exceptionhandler

StrangeDays said:

Fascinating... His 25-tweet thread is really interesting. It sounds like it comes down to the OS using the weaker encryption option on most of a device's relevant content in order to allow the software to do things in the background while your phone is locked -- using the decryption key stored in memory, which attackers have access to:

Most apps like to do things in the background, while your phone is locked. They read from files and generally do boring software things. When you protect files using the strongest protection class and the phone locks, the app can’t do this stuff.

This is super fascinating.  This is the kind of news I enjoy!  And it makes complete sense.  Looking forward to hearing more detail after the holidays.

Gaby said:

I’d be interested to know that if when you manually lock the phone down with a long press on sleep/wake + volume - which locks biometrics and necessitates password Re entry, if this is considered BFU or AFU. Technically it is AFU, but from what I remember Apple execs discussing, that is supposed to lock down the phone. In which case it is still feasible to lock people out without a power down. Hmmm.... 

I’d be curious if doing this operation would work around this as well.  It would also be nice to know if we disable the convenience of the background app refresh, if the phone could be better protected.  Given the above details, it would make logical sense, but I also suppose there are Siri requests that require access to encrypted data.  I would much prefer to get a notification in my Lock Screen saying something along the lines of: process x needs you to unlock your phone to complete.

I’d like to add that I don’t trust these IoT devices, but do see value in their convenience. Which is why I don’t allow them access over the internet and have them segregated on their own network.  I do occasionally access them remotely over a personal vpn, which is the only way I’ve defined access to them.  While this may be more secure than what most are willing to do, this is predicated that there are no vulnerabilities in the vpn (client or server), router, firewalls, and any other network equipment.  Heck most people’s off the shelf wifi routers are just as hackable as these IoT devices.  All this to say, set things up properly, so you’re not the lowest hanging fruit, and you’ll typically be fine.

ne4now76 said:

crowley said:

I’ve no desire to update this year, but I hope the Mini sticks around as that’s definitely the form factor for me. I could stand it getting a bit smaller even. The iPhone 5 was my preferred size.

I went from a 5S to a 7 and SWORE I would never go bigger so I held on to that 7 until last week when I received this new 12 mini and I absolutely love it. 
Im a guy with a size Large hand in gloves, so this has nothing to do with "tiny hands". I just prefer a compact phone. Always have. Even back before they had touch screens. 
This 12Mini's size, shape & feel is everything I loved about the 5S but with a screen that is bigger than the 7 (and it seems significantly bigger when using side by side).
The camera is great and the speed is awesome. 
If you liked that 5 body style, this is perfect. 

I was in the same boat: upgraded from 5S to 7. After about a month I hated the size.  The mini is a welcome change, however I’d like it to be a tad closer in width and height to the 5s.  I’ve got the 7, 12 mini, and a 1st gen SE.  I’ve stacked them in a pyramid of sorts and the 12 mini fits squarely in between.  My only other complaint is I would’ve liked to have the pro camera in the mini; drop the 5g if space is needed for the camera.

Isn’t this the guy who claimed “he was doing this for the small developers”?  The small developers got a break with the lower 15% rate... this is just making his colors shine even truer... so now he is butt hurt that the cut doesn’t apply to epic, which shows this was not about the “small developer”, but rather his own greed (which we all already knew was the case).

simply258 said:

Apple will not enable it. If they haven’t announced it as “coming soon” then they won’t throw a surprise and add it later.

I had a 2nd? gen iPod Touch that had a Bluetooth chip in it but wasn’t announced, and then was later enabled later through software.

They are not necessarily above releasing hardware that is not currently enabled.