5 ms·

This is so hard to believe that I simply don't. Either the user had a bad digitizer, and misread and/or hallucinated the "We are in control" message, or the en

This is so hard to believe that I simply don't. Either the user had a bad digitizer, and misread and/or hallucinated the "We are in control" message, or the entire story is made up. Perhaps a group of people working together to post "Hey me too!" stories? I'm not sure what the motive would be, though. Extraordinary claims require extraordinary evidence, and this is beyond believability.

sebazzz 3y ago
I wonder how such hack would even work. The watch does have the option to control it remotely, through the iPhone accessibility options, but obviously this only works with the paired iPhone and not over the internet.
- pstuart 3y ago
  That multiple people reported a "spam" phone call right before the incident makes it look like they've found some zero day cellular exploit. If this is for real I expect we'll hear more about it soon enough.
  - Jtsummers 3y ago
    Only one person reported the spam call in that thread, the Marcus-II commenter. Their comment shows up twice in the first page and once on the second page. No one else mentions the spam call.
  - supriyo-biswas 3y ago
    The baseband processor is entirely separate, with some basic commands and responses communicated from the phone's CPU to the baseband, so even this explanation is suspect.
  - _kbh_ 3y ago
    No one is burning a baseband 0day to write "we are in control" on a screen.
- steve_adams_86 3y ago
  > but obviously this only works with the paired iPhone and not over the internet. That's the intended design, but perhaps the trusted device layer could be bypassed under some circumstance? It seems extremely unlikely, but maybe not impossible. edit: The more I read and think about this, the less I think it's likely. I'll keep this as a devil's advocate sort of message, but I feel like I should still point out that the entire premise here seems a little nuts and the people reporting the hacks are more likely to be uninformed/paranoid/etc and dealing with ghost touches than the watches were likely to be compromised.
- infinitedata 3y ago
  Apple Employees can certainly access your devices remotely, I have seen it happening with iPhone, I don’t know about Watch. Nevertheless, this does seem like an anti-Apple campaign.
  - threeseed 3y ago
    Can you be more specific about when an Apple employee remotely accessed your iPhone. It would almost certainly would be illegal.
    - trelliscoded 3y ago
      I’ve had this happen when I called in a support request for some iOS issue I had. Their interface has all the devices on your Apple ID, and they can enable screen sharing on any of them after you accept it via a notification. I have to admit, it must be a lot better for the support experience as opposed to trying to verbally describe what’s going on.
  - yreg 3y ago
    This seems even more hard to believe and requires even more extraordinary evidence.
  - fh9302 3y ago
    That's not true. Apple employees can see a video feed of your screen after you accept their support request (similar to screen sharing over FaceTime), but they can't interact with your phone remotely.
dch82 3y ago
> I'm not sure what the motive would be, though. To make Apple Watch antivirus scams?
- wesamco 3y ago
  Hoaxers hoping to drum up enough news stories to impact Apple's share price to make money on shorting it?
- Szpadel 3y ago
  maybe some kind of anti commercial to not trust apple products? but I wouldn't suspect any major brands for something at this level, so maybe just bunch of people trying to mess with people believes like it was multiple times in the past? like with charging iPhone in microwave etc, basically noone benefits just some folks want to see people panic
- dch82 3y ago
  Maybe to make this scenario seem plausible? > From: definitelyNotAppleScam.com > Subject: Your Apple Watch is hacked > Hello [insert name here], > We have found that your Apple Watch Series x has been compromised by hackers. > Please click on the link below to reset your password > [Link that asks for previous password and something idk]
jiggawatts 3y ago
It's pretty obviously fake. A bunch of "level 1" (new) users, all with the same story? They literally mention the exact time & date in the same style, and mention the 1-minute lockout in the same way as well. Two of them use the same timestamp even, down to the minute. Also, something I noticed working for large orgs with over 100K staff and 1M users: An appreciable fraction of the human population is simply mentally ill. Hallucinations, drug use, psychosis, etc... all have a non-zero rate. Given enough users, you'll get the same type that imagines being abducted by aliens and even makes police reports that sound suspiciously like the sci-fi movie that's popular at the time.
- rahkiin 3y ago
  Not only that, but all those new users actually bothered to look for a pre-existing topic on their issue instead of making their own new topic. Unlikely.
- znpy 3y ago
  I own an iPhone and i would be a level 1 / new user if i had issues. Otherwise, why on earth would i care about signing up to apple forums? I’d only go there if i had issues (obviously)
  - jeffhuys 3y ago
    Okay, that covers 1/5th of the parent comment.
  - II2II 3y ago
    A lot of the people here are much more experienced with technology, so our behaviour is going to be different, but I have a hard time understanding why someone would sign up for a forum as a first step for obtaining assistance. Calling the vendor, sure. Using vendor support options that connect me directly to their staff, sure. None of the people posting about the issue mention taking other prior steps in obtaining support (even though a couple of posts from established members say they should). I suppose posting to the vendor forums is fine if you need support. On the other hand, I do not think it is an acceptable source of information about a security flaw in a product. There information provided is not verified. The sources are not verified. We don't know whether the details are true, a misinterpretation (innocent or malicious), or made up. In other words, there is no reason to trust what is being said. If I came in here suggesting that my computer was hacked, I would expect people to respond with similar incredulity. (I am simply someone who posts to a forum. There is no reason for people to trust anything I say, particularly if the posting doesn't contain detail on reproducing the problem.)
dclowd9901 3y ago
The thing that gets me is all the similar stories. I guess it could be astroturfing, but why that product?
planb 3y ago
Obviously this guy was fooled by a friend who was using his iPhone to remotely operate the watch (which explains the „we are in control“ phrase). Now in this forum numerous people that simply have a broken digitizer chime in. Case closed.
- codemusings 3y ago
  It wasn't obvious at all to me that that's even possible. But as it turns out: it's an accessibility feature (1) to mirror the watch screen on iPhone in order to voice control it or use assistive touch. 1: https://support.apple.com/guide/watch/apple-watch-mirroring-apd890848603/watchos https://support.apple.com/guide/watch/apple-watch-mirroring-...
  - caleb-allen 3y ago
    Surely this is a vector for attack then?
    - planb 3y ago
      No. You need to gain access to the phone. If you have access to the phone, the watch isn’t interesting anymore.

