Slashdot Mirror


Apple's War Against Jailbreaking Now Makes Perfect Sense

An anonymous reader writes "Apple has always been extremely anti jailbreaking, but it might now have a good reason to plug up the exploits. As Hardware 2.0 argues, Apple's new iOS 7 Activation Lock anti-theft mechanism which renders stolen handsets useless (even after wiping) unless the owner's Apple ID is entered relies on having a secure, locked-down OS. Are the days of jailbreaking iOS coming to a close?" I can see a whole new variety of phone-based ransom-ware based on this capability, too.

321 comments

  1. Phone-based ransom-ware? by Sockatume · · Score: 4, Insightful

    timothy, you're going to have to explain how the implimentation of this feature by Apple in any way changes a developer's ability to create ransomware with similar functionality. 'Cause the way I see it, to be able to hijack the Authentication Lock, you're probably going to have to have sufficiently low-level access to just impliment your own lock.

    --
    No kidding!!! What do you say at this point?
    1. Re:Phone-based ransom-ware? by Joce640k · · Score: 5, Insightful

      The phone's CPU could have a special PIN number that comes on a scratch card in the box when you buy it.

      If your phone gets stolen you call your operator and read them the PIN. They send out a "kill" signal and the phone commits suicide.

      This is impossible for hackers to fake - they can never know the PIN.

      --
      No sig today...
    2. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 5, Interesting

      In our business we have had several thousand 4's stolen over the last 2 years. We have 0 recourse to recover them. Apple admits they see them popping up all over the world under other names but can't recall or stop them from being used.

      Bricking them or recovering them was a request of many businesses and officers of the law. Dry up the demand and you will slow down the theft.

    3. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      This all reeks of the Pentium III serial number and UEFI secure boot fiascos, both of which I recall caused lots of complaints here. I guess when Apple does it, it's ok because the Kool-Aid is so good.

    4. Re:Phone-based ransom-ware? by Plumpaquatsch · · Score: 4, Insightful

      The phone's CPU could have a special PIN number that comes on a scratch card in the box when you buy it.

      If your phone gets stolen you call your operator and read them the PIN. They send out a "kill" signal and the phone commits suicide.

      This is impossible for hackers to fake - they can never know the PIN.

      Yeah, they can only send millions of kill messages with random PINs out. No harm done.

      --
      Of course news about a fake are Fake News.
    5. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 5, Funny

      This PIN number thingamajiggy you speak of, is it to enter into the LCD display of an ATM machine? Good thing those are engineered using CAD design, but even better they're not programmed using BASIC code and don't run on a DOS operating system anymore, and now have gobs of RAM memory!

    6. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      I see what you did there.

    7. Re:Phone-based ransom-ware? by Joce640k · · Score: 1

      Hah, you got me there. I only did it once though...got it right the second time. :-)

      --
      No sig today...
    8. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 1, Insightful

      It's their OS and their device, aren't hey entitled to it?

    9. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 1

      SecureBoot is so the NSA can have hardware-level acess to computers.

      Why else do you think we won't let you sign your own certs?

    10. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      Because neither Google or Microsoft take a cut of revenues for people who sell through their stores, right? Oh wait... If having to pay a cut to Apple was ever so terrible no one would develop iOS apps.

    11. Re:Phone-based ransom-ware? by F.Ultra · · Score: 2

      Doesn't mean that we have to like it.

    12. Re:Phone-based ransom-ware? by Joce640k · · Score: 1, Insightful

      a) Who's "they"?

      b) If the pin is 10 digits then "they" are wasting their time.

      --
      No sig today...
    13. Re:Phone-based ransom-ware? by acariquara · · Score: 1, Troll

      70% of *something* is better than 100% of *nothing*. They created the roads, they are entitled to their tool booths. Quit bitching.

      --
      Dear aunt, let's set so double the killer delete select all
    14. Re:Phone-based ransom-ware? by omnichad · · Score: 5, Insightful

      Whose device again? Money changed hands.

    15. Re:Phone-based ransom-ware? by Dthief · · Score: 1

      ....toll...

      --
      www.RacquetUp.org - Helping Detroit Youth
    16. Re:Phone-based ransom-ware? by PopeRatzo · · Score: 2, Insightful

      It's their OS and their device, aren't hey entitled to it?

      It's their device until I buy it.

      I guess owning something doesn't mean being able to use it the way you want.

      Apple doesn't give a good goddamn about stolen phones. That's not why they're implementing this new lockdown. In fact, they probably like stolen phones because that means they can sell new ones to the original suckers. This is about making sure that not one thing happens with that device where Apple doesn't get a little ka-ching! somewhere along the line.

      Apple has taken cell phones and tablets and turned them into slot machines. And Apple is the "house".

      --
      You are welcome on my lawn.
    17. Re:Phone-based ransom-ware? by ibwolf · · Score: 0

      70% of *something* is better than 100% of *nothing*. They created the roads, they are entitled to their tool booths. Quit bitching.

      Apple did not create "roads", it created a consumer product.

      Roads sometimes have tolls because the only alternative to pay for a road is a general tax. We pay, outright, for consumer products. There is no inherent reason why Apple should continue to benefit after the sale has taken place unless they CONTINUE to provide something of measurable value.

      I'd have no problem with them taking 30% off of things sold through the app store (their road in some sense) if they didn't put in an entirely artificial restriction on alternative app stores.

    18. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      There is an alternate app store: the web.

    19. Re:Phone-based ransom-ware? by Moryath · · Score: 2, Insightful

      Apple admits they see them popping up all over the world under other names but WON'T recall or stop them from being used.

      FTFY.

      Apple are lazy-ass sons of bitches as are the cell companies complicit in this shit. They "admit they see them popping up all over the world" but they WON'T:

      - Flag the account of the new user as using a stolen phone.
      - Deactivate that user's account / internet access until they come in to complain and then point out that the phone is stolen.

      Not "Can't." WON'T. Big fucking difference there.

    20. Re:Phone-based ransom-ware? by geminidomino · · Score: 2

      Nah, he was right the first time.

    21. Re:Phone-based ransom-ware? by shadowrat · · Score: 1

      How is apple preventing you from buying an android device?

    22. Re:Phone-based ransom-ware? by Sockatume · · Score: 2, Insightful

      You think a rogue carrier that doesn't obey the IMEI blacklist is going to obey a request from Apple to cancel someone's service plan?

      --
      No kidding!!! What do you say at this point?
    23. Re:Phone-based ransom-ware? by Politburo · · Score: 1

      Ya gotta pay the troll toll...

    24. Re:Phone-based ransom-ware? by HappyPsycho · · Score: 1

      1 billion combinations is hard to brute force these days?

    25. Re:Phone-based ransom-ware? by Penguinisto · · Score: 1

      Not "Can't." WON'T. Big fucking difference there.

      To be fair, most auto manufacturers don't incorporate a functionality that kills the engine of a stolen car (GM has OnStar which does it, but that requires a subscription by the owner).

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    26. Re: Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      Failure to understand "the freedom to own property" will mean that you will let that freedom erode to the point where you "lease" everything and never actually own it. The idea that when you own something that it is yours and you have control over it is a basic building block of a free society, it was one of the first things that is removed and forbidden in a totalitarian regime. So I understand that you like their stuff and you don't care if there is an option to do what you like with it but that option IS freedom. It does not take away from you not part taking of it, but it does take away from someone who wants to. Thoughtfulness and courtesy is always the best policy. So flame away as your limited view anarrow opinions will most likely hurt your own flexibility and choices in the end because there is one thing I don't mind and that Is your right to be a complete ass in expressing your God given freedom of speech. Have a good one.

    27. Re:Phone-based ransom-ware? by minstrelmike · · Score: 2

      This is impossible for hackers to fake - they can never know the PIN.

      You probably believe God created the heavens and the earth in six days, too.

      The pirate quote that three men can keep a secret if two of them are dead is only close to the truth. How may folks have asked if you yourself can keep a secret as they get ready to tell you one of their own? I always say I can't yet they tell me their secret anyway.

      We have a secret code, a secret algorithm, an unbreakable cipher. Like kids in a tree house with a sign saying No Grrrlz Allowed.

    28. Re:Phone-based ransom-ware? by HappyPsycho · · Score: 3, Insightful

      The apple accounts can be disabled. That still falls well within their control.

    29. Re: Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      "Failure to understand "the freedom to own property" will mean that you will let that freedom erode to the point where you "lease" everything and never actually own it. " "it was one of the first things that is removed and forbidden in a totalitarian regime. "

      Sorta like that house you "bought" except you pay a fee every year to the state to "own" it. That is a lease as far as I am concerned. Call it taxes all you want.

      This is the same thing...

    30. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 2, Insightful

      Apple admits they see them popping up all over the world under other names but can't recall or stop them from being used.

      And that's so much bullshit right there. If they can identify when the stolen phones shows up on the network, then they can identify a phone as stolen when someone shows up to activate it, and simply NOT activate it. They simply choose NOT to do so, because it hurts their secondary ownership market and makes people unwilling to take the chance that the phone they see on eBay is legit.
      And they can do it all regardless of how jailbroken the phone is, because it's not dependent on the phone's software.
      Which means their statements are bullshit.

    31. Re:Phone-based ransom-ware? by TheRaven64 · · Score: 2

      If the pin is 10 digits then "they" are wasting their time

      Assuming that they are generated by a strong random number generator. Of course, there are no recent examples of random number generators having a lot less entropy than was believed (or required for the application). Well, except for that whole chip-and-pin thing. And the Debian OpenSSL packages. And...

      --
      I am TheRaven on Soylent News
    32. Re:Phone-based ransom-ware? by jedidiah · · Score: 1

      > It's their OS and their device, aren't hey entitled to it?

      It's not their OS once they sell it to you.

      It's not their device once they sell it to you.

      --
      A Pirate and a Puritan look the same on a balance sheet.
    33. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      The iPhone still Apple's device to design and implement in the manner they see fit. You bought one unit of their device, so with regard to that single iPhone, do what you will with it, but Apple is under no obligation to facilitate your modifications or to provide you with the software tools you need to achieve your goals legally. That's your problem to solve.

      Money changing hands by itself means nothing. It's consideration for a transaction, not the bargain itself.

    34. Re:Phone-based ransom-ware? by jedidiah · · Score: 2

      > How is apple preventing you from buying an android device?

      They sue Android vendors and try to ban Android devices from the market.

      --
      A Pirate and a Puritan look the same on a balance sheet.
    35. Re: Phone-based ransom-ware? by jedidiah · · Score: 1

      So now you are conflating a corporation that sells consumer products with the State.

      Steve Jobs just wasn't your CEO, he was your KING. The only problem is you want him to be my king as well.

      Talk about corporate feudalism...

      --
      A Pirate and a Puritan look the same on a balance sheet.
    36. Re:Phone-based ransom-ware? by Joce640k · · Score: 1

      a) You seriously think people are really going to set up fake cellphone towers and try to brute force people's pins just for the lulz?

      b) With about 0.000001% of my brain power I can think of a way around your "unsolvable" problem. Can you think of a basic flaw in my plan or just mindless nitpicks based on key sizes and whatnot?

      --
      No sig today...
    37. Re:Phone-based ransom-ware? by Joce640k · · Score: 1, Funny

      The nutters are out in force today...

      I'd better stop posting, my plan is obviously completely unworkable if the PINs aren't generated using grated unicorn poop.

      --
      No sig today...
    38. Re:Phone-based ransom-ware? by mark-t · · Score: 1

      It is if each of those combinations has to be manually reported... you know, as in a police report?

    39. Re:Phone-based ransom-ware? by Runaway1956 · · Score: 1

      But - I folded my card up, and put it beneath the battery for safekeeping!

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    40. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      "grated unicorn poop"

      Please, stop salivating all over the place.

    41. Re:Phone-based ransom-ware? by Runaway1956 · · Score: 1

      No, they are not. That's why I don't have an iThing. They're "entitled" to nothing.

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    42. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      Typically 0.000001% of the stupidest Slashdoter is pretty good for the average technical manager who decides how these features work.

    43. Re:Phone-based ransom-ware? by ArsonSmith · · Score: 2

      But they do have a VIN that, if it shows up somewhere the car is impounded and possibly returned to the proper owner or insurance carrier at some point.

      --
      Paying taxes to buy civilization is like paying a hooker to buy love.
    44. Re:Phone-based ransom-ware? by Moryath · · Score: 1

      Bingo!

      I'm not worried about my karma either. I know the Apple FanBois are going to downmod anyone that isn't sucking on the fruity titty of the Mac Cult, but hey, they do that all the time anyways.

    45. Re:Phone-based ransom-ware? by TheRaven64 · · Score: 4, Interesting

      Ah, starting with an ad hominem, good job.

      No, your plan isn't completely unworkable, but unless you are completely confident in your random number generator (possible, but hard), you have the potential for a really expensive recall when someone works it out. With 10 digits, you have about 33 bits of entropy. That's not a trivial search space, but it may be possible to brute force if it's something you can do over the local network. If you can do 1000/second, it will probably take about 1-2 months. 10,000/second, and you can do it in a week. Pretty obvious network traffic though. If, however, your random number generator is a lot less random than you think, then in this kind of thing you may end up with only 16 bits of entropy (random number generator errors in the past have resulted in a lot less than half the expected entropy). In that case, at 1000/second you could probably brute force it in about half a minute, and definitely do it in slightly over a minute.

      And that's assuming the only flaw is in the random number generator. A more common error in implementing this kind of system would be a timing error in checking the code. If the time taken to process the key is related to the number of digits that you got right, then you can easily target a phone to disable, even with a strong random number generator.

      Sure, it's possible to do it right. It's just a lot easier to do it wrong. There's only one way of doing it right and there are hundreds of ways of doing it wrong...

      --
      I am TheRaven on Soylent News
    46. Re:Phone-based ransom-ware? by superdave80 · · Score: 1

      Um, wouldn't you need to first send out the phone number you are trying to contact, and then send out the PIN kill code? Kind of like a username/password combo?

    47. Re:Phone-based ransom-ware? by Dexter+Herbivore · · Score: 1

      It's funny really, in Australia all that is needed is an IMEI number to report to the police as stolen and the networks will prevent access. In America it appears that you need to agree to have your phone effectively owned by the company instead of you before they'll agree to shut it off.

    48. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      > They created the roads, they are entitled to their tool booths. Quit bitching.

