Apple's Unannounced Security Game-Changer!

[@Chag69420]

72 hours is a bit long. Should definitely be under 2 days. Who TF needs their phone locked and unused for more than 24 hours?

[@faresamor7292]

Well that’s the point dont you think?

[@Altik.]

@@faresamor7292 it could be 24 hours no reason phone to be “unlocked” after that time

[@lyfandeth]

Someone who is traveling for the weekend?

[@llukem]

​@@lyfandeth You travel for the weekend without your phone and/or without using it the entire time? If so, merely having to enter your passcode before continuing to use it is hardly a big deal.

[@unquiche]

Oh, it’s definitely the “police” (government) also. I’m much more worried about them violating my privacy than nominal thieves.

[@collectorguy3919]

Apple just quietly matched a Graphene OS feature.

[@Tr4ns1st0r]

Good. Now iOS can be even more monumentally secure compared to Graphene OS than it already was.

[@serkandevel7828]

Now Apple has to match the lockout timer down to 18h by default like on GrapheneOS

[@TheToxiss]

@@Tr4ns1st0r GOS is comparable, in some areas even better secured than iOS. Not to mention much more privacy focused.

[@MasterAngelification]

Glad you got a nice Sponsor!

[@slk220319]

I wish that Siri had the ability to restart your phone with a spoken passphrase and return it to a before first user-login state. That way, you wouldn't need to have your phone in your hand, and as long as you were in range of the microphone, it would restart at your command with that passphrase.

[@rabby8857]

shout to siri "hey siri shut down my phone" and immediately say yes after that should do exactly what you want

[@squeegel3904]

"Calling Mom..."

[@rhiivideos]

72 hours is an eternity. I want mine locked up every 24 hours.

[@bunguini]

Nice to have so much positive privacy news, thank you

[@DissociatedWomenIncorporated]

I’m shocked that law enforcement allowed devices which were evidence to remain connected to the internet and able to update themselves. Whoops! 🤣

[@Sashazur]

@@DissociatedWomenIncorporated they left them on exactly because they didn’t want them to reboot.

[@DissociatedWomenIncorporated]

@ I’m not saying they should have switched them off. I’m saying they should have had a 3G/4G/5G jammer or a Faraday cage.

[@stumpybear60]

At this point there has been so many data breaches, personal data monitoring should be provided to everyone for no charge.

[@СергейБулкин-ю9ъ]

Proton's Fundraiser survey was closed on 13th.

[@The_main_andrew]

I use easy opt outs, I just wish they told me what them accomplished

[@JW-mb6tq]

I have a question about AFU/BFU on IOS. If you press your volume and power buttons this disables Face ID. Does this also return the phone to BFU state?

[@tlha]

Im not an expert but you can try the example he gave to test it. And like the name states: “before first unlock”, it probably is not bfu as it is not the first time and for it to be first time and be encrypted, the phone needs to be rebooted. And the reason why it disables face id is most likely an extra security measure. Who does not want extra security.

[@JW-mb6tq]

@ Ah, thanks for the advice and sanity check.

[@ZoeGilday]

At 2:10 when you say you search yourself to check what they missed, do you mean you just open source google search yourself to check name, number, address etc and see what’s still on the internet ? Or do you use a specific other data site ?

[@AEleven-4-Podcasts]

Glad you guys have returned

[@vanessafromoptus1373]

you kinda look like a younger david cross

[@lyfandeth]

THE BIGGER QUESTION IS WHY NO ONE IMPLEMENTS A PANIC CODE. Even the Garmin GPS from the 90's had a special panic code. Press 3 spots while booting, and the entire device wiped all data. So if you were under duress, you could wipe it all. Professional alarm systems will silently send a 911 call if the wrong disarm passcode is entered. So why can't my cell phone wipe itself, if I enter a wipe code? Or the wrong pass code is entered 3? 5? times? WHY NOT GIVE US LOCK AND WIPE CODES?

[@kmcat]

Would be cool, if they could make it reboot once a USB with data is connected.

[@ColbyWanShinobi]

“The real threat here is not the Police…” 🤣💀💀

[@autumnmatthews3179]

72 hours is better than the week it was before but it should be a shorter time. I have noticed a text from a contact that appeared on my lock screen before unlocking and that was just a phone number and not the contact name

[@bizisback]

Does activity count as doing anything without unlocking the phone? E.g. Could an attacker simulate activity

[@wallyhackenslacker]

I don't have much hope that Mozilla will make it to 2030 :/

[@anthrobug]

I think they'd want to keep it quiet, otherwise nefarious people'll know and set a reminder to mess with the iPhone every 2 days or something. Maybe Apple should add an option for this along with different timing schemes like random or even every day.

[@Flunemesis]

That's irrelevant because you have to unlock the phone within the 3 days or it will reboot. If you can unlock it then you could get all data immediately and the device is useless to store anymore. Means if you steal a phone or are the police you only got 3 days to crack the phone or it's gonna reset and encrypt even harder

[@The_main_andrew]

13:18 why can’t I search by my social?

[@TheToxiss]

I had this feature on GrapheneOS quite a while.

[@vvhisper_]

How did you manage to fit 4 of your own ads on top of the youtube ads in one video

[@ultraman33624]

Great, now that you have let the cat out of the bag, the police will now change the way they do things when they seize someone’s phone and also get someone to start working on a way to defeat the security feature.

