Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Do you have a reference for the 0000 PIN usage? Things like this make me wonder how much Apple really knows and has access to. Apparently one can bring a Mac to the Apple Store with proof of purchase and they’ll unlock it. That shouldn’t be possible unless Apple has a backdoor. Same thing with this. Do they really have records of what everyone’s PIN is?

Apple couldn’t unlock that iPhone from that killer in CA that made the national news for the FBI 🤷‍♂️


The blurring this is funny, yeah I need my own phone to censor the content I receive lol

Yeah no
 
Does anyone know if the offline maps will update themselves as and when Apple update their maps? Or will have to re-save locally?

Not expecting a definitive answer - just an impression and expectation.

This should answer your question.

IMG_0481.jpgIMG_0482.jpg
 
Apple couldn’t unlock that iPhone from that killer in CA that made the national news for the FBI 🤷‍♂️


The blurring this is funny, yeah I need my own phone to censor the content I receive lol

Yeah no

What the FBI wanted from Apple was a signed iOS update with the pin functionality removed that they could then install on any iPhone for a general purpose backdoor.

Apple publicly told everyone that the FBI had several options if only they had contacted Apple sooner. The FBI messed around with it too long and effectively destroyed evidence in the backups by not following Apple’s forensic procedures.

Eventually they cracked that phone anyway by hiring Cellebrite. The FBI has an advantage most hackers don’t in that they can simply seize equipment and wait for exploits to become available.

But above all this doesn’t really apply to what I said because the FBI didn’t have proof of purchase. Not sure if Apple ever fully claimed that they could not, but definitely said that they would not.

In that case it was very clear that what the FBI director wanted was precedent far more than the actual evidence.
 
Last edited:
  • Like
Reactions: Shirasaki
Do you have a reference for the 0000 PIN usage? Things like this make me wonder how much Apple really knows and has access to. Apparently one can bring a Mac to the Apple Store with proof of purchase and they’ll unlock it. That shouldn’t be possible unless Apple has a backdoor. Same thing with this. Do they really have records of what everyone’s PIN is?
No, I prefer complex alphanumerics. But I understand your ire. I would prefer a system where we would have the option of lock down our systems completely but I don't think that most users would take that option. They would prefer having a "parent" (Apple) that can fix their toy if they break it while keeping bad people out of their stuff.
 
No, I prefer complex alphanumerics. But I understand your ire. I would prefer a system where we would have the option of lock down our systems completely but I don't think that most users would take that option. They would prefer having a "parent" (Apple) that can fix their toy if they break it while keeping bad people out of their stuff.

I just meant a link where someone reported that Apple had a survey which included data about what peoples’ PINs are.

Arguable Apple has done that now with the advanced account protection, giving you full responsibility of what they claim is the one and only encryption key to your data. It would be nice if they were a little more clear on what the options are if that is not enabled, though. It’s still not clear to me exactly how much access Apple has to my devices and data using the default settings.
 
I just meant a link where someone reported that Apple had a survey which included data about what peoples’ PINs are.

Arguable Apple has done that now with the advanced account protection, giving you full responsibility of what they claim is the one and only encryption key to your data. It would be nice if they were a little more clear on what the options are if that is not enabled, though. It’s still not clear to me exactly how much access Apple has to my devices and data using the default settings.
I think we're on the same page. But I've always felt that getting any kind of technical information out of Apple as a basic user (not a registered developer) has always been a hassle. I wish Apple had people who could interact more directly on forums like MR. Sometimes it feels like we're just screaming to a blank wall.
 
lol, I thought the same thing seeing the graphic use Johnny Appleseed as the example perv.
Well, these days with the direction of companies like Gillette’s as campaigns it’s not a surprise to see Apple follow suit 😑🤣
 
What the FBI wanted from Apple was a signed iOS update with the pin functionality removed that they could then install on any iPhone for a general purpose backdoor.

Apple publicly told everyone that the FBI had several options if only they had contacted Apple sooner. The FBI messed around with it too long and effectively destroyed evidence in the backups by not following Apple’s forensic procedures.

Eventually they cracked that phone anyway by hiring Cellebrite. The FBI has an advantage most hackers don’t in that they can simply seize equipment and wait for exploits to become available.

But above all this doesn’t really apply to what I said because the FBI didn’t have proof of purchase. Not sure if Apple ever fully claimed that they could not, but definitely said that they would not.

In that case it was very clear that what the FBI director wanted was precedent far more than the actual evidence.

Personally my opinion is if Apple can crack their own phones, the devices need better security
 
Same. Mine so far have gotten mixed in with other notifications and forgotten!

