Skip to AAA to bypass what you probably already know.

As reported in the past, a common Apple theft goes:

- someone goes out for drinks
- gets distracted
- punches in a short code to access the phone (4 or 6 digit).

Someone is looking over their shoulder, remembers the code. And later
steals the phone when the owner is not paying attention.
(Other variants of the scheme are out there including face-to-face
social hacks).

Once they have the phone, they quickly:

-change the iCloud password
-go about logging into bank accounts, etc. and transferring money out
(people tend to put passwords in the Notes app w/o protecting that with
another password).
-spending sprees using the phone credit card (Apple Pay) [ironically -
they buy Apple iPads, phones, etc. to resell].

Finally, wipe the phone and sell it. Preference is Pro models.

AAA:
Apple have responded and will release with iOS 17.3 "theft protection
mode" which, when activated, will increase the difficulty of changing
the AppleID password if not near one's home or place of work. Full
details are not out yet, but here's a taste[1].

1. Will require both the code and a biometric (finger or face).
2. Will have a 1 hour time out.
3. Require the code and biometric again.

Same process for changing FaceID and turning off Findmy iPhone.

This is intended to make it too difficult to pull off - the owner would
have a lot more time to react to a missing iPhone.

Of course the better course is to have strong passcodes in the first
place and not store other (bank) passwords in Notes w/o a password over
them...

[1] The above I learned from WSJ report - so I suspect the details may
be a bit off. https://www.youtube.com/watch?v=gi96HKr2vo8

Better explained here?:
https://www.macrumors.com/2023/12/12/ios-17-3-stolen-device-protection-feature/

With clarifications to come (Per MacRumours).
--
“Markets can remain irrational longer than your can remain solvent.”
- John Maynard Keynes.

Alan Browne <bitbucket@blackhole.com> wrote

> Apple have responded and will release with iOS 17.3 "theft protection
> mode" which, when activated, will increase the difficulty of changing
> the AppleID password if not near one's home or place of work.

Old news.

Covered in detail more than a week ago.
Newsgroups: misc.phone.mobile.iphone
Subject: iOS 17.3 has a new iPhone feature called Stolen Device Protection
Date: Wed, 13 Dec 2023 01:19:02 -0400
Message-ID: <ulbes6$3c5ia$1@paganini.bofh.team>

As usual, you iKooks are always belatedly figuring things out too slowly.
--
A key idenfier with iKooks is that they "think" they know something.
But they don't. All iKooks are classic Dunning-Kruger 1st quartile.

> Alan Browne wrote:
> Skip to AAA to bypass what you probably already know.
>
> As reported in the past, a common Apple theft goes:
>
> - someone goes out for drinks
> - gets distracted
> - punches in a short code to access the phone (4 or 6 digit).
>
> Someone is looking over their shoulder, remembers the code. And
later
> steals the phone when the owner is not paying attention.
> (Other variants of the scheme are out there including face-to-face
> social hacks).
>
> Once they have the phone, they quickly:
>
> -change the iCloud password
> -go about logging into bank accounts, etc. and transferring money
out
> (people tend to put passwords in the Notes app w/o protecting that
with
> another password).
> -spending sprees using the phone credit card (Apple Pay)

On 2023-12-21 15:36, MummyChunk wrote:
> So if someone looks up the owners
> home address in the phone - goes their and lets the phone
> automatically connect to Wi-Fi then it defeats Theft Mode since it is
> at a familiar location?

Interesting point (I was also wondering about people who live close to a
bar or who work there...)

I doubt thieves will go much out of their way on this - complicated and
adds other risks. Esp. if the owner gets his act together and uses
FindMy and sees the the thief near his house. 911 ...

That said, per Mac Rumours not all the details on how this works have
been fleshed out. Release is in Jan/Feb.

--
“Markets can remain irrational longer than your can remain solvent.”
- John Maynard Keynes.

Alan Browne <bitbucket@blackhole.com> wrote:
> On 2023-12-21 15:36, MummyChunk wrote:
>> So if someone looks up the owners
>> home address in the phone - goes their and lets the phone
>> automatically connect to Wi-Fi then it defeats Theft Mode since it is
>> at a familiar location?
>
> Interesting point (I was also wondering about people who live close to a
> bar or who work there...)
>
> I doubt thieves will go much out of their way on this - complicated and
> adds other risks. Esp. if the owner gets his act together and uses
> FindMy and sees the the thief near his house. 911 ...