sebazzz 3y ago

I wonder how such hack would even work. The watch does have the option to control it remotely, through the iPhone accessibility options, but obviously this only works with the paired iPhone and not over the internet.

pstuart 3y ago
That multiple people reported a "spam" phone call right before the incident makes it look like they've found some zero day cellular exploit. If this is for real I expect we'll hear more about it soon enough.
- Jtsummers 3y ago
  Only one person reported the spam call in that thread, the Marcus-II commenter. Their comment shows up twice in the first page and once on the second page. No one else mentions the spam call.
- supriyo-biswas 3y ago
  The baseband processor is entirely separate, with some basic commands and responses communicated from the phone's CPU to the baseband, so even this explanation is suspect.
- _kbh_ 3y ago
  No one is burning a baseband 0day to write "we are in control" on a screen.
steve_adams_86 3y ago
> but obviously this only works with the paired iPhone and not over the internet. That's the intended design, but perhaps the trusted device layer could be bypassed under some circumstance? It seems extremely unlikely, but maybe not impossible. edit: The more I read and think about this, the less I think it's likely. I'll keep this as a devil's advocate sort of message, but I feel like I should still point out that the entire premise here seems a little nuts and the people reporting the hacks are more likely to be uninformed/paranoid/etc and dealing with ghost touches than the watches were likely to be compromised.
infinitedata 3y ago
Apple Employees can certainly access your devices remotely, I have seen it happening with iPhone, I don’t know about Watch. Nevertheless, this does seem like an anti-Apple campaign.
- threeseed 3y ago
  Can you be more specific about when an Apple employee remotely accessed your iPhone. It would almost certainly would be illegal.
  - trelliscoded 3y ago
    I’ve had this happen when I called in a support request for some iOS issue I had. Their interface has all the devices on your Apple ID, and they can enable screen sharing on any of them after you accept it via a notification. I have to admit, it must be a lot better for the support experience as opposed to trying to verbally describe what’s going on.
- yreg 3y ago
  This seems even more hard to believe and requires even more extraordinary evidence.
- fh9302 3y ago
  That's not true. Apple employees can see a video feed of your screen after you accept their support request (similar to screen sharing over FaceTime), but they can't interact with your phone remotely.