[@Sashazur]

This was reported on several other websites in the last week or so. The cops would have figured it out regardless.

[@Liminal_Simulacre]

"Game changing feature" That has been possible on GrapheneOS for years, alongside a duress password, for emergency data wiping and so on...

[@Tr4ns1st0r]

iOS is still much more secure than Graphene because of the tight integration of hardware and software that’s not possible with an Android ROM. Also, there is a way to wipe data after 10 failed passcode attempts which is similar and a way to remotely wipe the device via Find My so I’m not quite sure what your point here is.

[@knightlautrec4311]

One thing I always wonder about this, why are people so supportive of making crimes harder or impossible to solve? I am big on privacy, censorship and government overreach, but I don't really understand the positive this provides for anyone other than criminals. I suppose the US is about to become a rogue state so I guess from that perspective I can see why, but a normal functioning society where maybe 2% (give or take) of people get arrested (ignoring actually charged/investigated) how does this actually benefit us? Spying occurs in-transit or in other ways that don't involve direct access to a device, so what's this actually for? People that steal your (modern) phone aren't getting into it, they don't have the tools to do it - if they did we'd know. I'm happy to be told why people feel this is overall beneficial to everyone, again I support privacy and requiring law enforcement to be rigorously held to a standard.

[@mikeloeven]

16:30 This law seems useless because of the provision "Deemed Authorized" While companies do have dedicated pen testers they dont always want independent security researchers revealing problems with software if all they need to do do is say Firm X is unauthorized to bring about criminal charges than this does nothing to protect independent security and white hats

[@alphatech__]

Android have same 72 hours feature for years now 😅

[@FollowTheJohn]

It is for the police!

[@John7No]

it got less coverage people this don't make headlines as when it shows APple as the bad company. Simple as that

[@Buoyant-m5f]

Thanks to Graphene...

[@chammerbeck]

how can anyone take this guy seriously with ears like that......?

[@im_a_surfingdoggo]

What the actual...? Bro, go have a nice chat with a therapist

[@Tracing0029]

Gmail email alising is so hypocritical

[@InventorZahran]

It makes total sense tho! You get to enjoy the benefits of using aliases, while GMail gets to track and cross-connect your activity across every alias you use.

[@RoryEckel]

I think it's so people aren't encouraged to make another Google account. That free storage tier really adds up for Google when everybody does that

[@Irongrip62]

Absolute lies by apple

[@MercedesDenz]

INB4 the Amazon scandal 2025 (November 2024)

[@borzumo]

advocate from a company that scan your device and call a police to jail you. how many idiots still believe that people who can and already done literally anything they want cares about marketing pr security bs

[@lunaxquinn]

First comment lets goooo!!!!!

[@danh5637]

Why does it matter? I mean genuinely. If you have done nothing illegal you have nothing to fear?

[@rubyreeds8931]

@@danh5637 I once thought this too, then realized: If a stranger randomly came up to you and asked to go through your phone without restrictions, would you let them?

[@danh5637]

@ difference between a random person and the police. But assuming they weren’t going to steal the device, then in the abstract if they could explain a good reason why, then I wouldn’t have a problem with it.

[@rubyreeds8931]

@@danh5637 So you'd let a random person (plain-clothes police count here) go through your phone if they can tell a convincing enough reason why? Even if it's a lie? What would those reasons be?

[@danh5637]

@@rubyreeds8931 I think I was pretty clear, that in the abstract, if there was a good reason. I don’t really care. I understand people who have things they wish to hide or they’re ashamed of may have an issue. I honestly don’t, and generally have nothing I’m ashamed or embarrassed about. I think that goes of really 99.99% of people. The only edge case I can think of is sensitive business information, like trade secrets etc.

[@Sashazur]

So you would be fine with 24/7 video monitoring of the inside of your home, recording and monitoring of your calls and texts, and constant monitoring of your emails? Because you have nothing to hide? Isn’t privacy of value regardless?

[@tiagotiagot]

Why is law enforcement being so open about this Apple situation? Is it a actually honeypot?

[@alexanderSydneyOz]

How on earth could it be a honey pot!? They aren't being so open. Rather it has come to their attention because seized iPhones kept on power in vaults which hide them from cell phone access, have been rebooting, making it, as noted, harder to crack into. This has in turn been discussed among law enforcement, and of course this sort of information leaks out into general knowledge fairly quickly.

[@ShankayLoveLadyL]

​@@alexanderSydneyOz Good point. A police department in USA lost access to an unlocked phone, while it rebooted, despite the fact being in a sort of a Faraday box, resulting in the phone locking itself down. This surprised the forensic analysit, being a new behaviour from an iPhone device, that's how this thing got to the public. It's quite recent.

[@tiagotiagot]

@@alexanderSydneyOz Dunno, this kinda rhymes with that time they made a lot of noise about needing to get Apple to help them decrypt phones, and then suddenly mumbled "nevermind" and got quiet, while Apple beefed up their marketing focusing on privacy protections they claimed to have...

[@maxgorden499]

what does this even mean? unlike vague claims from police saying they can't get keys from Apple this inactivity feature can be tested. You can go test this right now. Don't be silly Mr.Fed

[@tiagotiagot]

@@maxgorden499 Closed source system and quite locked-down hardware, makes it pretty hard to tell whether a behavior you observe is all it will ever do.