More importantly by that time the owner will have likely triggered lost
mode.

Thieves need to be quick. Messing around with finding specific locations
isn't at all what they want to do.

> That said, per Mac Rumours not all the details on how this works have
> been fleshed out. Release is in Jan/Feb.
>

Chris <ithinkiam@gmail.com> wrote

> More importantly by that time the owner will have likely triggered lost
> mode.
>
> Thieves need to be quick. Messing around with finding specific locations
> isn't at all what they want to do.

It's interesting that all you iPhone users apparently live in the slums.

*Because you're deathly afraid of everyone around you.*

I wonder if you iKooks realize this "protection" is marketing gimmickry?

*I don't have any of those marketing gimmicks on my phone.*

Because I don't live in the slums.
--
Probably not. The iKooks fall for every marketing trick in the book.

On 2023-12-21 17:21, Wally J wrote:
> Chris <ithinkiam@gmail.com> wrote
>
>> More importantly by that time the owner will have likely triggered lost
>> mode.
>>
>> Thieves need to be quick. Messing around with finding specific locations
>> isn't at all what they want to do.
>
> It's interesting that all you iPhone users apparently live in the slums.
>
> *Because you're deathly afraid of everyone around you.*
>
> I wonder if you iKooks realize this "protection" is marketing gimmickry?
>
> *I don't have any of those marketing gimmicks on my phone.*
>
> Because I don't live in the slums.

You think people only get robbed in slums?

How cute!

Wally J <walterjones@invalid.nospam> wrote:
> Chris <ithinkiam@gmail.com> wrote
>
>> More importantly by that time the owner will have likely triggered lost
>> mode.
>>
>> Thieves need to be quick. Messing around with finding specific locations
>> isn't at all what they want to do.
>
> It's interesting that all you iPhone users apparently live in the slums.
>
> *Because you're deathly afraid of everyone around you.*
>
> I wonder if you iKooks realize this "protection" is marketing gimmickry?
>
> *I don't have any of those marketing gimmicks on my phone.*
>
> Because I don't live in the slums.

Because you live in your mom’s basement since your defunct diploma mill
“degree” can’t get you a stable job as a greeter at WalMart. People with
real lives and jobs actually live in what your privileged poseur ass calls
slums. At least mommy hasn’t yet changed the gate code on your mooching
misanthropic ass.

Alan <nuh-uh@nope.com> wrote:
> On 2023-12-21 17:21, Wally J wrote:
>> Chris <ithinkiam@gmail.com> wrote
>>
>>> More importantly by that time the owner will have likely triggered lost
>>> mode.
>>>
>>> Thieves need to be quick. Messing around with finding specific locations
>>> isn't at all what they want to do.
>>
>> It's interesting that all you iPhone users apparently live in the slums.
>>
>> *Because you're deathly afraid of everyone around you.*
>>
>> I wonder if you iKooks realize this "protection" is marketing gimmickry?
>>
>> *I don't have any of those marketing gimmicks on my phone.*
>>
>> Because I don't live in the slums.
>
> You think people only get robbed in slums?
>
> How cute!
>
Nah, he’s just showing what a racist bigot he actually is.

*Hemidactylus* <ecphoric@allspamis.invalid> wrote

> Because you live in your mom's basement since your defunct diploma mill
> "degree" can't get you a stable job as a greeter at WalMart. People with
> real lives and jobs actually live in what your privileged poseur ass calls
> slums. At least mommy hasn't yet changed the gate code on your mooching
> misanthropic ass.

Hi Hemidactylus,

Think about the problem set like any rational adult would, Hemidactylus.
The threat to your data isn't from someone grabbing the phone from you.

All that biometric marketing gimmickry Apple uses to "differentiate" the
product is like putting 10 locks on the door and nothing on the windows.

Apple's iOS has two to three times the zero-day holes & ten times the
exploits, which of course Apple doesn't advertise as it would be truthful.

What Apple advertises are these biometric gimmicks, Hemidactylus.

I'm trying to get you to think sensibly like a normal sentient adult.
You have to think of security not as a bunch of silly marketing gimmicks.
--
People who own iPhones expect Apple to do all the thinking for them
(and Apple is perfectly happy to sell them a ton of marketing gimmicks).

