Slashdot Mirror


Have Your iPhone 6 Repaired, Only To Get It Bricked By Apple (theguardian.com)

New submitter Nemosoft Unv. writes: In case you had a problem with the fingerprint sensor or some other small defect on your iPhone 6 and had it repaired by a non-official (read: cheaper) shop, you may be in for a nasty surprise: error 53. What happens is that during an OS update or re-install the software checks the internal hardware and if it detects a non-Apple component, it will display an error 53 and brick your phone. Any photos or other data held on the handset is lost – and irretrievable. Thousands of people have flocked to forums to express their dismay at this. What's more insiduous is that the error may only appear weeks or months after the repair. Incredibly, Apple says this cannot be fixed by any hard- or software update, while it is clearly their software that causes the problem in the first place. And then you thought FTDI was being nasty ...

410 comments

  1. Solution! by Anonymous Coward · · Score: 5, Insightful

    Sell your bricked piece of shit and buy an Android phone, which does not have this problem.

    Solved.

    1. Re: Solution! by Anonymous Coward · · Score: 1

      Sell your iPhone and buy a cheap ass phone that doesn't spy on you and cost you 70+ dollars a month. Then spend the extra money on things that really matter rather than planned obsolescent technologies designed to dumb you down and make you a sheep to the ruling elite.

    2. Re:Solution! by Anonymous Coward · · Score: 1, Insightful

      You mean "cancel your mobile phone service entirely"

      Android's have far worse privacy and security problems, I would never let one of those things on my network.

      That said, this is obviously designed to prevent stolen phones from being "fixed" and resold. It seems a little bit heavyhanded but might simply be a case of iOS uploading firmware to a part and because the replacement part is not the right part it bricks that part, thus bricking the entire device.

    3. Re:Solution! by oh_my_080980980 · · Score: 5, Insightful

      RTFA ass-hole:

      “I was in the Balkans covering the refugee crisis in September when I dropped my phone. Because I desperately needed it for work I got it fixed at a local shop, as there are no Apple stores in Macedonia. They repaired the screen and home button, and it worked perfectly.”

    4. Re:Solution! by Penguinisto · · Score: 2, Insightful

      Dude in the Balkans could have his phone repaired at an Apple shop when he got home, right?

      Not trying to be a dick or anything, but honestly - using a gray-market security-related part *should* get that result. If my device is stolen, I'd want that to happen - if only to prevent some schmuck from plugging in something with hacked firmware to bypass the fingerprint sensor.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    5. Re:Solution! by Maritz · · Score: 5, Funny

      Go back and complain to the company that botched the repair and stop complaining about the company that made your OS more secure.

      Yeah. A phone that won't boot is pretty fucking secure.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    6. Re:Solution! by MightyMartian · · Score: 1

      All Androids? Really? Care to cite evidence? Or are you just making shit up

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    7. Re:Solution! by Penguinisto · · Score: 2, Informative

      False analogy: Lotus didn't exploit security vulns to run. The dodgy fingerprint sensor did.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    8. Re:Solution! by Anonymous Coward · · Score: 0

      Making shit up is much easier. Both companies have walled gardens, and do not give a damn about your privacy, but I prefer Android walled garden. I like at least some potential control over my phone (rooting, bootloaders, fdroid). If the consumer cared about privacy, there would be a massive kickstarter running BeOs, or Linux, or some other opensource OS.

    9. Re: Solution! by Anonymous Coward · · Score: 0

      Its the new irock

    10. Re:Solution! by Eric+Freyhart · · Score: 1

      Yeah, I'd love to replace my phone which is protected by a company concerned about protecting my data and replacing it by one that doesn't give a crap about securing my data.

      Heheeh! Just what Apple wants you to think. They protect your privacy! WOW! If you only knew...

    11. Re:Solution! by Anonymous Coward · · Score: 3, Insightful

      a phone that wont boot when a different fingerprint device is installed is working properly

    12. Re: Solution! by Anonymous Coward · · Score: 0

      [citation needed]

    13. Re:Solution! by Anonymous Coward · · Score: 5, Insightful

      This should have failed gracefully. The phone should have de-functioned the fingerprint scanner to just a home button, and asked for a PIN/password, which all iPhones pre-5S have been able to do without issue. Forcing the device to an inoperative state because one component was replaced is not ethical, nor needed.

    14. Re: Solution! by Falos · · Score: 1

      [assertion needed]
      [overeager apologist detected]

    15. Re:Solution! by Anonymous Coward · · Score: 0

      Or like anyone ACTUALLY security conscious does: They weren't even using the fingerprint sensor at all.

      Especially with your fingerprints NOT being considered a password and legally able to be taken from you at will by law enforcement even in the nicest of countries, folks that are security-conscious use PIN codes instead of the fingerprint sensor.

      So it's likely he wasn't using the 'security' the sensor would provide at all.

      - WolfWings, too damn lazy to log into too many many websites in too damn long.

    16. Re: Solution! by ichthus · · Score: 1
      --
      sig: sauer
    17. Re:Solution! by Anonymous Coward · · Score: 0

      The only problem is that your premise is false in the first place. The whole "DOS isn't done until Lotus won't run" has it backwards.

      People didn't buy PCs to run DOS, so that they could then find the most convenient spreadsheet to run on it -- people bought PCs to run Lotus!

      If DOS didn't run Lotus, it'd have been DOS that people wouldn't buy, not the other way around. MS had to go to great lengths to ensure Lotus compatibility if they wanted anybody to buy their OS.

      Didn't I just see a story that Windows 10 has finally reached the same market share as Windows XP? Do you know why so many people are running a 15-year-old OS? It's because nobody gives a shit about their OS. And that's with probably well over 99% of all software that runs on XP also running on Win10. Can you imagine how few people would upgrade their OS if it didn't run the most important program that they use? Probably zero.

      dom

    18. Re:Solution! by Anonymous Coward · · Score: 0, Insightful

      Because guy BROKE his own phone, then repaired it with NON STANDARD parts that do NOT work with the encryption module.

      It's like getting a master-lock rekeyed in a back alley deal and then complaining to master-lockwhen the non-standard tumblers some back alley guy in the Balkans shoved in there don't work.

      This story is more about a guy doing stupid ass shite even though he knew there was a better way, he thought he'd "risk it" and try a work around.

    19. Re:Solution! by Anonymous Coward · · Score: 0

      Shut up you God Damn Apple Fanboy!

    20. Re:Solution! by Anonymous Coward · · Score: 4, Interesting

      Just to let you know... as someone IN the advertising industry targeting these devices. iOS sends consistently more data than android. Android is kindof hit or miss on data depending on where its coming from. iOS doesn't miss all that often.

    21. Re:Solution! by l.a.rossmann · · Score: 5, Informative

      I had someone email me about this nine months ago, and I suggested he go to an Apple Authorized service facility.

      He replied and said the nearest one is a six hour, $1200 flight away.

      No home button for him I guess.

    22. Re:Solution! by Anonymous Coward · · Score: 1

      Dude in the Balkans could have his phone repaired at an Apple shop when he got home, right?

      So the iPhone ecosystem only works in places with Starbucks? Good to know for anyone basically going anywhere besides a major metropolitan area. Might as well just say iPhones are toys and you shouldn't rely on them for communication.

    23. Re: Solution! by Adriax · · Score: 1, Troll

      I didn't know the iphone was designed so ass backwards.
      Usually it's the security system that polls the sensor and compares the data to what it has recorded. But you're telling me a dumb sensor is actually delegated the task of pulling fingerprint data from encrypted storage, comparing it to its sensor data, and telling the security system to unlock?

      You would have made a horrible speakeasy guard during prohibition. Asking the would be patrons if Swordfish is the password they know and opening the door if they say yes.

      --
      I don't suffer from insanity, I enjoy every minute of it!
    24. Re:Solution! by Carewolf · · Score: 1

      False analogy: Lotus didn't exploit security vulns to run. The dodgy fingerprint sensor did.

      Lotus was a securty vulnerbility, especially to Microsoft.

    25. Re:Solution! by mongothesecond · · Score: 1

      Shipping doesnt work?

    26. Re: Solution! by mongothesecond · · Score: 0

      I'd agree, except that this policy is probably in the EULA, and Android apps are insecure. I hope you dont need to do anything like banking on your cheap ass phone. Yes, Apple should have less irritating policies. No, the alternatives arent worth doing business with.

    27. Re:Solution! by Anonymous Coward · · Score: 0

      I work for a security company that shall not be named. Of over 7 mil Android apps monitored in various app stores, over 450,000 score as having some kind of malware or adware. Of over 1.1 mil IOS apps monitored in various app stores, two (2) are scored as malware or adware.

    28. Re:Solution! by Anonymous Coward · · Score: 0

      Except it does boot. It only fails at software upgrade time.

    29. Re:Solution! by HornWumpus · · Score: 0

      Substitute 'bean counters' for 'people' in your post and it is accurate.

      --
      John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
    30. Re: Solution! by Anonymous Coward · · Score: 0

      What a lame article. No copies of the pictures. I should fix it. At least links to the torrents.

    31. Re:Solution! by Mal-2 · · Score: 1

      If Microsoft really wanted to kill XP, they'd allow XP users to upgrade to 10 for free. Same goes for Vista. Of course that would require Aero-capable hardware. I had a bitch of a time getting 7 to run on a Compaq nc6220. No way it's going to run 10, the 915G chipset just isn't up to the task. So the portion of the market sticking with XP because they have pre-Aero-worthy video will not be helped by free Windows 10, but everyone else could be.

      I use DisableWinTracking on my Windows 10 systems, along with Classic Shell (although the current interface isn't *awful*, I just prefer it to look/feel like 7), killing the Cortana entry field, turning off the Favorites and Recent functions of Explorer (I don't want to have to be that vigilant about hiding "compromising" files viewed), and using a registry tweak to make OneDrive disappear from Explorer. (It's already set up not to run, so it doesn't work anyhow. Why show it?)

      Other features of Windows 10 are actually really nice. The extended info for file transfers is one of them. The graph gives a pretty good idea what's going on, and when things might have slowed down or recovered from slowing down. Text scaling and anti-aliasing being handled separately for each monitor is also really nice, especially if you have a large but low-PPI television next to a normal monitor. If you're wondering what it does when a window spans monitors with different text settings, it scales the whole window for whichever monitor has the largest piece. It also has multiple desktops that are easy to swap between (yeah, I know Linux has had this since forever), though I don't use that all that much with four monitors.

      I have had *zero* problems with applications that ran under Windows 7 not wanting to run under Windows 10. Getting 10 to run correctly on my dual video card setup was a bit of a pain, but it was a bit of a pain under Windows 7 as well, and the trick is exactly the same. (Remove one card, get everything working right, then put the second card back in.)

      --
      How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
    32. Re:Solution! by AmiMoJo · · Score: 2

      Even if it's a genuine Apple fingerprint sensor, the phone still bricks itself. The sensor has a code, and if it changes your phone becomes a paperweight unless Apple waves its magic wand over it.

      In other words, fail to pay Apple for the repair and your expensive phone commits suicide.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    33. Re:Solution! by rtb61 · · Score: 1

      Smarter purchasing makes more sense. Silly to go looks and I don't know 'er' higher price for ego, when the device will not be serviceable in the location you intend to use it, that is quite simply a silly purchase. So using the car analogy, yeah buying a car that can only be serviced overseas, after you ship it there and it maybe gets there, they repair and ship it back at your expense and it maybe gets back to you. But wait it doesn't stop there, we all know the syndrome of the missed a fault and it still doesn't work properly and you have to go through that all again, by this time having spend maybe three times the price of a new phone that can be serviced locally, sticking with that phone that you have already bought to maintain phone services through the months of failed attempt at phone repair.

      --
      Chaos - everything, everywhere, everywhen
    34. Re: Solution! by davester666 · · Score: 1

      Yes, Google has no interest in monitoring who you are and what you do on your phone.

      In unrelated news, Google just rejected/won't permit Samsungs ad-blocker app in the Google Play store.

      --
      Sleep your way to a whiter smile...date a dentist!
    35. Re: Solution! by Darinbob · · Score: 1

      Nicer user interface though I think. I never liked the plain old boring icon look of iPhone with no widgets or tiles.

    36. Re: Solution! by Darinbob · · Score: 1

      Who can afford 70+ dollars a month on a phone?

    37. Re:Solution! by Anonymous Coward · · Score: 0

      True, just watch the Apple shills come out to defend the indefensible, I could name them without looking.
      Super Kencunt first.

    38. Re:Solution! by Anonymous Coward · · Score: 0

      In a world where you were using facial recognition for authentication, would you then want your computer to fail booting because you replaced your webcam?

    39. Re:Solution! by Darinbob · · Score: 2

      Undoubtedly this was not done for security reasons, but to ensure their control over the phones and to make sure the "geniuses" keep their job.

    40. Re:Solution! by Grismar · · Score: 1

      Maybe don't go to countries that don't have service centers for hardware you depend on? Or rather, bring hardware you depend on from a brand that gets service in the countries you go to? (Or doesn't require the guy doing the repairing to buy into the brand's whole marketing bullshit scheme, so anyone could do the repairing?)

    41. Re:Solution! by Anonymous Coward · · Score: 0

      And deal with Android security, where it's trivially easy to steal users' fingerprint data and thus forge the user's consent for purchases etc.

    42. Re: Solution! by guruevi · · Score: 1

      The fingerprint reader is part of the encryption stack, it's built in chip does things so your average law enforcement agency can't just intercept or fake a true/false signal.

      A counterfeit key reader is a security risk and when the encryption keys rotate (the software update or time triggers) it's built in keys won't match.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    43. Re: Solution! by Anonymous Coward · · Score: 0

      Don't ruin it for him. He's trying to justify the price tag on his phone

    44. Re: Solution! by Anonymous Coward · · Score: 0

      People still use Verizon, don't they?

    45. Re:Solution! by superdave80 · · Score: 2

      So, why couldn't it just disable the fingerprint input and require the backup passcode? Why brick the whole damn thing? Oh, right, Apple wants even MORE of your money...

    46. Re: Solution! by Anonymous Coward · · Score: 0

      Doesn't mean the EULA is legal. In many places in the world there are limits to what can be put in a contract.

    47. Re: Solution! by Rosyna · · Score: 1

      Why did you post a link about something that occurred when the Adobe servers were breached and people used those same credentials with iCloud?

    48. Re: Solution! by Anonymous Coward · · Score: 0

      Yes, otherwise anyone could hook up a device that would circumvent the security.

    49. Re: Solution! by Anonymous Coward · · Score: 0

      9 out of 10 pictures of JLaw's anus agree!

    50. Re: Solution! by TheReaperD · · Score: 2, Insightful

      When I worked at Apple, I was astonished at what they charged for parts, a motherboard that I could have gotten an equivalent (but, not compatible) board brand new from ASUS for around $60-90 Apple was charging $695 for a refurbished board! Apple was charging a $600 premium for the part because they knew you couldn't get it anywhere else. Fuck you Steve Jobs!

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    51. Re: Solution! by TheReaperD · · Score: 1

      I think your last statement summed up this article and the iPhone.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    52. Re: Solution! by TheReaperD · · Score: 1

      It reminds me of the whole attena fiasco with the iPhone 4 and Apple's response: "You're holding it wrong ". Summs up everything about the modern Apple company.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    53. Re: Solution! by TheReaperD · · Score: 1

      Crap. This was supposed to be attached to a different comment. I give up for the night.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    54. Re: Solution! by Anonymous Coward · · Score: 0

      You nasty little piece if s--t, do you even know what you're talikg about? If they break the EULA then it's their problem. I once had only Nexus devices in my household, then Android 4.3 came and performance decreased 30%, and then Android 5 came and bricked my tablet and neither Google nor Asus cared, and then my Chromecast stopped working 24 h after I purchased it and Google said they cannot help if I upgraded my router version to the latest official version. You should at least try the Apple ecosystem, just so you can criticise it better if nothing else. You might find out that "freedom" can also be defined in terms of the extent to which you can use a device, rather than how much you can tinker with it.

    55. Re: Solution! by NicBenjamin · · Score: 2, Insightful

      Have you ever worked outside the desktop computer industry? Like, at all? Computer parts tend to be incredibly cheap because the Chinese are competing with the Koreans to make an extremely standard part for as little money as physically possible.

      Everywhere else this is not the case. Either you have to pay for your own manufacturing plant to get the correct part, or you have to cannibalize it from something that used that exact part. The manufacturer will always charge you the "I just spent $500 million setting up a plant in Sichuan" price even if they are cannibalizing.

      Cars, laptops, cell phones all work that way. The parts are worth much more then the entire product, particularly at the manufacturer's price. OTOH, it's almost always possible to make the same desktop Dell is selling for less then Dell is charging by using commodity desktop parts.

    56. Re:Solution! by NicBenjamin · · Score: 1

      So, why couldn't it just disable the fingerprint input and require the backup passcode? Why brick the whole damn thing? Oh, right, Apple wants even MORE of your money...

      Because if they did that, and some asshole nabbed your phone from the train station, you'd be freaking out that Apple made it so easy for him to pawn the thing simply by removing the sensor and swearing to "I just stole this" discount was actually a "the touch sensor broke" discount.

      It wasn't that long ago that half the stories on Slashdot were about how nobody would help people who had their phones stolen. The headline in that middle story is actually US Mobile Carriers won't Brick Stolen Phones.

      Don't get me wrong here. I;m not saying they shouldn't have some solution to the issue that does not involve bricking phones. But if your beloved Slashdot makes a point of repeatedly posting stories about how evil the cell industry is for "not bricking" phones it has reason to believe are stolen, then complaining when they do brick phones they have reason to believe are stolen is a bit silly.

    57. Re: Solution! by Anonymous Coward · · Score: 0

      There is no part of the world where US rule does not reach. And thanks to TPP and TTIP the corporations' will is soon to become international law.

    58. Re:Solution! by Anonymous Coward · · Score: 0

      The key here is apple-sheep want their phone to work like an android, but then go and pay apple to screw them over, and are dismayed when they actually get what they paid for. Want an apple? Sign on for the full ride. No variations and no one gets off. I find it really difficult to have sympathy for anyone stupid enough to buy an apply knowing full-well that apple pull this kind of act on a regular basis, and then are surprised when it happens.

      You're not buying a phone when you buy apple. You're buying a legal contract to use their service on a suck-it-up-or-leave basis.

      Sure, apple was a pretty good deal once... I think that kind of started to disappear roughly somewhere around Honeycomb.

      Now even iTunes works better on an android.

    59. Re: Solution! by Anonymous Coward · · Score: 0

      Not quite. It's actually much closer to a bouncer who has the password written on a piece of paper and stored in a lockbox and when someone comes to enter the club he opens the box to check their password against the piece of paper. Fixed that for you!

    60. Re: Solution! by Anonymous Coward · · Score: 0

      Ha! You don't even know what you're talking about: We never say "sheep", we prefer "lemmings."

    61. Re:Solution! by Plumpaquatsch · · Score: 1

      Even if it's a genuine Apple fingerprint sensor, the phone still bricks itself. The sensor has a code, and if it changes your phone becomes a paperweight unless Apple waves its magic wand over it.

      In other words, fail to pay Apple for the repair and your expensive phone commits suicide.