Due is a great app for reminders you absolutely cannot forget about. I don’t use it for everything, only things which must be done at a specific time. Like taking out trash or taking pills. Great business model as well.
 
  • Like
Reactions: SB1500
Personally my opinion is if Apple can crack their own phones, the devices need better security

Yeah exactly. They’ve either deliberately made backdoors or not, but they aren’t being clear about which it is. On the one hand they say they design everything with security in mind, on the other they tell you they can unlock your Mac with no more than a proof of purchase. Maybe I should do more research and see if I can find out exactly how they do that and under what circumstances.
 
Yeah exactly. They’ve either deliberately made backdoors or not, but they aren’t being clear about which it is. On the one hand they say they design everything with security in mind, on the other they tell you they can unlock your Mac with no more than a proof of purchase. Maybe I should do more research and see if I can find out exactly how they do that and under what circumstances.

Can the Apple Store also break into a iPhone, iPad, watch with proof of purchase?

Seems to me between social Engneering and obtaining a fake ID it wouldn’t be too hard to break into someone stolen mac with a little pre planning

Hard to say security in mind with that being the case
 
It's a difficult balance. Apple developed fingerprint and FaceID©️ because they found that only about half of owners were using passcodes at all or were using 0000. I agree that Apple can tighten this hole but they may be afraid of going too far.
I’d say using passcode for everything has already gone too far. Those 4-digit or 6-digit number Carries way too much above their Pay grade. Yes I don’t use digits but that’s not the point.
Do you have a reference for the 0000 PIN usage? Things like this make me wonder how much Apple really knows and has access to. Apparently one can bring a Mac to the Apple Store with proof of purchase and they’ll unlock it. That shouldn’t be possible unless Apple has a backdoor. Same thing with this. Do they really have records of what everyone’s PIN is?
They can have those records. They may choose not to. Since no modern Apple device can function properly with absolute 0 internet connection, they can just chug passcode combination into part of their telemetry and collect it that way. I even choose to believe Apple has full access to everyone’s data stored locally regardless, tho independent security experts can prove otherwise, and what I say is just pure hypocrisy.
I just meant a link where someone reported that Apple had a survey which included data about what peoples’ PINs are.

Arguable Apple has done that now with the advanced account protection, giving you full responsibility of what they claim is the one and only encryption key to your data. It would be nice if they were a little more clear on what the options are if that is not enabled, though. It’s still not clear to me exactly how much access Apple has to my devices and data using the default settings.
Yeah. Apple REALLY hate giving away details that truly matters. For example, not until little snitch carefully monitor the macOS does researcher finds out Apple phoning home on a regular basis, bypassing their own firewall.
Personally my opinion is if Apple can crack their own phones, the devices need better security
But then, no one would improve the security to A point that creator cannot crack anymore. That makes sense, right?
Can the Apple Store also break into a iPhone, iPad, watch with proof of purchase?

Seems to me between social Engneering and obtaining a fake ID it wouldn’t be too hard to break into someone stolen mac with a little pre planning

Hard to say security in mind with that being the case
Apple cares about security when they can get PR advantage, and when they safeguard their user Data (e.g. Purchasing history, salary estimate, browsing behavior, movement records etc etc. Maybe some stored data on device as well). Outside of these, I’d say they don’t care.
 
Can the Apple Store also break into a iPhone, iPad, watch with proof of purchase?

Seems to me between social Engneering and obtaining a fake ID it wouldn’t be too hard to break into someone stolen mac with a little pre planning

Hard to say security in mind with that being the case
I’m not an expert and haven’t had to deal with these situations myself, but I’m pretty sure you can’t decrypt a Mac, iPhone, iPad, or Watch without the password for Mac, or passcode for iDevices. However, the activation lock is something Apple could take off any device if they wanted to. If you took the activation lock off, you would still have an encrypted device, but you can reset it and reuse it.

The other thing was, up until a few months ago, iCloud backups were not encrypted away from Apple’s hands, they could give your backups to anyone if they wanted to. This was better than having the device itself in many cases, devices could be reset or destroyed, but your backups are always retained. But now, with end-to-end encryption, it means the devices have the code necessary to decrypt the backup and you need access to the device.

So I think there was a little misunderstanding earlier, they don’t “unlock” a Mac per se, unless it’s about the activation lock getting unlocked. Or they have your backups and send them over to law enforcement if you don’t use the new end to end feature.
 
Whether owners of Apple devices want to believe it or not. Some of these features are ON DEVICE SURVEILLANCE and its obviously going to be rolled out as a safety feature, but it is ON DEVICE SURVEILLANCE. Effectively it creates the potential for a backdoor to everything on your devices, which is precisely what the FBI and some governments have been pressing Apple for.