      Except the analogy is more like this: you can drive on Apple's roads if you bought an Apple car. You can't drive on any other roads unless you buy another make of car. You can't drive on Apple's roads with your non-Apple car. Furthermore, the toll doesn't go toward maintaining the roads. Other companies build and maintain the roads, costing Apple almost nothing, but Apple takes a cut of the toll just because they control the toll gates.

      That, my friend, is more like extortion than providing a useful service!

    49. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      It relies on you having the card with the PIN available. So if you lose it on holiday, for example, yoiu can't kill it for a couple of weeks.

    50. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      That depends on how many combinations you can try per second. It would make sense for the phone to only take a kill code once every 10 seconds, or something. That pretty much kills the brute-force technique.

    51. Re:Phone-based ransom-ware? by Scoth · · Score: 1

      The four major carriers this year got a common database for stolen phones. As far as how a phone gets onto it in the first place, I have no idea.

    52. Re:Phone-based ransom-ware? by Belial6 · · Score: 3, Insightful

      Apple isn't the problem here with stolen phones. Law enforcement is. Our phones locations are tracked. We all know this. No one is denying that our phones are tracked. The police literally get a map with the bad guys location marked on it, and a constant stream of evidence to prove that the bad guy is guilty of a crime.

    53. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      > It's their OS and their device, aren't hey entitled to it?

      It's not their OS once they sell it to you.

      Yes, it is.

      Apple does not sell you the OS, they sell you a licensed copy of the OS. Big difference.

    54. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      you don't need to kill the phone. the carriers can simply block use for known stolen phones.

    55. Re:Phone-based ransom-ware? by houghi · · Score: 1

      We are already able to block phones.

      Signed:
      The rest of the world

      --
      Don't fight for your country, if your country does not fight for you.
    56. Re:Phone-based ransom-ware? by Shadowmist · · Score: 3, Insightful

      It's their OS and their device, aren't hey entitled to it?

      It's their device until I buy it.

      I guess owning something doesn't mean being able to use it the way you want.

      Apple doesn't give a good goddamn about stolen phones. That's not why they're implementing this new lockdown. In fact, they probably like stolen phones because that means they can sell new ones to the original suckers. This is about making sure that not one thing happens with that device where Apple doesn't get a little ka-ching! somewhere along the line.

      Apple has taken cell phones and tablets and turned them into slot machines. And Apple is the "house".

      You own the physical device. You don't own the software. You don't own the rights to monkey with the software. In a similar vein, Apple is not under any obligation to make life easier for you to monkey with their software. The exploits that make jailbreaking easier make for a less secure phone. And phone security is a good deal of what iPhone users are buying into and is a growing concern the more of their lives people place on this (and other smartphones as well.)

    57. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      a) You seriously think people are really going to set up fake cellphone towers and try to brute force people's pins just for the lulz?

      If adoption of this was large enough... I do believe people might do that.

      Remember, there are people who are stupid enough to shine lasers into airplane cockpits just for the heck of it. These people are not only assholes, they're dumb enough to get caught a substantial fraction of the time.

      So yeah, I don't know about fake towers, but if you could make the equipment reasonably portable for a micro access point or something, there might be people who try to attract signals to it and fry phones. Triple that possibility if there is some way to observe the effect of said phone suicides in order to obtain the lulz.

    58. Re:Phone-based ransom-ware? by lister+king+of+smeg · · Score: 1

      SecureBoot is so the NSA can have hardware-level acess to computers.

      Why else do you think we won't let you sign your own certs?

      i was thinking money, but yours is a legitimate reason too

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    59. Re:Phone-based ransom-ware? by mapsjanhere · · Score: 1

      Funny, there I thought it was my device after paying for it. Silly me.

      --
      I'm aging rapidly, I bought a new game and had no idea if my machine was good for it.
    60. Re:Phone-based ransom-ware? by Plumpaquatsch · · Score: 1

      a) You seriously think people are really going to set up fake cellphone towers and try to brute force people's pins just for the lulz?

      b) With about 0.000001% of my brain power I can think of a way around your "unsolvable" problem. Can you think of a basic flaw in my plan or just mindless nitpicks based on key sizes and whatnot?

      DDoS - you can use Android botnets for that.

      --
      Of course news about a fake are Fake News.
    61. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      No, you fool! You can only encrypt cards safely under keyboards! Batteries only change the polarity of the field!

    62. Re:Phone-based ransom-ware? by AmiMoJo · · Score: 1

      The latest scam is to break the phone and then claim on insurance for it. Some places do no-question replacement policies, you literally walk into the shop with a broken phone and ten minutes later walk out with a new one. Thieves take advantage of that since the only authentication is the fact that you have "your" phone. Alternatively they just take out a legit policy in their name on the same model phone and exchange the stolen one under it, since the shop can only check to see if it has the correct SIM in it now the phone won't operate.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    63. Re:Phone-based ransom-ware? by AmiMoJo · · Score: 1

      How would they be able to tell the legit second hand sales from stolen phones, other than by taking your word for it? They would have to do some small amount of investigation at a minimum, which costs them money.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    64. Re:Phone-based ransom-ware? by EdZ · · Score: 1

      If your phone gets stolen you call your operator and read them the PIN. They send out a "kill" signal and the phone commits suicide.

      You mean, some sort of international method of identifying mobile equipment? That is reported to the mobile operators whenever the phone makes an attempt to connect, allowing permanent blacklisting of the handset?
      Because we have that: it's called an IMEI number. You report your phone as stolen, that IMEA gets put in a blacklist database, and mobile operators will no longer accept connections from that device.

    65. Re:Phone-based ransom-ware? by PopeRatzo · · Score: 1

      You own the physical device. You don't own the software. You don't own the rights to monkey with the software. In a similar vein, Apple is not under any obligation to make life easier for you to monkey with their software. The exploits that make jailbreaking easier make for a less secure phone. And phone security is a good deal of what iPhone users are buying into and is a growing concern the more of their lives people place on this (and other smartphones as well.)

      If I own the physical device, then I can use it as I please. The point of custom ROMs is that I don't have to "monkey" with the software because I won't be using the software.

      But this discussion is why I stopped buying Apple products. I'm not the only one. The number of new customers to Apple has flattened and mostly they're selling iPhones to people who are replacing old iPhones. There are people moving from iOS to Android and fewer moving back the other way. Apple's attitude is a big reason.

      --
      You are welcome on my lawn.
    66. Re: Phone-based ransom-ware? by PopeRatzo · · Score: 2

      Sorta like that house you "bought" except you pay a fee every year to the state to "own" it.

      But at least I can replace the furnace with one from a different manufacturer. If I want to knock down walls, put up walls, even add dormers on the roof, I can do that.

      And that "fee" you pay to the state provides you with a sewage system, water system, road to my door, and police protection. With Apple, it's only juice.

      --
      You are welcome on my lawn.
    67. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      I don't find the ramsomware "threat" the biggest counter to this argument. The biggest counter to this argument for me is that this isn't much use to people who aren't in MI6 or who simply take enough care to ensure their phones aren't stolen. There are also ways or providing half of this functionality (wiping/locking/encrypting data) without taking away ownership of the phone from the user.

    68. Re:Phone-based ransom-ware? by Dixie_Flatline · · Score: 1

      Oh please, what utter melodrama. You make it sound like they sound every Android entrant on to the market indiscriminately. They don't. There are more Android vendors that haven't been sued than those that have. And you've got Motorola, who decided to sue Microsoft but it turns out that that was a bad idea, and Google bought them knowing full well that if Motorola won, there'd be a lot of money in it for them.

      Complain about the IP system if you want, that's fine. It's busted, we all know it. But in the framework of the law, these lawsuits have at least some merit.

      Samsung is the big Android dog, and they got their asses sued because their phones looked remarkably like Apple's phones for quite a while. But unless I'm mistaken, Apple hasn't taken, say, Sony to court over anything. But Sony's phones don't look anything like the iPhone and never have. Huh, what a coincidence.

    69. Re:Phone-based ransom-ware? by Shadowmist · · Score: 1

      You own the physical device. You don't own the software. You don't own the rights to monkey with the software. In a similar vein, Apple is not under any obligation to make life easier for you to monkey with their software. The exploits that make jailbreaking easier make for a less secure phone. And phone security is a good deal of what iPhone users are buying into and is a growing concern the more of their lives people place on this (and other smartphones as well.)

      If I own the physical device, then I can use it as I please. The point of custom ROMs is that I don't have to "monkey" with the software because I won't be using the software.

      But this discussion is why I stopped buying Apple products. I'm not the only one. The number of new customers to Apple has flattened and mostly they're selling iPhones to people who are replacing old iPhones. There are people moving from iOS to Android and fewer moving back the other way. Apple's attitude is a big reason.

      While you may feel bold and confident in your belief, it's far more likely that the reason is that there are some good low-priced alternatives out there, and 98+ percent of the people buying Android devices not only will not root them, but don't and won't give a fig about doing so. Your argument makes as much sense as someone buying a Mac to do nothing but run Windows software on it.

    70. Re:Phone-based ransom-ware? by fahrbot-bot · · Score: 1

      Bricking them or recovering them was a request of many businesses and officers of the law. Dry up the demand and you will slow down the theft.

      But then, you wouldn't be forced to buy new phones...

      --
      It must have been something you assimilated. . . .
    71. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      Exactly. I have friends that have went through several iPhones due to theft or losing, it is FAR too much income for Apple to sell you a new phone than there is in finding your stolen one. That's basic free market economics.

    72. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      Even the best random number generator might return 0000000001

    73. Re:Phone-based ransom-ware? by Trogre · · Score: 1

      And this, boys and girls, is why we don't expand acronyms in-line.

      While teenagers with aspergers like to snicker when someone says an apparently tautological phrase such as "PIN number", this wording helps clarify that we're talking about a Personal Identification Number, and not People In Need or Progressive Inflammatory Neuropathy.

      Otherwise you end up with nonsensical pedantry: JPEG is just a group, IBM are machines, GIF, like PDF, is a format, PNG is a graphic, though only the latter two are portable.

      --
      "Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
    74. Re:Phone-based ransom-ware? by Bert64 · · Score: 1

      It's an OS and device that they built, but once sold it becomes the user's device... Why shouldn't the end customer who bought and paid for it have full control of it should they desire to?

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    75. Re:Phone-based ransom-ware? by Bert64 · · Score: 1

      Samsung are the big dog, sony sell so few android phones these days they're hardly worth suing... Also if they succeed against samsung, then other cases become a lot easier and cheaper.
      And if i recall, microsoft sued motorola first.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    76. Re:Phone-based ransom-ware? by freman · · Score: 1

      You don't need this sort of security on the phone.

      In Australia they just bar the phone from networks by IMMI - a stolen phone is useless without the need to hamper the operations of whoever owns it

    77. Re:Phone-based ransom-ware? by F.Ultra · · Score: 1

      Still doesn't mean that we have to like it. You might have every right in the world to charge me for something but I am still allowed to tell you that I thing that you are overpriced.

    78. Re:Phone-based ransom-ware? by mjwx · · Score: 1

      The apple accounts can be disabled. That still falls well within their control.

      This still doesn't make Apples war on jailbreaking make sense.

      Thieves rarely use what they steal (well, that can be tracked), they sell it off as soon as possible. Is a person who steals a Merc in Berlin going to drive it around Munich himself? Hell no, he's going to drive it into Poland and hock it for cold hard Euro's. Same with phone thieves, they wont care if it can be bricked because they will offload it for money rather than use it.

      Also never underestimate the number of suckers who will buy cheap Apple products without even considering it wont work (See: p-p-p-p-p-power book).

      But this is all just a clever ruse for Apple to enforce their control on LEGIT users who have PAID for their device. They dont care about stolen phones.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    79. Re:Phone-based ransom-ware? by readingaccount · · Score: 1

      While teenagers with aspergers like to snicker when someone says an apparently tautological phrase such as "PIN number", this wording helps clarify that we're talking about a Personal Identification Number, and not People In Need or Progressive Inflammatory Neuropathy.

      You don't NEED clarification though - it's all in the context of where the acronym is used. If someone requests that you "please remember your PIN for future access", clearly it's not going to be about remembering your Progressive Inflammatory Neuropathy.

    80. Re:Phone-based ransom-ware? by TheRaven64 · · Score: 1

      Yes, but the best random number generator would return 0000000001 for exactly one phone in 10000000000, so if you sent 0000000001 to a single phone you'd have an insignificant chance of bricking it, and if you sent it to all phones you'd have a small chance of bricking one.

      --
      I am TheRaven on Soylent News
    81. Re:Phone-based ransom-ware? by twisted_pare · · Score: 1

      But all sorts of legislation exists imposing stiff penalties for auto theft. These don't exist for phone theft.

      --
      HTFU
    82. Re:Phone-based ransom-ware? by doccus · · Score: 1

      Naw, there's so many phones out there that there's a good chance *someone* will be inconvenienced!

    83. Re: Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      to get in that boys hole

    84. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      When you pay for the phone, aren't you paying for the ability to run and change the software on the phone as well? It's not like you buy a PC and you don't have the right to dump Windows 8 and run linux on it... Oh crap... UEFI.. bad comparison. But, the whole 'phone security' thing is a joke. Joe blow is not buying an iPhone because its 'secure', its the only one he can figure out how to use, because android was too 'complicated'. Also its the one all his neighbors were saying that they loved and the one he saw all the ads for on TV. That's why he has an iPhone. The security thing is a joke to the common consumer, who is not going to get a bunch of virii from Android or Windows phone.. Apple doesn't care about returning a stolen phone to its owner, they hope you buy a new one. This is just a selling point, hackers will find a way around it, and the world will keep spinning.

    85. Re:Phone-based ransom-ware? by smash · · Score: 1

      Doesn't mean you have to buy it either.Personally I am happier with iOS than any of the available alternatives.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    86. Re:Phone-based ransom-ware? by smash · · Score: 1

      They sue android vendors who so blatantly copy.

      Just wait for the new pastel, translucent UI in the next version of Samsung's android variant.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    87. Re:Phone-based ransom-ware? by smash · · Score: 1

      And a likelt reason samsung are the big dog, is because their devices look like apple devices (which is basically apple's case against them). As demonstrated by the samsung lawyer who could not identify the samsung device, in court, when asked to pick which was which when it was held up next to an ipad. As demonstrated by the use of iOS app store icons in Samsung promo material, etc.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    88. Re:Phone-based ransom-ware? by smash · · Score: 1

      HTML+CSS+Javascript runs on any device, including iOS. If you want to develop cross-platform, use that.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    89. Re:Phone-based ransom-ware? by smash · · Score: 1

      Maybe you should petition your government to get this shit repealed then. Until then, you're wrong.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    90. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      "PIN" is stupid anyway. "Personal ID number" is perfectly clear and doesn't need shortening to a pointless acronym.