      IOW, it isn't bricked a all.

      --
      Of course news about a fake are Fake News.
    62. Re: Solution! by Plumpaquatsch · · Score: 1
      --
      Of course news about a fake are Fake News.
    63. Re: Solution! by lucien86 · · Score: 1

      Hate to tell you this but Apple products are also mass produced. They use the cheapest standard parts just like everyone else, they just sell them for more. They know that most people who buy Apple products are rich and stupid by definition - and inherently gullible..

      --
      Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
    64. Re:Solution! by Plumpaquatsch · · Score: 1

      RTFA ass-hole: “I was in the Balkans covering the refugee crisis in September when I dropped my phone. Because I desperately needed it for work I got it fixed at a local shop, as there are no Apple stores in Macedonia. They repaired the screen and home button, and it worked perfectly.”

      Well, dude in Macedonia should have checked into the apple.com/mk site (or googled for "apple macedonia"), click on "Support", click on the link "Apple Authorized Service Providers" under "Contact" down at the bottom of the page, and search from there (there only seems to be one in all of Macedonia anyways - it's about a hundred miles across). IOW just like you do in any other place on Earth where you can buy Apple products.

      --
      Of course news about a fake are Fake News.
    65. Re:Solution! by Keith+Henson · · Score: 1

      So if a mugger takes your iPhone, they need to cut off yer finger to go with it. Ick.

      --
      End MGM. Get prospective parents of boys to Google: Men do complain
    66. Re:Solution! by djinn6 · · Score: 1

      So in the time between their removing the sensor and the next OS update bricking it, they're free to pawn it?

    67. Re: Solution! by TheReaperD · · Score: 1

      At the time I worked there, ~2008-2010, Apple was using crappy Taiwanese manufacturers mostly, including one Dell had dropped due to quality issues. The rest were the exact same companies that Dell, HP and IBM were using at the time. The only difference was the small modifications Apple was doing so the commodity parts could not be used to repair systems. There were a handful of actual different designs, such as the iMac motherboards at the time (with their GLOD issue; which Apple knew was a design flaw with the capacitors and hid it until the warranty ran out) and the whole G4 Cube was was interesting but an final design clusterfuck (ANY product with a 37% DOA rate is a complete failure and should be recalled).

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    68. Re: Solution! by NicBenjamin · · Score: 1

      I think you completely missed the point:

      A Ford's bumper isa not actually very expensive to produce in massive volumes. If you were making 1 Billion of them a year your cost would be in the $10 range. But you're not making that many of them. So a) your cost is nowhere near $10, and b) you'd be a fool to charge $10.

      You actually see this on the PC Side all the time in laptops. The chips are commodity-produced, but the case tends to be highly customized, so a board that has the same chips as something that would cost $5 on a desktop almost always cost Apple-level prices.

      Which makes sense, given that Apple has not produced a machine that uses the equivalent of desktop components for literally years.

    69. Re: Solution! by NicBenjamin · · Score: 1

      I don't think you understand what I mean by commodity parts. A commodity part is one that you can replace with parts from any of several manufacturers and/or product lines without changing anything else. At all.

      In 2010 the only machine Apple made which used any commodity components whatsoever was their desktop line, because that was pre-Trash Can Mac Pro. Everything else was (at a minimum) custom-fit to a very specific and exacting case design. Now it's all custom-engineered high-end laptop parts, and you don;t get those cheap from any PC Manufacturer.

      Let me put it to you this way:
      I explicitly brought up the dreaded car analogy. A bumper is a couple pounds of specialized plastic that probably costs $10 to make, and costs your ass $150 to buy new from the manufacturer.

      Yes, by the standards of a geek whose used to buying desktop parts that are totally interchangeable this is a total rip-off, because if Ford open-sourced the design some Chinese guy would make it for the aforementioned $10. But that doesn't mean said geek should act surprised when the exact same principle appears in the computer industry.

    70. Re: Solution! by lucien86 · · Score: 1

      I hate to tell you this but Apple are not a small bespoke company. If anything Apple phones are produced on even bigger scales than PCs - hence their per unit costs are about as low as they can be. This is especially true given the very limited number of different Apple models.

      The common mass production rules don't really apply to silicon IC products anyway. The three biggest costs in chip production are the cost of the wafers, the purchase costs of the production systems, and the worker cost. Once you hit a base limit after setup and dev costs, further costs start to scale fairly linearly with production size.. So producing more doesn't reduce the cost per unit by that much. This is because IC plants work as many small production lines (or workstations) that run in parallel.
      In products like Apple the production costs are usually only a small part of the overall cost - about $100 to $200 out of say $500 to $600 for an iPhone 6.

      --
      Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
    71. Re: Solution! by RockDoctor · · Score: 1

      and cost you 70+ dollars a month.

      Eh, what?

      I've never owned an iPhone, so WTF is that about? Or is it something for your phone contract?

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
    72. Re: Solution! by TheReaperD · · Score: 1

      I'm sorry but, when you come to electronic components, mostly everything is "commodity" as the manufacture process is nearly identical for all vendors with just little tweaks and changes for each of the major brands. No major brand uses a component that is the same as another. This is true whether it's desktops, laptops, phones or tablets. The cost of any custom tweaks is minimal for virtually everything except parts that only you use that require specialized fabrication (ie: if Apple had went ahead with having sapphire screens on their iPhones). Apple uses the same general batch of manufacturers that most of the industry does to manufacture their equipment so, I hate to break it to you, but their equipment is not of any higher quality than Samsung, HP, Lenovo, etc.; you just pay a lot more for it.

      Apple during those desktop days still played a lot of dirty tricks such as not allowing non-certified hard drive as the boot drive. The difference between a standard PC hard drive and the "Apple Certified" hard drive? It said it was "Apple Certified" in the firmware variables yet cost 2-5X as much. Modern iPhones should be the cheapest to manufacture of all the premium phones on the market as they have the largest single-design unit orders of any manufacturer and tend to use a lot of technologies and processes that are slightly out of date and thus not used by the other premium brands. Though the manufacturers don't release their costs, the iPhone, according to most standard market economics, should be quite a bit cheaper to manufacture than a Samsung Galaxy of the same generation. Apple has just been in the position, envied by their rivals, of being able to get their customers to pay a high-price premium for equipment that is either equal or inferior to their competition.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    73. Re: Solution! by NicBenjamin · · Score: 1

      I haven't said anything about build quality in this thread. That's a straw man you're insisting on bringing up.

      Hell, your entire argument is a straw man. Any price list of replacement parts from any manufacturer is gonna sound ridiculous. Because the nature of manufacturer-sourced replacement parts is that they cost a fucking arm and a leg. For desktop components you might be OK, but Apple doesn't use those.

      I have no fucking clue what you're talking about with "Apple certified hard drives" and I've used Macs since '92. There was a time a Mac HD cost significantly more then a PC one, but that was because Macs used technically superior, but much more expensive, SCSI.

    74. Re: Solution! by NicBenjamin · · Score: 1

      Dude,

      Are you planning on making a counter-argument that includes something that is not a straw-man?

      I didn't compare Apple to a tiny company, I compared it to Ford. And I explicitly said that the mark-up on this kind of part was hideous. If you manage to post a response that is anywhere near as untethered from my actual argument ("In real life for-profit companies that make proprietary parts always charge a huge mark up.") I will be forced to conclude you are agreeing with me and are simply too stupid to notice.

      BTW, Apple doesn't produce chips. They buy chips, and they design, but they don't produce them. Therefore any argument based on the price of chips make about as much sense as claiming Ford shouldn't raise prices when steel goes up because the miners are still getting the same money.

    75. Re: Solution! by lucien86 · · Score: 1

      My only point is that Apple makes far bigger mark ups than most other tech companies, and on top of that they already heavily overcharge for repairs, parts, and servicing. Creating a closed shop for servicing simply closes the loop further.
      In the future what Apple really want to do is to stop people from even doing stuff like changing out dud batteries, forcing them to use Apple servicing for that as well..

      BTW : Sorry if previous post was a bit rambling - did write it at three in the morning.. :)

      --
      Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
    76. Re:Solution! by daedalus2097 · · Score: 1

      Bricking a phone that's reported stolen and bricking a phone that still 99% works and is still in its original owner's possession are two very different things.

    77. Re: Solution! by daedalus2097 · · Score: 1

      Well then all it has to do is stop *that* component from working, and fall back to PIN unlocking. Simple.

    78. Re:Solution! by Anonymous Coward · · Score: 0

      Dude in the Balkans could have his phone repaired at an Apple shop when he got home, right?

      Not trying to be a dick or anything, but honestly - using a gray-market security-related part *should* get that result. If my device is stolen, I'd want that to happen - if only to prevent some schmuck from plugging in something with hacked firmware to bypass the fingerprint sensor.

      Did you completely skip over the part where he said he was a reporter and needed it for work, or did you fail to comprehend it?

      I know you said you weren't trying to be a dick or anything, so it comes naturally to you?

    79. Re:Solution! by david_thornley · · Score: 1

      Very interesting. Thanks for sharing.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    80. Re:Solution! by NicBenjamin · · Score: 1

      Bricking a phone that's reported stolen and bricking a phone that still 99% works and is still in its original owner's possession are two very different things.

      Like many things, this is clear in hindsight.

      In the actual world of linear time, where we are currently forced to live, we whined our asses off that companies weren't taking cell phone theft seriously. We still have the right to complain they're taking it too seriously, but a lot of people on this particular thread are acting like only a sociopath could possibly think breaking phones with broken physical security features is a good idea. And that's stupid. We insisted something was so important that the world would end if it wasn't maximized, and now that we realize that was a wee bit hyperbolic we're blaming the poor fucks who took us at our word.

      As for this policy, this is fucking Apple. They make $Billions convincing people the Apple walled garden is the only place anyone will ever need. They will do something to respond. I suspect it will be something along the lines of "if you get error 53, come into the store so we can fix it for a fee." The fee is unlikely to be $300. I'd guess $50.

    81. Re: Solution! by NicBenjamin · · Score: 1

      Have you ever tried to replace a part for a PC Laptop from the manufacturer?

      I'm not talking about the standardized electronic components (ie: RAM, HD), I'm talking about the stuff that's either a custom board or custom plastic.

      Those price-lists are just as bad as Apple's, and it's generally virtually impossible to work your way around them through the company because you only contact them via phone and nobody at the Call Center in Bangalore has the authority to say "ok, this was our fuck-up, we'll code it in the system this way and it'll cost $20." OTOH I have gotten repairs from Apple, of daughter-boards to the main board, for $20. I have had them store my machine overnight, while it backed up to an external drive, because that was the only way to save my data from a bad boot sector. Because they have a physical retail location in the Cleveland area, where I can go and make reasonable requests that they have a high statistical likelihood of fulfilling.

      It tends not to seem as bad on the PC side, because a) the companies are so terrible and ridiculously over-priced that there's a thriving secondary market, and b) it's generally possible to replace your entire machine for $200. But if you get the actual tech support guys, from the actual manufacturer, they will charge you an arm and a leg because they can.

    82. Re: Solution! by lucien86 · · Score: 1

      Ok you do have a point. You do have to remember that most PC laptops are made in relatively small numbers for each model, especially compared to companies like Apple.. So Apples service costs actually should be lower. Guess I was speaking from a position more of secondary sources than direct experience. I have read a lot of stories about the high costs of replacing iPhone batteries, and the large secondary market that has grown up does speak volumes..

      --
      Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
  2. Maybe a good thing by Anonymous Coward · · Score: 3, Insightful

    Probably to prevent hardware attacks on phone encryption

    1. Re: Maybe a good thing by Anonymous Coward · · Score: 1

      Apple will go along with that.

    2. Re:Maybe a good thing by Anonymous Coward · · Score: 4, Insightful

      I did some reading, and it appears to be the fingerprint sensor. The sensor itself has an encrypted channel to the mainboard. If the cable is damaged or the sensor is replaced/not working, it doesn't sync up properly.

      So it makes sense to refuse to work with a different sensor. Else, someone could unlock your phone by simply bypassing the sensor.

      OTOH, this appears to still happen if the phone itself is reset to a factory image. It doesn't seem to be that much of a security risk if instead of refusing to work, the phone, after being reset, would renegotiate encryption with the sensor. There's no data to be stolen in that scenario. And there's other mechanisms to prevent a stolen phone from having resale value.

    3. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      hardware attacks

      The apple internet defense force is at it again.

    4. Re:Maybe a good thing by Anonymous Coward · · Score: 5, Insightful

      So just disable the fingerprint part of the button, no need to brick a device.

    5. Re:Maybe a good thing by AmiMoJo · · Score: 5, Insightful

      Makes no sense. The flash memory is encrypted and the key is stored in a secure area of the CPU. The CPU is hardened so that you can't exact the key with an electron microscope or by de-capping it. It might be possible to get that key, but only with specialist equipment and unpublished vulnerabilities.

      Replacing the fingerprint sensor won't get you anywhere. To unlock the phone after boot you need the passcode. Okay, say you keep it powered up while replacing the sensor. So what, you still need to send the phone the fingerprint data that matches the owner's finger, so it got you nothing.

      We I were being generous I'd suggest that Apple just screwed up and made the list of "panic, erase key!" events a bit too long. More likely they just want to discourage people from getting third party repairs, because they know you have money and they want it.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    6. Re:Maybe a good thing by cyn1c77 · · Score: 4, Insightful

      OTOH, this appears to still happen if the phone itself is reset to a factory image. It doesn't seem to be that much of a security risk if instead of refusing to work, the phone, after being reset, would renegotiate encryption with the sensor. There's no data to be stolen in that scenario. And there's other mechanisms to prevent a stolen phone from having resale value.

      It's still a security risk. You could imaging intercepting new iPhones, replacing the fingerprint sensor with a compromised one containing a backdoor, then reimaging the phones, putting them back in the box, and selling them to your target. After your target loads their sensitive data on to them, you could then retrieve it using the compromised sensor.

      I agree this is somewhat contrived and Apple is likely just looking to block third party repairs, but it still is a valid security risk.

    7. Re:Maybe a good thing by alvinrod · · Score: 2

      Still presents a security vulnerability in that someone who thinks their device is secure may be under false assumptions due to a sensor that is doing nefarious things. Slip someone a phone with a sensor that will function as normal, but also has the ability to store a print (or the input data to simulate one) and bypass the regular encryption methods later on command.

      It's shitty that Apple hordes the parts and requires you to go through them for repairs, but even if they didn't, I can see why third party hardware would be outright rejected.

    8. Re:Maybe a good thing by The+Rizz · · Score: 5, Insightful

      I did some reading, and it appears to be the fingerprint sensor. The sensor itself has an encrypted channel to the mainboard. If the cable is damaged or the sensor is replaced/not working, it doesn't sync up properly.

      So it makes sense to refuse to work with a different sensor. Else, someone could unlock your phone by simply bypassing the sensor.

      No. Refusing all access to your device because one small component is damaged does not make sense. Not using that component to do the unlock - and making you use the non-fingerprint method - is what would make sense.

    9. Re:Maybe a good thing by dkman · · Score: 3, Insightful

      Seems to me that of the phone doesn't like the sensor instead of bricking itself it should disable the sensor and move on, so you can type in your passcode and use the phone. I know that so 2007, but it's better than having a fancy paperweight.

      --
      I refuse to sign
    10. Re:Maybe a good thing by Anonymous Coward · · Score: 2, Insightful

      1. Steal phone.
      2. Replace the fingerprint sensor with one that stores the fingerprint data.
      3. Return phone.
      4. Wait for user to swipe.
      5. Steal phone again.

    11. Re:Maybe a good thing by david_thornley · · Score: 2, Insightful

      Good security sometimes makes no sense to the casual observer. Security is hard to do right and easy to screw up. I'd want to find out why the feature is there in detail and from a security person who knows what he or she is talking about before jumping to conclusions.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    12. Re: Maybe a good thing by Anonymous Coward · · Score: 1, Insightful

      You are a moron seriously. You signed away your rights when you bought the phone, you agreed to this. It's a security feature and frankly I'm fine with it. If android did this everyone would be giving them high praise. See Google cares about security. Give me a break. Apple implements a security feature to protect users and people still fucking complain.

      You can still replace other parts of the phone. Since the fingerprint scanner is tied to the motherboard, that's the piece you can't replace. I see nothing wrong with this.

    13. Re:Maybe a good thing by Anonymous Coward · · Score: 0, Interesting

      If I sell Iphones and want to steal data, I write & install and app that does it for me. Simple, no hw needed.

      If I want to extract from a stolen/bricked Iphone, I rip out the flash memory and read it directly using electronic circuits. No apple sw in my way then.

    14. Re: Maybe a good thing by Anonymous Coward · · Score: 2, Informative

      Good luck decrypting it without the keys from the secure enclave, skippy.

    15. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      A compromised sensor gets you into the device if it gets a chance to record the owner's finger print:

      1. replace finger print sensor
      2. return device to owner for a while
      3. retrieve device, unlock using recorded finger print
      4. profit!

    16. Re:Maybe a good thing by Anonymous Coward · · Score: 1

      I'm sorry, but if the full authentication is done in the fingerprint reader, then they deserve the dumbest security device in the world trophy. That's the equivalent of having the keyboard verify if the password you typed was correct. I'd desperately hope that the fingerprint reader collects it's data and sends it to the CPU where the CPU then compares it to a previously recorded record, and as such, switching out fingerprint readers wouldn't matter as long as they outputted the data in a similar format. And if your argument is that it would just have generated the data expected without having to actually read a fingerprint, well at that point the battle is lost since you've lost control of your fingerprint.

      BTW, have I ever mentioned that bio-metrics is a really stupid way to authenticate people because if ever one loses control of that information there's no way to change it.

    17. Re:Maybe a good thing by Zelucifer · · Score: 1

      If it was a good thing, it would simply require a factory reset, and a notice of the lack of encryption capabilities. Instead they chose to destroy your property.

      --
      The corner of a round room
    18. Re:Maybe a good thing by SethJohnson · · Score: 1

      The sensor does not do the decryption or authentication. The attack vector would be a sensor that has been replaced with a mechanism that replays a snapshot of the phone owner's fingerprint and sends that down the wire to the mainboard. Apple is attempting to curtail that type of attack by authenticating the physical sensor to the mainboard.

    19. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      And would they not solve this with checks - like "we detected a change in hardware and would like you to renegotiate your security settings with us" and make the user run through a series of questions. In what way is this more dangerous than your phone getting pilfered/confiscated for a short time window?

    20. Re:Maybe a good thing by Tharkkun · · Score: 2

      OTOH, this appears to still happen if the phone itself is reset to a factory image. It doesn't seem to be that much of a security risk if instead of refusing to work, the phone, after being reset, would renegotiate encryption with the sensor. There's no data to be stolen in that scenario. And there's other mechanisms to prevent a stolen phone from having resale value.

      It's still a security risk. You could imaging intercepting new iPhones, replacing the fingerprint sensor with a compromised one containing a backdoor, then reimaging the phones, putting them back in the box, and selling them to your target. After your target loads their sensitive data on to them, you could then retrieve it using the compromised sensor.

      I agree this is somewhat contrived and Apple is likely just looking to block third party repairs, but it still is a valid security risk.

