WTF Apple?

[[DHT]Osiris]

heck the NSA needed Apples help to crack an iphone 12 .... they must be doing something right!

I mean, if Apple is able to crack one of their own phones, it's not secure. Either the private key is private or it isn't. If it was cracked without the private key, that's worse.

 

[Captante]

I mean, if Apple is able to crack one of their own phones, it's not secure. Either the private key is private or it isn't. If it was cracked without the private key, that's worse.

True BUT at least the NSA couldn't get in by themselves!

 

[[DHT]Osiris]

True BUT at least the NSA couldn't get in by themselves!

Right, but it does mean that Apple can. You're now one bad actor, one business decision, or one profit motive away from your data being compromised.

 

[manly]

Right, but it does mean that Apple can. You're now one bad actor, one business decision, or one profit motive away from your data being compromised.

I'm pretty sure that's bullshit, Apple has never helped the NSA crack an iPhone 12. (Hint: the case being alluded to was from 2016 and it was widely reported.)

Although hypothetically if they had, we almost certainly wouldn't know about it on Internet forums.

 

[[DHT]Osiris]

I'm pretty sure that's bullshit, Apple has never helped the NSA crack an iPhone 12. (Hint: the case being alluded to was from 2016 and it was widely reported.)

Although hypothetically if they had, we almost certainly wouldn't know about it on Internet forums.

Fair enough, I wasn't sure what the OP of that exchange was talking about. They authoritatively stated what apple could do, which smacks of bullshit if it's actually encrypted.

 

[Pohemi]

The NSA/FBI had attempted to crack it and couldn't, so they requested it from Apple. Apple resisted for a few days but finally relented, because it was the phone of a mass shooter iirc. Mighta been the nightclub shooter in FL?
This is just from memory without searching on it.

 

[manly]

The NSA/FBI had attempted to crack it and couldn't, so they requested it from Apple. Apple resisted for a few days but finally relented, because it was the phone of a mass shooter iirc. Mighta been the nightclub shooter in FL?
This is just from memory without searching on it.

Except that Apple never relented and this was about 4 years before the iPhone 12 was even a shipping product.

Apple–FBI encryption dispute - Wikipedia

en.wikipedia.org

Apple's takeaway from this case was that they needed to make their tech even more secure than it was at that time. I don't recall if Cook ever publicly said it, but he's not worried about the FBI per se. He's worried about other regimes that would come calling if Apple keeps the "master key" to unlock its products.

 

[Captante]

Right, but it does mean that Apple can. You're now one bad actor, one business decision, or one profit motive away from your data being compromised.

Don't have to persuade me! Until Apple fully addresses "unfixable" compromised icloud accounts iphones are a security disaster waiting to happen. (as are many Androids to be fair)

However IMO Google/Android (especially in upcoming version 14) have done a tremendous job making it POSSIBLE to lock down your personal information with careful application of "permissions". (you know.... those things most folks never pay any attention to like EULA's?)

HOWEVER the above only applies to "legit" phone makers like Samsung, Motorola/Lenovo, OnePlus etc. (even TCL isn't terrrible) If you buy a "mystery-brand" Android phone however you will very likely get exactly what you pay for.

Your personal data on the fast-track to China and/or the dark web marketplace.

 

[Captante]

Fair enough, I wasn't sure what the OP of that exchange was talking about. They authoritatively stated what apple could do, which smacks of bullshit if it's actually encrypted.

Unless of course the encryption key is compromised and/or Apple built in a "back door". (which they evidently did as you said earlier)

The problem with Apple/iphones isn't the hardware .... some of that is nothing short of amazing.

It's the attitude. (and the flat-out inescapable icloud)

 

[igor_kavinski]

(even TCL isn't terrrible)

How do you know that? Started working in a mobile phone shop?

 

[Captante]

How do you know that? Started working in a mobile phone shop?

I read a lot of phone reviews?

 

[Captante]

NOW if we could just get all the id10t's to STOP using insecure SMS texts for 2fa !!!!

 

[Fenixgoon]

NOW if we could just get all the id10t's to STOP using insecure SMS texts for 2fa !!!!

It would be great if services offered another method of 2FA besides text!

 

[Pohemi]

It would be great if services offered another method of 2FA besides text!

Right. I use an authenticator or email when possible, but sometimes the SMS is the only option given.

 

[Captante]

Email is only VERY slightly better than SMS.

Fully implemented RCS text (with end-to-end encryption) is a step up on both but a purely local authenticator app is the "gold standard" right now. (although even they're NOT foolproof)

And don't get me started about signatures. (the old fashioned kind) I sign "X" every time as "mockery" and never an issue... so effectively they provide NO security at all.

 

[Red Squirrel]

Are sim swap exploits even still a thing? I would figure phone companies would have smartened up by now after some celebs got nailed with that. I've been slowly moving to app based since I discovered that you don't have to use whatever app they tell you and it's all universal, so I all have them in the same app now. Aegis. That one also lets you export a backup of the database. That was my big grippe with that before is there is no easy way to back it up in case you lose your phone. I also use a custom rom so all the mainstream apps that are on play store won't work for me.

I need to figure out a secure way to store the backup though, since if someone somehow gets ahold of it then they can take over all my accounts. Although if someone is on my local network I have bigger issues to worry about.

SMS/email is also not encrypted so that could be an issue I guess but the attacker would need to be sniffing it in real time. And think they still need your password too.

Namecheap's 2FA has been down for almost a whole month now, I had to get them to disable it. Been transferring my domains over to another registrar. I bet it's DST related, it started around that time. The server sends a code but it's the wrong code. The time on the server that sends the code is probably off.

