3 ms·

Also, iirc iphones have this feature where if you appear to be under duress, it will refuse to unlock and disable face id. Is this true? Sort of: if you hold t

Also, iirc iphones have this feature where if you appear to be under duress, it will refuse to unlock and disable face id. Is this true? Sort of: if you hold the buttons on both sides of the phone for about three seconds, it will bring up the Power Off/SOS screen. You do not need to interact with that screen, just display it. Easy-peasy, you can do it with the phone in your pocket. Once that screen is displayed, it requires a passcode to unlock the phone. The courts have determined that the passcode is protected by the 5th Amendment, but biometrics are not. https://arstechnica.com/tech-policy/2023/12/suspects-can-refuse-to-provide-phone-passcodes-to-police-court-rules/ https://arstechnica.com/tech-policy/2023/12/suspects-can-ref...

toomuchtodo 9mo ago
It would be useful imho if an option was available for the phone to automatically enter this mode if separated for more than X seconds from a paired watch or airtag, or with sufficient vibration/acceleration (throw or stomp it). Similar adversarial defense as the phone rebooting after three days [1]. Perhaps part of Advanced Data Protection. Not legal advice. Having a trusted contact remotely wipe the device is also a potential option with appropriate iCloud creds and a message passed [2], assuming the device is not powered down or kept in a physical location blocking internet/cellular channels. [1] New Apple security feature reboots iPhones after 3 days, researchers confirm - https://news.ycombinator.com/item?id=42143265 https://news.ycombinator.com/item?id=42143265 - November 2024 (215 comments) [2] Erase a device in Find Devices on iCloud.com - https://support.apple.com/guide/icloud/erase-a-device-mmfc0ef36f/icloud https://support.apple.com/guide/icloud/erase-a-device-mmfc0e...
- mikestew 9mo ago
  Given that my Apple Watch throws alerts when I leave a device behind (“mikestew’s iPhone was left behind at $PLACE”), it would be just one more step to flip that “no biometrics” bit. I’m assuming that those APIs are not available to 3rd party devs, so I can’t write my own.
- digiown 9mo ago
  GrapheneOS by default autoreboots after 18 hours. You can reduce it much further, to as little as 10 minutes. This deletes the keys from memory and prevents a whole range of AFU attacks that sometimes happens.

toomuchtodo 9mo ago

It would be useful imho if an option was available for the phone to automatically enter this mode if separated for more than X seconds from a paired watch or airtag, or with sufficient vibration/acceleration (throw or stomp it). Similar adversarial defense as the phone rebooting after three days [1]. Perhaps part of Advanced Data Protection. Not legal advice. Having a trusted contact remotely wipe the device is also a potential option with appropriate iCloud creds and a message passed [2], assuming the device is not powered down or kept in a physical location blocking internet/cellular channels. [1] New Apple security feature reboots iPhones after 3 days, researchers confirm - https://news.ycombinator.com/item?id=42143265 https://news.ycombinator.com/item?id=42143265 - November 2024 (215 comments) [2] Erase a device in Find Devices on iCloud.com - https://support.apple.com/guide/icloud/erase-a-device-mmfc0ef36f/icloud https://support.apple.com/guide/icloud/erase-a-device-mmfc0e...

mikestew 9mo ago
Given that my Apple Watch throws alerts when I leave a device behind (“mikestew’s iPhone was left behind at $PLACE”), it would be just one more step to flip that “no biometrics” bit. I’m assuming that those APIs are not available to 3rd party devs, so I can’t write my own.
digiown 9mo ago
GrapheneOS by default autoreboots after 18 hours. You can reduce it much further, to as little as 10 minutes. This deletes the keys from memory and prevents a whole range of AFU attacks that sometimes happens.