      So the solution is to permanently brick the phone? Gimme a break. You generate a warning on the phone to let the user know. Better yet, brick the phone and charge to repair it correctly. You don't screw your customers out of a perfectly good phone.

    21. Re: Maybe a good thing by Tharkkun · · Score: 1

      Good luck decrypting it without the keys from the secure enclave, skippy.

      Ding Ding. All the new phones come encrypted.

    22. Re:Maybe a good thing by Tharkkun · · Score: 3, Interesting

      The sensor does not do the decryption or authentication. The attack vector would be a sensor that has been replaced with a mechanism that replays a snapshot of the phone owner's fingerprint and sends that down the wire to the mainboard. Apple is attempting to curtail that type of attack by authenticating the physical sensor to the mainboard.

      So disable the sensor if it's found to be invalid. You don't destroy a $500 phone. What if the sensor goes bad? New phone? Seriously people.

    23. Re:Maybe a good thing by AmiMoJo · · Score: 1

      You can still do that even with this security measure. Apple can sync a new fingerprint sensor to the SoC, which means anyone can with the right tool. Eventually repair shops will figure out how, and you can bet that the NSA/GCHQ already stole the app.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    24. Re:Maybe a good thing by gnasher719 · · Score: 1

      If I sell Iphones and want to steal data, I write & install and app that does it for me. Simple, no hw needed. If I want to extract from a stolen/bricked Iphone, I rip out the flash memory and read it directly using electronic circuits. No apple sw in my way then.

      You think you're smart. Anyone with an iPhone will set their Apple ID and password, and the process of doing this wipes out any software that you may have installed. The exception is phones sold to enterprises, where the process will wipe any software you may have installed and put the phone under the control of the enterprise. Very visibly.

      To decode the flash memory, you need to crack per-file 256 bit encryption. So even if you cracked uncrackable 256 bit encryption, you would then have _one_ file.

    25. Re:Maybe a good thing by WaffleMonster · · Score: 1

      Still presents a security vulnerability in that someone who thinks their device is secure may be under false assumptions due to a sensor that is doing nefarious

      The basis of security is trust. Misplaced trust = game over no matter what.

      things. Slip someone a phone with a sensor that will function as normal, but also has the ability to store a print (or the input data to simulate one) and bypass the regular encryption methods later on command.

      No consumer device is designed to withstand physical access. Instead of replacing a touch sensor a separate sensor can be stacked on top of it or the digitizer can be replaced or stacked to collect both biometric and pin/pass data. There are an infinite number of options to own devices with physical access.

      The more basic and glaring problem is that in fact fingerprints are not secrets and have no business being used to provide evidence of possession in the first place.

    26. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      Good security sometimes makes no sense to the casual observer.

      Which makes them more likely to circumvent it, thus making it bad security.

    27. Re:Maybe a good thing by shutdown+-p+now · · Score: 1

      You might as well just replace it with another phone (with a native sensor and a software-based keylogger) if you're doing this kind of stuff.

    28. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      I did some reading, and it appears to be the fingerprint sensor. The sensor itself has an encrypted channel to the mainboard. If the cable is damaged or the sensor is replaced/not working, it doesn't sync up properly.

      So it makes sense to refuse to work with a different sensor. Else, someone could unlock your phone by simply bypassing the sensor.

      If this were true then replacing the sensor at an authorized shop and "re-pairing" it would fix the problem, just like it would have had you had taken it to an authorized shop in the first place. Instead the phone is permanently bricked ONLY if taken to a non-Apple shop AND installing iOS9. This tells me that Apple is doing this deliberately to try and eliminate competition. Someone needs to sue Apple back to the stone age like what happened to Microsoft when it was proven in court that Win 3.1 was written to deliberately crash if non-MS software was detected (like DR-DOS).

    29. Re:Maybe a good thing by Man+On+Pink+Corner · · Score: 2

      Making thousands of legitimate customers suffer because of the mere possibility of an attack that obscure isn't "security," or even "security theatre." It's just plain malice.

    30. Re:Maybe a good thing by Darinbob · · Score: 1

      No, that's what the fans may claim, but Apple lost of a lot of fans when their phones bricked. Authorized service centers are not everywhere, and they're very expensive and they don't let competition become authorized. The security aspect is just their retro excuse for bad behavior. People have had their phones bricked even if the only thing that happened was that it was dropped but they kept using it without any repairs until the upgrade broke their phone.

      It had all been working great so far, until the latest change. Did Apple think to warn everyone in big letters before hand? Or more likely they were seeking to punish people. They could have just put up a message after the upgrade to warn about possible insecurities in the fingerprint sensor and recommend using a PIN instead. But no, they bricked their phones and pissed off their customers. Apple recommends fixing the error with a visit to an Apple Store, but people say that the Apple stores say the only fix is to buy a new phone.

      Apple's excuse explains the security thing, but it makes no mention of bricking the phone and instead implies that only that part will fail to work rather than the entire phone.

      What next, if this is really about "security" can we expect them to brick the phone in the future if they detect a possible intrusion? Because repairing the touch sensor is only a tiny hint about possible intrusion. Whoops, password was incorrect twice in a row, time to brick it. Phone was rooted, time to brick it. Phone is being used in a location that the owner hasn't been to before, possibly stolen, time to brick it. All those cases are ludicrous and so is bricking a phone because someone decided to use a better/cheaper repair place.

    31. Re:Maybe a good thing by Darinbob · · Score: 1

      This is punishment for those users who don't upgrade every six months.

    32. Re:Maybe a good thing by Darinbob · · Score: 1

      A valid security risk maybe. But is that cause to brick the phone? The angry customer shows up with a bricked phone and the Geniuses say "you should be thanking us, now how would you like to pay for your replacement?"

    33. Re:Maybe a good thing by Darinbob · · Score: 1

      And the sensors do go bad. People have reported this problem even if all they did was drop the phone but then found nothing wrong with it except some scrapes, and who never took it in for third party repairs.

    34. Re: Maybe a good thing by Darinbob · · Score: 1

      No, if Android did this there would be hell to pay. Android fans do not have the same cultish behavior like Apple fans.

      To me none of this looks like a security feature. That fingerprint scanner is not necessary to the operation of the phone. It was working just fine before the upgrade, and is bricked afterwords. They could have just disabled the scanner and instead require the back up PIN only; or provide a big prominent warning every time you turn it on (enough to back up your files). But because they didn't do this so it looks like punishment for using the competition.

    35. Re:Maybe a good thing by MrKrillls · · Score: 2

      "...Apple is attempting to curtail that type of attack by authenticating the physical sensor to the mainboard..."

      No, Apple is trying to squash independent repair shops. Security is just the excuse.

      They can drive business to their own repair shops with the bricking threat. There could have been other far better responses to a potential security issue. This kind of heavy handed behavior is one reason my next phone will not be an Apple.

      --
      Don't step on the baby.
    36. Re:Maybe a good thing by shawn2772 · · Score: 3, Interesting

      1. Steal phone.
      2. Lift owner's print from the phone.
      3. Replace sensor with device that sends data of your choice.
      3. Feed fingerprint image to unlock device.

      The owner's fingerprints are generally all over a phone.

    37. Re:Maybe a good thing by KGIII · · Score: 2

      I've done a bit of reading and, by lack of anything major in my life, I've recently taken a look at some more modern security practices and, while this seems rough, this seems almost legit.

      If I'd my druthers and control, I'd have *disabled* the device, entirely, until a functional, vetted, hardware component was repaired - I may even make sure that hardware replacement is *also* signed and needs to authenticate with the device before it burns out a fuse in the hardware to actually enable the device to function.

      I'm *still* probably missing something. I'd have not bricked the device. I'd have shown a hardware error warning and (possibly) allowed limited function like making phone calls and texts with a temp user account until authorized repairs could be made.

      I'll also stress that I'm not an expert. That's actually why I started this post. It was to point out, this is Slashdot! We're *all* experts here, on everything. Hell, I've had people tell me that I'm wrong when it comes to traffic engineering or modeling. No, I wasn't wrong, but they were a self-avowed expert. We regularly sit here and say how wrong the experts are - it's what we do! ;-)

      At any rate, unless I'm missing something, I'd have simply had it detect non-authorized hardware (a variety of ways to do that) and give limited functionality and no retrieval, use, or access to any local storage until an authorized repair had been performed. When the new device, the authorized device, has been inserted and the hardware checks out, it can burn itself so that it locks to a single phone. There are smart people, make it happen!

      They could still use the phone to make calls and send texts. Hell, let 'em have a "guest" account on it and use appropriate file permissions or even a physically separate bit of storage. Then, when they can get a real repair done and the hardware's authenticated (they must have some system in place for this or this wouldn't be happening) they can get full functionality back. The repaired part can even lock itself to the phone.

      --
      "So long and thanks for all the fish."
    38. Re:Maybe a good thing by sonam · · Score: 1

      I received the error 53 and did not have my phone repaired. The touch sensor just went bad on its own and bricked my phone on update. Luckily I knew something was up and had backed the phone up before the update,

      S

      --
      Sonam Genphel
    39. Re:Maybe a good thing by djinn6 · · Score: 1

      Why even bother replacing the sensor? Just use the owners fingerprint to unlock the phone. The mythbusters did that a while back.

    40. Re:Maybe a good thing by shawn2772 · · Score: 1

      Why even bother replacing the sensor? Just use the owners fingerprint to unlock the phone. The mythbusters did that a while back.

      It depends how hard the sensor is to fool. Some are tougher than others, and the technology is improving.

    41. Re:Maybe a good thing by petervandervos · · Score: 1

      Maybe the engineers at Apple thought of an attack vector to unlock the phone, something like: connect a fingerprint emulator to the phone and try to let it connect. If you give an error and don't do anything they could keep retrying and unlock the phone with the fingerprints on the phone this way.

      A way to let nobody access the phone is brick it, but maybe they should give some more warnings.

      On the other hand, maybe the error that Apple made is not bricking the phone, but to give to little warnings before bricking the phone.

    42. Re:Maybe a good thing by Anonymous Coward · · Score: 0

      1. Steal phone.

      2. Lift owner's print from the phone.

      3. Replace sensor with device that sends data of your choice.

      3. Feed fingerprint image to unlock device.

      The owner's fingerprints are generally all over a phone.

      Or simply steal the owners finger as well.

  3. Getting away with it? by Z00L00K · · Score: 5, Insightful

    If Apple gets away with this we may see more vendors doing the same thing to the stuff we own.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    1. Re:Getting away with it? by gstoddart · · Score: 5, Insightful

      You don't own it, and you know you don't own it. You merely paid money for the right to use the hardware under the terms of their license.

      Your ownership of these things ended some years ago as far as they're concerned.

      This is no different from Microsoft deciding it's their computer, and they'll do whatever the fuck they want with it.

      Consumers have more or less had the concept of ownership yanked out from underneath them, and had it replaced with a licensing agreement which the company can change at will.

      --
      Lost at C:>. Found at C.
    2. Re:Getting away with it? by zdzichu · · Score: 1

      If this ever become widespread, there would be a law introduced to curb it. We already got a law protecting aftermarket parts and non-vendor service station for cars: http://eur-lex.europa.eu/legal...

      --
      :wq
    3. Re:Getting away with it? by Anonymous Coward · · Score: 0

      Yes, please. I do hope more vendors push out proactive security updates to their software instead of waiting for a exploits to be frontpage material in the Guardian.

    4. Re:Getting away with it? by eedwardsjr · · Score: 1

      Geez. Wish I had mod points today. I'd spend all of them here if that was possible.

    5. Re:Getting away with it? by truck_soccer · · Score: 1

      Ding ding ding ding!!!!

    6. Re:Getting away with it? by mrchaotica · · Score: 3, Informative

      We have a law like that in the US too (and for all products -- which should include iPhones -- not just cars): the Magnuson-Moss Warranty Act.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    7. Re:Getting away with it? by gstoddart · · Score: 1

      Yeah, well, you'll excuse me if I don't think in a few years they'll be able to use copyright law, the DMCA/TPP, and EULAs to close that loophole.

      Just like how the printer companies want you locked in as a revenue stream, you can bet your ass lawyers are standing by trying to figure out how.

      And you can also bet politicians who are bought and paid for will deliver it to them. Because all signs point towards idiot politicians signing over everything to corporate interests to line their own fucking pockets.

      Laws to protect consumers? No fucking way.

      --
      Lost at C:>. Found at C.
    8. Re:Getting away with it? by Jason+Levine · · Score: 4, Insightful

      Can't find the right moderation. Where's "+1 Shaking My Head Sadly At The State Of The Tech World"?

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    9. Re:Getting away with it? by boristdog · · Score: 1

      Does MS brick any products if you repair them?

      I have never heard of this.

    10. Re:Getting away with it? by malditaenvidia · · Score: 1

      Where did this start? I'm thinking videogame consoles and digital media players were the beginning of it with their copy protection and locked-down hardware.

    11. Re:Getting away with it? by Penguinisto · · Score: 3, Informative

      It's not a question of ownership. It's a question of warranty. He still owns his (now-bricked) phone.

      In this case, the dude dropped his phone, gets it repaired at some no-name shop with dodgy parts, then complains when the security loophole the dodgy parts used got closed. If anything, the fault lies with the shop that did the repair.

      Hell, Apple told him they'd do out-of-warranty replacement for it (not sure what that costs, but likely still less than full price), and that's because the problems began when he dropped it (which is not covered under warranty anyway, though some 3rd-party sellers do offer such warranty protection for a nominal fee).

      Fair warning: If I bought anything from any other OEM and went through the same rigamarole, I'm certain that I'd get the same (or worse) treatment from the OEM... so this isn't just an Apple thing.

      (...and this boys and girls, is why I buy just-behind-bleeding-edge Android stuff, so a total loss of the phone is only like $200, not $600 or more).

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    12. Re:Getting away with it? by Penguinisto · · Score: 0

      No, but for awhile HP did...

      Back in the nasty old 1990's, putting non-HP-branded RAM in some x86-based HP tower server models would often end up scrambling your disk. IIRC that behavior stopped pretty quickly once word got out, and folks began to flock to competing brands.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    13. Re:Getting away with it? by war4peace · · Score: 1

      Not really, but change enough hardware in your PC and you'll end up with "Your license is not Genuine". A call to MS solved this issue in all cases where that happened to me, but still.

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    14. Re:Getting away with it? by Maritz · · Score: 1

      Laws to protect consumers? No fucking way.

      We occasionally still get them in Europe. But I expect TTIP will put paid to that.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    15. Re:Getting away with it? by Anonymous Coward · · Score: 0

      Have you tried replacing a motherboard for a Windows 10 system yet?

    16. Re:Getting away with it? by Z00L00K · · Score: 1

      If I don't own the device, then I want my money back when I don't need it anymore.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    17. Re:Getting away with it? by pak9rabid · · Score: 4, Informative
      Here's the relevant part of the Magnuson-Moss Warranty Act:

      Warrantors cannot require that only branded parts be used with the product in order to retain the warranty.[7] This is commonly referred to as the "tie-in sales" provisions,[8] and is frequently mentioned in the context of third-party computer parts, such as memory and hard drives.

    18. Re:Getting away with it? by ericloewe · · Score: 2

      Sure, but bricking the phone instead of just disabling the sensor is quite evil.

    19. Re:Getting away with it? by dyslexicbunny · · Score: 1

      That's what keeps me from upgrading phones.

      I got a $200 Droid Charge when LTE first rolled out for Verizon. It was still chugging along just fine but I was eligible for an upgrade and Verizon was giving the LG G2 away for $50 and I found a $50 off code for online purchases so I got a new phone for the $30 activation fee. I'm currently able to get an upgrade but I know they also changed contracts and stuff so I don't feel like paying anywhere more than $100 for a new phone and since my current one is chugging along fine, I'll wait until the G5 comes out and snag a cheap G4.

    20. Re:Getting away with it? by jmac_the_man · · Score: 2

      Are you sure this happened? At least from the 360 era on, MS bans modded consoles from Xbox Live, but otherwise leaves them alone. And given that XBMC was a thing you could run on original Xbox at the time, I don't think MS bricked consoles then either.

    21. Re:Getting away with it? by david_thornley · · Score: 1

      In this case, I got the impression that the phone was out of warranty, so this law doesn't apply. It also doesn't mean the manufacturer has to give warranty protection despite anything the owner does. For example, the warranty can't be voided because I used a third-party fingerprint sensor, but it can be voided if I use one that doesn't meet specs, or which shorts out other parts of the phone.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    22. Re:Getting away with it? by david_thornley · · Score: 1

      There already have been companies trying to provide copyright protection for ink cartridges, and I think the US courts slapped that one down pretty hard.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    23. Re:Getting away with it? by Anonymous Coward · · Score: 0

      This is really simple:
      - Android Phone
      - modified boot loader, away from standard
      - OTA updates fail to install. ALWAYS!

      Sacrificing to Corporate control, when the options are out there to free yourself? Sorry, but the plight of millions will fall on deaf ears, this direction. They bought it, and they knew what they were buying. And if they didn't, feigning ignorance is laughable.

    24. Re:Getting away with it? by vux984 · · Score: 1

      Would that line of reasoning apply to a car?

      Your door handle freezes up, you take it to a little shop who fixes it with an aftermarket part.

      A few weeks later your car pushes an OTA update and bricks the entire car on you.

      No problem, your fault or the fault of the shop. One should always be required to use OEM parts at the dealership when making any repairs or risk having your car remotely disabled at the whim of the manufacturer... on purpose or otherwise?

      We USED to demand that this sort of shit be illegal. Now you seem to accept it as something we should expect.

    25. Re:Getting away with it? by Anonymous Coward · · Score: 0

      or simply not allowing the update to proceed

    26. Re:Getting away with it? by bigpat · · Score: 1

      had it replaced with a licensing agreement which the company can change at will.

      Courts should throw out licensing agreements unless for every change the person can pass a quiz covering the major points of the license agreement. And then only those subject areas tested should be honored by the courts.

    27. Re:Getting away with it? by Anonymous Coward · · Score: 0

      How do you know the parts were dodgy? Because they weren't blessed by Apple?

      You come across as a fanboi who believes Apple can do no wrong. If you aren't, sorry, but you come across that way. And I can understand why even if Apple offered an out of service repair, the guy might refuse. Some of the BS my friends have had to deal with when dealing with the geniuses, the fact that anybody deals with it, just wow. I'll never forget the friend who's iPhone wasn't working, they said they'd send it in for warranty repair and have it back to him in 2-4 weeks. He asked if he could have some sort of loaner since that was his only phone, and they refused. Wow. Just wow.

    28. Re:Getting away with it? by ericloewe · · Score: 1

      Well, that defeats the purpose of the security measures.

    29. Re:Getting away with it? by Darinbob · · Score: 1

      Well, it should be illegal for companies we don't like. But legal for the company founded by our Lord and Savior, Steve Jobs.

    30. Re:Getting away with it? by MrKrillls · · Score: 1

      "Your door handle freezes up, you take it to a little shop who fixes it with an aftermarket part."

      And the handle is definitely a security related part. So by the logic of some posts, bricking the car, rather than lesser measures like a recall notice, is perfectly reasonable.

