News for hackers. Stuff that matters.
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by thijsvandien on Thursday December 14, 2023 @07:04PM (#38649283)
Thanks for telling me about this. It's definitely not acceptable to appropriate such sensitive data without consent.
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by grok25 on Thursday December 14, 2023 @08:42PM (#38650078)
It’s not being appropriated. It’s E2EE. It’s a bug, but nothing more.
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by turbidimeter on Thursday December 14, 2023 @09:03PM (#38650266)
Doesn't feel like a bug to me. After disabling iCloud Passwords I see a big nag in the Passwords menu asking me to enable it again; I don't remember that there on iOS 16.

And when it was enabled there was a nag for Passkeys or password family sharing or something like that. I guess they want people to use that now.

Also I don't understand how you could screw these things up repeatedly for so many features. iMessage is another one that iOS loves to enable again. I just checked: it's enabled again. Turned it off. And the one with Bluetooth that lapcat mentioned. I don't believe these things to be bugs.

But they really crossed the line for me with Passwords.

Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by grok25 on Thursday December 14, 2023 @11:28PM (#38650996)
> Also I don't understand how you could screw these things up repeatedly for so many features.

Seems like a generic bug in the settings system which is fairly complex. Pretty easy to see how something like that could happen.

Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by robcohen on Thursday December 14, 2023 @11:59PM (#38651150)
I agree. It’s easy to see how a user hostile setting would go unchecked by a large corporate company that doesn’t benefit from protecting the privacy of its users.
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by grok25 on Friday December 15, 2023 @12:06AM (#38651190)
That’s a weird conspiracy theory. How does anyone figure Apple benefits from this. How is the setting even ‘user hostile’?
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by rkagerer on Friday December 15, 2023 @02:24AM (#38651850)
I consider sending anything up to the cloud without user's consent is pretty hostile. Passwords especially. I don't care if they claim it's E2EE; programmers and implementations are fallible and I thought a key part of Apple's whole value proposition is it's supposed to retain control in the user's hands.
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by funcDropShadow on Friday December 15, 2023 @04:38AM (#38652540)
> I consider sending anything up to the cloud without user's consent is pretty hostile.

If not illegal.

Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by Kbelicius on Friday December 15, 2023 @06:40AM (#38653141)
Do these "generic bugs" ever happen the other way around? Meaning, do they ever disable any form of communication to Apple or are they always enabling?
Re:Tell HN: iCloud Password Sync turns on by itself on iOS 17 by aborsy on Thursday December 14, 2023 @11:19PM (#38650942)
Nobody at this big corporation tested the settings before shipping? It should probably require FaceID and some steps.

That said, if you enable E2EE I don’t think it’s cause for much concern. You already use their closed source OS.