Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
In no way is this a security flaw.

It's a design decision, that can be removed in preferences as has already been suggested. For convenience, it's great btw.

But a thief already has the option of switching any phone off, or removing the SIM from the phone. So in what way is this an added risk?

It is a very misleading headline and article and I'm surprised that MacRumors haven't taken it down by now.
 
I don't think this was brought up on previous posts. But if a thief wants to steal your iphone and turn on Airplane mode via Siri on the lockscreen, he still can't do anything with the phone. iOS 7 added a new feature that when the thief goes to restore your iPhone (even if in Airplane mode), he needs to have your 4 digit pin to turn off Find My iPhone for him to restore the iPhone and make it his own. In the end, the thief gets nothing except for a phone that is locked.

So this story should be taken off because it's just the most ridiculous story that will be used to make something that is not.

Actually, he needs your Apple ID *and* your Apple ID password to turn off Find my Phone (not your 4 digits pin - this will only let him use the phone but won't let him turn off Find My Phone... unless he's got your Apple credentials too). And, as mentioned earlier, he also need those to wipe/restore/set your phone too.
 
Pretty embarrassing goof...

...for Macrumors calling this a security flaw.

Wouldn't the savvy thief already know to turn the device off to evade find my phone? Couldn't the thief then pop the sim?

The fundemental issue here is that Find My iPhone is not a security feature. I never thought until now someone mistake it for one.

Suppose a thief can't turn off network access and can't turn off the phone and has no tin foil to wrap the phone in and doesn't have a car they can simply drive away in to a convenient dead zone and doesn't have a sim eject tool to pop the SIM card with... Suppose such a sad sack thief steals your phone and you use find my iPhone to track him down to confront him? And he puts a gun in your face? Is that good security? Hey maybe you live in Mayberry and can get the police to do it but that still takes time... So again the thief has many ways to beat find my iPhone. Probably your battery dies before then too.

This thread should probably be removed because some people might assume MR is reporting with some credibility or authority and assume it's any actual problem. (And replaced with a mea culpa.)
 
Actually, he needs your Apple ID *and* your Apple ID password to turn off Find my Phone (not your 4 digits pin - this will only let him use the phone but won't let him turn off Find My Phone... unless he's got your Apple credentials too). And, as mentioned earlier, he also need those to wipe/restore/set your phone too.

When I upgraded my beta 7 to the GM version a few days ago, I was restoring my phone via iTunes and when I clicked restore, iTunes told me I cannot proceed until I turn off Find My iPhone. So if the iPhone is locked and stolen, he won't even be able to restore it without having the pin to get into your phone. That is all I was saying. Yes, if he found out your pin, he would still need your Apple ID and password to turn off Find my iPhone
 
Can see a lot more on lock screen.

Not only can you swipe up to see the control panel but you can swipe down also and have access to events, calendar, call log, text messages and the notification center. This is a big problem if anyone can access that information from the lock screen. Defeats the purpose of having a password or lock screen. :eek:
 
Not only can you swipe up to see the control panel but you can swipe down also and have access to events, calendar, call log, text messages and the notification center. This is a big problem if anyone can access that information from the lock screen. Defeats the purpose of having a password or lock screen. :eek:

That is a quick fix just like the Control Center. Just goto your Notification Center settings and uncheck "Notification View" & "Today View" under Access on the Lock Screen.

I don't understand why everyone is blowing this up when you can customize it how you want it.
 
Not only can you swipe up to see the control panel but you can swipe down also and have access to events, calendar, call log, text messages and the notification center. This is a big problem if anyone can access that information from the lock screen. Defeats the purpose of having a password or lock screen. :eek:
It's an option that you can easily disable. Already not a flaw just because of that.

Also, it only displays notifications there that you already allow to be displayed on the lock screen, not any other ones (not some call log or all of your text messages or something like that).
 
Yet again . . . .

So yet again somone finds a work around for the convenicne of controlling your phone while it's locked. Lock the mother up. Period. If you want the convenience center, unlock the phone. I have data I don't want accessed so I lock it up. No, you can not use Siri in lock mode. No, you can not turn on a flashlight in lock mode. No, you can not look at all my photo's because you figured out some nifty way to bypass it, when it was for convenince anyway. If I want a flashlight I'll unlock my damn phone. Apparently is is rocket science. :D
 
Edit: A code (if enabled) should be required to turn the phone off too.

I hope you are being sarcastic.

If any part of your phone freezes, you can always reset it by holding down the power button. It is so on almost every electronic device.
You will change your tune when the screen locks up and youre trying to capture a birthday or map your way somewhere. Now you have to wait until the device dies.

This is a technology that will never exist.
 
To be fair, this doesn't actually disable Find my Phone. It just interrupts the connectivity of the device. Which they could also do by powering off the phone, or putting in an area with no service?

Or taking the battery off the device :rolleyes:
 
Activation Lock

does this activation lock prevent you from selling your phone to someone on ebay????? how will they setup the phone with out your apple ID???
 
does this activation lock prevent you from selling your phone to someone on ebay????? how will they setup the phone with out your apple ID???

No.
Every time you restore or reset your phone (which you would normally do before selling it) it prompts you to turn off the feature.
 
When I upgraded my beta 7 to the GM version a few days ago, I was restoring my phone via iTunes and when I clicked restore, iTunes told me I cannot proceed until I turn off Find My iPhone. So if the iPhone is locked and stolen, he won't even be able to restore it without having the pin to get into your phone. That is all I was saying. Yes, if he found out your pin, he would still need your Apple ID and password to turn off Find my iPhone

Good to know!
So, he needs both your PIN and your Apple ID/password to wipe/restore/set-up your iOS7 iPhone. Glad to hear it.
 
Heres an idea just make it impossible to turn off find my iPhone.

Always have it on even if phone is turned off it effectively just turns the phone into a very low powered beacon, allowing you to track, lock, alert and wipe.

I love the idea of having to verify Airplane, data and turning off. Will be so much easier with fingerprint scanner in 5s/6 but till then putting in a passcode isnt that taxing.
 
To be fair, this doesn't actually disable Find my Phone. It just interrupts the connectivity of the device. Which they could also do by powering off the phone, or putting in an area with no service?

Restore the phone in iTunes and find my phone is completely disabled. By engaging flight mode before any remote wipe, you disable the remote wipe possibly allowing the phone to be activated after restoring in iTunes without entering the iCloud password...
 
Restore the phone in iTunes and find my phone is completely disabled. By engaging flight mode before any remote wipe, you disable the remote wipe possibly allowing the phone to be activated after restoring in iTunes without entering the iCloud password...

Incorrect information there chief. You cannot activate or erase without the AppleID. Restore will be of no help. Neither will DFU restore.
 
Incorrect information there chief. You cannot activate or erase without the AppleID. Restore will be of no help. Neither will DFU restore.

Isn't that only if the phone was remote wiped?

EDIT: Just looked above and you're correct. No security flaw then. Phone is useless if stolen.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.