How to Fix the FATAL FLAW in iPhone's New Security Feature
ฝัง
- เผยแพร่เมื่อ 27 มิ.ย. 2024
- The new feature is awesome, but I see one big potential flaw 🤔
⇒ Become a channel member for special emojis, early videos, and more! Check it out here: th-cam.com/users/ThioJoejoin
▼ Time Stamps: ▼
0:00 - Intro
0:31 - Potential Flaw Summary
1:11 - My Solution
1:53 - You SHOULD Still Enable Stolen Device Protection
3:39 - How the Thefts Work
4:42 - Benefits Of Stolen Device Protection
5:03 - A Big Potential Flaw
7:14 - The Result
8:24 - What If You Can't Turn It Off Yourself?
8:47 - More Stuff You Should Do
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
• My Gear & Equipment ⇨ kit.co/ThioJoe
• Merch ⇨ teespring.com/stores/thiojoe
• My Desktop Wallpapers ⇨ thiojoe.art/
⇨ / thiojoe
⇨ / thiojoe
⇨ / thiojoetv
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ - วิทยาศาสตร์และเทคโนโลยี
![[HIGHLIGHT] หมีLIVEปะ? | EP.171 เห็นแต่ในจอ วันนี้มาต้องขอคารวะ](http://i.ytimg.com/vi/gPWLxa0e_Z8/mqdefault.jpg)
• UPDATE: Apparently the iOS 17.4 beta has added an option to always require a security delay even at familiar locations, which is a great step. I still really want the ability to specifically choose the familiar locations, to prevent the passcode from being used at all for important tasks.
• ANOTHER TIP: I didn't mention this but several have mentioned that you can actually use the "screen time" feature to add a second separate required passcode for certain functions like account changes. It's a great option but might make it annoying to access other settings like info in the icloud menu.
This video looks like AI'd your face
Is there a way to designate just one location HOME as a familiar location and that's it! Only HOME and nowhere else. Seems to me that would be a popular option.
@@kensteele3363 No. There isn’t.
Another tip: if you can't use FaceID for whatever reason (and if you have iCloud backup enabled! really important!) you can restore your iPhone by putting it into download mode, then restoring and reset it using a Windows/Mac. In most case you won't loose any data.
Guess what: You can still change the screen time password with just your phone password.
if apple would just let us manually enter these locations...
That's exactly what i hate about Apple Products: there are so many annoying little limitations in their whole lineup of products an services.
Then a thief would just enter his home as familiar location…
Or only apply it to work or home
Or maybe select from a map which locations do you want to keep
@@pxnchx93 Then again, it’s a double edge sword.
Update: iOS 17.4 beta includes the option to Always require a security delay instead of just unfamiliar locations, effectively working around this flaw.
It’s not a flaw, it’s a designed convenience for regular people.
It is a flaw if the design fails to consider a very important side of the picture, or if the measures taken for this are insufficient@@SeanTube2099
It’s because normal people will find it annoying that the restrictions exist at all times. So Apple does you a favor and by default makes it so you don’t have to worry about it getting in the way!
Still a flaw.@@SeanTube2099
And effectively rendering it useless.@@IceBlueLugia
love how he went straight to the point
Or just don't use a phone for everything like financial and other sensitive apps. instead, do it on a home laptop/computer, problem solved. ;D
@@BillAnt I'd bet it's safer to use a relatively locked-down system, like a phone, instead of a computer where you have many more chances to install anything, good and bad, making the attack surface much wider.
@@HMijailAntonQuiles - Don't know about that, but what I do know is that in the past 20 years I've been using my computer exclusively for all my financial transactions, I haven't been hacked even once. I don't install every random app I find on the web, and don't click on every "You won a million dollars!" link either. And yes for dummies who do all that I don't recommend neither a phone or computer. lol
I just feel more comfortable and easier to type on my real keyboard on a large screen than squinting at my phone screen. But hey, to each their own.
@@HMijailAntonQuiles - What I do know is that in the past 20 years I've been using my computer exclusively for all my financial transactions, I haven't been hacked even once. I think that's a pretty darn good track record of safety.
love how he actually showed us how to do it (he didn’t)
An additional layer of protection in conjunction to using Stolen Device Protection is to set a 4 digit Screentime passcode, ENABLE Content Restrictions and then DISABLE the following two items: 1) "Allow Account Changes" and 2) "Allow Passcode Changes". This is the method I used before SDP became an option in iOS 17.3, and I intend to carry on using this as a "belt and braces" approach. Can't be too careful!