    91. Re:Phone-based ransom-ware? by Shadowmist · · Score: 1

      No, you're paying for exactly what's being sold to you. Apple has made no commitment and is not obligated to give you one ounce of support for you to monkey with the hardware to jimmy some other operating system on it. There are security issues on Android phones. There are especially security issues involved when you sell an old Android phone as it's not that easy to securely purge every bit of data you might have put on there as you can with an iPhone. Phone malware does exist for both platforms, and given that smartphones these days are as much computers as computers were a couple of years ago, then yes you CAN get virii and malware infecting your phones.

    92. Re: Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      You don't deal with users much, do you? Most of them would record their PIN in a memo. On their phone.

    93. Re:Phone-based ransom-ware? by niftymitch · · Score: 1

      The phone's CPU could have a special PIN number that comes on a scratch card in the box when you buy it.

      ........

      A little scratch card that gets lost.
      A little scratch card that the X swipes.
      A little scratch card exactly the same at the other five cards you have.
      A little scratch card that has data the DHS also has.
      A little scratch card that the company IT department must manage.

      No thanks.

      --
      Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
    94. Re:Phone-based ransom-ware? by niftymitch · · Score: 1

      The phone's CPU could have a special PIN number that comes on a scratch card in the box when you buy it.

      If your phone gets stolen you call your operator and read them the PIN. They send out a "kill" signal and the phone commits suicide.

      This is impossible for hackers to fake - they can never know the PIN.

      Yeah, they can only send millions of kill messages with random PINs out. No harm done.

      I rolled my eyes at millions of kill messages then fell over thinking about the karnage a botnet could incur.
      We already see DOS attacks large enough that an entire nations cell coverage would be at risk by the bad boys.

      --
      Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
    95. Re:Phone-based ransom-ware? by Anonymous Coward · · Score: 0

      unless a iphone owner has sharpied the pin inside the battery cover, just so they don't forget it.

  2. No it doesn't. by Anonymous Coward · · Score: 0

    The only way to be safe(ish) (except a replacement of the CPU) is a software lock in the CPU. (Or any other part that is a pita to fix.)
    This is imo a bad excuse for fighting jailbreaks.

    1. Re:No it doesn't. by Joce640k · · Score: 2

      How about an old fashioned fuse inside the chip? Blow the fuse, job done...

      --
      No sig today...
    2. Re:No it doesn't. by RevDisk · · Score: 1

      Think folks won't be able to quickly and easily swap out a fuse? Oh, not personally. But take it to a semi dodgy electronics shop to be "fixed" ?

    3. Re:No it doesn't. by tom17 · · Score: 1

      He said "inside the chip".

    4. Re:No it doesn't. by inasity_rules · · Score: 1

      You have obviously never worked with a PROM. Fellow poster is correct.

      --
      I have determined that my sig is indeterminate.
    5. Re:No it doesn't. by Belial6 · · Score: 2

      Or the police could do their job and arrest people who steal phones. They have a constant stream of evidence when the phone is on, and turn by turn directions to the thief's location. The thieves are being handed to them on a silver platter.

    6. Re:No it doesn't. by Anonymous Coward · · Score: 0

      Perhaps they are busy with other crimes then soomeone's $500 vanity electronic being stolen?

    7. Re:No it doesn't. by Anonymous Coward · · Score: 0

      Like ticketing someone for speeding? I'd rather they find the thief.

    8. Re:No it doesn't. by Anonymous Coward · · Score: 0

      Agreed on the stupid ticketing for speeding front. In my area the road is two lanes in each direction and a 60 KM/h zone. it suddenly turns into a 50 zone (same road, same width) and the cops often hide there handing out tickets.

      Flip side, seriously why blame the "police" for this problem? If apple and the telco's didn't benefit perhaps they would FINALLY do something about the problem like banning the phone from activation, etc.

      Apple - new phone sold to replace theft
      Teclo - new activation on stolen phone and replacement.

    9. Re:No it doesn't. by mjwx · · Score: 1

      Or the police could do their job and arrest people who steal phones. They have a constant stream of evidence when the phone is on, and turn by turn directions to the thief's location. The thieves are being handed to them on a silver platter.

      Erm...

      Thats because thieves dont use the crap they steal. They sell it for cash. The only data that the police can collect is that of the suckers who bought it.

      It kind of scares me how naive some /.ers are. I know we're not the most socially astute, but this is pretty damn basic.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  3. The problem is... by Darkness404 · · Score: 2, Insightful

    The problem is, as with most anti-theft technology like this, it won't hurt the thieves as much as it will screw-over buyers of used hardware.

    This will not cut down on theft as much as it will simply cripple the trust of the secondary market. After all, you can still steal an iPhone, stick it on Craigslist for cash, sell it to some poor sucker and get leave before he charges up the phone and figures out it was stolen and won't work.

    --
    Taxation is legalized theft, no more, no less.
    1. Re:The problem is... by Anonymous Coward · · Score: 5, Insightful

      Really? You'd buy a "gray-market" iPhone without seeing that it's on, and operational? Are you that retarded, really? I can only assume that you're retarded, since I can't imagine even the most dim-witted average person forking over good money for an iPhone without verifying that the thing is functional.

      What this does is it makes it *mostly pointless* for someone to steal an iPhone, unless (until) someone finds a way to circumvent this activation lock. If it's useless, that scam works a limited number of times, and you're going to have some 'splainin to do to your customers. And you're going to have some angry customers who know who you are and can provide a description to police... "Hey I bought this iPhone advertised on Craigslist, and I have reason to believe it's stolen. I got it from this guy, here's his name and description."

    2. Re:The problem is... by Joce640k · · Score: 1

      I imagine people will get wise to that one real fast...

      --
      No sig today...
    3. Re:The problem is... by Savage-Rabbit · · Score: 1

      I imagine people will get wise to that one real fast...

      Are you sure? One born every minute...

      --
      Only to idiots, are orders laws.
      -- Henning von Tresckow
    4. Re:The problem is... by djrosen · · Score: 3, Interesting

      Yeah because no thief has ever put it into another iPhone box and shrink wrapped it and sold it as new before...

    5. Re:The problem is... by Moryath · · Score: 1

      http://www.factory-express.com/Shrink_Wrap-366.htm

      Hey look at that - "It's new in box, still shrink wrapped. It didn't work? Call Apple it's under warranty."

    6. Re:The problem is... by bluefoxlucid · · Score: 4, Interesting

      I think that was the point. People will see a pattern of phones sold second-hand not working, and will cease to buy second-hand phones. Legitimate sellers are screwed.

    7. Re:The problem is... by Anonymous Coward · · Score: 5, Insightful

      Go to an Apple store, they take it out of the box right there and activate it. Go to an AT&T store, they take it out of the box right there and activate it.

      There's no reason to not say "open the shrinkwrap, plug it in, and let's verify that it's ready for activation, and not a brick."

      If the person you're buying from suddenly gets all nervous and says "I gotta go man, just gimme the money and take the phone, I ain't got time for that," then there's a pretty fucking good warning that you're getting scammed.

      Seriously, you people are fucking dense if you think this will do anything but reduce the number of stolen iPhones.

    8. Re:The problem is... by Joce640k · · Score: 4, Insightful

      Yeah because no thief has ever put it into another iPhone box and shrink wrapped it and sold it as new before...

      If you're buying "new" iPhones from unknown people in gas stations then you deserve what you get IMHO.

      --
      No sig today...
    9. Re:The problem is... by Anonymous Coward · · Score: 0

      people are fucking dense

      And this is why it won't matter that much. People are stupid. Thieves may have to get a bit more creative with their sales, but it won't matter. Phones will still get stolen, as they are now.

    10. Re:The problem is... by Plumpaquatsch · · Score: 1

      Yeah because no thief has ever put it into another iPhone box and shrink wrapped it and sold it as new before...

      Why would they bother putting an old iPhone in it, when they can just sell a lump of clay?

      --
      Of course news about a fake are Fake News.
    11. Re:The problem is... by MightyYar · · Score: 1

      Then consider it a learning experience. Better a toy than something like a car or house.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    12. Re:The problem is... by Anonymous Coward · · Score: 5, Interesting

      ...it will simply cripple the trust of the secondary market...

      I think it will just change the protocol for selling on eBay or Craigslist. Sellers will probably learn to post a picture of the phone, turned on, showing the date... and also the serial number or something. If you can get into the settings, then it wouldn't be locked. But really, sending a bricked phone is no different from sending a broken phone or no phone at all, so I think this all falls into the "fraud" dept.

      FWIW, there were five things which immediately went through my head when I saw them announce Activation Lock. In order, they are:.
        - "If iOS7 can be jailbroken, Activation Lock is useless"
        - "There needs to be a simpler way to 'release' a phone from your ownership". (I once went into "Find My iPhone" and was able to see all three iPads I've ever owned and the last three iPhones I've had. It turns out that it takes some deliberate navigating, on the part of the user, to indicate that they no longer own a device. That needs to be simpler.
        - It needs to be *verifiable* by the buyer that a device isn't "owned" by anybody. Otherwise, the device could be locked at any time in the future. (or... there needs to be a way for someone with a locked phone to track down the person with locking rights on a phone so that they can say "Hey... remember that phone you sold back to BestBuy last Spring? They never released you as the owner". Almost like doing a title-search on a piece of property.
        - Apple will probably need some kind of arbitration dept. for the "This dude sold me his phone and won't release his lock rights" or "I can't find the person who has lock rights" issues.
        - If this is something which people have to turn on in the phone before it gets stolen, it's going to be useless. Almost nobody is going to take the time to enable it, which means a small fraction of stolen phones will get activation-locked, which means there will be a small deterrent to theft.

      I eagerly await the rollout of iOS7 to see how Apple deals with these issues.

    13. Re:The problem is... by BitZtream · · Score: 3, Insightful

      Right, its not like they could ... you know ... figure out to turn the fucking thing on and try it first ... thats not something that anyone would ever think of.

      Why are people on slashdot ... who think they are so smart and clever ... so utterly stupid to the fact that people have been ...

      turning on and trying their used iPhones before buying them for years ALREADY?

      Does your dumb ass buy a used car without trying it too?

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    14. Re:The problem is... by Joce640k · · Score: 0

      Bottom line: If you're buying shrink-wrapped iPhone boxes from strangers based on the weight of the box then you deserve to be scammed.

      --
      No sig today...
    15. Re:The problem is... by hypergreatthing · · Score: 1

      I said this before, but i'll say it again.
      Ok. So lets say in the perfect world you disable the device that was stolen.
      What's to prevent the thief from taking it apart and selling everything piece by piece on ebay? The digitizer, lcd, battery, frame, etc is all salvageable and can fetch a few hundred dollars. It's the electronic form of a chop shop.
      I don't see how this will curb thefts at all. It's not a technological solution that can solve this issue. It sounds like a really bad idea. If someone learns how to figure this out, along with honeypot type cell repeaters, i would honestly love to see a drone fly around disabling all iphones that connect to it.

    16. Re:The problem is... by Anonymous Coward · · Score: 0

      Darwinism applied to the wallet.

    17. Re:The problem is... by Anonymous Coward · · Score: 0

      people are fucking dense

      And this is why it won't matter that much. People are stupid. Thieves may have to get a bit more creative with their sales, but it won't matter. Phones will still get stolen, as they are now.

      If people are THAT dense, then why put in an iPhone (stolen or not) in the box to begin with? Just put a brick in the box and sell it to those fucking dense people!

    18. Re:The problem is... by Anonymous Coward · · Score: 0

      Legitimate sellers who can't manage to turn on the phone and demonstrate that it's functional before exchanging cash for product are just as dense as the dipshits who don't ask to see it turned on.

      Seriously, if this in any way dents your ability to resell your iphone, then you're probably too stupid to have earned the money to buy it in the first place, and should just give it to your mommy or daddy and ask them to sell it for you and buy you the new hotness - they can take it out of your allowance, surely.

    19. Re: The problem is... by Anonymous Coward · · Score: 0

      mod up. A good percentage of people stealing these phones are addicts trying to pawn these of to their dealers. They're too ate up to understand any of this and what they get for the phones, it doesn't matter if they work or not. They're worth it just for parts.

    20. Re:The problem is... by HappyPsycho · · Score: 1

      Never used eBay have you?

    21. Re:The problem is... by Anonymous Coward · · Score: 0

      I see a new scam opportunity.

      Step 1. Buy iPhone from Apple
      Step 2. Sell iPhone as used on Craigslist
      Step 3. Tell the new owner you want more money or else you will get Apple to send the kill signal.
      Step 4. ???
      Step 5. Profit.

    22. Re:The problem is... by Anonymous Coward · · Score: 0

      since I can't imagine even the most dim-witted average person forking over good money for an iPhone without verifying that the thing is functional.

      +5 Insightful, yet every day there are dozens of iPhone's sold as used on eBay, none of which can be verified as Functional prior to the sale.
      When people shop for used items online, they usually consider the reputation of the seller. When the seller is offloading stolen iPhones which all work, he gets a nice fat "reliable" rating. When the stolen phones he sells physically are working but the Cell Carrier says "Sorry we can't activate that serial number, it's reported stolen" suddenly his rating takes a fat shit and you might even see some law enforcement get involved. When Carriers refuse to activate the stolen phones, suddenly nobody will buy them off Craigslist or anywhere other than a brick and mortar store... and those stores pay sellers less and charge buyers more.

      Apple doesn't want this. They want everybody to sell their $currentGen device and buy the expensive $nextGen device every year, and they need a worry-free secondary market to keep this cycle going.

    23. Re:The problem is... by Anonymous Coward · · Score: 0

      Right, its not like they could ... you know ... figure out to turn the fucking thing on and try it first

      The only way to find out if it's reported stolen is to try and activate it through a Carrier who actually cares enough to check. Turning it on only tells you if the hardware is working.

    24. Re:The problem is... by hobarrera · · Score: 1

      I agree.
      I've bought and sold several of used macbooks online. Each time, we met at a cafe, and the buyer had plenty of time to try it out, etc.
      I can't think someone stupid enough to give me a fat chunk of cash without wanting to verify what I'm selling them.

