Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

vpndev

macrumors 6502
May 11, 2009
288
98
done, already

So, Apple needs to step up there and have a simple option to disable all diagnostic information, period.

Dude, what part of "Settings" are you missing? It's there. Already.

No step up required. Except maybe yours.
 

vpndev

macrumors 6502
May 11, 2009
288
98
actually, no

With all these security flaws, no wonder the President doesn't use an iPhone.

Those aren't the problem. It's that Apple refuses to open its code to the Government and let it build its own iOS system.

Actually, I am glad that Apple keeps this capability to itself.
 

christarp

macrumors 6502
Oct 29, 2013
478
768
You must be kidding. Apple would never want to admit it, until it's shown and proven dot by dot. Only then...you will hear something close to admitting, maybe.

They're not completely above admitting when they fail though, look at maps.
 

iHEARTcartoons

macrumors regular
Aug 11, 2011
176
0
San Diego
I always love how everyone always freaks out about these kind of things... OMG Apple may be back-dooring my phone and they may know that I spend way too much time playing Monopoly slots, sent a few texts, made a few phone calls, allegedly may have looked at some pron, and that I read a lot of MacRumors!!!
 

MikhailT

macrumors 601
Nov 12, 2007
4,582
1,325
Dude, what part of "Settings" are you missing? It's there. Already.

No step up required. Except maybe yours.

Dude, there is no setting to disable diagnostics completely. The setting you're referring to, it is for disabling the sending of diagnostic info to Apple. That does not prevent the info from being created and stored on the device without encryption, those services are running all the time by default on everyone's iOS device even if they have the option disabled.
 

sualpine

macrumors 6502
May 13, 2013
497
513
Dude, there is no setting to disable diagnostics completely. The setting you're referring to, it is for disabling the sending of diagnostic info to Apple. That does not prevent the info from being created and stored on the device without encryption, those services are running all the time by default on everyone's iOS device even if they have the option disabled.

There's also no way to turn on your car without the OBDII diags running. Should you not drive your car?
 

MikhailT

macrumors 601
Nov 12, 2007
4,582
1,325
There's also no way to turn on your car without the OBDII diags running. Should you not drive your car?

OBDII isn't storing all the gps locations, storing all of my email account info, wireless keys, twitter account information, photos, and deleted files that's recoverable.

None of the info in OBDII is personal.

Speaking of OBDII, from wikipedia:

Security issues[edit]
Researchers at the University of Washington and University of California examined the security around OBD, and found that they were able to gain control over many vehicle components via the interface. Furthermore, they were able to upload new firmware into the engine control units. Their conclusion is that vehicle embedded systems are not designed with security in mind.[26][27][28]

There have been reports of thieves using specialist OBD reprogramming devices to enable them to steal cars without the use of a key.[29] The primary causes of this vulnerability lie in the tendency for vehicle manufacturers to extend the bus for purposes other than those for which it was designed, and the lack of authentication and authorization in the OBD specifications, which instead rely largely on security through obscurity.[30]

Less information being created by the diagnostics tool, the better for everybody. Apple's leaking more information than it needs to and by default.

No services on the planet should be revealing more diagnostic information than needed and not by default.
 

Crzyrio

macrumors 68000
Jul 6, 2010
1,587
1,110
Dude, there is no setting to disable diagnostics completely. The setting you're referring to, it is for disabling the sending of diagnostic info to Apple. That does not prevent the info from being created and stored on the device without encryption, those services are running all the time by default on everyone's iOS device even if they have the option disabled.

It's there, and like Apple said it can only be accessed with your permission.

It's up to each person if you believe them or not. Say something goes haywire with your phone tomorrow and your phone is not collecting data. You take it to the apple store and they tell you, 'sorry there is nothing we can do, it can't be reproduced nor are they any diagnostic information for us to look at, bye now' then you walk out and 2 mins later it goes nuts.

Then your going to be seeing post about Apple's bad customer service :p
 

sualpine

macrumors 6502
May 13, 2013
497
513
WTF? OBDII isn't storing all the gps locations, storing all of my email account info, wireless keys, twitter account information, photos, and deleted files that's recoverable.

And neither are these services. See how that works?
 

goobot

macrumors 603
Jun 26, 2009
6,484
4,375
long island NY
The second one sounds like it could be a potential issue, "with user permission", what does that mean? If they just say "hey can I check out your data" or throught passcodes? If it's the first one, then It is a legit problem.
 

wizard

macrumors 68040
May 29, 2003
3,854
571
That would be nuts!

