Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It is unacceptable. I’m using the screen time hack which is super annoying.

DoN”t USe yOUr PAsScoDE In pUbLIc oh yeah great idea! Except when I’m at the bar, in a darkly lit room, with hair coving my face, FaceID never works. If only there was a solution that didn’t rely on a facial recognition, some kind of under-screen fingerprint scanner perhaps?
Just be careful when typing your passcode in a public place.

Some people in another thread believe that if you set an alphanumeric passcode of 28 characters, you'll be fine to use that as your passcode.
 
  • Haha
  • Like
Reactions: 4odomi and addamas
Define “privacy”.

Apple doesn’t want others to have your data but they help themselves to all you have.
What data is it they 'help themselves to' that you don't like?

I know what Google does with mine.
AHAHAHAHAHAH

I limit 3rd party where I can.
I have no clue what Apple does with all my data.
You should read their documentation then, because they're very explicit about what data they keep and what they do with it. They're even bound by law to tell the truth about it!

I do know I am seeing more advertisements across the board from all parties including Apple.
Where are you seeing 'more advertisements across the board from all parties including Apple'?

Call me skeptical. Let’s see what Apple really delivers. Well, delivers and works.

ps: when Apple fixes the passcode problem, then, I’ll be a bit more impressed.
No offense but I don't think you're really the sort of person they're trying to impress.
 
If Apple designed and developed this on same “top notch level” as ICloud Password and Screen Time password then say hello one more privacy violation hole…

“For protection in case someone has learned your passcode, there is an "Expire Previous Passcode Now" setting that you can turn on.”

I hope it asks for actual and previous phone passcode / password + something 2FA?

Does somebody tested it ?

Currently it’s on toddler level - people are told to be stupid so let’s help them survive like annotations in nut bag that it includes nuts inside or that a vendor coffee cup might be hot… 🤦‍♂️ because one or two in million will be dumb enough to forget their passcode (really? Even in case of health problems they could have a note or inform relatives with passcode)
 
Last edited:
Just be careful when typing your passcode in a public place.

Some people in another thread believe that if you set an alphanumeric passcode of 28 characters, you'll be fine to use that as your passcode.
I know you're joking, but the issue is that they're recording you putting in your passcode. Even if you set alphanumeric passcode of 28 characters they could lock you out of your iCloud account. This is just unacceptable and a big security flaw.
 
  • Like
  • Love
Reactions: dk001 and addamas


The iOS 17 and iPadOS 17 updates include a number of privacy and security improvements that make your devices safer than ever, with Apple restricting access to photos and calendar events and cutting down further on how websites track you across the web.

iOS-17-Privacy-and-Security-Improvements-Feature.jpg

Private Browsing Upgrades in Safari

In Safari, Private browsing windows are now locked and require secondary authentication to unlock and access. If you hand your phone over to someone and they attempt to open your Safari private browsing tab, access will be denied without a Face ID/Touch ID scan or a passcode.

safari-private-browsing-ios-17.jpg

The Private tab is locked automatically.

Tracking URL Removal

Opening up a URL in a private browsing window automatically strips all tracking information added to the URL, plus unknown trackers are completely blocked so companies aren't able to track your browsing across multiple sites.

safari-tracking-all-browsing-ios-17.jpg

URLs can also be stripped when browsing in non-private browsing mode if the functionality is enabled. Here's how to remove URL-based tracking for all browser windows:
  1. Open up the Settings app.
  2. Scroll down to Safari.
  3. Tap on Advanced.
  4. Tap on Advanced Tracking and Fingerprinting Protection.
  5. Toggle on "All Browsing."
Turning this on will ensure that all URLs opened in Safari will strip additional tracking information that's pasted on to the end of a URL.

Shared Passwords

With iOS 17, iPadOS 17, and macOS Sonoma, you can securely share passwords and passkeys with friends and family members using a new shared password function. Using this feature, passwords for shared media accounts, utilities, bills, and more can be provided to multiple people.

ios-17-shared-passwords.jpg

Each person can access, add to, and change passwords that are shared, with setup available by going to the Passwords section of the Settings app and choosing "Get Started" under the "Family Passwords" heading.

Passcode Resets

If you change the passcode on your iPhone and then accidentally forget the new passcode that you chose, you now have a 72-hour grace period to fix it without getting locked out of your device.

iOS-17-Passcode-Reset-Feature.jpg

Apple lets you use your old passcode within 72 hours of setting a new one, which is handy if you're someone who is likely to forget a newly created passcode.

When you enter an incorrect passcode after making a change, you can tap on the "Forgot Passcode?" option at the bottom of the display to use the "Try Passcode Reset" option. Tapping it allows you to use your old passcode to create yet another new passcode.

For protection in case someone has learned your passcode, there is an "Expire Previous Passcode Now" setting that you can turn on.

