Re:Apple’s iPhone Passcode Problem
by londons_explore on Sunday February 26, 2023 @04:25AM
(#34944226)
Current security systems tend to have strict logic to say what actions are possible when. For example, 'if you have an iPhone logged into iCloud and the pin then you can change the iCloud password'.
I think a better model would be to compare the position the user is trying to get into with the position they were in 7 days ago.
If the user wants to remove a device from their account... Fine... But if the user 7 days ago had a totally different set of synced devices, has changed the recovery phone, and changed the password, then that's probably a bad sign.
The recovery process from this is then to ask a user to provide as many forms of Auth as possible from forms of Auth they had configured 7 days ago. If they know the 7 days ago password, recovery phone, pin, and can access devices from 7 days ago, you probably have the real user.
I think a better model would be to compare the position the user is trying to get into with the position they were in 7 days ago.
If the user wants to remove a device from their account... Fine... But if the user 7 days ago had a totally different set of synced devices, has changed the recovery phone, and changed the password, then that's probably a bad sign.
The recovery process from this is then to ask a user to provide as many forms of Auth as possible from forms of Auth they had configured 7 days ago. If they know the 7 days ago password, recovery phone, pin, and can access devices from 7 days ago, you probably have the real user.