So how are devleoper suppose to better their apps and as far as that go how is apple suppose to better their systems? Some of us really want to see iOS get even better which is why we run beats and submit big reports to Apple.

Great first steps, now one more step is to allow the user to opt out on all diagnostic information. One of the problems with _Don't send info to Apple_ is that while it is disabling the sharing of information to Apple, it does not prevent those services from recording the information in the first place. That means your iOS device is still hoarding all sorts of personal information without your knowledge and consent, even though you're not sharing it with Apple. The info can be retrieved illegally and/or with legit forensic tools.
Realistically just how much info can be house on an iPhone? The things don't have much storage to begin with. You reveal far more personal information every time you go online and buy Something.
So, Apple needs to step up there and have a simple option to disable all diagnostic information, period. I don't care about legitimate users for these services, they're not required and they're storing information I don't want iOS to store in the first place that's not encrypted with my passcode.

You have a mighty load of self importance here don't you. There is nothing a rational person would put on an iPhone that isn't already sitting on hundreds of computers at various business that people deal with.
 

MikhailT

macrumors 601
Nov 12, 2007
4,582
1,325
And neither are these services. See how that works?

Says who? This is exactly what the security researcher is pointing out in his research, these services are storing these information. He was able to extract these information from his device.

Remember, Apple did in the past leaked private information on iOS devices via GPS locations and they fixed it later on by encrypting the database. That's what researcher is asking for, to encrypt these data being generated by the services and/or disable the services from running.

Apple has not denied these services are not storing these info, they're focusing on saying the information does not leave the device but Apple never said the information is not being stored.

----------

So how are devleoper suppose to better their apps and as far as that go how is apple suppose to better their systems? Some of us really want to see iOS get even better which is why we run beats and submit big reports to Apple.


Realistically just how much info can be house on an iPhone? The things don't have much storage to begin with. You reveal far more personal information every time you go online and buy Something.


You have a mighty load of self importance here don't you. There is nothing a rational person would put on an iPhone that isn't already sitting on hundreds of computers at various business that people deal with.

Textual information is highly compressible, you can definitely compress a lot of information.

There is nothing a rational person would put on an iPhone that isn't already sitting on hundreds of computers at various business that people deal with.

So, that's an excuse not to encrypt the data nor prevent it from being stored?

Wow, so you're absolutely okay with everybody leaking information onto every system you're using?
 

sualpine

macrumors 6502
May 13, 2013
497
513
Says who? This is exactly what the security researcher is pointing out in his research, these services are storing these information. He was able to extract these information from his device.

Remember, Apple did in the past leaked private information on iOS devices via GPS locations and they fixed it later on by encrypting the database. That's what researcher is asking for, to encrypt these data being generated by the services and/or disable the services from running.

Apple has not denied these services are not storing these info, they're focusing on saying the information does not leave the device but Apple never said the information is not being stored.

Of course it's being stored. iOS is UNIX, it has a full console log from the kernel and system. Plug your iPhone into Apple configurator and you can watch it live right now.
If you want to use a phone that doesn't store logs, you won't be able to use any phone on the market.
 

aloshka

macrumors 65816
Aug 30, 2009
1,437
744
I can't believe they addressed this. I didn't expect them too. Makes sense what they say, and I'm sure someone will confirm it.

Makes you wonder, are they reading macrumors?

That's why I like apple. The spotlight is on them all the time. Things like this don't just go unnoticed. Expectations are high of apple. They can't blame things on a different phone manufacturer or faulty insecure carrier software.

Can't wait for Yosemite and ios 8 release. I have been longing the ability to answer calls and text non/ iphone users from iMessages forever.
 

PocketSand11

macrumors 6502a
Jun 12, 2014
688
1
~/
I always love how everyone always freaks out about these kind of things... OMG Apple may be back-dooring my phone and they may know that I spend way too much time playing Monopoly slots, sent a few texts, made a few phone calls, allegedly may have looked at some pron, and that I read a lot of MacRumors!!!

Apple isn't the problem. What if a hacker uses one of those backdoors to take my bank account info or some passwords?
 

sualpine

macrumors 6502
May 13, 2013
497
513
Apple isn't the problem. What if a hacker uses one of those backdoors to take my bank account info or some passwords?

LOL didn't read.

1. com.apple.mobile.pcapd

pcapd supports diagnostic packet capture from an iOS device to a trusted computer

2. com.apple.mobile.file_relay

file_relay supports limited copying of diagnostic data from a device.

3. com.apple.mobile.house_arrest

house_arrest is used by iTunes to transfer documents to and from an iOS device
 

PocketSand11

macrumors 6502a
Jun 12, 2014
688
1
~/
LOL didn't read.