    25. Re:The problem is... by Dixie_Flatline · · Score: 1

      Then don't buy from eBay. There are plenty of local sellers. If you live somewhere remote, this may be slightly more of an inconvenience, but in that case, I suggest that you buy from shops that have good ratings and high reliability. Prices might go up slightly because people will have to buy phones through a trusted third party, but that's not the worst thing in the world, if we're honest.

    26. Re:The problem is... by Belial6 · · Score: 1

      Or, the police could cut out the middle man and just take the report that the phone was stolen, and use the turn by turn directions provided to drive right up to the person that stole the phone in the first place.

    27. Re:The problem is... by Anonymous Coward · · Score: 0

      Is it fun to call people retarded?

    28. Re:The problem is... by ramk13 · · Score: 1

      Google "Sprint Clean ESN" or the same for Verizon. It actually gives you a method of verification on the secondary market which you didn't have before. I just bought an old Sprint phone and called Sprint to check to make sure it wasn't stolen before I made the purchase. I had to get the ESN from the seller, but that's a reasonable precondition. You can even offer to meet at a Sprint/Verizon store to check the phone so that they don't have to give you the ESN. I also saw the ESN printed on the original box of the phone, in the case that someone figured out how to spoof it (though I've never heard of this).

      I don't think the scheme is the same for Apple's protection, but I think the principles apply. It'll be harder to sell a stolen phone and it'll be easier for a buyer to verify that a phone isn't stolen. That itself shifts demand and supply.

    29. Re:The problem is... by kqs · · Score: 1

      Ok. So lets say in the perfect world you disable the device that was stolen.
      What's to prevent the thief from taking it apart and selling everything piece by piece on ebay? The digitizer, lcd, battery, frame, etc is all salvageable and can fetch a few hundred dollars. It's the electronic form of a chop shop.

      I know. I mean, why require a key or electronic lock for your car? Someone could always come with a flatbed, pull it on, and chop-shop the car.

      Or why have a law against murder? It won't stop 100% of all murders, so it's better to not even try.

      (Yeah, I'm being snarky, but that was a truly idiotic complaint.)

    30. Re:The problem is... by James+McGuigan · · Score: 1

      It doesn't stop the device being striped down and sold for parts... but it does stop the device being using a working iPhone. This won't curb all thefts, but if you have effectively reduced the stealing payoff from a $600 iPhone to a $100 bag of parts, this makes the risk/reward payoff of breaking the law less inciting... possibly turning instant gratification of instant cash into more hassle than its actually worth.

      Also a working iPhone is relatively easy to sell on ebay for easy cash. But a disabled device means having to go to extra effort to either strip the device down yourself and do multiple small sales for individual pieces, which assumes you actually know what you are doing. Or selling it to a commercial chop shop, where the very fact that it is disabled would be a potentual flag that it was stolen, so the chop shop would have to be willing to turn a blind eye which might further lower the market value.

    31. Re:The problem is... by Anonymous Coward · · Score: 0

      Yep. Does it bother you when people call you retarded, retard?

    32. Re:The problem is... by thegarbz · · Score: 1

      Really? You'd buy a "gray-market" iPhone without seeing that it's on, and operational? Are you that retarded, really? I can only assume that you're retarded, since I can't imagine even the most dim-witted average person forking over good money for an iPhone without verifying that the thing is functional.

      I can and I would. I also buy sight unseen gear from random Chinese websites. You know what? So far I have come out on top. Occasionally I drop a few hundred dollars on something that turns out to be fake or broken and you know what I do? Cut my losses and continue playing the game knowing that at the moment I'm still way out in front.

    33. Re:The problem is... by Anonymous Coward · · Score: 0

      Maybe the lump of clay is more useful?

    34. Re:The problem is... by Bert64 · · Score: 1

      So the thief only has to sell it quickly, before the kill signal gets sent.
      This is already easily doable, thieves don't want to be in possession of stolen goods any longer than they have to so they already try to sell things quickly, and if someone has their phone stolen unless it's obvious (eg robbery at gun/knife point), they may not even be aware it was stolen immediately and even when they realise they no longer have it they might think they lost it and spend time looking, and without their phone might not be in a position to report it stolen very quickly.

      Plenty of scope for a thief to sell a "fully working" phone *before* it gets flagged.

      Plus, a phone still has value as a source of parts, people break their phone screens all the time and want cheap replacements etc.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  4. Already Unlocked by jasper160 · · Score: 1

    So what, the NSA has the inside track for all jailbreaking.

    --
    No good deed goes unpunished.
    1. Re:Already Unlocked by Anonymous Coward · · Score: 0

      So what, the NSA has the inside track for all jailbreaking.

      No, they just see the unencrypted data you pass over your connection to the internet, your cookies, all the information Apple has on you, e.g. your mail accounts, and many of your website profiles. That's true no matter what mobile device you've got and whether or not you've jailbroken your phone. Everything that passes through your carrier, they have.

    2. Re:Already Unlocked by Anonymous Coward · · Score: 0

      It is the best of both worlds - Chinese manufactured phone with NSA approved software.

    3. Re:Already Unlocked by Anonymous Coward · · Score: 0

      Here I would say, "wanna bet?", they can probably read it in real time, the latest updates have probably let them. If I remember the article from Saudia, by sandia, it was there is only one, I'll say again, only one unreadable system.. And they sold out to keep their system on the market. That's why all the high monkies, had blackberries prior to 2008. Since then, if they were the last unreadable system, guess what?
      With that said, the best security is now to hide in the crowd. Make sure you are open, text readable, misspell, do all the things that a 18 going on 90 year old would do. With their scattergun approach, one read out of a million, is better then them looking at severely at your system.

  5. "War against jailbreaking?" by Anonymous Coward · · Score: 5, Insightful

    How about "war against security exploits that allow malicious users to gain unrestricted access to your phone?"

    I guess Linux and Microsoft are both engaged in a 'war against jailbreaking' too, when they close fucking security exploits.

    Jesus christ - if you want root on your device, get a device that is built to allow that. Don't bitch that a company closes fucking security holes in its software.

    1. Re:"War against jailbreaking?" by gman003 · · Score: 1

      It wouldn't be nearly as much of a problem if jailbreaking wasn't the only way to install software of your choosing, not Apple's.

    2. Re:"War against jailbreaking?" by GameboyRMH · · Score: 4, Insightful

      This. When you want an open device but instead buy a jailed device and jailbreak it, you're voting with your dollars to say "YES, more locked-down toys, I LURV DEM SO GOOD!"

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    3. Re:"War against jailbreaking?" by Dixie_Flatline · · Score: 1

      I suspect a lot of the active jailbreakers are people that just enjoy the challenge of it.

      I jailbroke my phone earlier this year, and really, I don't see how anyone could really deal with it, especially with my old iPhone 4. The app quality isn't there, the stability isn't there, and it generally just killed my battery life without making me substantially happier with the device I have.

      So I agree, sort of. If you're the kind of person that likes a highly customisable phone and wants to fiddle with it, why spend the money on a phone that gets in the way of that? If you want an iPhone, buy an iPhone and be happy with your iPhone. It's a big wide open market.

    4. Re:"War against jailbreaking?" by Macman408 · · Score: 2

      Agreed, this. I once talked to an Apple engineer who works on security; this was the whole reason to plug the holes found by jailbreakers. After all, if you can visit a website that gives you root, you could visit a website that gives Sergei in eastern Russia root too. He could steal your saved passwords, or make collect calls, or send spam, or do thousands of other things to earn some quick money once he has control of your device. The jailbreakers just provide Apple with a convenient security testing service for free.

    5. Re:"War against jailbreaking?" by Anonymous Coward · · Score: 0

      Yes, "malicious users" like "the owner".

    6. Re:"War against jailbreaking?" by Trogre · · Score: 1

      This.

      I see Apple sales declining further as a result of this.

      --
      "Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
    7. Re:"War against jailbreaking?" by Bert64 · · Score: 1

      Only some of the jailbreaks have been browser based, many of them require physical access and the ability to connect a USB cable... Sergei in eastern russia would need a very long usb cable for that.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    8. Re:"War against jailbreaking?" by Macman408 · · Score: 1

      ...or he could get malware on your PC, and wait for you to connect your iPhone to it.

  6. Blackberry by Anonymous Coward · · Score: 0

    Wow, they really are cloning the Blackberry Z10. Didn't know about this feature that is being "borrowed". Atelast it doesn't involve rounded edges or something so Blackberry can't sue over it.

  7. IMEI by ssam · · Score: 5, Insightful

    Whats wrong with IMEI blacklisting.

    1. Re:IMEI by fuzzyfuzzyfungus · · Score: 2

      Whats wrong with IMEI blacklisting.

      Only works across whatever region(s) share blacklists.

    2. Re:IMEI by Bodero · · Score: 5, Insightful

      Whats wrong with IMEI blacklisting.

      Carrier unlocking, and the fact that a locked out iPhone still makes a great iPod Touch.

    3. Re:IMEI by Plumpaquatsch · · Score: 4, Insightful

      Whats wrong with IMEI blacklisting.

      Ask the people who just last month complained that it wasn't enough. Like the NYT, who of course singled out Apple.

      --
      Of course news about a fake are Fake News.
    4. Re:IMEI by Afty0r · · Score: 1

      Probably the fact that the IMEI number can be changed?

    5. Re:IMEI by Anonymous Coward · · Score: 2, Informative

      1) Only enforced by a few countries in this world

      2) Can be easily bypassed even in those countries

      3) Even in the countries that enforce it, not all phones that are stolen are in fact blocked at all.. They'll lose money if they do...

      I speak from personal experience working in a telecoms company that rhymes with JIM that sold their phones through 2 phone providers in UK that rhyme with Citrus sinensis and Carbon Dioxide respectively, and after checking the devices that customers report as stolen directly to them providers - by personal DB access and even phoning their customer service pretending to buy these phones from eBay and wanting to check their IMEI's - even after a year, can see first hand that they are not only still unblocked but in use by customers within UK with the same mentioned providers and unmodified IMEI numbers.

    6. Re:IMEI by 3.5+stripes · · Score: 1

      Holy shit, If you work for that telecoms company, you have my sympathies.

      --


      He tried to kill me with a forklift!
    7. Re:IMEI by mveloso · · Score: 1

      One argument against IMEI blacklisting is that for it to be effective you need a single registry that all the carriers in the world subscribe to. In addition, it won't work very well if a CSR can just toggle the flag to let the phone on the network.

      Let's put it this way: I just bought an iPhone unlock for $1.99 USD that worked fine. This isn't supposed to be possible, given the current AT&T unlock process.

      Moving the lock to the phone, though, has its own problems, namely, the thief doesn't know the phone is locked until after it's stolen. What are they going to do, mail it back?

    8. Re:IMEI by houghi · · Score: 1

      Sure. It also makes a nice paper weight. But that does not mean people will be stealing them. Theft will not be down to 0, but it will be seriously lower.

      It works in the rest of the world.

      --
      Don't fight for your country, if your country does not fight for you.
    9. Re:IMEI by mjwx · · Score: 1

      Whats wrong with IMEI blacklisting.

      Only works across whatever region(s) share blacklists.

      This, steal phone in Detroit, sell in El Salvador... Cheap international shipping makes this easy.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  8. time to implement by blackraven14250 · · Score: 4, Insightful

    The summary implies they've had this in the works for multiple iterations of iOS and never did it. I find it highly doubtful they were ready to implement this, but didn't for what, 5 consecutive versions of iOS?

    1. Re:time to implement by Plumpaquatsch · · Score: 1

      The summary implies they've had this in the works for multiple iterations of iOS and never did it. I find it highly doubtful they were ready to implement this, but didn't for what, 5 consecutive versions of iOS?

      Your post implies that all the other security mechanisms in iOS, that get disabled by jailbreaking, don't exist.

      --
      Of course news about a fake are Fake News.
    2. Re:time to implement by Sockatume · · Score: 1

      I imagine than Mayor Bloomberg's recent meeting with major phone manufacturers may have been a factor.

      --
      No kidding!!! What do you say at this point?
    3. Re:time to implement by Kohath · · Score: 1

      Yeah, the summary basically says that Apple was against jailbreaking 5 years ago because they were planning this feature. For 5 years. Instead of implementing the feature 4 or 5 years ago. Because .... ?

      So no. That's not why Apple was against jailbreaking.

    4. Re:time to implement by Belial6 · · Score: 1

      Mayor Bloomberg could just get his police departments to make arrests. They have turn by turn directions directly to the thieves after all.

    5. Re:time to implement by houghi · · Score: 1

      IMEI blocking is available for many more versions and is also not implemented.
      Why would they implement it before? What would have been the incentive? It wouldn't increase sales. If anything, it would decrease sales.

      --
      Don't fight for your country, if your country does not fight for you.
    6. Re:time to implement by blackraven14250 · · Score: 1

      The summary is about how jailbreaking prevented implementation, not market pressure. Market pressure is probably the likely culprit, and possibly some legal issues around disabling phones IIRC.

  9. Nobody wants to jailbreak by readingaccount · · Score: 3, Insightful

    But we do want, insist actually, on root access for devices we own. If you can't log in as root, you don't own the device. Just give me the option to turn on root access using my Apple ID. Closing holes that allow for unauthorized privilege elevation is a good thing. Disallowing authorized use of the full functionality of a device is a bad thing.

    1. Re:Nobody wants to jailbreak by Anonymous Coward · · Score: 0

      Then don't buy the device.

      When you buy an Apple you don't buy a little computer. You buy a magic white box. You don't want a magic white box. Don't buy an Apple phone.

    2. Re:Nobody wants to jailbreak by intermodal · · Score: 0

      I was just remarking to my wife that upon looking at iOS 7, the "features" Apple seems to have added are the ones an Android user can implement without having to root, jailbreak, or otherwise breach the basic device's intended configuration. In fact, these kinds of features are why we each eventually jailbroke our iPhone 3G before finally switching to Android. The only Android device I rooted was my tablet, and that was to perform a swap of internal pseudo-SD and the real SD due to the limited space as designed. Not the most stable configuration, by the way, but I knew that going into it.

      --
      In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
    3. Re:Nobody wants to jailbreak by Dthief · · Score: 1

      ....but....so.....shiny......

