Apple is clear about how creating a recovery key puts additional responsibility on the user, but that’s an acceptable trade-off for a technically savvy, organized user. The problem is that once the thief sets or resets a recovery key, it becomes the only way to regain access to an Apple ID account once the password has been lost-Apple says it can no longer help through its usual account recovery process.
Apple has responded sympathetically but hasn’t helped-or been able to help-users get back into their accounts. In short, the thief can lock the victim out of their iCloud account, possibly permanently, preventing access to precious photos and more. In another article (paywalled) and accompanying video, Nguyen and Stern now explore the ramifications of what happens when a passcode thief changes the user’s Apple ID recovery key, which is again doable with nothing more than the iPhone passcode. In the first article, they showed how a shoulder-surfing thief could discover a user’s passcode, steal their iPhone, and change their Apple ID password to disable Find My before making purchases with Apple Pay, accessing passwords in iCloud Keychain, and scanning through Photos for pictures to aid in identity theft (see “ How a Thief with Your iPhone Passcode Can Ruin Your Digital Life,” 26 February 2023). Tech reporters Nicole Nguyen and Joanna Stern of the Wall Street Journal are back with a follow-up on their exposé of Apple’s problematic iPhone security design decisions. How a Passcode Thief Can Lock You Out of Your iCloud Account, Possibly Permanently #1662: New Macs, 12 top OS features for 2023, vertical tabs in Web browsers, watchOS 9.5.1.#1663: Exploring the Apple Vision Pro, 12 more OS features coming in 2023, new Apple service features, Apollo shuts down.#1664: Real system requirements for OS 2023, beware Siri creating alarms instead of timers.#1665: Important OS security updates, abusive Web notifications, solve myopia with an iPhone, Self Service Repair.#1666: Air quality websites and apps, The Password Game.
0 kommentar(er)
