this post was submitted on 06 Jun 2024
910 points (97.8% liked)

Technology

58142 readers
4326 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

This is a very entertaining and educational article, giving insights into the methods used by thiefs to try and get access to your phone data.

I don't like Apple but it's great that their security is so good when it comes to this.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 3 months ago* (last edited 3 months ago) (37 children)

As everyone is pointing out you're just wrong about this.

Also apple is overbearing AF. I recently had several back and forths with my IT department about an old company mac laptop I used to have. Since I had signed into my apple account once, Apple permanently tied that laptop to my account and wouldn't allow the fucking IT department to fully wipe it.

Keep in mind also that I would have preferred to not have or use an apple account (they kind of force it on you, even asking you to login to iCloud constantly even if you've literally never used it once), and even though I could login to the apple account in my browser and see that the laptop wasn't listed under my devices, IT was still locked out.

Literally the only way to fix this was giving the IT dept my apple password so they could authenticate then sign out of it. There was nothing I could do remotely about it. This is a security issue in itself. Zero reason I shouldn't be able to use my account remotely to remove or sign that device out. Zero reason I should have to give my password to another human. Except for apple being shit.

The apple security theater is widely believed but it's still largely theater.

Edit: before you tell me I didn't have to give up my password, understand that I fucking know that. I could've driven to the office, told my employer to fuck off, had them ship the laptop, etc... all of which are things that shouldn't be necessary. I took the least shitty option at the time. Kindly fuck off if you are so dicksloppery on apple that you can't understand the obvious point: pretending every shit decision is about security doesn't shield you from all criticism.

[–] [email protected] 13 points 3 months ago (31 children)

Your post details how it isn’t possible for IT professionals to wipe a Mac without the consent of the owner’s account. How is that security theater?

[–] [email protected] 1 points 3 months ago* (last edited 3 months ago) (25 children)

You missed the part where I had to give my password to another human.

Also, I wasn't the owner, they are. Also, again, it makes zero sense to not allow me to sign it out remotely.

Nothing is secure about a system designed so poorly you have to give out your password. That should never be needed.

Not to mention, I never wanted or needed to sign in. I was just nagged to do so 100 times so I relented. Nothing about that means I own the device.

[–] [email protected] 4 points 3 months ago (1 children)

You couldn’t remote in to type in your password?

[–] [email protected] -2 points 3 months ago (1 children)

I don't have the type of position where that would be needed or considered appropriate. Why should I need to anyhow? A lot of people are missing the point here. Logging into a service (especially one I didn't want or need but was harassed into doing it) should not unexpectedly be considered proof of ownership.

The scenario wasn't that during os setup I was asked to login. And I wasn't prompted with a warning that this could happen. What happened was every time I opened system settings for months it wanted me to login to iCloud and no matter how many times I refused it just kept asking.

[–] [email protected] 8 points 3 months ago (2 children)

Nah - you’re complaining that you “were forced into handing your password to someone else” when there were at least six ways you could have avoided that:

  • you gone to the computer,
  • they send the computer to you,
  • you remote in to the computer,
  • you tell them “suck it, you should have blocked iCloud sign-in with MDM” or, as others mentioned,
  • you sign out before handing the computer back or, my favourite,
  • don’t sign in to personal accounts on work devices even if they bug you to.

Finally, we release devices like this all the time through our ABM account. It takes 5 days maximum. Your IT team led you up the garden path.

[–] [email protected] 1 points 3 months ago* (last edited 3 months ago)

It was a small company, as he said elsewhere, negating your first 4 options, and the last two of blaming the user are equally stupid because Apple can fix this and doesn't want to. Not everybody has an MDM tool which can set up ownership right for Apple devices - and they should not have to

It's shameful that you have a bunch of upvotes and he's getting downvotes

[–] [email protected] -3 points 3 months ago

You are bending over backwards to justify absolute garbage practices. I am aware there were literally other ways around this. I was more referring to being forced into a situation where I'd even need to consider this.

Yes, I shouldn't have used my personal account... however I also should have never expected doing so to tell apple "I own this shit please make sure no one else can use it ever without my permission". Logging into iCloud should mean "I want to use iCloud", which btw I NEVER wanted to do. Every time I opened system settings the piece of shit insisted I login to it. That alone is a problem. But I'm sure you'll justify that one too.

load more comments (23 replies)
load more comments (28 replies)
load more comments (33 replies)