      --
      www.RacquetUp.org - Helping Detroit Youth
    4. Re:Nobody wants to jailbreak by khchung · · Score: 1

      But we do want, insist actually, on root access for devices we own.

      Then don't buy iPhones. It is that simple. Really.

      --
      Oliver.
    5. Re:Nobody wants to jailbreak by Anonymous Coward · · Score: 0

      Today. If this takes hold, others will follow ( or even be mandated by law ) and then you won't have any choice.

    6. Re:Nobody wants to jailbreak by khchung · · Score: 1

      Today. If this takes hold, others will follow ( or even be mandated by law ) and then you won't have any choice.

      And today, if you stopped buying iPhone, others will follow, and then Apple won't have any iPhone sales anymore.

      See how ridiculous you sound?

      --
      Oliver.
  10. Jailbreaking = Supporting 'Bad Guys'(tm) by killfixx · · Score: 5, Funny

    Wow...

    Would you steal a stereo? Would you steal a purse? Well, if you jailbreak your iPhone, you may as well!

    Jailbreaking your iPhone prohibits Apple from protecting the safety of your loved ones. Think of the children.

    TERRORISTS!!

    Shenanigans!!

    Anything to convince law-makers that having control over your own devices is evil.

    Bah!

    --
    "Helping to keep you two steps ahead of the Thought Police!"
    1. Re:Jailbreaking = Supporting 'Bad Guys'(tm) by intermodal · · Score: 1

      I'd totally copy a photo of a purse, or copy a photo of a stereo. But I can think of a lot of other photos I'd rather copy.

      --
      In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
    2. Re:Jailbreaking = Supporting 'Bad Guys'(tm) by 93+Escort+Wagon · · Score: 1

      For some reason your post reminded me of the DVD anti-piracy warning from the IT Crowd.

      --
      #DeleteChrome
    3. Re:Jailbreaking = Supporting 'Bad Guys'(tm) by HybridST · · Score: 1

      I swear to God I will pistol-whip the next person that says 'shenanigans'.

      --
      Ever notice that Cobra Commander sounds an awful lot like Star scream?
  11. "secure"? by Anonymous Coward · · Score: 0

    Does that mean: PRISM-certified?

  12. Secutiry could have been separate module by SplatMan_DK · · Score: 2

    When you control the hardware the way Apple does, there is no problem in separating the lock-feature from the main operating system, similar to what happens with a Trusted Platform Module in a Laptop. In fact, one may argue that relying on the operating system to handle this as part of its regular codebase is hopeless, as it means any jailbroken device can also be "unlocked" again.

    If they actually wanted to make this secure they would have separated it from the main OS.

    Having said that, one can hardly argue against a company working to close known vulnerabilities and security issues within their software, so Apple really should be working hard to close these exploits regardless of the lock-feature.

    - Jesper

    --
    My security clearance is so high I have to kill myself if I remember I have it...
    1. Re:Secutiry could have been separate module by intermodal · · Score: 1

      Apple does indeed work to close known vulnerabilities in their software...as long as the hardware it goes on is still marketable. My contract was far from over by the time support for my iPhone 3G ended, including security patching. All resources went into the later iOS versions I could not run. So I can't give Apple credit for working to close vulnerabilities when they knowingly abandoned users to exploitable versions of their software.

      --
      In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
    2. Re:Secutiry could have been separate module by hobarrera · · Score: 1

      That's just what I came here to say.
      Device locking (due to theft) can be done at boot-time.

      Have the hardware expose the means only to LOCK the phone, and you're done; no matter what OS, it can still be locked when lost (assuming the OS supports it), and can never be unlocked, since you can no longer install any OS, os even boot the existing one.

    3. Re:Secutiry could have been separate module by Anonymous Coward · · Score: 0

      When you control the hardware the way Apple does, there is no problem in separating the lock-feature from the main operating system, similar to what happens with a Trusted Platform Module in a Laptop. In fact, one may argue that relying on the operating system to handle this as part of its regular codebase is hopeless, as it means any jailbroken device can also be "unlocked" again.

      If they actually wanted to make this secure they would have separated it from the main OS.

      Having said that, one can hardly argue against a company working to close known vulnerabilities and security issues within their software, so Apple really should be working hard to close these exploits regardless of the lock-feature.

      - Jesper

      I installed iOS 7 beta 1 on my iPhone 4S, downgraded to iOS 6.1.3 via a total device wipe and recovery mode, and found it activation locked. iTunes 11.0.3 recognized the activation lock and asked me to type in my Apple ID and password. I suspect they really have moved this out of the OS, and have been preparing for this move for quite some time.

    4. Re:Secutiry could have been separate module by arkane1234 · · Score: 1

      My old 3GS is still being patched.

      --
      -- This space for lease, low setup fee, inquire within!
  13. It's always made sense by cyber-vandal · · Score: 5, Informative

    They want to prevent anyone else from starting an app store in competition with theirs.

    1. Re:It's always made sense by chispito · · Score: 3, Interesting

      They want to prevent anyone else from starting an app store in competition with theirs.

      Except that makes it more difficult to explain in condescending terms of how Apple knows what is best for its customers.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    2. Re:It's always made sense by gl4ss · · Score: 1

      They want to prevent anyone else from starting an app store in competition with theirs.

      Except that makes it more difficult to explain in condescending terms of how Apple knows what is best for its customers.

      if they wanted to protect their customers they could offer a signing and certification service(that was the old way in the mobile world).
      the new apple way is just "fuck you we take the cash cut". as sad it is, it was hailed as good thing in the mobile world because the old market routes took even a bigger cut!

      --
      world was created 5 seconds before this post as it is.
  14. iPhone Tracks Everywhere You've been by Anonymous Coward · · Score: 0, Interesting

    http://www.guardian.co.uk/technology/2011/apr/20/iphone-tracking-prompts-privacy-fears

    Lest we forget:
    "Security researchers have discovered that Apple's iPhone keeps track of where you go – and saves every detail of it to a secret file on the device which is then copied to the owner's computer when the two are synchronised."

    "The file contains the latitude and longitude of the phone's recorded coordinates along with a timestamp, meaning that anyone who stole the phone or the computer could discover details about the owner's movements using a simple program."

    "For some phones, there could be almost a year's worth of data stored, as the recording of data seems to have started with Apple's iOS 4 update to the phone's operating system, released in June 2010."

    And now we find out that Apple signed up to PRISM, the system that the FISC court already said was illegal under the constitution:
    https://www.eff.org/deeplinks/2013/06/government-says-secret-court-opinion-law-underlying-prism-program-needs-stay

    They simply kept the ruling secret and did it anyway.

    1. Re:iPhone Tracks Everywhere You've been by Anonymous Coward · · Score: 0

      Google now not only keeps a track of every where you go, it also knows where are you are at the very moment

      You're gonna have to try much harder

    2. Re:iPhone Tracks Everywhere You've been by Anonymous Coward · · Score: 2, Insightful
    3. Re:iPhone Tracks Everywhere You've been by Somebody+Is+Using+My · · Score: 1


      Lest we forget:
      "Security researchers have discovered that Apple's iPhone keeps track of where you go – and saves every detail of it to a secret file on the device which is then copied to the owner's computer when the two are synchronised."

      And would this information have been discovered if we couldn't root the phone and pry amongst its (virtual) innards?
      (that was a serious question, I don't know).

    4. Re:iPhone Tracks Everywhere You've been by Anonymous Coward · · Score: 0

      It's not at Google's or Apple's headquarters, they're at the low-tier stations before it even gets to them.

      NO U TROLL HARDER

    5. Re:iPhone Tracks Everywhere You've been by lxs · · Score: 1, Insightful

      Thank you. I see now that Apple is in the clear because of the "but he did it first" rule. That rule didn't work way back when I played in the sandbox but apparently it does work on the internet.

    6. Re:iPhone Tracks Everywhere You've been by sessamoid · · Score: 1

      Lest we forget: "Security researchers have discovered that Apple's iPhone keeps track of where you go – and saves every detail of it to a secret file on the device which is then copied to the owner's computer when the two are synchronised."

      And would this information have been discovered if we couldn't root the phone and pry amongst its (virtual) innards? (that was a serious question, I don't know).

      Yes. Because it was discovered not on the phone but on the backup created on the desktop computer. It's just a file with GPS coordinates. Rooting had nothing to do with finding that file.

      --
      "No, no, no. Don't tug on that. You never know what it might be attached to."
    7. Re:iPhone Tracks Everywhere You've been by KGIII · · Score: 1

      I dunno...

      If Little Billy punched you in the mouth you were clear to punch him back.

      If you didn't punch him back Little Timmy was clear to punch you in the mouth because he knew you wouldn't do anything.

      So, yeah, the "he did it first rule" has kind of always been there. What you should have done is punch them back the first time.

      --
      "So long and thanks for all the fish."
    8. Re:iPhone Tracks Everywhere You've been by Anonymous Coward · · Score: 0

      Yes, because the "secret file" is copied in plain text over the network.

  15. If this were really about theft... by Rich0 · · Score: 4, Interesting

    There is a simple solution to theft - initialize each device with a unique key, and give a copy of that key to the owner. By all means pre-load it with trust for the vendor key as well so that it can auto-update by default, but the master key goes to the user. The key might be a $2 USB drive in a little envelope that says "keep safe and don't open unless you want to modify the OS software - Vendor may not be able to repair devices without this key."

    The average user just sticks the key in a drawer and gets the default experience. A user who wants to unlock the device just downloads their alternate firmware installer of choice and it will ask them to insert their key so that it can reflash the phone. Users could also disable the Vendor's keys if they wish. By all means let users generate their own keys and install those on the device as well (obviously this will require the previous key). In the case of business-owned phones the business would procure the phone and keep the key, and thus they can stay in control of the hardware even if they allow employees to use it.

    Now users can reflash at will, but if somebody steals the phone they will be unable to do so. It would have minimal cost, and since the defaults are all idiot-proof those who don't care about the feature can ignore it and as long as they don't remove the Vendor key the vendor can still do anything they can do today. However, it would establish that the person who paid for the phone is the one who owns it. Since the key is a tangible object, it can be transferred if the owner wishes to do so, and I'd just make it a read-only simple USB drive so that it could be copied if desired as well - just like a car key.

    1. Re:If this were really about theft... by Rich0 · · Score: 1

      Hate to self-reply, but you could market this as a feature for the average user too. Call it a "digital key." If the user ever forgets their password or otherwise messes up their device they can always use their key to unlock it, using the Vendor's software. The average single car-buyer is probably already used to getting a second set of keys and giving it to somebody to help them out in a jam, or keeping them someplace safe just in case. It should be a familiar metaphor.

    2. Re:If this were really about theft... by Anonymous Coward · · Score: 0

      The owner of the iphones has the only key. You are just mistakenly belive that YOU are the owner of the iphone in your pocket...

    3. Re:If this were really about theft... by Luthair · · Score: 1

      Or you could make it easy and allow a user the ability to report a device tied to their account as lost/stolen, then Apple can simply render the device useless by refusing logins, syncs, etc.

    4. Re:If this were really about theft... by omnichad · · Score: 1

      This is unfortunately the correct answer. They've proven time and again that if you don't want their experience for you that they'd rather you just go somewhere else. They want to "own" it and don't even realize that they're trying to own it.

    5. Re:If this were really about theft... by Registered+Coward+v2 · · Score: 1

      There is a simple solution to theft - initialize each device with a unique key, and give a copy of that key to the owner. By all means pre-load it with trust for the vendor key as well so that it can auto-update by default, but the master key goes to the user. The key might be a $2 USB drive in a little envelope that says "keep safe and don't open unless you want to modify the OS software - Vendor may not be able to repair devices without this key."

      "Hello, Apple tech Support" "I lost my USB key - and my phone won't unlock." The problem is people will lose the key; how do you handle that without it becoming a logistical nightmare? Apple really doesn't want to get into the business of determining if a phone was stolen or it is a legitimate lost key request .

      --
      I'm a consultant - I convert gibberish into cash-flow.
    6. Re:If this were really about theft... by hobarrera · · Score: 1

      That would be AWESOME. You do realize that goes against EVERYTHING apple stands for as well, right?

    7. Re:If this were really about theft... by mark-t · · Score: 1

      The problem is people will lose the key; how do you handle that without it becoming a logistical nightmare?

      Roughly the same way you handle people losing keys to their home.

    8. Re:If this were really about theft... by SGDarkKnight · · Score: 1

      and since the defaults are all idiot-proof...

      The only thing I can say to this is, make something idiot proof and the world will produce a better idiot.

      --

      ...A no smoking section in a restaurant is like having a no peeing section in a swimming pool...
    9. Re:If this were really about theft... by Rich0 · · Score: 1

      There is a simple solution to theft - initialize each device with a unique key, and give a copy of that key to the owner. By all means pre-load it with trust for the vendor key as well so that it can auto-update by default, but the master key goes to the user. The key might be a $2 USB drive in a little envelope that says "keep safe and don't open unless you want to modify the OS software - Vendor may not be able to repair devices without this key."

      "Hello, Apple tech Support" "I lost my USB key - and my phone won't unlock."

      If they didn't disable the vendor key, then the vendor could unlock it for them. If they did, well, that's what the fine print is for.

      Rich

  16. Comment removed by account_deleted · · Score: 0

    Comment removed based on user account deletion

  17. Baseband security? by DarkSkiez · · Score: 1

    They already support blacklisting IMEI serials on phones, but the problem being that there is no global IMEI blacklist, so stolen phones get shipped around the world very quickly. This solution from apple allows them to seize this control from the network operators, which is a good and bad thing.

    Currently most phone security exists in its baseband. The baseband could easily have a hardware security mode that requires the equivalent of unlocking by the manufacturer to make it work again. Unlocking modern phones is still pretty tricky and is much harder to defeat than the standard OS security, for example, you can root an android phone, but still not unlock the baseband very easily. This whole thing could be standardised across all manufacturers too, yet allow freedom of OS on the device.

  18. A Lie to excuse Abuse by tuppe666 · · Score: 0

    I am a little tired of being spoon-fed lies(at least it wasn;t another Ars "open"[sic] article) on how I'm being raped as a consumer by mega-corporations. Everone knows why Apple Locks down devices...its so they can bleed every bit of cash from you with their cheap Chinese Foxconn devices. The EFF called it “corporate paternalism”

    Here from when Apple filed a response to an Electronic Frontier Foundation request that the US Copyright Office exempt from the provisions of the Digital Millennium Copyright Act. Apple asserts that jailbreaking fails all four “nonexclusive statutory fair use factors prescribed in 107 of the copyright statute,” essentially calling jailbreaking a crime http://www.copyright.gov/1201/2008/responses/apple-inc-31.pdf .