On 2023-12-21 20:12, Wally J wrote:
> *Hemidactylus* <ecphoric@allspamis.invalid> wrote
>
>> Because you live in your mom's basement since your defunct diploma mill
>> "degree" can't get you a stable job as a greeter at WalMart. People with
>> real lives and jobs actually live in what your privileged poseur ass calls
>> slums. At least mommy hasn't yet changed the gate code on your mooching
>> misanthropic ass.
>
> Hi Hemidactylus,
>
> Think about the problem set like any rational adult would,

How would you know how rational adults think?

> > On 2023-12-21 15:36, MummyChunk wrote:
> > So if someone looks up the owners
> > home address in the phone - goes their and lets the phone
> > automatically connect to Wi-Fi then it defeats Theft Mode since
it is
> > at a familiar location?
> >
> Alan Browne wrote:
>
>
> Interesting point (I was also wondering about people who live close
to a
> bar or who work there...)
>
> I doubt thieves will go much out of their way on this - complicated
and
> adds other risks. Esp. if the owner gets his act together and uses

> FindMy and sees the the thief near his house. 911 ...
>
> That said, per Mac Rumours not all the details on how this works
have
> been fleshed out. Release is in Jan/Feb.
>
> --
> "Markets can remain irrational longer than your can remain
solvent."
> - John Maynard Keynes.

Well in the situation where someone is really drunk, I imagine there
could be situations when the perpetrator would have plenty of time to
exploit this weakness.

This is a response to the post seen at:
http://www.jlaforums.com/viewtopic.php?p=657659438#657659438

MummyChunk <mummycullen@gmail-dot-com.no-spam.invalid> wrote

> This is a response to the post seen at:

Again, I realize you're shilling but could you at least answer the question
as to which groups you archive that matter to the people on this newsgroup?

For example,
<http://groups.google.com/g/comp.mobile.android>
<http://groups.google.com/g/comp.mobile.ipad>
<http://groups.google.com/g/alt.comp.os.windows-10>
<http://groups.google.com/g/alt.comp.os.windows-11>
<http://groups.google.com/g/alt.comp.microsoft.windows>
<http://groups.google.com/g/comp.sys.mac.system>
<http://groups.google.com/g/comp.sys.mac.apps>
<http://groups.google.com/g/news.admin.peering>
etc.

I know of only one newsgroup you archive.
<http://www.jlaforums.com/viewforum.php?f=367>

What about the rest?

On 2023-12-22 12:43, MummyChunk wrote:

>
> This is a response to the post seen at:
> http://www.jlafo...

Plonk.

Alan Browne wrote:
> On 2023-12-22 12:43, MummyChunk wrote:
>
>>
>> This is a response to the post seen at:
>> http://www.jlafo...
>
> Plonk.
>

I didn't think he was serious about defending apple's honor and
fighting for truth, justice, and the american way.

He was likely an android spy.

Hank Rogers <hank@nospam.invalid> wrote:
> Alan Browne wrote:
>> On 2023-12-22 12:43, MummyChunk wrote:
>>
>>>
>>> This is a response to the post seen at:
>>> http://www.jlafo...
>>
>> Plonk.
>>
>
> I didn't think he was serious about defending apple's honor and
> fighting for truth, justice, and the american way.
>
> He was likely an android spy.
>
At least you wash Arlen’s jockstrap for him. What you do with it in private
is up to you. You do you.

*Hemidactylus* <ecphoric@allspamis.invalid> wrote:
> Hank Rogers <hank@nospam.invalid> wrote:
>> Alan Browne wrote:
>>> On 2023-12-22 12:43, MummyChunk wrote:
>>>
>>>>
>>>> This is a response to the post seen at:
>>>> http://www.jlafo...
>>>
>>> Plonk.
>>>
>>
>> I didn't think he was serious about defending apple's honor and
>> fighting for truth, justice, and the american way.
>>
>> He was likely an android spy.
>>
> At least you wash Arlen’s jockstrap for him. What you do with it in private
> is up to you. You do you.
>
>

I’ve got it all cleaned just so you can wear it as a mask. Or, use it as a
sling for your hemorrhoids.

Hank Rogers <Hank@nospam.invalid> wrote

> I've got it all cleaned just so you can wear it as a mask.
> Or, use it as a sling for your hemorrhoids.

I'm pretty sure MummyChunk was shilling for his web site, which means most
of the criticism was justifiable but I don't think Hemidactylus understood.

