3 ms·

iOS force-restart key sequence cannot be intercepted by malware, https://www.wikihow.com/Hard-Reset-an-iPhone https://www.wikihow.com/Hard-Reset-an-iPhone Appl

iOS force-restart key sequence cannot be intercepted by malware, https://www.wikihow.com/Hard-Reset-an-iPhone https://www.wikihow.com/Hard-Reset-an-iPhone Apple Configurator can define WiFi SSID allowlist, so the phone will only connect to known access points. iOS Lockdown mode blocks a class of attacks and is mostly invisible to UX. It can be disabled for trusted apps and websites. Brave can disable Javascript by default, and allow on trusted sites. Since iPhones no longer power off, a faraday bag can be useful in some contexts. iVerify claims to check for malware, unclear if it's meaningful given iOS restrictions, but the app regularly reminds the user to reboot.

orf 2y ago
iVerify looks like total snake oil: > First and foremost, iVerify Basic is a security scanner that ensures you are using the iPhone's basic security features such as Face/Touch ID and Screen Lock, and are running the latest iOS version. It also runs a device scan that looks for security anomalies and notifies you if something seems out of place.
- transpute 2y ago
  Not much detail on their site. Do they have MDM access for logs? Too bad individuals can't self-host an OSS MDM to do forensics on their own devices. https://iverify.io/post/clipping-wings-our-analysis-of-a-pegasus-spyware-sample https://iverify.io/post/clipping-wings-our-analysis-of-a-peg... > For this analysis, we had access to the customer’s iTunes backups, crash logs, and sysdiagnose files. One of the best things about Threat Hunter is that we can gather these artifacts remotely without needing physical access to the device.
beretguy 2y ago
> iPhones no longer power off Is this true? I’m still using first se do i don’t know.
- transpute 2y ago
  iPhone 11 onwards, excluding all SE versions.
  - trogdor 2y ago
    In what sense do iPhones not power off? If you are referring to the “Findable After Power Off” functionality, that can be disabled in settings.
    - transpute 2y ago
      If phone should be findable when lost, the setting to continuously broadcast location needs to be enabled. If non-lost phone location should not be broadcast for a short period, it can be put into a faraday bag. https://news.ycombinator.com/item?id=40551032 https://news.ycombinator.com/item?id=40551032
      - trogdor 2y ago
        Or you can just turn that feature off.
        transpute 2y ago
        > turn that feature off Send location/signal/command to public cloud, to request non-tracking of location. > put in a faraday bag Local action. No network connection or location broadcast needed.

orf 2y ago

iVerify looks like total snake oil: > First and foremost, iVerify Basic is a security scanner that ensures you are using the iPhone's basic security features such as Face/Touch ID and Screen Lock, and are running the latest iOS version. It also runs a device scan that looks for security anomalies and notifies you if something seems out of place.

transpute 2y ago
Not much detail on their site. Do they have MDM access for logs? Too bad individuals can't self-host an OSS MDM to do forensics on their own devices. https://iverify.io/post/clipping-wings-our-analysis-of-a-pegasus-spyware-sample https://iverify.io/post/clipping-wings-our-analysis-of-a-peg... > For this analysis, we had access to the customer’s iTunes backups, crash logs, and sysdiagnose files. One of the best things about Threat Hunter is that we can gather these artifacts remotely without needing physical access to the device.

beretguy 2y ago

> iPhones no longer power off Is this true? I’m still using first se do i don’t know.

transpute 2y ago
iPhone 11 onwards, excluding all SE versions.
- trogdor 2y ago
  In what sense do iPhones not power off? If you are referring to the “Findable After Power Off” functionality, that can be disabled in settings.
  - transpute 2y ago
    If phone should be findable when lost, the setting to continuously broadcast location needs to be enabled. If non-lost phone location should not be broadcast for a short period, it can be put into a faraday bag. https://news.ycombinator.com/item?id=40551032 https://news.ycombinator.com/item?id=40551032
    - trogdor 2y ago
      Or you can just turn that feature off.
      - transpute 2y ago
        > turn that feature off Send location/signal/command to public cloud, to request non-tracking of location. > put in a faraday bag Local action. No network connection or location broadcast needed.