    Its easy boycott Apple. Its not like their is a shortage of better value, better hardware and software, running open standards products from more ethical companies.

    1. Re:A Lie to excuse Abuse by BitZtream · · Score: 1

      .its so they can bleed every bit of cash from you with their cheap Chinese Foxconn devices.

      You do realize WHATEVER you happened to have typed this silly post on ... it HAS FOXCONN components in it ... RIGHT?

      You simply can not buy a motherboard without Foxconn parts, let alone assembled in a foxconn factory.

      Go ahead, rant rant rant ... Hypocrites are cute. Considering you are aware of apple requiring Foxconn to changes its ways ... but I've never heard of anyone else doing such a thing ... yet ... here you are, posting on the Internet with crap made from some shitty Foxconn factory, you're just too stupid to realize where it came from.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  19. Boycott Apple by tuppe666 · · Score: 1, Insightful

    Jesus christ - if you want root on your device, get a device that is built to allow that. Don't bitch that a company closes fucking security holes in its software.

    I agree it is time to boycott apple for their anti-consumer practices than excusing their behaviour.

    1. Re:Boycott Apple by Anonymous Coward · · Score: 0

      Anyone who understands enough to do this already does it. I only buy android phones with unlockable bootloaders as do many of my friends, but we're all nerds. Most people don't care, they just want the new shiny thing.

    2. Re:Boycott Apple by Anonymous Coward · · Score: 0

      I agree - if you want root access to your device, and that functionality is important to you, then you should buy one of the devices on the market that allows unfettered root access to the device owner.

      I would take issue with the description of the practice as "anti-consumer," since the bulk of consumers don't give a toss about root access on the device - they are happy to allow someone else to manage that complexity for them. But certainly, if you need that root access - you should vote with your wallet.

      There are literally several devices on the market today that will allow you the root access you want!

  20. Yeah ... by tgd · · Score: 0

    Apple was fighting jailbreaking since iOS 1.0 because they knew in iOS 7 they were going to roll out an anti-theft measure.

    1. Re:Yeah ... by gl4ss · · Score: 1

      Apple was fighting jailbreaking since iOS 1.0 because they knew in iOS 7 they were going to roll out an anti-theft measure.

      well that's apple apologists for you.
      it was always about control. control of what gets installed and who gets money from it.

      the anti theft could just as well be another layer on the system. and should be.

      --
      world was created 5 seconds before this post as it is.
  21. it is a loaner by beefoot · · Score: 0

    Of course Apple can do things like that because the iphone you're holding is a loaner. It will be yours once it is dead.

    1. Re:it is a loaner by Anonymous Coward · · Score: 0

      Actually when it is dead you are supposed to return it to apple so they can recycle it.

  22. No app monopoly means no jail means no breaking by tepples · · Score: 1

    I guess Linux and Microsoft are both engaged in a 'war against jailbreaking' too, when they close fucking security exploits.

    Closing security exploits isn't a "war against jailbreaking" if there's no "jail", that is, if the operating system's publisher doesn't monopolize distribution of applications. Each GNU/Linux distribution has a central repository of applications, but PC owners are free to add more repositories or to install the compiler at no additional charge. Users are likewise free to add desktop applications whencever obtained for Windows on x86 and x86-64.

    Jesus christ - if you want root on your device, get a device that is built to allow that.

    What make and model of pocket-size tablet would you recommend for that? Most Android devices smaller than 7" are priced to be subsidized by a 2-year full-price cellular voice and data service commitment.

    1. Re:No app monopoly means no jail means no breaking by ChunderDownunder · · Score: 2
    2. Re:No app monopoly means no jail means no breaking by Anonymous Coward · · Score: 0

      Get any Android device out of contract, then. It may be hard in your country, but certainly it's not impossible.

    3. Re:No app monopoly means no jail means no breaking by hobarrera · · Score: 1

      And, again, what can I install on it besides android?

    4. Re:No app monopoly means no jail means no breaking by LateArthurDent · · Score: 1

      And, again, what can I install on it besides android?

      Well, with the nexus devices, you can easily unlock the bootloader by design, by rading adb commands. So you can install anything you want, even if it's not android. It's just that somebody has to write it.

    5. Re:No app monopoly means no jail means no breaking by Anonymous Coward · · Score: 0

      What make and model of pocket-size tablet would you recommend for that? Most Android devices smaller than 7" are priced to be subsidized by a 2-year full-price cellular voice and data service commitment.

      Wait, what? And the iPhone isn't? Google for the unsubsidized price of an iPhone 5 and compare it to the unsubsidized price of a Galaxy S4. You're talking only a $150 to $200 difference. If you're going to be paying full money for the year old tech of the iPhone 5, and you want/need root control, it's not much of a jump to get up to the G S4. Hell, you can even get a G S3 with most of the software capabilities of the S4 for roughly the equivalent of the iPhone 5(iPhone: ~$650 GS4: ~$800 GS3: ~$650). If you go with the subsidized price for the G S3 and the iPhone 5, you'll be getting off $100 CHEAPER by going Android ($50 vs $150).

    6. Re:No app monopoly means no jail means no breaking by Anonymous Coward · · Score: 0
    7. Re:No app monopoly means no jail means no breaking by mjwx · · Score: 1

      Anything you can get to run on ARM v7.

      You'll have to compile it yourself, find or write your own drivers... No-one said it was easy, we just said it can be done.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  23. I'm so sure they'll give it back by slashmydots · · Score: 1

    I'm so sure that after someone steals an iPhone, they'll give it back to the owner once they realize that it can't be used because it's in lockdown mode. In reality, they'll destroy it and/or sell it for parts. It won't be a deterrent either. A thief can't tell the difference between the versions so if it has an Apple logo, it's getting stolen regardless.

    1. Re:I'm so sure they'll give it back by kannibal_klown · · Score: 1

      I think their intended (pipe-dream) goal is...

      If they make a solidly secure iPhone + OS that makes it either impossible to root OR makes it impossible to remote-kill if it's stolen. Then A) your info about be safe and B) eventually the thieves will learn that the phones aren't worth stealing since they're remote-killed within a few hours / days. Eventually the demand would go down because who wants a phone that's going to be zapped within days / hours.

      Of course... this is all pie-in-the-sky. I really don't know how feasible it is to try to make a consumer package so secure that it's impossible to bypass.

    2. Re:I'm so sure they'll give it back by InvalidError · · Score: 1

      Simply making it known that new models can be remotely disabled when reported stolen will drastically reduce the resale value of unknown-source goods.

      As for dismantling for parts, everything has microcontrollers in them these days so it would not be too hard to add a crypto-microcontroller in the RF chipset, CPU, display controller, etc., and network them together to propagate kill switches when detected. This could also be used to detect and disable unauthorized components from stolen devices... or if they wanted to be more strict/evil about it, it could lock a given set of components together so they cannot be used with any other components without the crypto keys to re-program them.

    3. Re:I'm so sure they'll give it back by Anonymous Coward · · Score: 0

      Yebb, those thouch screens used in the iPhones are pricey and sought after components. Heck a thief could get 50 bucks or so for locked out iPhone.

  24. Re:Apple Product Resale Value = $0. by gl4ss · · Score: 1

    it still has resale value.

    as parts.

    which is how thieves are selling hem.

    --
    world was created 5 seconds before this post as it is.
  25. Apple killing second hand market by tuppe666 · · Score: 1

    So, call me a pessimist but this 'feature' seems to just be a gateway into requiring Apple to approve the resale of any piece of hardware they sell.

    Apple is killing the whole second market, and has been for sometime. It has even turned its computers into glorified disposable electronics.

    I has more than willing to hail this as part end of Apple...it seemed bad business practice(making a great product is the good business practice), but recent news has seen Apple offering what is essentially part exchange on their(not your) products. It makes sense to me that Apples final goal is to get you to hire the hardware. I would argue Apple is already doing this in America with its phones to great success.

    Its great anti-consumer lock-in.

  26. No, it can never make "perfect sense" by thaylin · · Score: 1

    Jailbreaking is a personal choice..Apple, nor any other company should be allowed to tell me what I can do with my purchased hardware. If I want to take a chance by jailbreaking my phone it should be up to me.

    --
    When you cant win, ad hominem.
    1. Re:No, it can never make "perfect sense" by joh · · Score: 1

      Jailbreaking is a personal choice..Apple, nor any other company should be allowed to tell me what I can do with my purchased hardware. If I want to take a chance by jailbreaking my phone it should be up to me.

      But how does your phone know it's you who's jailbreaking it?

      Watertight security even when you have physical access to a device has two sides: It protects your data (and may allow you to brick the phone remotely) but it also locks you out. It's very hard to have one but not the other.

    2. Re:No, it can never make "perfect sense" by thaylin · · Score: 1

      you assume that matters, it does not.. My PC does not know if it is me who is loading an OS or not but it still allows it do be done unless I lock it.

      --
      When you cant win, ad hominem.
    3. Re:No, it can never make "perfect sense" by mlts · · Score: 1

      HTC has one of the best compromises -- a signed nonce that is individual to each phone. Give the phone the unlock code, and the bootloader is out of the picture (although the device is likely still S/ON).

      HTC's devices have high walls... but turn the key in the lock, the drawbridge plops down allowing you entry.

  27. Re:Apple Product Resale Value = $0. by jmauro · · Score: 1

    If you're selling your phone you'd disable the lock feature, disassociate the phone from your account and sell it. It only hurts those who are selling stolen iPhones, not those who are legitimately reselling the device.

  28. Piracy by TheNinjaroach · · Score: 1

    The reason Apple cares so much about jailbreaking has always been about preventing piracy of apps.

    --
    I went to eat some animal crackers and the box said, "Do not eat if seal is broken." I opened the box and sure enough..
    1. Re:Piracy by west · · Score: 2

      Reminds me of overhearing a salesperson trying to convince a customer to put down the iPhone she was holding and buy an Android phone (I suspect higher commission on the Android).

      "And another advantage is you don't have to pay for any applications unlike the iPhone. It's really easy and everyone does it."

      I wept for Android developers.

    2. Re:Piracy by tysonedwards · · Score: 1

      I'd personally think that the concern with jailbreaking is that "When someone can have arbitrary code execute persistently on their phone simply by receiving a text message, or visiting a website" then there is probably an issue with security. Basically, an attack vector for a virus to infect what is essentially a computer.

      However, there is no reason why someone who installs their developer tools and loads a certificate onto their device indicating that it is for development shouldn't be allowed root access on said device.

      --
      Thirty four characters live here.
    3. Re:Piracy by mlts · · Score: 1

      Android has some very good anti-piracy mechanisms in place, and none of them depend on the presence/absence of root. Not just LVL, but encrypted apks that are individualized to the device on Google's end. Enable the forward-locked flag, and even adb's backup utility will just copy off the app's data and not the apk file.

      Depending on the security of one mechanism (the jail) is falling into the "all eggs in one basket" trap. iOS should be able to keep secure regardless if a user has a "#" prompt or not.

      This isn't to say that Apple's security doesn't work. I've yet to hear about SMS Trojan malware on iOS for example, but this is due to Apple's toughness as a gatekeeper with the App Store, something Google should consider doing, or at least offering a tier of thoroughly screened apps.

    4. Re:Piracy by rsborg · · Score: 1

      Reminds me of overhearing a salesperson trying to convince a customer to put down the iPhone she was holding and buy an Android phone (I suspect higher commission on the Android).

      "And another advantage is you don't have to pay for any applications unlike the iPhone. It's really easy and everyone does it."

      I wept for Android developers.

      Why weep - I thought the only valid business model (unless you're on the super-popular end of the power curve distribution) was ad-based apps.

      Has this changed recently? Have people been actually paying for their Android apps?

      --
      Make sure everyone's vote counts: Verified Voting
    5. Re:Piracy by west · · Score: 1

      > I thought the only valid business model (unless you're on the super-popular end of the power curve distribution) was ad-based apps.

      Ow!

      As a typical iPad owner who's spent $100+ on apps (not a lot, but still), I thought the stories of Android app-sales wasteland were overblown (that salesperson notwithstanding).

      You're telling me it's not?

      That *is* depressing.

      I guess for the sake of my customer experience, Apple's *does* manage to stop jail-breaking.

  29. Re:iphone anti theft makes no sense by Anonymous Coward · · Score: 0

    a; Malicious theft reporting, like the ex boyfriend gets the ex girlfriend's phone locked.

    1. You need the Apple ID to enable the lockout. If the ex has that they can already remotely wipe the phone and change the login.
    Your other two points are too retarded to merit a reply.

  30. This article is retarded by Anonymous Coward · · Score: 0

    The article asserts "Apple's new iOS 7 Activation Lock anti-theft mechanism which renders stolen handsets useless (even after wiping) unless the owner's Apple ID is entered relies on having a secure, locked-down OS".

    That assertion is entirely false. Activation Lock does require a secure pre-activation OS, but after that, it makes no difference.

    1. Re:This article is retarded by BitZtream · · Score: 1

      You are retarded.

      If its not secure (before or after) then a pre-boot/hypervisor style environment can be created that will let the software think its secure, when its actually already rooted.

      The assertion is entirely true in every meaningful way to anyone with a clue. Thats why you don't get it.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  31. iPod touch is the competition here by tepples · · Score: 0

    The problem is that if getting an Android phone out of contract is harder or more expensive or both than getting an iPod touch, Apple has won a new convert.

    1. Re:iPod touch is the competition here by BitZtream · · Score: 0

      You're just a whiny bitch.

      You don't want to pay for your device. You don't want to have a subsidized device. And you don't want to have a locked down device.

      And you want to whine about how you can't have these things at your whim.

      Either pay for what you want or shut up about it. The options are there. You don't get to dictate terms to the seller one you're one guy with silly terms no one gives a shit about.

      You are ignored because all 3 people like you don't make up enough of a market for anyone to care about.

      The rest of the world doesn't have some silly ideological stick stuck up their ass like you do.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    2. Re:iPod touch is the competition here by Anonymous Coward · · Score: 0

      Wait, which is it?

      I thought Apple was making overpriced garbage for a steadily-shrinking market segment.