But it doesn't matter since the whole thing is just a gimmick by Apple.
Apple is effectively marketing "slum tools" for people who live in slums.

Otherwise, who is worried so much about someone snatching your phone out of
your hands? Who is that deathly afraid of their next-door neighbor anyway?

Apple doesn't even test much of their code (as proven beyond a doubt by
Google and NOT REFUTED by Apple in the least - Apple simply complained to
Google asking Google to let them know before publishing their holes).

Meanwhile, Apple marketing is brilliant by convincing people that two to
three times the zero-day holes and over ten times the active exploits is a
good thing and that Apple "cares" so much about security that instead of
fixing the bugs, Apple touts gimmicks that iKooks constantly fall for.
--
What Apple convinces people of is that their biggest threat isn't that iOS
has two to three times the zero day bugs but it's their next-door neighbor.

On 2023-12-22 20:47, Hank Rogers wrote:
> Alan Browne wrote:
>> On 2023-12-22 12:43, MummyChunk wrote:
>>
>>>
>>> This is a response to the post seen at:
>>> http://www.jlafo...
>>
>> Plonk.
>>
>
> I didn't think he was serious about defending apple's honor and fighting
> for truth, justice, and the american way.
>
> He was likely an android spy.

No idea. I just don't support people posting un-needed links to grow
some website that seems to have the sole purpose of echoing usenet.

--
“Markets can remain irrational longer than your can remain solvent.”
- John Maynard Keynes.

Alan Browne <bitbucket@blackhole.com> wrote

>>>> This is a response to the post seen at:
>>>> http://www.jlafo...
>>>
>>> Plonk.
>>>
>>
>> I didn't think he was serious about defending apple's honor and fighting
>> for truth, justice, and the american way.
>>
>> He was likely an android spy.
>
> No idea. I just don't support people posting un-needed links to grow
> some website that seems to have the sole purpose of echoing usenet.

I agree with both Hank Rogers and with Alan Browne in that this guy's
actions appear to be unrelated to the topic & solely to shill for his site.

I disagree with Haemactylus who reacted with kindergarten insults to Hank
simply for Hank having said what both Alan Browne & I reasonably agree.
--
To Jolly Roger, the fact I disagree with Hemidactylus makes me an iKook.

Alan Browne <bitbucket@blackhole.com> wrote

> Skip to AAA to bypass what you probably already know.

> As reported in the past, a common Apple theft goes:

> - someone goes out for drinks
> - gets distracted
> - punches in a short code to access the phone (4 or 6 digit).

Why would anyone actually do that rather than use touchID
or FaceID ? While you do occasionally need to enter your
passcode, it isnt often enough for that to be likely and easy to
ensure than no one can watch over your shoulder when you do.

> Someone is looking over their shoulder, remembers the code. And later
> steals the phone when the owner is not paying attention.
> (Other variants of the scheme are out there including face-to-face
> social hacks).
>
> Once they have the phone, they quickly:
>
> -change the iCloud password
> -go about logging into bank accounts, etc. and transferring money out
> (people tend to put passwords in the Notes app w/o protecting that with
> another password).
> -spending sprees using the phone credit card (Apple Pay) [ironically -
> they buy Apple iPads, phones, etc. to resell].
>
> Finally, wipe the phone and sell it. Preference is Pro models.
>
> AAA:
> Apple have responded and will release with iOS 17.3 "theft protection
> mode" which, when activated, will increase the difficulty of changing
> the AppleID password if not near one's home or place of work. Full
> details are not out yet, but here's a taste[1].
>
> 1. Will require both the code and a biometric (finger or face).
> 2. Will have a 1 hour time out.
> 3. Require the code and biometric again.
>
> Same process for changing FaceID and turning off Findmy iPhone.
>
> This is intended to make it too difficult to pull off - the owner would
> have a lot more time to react to a missing iPhone.
>
> Of course the better course is to have strong passcodes in the first
> place and not store other (bank) passwords in Notes w/o a password over
> them...
>
> [1] The above I learned from WSJ report - so I suspect the details may
> be a bit off. https://www.youtube.com/watch?v=gi96HKr2vo8
>
> Better explained here?:
> https://www.macrumors.com/2023/12/12/ios-17-3-stolen-device-protection-feature/
>
> With clarifications to come (Per MacRumours).