      The whole issue here is that bricking a car or a phone is a wildly disproportional response, and directed at the wrong target. If Apple wants to get people to use Apple Service and parts, and they can prove some sort of fraud that devalues the Apple brand by the indie repair place or by the indie part maker, then let them use appropriate means directed at said shops, BUT DON'T BRICK PEOPLES PHONES! (Yes, I'm yelling) It's a sneaky, nasty, underhanded, inappropriate, cheap, user hostile way to clobber indie shops and parts makers by clobbering Apple's own customers. Apple should leave the customer out of the direct line of fire.

      No more Apple products for me.

      --
      Don't step on the baby.
    31. Re:Getting away with it? by Anonymous Coward · · Score: 0

      Mongoloid cretin gstoddart spews forth total unoriginality like we don't already know what his dull brain regurgitated from others before him. Spare us mongoloid cretin. Spare us, please. Accept the fact you're slashdot's resident mongoloid cretin and we know it. Too bad you haven't realized it yet.

    32. Re:Getting away with it? by Anonymous Coward · · Score: 0

      Laws should be made to take computing technology away from the mongoloid unoriginal cretin likes of you gstoddart. Just to spare us your boring dribblings!

    33. Re:Getting away with it? by B1 · · Score: 1

      Yes, they do.

      I bought a used XBox 360 that unbeknownst to me had been repaired by the previous owner (they did some kind of RROD fix involving washers instead of the X-Brace that holds the heat sink in).

      After a few months, it eventually developed the RROD, so I sent it to Microsoft for repair. Prior to sending it to Microsoft, I could play a game for a couple of minutes before the console died and gave me the RRoD.

      After they received it, they quickly flagged my work order as an exception for hardware tampering. I was surprised to learn of this, since the seal was intact. Microsoft then sent it back to me, except that now it wasn't even bootable. When I turned it on, the lights would alternate between red and green (half red, half green). The screen showed an E49 error. Basically, it was bricked for being modified.

      I don't know what happened while Microsoft had it, but I'm figuring it was one of the following.
      * The only tampering done to my box was the RRoD repair. Nevertheless, Microsoft plays it safe by nuking any boxes where they detect tampering, as it's possible the DRM has been defeated using an undiscovered new method. Maybe their policy is to nuke boxes whenever they detect tampering?
      * Possibly my XBox actually had been modded to play pirated games. Somehow it survived several console updates without a console ban, but maybe that was coming eventually. Microsoft nuked it.

      In any case, when I explained the situation to them, that I had sent a semi-working XBox 360 to them and got a dead one back, they politely told me to pound sand.

    34. Re:Getting away with it? by tsa · · Score: 1

      They made my father's computer pretty useless when he upgraded to Windows 10.

      --

      -- Cheers!

    35. Re:Getting away with it? by Mdann52 · · Score: 1

      In this case, it's more like the immobiliser breaking, then you going an buying a new one. At the next service, the software in the car is updated, detects the parts been changed, then refuses to start. A door handle is not involved with security IMO.

    36. Re:Getting away with it? by vux984 · · Score: 1

      A door handle is not involved with security IMO.

      That's debatable, since its literally the interface to open the door, and is often integrated mechanically and electronically with the locks.

      Not to mention in some vehicles such as mini-vans and SUVs the side and rear door handles are little more than fancy switches that send an open/close signal to a control unit.

  4. Corporate America At Its Finest by Anonymous Coward · · Score: 0

    All our customers are belong to us.

  5. What? by Anonymous Coward · · Score: 0

    Did you think it was *your* phone?

    1. Re: What? by Anonymous Coward · · Score: 1

      If you bought it on contract, you are hust renting it, so it's not really your phone, and there's no reason the complain when this happens. If you bought it full price off contract, that's another issue, and it should be flat out illegal for carriers or manufactures to do this without permission. This also goes for stuff like Windows forcing upgrades to 10.

    2. Re: What? by david_thornley · · Score: 1

      Depends on the agreement. In either case I pay a certain amount of money and get a phone. Buying it on contract is not the same as leasing on contract, so my wife probably owns her iPad, despite not having paid it off yet, There seem to be a lot of people saying that I don't own something that's security for a debt, and that's wrong. I likely have contractual restrictions on what I can do, and I can lose ownership more easily, but those don't mean I don't own something.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    3. Re:What? by myowntrueself · · Score: 1

      Did you think it was *your* phone?

      Its an 'i, my, phone' isn't it?

      Much like Microsofts 'My Computer'. Mind you I often wondered if that actually translated to "My, Bill Gates', Computer'.

      --
      In the free world the media isn't government run; the government is media run.
    4. Re: What? by sumdumass · · Score: 1

      If you mean renting like a person with a mortgage on their house is renting it from the bank, I agree with the premise but object to the notion that Apple can do anything and you cannot complain. Neither the bank nor the builder can change the locks on your house or make it uninhabitable.

      If you mean renting like if you rented a rental car, i think you are being a bit silly but even if there is merit, you are still looking at a failure to reasonably fulfill a contract. So you can still complain.

    5. Re: What? by amxcoder · · Score: 1

      This isn't entirely true. While you ARE on a contract, the phone is 100% yours after the contract is up, thus it doesn't hold up to the "renting" the phone paradigm that you suggest. It's more of a finance than a rent. If the phone was rented, then no matter how long you had it, it would still belong to the carrier. Similar to the cable companies "renting' the cable modems to the users, you never own it if you cancel service, no matter how long you've had it. On the other hand, after a 2-year contract, the phone is mine to keep, I can get the SIM unlock code, and I can take it another provider, or sell it on the used market, or whatever I want with it. They don't ask for it back. Thus, it's not renting.

  6. Is this the same error ... by Wh1t3Rabbit2084 · · Score: 0

    ..that happened to my iPhone 3GS when I had battery issues and had the battery replaces by a non-Apple person? I can't remember if it was an "Error 53" but it does sound familiar. Is this truly new, or just an old issue showing back up? Can anyone confirm?

    1. Re:Is this the same error ... by Anonymous Coward · · Score: 0

      No, it wasn't. The connection of your battery has nothing to do with protecting the data on your phone.

  7. Damned if you do, damned if you don't by Anonymous Coward · · Score: 4, Insightful

    It sounds like Apple fixed a security bug in an SU, closing a hole which allowed attackers to replace the touch ID sensor to gain access to user data. Had Apple not made this move, we'd instead be seeing an article about how Apple products are insecure and the NSA could get access to your secure date just by replacing some hardware components. Then everyone would be up in arms, demanding this exact software change, and complaining about how Apple is reactionary and not proactive in fixing security issues.

    Of course, "Apple fixes vulnerabilities in iOS 9" is not really a catchy flambait title for an article.

    1. Re:Damned if you do, damned if you don't by ledow · · Score: 2

      Why should the touch ID sensor need to, or be actually doing, store any data or provide authentication?

      What you're saying is that you can replace the fingerprint sensor and thus fool the device into thinking you provided ANY fingerprint, without any knowledge of that fingerprint? Sound inherently INSECURE to me. I could steal Barack Obama's iPad, change the sensor, and order a coffee on his credit card without having to enter a single credential or knowing what his fingerprint looks like.

      Compare and contrast to "it's just a fingerprint reader that provides a hash of the offered finger, which the OS compares to a list of known hashes of valid users", for instance. Unless you know what the fingerprint looks like, or can read the original hash and generate hashes of any possible combination you want, you shouldn't be able to do that. And if you did it properly, only Apple would know what the hash was on a remote server, and the entire conversation between reader and end-server would be encrypted and nonced to prevent replay attacks.

    2. Re:Damned if you do, damned if you don't by Z00L00K · · Score: 0

      SU? Soviet Union?

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    3. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 5, Insightful

      Or instead of Error 53 they could just disable Touch ID and require you to enter you PIN code.

      Which would make sense since you need the PIN to enable Touch ID in the first place, as it's automatically turned off when the phone first starts and if the phone isn't unlocked for over 48 hours.

      No, this is solely to brick the phone if you dare not pay for overpriced Apple repairs.

    4. Re:Damned if you do, damned if you don't by Austerity+Empowers · · Score: 4, Insightful

      You could replace the fingerprint sensor with something that could provide arbitrary fingerprints, possibly based on a collection you have made of them. Then use your collection to buy stuff. Requires no memory in the sensor at all. This is much faster than creating molds of fingerprints and applying them to the sensor. I can see Apple not wanting to tolerate replacing things tied in to your CC #.

      Replacing a battery seems less defensible to me, if that aspect is true. It's hard to argue this is tied in to any trust chain.

    5. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 1

      Storing the fingerprint hash in the reader is a "feature" from the perspective that you don't trust the OS. Otherwise, law enforcement could subpoena Apple to turn over the entire iPhone user fingerprint database to "find a perp", er I mean "find a terrorist!!!!!!"

    6. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Software Update

    7. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      And by saying this: "iPhone user fingerprint database" I mean use the Apple backdoors into iOS to recover the fingerprint hash, along with any other data they choose to access.

      Or just pull the data from the iPhone backup records on the Apple servers.

    8. Re:Damned if you do, damned if you don't by adamstew · · Score: 5, Informative

      It's not the fingerprint sensor itself that decides. The fingerprint sensor sends an image of the fingerprint to the Secure Enclave, which is a chip on the device that handles all of the encryption. The secure enclave itself does the analysis and makes the decision. This line of communication between the fingerprint sensor and the secure enclave is encrypted with a key exchange between the sensor and the secure enclave. This pairs your specific secure enclave with the Touch ID sensor. There is anti-replay techniques involved here as well.

      The point of pairing the sensor to the secure enclave is so that someone can't open up the phone, install a sniffer on the bus between the secure enclave and the sensor to then collect the fingerprint data for later collection and replay it to the secure enclave to get it to unlock. It also prevents someone from just replacing the touch ID sensor to provide a known good fingerprint to the secure enclave via a hardware hack. You have to, in theory, have an authorized finger pressed up against a trusted sensor.

    9. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      I could steal Barack Obama's iPad, change the sensor, and order a coffee on his credit card without having to enter a single credential or knowing what his fingerprint looks like.

      Yes, it sounds like the software fix in question was specifically to address possible exploits that might allow a hardware modification attack like that.

    10. Re:Damned if you do, damned if you don't by leathered · · Score: 1, Insightful

      The idea that an attacker would somehow get hold of your phone, take it to pieces, change the sensor and replace it where you left it without you noticing is fanciful to say the least. It would be much easier to get hold of your real fingerprint, of which you leave a copy in thousands of different places every day, and use that to access your device.

      --
      For all intensive porpoises your a bunch of rediculous loosers
    11. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      That sure is a stupid fucking way of doing security. It's like not being able to login to your computer because you broke your keyboard.

    12. Re:Damned if you do, damned if you don't by Maritz · · Score: 1

      The legitimate complaint for me, is that people were not warned. It would be trivial to put a warning on the update to the effect that if you have had a 3rd party repair, this update will brick your phone. That's genuinely not much to ask for, and doesn't make life easier for people trying to hack a phone.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    13. Re:Damned if you do, damned if you don't by prelelat · · Score: 1

      With a finger print scan you could limit the number of scans before you lock out that mode of authentication. You then have to verify with an actual password. There should be no way to brute force the fingerprint scanner. You can maybe get 6-10 through before it should lock out, that's all assuming your database even has something close to what's stored in the phone.

    14. Re:Damned if you do, damned if you don't by Sarten-X · · Score: 1, Interesting

      So, to avoid a hardware attack on the TouchID system, Apple should require using the passcode system that is vulnerable to shoulder-surfing attacks.

      Excellent plan, AC!

      --
      You do not have a moral or legal right to do absolutely anything you want.
    15. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Had Apple not made this move, we'd instead be seeing an article about how Apple products are insecure and the NSA could get access to your secure date just by replacing some hardware components.

      Uh, no? We'd see the often repeated "once you have [unsecure] physical access, the device is pwned".

      Then everyone would be up in arms, demanding this exact software change,

      "This device is insecure! They should have made it brick (because any sort of other notification or recoverable state is unacceptable)!" Yep, I can see it now.

      Of course, "Apple fixes vulnerabilities in iOS 9" is not really a catchy flambait title for an article.

      How about "Some Anonymous Coward on the Internet is a Moron"? Note, not ad hominem since I'm calling you stupid on your arguments, not calling your arguments invalid because you're stupid.

    16. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      If the phone behaved in the way you suggest, then should a phone be protected by fingerprint, I could install a fake reader to allow the phone to default back to a PIN, which would be much easier to brute force (esp if I was using an image of the phone's memory and a virtual environment.) or guess.

      While there may still be some corporate evil involved, there are plausible security reasons why you idea may not be a good idea. An analogy to your point of having to use TouchID "first" is: The default admin password is good enough because you had to enter it to set up the security for a device anyway...

      CAPTCHA: Repress

    17. Re:Damned if you do, damned if you don't by sexconker · · Score: 1

      Fanciful?
      In the "land of the free" the state does this sort of shit daily to people they don't like. Automated hacking tools (connect to USB port, press button) and turn key procedures for the techs (remove part and replace with this part) are much more reliable and much faster than having to physically lift and recreate a print. They also have the benefit of requiring far less expertise, so you can have dumber goons doing the work. Dumber goons are less likely to question what they are doing or care about fucking over someone else's rights.

    18. Re:Damned if you do, damned if you don't by Sir+Lurkalot · · Score: 1

      SU = Super User...

    19. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 4, Informative

      Apple already treats the PIN as more secure than Touch ID. If you find an iPhone with the fingerprint reader, try opening it with your finger. After a while the phone will lock into "Touch ID disabled" state and require the PIN. At this point the only way to reenable Touch ID is with the PIN.

    20. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Yea sorry I'd rather keep the NSA out of my phone than support your blind Apple hatred.

    21. Re:Damned if you do, damned if you don't by sims+2 · · Score: 2

      Well If I broke my keyboard I wouldn't be able to login to my computer either... But I've got more than a half dozen spare keyboards on hand so that's not an issue. Not being able to use a another keyboard because the original had a security key set by MomCorp would be awful.

      Someone could place a sniffer in the device. Seriously? Now tell me if its so secure why is it that apple itself can replace the part when no one else can.

      --
      Minimum threshold fixed. Thanks!
    22. Re:Damned if you do, damned if you don't by BronsCon · · Score: 1

      Well, considering that they already require the passcode to unlock the phone for the first time after a reboot, or after it has remained locked for a certain period of time, it seems reasonable.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    23. Re:Damned if you do, damned if you don't by BronsCon · · Score: 1

      Even with the correct and working fingerprint reader, you can use the passcode. It's how I unlock my wife's iPhone 6s Plus when she asks me to check something for her or change the song that is playing while she is driving.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    24. Re:Damned if you do, damned if you don't by tlambert · · Score: 4, Informative

      Why should the touch ID sensor need to, or be actually doing, store any data or provide authentication?

      Because the encryption key for the device is stored in an NVRAM knapsack in the touch sensor. The CPU uses a public key to establish an encrypted connection via the bus which connects it to the touch sensor, and then sends a block down to decrypt the contents of the knapsack, and then uses that to decrypt the user data key that's stored in the NVRAM attached to the CPU, and then uses that to decrypt the user data.

      By forcing a pairing of the touch sensor with the CPU, it means you can not do a two stage attack by topping just one chip, you'd have to top both chips, and if you did that, your half-of-a-key-pair that you obtained wouldn't work with another device.

      The way Apple handles this in the repair cases is it just replaces your device guts with completely new device guts (so that your cheesy engraving is not taken away -- and neither are your scratches in non-critical areas), and pops a new sensor chip (with an uninitialized PROM) into the device, and sends those guts to someone else as a refurbish.

      But that does mean that third party repair for either of the two components is theoretically possible, but practically speaking, Apple will not sell you the chip you need to replace to do the same repair that an authorized service center would do. On the other hand... it means that Apple won't get the blame if you put in some third party battery or charging circuitry, and burn down your damn house because you wanted to save $5 or whatever.

    25. Re:Damned if you do, damned if you don't by ericloewe · · Score: 2

      Or just do whatever they are doing now, but don't accept fingerprint input from compromised readers - instead of bricking the whole phone.

    26. Re:Damned if you do, damned if you don't by Z00L00K · · Score: 1

      Acronym Hell. People love them and hate them!

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    27. Re:Damned if you do, damned if you don't by david_thornley · · Score: 1

      Yes, you can do that with an iPhone. Every time it reboots (such as after a system update) it requires the PIN, and I believe it requires the PIN to be entered periodically anyway. I'd know more about this personally if I could get the fingerprint sensor to work halfway reliably.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    28. Re:Damned if you do, damned if you don't by david_thornley · · Score: 1

      Now tell me if its so secure why is it that apple itself can replace the part when no one else can.

      We don't know that. We know that an iPhone was bricked with a specific third-party fingerprint sensor. We don't know if any non-Apple sensor would have caused the same thing.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    29. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      I can see Apple not wanting to tolerate replacing things tied in to your CC #.

      How about, oh, not tying your fingerprint, which you leave virtually everywhere, to your CC#? In general, how about not actually having CC#s per se but one time transactions (or one per account per company) based not merely upon what you have (a fingerprint) but what you know and perhaps a challenge response (like captcha) to avoid too much automation? Really, this is a very shitty excuse right up there with DRM.

    30. Re: Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      If apple replaces the sensor with one made by Apple then this error does not happen.

    31. Re:Damned if you do, damned if you don't by dissy · · Score: 1

      No, this is solely to brick the phone if you dare not pay for overpriced Apple repairs.

      Then why does Apple replace the hacked-and-completely-compromised broken phone for free with another that has all of its security intact?

      Free doesn't sound all that over priced to me.

    32. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Oh my god you fucking idiots are everywhere!

      Look, if security can be bypassed by replacing a piece of accessory hardware, then the security was never there in the first place. If Apples touchID system can be bypassed by changing out the fingerprint reader, then Apples implementation sucks, and they should be ashamed at their inability of creating a secure system. That being said, I don't believe for a second that their implementation is that horrifically implemented and I believe fully that you're an apologist for a company you love behaving badly.

      And also, if you think fingerprints are a good idea for authentication, god help you if anybody ever copies your fingerprint. At least with a PIN I can change it without having to cut off my fingers.

    33. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      And you think the NSA could not just build a sensor that spoofs being a genuine apple sensor? Or they could just lift a fingerprint and make a finger, which is a ton easier then either option involving the sensor.

    34. Re:Damned if you do, damned if you don't by Dixie_Flatline · · Score: 1

      It only requires the fingerprint if you haven't signed in for 48 hours.

    35. Re:Damned if you do, damned if you don't by WaffleMonster · · Score: 1

      It sounds like Apple fixed a security bug in an SU, closing a hole which allowed attackers to replace the touch ID sensor to gain access to user data. Had Apple not made this move, we'd instead be seeing an article about how Apple products are insecure and the NSA could get access to your secure date just by replacing some hardware components.

      This is an unreasonable assumption for the following reasons:

      All bets are off with physical access.

      There are much easier ways to collect finger prints people leave all over the place all the time every day and play them back with ease.
      http://www.ccc.de/en/updates/2...

      Error appears weeks or months AFTER the change providing ample time for an attacker exploiting this "vulnerability" to cash in prior to error 53 bricking sweep being invoked.

