Notices have already been issued under Australia’s new encryption laws

Re:Notices have already been issued under Australia’s new en... by lotsofpulp on Wednesday February 06, 2019 @12:25PM (#19097291)

Figuring out people's easy passwords and password recovery methods isn't a weakness in iCloud, and shouldn't be counted as hacking iCloud. And if you were concerned with security, and had to buy a smartphone, what device is better than an iPhone?

[ Parent | on HN ]

Re:Notices have already been issued under Australia’s new en... by WrtCdEvrydy on Wednesday February 06, 2019 @01:14PM (#19097891)

> We didn't give random people loans in your name, your identity was stolen.

When you shift responsibility from the provider to the customer, you play right into the security blame game.

[ Parent | on HN ]

Re:Notices have already been issued under Australia’s new en... by lotsofpulp on Wednesday February 06, 2019 @01:33PM (#19098129)

Analogies are useful for illustrating a thought, not for supporting arguments. And identity theft (where the victim can do nothing to protect themselves) is not analogous in the first place.

Using multi factor authentication, using long, difficult passwords, and don’t let your security questions be obvious. If someone knocks me out, uses my finger to TouchID into my bank’s app and transfer money, that’s the price I pay for the convenience of not wanting to login with my password. Same with using weak passwords and questions.

[ Parent | on HN ]

Re:Notices have already been issued under Australia’s new en... by WrtCdEvrydy on Wednesday February 06, 2019 @01:51PM (#19098320)

You can't seriously say that a multi-million dollar company can't enforce those security features by default.

This is the same as having a car recall and having people dying before the letters reach their homes and saying 'they should have known this company's cars could explode'

[ Parent | on HN ]

Re:Notices have already been issued under Australia’s new en... by lotsofpulp on Wednesday February 06, 2019 @01:59PM (#19098431)

I don't understand the purpose of using analogies (valid or not) in this discussion.

Apple could have forced people to use multi factor authentication, and whether or not they should have forced it is a separate discussion that can be had. But I was claiming that your original comment was that iCloud was "hacked" is incorrect, since it implies there was some weakness on Apple's technical backend.

[ Parent | on HN ]

Re:Notices have already been issued under Australia’s new en... by WrtCdEvrydy on Wednesday February 06, 2019 @02:03PM (#19098476)

Not forcing secure by default practices in your secure devices is a weakness on Apple's technical backend.

Maybe they should take a couple of notes for their broken cloud implementation from another phone manufacturer in the space that takes security seriously:

https://www.theguardian.com/commentisfree/2014/sep/30/iphone...

https://www.cso.com.au/article/577197/apple-tells-ios-9-deve...

[ Parent | on HN ]