News for hackers. Stuff that matters.
Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by nneonneo on Thursday July 21, 2022 @09:42AM (#32179282)
I think one reason to make this feature public is to get more people to use it, and therefore dilute Lockdown Mode as a signal. As you say, it’s pretty easy for an attacker to detect this mode: with a browser, just check that the Safari version is high enough but that certain features are not available. If even 1% of iPhone users are using Lockdown mode, it’ll far exceed the number of people who really need the feature to stay ahead of nation-state targeting.
Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by Syonyk on Thursday July 21, 2022 @09:55AM (#32179429)
This would be another good reason for "lots of random people to use it," certainly - same as Tor.
Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by O__________O on Thursday July 21, 2022 @10:51AM (#32180084)
Using Tor is legal justification for a warrant to remotely hack systems using it:

https://www.nolo.com/legal-encyclopedia/what-does-rule-41-sa...

As such, highly likely most systems running Tor nodes have been hacked and that Tor is not secure.

Very possible lockdown mode might be as well a legal justification for a warrant, given it “conceals” systems.

[dead]
Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by O__________O on Thursday July 21, 2022 @11:37AM (#32180662)
If that was the case, Apple would have just offered end-to-end-encryption for iCloud, which they did not; turning off iCloud is also not a default configuration of the new lockdown mode, which it should be.
Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by threeseed on Thursday July 21, 2022 @11:19AM (#32180435)
I think you should spend less time on conspiracy sites.

The world including Apple's product map doesn't revolve around Hunter Biden.

Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by Sporktacular on Thursday July 21, 2022 @11:47AM (#32180782)
It just makes sense to lock down iMessage, for example, as a vector.

They're doing this for credibility? Yeah, in part, that's how companies work. But if it produces an improvement then what's the problem? Capitalism?

Also, what's with the aggression? Tone it down.

Re:Analyzing iOS 16 Lockdown Mode: Browser Features and Perf... by O__________O on Thursday July 21, 2022 @10:12AM (#32179632)
Issues is automatically targeting users would be easy.

If Apple tracks users that have both lockdown mode and iCloud on, all a nation state with jurisdiction has to do is request list of users with both on; having lockdown mode on might even qualify as justification for a search warrant and legally hack anyone using it, which is already the case for Tor:

https://www.nolo.com/legal-encyclopedia/what-does-rule-41-sa...

Find it horrifying that Apple has this feature, but makes no effort to inform users about the risks of iCloud; in my opinion, if you have lockdown mode on, iCloud should not be option, should trigger an off boarding from iCloud and wiping of any data on iCloud; also pointed this out in comments here:

https://news.ycombinator.com/item?id=32006436

To me, as is, lockdown mode sounds like a honeypot:

https://en.m.wikipedia.org/wiki/Honeypot_(computing)