      This also leaves one to wonder how it is that Apple have the ability to reset hardware signatures in the first place when keying material associated with secure enclave is supposedly inaccessible to Apple? Isn't that what they claim in their FAQ and in public statements? If they can fool the hardware what prevents others from exploiting similar techniques?

    36. Re:Damned if you do, damned if you don't by shutdown+-p+now · · Score: 1

      It's all great, but none of this explains why they completely shut down everything if the only faulty part is the sensor.

    37. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Apple already treats the PIN as more secure than Touch ID. If you find an iPhone with the fingerprint reader, try opening it with your finger. After a while the phone will lock into "Touch ID disabled" state and require the PIN. At this point the only way to reenable Touch ID is with the PIN.

      It's kind of like how browsers show no errors for non-encrypted sites, but annoying popups for a broken SSL site.

      I think the idea is something if something intended to be secured was tampered with, that's a much bigger deal than something that wasn't intended to be secure.

      Would "Your hardware authentication system has been tampered with, ignore and continue?" popups REALLY be a good idea?

    38. Re:Damned if you do, damned if you don't by garote · · Score: 1

      Change the "a bunch" into "alot". That's even better.

    39. Re:Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      I agree with this view. When the sensor or the cable to the enclave is damaged/replaced with an unauthorized part they could switch to passcode prompt since this happens with too many tries anyway

      Also, the pairing between the sensor and the enclave only happens after a restore or update.

      These shouldn't be reasons to not help proven owners and lock them out. The security argument imo is being used here to prevent third party repairs.

    40. Re: Damned if you do, damned if you don't by thePig · · Score: 1

      Why this cynicism?

      Anonymous coward has already given a scenario where even this is dangerous.
      Say, some over steals the phone, replaces touch id with one which steals finger print details, and puts it back.
      The user tries to use finger print sensor, it is disabled, so uses pin to enter.
      Later he steals the phone again, gets the finger prints for his use later.

      In my view, any hardware changes should be handled with error 53 on a secure device. If apple hasn't done it, i would be unhappy. Say, screen is replaced. How do you know whether someone hasn't put a screen which captures finger pressing to get the pin. Or any such scenarios.

      The best way should be a user setting - which says, for security purposes brick phone once any hardware is replaced outside apple stores. One who isn't concerned about security can then use as you said.

      Since they didn't think about this till now, the best option is to brick them now.

      --
      rajmohan_h@yahoo.com
    41. Re: Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      Fanboi faggot, if you think you are keeping the NSA out to your child porn, you're wrong.

    42. Re: Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      If someone is stealing your phone multiple times and installing new hardware, this is least of your fucking worries. Why not just steal the thoughts out of your mind with an electron microscope?

    43. Re: Damned if you do, damned if you don't by Anonymous Coward · · Score: 0

      I may be misunderstanding Apple's statement, but I think they claim that the replaced sensor could extract data from the secure enclave, thereby e.g. emulating a successful fingerprint authentication or otherwise subverting device security. I think they claim it's the latter, i. e. the encrypted data may become accessible. In that case it may be reasonable to temporarily lock the device until integrity is restored. If, after an "untrustworthy" fingerprint sensor has been detected, it is impossible to ever determine that the device is "safe" again, the phone must brick itself permanently - but I'd consider that a design flaw.

  8. Context On the Issue by Galaga88 · · Score: 5, Informative

    This error occurs if the repair involves the TouchID sensor. Sense this stores data required for the fingerprint authentication, the device will refuse to function for security reasons if it thinks it's been tampered with, which seems to be a reasonable precaution for a device component that can authenticate you across the device and also external services including financial transactions.

    A better option would be to instead disable TouchID if tampering is suspected, but this isn't a case of Apple just arbitrarily making iPhones not work if you get a third-party repair like the story suggests.

    1. Re:Context On the Issue by pushing-robot · · Score: 5, Informative

      Apple's response, by way of MacRumors:

      An Apple spokeswoman commented on the issue, referring to protective security features intended to prevent "malicious" third-party components from potentially compromising a user's iPhone as the main reason for the "error 53" message.

      We protect fingerprint data using a secure enclave, which is uniquely paired to the touch ID sensor. When iPhone is serviced by an authorised Apple service provider or Apple retail store for changes that affect the touch ID sensor, the pairing is re-validated. This check ensures the device and the iOS features related to touch ID remain secure. Without this unique pairing, a malicious touch ID sensor could be substituted, thereby gaining access to the secure enclave. When iOS detects that the pairing fails, touch ID, including Apple Pay, is disabled so the device remains secure.”

      She adds: “When an iPhone is serviced by an unauthorized repair provider, faulty screens or other invalid components that affect the touch ID sensor could cause the check to fail if the pairing cannot be validated. With a subsequent update or restore, additional security checks result in an ‘error 53’ being displayed If a customer encounters an unrecoverable error 53, we recommend contacting Apple support.

      --
      How can I believe you when you tell me what I don't want to hear?
    2. Re:Context On the Issue by Forgefather · · Score: 1

      Replying to undo accidental downmod

      --
      "There are lies, there are damn lies, and there are statistics"
    3. Re:Context On the Issue by OverlordQ · · Score: 2

      > Sense this stores data required for the fingerprint authentication, the device will refuse to function for security reasons if it thinks it's been tampered with

      Bullshit. Why would it only 'break' after an iOS update instead of the next time you used it?

      --
      Your hair look like poop, Bob! - Wanker.
    4. Re:Context On the Issue by techpeon · · Score: 1

      So it detects this change "weeks or months" after the repair. Sounds like a great implementation of a security feature!

    5. Re:Context On the Issue by avandesande · · Score: 1

      This sounds like a bogus excuse to me- doesn't the OS/CPU process the fingerprint information? It's a bad design if the sensor does the whole thing.

      --
      love is just extroverted narcissism
    6. Re:Context On the Issue by Ryan+McLaughlin · · Score: 1

      "What's more insiduous is that the error may only appear weeks or months after the repair. "

      I think that is plenty of time for the bad guy to get all your data.

    7. Re:Context On the Issue by retchdog · · Score: 2

      the detection is part of iOS 9. it detects the change once you install iOS 9. this could happen days or "weeks or months" or years after the repair, but that's a kind of silly and misleading way to describe it.

      --
      "They were pure niggers." – Noam Chomsky
    8. Re:Context On the Issue by Chris+Mattern · · Score: 1

      OS processes the information but if you're spoofing the sensor, you can make it see whatever you want it to see and thus come to the desired conclusion.

      Still doesn't explain why they didn't just deactivate the device instead of bricking the phone, or why they wait until an iOS upgrade to do it.

    9. Re:Context On the Issue by adamstew · · Score: 4, Interesting

      Because there was a flaw in the security before the update that allowed you to swap out the Touch ID sensor. The update patched a flaw and then the phone noticed a problem with the trust of the hardware.

    10. Re:Context On the Issue by avandesande · · Score: 0

      But there is no way to duplicate the information without doing some kind of man in the middle attack first. I think a warning that the hardware has been changed would of sufficed and leave it to the user to determine if it makes sense....

      --
      love is just extroverted narcissism
    11. Re:Context On the Issue by adamstew · · Score: 1

      The sensor doesn't process the fingerprint information, but when the encryption of the underlying filesystem is setup, it creates a trust relationship between the secure enclave (dedicated crypto chip) and the Touch ID sensor. This is a security measure to make sure that you are accessing your data on trusted hardware. The whole thing is actually done entirely in hardware in the dedicated crypto chip.

    12. Re:Context On the Issue by Kohath · · Score: 2, Insightful

      Fiendish villainy! How should we punish these monsters!!!? Won't someone think of the children!!!??

      Also, I have this 14-step procedure that they should have thought of in advance to avoid this problem....of enabling 3rd party "repairs". Because why wouldn't a company want to spend a huge amount of time to enable their competitors? Because they're monsters. That's the only explanation.

      And they're even more villainous for "lying" to everyone. They said only good things about their products. Why didn't they pay for TV advertisements to tell us all the potential bad things that could happen? Because they hate you and your mom and want her phone to fail when rapists are breaking into her house. No way could there be anything else going on.

      The class action lawsuit starts now! No one should ever be allowed to make a secure product like this. Or to say good things about it without imagining and communicating all the possible bad things. Or to ever have one of their products fail in any way, regardless of who opens it up and tinkers with the parts inside.

      The internet has spoken.

    13. Re:Context On the Issue by MightyMartian · · Score: 1, Troll

      Translation; You bought an Apple. You're going to pay and pay and pay, and then pay again. Welcome to our Hotel California ecosystem, you stupid hipster! BWAHAHAHAHAHAHA!!!!

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    14. Re:Context On the Issue by Maritz · · Score: 3, Insightful

      When iOS detects that the pairing fails, touch ID, including Apple Pay, is disabled so the device remains secure.

      Which is achieved by making the phone completely inoperable? Sounds like overkill, especially if the touch ID itself is configured by first entering the PIN. Sounds like it would be perfectly reasonable for it to fall back to PIN, unless of course the goal is to generate a new sale by bricking the phone.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    15. Re:Context On the Issue by AmiMoJo · · Score: 1

      If there is a way for Apple to re-validate it, you can be sure that the NSA/GCHQ knows about it, so it's not really a security feature.

      Just look at this bullshit:

      When iOS detects that the pairing fails, touch ID, including Apple Pay, is disabled so the device remains secure.

      What they meant to say was "When iOS detects that the pairing fails, it bricks your phone and destroys all your data." If it really just disabled a few features until you took it to the Apple shop and had them re-validate it, it wouldn't be so bad.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    16. Re:Context On the Issue by tlhIngan · · Score: 2

      This error occurs if the repair involves the TouchID sensor. Sense this stores data required for the fingerprint authentication, the device will refuse to function for security reasons if it thinks it's been tampered with, which seems to be a reasonable precaution for a device component that can authenticate you across the device and also external services including financial transactions.

      A better option would be to instead disable TouchID if tampering is suspected, but this isn't a case of Apple just arbitrarily making iPhones not work if you get a third-party repair like the story suggests.

      And I'd argue Apple did the right thing by bricking the phone - because hardware was tampered with. Who knows what else was modified?

      Perhaps just the sensor was changed, but perhaps it was replaced with something designed to overload the secure enclave and exploit bugs? Once the secure enclave is compromised, the entire device is compromised including all data. By bricking, you ensure the user's data is not accidentally revealed through a hack via a trusted part.

      Basically the trusted part has gone from trusted to untrusted state. The part is no longer trustable, and the secure enclave has some of the highest access available in the system. If the enclave cannot trust the trustable fingerprint reader, it should dump all the system keys to prevent accidental exposure of user data through a bug in the enclave.

      Remember, Apple's doing a privacy thing now - it's the one advantage they have over Google.

    17. Re:Context On the Issue by BronsCon · · Score: 1

      Remember, Apple's doing a privacy thing now - it's the one advantage they have over Google.

      Google has mandated full-device encryption starting with 6.0, only allowing exemptions for devices which were already on the market before the requirement and, then, only when those devices lack the required hardware. In short, any device shipping with 6.0 is just as secure; and many shipping with 5.0 shipped in the same secure state, I know my Nexus 6 did.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    18. Re:Context On the Issue by david_thornley · · Score: 1

      I can set my iPhone so that, after ten failed access attempts, it will permanently lose the key it used to encrypt the phone, which effectively destroys the data. This would be inconvenient, but I generally think that if there's data that is stored on one device that you carry around and can easily lose or break you really don't have it anyway. Apple makes it dead easy to back stuff up, so that it can be restored in that eventuality.

      If Apple could restore the data, so could the NSA. I'd rather go with the Apple system.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    19. Re: Context On the Issue by Anonymous Coward · · Score: 0

      The sad part is most people don't get upgrades and are stuck on 4.4. So right now this new 6 feature does fuck all for them.

      Hint: fix your broken update system first. No buying a nexus doesn't fucking count. Not everyone wants a shitty spy on me phone.

    20. Re:Context On the Issue by l.a.rossmann · · Score: 2

      If it's security, then why doesn't the 5S error 53 when you change the button?

      Should the iPhone 5S be recalled **IMMEDIATELY** for being an insecure touchid device?

      If it's a security flaw, recall the 5S. If it's not a security flaw... cut the shit, and stop bricking phones that someone replaced the button on because sweat while they were running and decided to answer a text got into the phone.

      If Apple sees sweat damage in the phone, it's $300 to replace it. Surely the world understands why a customer would opt to spend $50 to have someone else replace the button. It's a button. Not a lightsaber... us mere mortals are actually qualified to work on this stuff.

    21. Re:Context On the Issue by ChumpusRex2003 · · Score: 1

      The detection was always present, but the aftermarket sensor exploited a security vuln in the bus protocol.

      That vuln was patched in the latest firmware update.

    22. Re:Context On the Issue by Anonymous Coward · · Score: 0

      Obviously when your horse throws a shoe you shoot the horse. It's the only way to be sure !

      Or in this case the guy you bought it from shows up and empties a magazine in to the poor equine

      Apple logic for beginners!

    23. Re:Context On the Issue by Anonymous Coward · · Score: 0

      "Because there was a flaw in the revenue maximation model before the update that allowed you to swap out the Touch ID sensor."

      There fixed it for you

    24. Re: Context On the Issue by BronsCon · · Score: 1

      Hint: fix your broken update system first.

      The Nexus line, being vanilla Android without any vendor- or carrier-specific modifications, has a very well-defined update system that works quite well. Google can't update system images that have been modified by 3rd parties (even on a Nexus; if you root or otherwise modify the system, you must flash a fresh factory image to update) lest they break things by replacing modified binaries with new, incompatible ones. This is why Google only directly updates their own devices.

      No buying a nexus doesn't fucking count.

      So you'd rather blame Google for the actions of Samsung, HTC, LG, AT&T, Verizon, Sprint, and T-Mobile?

      Not everyone wants a shitty spy on me phone.

      Which is why they don't buy from Apple, Microsoft, Samsung, or HTC, or use any phone sold by AT&T, Sprint, or Verizon (CarrierIQ). That leaves LG on T-Mobile, cheap Korean and Chinese knock-offs that likely have their own spyware and backdoors baked in, and the Nexus line. Oh, and Blackberry, but really?

      Or were you trying to insinuate that Nexus phones are covert spy devices? And, if so, what makes you think Google would allow any other Android device to be different if they were in charge of updating them all?

      The amount of outright ignorance in your post would be astounding if you weren't AC.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    25. Re:Context On the Issue by WaffleMonster · · Score: 1

      This error occurs if the repair involves the TouchID sensor. Sense this stores data required for the fingerprint authentication, the device will refuse to function for security reasons if it thinks it's been tampered with

      What security reason would that be? Do you serious believe any consumer device can withstand physical access of an attacker and remain secure?

      Fingerprint authentication itself is NOT even secure. This is a laughable concept at best. The "key" needed to unlock the device is probably smattered all over the device and packaging materials.

      A better option would be to instead disable TouchID if tampering is suspected, but this isn't a case of Apple just arbitrarily making iPhones not work if you get a third-party repair like the story suggests.

      This is exactly the case of Apple doing just that while using language of "security" doublespeak to explain how their actions are in the customers best interest.

  9. You think it's YOUR phone? by LynnwoodRooster · · Score: 2, Interesting

    In the Apple world-view - you're just borrowing their property. Never mind you paid for it, it's still theirs and they retain 100% right to do anything to it at any time, and you just have to accept it. Because, you know, It Just Works. For them...

    --
    Browsing at +1 - no ACs, I ignore their posts. So refreshing!
    1. Re:You think it's YOUR phone? by david_thornley · · Score: 1

      In the Apple world-view, Apple is protecting you and your property and your data against security threats. They retain no right to do anything to it, but they don't have to disable security features that were in the thing they sold you, and those features can trigger.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  10. The walls continue to grow higher and higher by QuietLagoon · · Score: 0
    The walls around Apple's Walled Garden are beginning to look more like prison walls, not garden walls.

    .
    It definitely makes one take a step back and think, who or what are the walls really protecting?

    1. Re:The walls continue to grow higher and higher by gstoddart · · Score: 1

      Oh, get off your high horse ... every damned bit of consumer electronics is moving in this same damned direction.

      Microsoft is trying desperately to replicate the same thing, likely so is Samsung, and in some ways Google is too, and probably everybody else is too.

      Here's a simple decision tree: if it's sold by a corporation, nobody gives a fuck about your rights, they care about their revenue stream.

      And if Apple didn't implement some form of tamper protection for their devices people would freak over that ... and law enforcement and phone thieves would just swap out parts and bypass all of your security.

      So, pick one ... Apple makes an insecure pile of crap, or Apple are teh evil draconian bastards. There's not a whole lot of middleground.

      People are always going to whine about either.

      --
      Lost at C:>. Found at C.
    2. Re:The walls continue to grow higher and higher by mrchaotica · · Score: 1

      Oh, get off your high horse ... every damned bit of consumer electronics is moving in this same damned direction.

      Yes, and that's a reason to fight against it even harder!

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    3. Re:The walls continue to grow higher and higher by BronsCon · · Score: 1

      every damned bit of consumer electronics is moving in this same damned direction

      Right, so we're bent over. That doesn't mean we should just take it. Your legs work. Kick.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    4. Re:The walls continue to grow higher and higher by QuietLagoon · · Score: 1

      I like it when my comments are marked "Troll" on Apple-oriented threads. It means I hit a nerve. :)

    5. Re:The walls continue to grow higher and higher by Anonymous Coward · · Score: 0

      The mongoloid gstoddart's out spewing his unoriginal bs as usual like we don't know it already. Spare us mongoloid cretin. We've all noticed all you can manage is to spit back by rote what others before you have long ago written and you try pass it off as your own. Don't. It's terribly obvious to all reading how stupid you really are. Get off your high horse of self-delusion mongoloid.

  11. So what? by Anonymous Coward · · Score: 0

    Read the EULA. Read the instructions. Apple will replace your phone if under warranty. It is stated very clearly that your iPhone IS NOT SERVICEABLE, either by you or by anyone who is not Apple. Don't like it? Buy something else.

    1. Re:So what? by ledow · · Score: 2

      It doesn't matter.

      Consumer law trumps any EULA, signed consensually or not.

      Apple tried to only give you one year's warranty in the EU, the EU told them that's not how it works. Now everybody gets a "free" 2-year warranty. Amazing, that, given that's its compulsory under EU law on such goods.

      Just because you signed something, just because Apple says something, just because they can point at a line on a piece of paper, does NOT mean that's the end of the matter. By far.

    2. Re:So what? by oh_my_080980980 · · Score: 0

      RTFA ass-hole. No one serviced the fucking iPhone, it stopped working after the update. Person dropped phone, screen had hairline crack but phone still worked, phone got update, error 53. Phone still under warranty, no one touched it, but Apple will not repair or replace. Some customer service there.

    3. Re:So what? by Mr+D+from+63 · · Score: 1

      Read the EULA. Read the instructions. Apple will replace your phone if under warranty. It is stated very clearly that your iPhone IS NOT SERVICEABLE, either by you or by anyone who is not Apple. Don't like it? Buy something else.