It makes end to end encryption worthless, because on your device APPLE ARE SCRUTINISING what is on it, or anyone else pulling Apple's levers!

We know they acquiesce to China, and this looks like they are now bending over to the others who want TOTAL SURVEILLANCE.

It makes Apples comments about privacy look absolutely stupid.

Even during the CSAM posts on here it was clear that there was a campaign no doubt by Apple to have multiple posts supporting their ON DEVICE SURVEILLANCE but where industry and privacy watchdogs made it clear it was a very bad move and Apple went back, only to wait to bring it in again in the guise of yet another moral safety feature, but where in reality it is YOUR device under surveillance. May be for nude photos at first but that ON DEVICE SURVEILLANCE opens the backdoor.....and everything else follows.
 
Apparently one can bring a Mac to the Apple Store with proof of purchase and they’ll unlock it.
How is that apparent? I don’t think that’s true. They can’t bypass device security. They can remove activation lock, since that’s a server side mechanism.

Arguable Apple has done that now with the advanced account protection, giving you full responsibility of what they claim is the one and only encryption key to your data. It would be nice if they were a little more clear on what the options are if that is not enabled, though. It’s still not clear to me exactly how much access Apple has to my devices and data using the default settings.
Advanced Data Protection is an iCloud feature, and doesn’t change local device security directly. It does a bit indirectly, due to the many iCloud services you tend to use. I think they have described what and how things are encrypted under ADP pretty clear.

Can the Apple Store also break into a iPhone, iPad, watch with proof of purchase?
Nope.

But then, no one would improve the security to A point that creator cannot crack anymore
Sure they would. They did. There are several things Apple can’t crack, including the local device and things like health data in iCloud. More with ADP.

Apple cares about security when they can get PR advantage, and when they safeguard their user Data (e.g. Purchasing history, salary estimate, browsing behavior, movement records etc etc. Maybe some stored data on device as well). Outside of these, I’d say they don’t care.
You’re free to speculate of course.
 
Whether owners of Apple devices want to believe it or not. Some of these features are ON DEVICE SURVEILLANCE and its obviously going to be rolled out as a safety feature, but it is ON DEVICE SURVEILLANCE. Effectively it creates the potential for a backdoor to everything on your devices, which is precisely what the FBI and some governments have been pressing Apple for.
This reads like FUD to me. Code that runs on the device isn’t surveillance. Surveillance would be code that secretly runs and transmits information to an unrelated party. This doesn’t create potential backdoors anymore than there was before. Apple could at any point implement evil surveillance if they wanted, with or without this.

It makes end to end encryption worthless, because on your device APPLE ARE SCRUTINISING what is on it, or anyone else pulling Apple's levers!
Nonsense. This is simply code running on the device, before or after encryption. Another good example of such code is the code that displays the image to the user. Is that also surveillance?
 
How is that apparent? I don’t think that’s true. They can’t bypass device security. They can remove activation lock, since that’s a server side mechanism.


Advanced Data Protection is an iCloud feature, and doesn’t change local device security directly. It does a bit indirectly, due to the many iCloud services you tend to use. I think they have described what and how things are encrypted under ADP pretty clear.


Nope.


Sure they would. They did. There are several things Apple can’t crack, including the local device and things like health data in iCloud. More with ADP.


You’re free to speculate of course.

Ok maybe it is just activation lock.

 
Whether owners of Apple devices want to believe it or not. Some of these features are ON DEVICE SURVEILLANCE and its obviously going to be rolled out as a safety feature, but it is ON DEVICE SURVEILLANCE. Effectively it creates the potential for a backdoor to everything on your devices, which is precisely what the FBI and some governments have been pressing Apple for.

It makes end to end encryption worthless, because on your device APPLE ARE SCRUTINISING what is on it, or anyone else pulling Apple's levers!

We know they acquiesce to China, and this looks like they are now bending over to the others who want TOTAL SURVEILLANCE.

It makes Apples comments about privacy look absolutely stupid.

Even during the CSAM posts on here it was clear that there was a campaign no doubt by Apple to have multiple posts supporting their ON DEVICE SURVEILLANCE but where industry and privacy watchdogs made it clear it was a very bad move and Apple went back, only to wait to bring it in again in the guise of yet another moral safety feature, but where in reality it is YOUR device under surveillance. May be for nude photos at first but that ON DEVICE SURVEILLANCE opens the backdoor.....and everything else follows.
Apple will do what Apple will and thankfully comments like this won't make for a hill of beans.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.