 

[Captante]

No matter how you slice it an encrypted physical SIM with a 6-8 digit PIN code is the best you can do. (for now)

 

[MrSquished]

Apple announced it would make iPhones compatible with the RCS standard so Android phones and iPhones will be able to use more advanced messaging with each other. However they are keeping the green bubbles, which of course is what children used to demean each other and bully. It really helps them be dominant in the youth market something like 90% or more of it, So theres still work to do but this is good progress.

And there is no way they did this out of the goodness of their hearts but because it's inevitable in the EU in about 6 months it was going to be mandated. Just like they did with usbC

But this is definitely a good win.

Apple announces that RCS support is coming to iPhone next year - 9to5Mac

In a surprising move, Apple has announced today that it will adopt the RCS (Rich Communication Services) messaging standard. The...

9to5mac.com

What color bubbles will RCS messages be? Here's Apple's answer - 9to5Mac

Earlier today, Apple announced its plans to bring RCS support to the iPhone in 2024. Since I published my story...

9to5mac.com

 

[igor_kavinski]

WTF Apple with the bubbles??? Grow up!

 

[pete6032]

I can't recall the last time I had to transfer a large amount of data between two devices without using an internet connection, which is always the limiting factor in terms of speed. My entire work is backed up on Dropbox. All of the stuff on my phone is backed up to Google Drive automatically. I can't think of a use case where I would need to transfer 10 gbps to an iPhone, other than maybe if I was setting it up for the first time.

 

[sdifox]

I can't recall the last time I had to transfer a large amount of data between two devices without using an internet connection, which is always the limiting factor in terms of speed. My entire work is backed up on Dropbox. All of the stuff on my phone is backed up to Google Drive automatically. I can't think of a use case where I would need to transfer 10 gbps to an iPhone, other than maybe if I was setting it up for the first time.

I carry 200gb of flac on my (android) phone.

 

[lxskllr]

I transfer large files all the time. My phone's the flashdrive I have with me, so it gets used as such. Backups are made locally. I don't use cloud backup.

 

[William Gaatjes]

The new iPhone 15 models make the switch from lightning to USB-C. The port supports USB 3.2 Gen 2 (10Gbps). The included USB-C cord, however, is rated to USB 2 (480 Mbps). On a $1000+ phone!

My thoughts about it : First i thought , do we really need 10Gbps on a phone ? But then i looked up the specifications on the support site form apple :

Charge and connect with the USB-C connector on your iPhone 15 - Apple Support

USB-C is a universally accepted standard that enables charging, syncing data, and playing audio and video. iPhone 15 models have a USB-C connector, which allows you to charge and connect to a variety of devices, including Mac, iPad, AirPods Pro (2nd generation), external storage devices, and...

support.apple.com

Excerpt:
"
Published Date: September 15, 2023

The USB-C connector on iPhone 15 Pro and iPhone 15 Pro Max supports USB 3 for data transfer when used with a USB-C cable that supports USB 3-2. iPhone 15 Pro and iPhone 15 Pro Max also support recording ProRes video directly to an external storage device, up to 4K at 60 frames per second.
"
and

"

• The USB-C cable that comes with your iPhone supports charging and USB 2 speeds. If you want to use a USB 3 device, use a compliant USB 3 cable that supports 10Gbit/s.
• The Thunderbolt 4 (USB‑C) Pro Cable (1 m) has a Thunderbolt symbol to distinguish it from a USB-C cable. The Thunderbolt 4 (USB‑C) Pro Cable (1 m) is backward-compatible with USB 3 and DisplayPort protocols.

I would agree that such a USB3 capable cable would be a good standard cable. Perhaps the certification of the cable was delayed or the right cable or connectors or the or the marker chip was not available yet and with that the official USB and EMC certification.

Some background information :
Anyway, usb3 cable can have a marker IC inside the connector to tell the device what the cable is capable of with respect to maximum power delivery current and voltage capabilities and media connection capabilities like how thunderbolt may work over usb3. ( I though it was like a single pair PCIe but i am not sure anymore , can somebody fill me in ? )

"
An Electronically Marked Cable Assembly (EMCA) is a USB Type-C cable that uses a marker chip to provide the cable’s characteristics to the DFP.
"

These cable are prone to very critical specifications. The USB wires are in essence the same as transmission lines or twisted pair cable. These cables have impedance that is critical for USB3 to properly function and since USB3 is a differential signal , which means there are 2 signals (TX+ & TX-) or (RX+ & RX-), also critical trace length matching applies. Add the electronic behavior of the connectors, and the pcb combined with the cable. It is all a critical design and certification is demanded. Also for the cables.

As a side note :
Inside Apple USB extension devices one can often find the TPS65981 ,TPS65982 or TPS65987D from Texas Instruments, A power delivery chip that is also capable with the right USB3 multiplexer to send different high speed signals over the pins designated for USB3TX and USB3 RX. USB3 multiplexers like for example one can find at the ON semiconductor website, Microchip website. Or Texas Instruments website, like for example the HD3SS460.


Lingo :
USB is Universal Serial Bus.
EMC is electromagnetic compatibility which roughly translates to : Allowed electromagnetic interference compliance.

 

[Fanatical Meat]

What percentage of customers need to transfer data via a cord at speeds of greater than 400mbs?
That is your answer.

My guess is 0.0001% do this. Literally there are probably fewer than 10 people in the US that MUST be able to do this.
I cannot think of a time in greater than 20 years I had to move a large file to my mobile device with a cord other than the old school contact synch with blackberry

 

[manly]

"640k ought to be enough for anybody." -- Bill Gates

(an urban legend)