News for hackers. Stuff that matters.
Re:Congressman's phone password is 111111 by wayneftw on Thursday October 24, 2019 @10:27AM (#21344960)
I don't lock my phone at all. Never have. However, with the new iPhones that don't have a home button, I believe that Apple is forcing you to either use face unlock or a passcode. There is no choice to just leave it unlocked.

So, as soon as my iPhone 6s stops working, I will have to choose to: 1) Give in and use my face to unlock. 2) Use a dumb passcode like 000000. 3) Upgrade to the newest iPhone that still has a home button (I think iPhone 8) or 4) Become and Android user.

Re:Congressman's phone password is 111111 by dpcan on Thursday October 24, 2019 @10:33AM (#21345029)
I think your point may be that he doesn't have anything private on the phone to worry about or anything that needs to be kept secure?

I think the argument hidden in the headline here is that since this is a device owned by a congressman, and allowed inside this particular meeting, it has information on it that may be confidential, and therefore needs a much stronger password.

My phone has access to my email, phone number, texting.

With these 3 things you can get into my bank account, access to my domains, and into any online account I hold.

Then, personally and professionally, I manage other peoples' accounts, so, with my phone, you can probably social-engineer your way into those as well.

My point is, if you are married, have a job, email, or have other people in your life that you don't want to go through an identity theft crisis, or get hacked, stalked, etc, you should lock your phone.

Maybe you aren't the target, but you are the wide-open back door into their life.

Re:Congressman's phone password is 111111 by wayneftw on Thursday October 24, 2019 @11:17AM (#21345491)
Nobody in my contacts has given me non-public contact info such as secret phone numbers, email addresses or other such info.

I don't manage other peoples accounts from my phone.

My passwords are stored in an encrypted file, accessible only by entering my pin.

My email app has a pin lock.

I don't use the browser to login to any important sites like banking sites.

If you get my phone, the most you can do is order something for me on Amazon (it will be shipped to me, else you have to enter your own credit card) or you can mess with my GitHub content.

Re:Congressman's phone password is 111111 by dwild on Thursday October 24, 2019 @11:28AM (#21345609)
You can also most probably install an application that will be able to catch both your pins and subsequently, much more data.

Considering that both your password and email are protected by pins, why not have a pin on the device too?

Re:Congressman's phone password is 111111 by wayneftw on Thursday October 24, 2019 @12:25PM (#21346166)
Looking at email or passwords is rare. Reading some quick news, opening maps, listening to music and so forth - I don't want to use a pin to access all of those things.

Someone installing an app to catch pins that I typed in and then giving me back my phone...then waiting until I typed a pin and stealing my phone again seems like a bit of a hassle. Out of curiosity though - what app in the app store allows you to do this? Or, do they have to jail break my phone to do it?

I'm not really trying to argue that my way is better. I'm just giving my personal point of view. It works for me. I just don't worry about things and shit seems to work out. I leave my house unlocked all the time. Same with my car. I leave the keys in the car when I go into stores.

It's just stuff. Perhaps if someone stole everything from me, I'd be even more free than I am now.

Re:Congressman's phone password is 111111 by dwild on Thursday October 24, 2019 @05:05PM (#21349157)
> .then waiting until I typed a pin and stealing my phone again seems like a bit of a hassle.

Why would you have to steal it again?

> Or, do they have to jail break my phone to do it?

They will most likely have to jailbreak it.

> I just don't worry about things and shit seems to work out.

Yeah, sure, nobody ever said it happens often, it's for the time it happens that it save you so much trouble.

A friend got his credit card stolen recently, no big deal, I'm in Canada and the bank take all the blame in theses cases. It still was way too much trouble to get a new card because the guy changed his card information and the bank couldn't validate his identity.

It's not always about what you may lose, it's about what may happens to get back from it.

> It's just stuff. Perhaps if someone stole everything from me, I'd be even more free than I am now.

I don't believe you, but good for you if believe it yourself.

Re:Congressman's phone password is 111111 by t0mbstone on Thursday October 24, 2019 @10:29PM (#21351282)
On the flip side, one could also argue that as a public employee, everything that congressman does should be on the public record out in the light for everyone to see, and that the best security would actually be zero security.

