just a marketing strategy you fell for.
- KerrAvon 3y ago
  [flagged]
  - beeboobaa 3y ago
    What are you even talking about? That's just a bunch of exaggerated nonsense lol
  - matheusmoreira 3y ago
    Millions of children are gonna die if iPhones don't have DRM? No.
- fsckboy 3y ago
  >Physical access should always trump any remotely installed policies so if you steal something and therefore have physical access to it, that should trump the original owner who no longer has it because you stole it even if they have the receipt with the serial number on it?
  - beeboobaa 3y ago
    Yeah. Techbros aren't the new police.
- ffgjgf1 3y ago
  > It's unethical and frankly evil. Physical access should always trump any remotely installed policies, Isn’t that what happened here? The thief and not the owner reported it as “stolen” and thus bricked. The thief could’ve as well just thrown an actual brick on it with similar effects > The anti theft stuff is just a marketing strategy you fell for. Also it works. Both for deincentivizing theft and allows you to recover the device had you actually enabled the feature (so not this case)
Volundr 3y ago
> without giving users access to their own private keys I wouldn't. If someone has a device that is unusable without keys they don't have, they don't actually own that device. Far be it from me to quote the crypto crowd but "not your keys...."
cycomanic 3y ago
You seriously can't think of other ways? I can easily think of at least 10 other ways just of the top of my head.
ShadowBanThis01 3y ago
That doesn't make sense. First of all, "this type of locking system" is clearly a failure because it allowed an unauthorized random person to report a computer as "lost" when he didn't own it. So the answer to your first question is: You wouldn't. Second, what does this even mean: "without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?" What scenario exactly does that refer to?
- ffgjgf1 3y ago
  > because it allowed an unauthorized random person to report a computer as "lost" Because (if I under the article correctly?) the owner hadn’t actually enabled “find my mac”?
  - ShadowBanThis01 3y ago
    The (admittedly vague article) said it was "wiped," though. By whom?
    - ffgjgf1 3y ago
      By the thief/shop who linked it to their account? IIRC you can still wipe macs without having the password as long as all the theft protection stuff isn’t enabled.

deleted 3y ago

[deleted]