Photo Library Access

Apple is shoring up Photo Library access in iOS 17, and apps have to ask permission to access your entire collection of photos. Apps are provided with only limited access unless you give them permission to see the whole library, which keeps your images private.

photos-security-ios-17.jpg

You can give apps the following access:
  • Limited Access - Apps can see only the images that you can select, and you can review the selected images anytime either in the app or by going to Settings > Privacy & Security > Photos.
  • Full Access - Apps can see all of the images and videos in your Photo Library, and your device will tell you exactly how many photos and videos you're giving access to.
  • None - No access to the Photo Library at all.
  • Add Photos Only - The app can add images to your library, but not view them. This setting depends on the app, and is not available for all apps.
If you open up the Settings app and then go to the Privacy and Security section and choose Photos, you can see the Photos access that all apps have access to. You can change the settings from here, and it's a good idea to go through the list to see exactly which apps can see your images. You can also opt to remove information like location and caption, and change photo format.

Downloading a new app that wants Photo Library access will bring up options to give limited or full access. In the past, apps had the option to just ask for blanket Photo Library access, which gave them the entire library, rather than just chosen images. There's much more control over what apps can see in terms of photos in iOS 17.

Your i... Click here to read rest of article

Article Link: iOS 17: Eight Privacy and Security Improvements Coming in Apple's Next Update
All good privacy and security additions
 
Nice, after the recent improvements to security on Chrome and Android I was hoping Apple will do something to match them. Good to see the industry moving in that direction.
 
  • Haha
Reactions: addamas and 4odomi
It is unacceptable. I’m using the screen time hack which is super annoying.

DoN”t USe yOUr PAsScoDE In pUbLIc oh yeah great idea! Except when I’m at the bar, in a darkly lit room, with hair coving my face, FaceID never works. If only there was a solution that didn’t rely on a facial recognition, some kind of under-screen fingerprint scanner perhaps?
That's what the pass keys are for, alternatively buy an android if you've got hair covering your face 😊
 
  • Disagree
Reactions: addamas
But no fix to always allow app pasting without a popup to ask permission.
 
Just remember, Private Relay is Apple circumventing DNS based ad blocking so it can continue to inject your $1000+ phone with ads.
 
How is the photo library access any different in iOS 17? Everything described in the article was there in iOS 14. What's new??
I had the same reaction, and I’m just as confused. Granting all/none/select photo library access for each app has been a feature available for a while. Can someone help us understand how is this any different from what we’ve already had for years?
 
  • Like
Reactions: dk001
Wait a minute… Apple put new prices for Poland 🇵🇱 on their website but of course not informed via email or notification about it. 🤦‍♂️

Money were not taken as it’s waiting for next month cycle but still little disappointed to get learn about it from Macrumors
 
What data is it they 'help themselves to' that you don't like?
Thanks for replying - 👍

Apple tracks and records all kinds of data from you, some they hide (until found out), some they take even if you opt out, etc…
Apple has no confirmable or provable method they allow us to see on just what they do with your data, how long they keep it, or just what they use it all for.
As a consumer I would like to have some reasonable understanding of just what they are doing with it.
Reminder on just what Apple is doing about VPNs? Device Access codes? How long it takes them to take down confirmed scam apps? The surprising data opt out and Apple deliberately bypassed it? The track it all in the App Store? The ….

AHAHAHAHAHAH

Parse it, collate it, consolidate it, masticate it, sell it, and now Bard it.

You should read their documentation then, because they're very explicit about what data they keep and what they do with it. They're even bound by law to tell the truth about it!

I have and they are not. What Apple says, what they do, and what some of us find out are very different things.
Bound by law? Whose?
All to often we are seeing an Apple “we don’t do this / we do this” and find out the converse is true. Think recent issues with Analytics.

Where are you seeing 'more advertisements across the board from all parties including Apple'?

Take a quick search in Google, Bing, App Store ….
More and more the first results are advertisements.
More so than there used to be. Apple is slowly joining that crowd.
Then we see the surprise “let’s try ads here” Apple pops up.

No offense but I don't think you're really the sort of person they're trying to impress.

None taken.
Been an Apple user since the II GS days (but I loved my Amiga!)
I’m not OS specific however since Apple tried to pull the CSAM on device ploy I have started paying a lot more attention to what Apple is doing vs what they say they are doing. Have found that the term “privacy” is more marketing and “security” is not all it should be.
 
Let's hope that Apple does something about this:

Some of the suggestions there could fix the issue and aren't difficult. At worst give people the option to turn it on (or off depending on the default).

Every iteration improves and things like the above and ADP are huge improvements.
Well, Apple can’t solve physical security. Nobody can. If someone sees your passcode, game over. The addition of using passcode to reset an Apple ID was a feature request from users. They previously complained that it was too hard to reset an Apple ID password if you no longer have access to the email address in question. Basically, Apple will tick people off no matter what they do for these scenarios. I think it’s best to secure everything as much as possible, and let everyone know the caveats and possible ways your stuff could still be compromised, and then it’s on us to do the rest.
 
  • Disagree
Reactions: dk001
Well, Apple can’t solve physical security. Nobody can. If someone sees your passcode, game over. The addition of using passcode to reset an Apple ID was a feature request from users. They previously complained that it was too hard to reset an Apple ID password if you no longer have access to the email address in question. Basically, Apple will tick people off no matter what they do for these scenarios. I think it’s best to secure everything as much as possible, and let everyone know the caveats and possible ways your stuff could still be compromised, and then it’s on us to do the rest.

One passcode for entry. Another passcode for all else.
And take away the ability to allow the passcode to reset pretty much anything on device.

It isn’t a hard fix.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.