This would also have the positive side effect of making it really hard for public employees to engage in corrupt and illicit behavior (which, as we all know, is so rampant that it's practically industry standard at this point).

Re:Congressman's phone password is 111111 by abstractbeliefs on Thursday October 24, 2019 @10:30AM (#21344999)
Why is it that you choose not to?

I think it would be helpful to understand your use case and how you balance your personal tolerance for risk and consequences so we can better consider users like yourself.

Re:Congressman's phone password is 111111 by Dragonai on Thursday October 24, 2019 @10:46AM (#21345173)
Comments like the parent comment never fail to fascinate me - far and away, I have never seen more uncommon/unusual use cases for pretty much anything than I do on Hacker News. I don't mean that in a negative way at all, I mean it's just amazing how diverse a crowd we have on here and I love how many perspectives we end up seeing in the comments.
Re:Congressman's phone password is 111111 by droithomme on Thursday October 24, 2019 @02:39PM (#21347778)
Not him but I also leave my iPhone wide open.

I primarily use it as a camera and tape recorder. And mobile wifi web browser with retina resolution in rare cases, all in which I specifically avoid using it to use any sites that require logging in.

I have a fake name on it. There are no contacts or email accounts set up on it.

It's not ever been activated as a cell phone.

Basically, I see no reason to have a password on it, and a password slows things down slightly and has the risk of forgetting (since I never reuse passwords), so why bother.

My Android phone that I do use as a cell phone though I have a password on it. It has similarly few personal details, but the call logs would make it easy to identify me.

Granted the iPhone's location logging though disabled might be storing info anyway, and probably the photos are GPS tagged, so those things would identify me.

Re:Congressman's phone password is 111111 by barneygumble742 on Thursday October 24, 2019 @11:30AM (#21345635)
My phone never leaves my sight. I don't do mobile banking of any kind. I can sign out/remotely wipe the device via the web. It would be nice to remotely turn ON the GPS to find my phone but Android has since removed the remote GPS ON feature.

If only I can find a smartphone for talk/text/web/GPS, I'd be switch in a heartbeat. I'm seriously getting sick of the all the security features that tend to bloat the device and slow it to a crawl.

That being said, if my phone was vulnerable to theft or I wasn't so careful, I would lock my screen.

Re:Congressman's phone password is 111111 by _jal on Thursday October 24, 2019 @10:43AM (#21345144)
(Not the OP.)

I have an older phone that is basically a home remote for various things. There is no reason for it to lock, it would be annoying.

Re:Congressman's phone password is 111111 by Jill_the_Pill on Thursday October 24, 2019 @12:30PM (#21346213)
Also not the OP, also have an older phone.

I am of an older tech generation who sees this type of security as antithetical to anonymity.

Re:Congressman's phone password is 111111 by weaksauce on Thursday October 24, 2019 @10:43AM (#21345145)
I was just using an iPhone without a home button and you don’t need a passcode or facial recognition to use it. Just swipe up from the bottom.
Re:Congressman's phone password is 111111 by probablyexists on Thursday October 24, 2019 @12:02PM (#21345960)
I'm not sure I follow...

You don't need a passcode or facial recognition to access any phone that doesn't have those features enabled.

If you enable them you certainly do.

Re:Congressman's phone password is 111111 by weaksauce on Thursday October 24, 2019 @01:09PM (#21346676)
well, I'm replying to a person that said:

> I don't lock my phone at all. Never have. However, with the new iPhones that don't have a home button, I believe that Apple is forcing you to either use face unlock or a passcode. There is no choice to just leave it unlocked.

And I'm saying that you can use it without those features enabled; even on iPhones without a home button.

Re:Congressman's phone password is 111111 by psychometry on Thursday October 24, 2019 @10:44AM (#21345155)
How do all the people you communicate with via email, text, etc., feel about their contact information and messages with you being so easily accessible? Securing your devices isn't just about you...
Re:Congressman's phone password is 111111 by wayneftw on Thursday October 24, 2019 @11:20AM (#21345523)
They're absolutely fine with it. Contact information isn't secret.
Re:Congressman's phone password is 111111 by psychometry on Thursday October 24, 2019 @12:59PM (#21346551)
Yeah? Did you ask every single one of them?