dch82 3y ago

> I'm not sure what the motive would be, though. To make Apple Watch antivirus scams?

wesamco 3y ago
Hoaxers hoping to drum up enough news stories to impact Apple's share price to make money on shorting it?
Szpadel 3y ago
maybe some kind of anti commercial to not trust apple products? but I wouldn't suspect any major brands for something at this level, so maybe just bunch of people trying to mess with people believes like it was multiple times in the past? like with charging iPhone in microwave etc, basically noone benefits just some folks want to see people panic
dch82 3y ago
Maybe to make this scenario seem plausible? > From: definitelyNotAppleScam.com > Subject: Your Apple Watch is hacked > Hello [insert name here], > We have found that your Apple Watch Series x has been compromised by hackers. > Please click on the link below to reset your password > [Link that asks for previous password and something idk]

jiggawatts 3y ago

It's pretty obviously fake. A bunch of "level 1" (new) users, all with the same story? They literally mention the exact time & date in the same style, and mention the 1-minute lockout in the same way as well. Two of them use the same timestamp even, down to the minute. Also, something I noticed working for large orgs with over 100K staff and 1M users: An appreciable fraction of the human population is simply mentally ill. Hallucinations, drug use, psychosis, etc... all have a non-zero rate. Given enough users, you'll get the same type that imagines being abducted by aliens and even makes police reports that sound suspiciously like the sci-fi movie that's popular at the time.

rahkiin 3y ago
Not only that, but all those new users actually bothered to look for a pre-existing topic on their issue instead of making their own new topic. Unlikely.
znpy 3y ago
I own an iPhone and i would be a level 1 / new user if i had issues. Otherwise, why on earth would i care about signing up to apple forums? I’d only go there if i had issues (obviously)
- jeffhuys 3y ago
  Okay, that covers 1/5th of the parent comment.
- II2II 3y ago
  A lot of the people here are much more experienced with technology, so our behaviour is going to be different, but I have a hard time understanding why someone would sign up for a forum as a first step for obtaining assistance. Calling the vendor, sure. Using vendor support options that connect me directly to their staff, sure. None of the people posting about the issue mention taking other prior steps in obtaining support (even though a couple of posts from established members say they should). I suppose posting to the vendor forums is fine if you need support. On the other hand, I do not think it is an acceptable source of information about a security flaw in a product. There information provided is not verified. The sources are not verified. We don't know whether the details are true, a misinterpretation (innocent or malicious), or made up. In other words, there is no reason to trust what is being said. If I came in here suggesting that my computer was hacked, I would expect people to respond with similar incredulity. (I am simply someone who posts to a forum. There is no reason for people to trust anything I say, particularly if the posting doesn't contain detail on reproducing the problem.)

dclowd9901 3y ago

The thing that gets me is all the similar stories. I guess it could be astroturfing, but why that product?

planb 3y ago

Obviously this guy was fooled by a friend who was using his iPhone to remotely operate the watch (which explains the „we are in control“ phrase). Now in this forum numerous people that simply have a broken digitizer chime in. Case closed.

codemusings 3y ago
It wasn't obvious at all to me that that's even possible. But as it turns out: it's an accessibility feature (1) to mirror the watch screen on iPhone in order to voice control it or use assistive touch. 1: https://support.apple.com/guide/watch/apple-watch-mirroring-apd890848603/watchos https://support.apple.com/guide/watch/apple-watch-mirroring-...
- caleb-allen 3y ago
  Surely this is a vector for attack then?
  - planb 3y ago
    No. You need to gain access to the phone. If you have access to the phone, the watch isn’t interesting anymore.