      Buy something else is the right choice, but there is a difference between voiding a warranty and bricking a device. If the EULA says the device will be bricked if you repair it yourself, then you have a point.

    4. Re:So what? by sexconker · · Score: 2

      RTFA ass-hole. No one serviced the fucking iPhone, it stopped working after the update. Person dropped phone, screen had hairline crack but phone still worked, phone got update, error 53. Phone still under warranty, no one touched it, but Apple will not repair or replace. Some customer service there.

      “I was in the Balkans covering the refugee crisis in September when I dropped my phone. Because I desperately needed it for work I got it fixed at a local shop, as there are no Apple stores in Macedonia. They repaired the screen and home button, and it worked perfectly.”

      Zoom in.

      RTFA ass-hole. No one serviced the fucking iPhone

      I got it fixed at a local shop

      Closer.

      No one serviced the fucking iPhone

      fixed at a local shop

      Pan left on the suspect and zoom again.

      ass-hole

      There we go!

    5. Re:So what? by BronsCon · · Score: 1

      Where can I read this EULA before I buy the phone? (nowhere) If I disagree with the EULA after buying the phone so I can read it, am I able to return it for a full refund, including any shipping charges, with no restocking fee? (no)

      When corporations stop using EULAs as consumer-rights WMDs, you'll have an argument.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    6. Re:So what? by david_thornley · · Score: 1

      In the US, there are things that cannot void your warranty, no matter what it says. If the phone is under warranty, Apple is still on the hook for warranty repairs. If not, Apple usually provides service at reasonable rates.

      I would think that the repair would include the replacement of the third-party sensor that doesn't match up with Apple security standards.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  12. I smell a lawsuit brewing by Anonymous Coward · · Score: 0

    ... might even be class action!

  13. Prevents MTM hardware attacks by mveloso · · Score: 1

    This prevents MTM hardware attacks on your phone. The interesting question is "how is apple authenticating its hardware?" I mean, it's just a screen and a button with a cable, right?

    1. Re:Prevents MTM hardware attacks by Locke2005 · · Score: 1

      The lightning cable is chipped; I suspect Apple is putting a chip in every component so it can identify it. And of course the additional cost of these custom components is passed on to the consumer; that's why iPhones cost $700. I don't mind that as much as the fact that Apple is the highest-priced flash memory vendor in the world AND you have to buy all your flash memory pre-installed.

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    2. Re:Prevents MTM hardware attacks by powerlord · · Score: 1

      There's actually a chip on the home button to go along with the finger print sensor. That chip has an ID number and it is what is "paired" with the ID on the mainboard.

      I have a 5s with a battery that was failing so I was looking into replacing it. Looked a little too complicated to do myself, but saw a whole bunch of articles about the home button from people who had problems with it when they accidentally ripped the cable.

      --
      This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
    3. Re:Prevents MTM hardware attacks by adamstew · · Score: 1

      The fingerprint sensor has a dedicated encrypted bus with the secure enclave (dedicated crypto chip). The secure enclave then pairs itself with the fingerprint sensor (key exchange).

  14. It's not just due to third party repairs by Anonymous Coward · · Score: 0

    The worst part is that error 53 can happen without the phone being repaired by third party.

    Error 53 happens when the SoC doesn't detect a fingerprint reader with the exact same fingerprint reader that came with the device. That means if the fingerprint reader somehow fails, you'll get Error 53 as well.

    One of the third party repair shop owner Louis Rossmann talked about this on his channel.

  15. This is what happens... by mschaffer · · Score: 0

    This is what happens when you choose to live in the walled garden.
    Leave while you can!

  16. Isn't this the fault of the repair shop? by Anonymous Coward · · Score: 0

    If they can't do a proper repair such that it doesn't brick your phone, then they are at fault, no?

    Should one be able to break through the trust hardware and cause a security vulnerability instead?

    1. Re:Isn't this the fault of the repair shop? by oh_my_080980980 · · Score: 1

      And those phones that were bricked but not repaired....fuck off troll.

    2. Re:Isn't this the fault of the repair shop? by Mr+D+from+63 · · Score: 1

      If they can't do a proper repair such that it doesn't brick your phone, then they are at fault, no?

      Should one be able to break through the trust hardware and cause a security vulnerability instead?

      The only functional difference between a 'proper repair' and a 'third party repair' is typically just $$$$$$$.

    3. Re: Isn't this the fault of the repair shop? by Anonymous Coward · · Score: 0

      Why should any company want to support an item that you might have screwed up with your third party equipment and crappy repairfolk?

    4. Re:Isn't this the fault of the repair shop? by petes_PoV · · Score: 1

      The only functional difference between a 'proper repair' and a 'third party repair' is typically just $$$$$$$.

      If you discount the small detail of the phone getting bricked by the unauthorised repair, yes.

      I can see a lot of people tossing their (slightly) damaged phones and a surge in reported "thefts". Then simply claiming on their insurance, instead.

      --
      politicians are like babies' nappies: they should both be changed regularly and for the same reasons
    5. Re:Isn't this the fault of the repair shop? by Anonymous Coward · · Score: 0

      I have a long diatribe that I want to say, but you people are hopeless. I'll just say, if your security is dependent on which keyboard you're plugged in to, you never had security in the first place. And yes, the fingerprint reader is nothing more then a keyboard.

  17. Don't have a problem with it by Anonymous Coward · · Score: 0, Troll

    Paid a lot of money for my iPhone, partly because I wanted security and not be at the mercy of the carriers for updates. Could have bought a Nexus maybe, but that would be the only equivalent in the Android world. So how is Apple going to guarantee that your phone is utterly unable to be decrypted, has no keyloggers, backdoors, etc. UNLESS they prevent third-party parts from being used? Go to a cheap-ass repair shop and who knows what the hell goes in your phone. If you paid a premium for an iPhone, don't be a cheap-ass when you repair it.

    1. Re:Don't have a problem with it by BronsCon · · Score: 1

      Could have bought a Nexus maybe, but that would be the only equivalent in the Android world.

      All the other Android devices are alternatives; you're right, though, they're not equivalent. So, where are all the alternatives in the iPhone world?

      I see this argument a lot and, really... REALLY? Of course the Android equivalent to the Apple model of developing the OS and hardware is the only line of phones Google develops. Duh much? If someone doesn't like what Apple or Google are offering on the hardware side, where are they to go? Windows? Hah! Blackberry? Hah! So they end up with one of the hundreds of other Android models available. Where is that selection for iOS?

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  18. Amen! by Anonymous Coward · · Score: 0

    Couldn't agree more.

  19. A few considerations: by fuzzyfuzzyfungus · · Score: 1

    In Apple's defense, it does seem reasonably plausible that the biometric sensor widget built into the 'home' button(and quite possibly the cable connecting the home button to the logic board) is a 'trusted' element of the system, in the 'the integrity of the system depends on this part performing as expected and not being malicious' sense of 'trusted'. So, I can see why it would be impossible or prohibitively difficult to keep the biometric authentication feature secure while also allowing random people to swap random hardware in to that part of the system.

    However, what is a lot less clear is why(especially when many iDevices, including current-model ones, simply lack this feature entirely) 'security' demands that the entire phone be bricked, rather than just the biometric features flushing any private storage associated with them and leaving the phone usable as though it were a model without that feature. This might involve wiping all locally stored data, if the device encryption keys are tangled up with the biometric authentication feature's private storage; but it should still be able to function as though you had just restored it to defaults.

    This also raises the question of whether, with the correct incentives, it is possible to induce authorized repair services to introduce malicious components when doing these repairs, and whether doing so would allow you to extract highly sensitive information. Since Apple-blessed repairs can apparently fix home buttons without destroying the handset, and since Apple's line is that tampering threatens the integrity of the authentication system, this seems like a natural place to try to get your malicious part introduced: much more likely that an authorized repair outfit exists in your jurisdiction than that Apple Inc. does; many more low-level techs you could potentially lean on; and home button repairs are a pretty common service request...

    1. Re:A few considerations: by david_thornley · · Score: 1

      There are features to brick certain smartphones under certain conditions, and these have been found to reduce smartphone theft. This may be a good idea or a bad idea in individual cases, and that's a matter to settle between vendor and customer. If one concedes that bricking under some conditions may be the right move, it would seem that bricking if there is a breach of hardware security could easily be in those conditions.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  20. Obvious solution is obvious. by Locke2005 · · Score: 2, Interesting

    Pay the $99/year extortion/insurance that is AppleCare, and always have your phone fixed by Apple under warranty. Then if it gets bricked, it's Apple's fault and you get a new phone. The one thing I've found that Apple does best is customer service.

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:Obvious solution is obvious. by Anonymous Coward · · Score: 0

      Pay the $99/year extortion/insurance that is AppleCare, and always have your phone fixed by Apple under warranty. Then if it gets bricked, it's Apple's fault and you get a new phone. The one thing I've found that Apple does best is customer service.

      And that gets your lost data back how exactly?

    2. Re:Obvious solution is obvious. by The+Good+Reverend · · Score: 1

      If you've been doing automatic backups, you don't lose any more than a day's worth of data. No different than losing your phone, or having it get destroyed somehow.

    3. Re:Obvious solution is obvious. by Just+Some+Guy · · Score: 1

      If you've been doing automatic backups,

      ...which are enabled by default whenever you log into your Apple ID on a new device, and everyone gets 5GB of storage which doesn't include the size of apps themselves because those are re-downloaded from the App Store.

      --
      Dewey, what part of this looks like authorities should be involved?
    4. Re:Obvious solution is obvious. by Dixie_Flatline · · Score: 1

      It's not per year. It's a one-time charge when you buy your device. There's a replacement fee of $75 if they need to replace the phone. They'll do it no questions asked, for any type of damage.

  21. Magnuson Moss Warranty Act? by apenzott · · Score: 4, Insightful
    I would like to see how this squares with the Magnuson Moss Warranty Act.

    The provisions for the FTC and the resultant class action provisions could get expensive.

    --
    The Roman Rule: The one who says it cannot be done shall not interrupt the one who is doing it.
    1. Re:Magnuson Moss Warranty Act? by david_thornley · · Score: 1

      Was the phone under warranty? Does the warranty hold in case of damage incurred in use (the owner damaged the phone and the whole chain of events followed from there)? If the warranty is in effect, did Apple refuse to repair it under warranty?

      An existing warranty cannot be voided simply because third-party parts were used. That doesn't apply if the third-party parts were defective and caused the problem, and in addition a warranty can be voided if the device suffered misuse in the first place.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  22. Laugh by koan · · Score: 2

    Never fails to amuse when people "lose all their photos".

    --
    "If any question why we died, Tell them because our fathers lied."
  23. insiduous insidious by Anonymous Coward · · Score: 0

    just couldn't let that slide.

  24. Simple Solution - Stop Trusting Them by Agent0013 · · Score: 2

    Personally, I don't trust the updates that come out for my Samsung phone. My last phone had the GPS functionality reduced by an official upgrade. There were other things after that upgrade that were removed causing me to loose some data. I now will not install the upgrade that has been in the notification bar for the last year. I am planning on putting Cyanogenmod on there because I do trust them to do upgrades that are good for the customer. But the official ones from Sprint and Samsung, no-way. If the Apple fans stopped trusting their beloved company perhaps they would be in a better position. Of course it isn't as easy to mod the Apple and still have access to the apps, so they are more stuck because of their initial decision.

    On a side note, I trust Microsoft even less and never install their updates on my system. I have less fear from viruses and malware than I do from the update coming from Redmond. And with the amount of spying being built into their recent versions of their OS they have become a gaming system only for me. If I want to have a work computer to do things on, it will be Linux. If I want to play games on my big screen tv, I can use Windows. I guess I'm not too worried about them spying on which game I am playing. As the linux gaming environment improves perhaps that will change, but it still seems that the video cards work better and Windows.

    --

    -- ssoorrrryy,, dduupplleexx sswwiittcchh oonn.. -Quote found on actual fortune cookie.
  25. Apple used a TPM chip to protect their product by Trax3001BBS · · Score: 1

    Many years ago, Apple used the TPM (Trusted Platform Module) chip to protect their product from the consumer. Microsoft uses is only now to protect their UEFI chips, My PC motherboard still doesn't require one and a selling point for me.

    And no you don't fix a product who's TPM chip turned against them.

    1. Re: Apple used a TPM chip to protect their product by Anonymous Coward · · Score: 0

      When did Apple use TPM? The only Apple hardware that even shipped with TPM was the Intel transistion development kits but the chip was never used.

    2. Re: Apple used a TPM chip to protect their product by Trax3001BBS · · Score: 1

      When did Apple use TPM? The only Apple hardware that even shipped with TPM was the Intel transistion development kits but the chip was never used.

      Long ago someone countered my claim of the TPM chip, to give a clue of what one looked like I Googled TPM chip then viewed the images, an Apple computer and it's TPM chip was the one I provided.

      I did came across this in answer to your question:
      "A great many enterprise-class laptops manufactured in the last two to three years shipped with embedded TPM chips; Apple's Macs are a key exception, as none since 2006 include a TPM chip." http://www.pcworld.com/article...

  26. Some more info on this topic by Anonymous Coward · · Score: 0

    This wasn't mentioned in the summary, but a touch sensor ID home button will only work with the original iPhone it was shipped with. If for whatever reason it breaks or needs to be replaced, the TouchID part will no longer work although it should still work as a regular home button.

    1. Re:Some more info on this topic by Anonymous Coward · · Score: 0

      I meant to say "the replacement" touch ID part will no longer work as a fingerprint authenticator, although it should still work as a regular home button.

  27. Message to Apple on property rights by Anonymous Coward · · Score: 0

    No, you cannot disable anything on the device without first asking permission of its owner, regardless of how sensible you think that may be. You do not own the device, it is not your property, it ceased to be your property the instant that it was sold. You have no more right to it anymore than its owner still has right to the money that he or she paid for it.

    And it does NOT matter what you write in the terms and conditions of sale. It's a SALE (a transfer of ownership in exchange for money), not a lease, and you lose all property rights over the device the instant that it becomes the property of someone else. You cannot invent conditions of sale that overrule the law of the land.

  28. Um.... duh? by ilsaloving · · Score: 4, Insightful

    Apple has made it abundantly clear that they are selling a *secure* device. Always on encryption, etc etc.

    How would you expect such a device to behave when it is compromised with unauthorized components? A phone with 3rd party components could do pretty much *anything*, including sending everything on the device to an unknown third party, without your knowledge or consent.

    Heck, this sort of "problem" just makes me appreciate Apple's commitment to security even more.

    My only complaint is that the phone doesn't brick soon enough. It should brick itself immediately upon the next boot up.

    1. Re:Um.... duh? by Anonymous Coward · · Score: 0

      Or it could just have a pop-up on every boot that notifies the user that the device has non-standard hardware and let the user decide what they want to do about it...

    2. Re:Um.... duh? by StormReaver · · Score: 1

      How would you expect such a device to behave when it is compromised with unauthorized components?

      It could revalidate the pairing, just like Apple does.

      There is really only one question: Does Apple provide documentation on how to revalidate the pairing? If so, then the problem can be resolved by providing the instructions. If not, then Apple is just being a bunch of dicks trying to lock you into Apple services.

    3. Re:Um.... duh? by Anonymous Coward · · Score: 0

      So you are saying it should revalidate to a possibly compromised 3rd party component?

      How is that secure?

    4. Re:Um.... duh? by sims+2 · · Score: 1

      You've got to trust someone especially if you're replacing the part yourself. That's about as secure as it gets.

      Now if I send it in to apple so it can be imaged and they can rummage through my contacts list after they fix my broken screen that's probably more secure right?

      No I don't think apple actually does that but still yet If you didn't fix it yourself you will never know what's been done to it will you?

      --
      Minimum threshold fixed. Thanks!
    5. Re:Um.... duh? by Anonymous Coward · · Score: 0

      Yea but what stops someone from revalidating the pairing with a rouge sensor and then gaining access to the encrypted data? If theres some iFixit guide to do it, the security is moot.

    6. Re:Um.... duh? by Anonymous Coward · · Score: 0

      Apple has made it abundantly clear that they are selling a *secure* device. Always on encryption, etc etc.

      Apple has made it abundantly clear that they see a market advantage in catering to people who believe in the Security Fairy.

      However, many people don't believe in the Security Fairy, or they simply buy an iPhone for other reasons. These people should be allowed to use the device that they paid for as they see fit. If someone wants to downgrade the alleged security of their phone to save money or time, they should be allowed to do so. Apple could easily institute a system that notifies the user that their device's security level is no longer be "guaranteed", for whatever that is worth cough-nothing-cough.

    7. Re:Um.... duh? by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Are you a racist? Why do you have a problem with red-coloured sensors?

    8. Re:Um.... duh? by phorm · · Score: 1

      Uh, the same way it should if the regular fingerprint reader f***'s up. Fallback to another authentication method (not make the device unusable).

    9. Re:Um.... duh? by Anonymous Coward · · Score: 0

      Heck, this sort of "problem" just makes me appreciate Apple's commitment to security even more.

      No, it doesn't. If you gave one single shit about security, fingerprints-as-passwords being trusted at all would set off huge red flags. You're constantly leaving the equivalent of your password on a sticky note everywhere you go, including on your device. And when it comes to protecting you from law enforcement, forget it; you'd have a better chance at convincing them you're the president of Malaysia than that you cannot be compelled to give up your fingerprints.

    10. Re:Um.... duh? by david_thornley · · Score: 1

      Apple is not big on the common practice of popping up a window in an attempt to blame the user because the user clicked through without reading.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    11. Re:Um.... duh? by Anonymous Coward · · Score: 0

      If a button and a fingerprint sensor can read any data from the device, that's a serious design flaw for a "secure" device. These components should only ever provide data to the OS and never receive anything but TURN ON and TURN OFF signals. This doesn't just keep the device as secure as possible, but should also be the simplest and cheapest hardware design.
      If Apple feels the need to brick a device because these components were replaced, they're either doing so maliciously, or in an attempt to cover up a serious security fuck-up.

    12. Re:Um.... duh? by Anonymous Coward · · Score: 0

      Why would Apple tell people how to revalidate the pairing? That would mean you could still install a compromised fingerprint reader but make the system accept it as legit.

    13. Re:Um.... duh? by rasmusbr · · Score: 1

      Yeah, you could brick the device, or you could pop up a warning on each boot:

      "Third-party hardware or hardware tampering detected! Touch ID has been disabled."

      Gee, I wonder which solution the customer would prefer!

    14. Re:Um.... duh? by Anonymous Coward · · Score: 0

      oh great, so let's just let the unknown and probably untrusted hardware, and possibly a new malware vector into your phone be trusted by fools who want to save $5 by getting it re-pared from such instructions. - makes perfect sense to someone who likes the idea of making a secure device and process insecure for some sort of gain. NO thanks!

    15. Re:Um.... duh? by daedalus2097 · · Score: 1

      Why not just disable the compromised functionality? There's always the fallback functionality of the PIN code, so why not just disable the fingerprint sensor and related functions?

  29. Jobs' plan has come to fruition... by dasgoober · · Score: 1

    You can recognize the "sucker born every minute" from their white headphones, and then, that fool and his/her money can be soon parted.