Also, while it might not be too difficult for someone to figure out my phone number and/or email address from my name, it's not like there's a public directory of either. "Not secret" does not should not equal "public".

Re:Congressman's phone password is 111111 by ceejayoz on Thursday October 24, 2019 @12:34PM (#21346253)
> contact information and messages
Re:Congressman's phone password is 111111 by swozey on Thursday October 24, 2019 @11:14AM (#21345463)
When I was a kid my house was "broken into" but because the door was unlocked the police couldn't qualify it as breaking and entering. It was merely trespassing and my neighbor who did it got off. I was 12, these details may be a bit fuzzy. I chased the guy off so nothing was taken, he just walked in, saw me running to the door and ran back out. Supposedly he was just drunk and wandered into the wrong house anyway.

I'm curious what affect not locking your phone might have on police reports if your identity/etc is ever stolen and you need to provide police reports. Possibly nothing, but I can imagine some credit cards legal team working hard on that aspect of things in the event you're trying to convince AMEX to return $40k of transactions you supposedly didn't make yourself and need reversed because your phone was swiped while logged into some CC app and they copied your card number.

Re:Congressman's phone password is 111111 by dwild on Thursday October 24, 2019 @11:26AM (#21345580)
> Supposedly he was just drunk and wandered into the wrong house anyway.

That's what made him fine, not the fact that you didn't lock.

That's a thing that quite misunderstood, but for a crime to be committed, you need criminal intent. If you just made a mistake and weren't aware it wasn't your house, it's not a crime to enter it.

Re:Congressman's phone password is 111111 by tialaramex on Thursday October 24, 2019 @12:04PM (#21345971)
Not all crimes require intent. Crimes where intent is not required are called "Strict liability" crimes, for those crimes it is sufficient to prove that the accused did the thing which is forbidden, and it's entirely irrelevant (to guilt, though not necessarily to sentencing) why they did it.

Also for some crimes the intent needn't match the outcome. For example in the UK _Attempted Murder_ requires (as well as facts of an attempt) you had an intent to kill, but _Murder_ only requires that you had an intent to at least cause grave harm, the fact of death makes it murder, even if a jury believes you intended only, say, to hospitalize the victim.

Re:Congressman's phone password is 111111 by swozey on Thursday October 24, 2019 @11:34AM (#21345673)
You're likely right and it was just my parents and police scaring me into keeping the doors locked. He wasn't arrested until the next day (had no idea he was a neighbor, he lived a few blocks away) when the police realized who he was.

But that's also the thing- we had no idea what his intent was. I do recall the police that night seeming less concerned because the door was unlocked and I was chided quite a bit. I do recall them telling me what I said in my initial post but I also understand criminal intent. Personally I'm glad the guy wasn't wrung up with a felony if he was just on some ambien sleepwalk bender or whatever he was on.

Re:Congressman's phone password is 111111 by wycy on Thursday October 24, 2019 @10:50AM (#21345220)
Why do you not want to use your face? And I don't think the lack of a home button changes whether or not you have to use a passcode. I haven't seen anything to indicate that the new iPhones can't be passcodeless (though I don't want to clear my FaceID data to test this). Just swipe up to unlock.
Re:Congressman's phone password is 111111 by wayneftw on Thursday October 24, 2019 @12:26PM (#21346177)
Thanks for this! I'll go to the Apple store and test it.
Re:Congressman's phone password is 111111 by wycy on Thursday October 24, 2019 @12:42PM (#21346325)
Actually, the Apple store phones are all already set up this way: no passcode, no FaceID, swipe up to unlock.
Re:Congressman's phone password is 111111 by alphabettsy on Thursday October 24, 2019 @02:18PM (#21347497)
You can still choose not to have a passcode on newer iPhones.

That said, I have a really good friend that chooses not to use a passcode for their phone.

Somewhat irritating because being a really close friend we sometimes have very personal conversations via text, and the fact the they don’t lock their phone means I have to be conscious of that. These aren’t deep-dark secrets, but still personal things I wouldn’t share publicly.

Re:Congressman's phone password is 111111 by berdon on Thursday October 24, 2019 @10:55AM (#21345262)
5) Accept responsibility and lock your device