Under iOS 11, authorities won’t be able to image your device without a passcode

Re:Under iOS 11, authorities won’t be able to image your dev... by eridius on Monday September 11, 2017 @07:04PM (#15223243)

iOS devices have always required the device to "trust" the computer before allowing the backup. Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode.

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by lern_too_spel on Monday September 11, 2017 @07:33PM (#15223413)

You are correct. Android does not require you to enter a passcode to trust a computer if you have a fingerprint registered. The change is that Apple now requires you to enter a passcode if you have set up a passcode on the device in the past. If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by nemothekid on Monday September 11, 2017 @08:59PM (#15223926)

>If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.

You can't setup TouchID without a passcode. The "attack vector" only exists if you 0 security on your iPhone to begin with. (So , yes, technically the attack vector exists if you choose to use no locks at all).

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by 9935c101ab17a66 on Monday September 11, 2017 @11:19PM (#15224569)

You misunderstand. The vector is: I take random persons phone, compel them to provide me their finger print, and now when I plug the phone in to a computer, I can unlock the device and then tap "trust" in order to back up the phone to the computer. If the iPhone was already powered on and the user had entered their passcode after it turned on, even if it was two weeks ago (there may be a time out I'm not aware of, but you get the point), I'd be able to backup their device to my computer.

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by matt_wulfeck on Monday September 11, 2017 @11:52PM (#15224685)

That's changed now, from the article:

> Under iOS 11, this sequence has changed to also specifically require the passcode on the device after the "Trust This Computer?" prompt.

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by comex on Tuesday September 12, 2017 @02:34AM (#15225245)

> Looking at the article, the only real difference now appears to be that you can't just use TouchID, you're forced to use the passcode.

That's part of it. Another part is that the passcode has to be entered after the device has been connected to the computer, as opposed to starting with an unlocked phone (maybe you took it while it was in use, maybe you forced the user to unlock it) and connecting it to a computer later.

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by jaclaz on Tuesday September 12, 2017 @12:35PM (#15228756)

I am not sure to understand.

Once the device is unlocked, what is the obstacle to change the passcode?

Needing the old one?

Or - if you prefer - what happens if you have a TouchID and forget the passcode?

Do you need to reset the phone?

[ Parent | on HN ]

Re:Under iOS 11, authorities won’t be able to image your dev... by code_duck on Tuesday September 12, 2017 @02:58AM (#15225334)

Not always... just since iOS 7.

[ Parent | on HN ]