limitedsupply
limitedsupply on Hacker News
Look, I totally agree with you: this situation is everyone’s worst nightmare. I wish Apple has responded in a more reasonable and timely way.
Saying that, I can see how by limiting their involvement they are reducing the risk surface. To address issues like that (and there is, of course, a huge spectrum of account hijacking situations) they would need to train an army of international support representatives who would have the authority to overwrite iCloud ownership - an incredibly questionable power. They would need to be able to validate various documents (e.g. US military ID or some obscure residence permit in Japan), be able to verify photos (which with recent ML advancements is becoming increasingly difficult), make phone and video calls to verify identify, and so much more. In turn, these representatives would become vulnerable to social engineering attacks themselves. If they overwrite ownership for a very sensitive account - who would ever trust Apple again?
It’s basically one of the major principles of cryptographic products: it’s safer for them (and, to be honest, for everyone) to deny giving access to one account, then jeopardize trust in the entire company.
I hope Apple will be able to help you through some process - maybe it takes longer than it should have. Good luck!
It looks very similar to Vimeo (just more italicized). The placement is identical too.
This is a really handy tool, and the demo video goes straight to the point!
One minor criticism: it's a bit of a turn off when a well-known logo (and even its position in the header/footer) is so brazenly copied.
You still had a pin code, in addition to the fingerprint. It's an identical situation.
For 2FA - yes. Not for when you lose your password AFAIK.
They phished the password in a separate attack.
That's basically the old idea that a single point of failure/backup is not sufficient. It's not specific to Google, Apple, Microsoft, etc. One copy can get damaged, hijacked, erased by accident - so ideally keep 2 or more (encrypted) copies.
I am sorry this happened to your brother.
I think the information you added makes the majority of the discussion in this thread irrelevant. If the thieves phished the password in a separate attack and then used that to perform iCloud account hijacking - then that's a fairly expected outcome that is not unusual in the industry. Having both the password and the phone basically proves full ownership.
Have you verified this information? Other comments in this thread have and are saying that changing any phone number connected to iCloud requires a password.
Are you sure? Want to re-read it one more time? The phone was _stolen_ at gun point, not unlocked. It looks like the password was later phished when author's brother clicked the fake Apple support link. So at that point they had access to both the password and the phone. But I am guessing, it's not clear how/what they did.
More meaning they would have felt wronged even before that.
In general I agree that it’s unreasonable. Discounts happen, prices change, we can’t always time purchases perfectly.
Thanks for testing this, Gigachad!
At this point I will just stop commenting on this post as it seems like either Apple already fixed this or some of the most critical information has been omitted by the author. So we are just guessing and raging for no reason.
One fix that was mentioned in the comments that would have been easy to implement (and, frankly, bizarre it’s not implemented yet) is confirming password when performing such critical actions as removing or adding devices/telephone numbers.
It would have been helpful to explain that instead of leaving everyone guessing. Being able to unlock the phone is one of if not the most important detail here.
Would you prefer not being able to remove your own old phone from Find My?
There is a lot of disappointment expressed in the comments here but we need level-headed solutions, not just rage against things that are actually useful in 99.9999……% situations.
Not going to try to justify Apple but feel like a piece of info is missing from the post. How did they unlock the phone? Maybe the phone had no auth set up?
In general, it's expected that you should be able to update your own phone number in your iCloud account.
On an iPhone you can go to Settings -> Name, Phone Numbers, Email -> Edit Reachable At. That's one way I guess. Haven't used this menu before so not 100% positive.
The thing that always seemed really strange to me is that I don’t understand how to order anything without looking at the details, comparing prices, checking alternatives, etc. Even with food that I use regularly - do I just say “order almond milk”? I can’t remember the brand… do I need to specify the size? Do I need to double check when is the earliest delivery? Do other people order just “bread” or “light bulbs” or “toilet tissue”?
Wouldn’t your example apply to any encrypted hard drive as well? If you provide access to it encryption is not doing anything.
Usually the fairness that people seek in these situations is just the desire to dump the unfairness on someone else. E.g. the demand to extend the discount to 3-month old purchases ignores the fact that the people who bought a car 3 months and 1 day ago will feel more upset and wronged.
Amazing. It’s so obvious I wonder why billion dollar corporations didn’t figure out the legal implications of these models yet. Do you have an email address I could pass on to OpenAI?
As I anticipated, you are referencing research that *does not* show exact copies being generated by Stable Diffusion. Do "semantically equivalent" images infringe on copyright? I would argue that they do not. We will see how this plays out in court.
Food for thought: if I write instructions for generating an SVG of a black square, does my program contain copyrighted material (Malevich's Black Square)? You and I could argue about that, but you will probably quote more research that disproves your own point. So let's skip that.
Could you provide evidence of your last statement? I haven’t seen these models produce actual copies of any art (can’t imagine that’s an option in general).
These models do not contain copies. One way to describe the data is they contain a statistical breakdown of the artwork, which is substantially different from a JPEG -> PNG conversion you mention.
The important distinction is that the model does not contain a copy of a copyrighted material. It contains data trained on copyrighted material (like our brains).
Are there EV drivers that do not? I don’t think I could ever go back to using 2 or 3 pedals.
Good point. For daily long range commute EVs are not the best option right now. Even if you add some charge midway, it still takes 20–30 minutes, so not ideal.
(Saying that, if gas prices are a major concern then EVs could still be the preferred choice.)
Another counterargument is that these models do not generate anything without a prompt. So in a way it’s like a very smart photoshop: if you, a designer, use tools to create a character that resembles Mickey Mouse - this is on you, not the tool. It’s going to be interesting to hear this being argued in court.
I am aware of that. I charge my Tesla to about 50-70% as most of my infrequent trips are short. But I also don’t write articles complaining about low mileage.
Or just read the article and realize that the author doesn’t fully charge their car?..