  30. Faggots are nasty by Anonymous Coward · · Score: 0

    And are filthy pedophiles: www.ncbi.nlm.nih.gov/pubmed/1556756

    Sodom's obliteration, Pompei's destruction, the Black Plague, WWs, Hiroshima & Nagasaki etc. are because of the faggots' proliferation. (Beware monosodium glutamate!).

    Apple is exemplarly collapsing, at last.

  31. Violation of the Magnuson-Moss Warranty Act by BarbaraHudson · · Score: 4, Informative
    Here you go

    The federal minimum standards for full warranties are waived if the warrantor can show that the problem associated with a warranted consumer product was caused by damage while in the possession of the consumer, or by unreasonable use, including a failure to provide reasonable and necessary maintenance.

    There is clearly an implied warranty that updates won't be malicious, even after the warranty period. The phone wasn't damaged by the consumer - Apple chose to brick it willingly. Even if the phone was out of warranty, they don't have the right to purposefully damage it, any more than a car company can claim lack of responsibility because an oil change was done at a competitor, unless they can show that the product's failure was because of the competitor's actions.

    --
    "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
    1. Re:Violation of the Magnuson-Moss Warranty Act by david_thornley · · Score: 1

      The phone was indeed damaged by the consumer, which is why said consumer found a third-party shop to try to repair it. The third-party repair by itself can't void a warranty, but it can if not done properly, or if the problem is caused by some nonstandard feature of the third-party repair part. Since this part is one of the basic features of the phone security system, it makes sense for Apple to be fairly exacting.

      There is no implied warranty that updates won't make things worse. I've had lots of things work worse after updates over the years. Also, iPhone updates are voluntary, not mandatory. There are nag screens until you either update or tell the nag screen to go away, and both options just work. I've used iPhones without the latest update and had no problems.

      The update was not malicious. The update apparently had further security checks, or the process of updating triggered a more comprehensive suite of security checks than were normally done. For a company that is trying to position itself as the secure and private one, it makes sense to err on the side of security when a potential hardware security breach is detected. It isn't like Apple was trying to destroy the advertised feature set by providing an update mandatory for online play that would destroy an OtherOS feature, and the Sony assholes got away with that despite litigation.

      Moreover, I didn't read that (a) the phone was under warranty to start with, and (b) Apple declined warranty repair without good reason. Apple was willing to fix the phone, just not for free. Apple's generally good about things like that.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    2. Re:Violation of the Magnuson-Moss Warranty Act by Anonymous Coward · · Score: 0

      The phone wasn't damaged by the consumer - Apple chose to brick it willingly.

      Not only are you incorrect, but you are so wrong that it is borderline off topic.

      First is the use of "damaged by the consumer" phrase. It is highly unlikely this is even the owner of the phone, nor is it a "3rd party repair shop"

      Clearly and obviously, this person stole an iPhone from an unknowing victim, and this "3rd party repair shop" is nothing more than a cover/front for his black hat hacking ring.

      Attempting to bypass all of the phones encrypted data, to steal it from the legitimate owner, and then blatantly refuse to accept Apple's free replacement phone since the hacker is fully aware taking a stolen phone with a hacked fingerprint reader who's only purpose is to fake the owners finger print and unlock the device would be arrested on the spot for theft, fraud, and multiple counts of violating the computer abuse and fraud act.

      Thankfully Apple has engineered protections into their hardware so these types of hackers can't steal our data so easily as just replacing the scanner with a finger print skimmer or replay device.

      At least someone cares about our data and privacy.

      It would be like attempting to return a stolen car for warrantee repair when you clearly don't have the keys, registration, and have ripped the steering column out and have it hotwired as well as drilled a massive hole in the door to access the door lock.

    3. Re:Violation of the Magnuson-Moss Warranty Act by BarbaraHudson · · Score: 1

      The phone kept working fine after the repair. This was a purposeful brick; the user has the right to install components that aren't from Apple at any point in time, warranty or not. If you install fancy lights or a higher-performance exhaust or a better battery or a better sound system on your car, this doesn't give the manufacturer the right to brick your car. Ever.

      Before bricking the phone, to avoid liability, they would have to warn the user that unauthorized parts have been detected and the phone will be bricked. Of course, if they did that, a screenshot would be enough for a class action under Magnuson-Moss.

      The car companies were the original targets of Magnuson-Moss - "You had your oil change done elsewhere, and you didn't use our brand of oil, your warranty is now void."

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
    4. Re:Violation of the Magnuson-Moss Warranty Act by BarbaraHudson · · Score: 1

      Did you even read the article? Off course not. Anyone whose fingerprint reader stopped working had their phone bricked - they didn't have to do any sort of repair to have the error occur. And it's highly unlikely that someone who is using a stolen phone is going to allow his name to be published in relation to this issue. No free replacement was offered, so quit making things up.

      In other words, go troll elsewhere.

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
    5. Re:Violation of the Magnuson-Moss Warranty Act by david_thornley · · Score: 1

      The phone was insecure after the repair. iOS versions before 9 apparently didn't check for that.

      Magnusson-Moss applies to warranties, which this doesn't seem to be about, and does have its limits. If your chosen oil-change place uses fine sand instead of oil, that is going to cause damage and is going to void the warranty on a lot of stuff. It is legal to void the warranty if the third-party repair or part is involved in the damage. In this case, the repair created a security breach.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    6. Re:Violation of the Magnuson-Moss Warranty Act by BarbaraHudson · · Score: 1

      Every software update comes with an implied warranty of fitness for use, so Magnuson-Moss applies. Also, some of these phones were under their original warranty at the time, and worked fine afterwards, until the software update bricked them. Some of them weren't even repaired - just the original button stopped working, so the phone got bricked. How is THAT a "repair created a security breach", when there was no repair and the phone was under warranty?

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
  32. Anti-tying provisions by Khyber · · Score: 1

    I do believe the Magnusson-Moss Warranty Act has Anti-tying provisions that would explicitly forbid this kinda of fuckery. I might be wrong. A further reading of court interpretations is required, I already know the act itself.

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    1. Re:Anti-tying provisions by david_thornley · · Score: 1

      You are probably thinking of the provisions that a warranty may not be voided just because of third-party service or third-party components. I've seen no evidence that Apple claimed anything of the sort. The device was initially damaged by the owner, which tends to void warranties. It then suffered a problem caused by the fact that either the repair or the part or both weren't done up to Apple's standards, and using substandard repairs or components can void the warranty for any problem caused by them. (There used to be a practice of voiding warranties on the whole device due to complaints about irrelevant modifications or repairs, and that isn't legal anymore.)

      The user originally damaged the device, which tends to void warranties in the first place. After that, the repair of a critical security component wasn't done up to Apple standards, and that may or may not void the warranty, depending on the situation. (You could argue that Apple's lack of support of third-party repairs means that the third-party repair can't void the warranty in any case, and I don't know if that would work or not.)

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  33. You're an idiot. by Brannon · · Score: 1

    nt

  34. Definitely not a violation. by Brannon · · Score: 2

    This was a case of an un-authorized service which creates a security hole.

    1. Re:Definitely not a violation. by Anonymous Coward · · Score: 0

      Apple does not have the right of first refusal for any given service provider. If the item works when the service provider has finished repairing it, then the item works. The fact that the bricking can occur months after the repair is made shows that this is quite certainly a violation of Magnusson-Moss on the software update that they provided. The software is certainly faulty.

      Additionally, they are actively breaking things that work. That's vandalism, which makes this a criminal matter.

    2. Re:Definitely not a violation. by Carewolf · · Score: 1

      This was a case of an un-authorized service which creates a security hole.

      No, it wasn't. The only security hole, was the security of Apple's income from customers dum enough to buy their products.

      Think about this again: A non licensed repair to a car may make the car less safe, but that does not, under any circumstances give the car manufacturer the right to sneak in an willfully destroy the car. Nor does it make sense them them to do so, except to protect their own repair shop income.

    3. Re:Definitely not a violation. by Anonymous Coward · · Score: 0

      I'm fairly sure that the customer authorized the service. What are you talking about?

  35. Re:Yes. Yes MS does brick hardware if you are not by SecurityGuy · · Score: 3, Informative

    That's not bricking. Bricking would be MS rendering components in the computer or the entire computer unusable.

  36. Apple loses market share, by roc97007 · · Score: 1

    ...responds by being more of a dick. Yeah, that's gonna help.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  37. That's not how computers & laws have ever work by Brannon · · Score: 0, Flamebait

    You own the hardware and you can do whatever you want to it--but you are in no way entitled to have the original manufacturer support your efforts to make mods to the hardware or to support you when you've violated the terms of the warranty.

    If you drop it and then take it to an unauthorized service vendor and they damage it--then you're on your own.

    BTW: you're also not required to take OS updates, you have to click through a lot of legalese in order to get one. In this case the customer chose to take an OS update, unaware that the new OS detected a security violation that exposed their un-sanctioned repair work.

    This is how things have always worked with any kind of device ever sold before in the history of mankind. The problem is that you're an idiot.

  38. Doesn't make sense by larryjoe · · Score: 1

    This sounds like pure greed and malice to me. Why not temporarily incapacitate the phone until a trusted sensor is detected? That provides both security and value to the user (i.e., doesn't have to pay Apple to buy a new phone). Isn't bricking the phone similar to HP bricking an inkjet printer upon sensing a non-HP ink cartridge? Not even HP was that evil.

    But this is at least consistent on Apple's part. I have an iPad 2 that consistently gets worse with every iOS "upgrade", to the point of frequent multi-second lags as well as hangs that require reboots. All this supposedly in the name of helping the user, but actually truly in the name of increasing Apple revenue.

    1. Re:Doesn't make sense by david_thornley · · Score: 1

      AFAICT, the phone was temporarily incapacitated until a trusted sensor was detected, and the issue is that no trusted sensor was ever installed, so the phone was useless.

      If your only experience with upgrades that make things worse is with Apple, then you have used pretty much nothing but Apple stuff, and have no basis for comparison. Lots of upgrades from all over have made things worse on my systems over the decades, so I check out each incoming upgrade to see if I really want it. On my iPhones, when I decide not to install an update, I touch the spot on the nag screen that says I'll never upgrade, and everything is fine after that.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    2. Re:Doesn't make sense by larryjoe · · Score: 1

      AFAICT, the phone was temporarily incapacitated until a trusted sensor was detected, and the issue is that no trusted sensor was ever installed, so the phone was useless.

      Where do you read that the the phone can be repaired? The article says multiple times that it couldn't be repaired, e.g., "When pressed for more information about the error, few, if any Apple employees could offer an explanation. There was no part they would replace, no software fix, and no way to access the phone’s memory. The fix was a new iPhone."

      Temporary incapacitating is at least not totally evil, but that's not what the article is saying. It could be that the bricking was temporary, but if the Apple folks refuse to fix it, then it's effectively bricked.

      If your only experience with upgrades that make things worse is with Apple, then you have used pretty much nothing but Apple stuff, and have no basis for comparison. Lots of upgrades from all over have made things worse on my systems over the decades, so I check out each incoming upgrade to see if I really want it. On my iPhones, when I decide not to install an update, I touch the spot on the nag screen that says I'll never upgrade, and everything is fine after that.

      No, Apples SW upgrades aren't the only ones that degrade systems. However, at least for my systems, the Windows and Linux upgrades aren't even close to the damage that the iOS upgrades have done to the iPad.

    3. Re:Doesn't make sense by xombo · · Score: 1

      While you can dismiss the dialogue urging you to update, you will continue to be prompted with every incremental release thereafter. Furthermore, the iDevice will continue to attempt to download the installation package when the phone is connected to WiFi. The settings app will be continuously ballooned with a notification until you comply. Finally, iTunes will display the same nag for each available update. AFAICT there is no way to permanently disable updating, entirely.

      And that's all assuming you don't take it into Apple and they update it without asking.

  39. Reminds me of a similar problem with Apple by SecurityGuy · · Score: 1

    My daughter's phone had a damaged screen and was out of warranty. Rather than pay $199 for apple to fix it, she had a mall kiosk do it for $100. When she had problems, we decided to maybe let Apple fix it after all and eat the $100. The Apple Store folks told us that once the screen had been replaced by someone else, they wouldn't touch it.

    Understand, I'm not saying they wouldn't cover it under warranty, which is totally reasonable. They wouldn't repair it for full retail ($199). ObCarAnalogy: Go to Jiffy Lube for an oil change and the dealer won't work on your car ever again.

    Just one more reason my next phone is probably not going to be an iPhone.

    1. Re:Reminds me of a similar problem with Apple by Firethorn · · Score: 1

      The Apple Store folks told us that once the screen had been replaced by someone else, they wouldn't touch it.

      At least with cars, there's federal law telling them that they can't do this. Maybe the law's scope needs to be expanded?

      --
      I don't read AC A human right
    2. Re:Reminds me of a similar problem with Apple by sims+2 · · Score: 1

      I've got the same story with microsoft. I had a damaged xbox one that I tried to get repaired at a local shop they didn't have the parts to repair it. So I sent it in to microsoft.
      But since they broke the warranty seal to find they didn't have the parts microsoft would not repair it at any price.
      Ended up mailing it to Pro Console Repair in texas. Works great now but what's wrong with doing out of warranty work?
      Iirc if you disassembled your curta calculator years ago the manufacturer was happy to reassemble it for you for the low price of $300.

      --
      Minimum threshold fixed. Thanks!
  40. Apple should consider when the change was made by Reemi · · Score: 1

    I feel Apple has neglected it's customers in this case.

    During upgrade to the new iOS, they should detect the replaced sensor and issue a warning to the user that the phone should not be considered as a safe device anymore. Maybe even re-issue this warning every week to remember their owners.

    When a replaced sensor is detected AFTER the upgrade (i.e. after an original sensor was detected previously after the upgrade), then Apple can take more serious actions (I leave in the middle if bricking is the right solution). Yes, it will affect 3rd party repairs, but not their customers who repaired their phone for a more reasonable price in good faith.

    Sorry Apple, you could have made this upgrade much smoother for your customers but you willingly choose not to.

  41. well, screw that by roc97007 · · Score: 2

    First I've heard of this. I have a very small side business replacing batteries, headphone jacks, buttons, screens in mobile devices -- I have the factory tools and know where to get the parts. I don't really make any money off it. I got into it mostly from being offended by the electronic waste these devices represent. A handheld shouldn't become useless just because a $3 part has failed, and the cost to fix through regular channels should not approach 50 - 100% of the replacement cost.

    But if Apple is going to brick the device after I've fixed it, I can't in good faith make the attempt. Instead, I'll have to recommend that the customer buy something else -- something actually repairable.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  42. An idea from Brazil comes to real life. by rnturn · · Score: 1

    You can't play in our garden if you allow some Archibald Tuttle-like character mess around with the inside of our products. Even if he does fix for less what we will fix for much more.

    I am so sick and tired of this "no user serviceable parts inside" attitude of companies nowadays. Especially when they take it to the "no technically-capable person serviceable parts inside" level and deliberately break something which, once you've paid for it, is not theirs to be breaking.

    --
    CUR ALLOC 20195.....5804M
  43. Good idea, bad implementation. by thevirtualcat · · Score: 1

    This sort of reminds me of how you can't use Android Pay on a rooted device.

    Would it have been better if Apple said "We've detected unauthorized modifications to your device that are potentially insecure. Access to sensitive information and the features that rely on it have been disabled. Please take your device to an authorized service center for repair." instead of permabricking it?

    Yeah.

    But that's why I have a Nexus instead of an iPhone.

    1. Re:Good idea, bad implementation. by david_thornley · · Score: 1

      Would it have been better if the owner had then had a massive data breach because of the third-party repair that caused serious problems (and this is a reasonable expected outcome for a bad repair in a security system), tried to call Apple out on it, and Apple said, "Remember that screen that came up that you didn't read at the time, because you've been trained to click through screens between you and your goal because they're mostly incomprehensible and stupid? You touched the 'Yes, I realize that the device is unsafe' screen because you couldn't get the phone working without either repair or touching that thing, and so you agreed and everything after this is your fault."? Apple tries to protect the user from such things. This can be a good thing or a bad thing depending on circumstances, and is one thing you should consider in deciding what device to get.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  44. Microsoft will generally not brick your computer. by tlambert · · Score: 1, Insightful

    That's not bricking. Bricking would be MS rendering components in the computer or the entire computer unusable.

    Microsoft will generally not brick your computer.

    They may decide, however, that if you have replaced sufficient components of the computer, that it is not the same computer for which the OS has been licensed, and refuse you the right to run the OS. You're still free, however, to either put some of the old components back so that that's no longer the case, or boot Linux on the thing instead.

    In the case of the OP, technically, they've replaced enough components that Apple has decided that it's not the machine for which iOS was licensed to run, which is very similar in scope.

  45. Re:Microsoft will generally not brick your compute by ericloewe · · Score: 2

    I must disagree.

    There are two distinct scenarios: upgrades and repairs.

    If you end up replacing every component in your PC over time, it's legitimate to say that it's a new computer. In practice, it's tied to the motherboard.

    On the other hand, if you just replace the motherboard with an identical model (or similar, they don't care about those details), you can speak to a support person and they'll activate the new board for you in a minute.

  46. Re:Microsoft will generally not brick your compute by phantomfive · · Score: 2

    You're still free, however, to either put some of the old components back so that that's no longer the case, or boot Linux on the thing instead.

    Or buy another Windows license, or call Microsoft and tell them what happened......
    There are plenty of options in the Windows case that aren't available in the iOS case.

    --
    "First they came for the slanderers and i said nothing."
  47. Re:Oh boo fucking hoo by Anonymous Coward · · Score: 0

    Wow the reality distortion field has you fully in its grasp. Calm down, take a breath, and don't get so worked up. Its bad for your heart.

  48. Re:Microsoft will generally not brick your compute by david_thornley · · Score: 1

    If the fingerprint sensor had been replaced with an identical one, I'm pretty sure the phone would have continued to work. I assume that what has happened is that the component was replaced by a different component that does something similar in normal use.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  49. Interesting summary on Error 53 by Louis Rossman.. by bev_tech_rob · · Score: 1
    --
    You're messin' with my Zen Thing, man.....
  50. Re:Microsoft will generally not brick your compute by CrashNBrn · · Score: 2

    I think you would be really hard-pressed to get a refusal to activate from a MS phone-rep, so long as your license is verifiably valid (and even in some cases when it's not valid, as you got scammed online).

