Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Ludicrous0251 ( Ludicrous0251@piefed.zip )  to Privacy@lemmy.dbzer0.comEnglish · 8 months ago

FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled

www.404media.co

external-link
message-square
31
link
fedilink
  • cross-posted to:
  • pulse_of_truth@infosec.pub
  • privacy@programming.dev
194
external-link

FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled

www.404media.co

Ludicrous0251 ( Ludicrous0251@piefed.zip )  to Privacy@lemmy.dbzer0.comEnglish · 8 months ago
message-square
31
link
fedilink
  • cross-posted to:
  • pulse_of_truth@infosec.pub
  • privacy@programming.dev
Lockdown Mode is a sometimes overlooked feature of Apple devices that broadly make them harder to hack. A court record indicates the feature might be effective at stopping third parties unlocking someone's device. At least for now.
alert-triangle
You must log in or # to comment.
  • Encephalotrocity ( Encephalotrocity@feddit.online ) 
    link
    fedilink
    English
    arrow-up
    63
    ·
    8 months ago

    Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”

    Use biometric security at your own risk.

    • otter ( otter@lemmy.dbzer0.com ) 
      link
      fedilink
      English
      arrow-up
      35
      ·
      8 months ago

      Just don’t. No pussyfootin’ around. Every single person the US has access to is a possible “suspect” for anything it claims.

      Act like it, citizens. Protect yourself, then help others to do likewise.✊🏼

      • wonderingwanderer ( wonderingwanderer@sopuli.xyz ) 
        link
        fedilink
        arrow-up
        3
        ·
        8 months ago

        So tired of the “if you’re not doing anything wrong, then you have nothing to hide” and “if you care too much about privacy, then you seem suspicious” lines.

        People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I’ve raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives…

    • FleetwoodLinux ( FleetwoodLinux@lemmy.zip ) 
      link
      fedilink
      arrow-up
      14
      ·
      8 months ago

      Even then, why not just use the wrong finger(s) enough times to disable biometrics there too?

      • TrippaSnippa ( TrippaSnippa@aussie.zone ) 
        link
        fedilink
        English
        arrow-up
        8
        ·
        8 months ago

        They “assisted” her to put her finger on the fingerprint reader (i.e., grabbed her hand and forced her finger onto it).

        • FleetwoodLinux ( FleetwoodLinux@lemmy.zip ) 
          link
          fedilink
          arrow-up
          4
          ·
          8 months ago

          Ah no good then :/

        • Tinidril ( Tinidril@midwest.social ) 
          link
          fedilink
          English
          arrow-up
          2
          ·
          8 months ago

          That’s why I unlock my phone with my genitals.

    • Lka1988 ( lka1988@lemmy.dbzer0.com ) 
      link
      fedilink
      English
      arrow-up
      12
      ·
      8 months ago

      The only thing of mine that uses biometrics is my phone, and that is very easy to put into lockdown mode.

  • CompactFlax ( CompactFlax@discuss.tchncs.de ) 
    link
    fedilink
    English
    arrow-up
    46
    ·
    8 months ago

    Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk

    Not sure about the laptops; probably best to do a password there.

    • fonix232 ( fonix232@fedia.io ) 
      link
      fedilink
      arrow-up
      37
      ·
      8 months ago

      Biometrics are an issue because in most jurisdictions (not just the US but globally), you can’t be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.

      • CompactFlax ( CompactFlax@discuss.tchncs.de ) 
        link
        fedilink
        English
        arrow-up
        23
        ·
        8 months ago

        That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.

    • ButteryMonkey ( ButteryMonkey@piefed.social ) 
      link
      fedilink
      English
      arrow-up
      15
      ·
      8 months ago

      Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.

      • fahfahfahfah ( fahfahfahfah@lemmy.billiam.net ) 
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        8 months ago

        It’ll also trigger a call to 911, which is gonna be hard to disable in your pocket

        Edit: this is configurable behavior

        • ButteryMonkey ( ButteryMonkey@piefed.social ) 
          link
          fedilink
          English
          arrow-up
          11
          ·
          8 months ago

          No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.

          • fahfahfahfah ( fahfahfahfah@lemmy.billiam.net ) 
            link
            fedilink
            English
            arrow-up
            9
            ·
            8 months ago

            I just tested on my iPhone and it does. Guessing it’s a setting.

            … and after checking it is indeed a setting. Not sure if I turned that on or if it was on by default.

            • scytale ( scytale@piefed.zip ) 
              link
              fedilink
              English
              arrow-up
              2
              ·
              8 months ago

              Which setting is it?

