Re:How my brother's iCloud account was stolen
by limitedsupply on Monday January 16, 2023 @08:25PM
(#34408021)
One fix that was mentioned in the comments that would have been easy to implement (and, frankly, bizarre it’s not implemented yet) is confirming password when performing such critical actions as removing or adding devices/telephone numbers.
[ Parent
| on HN ]
Re:How my brother's iCloud account was stolen
by Gigachad on Monday January 16, 2023 @08:40PM
(#34408139)
I just tested this on my iphone and it absolutely asks you for a password before you can touch the icloud phone number. I suspect the victim was compelled to complete to either enter or hand over this password when the phone was stolen. It's not out of the question that the brother forgot this happening consider how stressful the situation would have been.
Re:How my brother's iCloud account was stolen
by limitedsupply on Monday January 16, 2023 @08:47PM
(#34408184)
Thanks for testing this, Gigachad!
At this point I will just stop commenting on this post as it seems like either Apple already fixed this or some of the most critical information has been omitted by the author. So we are just guessing and raging for no reason.
Re:How my brother's iCloud account was stolen
by probably_wrong on Monday January 16, 2023 @10:15PM
(#34408732)
Author here.
Unfortunately I don't have an iPhone to check, but another comment [1] suggests that this may happen if you physically change SIMs. My brother said they didn't ask for his iCloud password, which makes sense: if they had the password then they wouldn't have needed the phishing step afterwards.