Apple’s iPhone Passcode Problem WSJ

Re:Apple’s iPhone Passcode Problem WSJ by pain2022 on Wednesday March 01, 2023 @01:35PM (#34986443)

The problem is that one can change Apple ID password knowing only the pincode. No old password asked. This gives thief a full control of Apple ID

Settings -> Apple ID (top panel with name) -> Password&security -> Change password

[ Parent | on HN ]

Re:Apple’s iPhone Passcode Problem WSJ by N_A_T_E on Wednesday March 01, 2023 @02:14PM (#34986893)

Wow, I just tried and it’s very easy. Seems like a huge miss of privilege escalation allowing someone with the pin and phone to escalate to full password. This should require the old password or more steps.

[ Parent | on HN ]

Re:Apple’s iPhone Passcode Problem WSJ by vucetica on Wednesday March 01, 2023 @09:05PM (#34991004)

Someone on a different thread suggested to use the screentime (with a different passcode) and disable icloud settings. Works like a charm.

[ Parent | on HN ]