              • fahfahfahfah ( fahfahfahfah@lemmy.billiam.net ) 
                link
                fedilink
                English
                arrow-up
                1
                ·
                8 months ago

                Emergency SOS, few different settings in there that change the behaviour

        • despoticruin ( despoticruin@lemmy.zip ) 
          link
          fedilink
          arrow-up
          1
          ·
          8 months ago

          deleted by creator

    • UnspecificGravity ( UnspecificGravity@piefed.social ) 
      link
      fedilink
      English
      arrow-up
      9
      ·
      8 months ago

      It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.

    • irelephant ( irelephant@anarchist.nexus ) 
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      23 days ago

      deleted by creator

      • xorollo ( xorollo@leminal.space ) 
        link
        fedilink
        arrow-up
        1
        ·
        8 months ago

        On pixel it’s double tap the home screen.

      • Thisiswritteningerman ( Thisiswritteningerman@midwest.social ) 
        link
        fedilink
        English
        arrow-up
        0
        ·
        8 months ago

        deleted by creator

    • lambalicious ( lambalicious@lemmy.sdf.org ) 
      link
      fedilink
      English
      arrow-up
      3
      ·
      8 months ago

      between the hotspots of fingerprints and shoulder surfing risk

      If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and “”“assist”“” you into touching your privates (aka biometrics).

      • CompactFlax ( CompactFlax@discuss.tchncs.de ) 
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 months ago

        That would fall under the scenarios in which you should have your phone locked out.

    • Tollana1234567 ( Tollana1234567@lemmy.today ) 
      link
      fedilink
      arrow-up
      1
      ·
      8 months ago

      turning the phone off also disables the biometrics if you turn it on again, it requires whatever lockout method you used previously

  • BK-201 ( BK-201@fedia.io ) 
    link
    fedilink
    arrow-up
    11
    ·
    8 months ago

    on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.

    • Ludicrous0251 ( Ludicrous0251@piefed.zip ) OP
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 months ago

      What’s the difference between lockdown and just rebooting your phone (putting it into the first-run state)?

    • Fish [Indiana] ( Fish@midwest.social ) 
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 months ago

      deleted by creator

  • jaybone ( jaybone@lemmy.zip ) 
    link
    fedilink
    English
    arrow-up
    9
    ·
    8 months ago

    Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?

    • cassandrafatigue ( cassandrafatigue@lemmy.dbzer0.com ) 
      link
      fedilink
      arrow-up
      2
      ·
      8 months ago

      Why would they give you your shit back? They’re cops, not humans.

  • Hux ( Hux@lemmy.ml ) 
    link
    fedilink
    arrow-up
    5
    ·
    8 months ago

    Paywalled.

    If you just want to learn about Lockdown Mode, here ya go:

    https://support.apple.com/en-us/105120

  • horse ( horse@feddit.org ) 
    link
    fedilink
    arrow-up
    4
    ·
    8 months ago

    In case anyone is wondering what Lockdown Mode on Apple Devices does (it’s not just disabling biometrics): https://support.apple.com/en-gb/105120

  • NigelFrobisher ( NigelFrobisher@aussie.zone ) 
    link
    fedilink
    arrow-up
    3
    ·
    8 months ago

    Isn’t the Washington Post state media now anyway?

    • dandelion ( dandelion@lemmy.blahaj.zone ) 
      link
      fedilink
      arrow-up
      1
      ·
      8 months ago

      when Jeff Bezos bought them and began to interfere with their editorial independence, they certainly lost integrity

  • Zephorah ( Zephorah@discuss.online ) 
    link
    fedilink
    arrow-up
    1
    ·
    8 months ago

    deleted by creator

  • wonderingwanderer ( wonderingwanderer@sopuli.xyz ) 
    link
    fedilink
    arrow-up
    1
    ·
    8 months ago

    Why is the FBI searching journalist’s devices?

    Oh wait, it’s 2026. Yeah, that tracks…

Privacy@lemmy.dbzer0.com

privacy@lemmy.dbzer0.com

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.dbzer0.com

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don’t be a smartass and try to game the system, we’ll know if you’re breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don’t promote big-tech software
  3. No apathy and defeatism for privacy (i.e. “They already have my data, why bother?”)
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

  • !opensource@programming.dev
  • !selfhosting@slrpnk.net / !selfhosted@lemmy.world
  • !piracy@lemmy.dbzer0.com
  • !drm@lemmy.dbzer0.com
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 274 users / week
  • 1.02K users / month
  • 2.96K users / 6 months
  • 31 local subscribers
  • 6.19K subscribers
  • 1K Posts
  • 5.19K Comments
  • Modlog
  • mods:
  • Otter ( otter@lemmy.ca ) 
  • shaytan ( shaytan@lemmy.dbzer0.com ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code