      But now you're implying that Apple makes easier-to-find, cheaper devices that people are opting to buy instead of easily-available (and unlockable) Android devices, even when they come with the same limitations and fairly equivalent prices?

  32. Control by The+Cat · · Score: 1

    They want control of your hardware, and you are going to let them have it.

    And then you'll live in Apple's comfortable little cage, and they'll give you everything you need.

  33. Pro-competition by tuppe666 · · Score: 1

    I would take issue with the description of the practice as "anti-consumer," since the bulk of consumers don't give a toss

    That is why consumer groups, and governments woldwide are questioning Apples anti-comumer practices(in china for godsakes). Ignoring Apple I am getting increasingly aware of a battle of ecosystems(Microsoft's Term as they don't have a successful mobile strategy they have metro). I see some great looking phone OS's coming out from Ubuntu and Jolla, and the barriers for switching are getting higher.

    We have seen this before and even though Microsoft & Intel walk away with 70% Gross Margin, And Apple taking its Obscene Mark-up (I think they get kidneys). Its bad for consumers, bad for competition.

    1. Re:Pro-competition by BitZtream · · Score: 1

      That is why consumer groups, and governments woldwide are questioning Apples anti-comumer practices

      . I see some great looking phone OS's coming out from Ubuntu and Jolla, and the barriers for switching are getting higher.

      Between those two statements, you've shown utter disconnect from the rest of the world.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  34. There Is, and Never Has Been, a War by flanaganid · · Score: 2

    Apple's view towards jailbreaking can likely be summed up thus: Anyone is free to do whatever they want with their devices. Just don't expect support for unsupported things if it breaks. Found a security exploit in the OS? Thanks, we'll fix that right up.

    1. Re:There Is, and Never Has Been, a War by Anonymous Coward · · Score: 0

      Are you serious? Apple's view towards jailbreaking is this:

      Its depends on a weakness/bug which of course apple doesnt have.

      it allows functions they dont want you to have (xbmc on appleTV's is a good example).

      If i bought the device and want to run XBMC why cant i? Either you sold it to me and its mine, or you rent it to me and its yours. If its mine why cant i break it? If its yours why dont you replace it or such when it breaks on its own?

      On the orignal AppleTV's you can easily replace OSX with linux and get a decent XBMC box running. ATV2 and 3 are more difficult.

  35. That is a Lie by tuppe666 · · Score: 3, Informative

    Apple's view towards jailbreaking can likely be summed up thus: Anyone is free to do whatever they want with their devices. Just don't expect support for unsupported things if it breaks. Found a security exploit in the OS? Thanks, we'll fix that right up.

    Apples view is your a criminal breaking DMCA http://www.copyright.gov/1201/2008/responses/apple-inc-31.pdf

    1. Re:That is a Lie by BitZtream · · Score: 1

      Actively not asserting your rights under a law related to copyright is a good way to lose those rights. If they didn't make that statement, they'd put themselves in a weaker legal position should they ever need to go after someone breaking the law in some way they do care about.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    2. Re:That is a Lie by vux984 · · Score: 2

      No. That's true of trademark, not copyright.

    3. Re:That is a Lie by Anonymous Coward · · Score: 0

      Actively not asserting your rights under a law related to copyright is a good way to lose those rights. If they didn't make that statement, they'd put themselves in a weaker legal position should they ever need to go after someone breaking the law in some way they do care about.

      Watching people who've been brainwashed is fascinating. They always manage to come up with flimsy excuses to support their programming.

      Even if what you said was actually Apple's reasoning, it still implies they're supporting an unjust law. It means they'd be fine with jailbreaking, but support other aspects of the DMCA, which they want to protect by making anti-jailbreaking statements. Since there is nothing good about the DMCA, it's still Apple supporting an unjust law.

  36. Police State by tuppe666 · · Score: 1

    And then you'll live in Apple's comfortable little cage, and they'll give you everything you need.

    Except its not like that. They block alternative stores, access to replacement for Apple first party tools, because they want to take your money. Its about starving you of alternatives, and making you dependant on them....Like a Feeder.

  37. not about killswitch, but locking for owner by dutchwhizzman · · Score: 4, Insightful

    This is *not* about permanently disabling or blacklisting a phone. This is about making the phone unusable for the thief, but keeping it technically sound so the rightful owner could still use it if it has been recovered. It'd be trivial to blacklist an IMEI, just as it would be to circumvent the blacklist by reprogramming the baseband controller. It'd be trivial to implement a "self destruct" on the phone that could be triggered remotely, but then you'd have a phone that would need at least one chip replaced before it'd work again. This is about non-destructive locking and it relies on the OS not being rooted. They may find a way to do that on newer hardware, but as I understand it, all current hardware has been "owned" sufficiently for a software-only compromise to be sufficient.

    --
    I was promised a flying car. Where is my flying car?
  38. This blogger does not get it. Big time. by tlambert · · Score: 1

    This blogger does not get it. Big time.

    Jailbreaking did not come about for bypassing security or stealing iPhones. It came about because Apple wouldn't sell their GSM-capable phones on vendors other than AT&T, which meant that they also could not be used outside the US, which is the only place the things were being sold. So some Russian hackers came up with a jailbreak, but it wasn't so they could run arbitrary applications, it was so they could run a single application to rewrite the SIM vendor check, disable the carrier lock, and use the damn things on GSM carriers other than AT&T. T-Mobile in the US is one such carrier, and AT&T had demanded, and got, the carrier lock in exchange for letting Apple demand infrastructure changes to AT&T's network for things like "Visual Voice Mail".

    The vast majority of these iPhones were legally sold for the full price in the US; Apple put a limit on the number of iPhones you could buy, in order to thwart this thriving export business, because technically, the carrier networks are fairly fragile things, and the phones had not been certified to the carrier networks on which they were being used, or by the regional equivalent of the FCC -- hence they were called "gray market" iPhones in these countries.

    The benefit to Apple turned out to be immense, since with tools available for writing *an app* for the unlocking, it was relatively easy to classdump the objC files, and use the other APIs -- and apps were born. Steve actually didn't *want* Apps on the iPhone: he was deathly afraid of building another Newton, and the Apps he gave you were the ones he thought you needed, and no more. He didn't even want there to be ringtones that he and Jon Ivy hadn't approved (a pain in the ass when there are a small number of ringtones, 11,000 employees, and about half of them ate lunch in Cafe Macs in a two hour window).

    For six months, many engineers inside Apple, including myself, were jailbreaking our own phones, and using the hacker tools because there *was no* formal API or dev kit. I personally wrote an X Code plugin for making iPhone Apps using the hacker tools, and we passed it around internally at Apple.

    A startup was going to make a business of selling an SDK for the iPhone -- Apple _bought them_, and *that's* where Apple got their formal SDK, which they then went through and cleaned up APIs, and partitioned the data you could access from one app to another.

    Everything that people jailbreak the things for these days is to get around data partitioning or carrier usage restrictions, i.e. things like using the phone as a WiFi hotspot for a laptop, without paying additional fees or metered rates to the carriers for the greater laptop bandwidth usage capability, or to be able to do the carrier unlock to get around per-region carrier lock-in contracts that Apple had signed.

    The bottom line is that Apple could have avoided almost of of the hacking that happened fairly early on by not putting the carrier lock in the baseband firmware, which was a dumbass design decision based on the Samsung baseband chip having the feature implemented already, and having it up in user space in the commcenter program instead.

    And their device would be a lot less interesting, and Android might have followed that lead, and been a lot less interesting as well. And Apple wouldn't have made tons of money on Apps because there would be no AppStore.

    But as long as there are carrier locks, and more or less absurd carrier restrictions on bandwidth for phones s. hotspots (yes, Sprint, I'm talking to you), there will be jailbreaking. This is a DRM issue, and if jailbreaking is the only way to bypass DRM, then jailbreaking will happen.

    Bottom line philosophy lesson: There will always be people who say "These devices are made of atoms. I paid for these atoms. I own them. They will God Damn Well Do What I Tell Them To Do".

  39. Their device? So why did I have to pay for it? by Anonymous Coward · · Score: 0

    It isn't their device. It is mine.

  40. NSA by Anonymous Coward · · Score: 0

    Don't worry. Just call the NSA they know where your phone is all the time

  41. Re:thanks fanboys by omnichad · · Score: 2

    the fact that everything from the new mac pro to the ipad actively resists attempts to load any other operating system than the one its packaged with

    Not quite. The new Mac Pro still lets you use Bootcamp to install Windows or you can do a direct EFI install of Windows Vista/7/8 without Bootcamp. You just have to copy the files on the DVD to a GPT partitioned USB drive and the Mac will natively boot the installer.

  42. How long until this is broken? by gweihir · · Score: 1

    My guess is not more than 3-4 months. May also be mere weeks. Of course, this prevents the average nil-whit street thief from removing the lock, which may or may not be a good thing. In the worst case, said nil-whit will just have to sell the phones to an underground lock-removal services and consequentially will have to steal more of them to keep previous criminal income rates going. In the best case, this makes iPhone theft economically unattractive, which can still happen even if the lock is broken. If Apple did this right, breaking one lock does not help at all breaking others, and the effort needed is pretty high, like several weeks of CPU time. Cryptography used right can implement things like this. On the other hand, schemes like these have typically turned out to be defective in the past and far easier to break than intended.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:How long until this is broken? by Anonymous Coward · · Score: 0

      My original solution was a simple one - whenever firmware is loaded onto the phone, the firmware needs to be signed for a specific iPhone by Apple before it can be flashed.

      If Apple simply refuses to sign firmware for phones reported stolen, there's no way around it (to the best of my knowledge, there's no work-around for that that can exist without Apple's private keys). Therefore thieves are unable to wipe stolen phones and the original owner can just remote-lock them, rendering them useless.

    2. Re:How long until this is broken? by gweihir · · Score: 1

      Sounds good in theory, breaks in practice. One attack is on the signature-verification mechanism, letting it just install any firmware or one supplied by a "3rd party". There are several others.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  43. Complete Garbage by Anonymous Coward · · Score: 0

    Jailbreaking has next to nothing to do with this. The jailbreaking community is already helpless to crack Apple's activation process for the latest phones (making it impossible to restore to any firmware that Apple is not currently signing.) If Apple deactivates a phone and will not sign the firmware for that device, they are shit out of luck. There will be no pety phone thief with enough technical knowledge to be able to sign an activated firmware and deactivate the code that allows Apple to lockdown stolen devices.

    Their war on jailbreaking has to do with two things:
    1) DRM - They have an obligation to publishers to make it as hard as possible to pirate games on their platform.
    2) They are control freaks, and do not want people to be able to easily run things they do not want them to run for fear that it might sour their product's perception among the unknowledgable customer base. It is easy to jailbreak a phone, even with no real computer knowledge, and they don't like that.

    1. Re:Complete Garbage by Skapare · · Score: 1

      I disagree with #1 ... unless it's OPTIONAL for the owner.

      --
      now we need to go OSS in diesel cars
    2. Re:Complete Garbage by ThirdPrize · · Score: 1

      Lets face it, the original iPhone was all about running "web apps". Crappy bits of HTML running over the web. It is only because people started jailbreaking and writing their own apps that Apple opened up iOS to developers. Without the original jailbreakers Apple would be a lot, lot poorer.

      --
      I have excellent Karma and I am not afraid to Troll it.
  44. apple should give us run 3rd party apps and no net by Joe_Dragon · · Score: 1

    apple should give us run 3rd party apps and no network locking if they want to lock down ios like this.

  45. Jailbreaking vs Activation Lock by Skapare · · Score: 1

    These two things really are orthogonal. Activation Lock can be done even with jailbreaking. Apple could allow jailbreaking on a properly activated phone. But they won't and we all know that it is NOT for preventing theft. Activation lock can help the theft issue. It can also tighten down the jailbreaking (even though it is a different thing).

    St^H^HTim: I'm still not gonna buy your junk ... even less so now.

    --
    now we need to go OSS in diesel cars
  46. why not sooner? by Anonymous Coward · · Score: 0

    If this feature is so important, why didn't they introduce it sooner?

  47. Samsung manufacture components in America. by tuppe666 · · Score: 0

    You do realize WHATEVER you happened to have typed this silly post on ... it HAS FOXCONN components in it ... RIGHT?

    Except Samsung make CPU's is Austin, Texas. Ironically Apples inability to compete is because they are not in change of their manufacturing process, and are being outmanoeuvred...ironically by Samsung :)

    The fact is the iPhone is is a cheap Foxconn device get over it.

    1. Re:Samsung manufacture components in America. by Anonymous Coward · · Score: 0

      Hey moron... Apple designs their own chips and has them produced by various chip fabs (none of which is Foxconn, because Foxconn does not provide that service). One of those fabs is interestingly Samsung's. Foxconn prints certain boards and does the final assembly of parts (for hundreds of electronics companies, hence the GP's statement).

  48. What? by jon3k · · Score: 1

    How does this stop me from stealing a phone, plugging it into my computer and clicking "Wipe this Device" ? As long as their is a user accessible "recovery" feature (ie event of a password loss) I don't see what this prevents? We need IMEI blacklisting from ALL CARRIERS. It's simple, what's the problem? The only thing I can think of is that stolen phones means more sales from handset manufacturers so they just don't really care about theft, if anything it's DRIVING SALES!

    1. Re:What? by Anonymous Coward · · Score: 0

      Does wiping the phone change it's unique identifier? If not, then is it not simple for them to just not activate phones with blocked unique identifiers?

  49. RFID implants in Humans make perfect sense now by Anonymous Coward · · Score: 0

    Obama's plan to force ever newborn child to have a chip implanted in their skull was opposed by many people at first, but now we can reveal such a plan makes perfect sense, and you can all rejoice at your governments over-riding concern for your safety.

    Before the chip, it was easy for any-one to grab your child and claim it as their own. Now your child is 'locked-down' and clearly for the control of the legitimate 'owner' only. The problem with 'freedom' is it means the ability for people to abuse their freedom in all kinds of ways none of you want.

    True freedom means the freedom of the authorities to impose rules and regulations on the sheep they control in the name of freedom. Freedom doesn't mean the sheep free to go where they wish and do what they wish. Freedom refers to the 'farmer' obviously.

    If Obama is free, and Apple is free, then you are 'free'. If, on the other hand, you are given true freedom, how on Earth can Obama or Apple be free. You miss understand the concept of freedom. You are far too dumb and reckless to be given true freedom. Why do you think god has placed Obama and Apple over you? Are you against god's will?

