News for hackers. Stuff that matters.
Re:Apple pays out millions to student after repair techs sha... by Someone1234 on Monday June 07, 2021 @10:03AM (#27422723)
- If your phone is broken that may not be an option.

- The victim isn't responsible for the crime committed against them, as shown by this verdict.

- It is common because it is under-prosecuted. Hopefully we can see changes there.

Re:Apple pays out millions to student after repair techs sha... by beagle3 on Monday June 07, 2021 @10:07AM (#27422780)
> The victim isn't responsible for the crime committed against them, as shown by this verdict.

The victim isn't responsible, but often the damage really is irreparable, and you don't even know who is the criminal (your private photos are online. Now what?), so it's a good idea to make the crime less likely to happen. As always, it's an effort-benefit tradeoff.

Re:Apple pays out millions to student after repair techs sha... by least on Monday June 07, 2021 @10:14AM (#27422854)
> If your phone is broken that may not be an option.

Definitely true, this is something that companies responsible for handling private data need to be more vigilant at. Whether that be finding a means to restrict access to that data (which Apple should be doing), training and supervision, restricted access to internet, or whatever, there's definitely more preventative measures that should be taken to ensure that this doesn't happen.

> The victim isn't responsible for the crime committed against them, as shown by this verdict.

No one is claiming that a victim is responsible for the crime committed against them, just that there are strategies to mitigate risk. You should prepare yourself for how things are, not how they should be.

> It is common because it is under-prosecuted. Hopefully we can see changes there.

It's hard to say how common it is, but ultimately it's a crime of opportunity. Maybe they need to stick the workers in a faraday cage so they can't connect the phones to the cell network or wifi.

Re:Apple pays out millions to student after repair techs sha... by rswail on Monday June 07, 2021 @11:08AM (#27423468)
It wasn't a crime. It was a civil action. There was no verdict because Apple paid.

Apple should implement a "send for service" option that configures the device so that service can be done without exposing the customer's information.

All Apple customers for iPhones have an Apple ID. When the phone is in service mode, all the data is backed up to iCloud (irrespective of whether the customer has paid for it) and the phone wiped. The fact that an iPhone doesn't include at least as much iCloud storage as it has local storage for backup is ridiculous.

After repair, the data is loaded back into the device before being returned to the customer.

Re:Apple pays out millions to student after repair techs sha... by stevehawk on Monday June 07, 2021 @11:18AM (#27423601)
> Apple should implement a "send for service" option that configures the device so that service can be done without exposing the customer's information.

except that doesn't solve the problem if your phone is broken and you can't enable that option.

Re:Apple pays out millions to student after repair techs sha... by Wintereise on Monday June 07, 2021 @09:31PM (#27429645)
It can be implemented in the same way remote erase is, remotely.
Re:Apple pays out millions to student after repair techs sha... by swiley on Monday June 07, 2021 @11:20AM (#27423621)
Just pull the storage out

Oh wait.