News for hackers. Stuff that matters.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by saluki on Thursday September 14, 2017 @09:24AM (#15247718)
Stolen iPhones should be worthless.

Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN.

Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the iPhone for anyone thinking of buying it.

The potential buyer can check if the iPhone is stolen by using the feature that is allowed to connect to the internet and validate the phone.

They need to make it where stolen iPhones are worthless so when you are getting mugged criminals won't even want it.

Obviously have an option setup where you can transfer ownership of your phone. Maybe with a 7 day waiting period.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by willstrafach on Thursday September 14, 2017 @09:57AM (#15248014)
Find My iPhone + iCloud is what you're describing.

Even a DFU restore of the device won't help a thief, as the activation process will simply ask for your iCloud login and will display a "Message From Owner" that you can set at icloud.com indicating the device was stolen, making it much harder for someone to purchase and claim ignorance about the origins.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by mulletbum on Thursday September 14, 2017 @10:20AM (#15248273)
Can confirm. We ran into this problem in my company as we had contractors setup phones and turn on Find my iPhone. We ended having to do some not so great things to make it so we could use the devices again.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by redler on Thursday September 14, 2017 @12:05PM (#15249339)
What not-so-great things?
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by saluki on Thursday September 14, 2017 @06:38PM (#15253070)
y, that's true but I feel like Apple could do more so criminals don't even want to take iPhones, Apple could put things in place where they aren't worth anything on the secondary market. Basically unusable and could lead the cops to your house.

This way if you're on the subway you can have your phone out without worrying about getting robbed.

It your house gets robbed they would leave your phones because they can't be sold or reused.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by eckza on Thursday September 14, 2017 @09:29AM (#15247764)
They already are. You can sign in to your Apple ID, nuke your phone from orbit, put it in Lost Mode so that it can't be used for anything other than 911 calls, etc etc etc. And you can call your carrier, report it stolen, and bam - the ESN is blacklisted and the phone is a brick.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by gambiting on Thursday September 14, 2017 @09:32AM (#15247790)
I'm guessing they are still useful for parts though? Screens, batteries, cameras....all of that still works even if the motherboard is disabled.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by snuxoll on Thursday September 14, 2017 @10:09AM (#15248157)
Sure, but the value of parts from a stolen device is much less than the value of a working device.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by suvelx on Thursday September 14, 2017 @10:18AM (#15248246)
But the demand for parts is a lot higher than that for stolen phones.

You might not buy a phone from an internet cafe that sells 2nd hand phones, but you might buy a replacement screen from an internet cafe that does repairs.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by ubernostrum on Thursday September 14, 2017 @03:58PM (#15251957)
As others note, it's already possible to remotely wipe/lock a stolen phone, and if you report it stolen to the carrier, they'll list the IMEI in a database shared to other carriers; many will refuse to activate/connect when their SIM is inserted into a phone with a known-stolen IMEI.

Short of visibly, physically destroying the phone, though, there's nothing you can do to prevent this. A criminal doesn't care that the phone is a brick; they'll sell it to someone and be miles away with the money before the buyer realizes the phone is useless.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by ansonhoyt on Thursday September 14, 2017 @12:57PM (#15249938)
Once it is reported stolen, it could capture the face of everyone who tries to access it. If you assign your police case number in iCloud, it could automatically send your police department these faces (with times and locations) to expedite recovery. With all the face databases popping up, they'll easily have a short list of people to follow up with.

Then again, this might create lots of other problems.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by willnewman on Thursday September 14, 2017 @09:51AM (#15247963)
Find My iPhone has a feature called Activation Lock which matches up with what you're describing: https://support.apple.com/en-us/HT201365

The phone won't do anything until the person who turned on the lock turns it off again.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by tlrobinson on Thursday September 14, 2017 @09:29AM (#15247768)
IIRC if "Find My iPhone" is enabled then the phone is worthless (except for parts)
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by sjwright on Thursday September 14, 2017 @09:28AM (#15247756)
Activation Lock does exactly what you want and already exists. If someone steals an iPhone associated with an iCloud account, it's completely useless to the thief.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by zeveb on Thursday September 14, 2017 @10:30AM (#15248363)
> Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN.

Why would I want to give a third party the ability to brick my phone? If Apple has that power, then a disgruntled Apple employee can use that power and a government can compel Apple to use that power.

My computing devices are my computing devices. Only I should have the ability to do anything to them.