News for hackers. Stuff that matters.

A comment on iPhones 'disabled' if Apple detects third-party repairs. Parent comment

Re:iPhones 'disabled' if Apple detects third-party repairs by gherkin0 on Saturday February 06, 2016 @09:44AM (#11047907)
> The issue is Apple cannot verify a secure touch ID replacement over a compromised touch ID replacement. Without knowing if your replacement is secure the change potentially compromises the security of the whole device.

The correct solution there would be to pop up a warning saying the TouchID hardware has been tampered with, and giving the user an option to validate it.

[ Parent | on HN ]
Re:iPhones 'disabled' if Apple detects third-party repairs by sp332 on Saturday February 06, 2016 @10:10AM (#11048011)
That wouldn't really be a good idea. Someone could steal your phone and replace the TouchID hardware. Then this popup comes up and they say, oh yeah this hardware is totally legit! Then they get your data, impersonate you, charge stuff etc.
[ Parent | on HN ]
Re:iPhones 'disabled' if Apple detects third-party repairs by gherkin0 on Saturday February 06, 2016 @10:20AM (#11048056)
The prompt would have to be after you authenticated your phone in some other way, like via the passcode.

I think it's totally OK not to accept authentication from an unvalidated device, but a legitimate user should be able to do the validation.

[ Parent | on HN ]
Re:iPhones 'disabled' if Apple detects third-party repairs by kccqzy on Saturday February 06, 2016 @08:43PM (#11051105)
I think the post is referring to a hotel maid scenario.
[ Parent | on HN ]