    It is GOOD that only Apple determines what you can do with your IOS computer. It is GOOD that Obama gives Apple the freedom to control your freedoms. It is good that Apple is destroying the long standing principle that what you buy and own is yours to use as you wish.

    The fantasy analogy with Obama chipping people is sadly closer than you think. Obama had a young woman thrown out of school for refusing to be chipped. Obama's shills, with the approval of Slashdot's owners, ridiculed the woman for using 'religion' as the reason to object to the chip, but under US law, you are ONLY able to oppose certain school policies (in some states) by reason of religious beliefs. She had no choice. If she merely stated "I object to being chipped" she would have been thrown out the same day. By using the 'faith' argument, she was able to appeal the decision, and stood some chance of winning.

    In the UK, Blair has the kids fingerprinted in every school were the parents are too weak willed to put up resistance. In the USA, they are now scanning the eyes of pupils attending school. These Fabian programs (designed by people in the UK, and rolled out across the planet) are designed to 'groom' future generations for a massive expansion of police state powers. The 'locking-down' of the computers you own is just part of the same process.

  50. Hey, looks like Microsoft explaining by Anonymous Coward · · Score: 0

    Internet Explorer can't be removed because it is the core windows program that runs everything. And a gun's safety switch is required because the gun will not fire with that enabled. Apple sure doesn't like their stuff being used in ways they don't want them used. Now the phone can't be unlocked because it will allow thieves to use your phone (duh). Don't like it? Don't buy it - watch apple be pushed out of the market or buy an older model phone - it's not like anyone has a monopoly on anything with or without them.

  51. Plan workable by benjymouse · · Score: 1

    The broadcast just need to be signed using a private key. Every handset can hold the public part. If the private key is 2048 bits or longer you can assign the IDs sequentially if you prefer; faking the broadcast will be as hard as it is to break the 2048 bit key - which takes *a lot* of time for 2048 bit keys.

    --
    Reading slashdot one-liner: (irm http://rss.slashdot.org/Slashdot/slashdot).rdf.item | fl title,desc*
  52. I don't see it as a problem... by sirwired · · Score: 1

    Apple cares far more (as they should) for the people that buy their stuff new (and produce revenue for Apple) than they care for the economic well-being of secondary-market resellers. Which makes total business sense.

    Since buyers can purchase from internet-based businesses with no fear via the mighty eBay/PayPal or Credit Card chargeback, the only resellers that will be hurt will be those that were moving stolen equipment and will have their product source dry up. (Or sketchy cash-only sellers on Craigslist... lets just say they weren't that trustworthy of a source to begin with.)

  53. Another new tool to prevent resale! by dondelelcaro · · Score: 1

    While detering theft is useful for the consumer, how long until this tool is used to lock a device to a specific consumer, eliminating any resale value that the phone may have?

    --
    http://www.donarmstrong.com
  54. Can you jailbreak it *after* its been locked down? by mark-t · · Score: 1

    Because if so, locking it down isn't locked down at all, since it can be unlocked with a simple jailbreak.

    And if not, then I fail to see why Apple should be terribly worried about jailbreaking at all if it can permanently lock down a phone... since people who do jailbreak are voluntarily creating a situation where a thief could profit by stealing their phone where they otherwise would not.

  55. Re:for your protection by mark-t · · Score: 1

    When does Apple say it's for anybody's protection?

    It's their fee. Plain and simple.

    Apple is a for-profit company, not a charity. They are allowed to profit from charging for whatever they think that people might want, and they are reasonably entitled to charge as much as they believe the market can bear.

  56. And yet... by JBMcB · · Score: 1

    ... you can still buy Android phones. Even Samsungs. Go figure.

    --
    My Other Computer Is A Data General Nova III.
    1. Re:And yet... by Bert64 · · Score: 1

      Because samsung can afford to fight the lawsuits, but the threat of lawsuits severely deters any smaller and potentially innovative new upstarts from entering the market. It's likely that the number of phone vendors will only decrease as existing ones get bought out, and no new ones spring up.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    2. Re:And yet... by mjwx · · Score: 1

      ... you can still buy Android phones. Even Samsungs. Go figure.

      All that proves is that they're not very good at it.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    3. Re:And yet... by JBMcB · · Score: 1

      Possibly, but the argument is that Apple is preventing you from buying Android phones via patent lawsuits. Besides, there are other cell phone OSes you can use other than Android, if lawsuits are your concern.

      --
      My Other Computer Is A Data General Nova III.
  57. Logical falacy by Tough+Love · · Score: 1

    Apple's logical falacy in this case is called "bifurcation". Deconstruct the argument as: 1) Technological measures to combat theft are good 2) Effective technical measures can only be implemented using a locked down ROM. The bifurcation is the unproved claim that locking down a ROM is the only effective technological measure, when in fact there may be other possibilities.

    Moral of the story: be skeptical of any claim Apple makes, particularly when they earnest explain why a user's rights over their own purchased product should be abridged to the benefit of Apple.

    --
    When all you have is a hammer, every problem starts to look like a thumb.
  58. War against Jailbreaking == war on exploits by wavedeform · · Score: 1

    It's important to note that a "war on jailbreaking" is really a "war on exploits."

    I don't see how you can be against Apple trying to get rid of every exploit that it knows about. All these jailbreaks are really exploits that could be used to install bad things. You could argue that Apple should provide a way to install alternate firmware, but that's another discussion. (and one that will not get very far, I think)

  59. Re:iphone anti theft makes no sense by mlts · · Score: 1

    Jailbreaking is getting pretty tough these days. Even SHSH blobs are not useful, even if one saves activation tickets via Cydia or iFaith.

    Jailbreaking is becoming harder and harder. There was only one period of time when it was possible for the iPhone 5, and that time is long gone. Even activation tickets can't be restored (as per Cydia), so if one can't boot the phone into safe mode, one has to DFU restore and kiss the JB goodbye. To boot, known exploits to the top tier Dev Team guys are few and far between... and they have to ration them carefully, only presenting a JB after an OS and hardware release cycle.

    This gets old after a while. Things like being able to pull up an app to check which channels are in use via Wi-fi (a great help when setting up an AP) are impossible on iOS.

    Android has its warts, but to have complete control of a HTC device from the kernel on up, all it takes is registering for a dev account and getting an unlock code for that phone. Nexus phones are even simpler with "fastboot oem unlock". I prefer iOS's usability, and the fact that app quality seems a notch above Android's, but I much rather have control of the hardware I pay for.

    I wouldn't mind if Apple had a compromise, perhaps allowing registered developers to have a way to have a UNIX userland and a root shell, but I doubt that will ever happen.

  60. Use the EMEI instead by SplatMan_DK · · Score: 5, Interesting

    Actually there is a much simpler way to go about this problem (with theft) which would leave both Apple and the NSA out of the loop.

    Every cellphone is equipped with an EMEI number which works similar to a network MAC address. It is a unique hardware identifier for each phone - on a global scale.

    The EMEI is visible in the settings/control-panel section of any modern phone, and often also printed on either the box the device is supplied in, or a piece of paper inside. And it is used by every carrier on the planet as a part of the calling infrastructure.

    All the carriers would need to do, is to allow a "blacklist" of EMEI numbers, so when your device is stolen you simply report the EMEI to the carrier and they blacklist it. To prevent abuse each device could be supplied with an anti-theft key generated by the initial operator or by the manufacturer (so only the holder of both the EMEI and theft-key can have it blacklisted).

    The technical capability to do this already exists. Some operators have even implemented it in trials. Their reasons for not using it today is the fact that not all operators actually want to bust customers with stolen phones, and this system would be kind of pointless if only half the carriers implement it.

    Enter regulation. The political system could easily pass a law that forces all carriers to implement this kind of EMEI-based anti theft system. It would take little to design, it would work for every phone on the planet regardless of make/model, and it would include only known technology (just a few bits and pieces to extend the existing EMEI database plus a front-office system to operate it).

    Not implementing this is pure laziness (from carriers).

    - Jesper

    --
    My security clearance is so high I have to kill myself if I remember I have it...
    1. Re:Use the EMEI instead by twisted_pare · · Score: 1

      So stolen phones will be sold on ebay to countries without our regulations.

      --
      HTFU
    2. Re: Use the EMEI instead by Anonymous Coward · · Score: 0

      No Shit Sherlock!

    3. Re:Use the EMEI instead by smash · · Score: 1

      We already have per-telco IMEI number blocking in Australia. Given we only have a handful of major telcos and most of them share the same infrastructure - the first thing we do here as a matter of course if a phone is lost is call the telco and get the IMEI number blocked.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    4. Re:Use the EMEI instead by giuda · · Score: 1
    5. Re: Use the EMEI instead by Anonymous Coward · · Score: 0

      Already been done. I reported a phone as "lost" when it fell out of my son's pocket while riding his motorcycle. Someone found the phone and returned it, still intact. When I attempted to activate it on another account, I was told that it was marked as lost and could not be reprogrammed.

    6. Re:Use the EMEI instead by Anonymous Coward · · Score: 0

      I think you mean IMEI (International Mobile Station Equipment Identity) not EMEI.

      This is already in use in any carrier worth their salt. Trust me I'm in the industry.

  61. Nope by Anonymous Coward · · Score: 0

    It's not Apple's decision to make. If I buy an iPhone, and decide to jailbreak it, that's my choice, and my risk.

  62. Let the market teach Apple a lesson by Anonymous Coward · · Score: 0

    I hope consumers smarten up. When we buy hardware we should be able to do with it what we want. If we are smart enough to jailbreak our phones we should be able to do so. I don't care if the warranty applies or no. If a device is locked down, I won't buy it.

    I just hope the average consumer smartens up and stop the "sheep" mentality.

    I'm thinking about building a small EMP device LOL.. Google for Information Unlimited. They have some cool kits. With the proper waveguide even the small EMP
    device can take out a cell phone.. LOL.

  63. Wish I had mod points, but you're already +5 by rsborg · · Score: 1

    These are exactly the questions that need to be asked - or will have to be asked when iOS7 is gold.

    I do have a concern that this, while not crippling the 2nd hand market, might force Apple into the gatekeeper of resales - a position that is very powerful and corrupting.

    I hope they make it easy to facilitate resales, or I might consider alternatives for my next smartphone.

    --
    Make sure everyone's vote counts: Verified Voting
  64. Having to pay for a cellular radio I won't use by tepples · · Score: 1

    You don't want to pay for your device.

    I want to pay for a device. But I want to pay for the features of the hardware that I plan to use, not for the features of the hardware that I do not plan to use. The pricing of an unlocked iPhone vs. an iPod touch shows that a device with a cellular radio costs approximately twice as much as a device with no cellular radio. Because I don't plan to use a cellular radio, I don't feel I should have to pay for a cellular radio. But right now, it appears all 4" class devices sold in stores come with either iOS or a cellular radio or both. Why do only three people want no iOS and no cellular radio?

    1. Re:Having to pay for a cellular radio I won't use by bingoUV · · Score: 1

      The pricing of an unlocked iPhone vs. an iPod touch shows that a device with a cellular radio costs approximately twice as much as a device with no cellular radio.

      Highly incorrect. Pricing, not costing. The $27 Nokia phone with excellent reception shows that a device with a cellular radio costs approximately $4 more than a device with no cellular radio.
      iPhone is priced approximately twice as much as an iPod (assuming from your statement) because the market will bear the higher price on an iPhone. And that, in turn, is partly because "price" on phones in the US is hidden as it is subsidized by the carrier. It has no bearing on the cost of the radio, and other hardware is also different.

      Higher availability and wider choice in devices including cellular radio is exactly analogous to higher availability of processors with a floating point co-processor built-in. Best way to buy a processor without floating point co-processor is to buy one with the co-processor and not use the co-processor.

      --
      Bingo Dictionary - Pragmatist, n. A myopic idealist.
    2. Re:Having to pay for a cellular radio I won't use by tepples · · Score: 1

      The $27 Nokia phone with excellent reception shows that a device with a cellular radio costs approximately $4 more than a device with no cellular radio.

      I thought that because of patent royalties and greater complexity of processing, a cellular radio capable of data cost substantially more than a cellular radio capable of only voice and text. What am I missing?

      Higher availability and wider choice in devices including cellular radio is exactly analogous to higher availability of processors with a floating point co-processor built-in. Best way to buy a processor without floating point co-processor is to buy one with the co-processor and not use the co-processor.

      So what unlocked Android phone do you recommend as an alternative to a $299 iPod touch?

    3. Re:Having to pay for a cellular radio I won't use by bingoUV · · Score: 1

      If a phone can run a browser at reasonable speed with wi-fi, its main processor should be capable of running a browser well for cellular data too. The cellular chip itself, yes if you expect 3g and 4g support, would cost somewhat more. Nokia (Asha) and Samsung (without Android) are selling 3g enabled feature phones in my country for less than $130 / $100 respectively, so doubling the cost of a $299 device just because of adding a cellular radio doesn't look right. For major players, patent royalties roughly cancel out, though you're right that Android still costs that way. But Android would cost nearly the same in patent royalties whether or not it has cellular.

      I am not in the market for such a device, but you won't have any problem finding a phone for your requirement for $200, going by prices in my country. Samsung and HTC are good with bootloader support, so you could start there. Cyanogenmod will get rid of or work around any minor annoyances the device might present, if any, so no need to worry about every aspect.

      --
      Bingo Dictionary - Pragmatist, n. A myopic idealist.
  65. Android pod touch by tepples · · Score: 1

    Most Android devices smaller than 7" are priced to be subsidized by a 2-year full-price cellular voice and data service commitment.

    Wait, what? And the iPhone isn't?

    The iPhone is. The iPod touch isn't.

    Google for the unsubsidized price of an iPhone 5 and compare it to the unsubsidized price of a Galaxy S4.

    iPhone 5 is to iPod touch as Galaxy S4 is to what?

    1. Re:Android pod touch by Anonymous Coward · · Score: 0

      So you're bent out of shape because Apple is the only one who's built a small phone/tablet with no data connection, and using that somehow as a criticism of Apple?

      Seriously, fuck off. Go bitch at Samsung, HTC, Sony, Motorola, et. al. for not providing the cell-radio-less hardware you want.

  66. *fiddles with his Android* by Thetundraterror · · Score: 1

    Oh... were you guys talking?