News for hackers. Stuff that matters.

A comment on Apple's new iPhone security setting keeps thieves out of your digital accounts. Parent comment

Re:Apple's new iPhone security setting keeps thieves out of ... by baz00 on Wednesday December 13, 2023 @06:24AM (#38625766)
Against their own advice, the moment it is stolen you should erase it from Find My as a priority. Until that is done it can be used to authenticate with your iCloud account as an MFA device and can then be removed anyway if they get past the device lock. In that window the security posture is somewhat unknown. I'm sure there is a good market of off the shelf exploits which can leverage that in some way, despite Apple's excellent general efforts on this front so far.

The key thing is to protect your data first and that means wiping it remotely. Leave it attached to your iCloud account device list though because that'll leave the provisioning / device lock in place. I'm sure they have a way around that now but it'll make it more difficult and devalue it for the thief at least.

[ Parent | on HN ]
Re:Apple's new iPhone security setting keeps thieves out of ... by gojomo on Wednesday December 13, 2023 @01:21PM (#38631741)
A good example of why I try to keep anything I consider really important out of iCloud entirely! (That's quite hard with Apple's various dark patterns to boost iCloud usage & lock-in.)

But yes - it looks to me like dishonest actors managed to get the device out of my "iCloud account device list" without my permission, and thus evade the "provisioning / device lock".

[ Parent | on HN ]