This method also works across Macs, iPads, and other iPhones attached to your iCloud account. As of 1/28/2024 SDP only can be enabled on iPhones.
That’s Advanced Protection (I call it)😂👍
The iPhone will be useless for a thief!
I don’t really understand why thieves keep stealing iPhones in 2024 when they’re aware of Find My and all of the security protection iPhone has?
I see it as a bad investment for the thief himself…
Indeed. I'm surprised more don't do this.
*FYI I'm running iOS 17.4 Dev Beta 1 and there is a new feature to require security delay "Away from Familiar Locations" OR "Always", so no need to turn off Significant Locations, if that's what you're worried about.*
If someone enabled it in 17.3 and updated to 17.4 is the Always option selected by default?
@@atpray No
(Pro tip: "all bold" means nobody reads what you write).
It doesnt require faceID to set it back to familiar locations. lol
Yeah it should let you select locations
Great video, thanks! Apple did make this new feature a little over-complicated. It would have been better had they allowed you to specify your own significant location(s), that way you could potentially set just a single significant location (e.g. your home) where the additional protection is overridden.
Another useful video!! just enabled the feature! Thanks again Thio!!
Thanks Thio! 💜
Many people commented that there's a fix for this flaw in the iOS 17.4 beta, but the other topics in this video might be just as important.
very good info, power and home at same time, cool!
You can add an additional layer of security by turning on screen time and disabling account changes so it’ll be harder for thief’s to sign out of iCloud As you can’t go to settings-> screen time -> then content restrictions at the bottom turn off account changes
when talking about this future, nobody actualy covered this flaw, thanks, great video, helpfull as always. ur the best
i loved your og stuff when you just tried to piss people off, but your new stuff is kickass too. thanks for the content, you kickass!
I also have implemented two additional security steps.
1. I set a pin for screen time and disabled passcode changes and account changes. This way even if they know your passcode they still can't change your device passcode or your Apple ID password.
2. I set up an automation in the shortcuts app that automatically locks the phone any time you open critical apps. The automation only applies if the phone is not connected to my home wifi. So for instance, you are sitting at the bar texting your SO and someone walks up grabs the phone out of your hand and runs while it's still logged in. They open the settings app, the phone automatically locks. It's really not all that much extra effort to just use your touch id or face id to quickly log back in. It's basically no different than how some banking apps request a touch id to open the app. I also applied it to my email app as well, because if they get access to your email they can start doing password resets on accounts you have tied to that email. And I have other apps set up that way as well.
This is a great idea. Thank you
Great video - thanks for the update, really useful
I'm surprised the comment section is so civil lol
Don't jinx it lol, it's only been half an hour
These videos have a great community in my experience
As someone who lost his 13 mini this way. I'm setting up my new 15 with this video, I've had it bookmarked since you dropped it.
LIFE SAVER 🙏
totally awsome and professional. Thank you for this valueable and useful information we should all take a half hour and do the things you suggested in our iphones. Keep up the great work.
You should activate Screen Time to YOURSELF -> and disable passcode and account changes (under Content & Privacy Restrictions). You ofc set a different numerical code here than your ”regular” passcode.
After this, the thief now would have to know your passcode AND the different Screen Time code to do anything account or passcode related.. BUT…. This might not be 100% bulletproof, because you CAN reset the Screen Time code via AppleID, but it prevents the process to be ”familiar” and fast..
The screen time passcode can be reset with your regular passcode sadly.
@@markster136how so?
@@markster136 incorrect
Thx for the advice which I’ve now done
Did it right away. Thanks for the tip
Great video. Thank you.
Many thanks for sharing very informative security updates god bless take care
This is the best video on TH-cam right now thanks for sharing this information thio Joe 👍👍👍👍👍
Thanks!
Nice! I have just found this feature in my new iPhone and I have noticed this flaw too. I have had the same conclusion as you. High five 🙏
More than anything, the video confirms why I don't use my Apple account for anything more than the most basic of functions. Thanks anyway Thio; a really informative video as always.
Can you elaborate?
@@Albdeanur phone will still be gone :/
Great video thank you! You gained a subscribe for sure
Much appreciated 🤩
Thank you
Another good tip is to use a privacy screen protector to prevent prying eyes on the side
Nice video!
Good video. The Screen Time pin lock workaround seems more secure with less hassle (not having to wait an hour).
The simplest solution that Apple could have implemented would be allowing you to choose a different PIN/Passcode for critical system services or apps.