  51. Apple always gets away with it. by Ecuador · · Score: 5, Interesting

    Apple always gets away with it and the other vendors don't follow, because they don't have customers who will eat up anything.
    Let me give you an example just from my experience. My 3rd iPhone 4S in a row has failed in the same exact way: wifi/gps disabled. Just do a quick google about the "grayed out wifi" problem, you will find thousands of posts and also a lot of iPhone 4/4S phones on ebay with that fault. Only the first of the 3 failed within warranty in my case and all three where always in an office and used once a week for testing/debugging (that's why I kept replacing it, I test on various devices). People have actually pinpointed the problem: the overheat detection of the wifi/gps module fails and the software disables it. In fact, this disabling was a "feature" introduced with iOS 6 IIRC, so people who had stayed with iOS 5 did not get the issue. For any other company there would have been a recall, since it would have been an easy class action otherwise, and even a software patch would fix it. But apple is happy with customers getting a new phone and their average customer doesn't mind much.
    Ooh, another example, my boss, who you would call a dedicated Apple fan, had bought a mac mini 5-6 years ago. After 6 months it started killing his keyboards. He went through a few expensive/fancy keyboards before figuring out it was the mac mini and so he took it to the Apple store (Manhattan) where they diagnosed a faulty MB and told him it would take a week to have it replaced. He left it there, got a call about a delay and finally went to get it almost two weeks later. Instead of returning a fixed mac mini they told him they had voided the warranty because they found "dust" inside!!! And the only solution they offered was a 10%-off a new mac mini!!! And he took it!!! Bought the same thing, at a 10% discount!!! He didn't even flinch, I mean, I only found out because I asked, he did not find it interesting enough to mention. My jaw dropped when I heard it, I told him there is no such thing as warranty voided because of "dust", that if the device maker thinks they should not have dust they put a little filter in the computer intake (I do that in my custom builds), that a 6-month old mac mini in a no-pet no-smoke office would not have any dust anyway (and even if it did, why would it fail when decade old dusty components work fine). For all my arguments his response was "the apple genius told me my warranty is voided there is nothing I can do". He actually believed they were right. Even after I showed him the warranty which of course does not mentions dust he though they were right somehow...

    --
    Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    1. Re:Apple always gets away with it. by AmiMoJo · · Score: 2

      Just look at the number of people defending Apple here, inventing fanciful excuses for them. Apple loves bricking third party hardware, I mean just look at the decade long war on cheaper cables. Every OS update bricks a few more, forcing you to buy the really expensive Apple ones. Apple laptops like to reject third party chargers...

      The message is clear. Buy our really expensive accessories and servicing, or expect your hardware to be bricked.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re:Apple always gets away with it. by Ecuador · · Score: 1

      Yeah, imagine if you bought an expensive car and you had a minor collision, broke your head light, replaced it with an after-market one (perhaps the only one available in your area) and drove away. Then, after a few months the car manufacturer sent an OTA update that disabled your car and told you "sorry, you should not have done that, but you have the chance to buy our newer and shinier car! 'k thanks bye!".
      Mandatory car analogy...

      --
      Violence is the last refuge of the incompetent. Polar Scope Align for iOS
  52. irretrievable? by superwiz · · Score: 1

    Really? So it actually erases the data? Is it irretrievable or irretrievable without destroying the hardware? It's not possible to take the phone apart and get the internal storage mounted on a different device to retrieve the data?

    --
    Any guest worker system is indistinguishable from indentured servitude.
  53. Re:Oh boo fucking hoo by Anonymous Coward · · Score: 0

    The only people living in a reality distortion field are freetards. The rest of us have too much work to do to fuck around with computers all day.

  54. Re:Apple needs to go away as a company. by david_thornley · · Score: 1

    If you grabbed my iPhone and smashed it on the ground, is Apple supposed to be liable for the damage?

    The iPhone in question was dropped and damaged. It was then repaired by someone who claimed to know what he or she was doing without any certification or anything like that, and it functioned temporarily. A system update provided a new security feature, which was triggered by the repair. Exactly what are you claiming? That Apple should never add security features? That an Apple representative deliberately smashed the phone? That Apple should just trust an unknown third-party component in a major security feature?

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  55. Not defending Apple, but... by the_B0fh · · Score: 2

    There is the possibility that Apple discovered some TLAs have been fucking with their TouchID and using it to steal fingerprints/bypass TouchID.

    Otherwise, Apple typically prefers to have good user interaction rather than bad interaction, and they have to know that if they brick enough people's devices, it's going to be extremely bad press, and reduce the chances of people immediately upgrading when new versions come out - which is a number they really like to keep as high as possible!

    To balance that bad press, against people hacking TouchIDs, and them falling on the "lets keep it secure" side, I can see that happening.

    1. Re:Not defending Apple, but... by WaffleMonster · · Score: 1

      There is the possibility that Apple discovered some TLAs have been fucking with their TouchID and using it to steal fingerprints/bypass TouchID.

      There is the possibility space aliens have been tampering with TouchID as part of a plot to destroy the world on July 4 2016. Perhaps somehow an Apple technician caught on to the alien signal and made the change to save the world from annihilation.

    2. Re:Not defending Apple, but... by Anonymous Coward · · Score: 0

      TLA's don't fuck with Apple devices, they demand apple give them a back door and apply happily agrees (while pretending not to)

  56. If this is about security, why not on the 5S? by l.a.rossmann · · Score: 2

    The iPhone 5S uses the same concept, of touchID in the home button. However, when you change the button on the 5S, you don't brick the phone.

    Apple has some good concepts, but I've spent nearly ten years driving myself nuts trying to find ways to fix devices that they make difficult to repair for no reason. I document that on a YouTube channel I've been posting starting two years ago. https://www.youtube.com/playli...

    This is the most blatant middle finger to the independent repair community, and the customer who wants to fix their old one vs. buy a new one, that I have ever seen. It makes sense to increase the bottom line by creating devices that brick themselves when common parts are repaired outside of Apple. I get it, there are a lot of shitty iPhone screens out there... and a lot of shitty repair people. I've talked about it for years. The reality is that there would probably be less shitty parts out there if Apple didn't go above and beyond to make it impossible to repair their products. If I told you the crap I had to go through to get anything in good condition that was original to repair their products, you'd laugh... but it's true.

    Buttons break all the time.

  57. Re:Microsoft will generally not brick your compute by Anonymous Coward · · Score: 0

    I know microsoft may consider it another computer, but having been through this process about a dozen times, a 5 minute phone call with microsoft gets it fixed. They're concerned about real piracy. If they detect it activated on 1000 machines in a week, that's a problem. If it's detected on a dozen machines over the course of 5 years, they really don't care.

  58. Re:Oh boo fucking hoo by Anonymous Coward · · Score: 0

    The only people living in a reality distortion field are freetards. The rest of us have too much work to do to fuck around with computers all day.

    Sure, selling those used cars is quite the chore. Cognitive dissonance? Sure, all day, clearly everyday.

  59. Re:This is what real choice looks like by Jhon · · Score: 1

    Agreed -- it's an awesome security feature which helps secure your data.

    However, I'm unsure how useful it is to brick the phone rather than disable the fingerprint reader in question and force the user to enter their passcode they created when configuring touch id? I don't see THAT as really adding security while refusing to use the fingerprint scanner and FORCE passcode entry would if it didn't trust the fingerprint hardware.

  60. Irony by Anonymous Coward · · Score: 0

    I see all the folks commenting that Apple's merely licensing the vehicle, blah blah blah, and that he should have gotten it repaired by Apple, or with legitimate parts.

    Sure, I agree, legitimate parts if you can.

    However, I bet everyone making these comments would shit a brick if they were required to take their name brand car to a name brand dealership for repairs, or else void the warranty (oh, wait, am I merely licensing the right to use the car - FUCK NO, I FUCKING OWN IT), or had an insurance company tell them they'd only pay for repairs from a dealership.

    I can't wait for my repaired screen or some other part to cause this error 53, at which point I'm definitely going to go for a class action.

    1. Re:Irony by Anonymous Coward · · Score: 0

      Lol said vehicle and I should have said hardware/phone in that first bit. Need moar caffeines.

    2. Re:Irony by xombo · · Score: 1

      Most vehicle warranties do require that you perform the regularly scheduled service intervals at the right times and at a certified dealership for that brand, otherwise warranty claims can be rejected.

    3. Re:Irony by Anonymous Coward · · Score: 0

      Most vehicle warranties do require that you perform the regularly scheduled service intervals at the right times and at a certified dealership for that brand, otherwise warranty claims can be rejected.

      Nope - sorry, but not true. They DO require that you perform regularly scheduled maintenance, but it does NOT have to be done at a "certified dealership". You can even do it yourself, but you have to provide proof that it was done, and done correctly. That would be the tricky part.

  61. Define "repaired" by SuperKendall · · Score: 0

    The article title is incorrect. If you are fixing the device in such a way it does not work, then it was not "repaired" any more than using Duct Tape to stop a radiator leak is a "repair".

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  62. My Gawd by DontBlameCanada · · Score: 1

    The number of shit guzzling apologists here is truly shocking.

    1. Re:My Gawd by Anonymous Coward · · Score: 0

      Yeh, the usual line up of fucking brainwashed Apple shills.
      Still it's well known Apple updates are designed to vastly degrade the performance of older hardware, to force you into replacing it.
      That's why my 4S will never be "upgraded".
      And why I will never buy another Apple phone.

    2. Re:My Gawd by garote · · Score: 1

      The number of shit guzzling conspiracy theorists here is truly shocking.

  63. Re:This is what real choice looks like by SuperKendall · · Score: 0

    However, I'm unsure how useful it is to brick the phone rather than disable the fingerprint reader in question and force the user to enter their passcode they created

    At first that seems a bit nicer for the user, but thinking longer term I think it makes a lot of sense to disable the device if it's detected it has been tampered with - I feel that's OK because of the ease of restoring the system from a backup, including the secure items in the keychain. If one bit of hardware has been compromised who knows what else was - why risk it? It just adds a lot of complexity around knowing the system is truly secure or not.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  64. Re:This is what real choice looks like by Jhon · · Score: 1

    Ok... then how about notifying the user that the part cannot be trusted and offer them the choice to continue by entering the PIN and disable access to all items in the keychain until repaired by apple? Hell, even flush out all saved passwords and force the user to re-enter for email and other apps.

    I'm really not seeing the justification for bricking the phone out-right.

  65. Re:This is what real choice looks like by bondsbw · · Score: 1

    That's nice, except this bricking appears to be irreversible. The hardware that you bought and paid for (or perhaps are still paying for) is useless, forever, and any data that has not been backed up is also lost forever.

    --
    All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
  66. not a bug/glitch by Anonymous Coward · · Score: 0

    By design, but not to be cruel... How would you like it if your phone could be compromised simply by someone opening it up and replacing the fingerprint sensor with a rogue part? I'm actually surprised, however, that it takes a software update to brick the phone - if anything, that would be a bug.

  67. Re:This is what real choice looks like by ChumpusRex2003 · · Score: 3, Interesting

    I agree. Think of it this way, Apple are trying to push Apple pay which makes use of the system security provided by the fingerprint scanner (the private keys for apple pay are split between the fingerprint scanner chip and the crypto engine chip on the motherboard, so that compromising one chip doesn't reveal the whole key).

    At present, the OS will disable apple pay when it finds that the finger print scanner fails to negotiate key exchange correctly; this potentially ends up with a tech support call to apple, or a social media posting saying, "why does my apple pay keep screwing up?".

    Now consider what happens when there are a large number of field-repaired phones with knock-off fingerprint scanners. They appear to work fine, but some features are broken in subtle ways. The customer is confused; they may not relate it to the repair they had done; it creates an impression of an unreliable product and an expensive customer support nightmare. Clearly, apple want to stop this before it becomes endemic.

    With the OS doing a full power-on self test on the security infrastructure, such a fault would be detected at the first reboot after the damage occurred, or after a repair using an incorrect part was performed. The security failure can now be easily attributed to the damage/repair, even by users of social media and journalists. This ensures that repairers don't perform half-assed repair jobs which can lead to incomplete or faulty operation (on what is marketed as a premium product).

  68. Absurd. by Brannon · · Score: 1

    Say I go to an unauthorized service provider to get my car fixed. They swap out my engine with one that is so flaky and fragile that it explodes if you change the ignition timings.

    Then I go to my original dealer and ask for them to update my software. The software update from my dealer changes the ignition timings because they've found more efficient timings.. The software update works fine with the original engine, but with the new engine it explodes.

    Who's fault is it?

    I'll give you a hint, at some point along the way you signed a piece of paper that says that the manufacturer only covers problems with their design or manufacturing.

    Companies can't possibly be expected to test their software will all possible configurations of third-party modifications.

  69. Re:Apple needs to go away as a company. by WaffleMonster · · Score: 1

    The iPhone in question was dropped and damaged. It was then repaired by someone who claimed to know what he or she was doing without any certification or anything like that, and it functioned temporarily. A system update provided a new security feature, which was triggered by the repair. Exactly what are you claiming? That Apple should never add security features? That an Apple representative deliberately smashed the phone? That Apple should just trust an unknown third-party component in a major security feature?

    What if apple added a credit card swipe to the side of their iPhone x phones and a few years later pushed out a firmware update requiring $1 fee to be paid by card swipe each time phone is started up as a security precaution to validate current owner?

    Are you claiming that Apple should never add security features? That an Apple representative deliberately prevented you from using the phone? That Apple should just trust an unknown operator without $1 fee?

  70. Another way to look at it. by BigU+03C0mpin · · Score: 1

    Considering the iPhone hardware sales gravy train has left the station and iPhone sales are predicted to start declining, Apple has to find a new revenue stream.
    See http://www.bloomberg.com/news/...

    Apple is trying to make itself into a services company. The modern thinking on services company is the subscription model, therefore Apple is trying to nudge people into buying Apple Care. Think about it, even on old number of 650 million phones worldwide, if only 20% of them buy in that's still a hefty $6Bn per year of guaranteed revenue. Playing it as security is a way to deflect the actual purpose.

  71. Re:That's not how computers & laws have ever w by Anonymous Coward · · Score: 0

    They didn't just "not support" the modified hardware - it worked fine after the repair and was systematically disabled by the update.
    That's like if you take your car to the dealership for a routine checkup after having it repaired at a cheaper third-party garage, and they scrap it - without so much as warning you.

  72. Re:Apple needs to go away as a company. by Anonymous Coward · · Score: 0

    Gawd this cunt is shilling for Apple all over this thread.
    What a fucktard.

  73. Re:Microsoft will generally not brick your compute by Darinbob · · Score: 1

    In the past they would just put up a big ugly screen and warn you that the Windows copy is not genuine (warn or accuse, either way). It still gave you time to copy your files off if you needed to.

  74. Re:Microsoft will generally not brick your compute by Darinbob · · Score: 1

    No, there's a security exchange between the CPU and the touch sensor, and by replacing one it needs to have a new exchange only customers and third party repair have not been told how to do this (possibly needing validation with Apple back office servers).

  75. Re:Microsoft will generally not brick your compute by tlambert · · Score: 1

    Or buy another Windows license, or call Microsoft and tell them what happened......

    There are plenty of options in the Windows case that aren't available in the iOS case.

    Really? Because the recommendation at the end of the article was "Call Apple Support".

  76. Re:Microsoft will generally not brick your compute by tlambert · · Score: 1

    No, there's a security exchange between the CPU and the touch sensor, and by replacing one it needs to have a new exchange only customers and third party repair have not been told how to do this (possibly needing validation with Apple back office servers).

    So you're saying the replacement device was /NOT/ identical, because it was incapable of duplicating the crypto exchange.

    I'm pretty sure you are saying exactly what the GP said, yet you are disagreeing with them?!?

  77. Re:That's not how computers & laws have ever w by MrKrillls · · Score: 1

    "If you drop it and then take it to an unauthorized service vendor and they damage it"

    But, the unauthorized servicer didn't damage it. They fixed it. They just don't have Apple's seal of approval on the fix. So Apple trashes the CUSTOMER's property. Great.

    --
    Don't step on the baby.
  78. Re:Microsoft will generally not brick your compute by Darinbob · · Score: 1

    Even the identical devices have unique keys generated for them.

  79. Re:Microsoft will generally not brick your compute by tlambert · · Score: 1

    Identical devices with unique keys are by definition *NOT* identical.

    Or to car analogy it: two otherwise identical cars with different VIN numbers are *NOT* identical.

  80. Freelance photographer LOL by Anonymous Coward · · Score: 0

    Where did he learn the trade? I'm a freelance photographer myself. In the field I carry TWO ruggedized smartphones of which one is kept off for emergencies and a bare-bones oldstyle cellphone that will work for one week on one charge to just make voice calls. You go in the Balkans with an iPhone? Go back working for Hello Kitty Magazine.

  81. Cryptography is hard by DrProton · · Score: 1

    There is a point about security that all the glib commenters here (disable fingerprint allow PIN blah blah ) get wrong: real security is very hard to get right. As Steve Bellovin points out, the Needham-Schroeder key exchange protocol was published in 1978. It took seventeen years to find a flaw in it that allows a man-in-the-middle attack. It was "proven" mathematically correct, too. Still think Apple should just disable fingerprint auth on the iPhone 6? Then you're a fool who has no business commenting on cryptography. If you really want to do cryptography and get it right, you need to approach the subject with a large serving of humble pie.

    Apple is damned if they do and damned if they don't here. Bricking the cryptographically secure device when hardware tampering is detected is the right thing to do.

    --
    "Mit der Dummheit kaempfen Goetter selbst vergebens." - Schiller
  82. It's only half true by Anonymous Coward · · Score: 0

    If you chance screen include the home button ( include the finger print reader) and the logic board it won't work. The rest is fine that's the princip of a secure phone and privacy protection. Homebutton with out finger print reader or screen only is fine

  83. Apple Fools by lucien86 · · Score: 1

    And this is why only a fool buys Apple products.

    Stage 1 - only use the cheapest parts so they are unreliable. Stage 2 - charge the earth.
    Stage 3 - rig the system so only authorised repairs will continue to work..

    Apple Fools !!!

    --
    Below the speed of light Special Relativity is one of the most accurate theories in physics - above the speed of light..
  84. Well by Anonymous Coward · · Score: 0

    The newest update made my iPhone 4S slow as hell... I can't even accept incoming calls... Apple told me I needed to buy a newer phone. Fuck Apple.

  85. Doubt it was intended to be experienced by public by Anonymous Coward · · Score: 0

    There is almost zero chance this was an intentional result on the part of Apple.

    While I am sure Apple is trying to provide a secure environment, and checking for compromised hardware, it is very unlikely that Apple intended for end users to ever see "Error 53". This is likely a factory error, which no one expected end users to experience.

    Apple always puts thought into the wording of error dialogs, trying to make them descriptive for the user. Error 53 is the opposite of that. For this reason, as much as anything else, I do not buy the conspiracy theorists claiming this was an attempt to prevent 3rd party repairs. Its much more likely it was a security precaution to prevent suppliers from substituting subpar parts in the factory.

  86. Buy our shit and face the consequences by Lauriy · · Score: 1

    Apple is quite clear about this.

  87. Re:Apple needs to go away as a company. by david_thornley · · Score: 1

    From my point of view, I'm injecting a little sanity into a big Apple bash. If this had been a large "Apple can't possibly be to blame" discussion, I'd be in there saying why Apple was. I'm not saying Apple did the right thing, because I'm not anywhere close to sure about that, and I don't really like everything they're doing. I'm saying that a lot of you have crap arguments.

    I also don't shill for anyone. I annoy people without any payment at all. You're welcome.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  88. Re:Apple needs to go away as a company. by david_thornley · · Score: 1

    Requiring payment isn't a security feature by any stretch of the imagination. Requiring correct authentication in general can be. To put this another way, nothing has happened to my phone, and it's functioning just like it used to with some improvements. It would appear that iOS 9 runs just fine on a 5S, and I checked for that before upgrading. If there was a problem using my phone for no reason at all, I'd be ticked.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes