4 ms·
Oh that was part of the app? I thought that was just the iphone lock screen. "We know that a PIN will not stop a determined attacker for long, but since we mak
by jetti 14y ago
Oh that was part of the app? I thought that was just the iphone lock screen.
"We know that a PIN will not stop a determined attacker for long, but since we make it possible to remotely deactivate a lost or stolen phone, it only needs to slow them down long enough for you to report it."
And how would one be able to do this? Would they need a password? (Genuine question, not trying to be an ass)
- brennenHN 14y agoHaha, I definitely don't take that as being an ass, it's an important question and it's part of an area that we're trying to improve. We have a section of our website clef.io/lost where you go when you lose a phone. It asks for your email and PIN, then sends an email to you confirming the deactivation. If you click on the link in your email, the phone is immediately deactivated. If you open the app and enter your PIN, the deactivation is canceled. We want to make sure that an attacker has a hard time deactivating your account, but that you are able to quickly deactivate it when you need to. In the long run, we do not want to rely on email, and so we will need to move to a paradigm of trusted computers or other methods of valid-user-identification.