1. com.apple.mobile.pcapd

pcapd supports diagnostic packet capture from an iOS device to a trusted computer

2. com.apple.mobile.file_relay

file_relay supports limited copying of diagnostic data from a device.

3. com.apple.mobile.house_arrest

house_arrest is used by iTunes to transfer documents to and from an iOS device

Those are only Apple's legitimate uses for it, which really have nothing to do with the security flaws themselves. According to the previous article on this,
These services, such as "lockdownd," "pcapd" and "mobile.file_relay," can bypass encrypted backups to obtain data and can be utilized via USB, Wi-Fi and possibly cellular.
Zdziarski says what I'd say about this. It doesn't matter what Apple plans to do with these. They shouldn't be on my phone regardless.
 

rei101

macrumors 6502a
Dec 24, 2011
976
1
Great first steps, now one more step is to allow the user to opt out on all diagnostic information. One of the problems with _Don't send info to Apple_ is that while it is disabling the sharing of information to Apple, it does not prevent those services from recording the information in the first place. That means your iOS device is still hoarding all sorts of personal information without your knowledge and consent, even though you're not sharing it with Apple. The info can be retrieved illegally and/or with legit forensic tools.

So, Apple needs to step up there and have a simple option to disable all diagnostic information, period. I don't care about legitimate users for these services, they're not required and they're storing information I don't want iOS to store in the first place that's not encrypted with my passcode.

Why, are you a drug dealer?
Why is your ego so big?
I do not get it. Personally I do not care what Apple does. But I wonder why is your fantasy in your head? I am just curious?
I just wonder why people like you are so dramatic with non senses.
It is just to call the attention trying to find arguments going the other way? senseless discussions? again... ego?
Apple won't pay attention to your request, what are you going to do for real? Start a class action lawsuit? Buy another phone? or are you going to keep using your iPhone?

I mean, be 100% realistic, what are you going to do? Apple will not change tomorrow, what are you going to do?
 

tech4all

macrumors 68040
Jun 13, 2004
3,399
489
NorCal
Call me an Apple fanboy or whatever, But I 100% trust Apple.

I know Steve Jobs cared 100% about this company. The man stopped working only when it was physically impossible for him to go to work. I heard he even was talking about the iPhone 5 a day before he died to Tim Cook.

I know I know I shouldn't compare Steve to Tim. But I also believe Tim cares just as much as Steve did about Apple. They are honest and truly care about its products.

Im lovin there transparency to prove these Apple bashers wrong!

:apple:

No offense, but that sounds naive.

Call me a cynic, but I don't always believe everything when a corporation "explains" the reasons for something such as this.

Apple isn't a family member (you don't need to support them as though they were). You can't just take their word for what it is. Heck you can't even do that with family sometimes.

Apple (as well Google/MS/etc) is spying on you in some way. Heck they have your CC number, contacts, emails, etc.

If you think otherwise...

So, we are now to the point where discussions of iOS processes are PRSI??

Somebody may be taking things a little too seriously.

You seem surprised...
 

twigman08

macrumors 6502
Apr 13, 2012
478
1
I want security as much as the next person. I want to make sure my personal stuff is secure. I understand all of this.

But I myself have pretty much just "accepted" (within reason of course, and all of these things, IMO, seem to be within reason to me) that going online or using any device connected to the internet leads to risks. So I take some precautions in always making sure I am watching my personal accounts (like banking information) and all of that. I understand that going online could lead to something happening from a back door in the software. This being on a Windows computer, a Mac, Android or iOS.
I want to be 100% secure online and have my security guaranteed but I also understand that it just is not going to be possible. One reason is because everything can and will be hacked at some point. I understand it is pretty much impossible to develop anything that is unhackable.

Again, I want security as much as the next person but I am not going to live my life worrying that someone is "looking at me" or whatever. I just take my normal precautions on my personal data and live my life. If something happens I will deal it

But until I start reading and hearing about every single iOS device being hacked into and everyone who has an iOS device personal data and banking information being stolen then I'm not going to be afraid to go online.
As a programmer, all of these services sound legit to me. So I am going to go continue living my normal life.
 

PocketSand11

macrumors 6502a
Jun 12, 2014
688
1
~/
Call me an Apple fanboy or whatever, But I 100% trust Apple.

It's not even a matter of trust. Security flaws have been discovered in iOS, and they have to be fixed. Apple explaining that they don't exploit the backdoors doesn't help anything, even if they're honest.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.