Yay! ThioJoe's upload schedule is fixed!
Great video, love how the stock image of the thief looks like Linus 😂😂
iOS 17.4 Beta fixes this issue. There is another menu in 17.4 to require the delay always rather than only when not at a familiar location.
How does the setting for unlocking with Apple Watch play into this? Should I disable that feature as well?
Thanks for a great tip on IOS 17.3 security. Hopefully 17.3.1 or 17.4 will come out soon with better options.
I just got a 15 Pro a few days ago and set up a 4 digit PIN because I wanted some security, but to still be able to unlock it quickly, mostly so I can easily change the music while driving. But it's nice to know that if you set a alphanumeric password you don't have to enter it all the time, so this problem wouldn't be as obnoxious as I assumed it would be under the same circumstances.
Yeah the passcode is only requested when your face is not recognised enough times, or once in 72 hours or so.
1) What if your phone faceID breaks? Can it still be recovered/transferred to a new phone?
2) On airplane mode on lock screen, what about the bluetooth lost beacon for powered off phones?
Why only on the Iphone and not IPAD??
You could also set screen time passcode and restrict changes to passcode & faceID, location services and accounts. That adds another layer of security
Thank you ThioJoe, excellent hint and advice!
I would have thought "significant locations" are places where you have unlocked your device (otherwise a thief could hang out in an area with your phone till it got added to the list)
The places I visit the most are my university and work which is a hospital are probably the places my phone is most likely to get stolen so this is very helpful
YES! MORE THIOJOE! 🎉🎉 lets gooo! i love thiojoe ❤
useful
Thanks for adding actual captions for the Deaf
You can also add unlocking to face ID by recognizing a code word or phrase, which the user could record in advance using sound recording. It would be nice if they added this
i just updated to iOS 17.4 beta and it adds an option to always require the security delay
i love everything this dude is doing
Turn on screen time, set a different passcode for screen time, and under Content & Privacy Restrictions, set Passcode Changes and Account Changes to 'Don't Allow'. This way, even if they somehow got your regular screen passcode, they will not be able to make any passcode or account changes without knowing the separate screen time passcode that you set.
Thanks for adding Polish
Thank u luv from brooknam
Thanks bro it was a great talk !
Why don’t disable password change in screen time so when the thief wants to change the password he will be required to enter the screen time password 😮😊
This video has proper subtitles ❤
If you disable significant location does it not use the set home and work addresses in Apple Maps?
Wow new audio track translating feature
is there anyway to use this without requiring face id?
My GOD why make this so difficult..????
It's the Apple effect 😮💨
It's actually the Windows affect and every system (like iOS) that rely on compartments to provide security. It's the attempt to make the system easier to use providing some relief from constantly providing security info. Code in general has many of these to bypass security in special conditions to allow "trusted" connectivity and access. Windows had some famous ones where a file can be an executable internally and have a JPEG extension (.jpg) therefore bypassing some security filters. But when accessed, Windows does ignores the extension and rather looks at the file content, sees it's an executable, and runs it. Instant Malware installation. Developers are often shortsighted when solving problems. They are mostly looking for a solution to problem. It's more rare that someone thinks outside the box to see the potential issues. Those are the white hats that probe to find vulnerabilities. Black hats probe the same way to exploit the issue and ruin lives for profit.
Do you lock the account settings under Screen Time, Content and Privacy settings, Account changes? It stops access to your Apple ID section in settings.
Thanks for the video and changed my settings. What I found interesting is, on lock screen it asks for my face, which is great. So I tried to see what would happen if I didn't point the camera at my face and the password screen comes up. So now the thief with your passcode can still get into your phone.
Screen time is a good way to ensure additional protection, you’ll rearly ever need to enter your screen time password, and a thief will need it to change your account settings and your passwords … it’s quite easy to set up too… screen time - set screen time passcode - content and privacy restrictions - account changes and passcode changes - select don’t allow … I kept this on even after enabling stolen device protection cause I’ll be keeping significant locations on…
Keep in my mind, one time you’ll need to use your screen time passcode is when you yourself need make changes your account or passwords - eg. Face ID is hidden from menu so you’ll need to disable screen time to access it (well just allow changes - then change back to don’t allow after)
With an IPhone SE2 I am stuck after enabling this new feature. I cannot access my passwords or make certain changes any longer. I almost always use my numerical codes to enter in as my phone case has a film over the home button that does not allow it to recognize my fingerprint. While I have access to most of the phone, I am stuck in an endless loop of a Touch ID requirement and after removing the phone case to access the home button, it does not recognize my fingerprint! Unfortunately any of the options to fix this requires a Touch ID to verify. This phone does not have Face ID. So far unable to find a fix. Not sure yet if I have a faulty home button fingerprint recognition, or if it is the stolen device protection that is negating the Touch ID. Still looking for a solution. Great video by the way! 😊
Apple needs to remove the ability to reset your apple account password without entering the old one first. This is the biggest security flaw of everything..
Does the theft production work on 13promax? I do not see the menu option that show how to get there. I have 17.3 and rebooted
Screen Time - analyse in detail this setting, there are clips on youtube.
Messing around with the device protection feature, I had to wait an hour even at home to make changes. Strange that my home wasn't considered a "familiar location"? So, hoping they are pretty strict with familiar locations
It used to be easier to lock down apple account with a screen time passcode. However with recent changes they have made it harder to do that. It can still be done with screen time passcode but you have to remove your passcode which makes no sense.
Seems like a better solution would be to require a different password and Face/Touch ID to get into the Settings app.
EVERY TIME I backup my phone, plug it in to charge via USB or even when downloading photos I MUST type in my passcode. It is needed a lot more than you suggest.
User: "I had a major facial injury."
Apple device: "New face who dis?"
Thanks for all the information!
I just have one question - is it necessary to disable Siri in the “Allow access when locked” section
That means the “Hey Siri” phrase won’t work while it’s locked, right?
yes. siri wont work when locked
There's a pretty easy work around to that. Sensitive settings like find my phone, face unlock and apple account settings should simply have different pin and not lock screen code. I never understood why they didn't apply that tbh.
I think that’s just too complicated for many users, having to remember multiple codes would become inconvenient and bothersome. Especially for elderly iPhone users. They can barely remember their one passcode or password lol
5:42 I've no phone but ipad. when i scroll around the map i can see other locations. my university has two campuses. both are marked at significant locations. haven't been there for a year. my home apparently is no significant location haha.
Turning off significant locations also saves a bit of battery!
Where is the link?
Should this be available on a 12 pro max?......Don't see it as an option in 17.3
I wanna turn this feature but I have a question. That one hour delay. Would the owners of the iPhone also have to wait for that 1hr to change to make changes or is there a way the owner can by pass the one hour delay. I hate to turn on the feature then have to wait an hour when I wanted to make changes.
I thought you would need Face ID to turn on the Significant Locations anyway. Perhaps that's something you need to try, when it's off and the Stolen Device Protection is on, can you even turn on the Significant Locations option with a passcode only.
From my experience, I believe familiar locations are the locations your apple maps thinks you might drive to when you get on your car. I get my house, work, and the gym
Even if Apple let you customize Familiar Locations whats stopping someone from creating a backup of your device, dumping all the locations, and going to that location later on?
as someone with touch id a long code unfortunatly isnt an option since touchID barely works for me
At least for all of the AppleID/account-related issues, I can’t understand why Apple doesn’t just _require_ one’s AppleID password, no exceptions, to make changes. Or at least let users themselves force this instead of bizarrely allowing a device passcode to do anything at all related to account security. So stupid.
One big correction find my is NOT disabled even by being powered off anymore, the recent iphones completely turned off are still able to be located through Find my, they act as an airtag all the time. Putting it into airplane mode or powering it off does not affect this anymore.
I appreciate videos that show iOS devices security flaws. I like to think Apple employees watch them too cus every updates to my iphones security system, make me feel 10x more at ease when I misplace my iphone. Thanks
Would it make a difference if you had one p/w to unlock the phone plus your heavy duty pass code to unlock important things? Thief would need two pass codes but you would be providing only one.
5:50 wow some how a work place for my Wife was a significant place… and I don’t really go there that often anymore.
I cleared and turned it off tho
Is this another feature that will prevent someone from using phone if it's not removed when you buy the phone from someone?
You can disable account and code changes from the Screen Time menu and set up limitations with a different pin code. It's meant to allow you to let your children play on your phone and restrict them from changing vital stuff. It also works if some thieves have tricked you into unlocking your phone. With this, any thief can't change your code or do any account setting stuff without the extra pin code.
How to choose original audio track in mobile web version?
Create automation at shortcut to run when airplane mode is turned on, immediately turn it off.
Even with Stolen Device Protection enabled and your extra suggestions followed, if my phone is stolen how do I access my Apple ID account without Apple sending a security code to the thieves instead of me? Obviously with a second device logged in it’s ok but if I need to use a friend’s phone? Apple devices are very costly, not everyone has 2?
Question, in a familiar location, does it let you use the passcode as fallback for ALL the features, or just for disabling Stolen Device Protection? If it's the latter, you could just restrict access to the Passcode & FaceID settings using Content Restrictions in Screen Time, and set a separate Screen Time passcode to prevent changes. Also you can restrict Account Changes to prevent access to iCloud settings.
In familiar locations you still get the security delay, but the passcode is usable for everything.
Even in unfamiliar locations, unlocking the phone itself is available with the passcode. Only the more serious stuff like fiddling with the Apple ID, with Find My, or Apple Pay, those become protected.
@@paulstelian97 Well that sucks
Seems odd that Stolen Device Protection (SDP) requires Face ID to access certain features, but iOS still forces me to enter my passcode on a regular basis to use Face ID. Makes no sense if Face ID is the more secure authentication. I already have Significant Locations disabled to save battery.
Schlatt shouted you out in the latest chuckle sandwich episode
Thx. I chose max paranoia settings. LOL
"the new extra protections don't apply in familiar locations which you at no control over can't even see what they are"
God that's such an Apple thing to do isn't it? They have this huge focus on security but they're also focused on making their tech accessible to even the dumbest of people to the point where they will literally make something less secure as a way to give the user less to think about.
It reminds me of the BLE spam bug. These manufacturers design it so that it's "easy" to pair your headphones by proximity that you can just spam out Bluetooth pair requests and lock up the phones. The simple easy fix for this is just put a toggle for proximity pair but no that would be too confusing for the user 🤣
For the BLE spam you have to literally turn off Bluetooth and for this you have to turn off familiar locations simply because they don't give you any sort of advanced control over how it works.
You obviously didn't read the document that was on screen 5:11 as they do not use significant locations, but familiar locations like Home or Work which you do set! Complaining is easy, but reading is hard.
This whole video is about how you can't set familiar locations 😂
He's saying as a work around you can turn off significant locations as familiar locations are (presumably) derived from significant locations.
Show me documentation from Apple saying you can manually control familiar locations because everything I can find supports what Thio said about it not being able to be manually set it and about how it relies on the significant location feature.
@@johnsmith8981 , its not read the document at 5:11 video. Joe got it all wrong as it says Home and Work! So no issues except someone needed to make a video and people falling for it!
@@craiggmelville I would like you to explain to me exactly how I set my home and work location as a familiar location. I love how you are saying I didn't read it when literally the timestamp you have linked to me says nothing about how the home and office locations are set...
You said complaining is easy but reading is hard and yet here you are posting a timestamp of 5:11 that says It uses significant locations without saying anything about how you manage significant locations.
Right now Apple sets your home or office automaticall. Basically Apple going "trust me bro we know where you live and work and couldn't possibly be wrong about it."
If you want to call me out here and say I'm wrong I'm fine with that but please provide evidence that you can manually control your work and home locations for familiar locations and stop posting the 5:11 timestamp because clearly we both agree that they are using familiar locations that has nothing to do with your argument; you are saying that there is "no issue" and this video is about how Apple doesn't allow you to SEE or SET your work or home locations manually. You either need to explain why that's not a problem or explain how you actually can see/set them manually.
@@johnsmith8981 , think about it how do you add your home and work addresses into the phone?
Via Contacts App, My Card and you could have many defined. Joe went on to say he thought these were derived from all the places that you visit like a coffee shop etc. How ridiculous is that when you think 🤔 about it?
Don't let others use your cell phone. Thumbs up, TJ--great information here. Here is a problem. The face recognition on my phone is bad. Better than half the time I need the passcode to unlock. I thought that is how things were with iPhones. I might lock myself out of my phone if I rely only on face recognition.
People steal phones consistently at bars from girls purses. It is not just as simple as not letting someone use your device. There are real victims of theft. Then identity theft from these flaws. You need to consider every scenario before oversimplifying a solution.
Try if a reset of your FaceID or even een re-instal of the phone fixes your problems. Also turn off the facemask compatibility setting.
The face recognition works incredibly well. You should try to do a reset as people sugested here, maybe change the screen protector if you use one, and so on.
@@dmc6617 You nailed it. My screen protector was causing the problems, even though it is thin and clear plastic. I lowered it a bit so the lens is not covered, and it seems to be working perfectly now. I appreciate the advice!
@@MultiStats glad to help!