About the security content of iOS 16.2 and iPadOS 16.2

Re:About the security content of iOS 16.2 and iPadOS 16.2 by takoid on Tuesday December 13, 2022 @04:09PM (#33975824)

Anyone else having issues creating a recovery key for their device? I have tried several times to do so since updating to 16.2 but I can’t get the code to verify.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by coder543 on Tuesday December 13, 2022 @04:27PM (#33976084)

I created a recovery key no problem.

I'm confused about the Security Key for 2FA situation, since I can't find that anywhere on iOS. On the AppleID website, it mentions it, but the "learn more" link 404s[0], and the "continue on device" button errors out.

I guess they're working on rolling this feature out on the backend still.

[0]: https://support.apple.com/en-us/HT213154

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by photoGrant on Tuesday December 13, 2022 @06:55PM (#33978066)

Security Key features are beginning 2023

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by radicaldreamer on Tuesday December 13, 2022 @05:59PM (#33977457)

Their servers are getting hammered, I think some of these features will be unreliable to enable temporarily.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by SamuelAdams on Tuesday December 13, 2022 @07:57PM (#33978597)

You would think generating and verifying a recovery key wouldn’t need server access, but I’m getting the same thing as OP on an iPhone 13 mini. I wonder if one of my PiHole lists are blocking it?

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by encryptluks2 on Tuesday December 13, 2022 @08:55PM (#33979067)

I believe they also keep a copy of your recovery key. Apple touts privacy and security but most people I know that use Apple just repeat whatever they claim in their press releases, and have no clue if their device is actually secure.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by riolu on Wednesday December 14, 2022 @01:22AM (#33980628)

For someone with luks2 in the username you sure have a lack of understanding about encryption.

Why would it be so hard to believe that your recovery key is hashed and salted like every other password? You can't view your key after creation, you have to regenerate it. Do I really need to pull out Wireshark to verify this for you?

Advanced data protection is explicitly removing Apple as a holder of your keys, it's not re encrypting anything, it's not new encryption. The entire process is just deleting the key that was already stored on their servers anyway. How would it be in Apple's interest to keep your recovery key after press releases and multiple warnings saying you're on your own for recovery.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by encryptluks2 on Wednesday December 14, 2022 @03:20AM (#33981211)

Microsoft Windows has the option to upload your BitLocker recovery key to your Microsoft account. I was trying to understand why Apple needed to ping a server for a recovery key. Oh, look... they do have that feature afterall:

https://support.apple.com/guide/profile-manager/use-a-person...

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by smoldesu on Tuesday December 13, 2022 @09:53PM (#33979453)

They claim that's not the case, at least with this new configuration. I'm not sure if I believe them, but this shouldn't be an issue. In theory.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by bombcar on Tuesday December 13, 2022 @05:53PM (#33977381)

I made one seemingly fine on a iPhone X - but I updated via a cable to my Mac instead of doing it on device.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by byproxy on Tuesday December 13, 2022 @04:21PM (#33976005)

Likewise, on an iPhone XS.. if that matters.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by takoid on Tuesday December 13, 2022 @05:18PM (#33976837)

Are you also having issues? I’m troubleshooting the issue with Apple Support right now but not having any luck. They said they are going to open a ticket with the engineering team.

[ Parent | on HN ]

Re:About the security content of iOS 16.2 and iPadOS 16.2 by thefurdrake on Thursday December 15, 2022 @11:24AM (#34001831)

I attempted to create a recovery code on my ipad. I tried bout 5 different codes, and I could never get them to verify. I had to enable/verify the recovery code on my macbook, after which it worked first attempt. Something's up with the ipadOS/iOS versions.

[ Parent | on HN ]