Recommended Posts

It's called "Apple picking," a growing wave of crime in which thieves target mobile devices, particularly iPhones and iPads.

Now the company that gave the crime its name is taking a step to stop it, with a "kill switch"-style update aimed at making the mobile gadgets less valuable to thieves.

Activation Lock will be part of iOS 7, the latest version of Apple's mobile operating system expected to roll out in the fall. The feature will require an Apple ID and password before the phone's "Find My iPhone" feature can be turned off or any data can be erased.

At a keynote address opening its annual Worldwide Developers Conference, the company said the same ID and password will be needed to reactivate a device after it's been remotely erased.

"We think this is going to be a really powerful theft deterrent," said Craig Federighi, a senior vice president at Apple.

As mobile devices become more popular, stealing them has become a unique sort of crime that has law enforcement and government officials taking notice.

In New York, a special police unit has been created to deal with stolen mobile devices.

The overall crime rate in the city increased 3% last year -- but "if you subtracted just the increase in Apple product thefts, we would have had an overall decrease in crime in New York," Deputy Police Commissioner Paul Browne said.

Advocates have been calling for so-called kill switch tools in all mobile devices for some time.

more

Link to comment
https://www.neowin.net/forum/topic/1158444-apple-adding-kill-switch-to-iphones/
Share on other sites

reset in black recovery mode... phone or pad is useful again... unless they actually remove that feature, there will always be a way around the security..

I would think that when the phone is restored in that method, you still could not activate it once it's back online. Otherwise, it's a very useless feature that only takes 10 seconds to circumvent.

reset in black recovery mode... phone or pad is useful again... unless they actually remove that feature, there will always be a way around the security..

It looks like this IS to counteract this. When you do a wipe, you'll also need to reactivate the iphone... then during activation it'll prompt you to insert the iCloud username/password combination which locked the phone. Failure to do so will prevent activation and leaving you with a paperweight.

reset in black recovery mode... phone or pad is useful again... unless they actually remove that feature, there will always be a way around the security..

Yeah I was thinking that, but apple has it covered. Serial number. When you connect to itunes, it sends the serial number, so actually it will block it pretty well.

Can anyone tell me how someone can sell an old iPhone to another individual with this new activation lock feature?

(Associate new iCloud account to an old phone?)

Earlier :

Wipe the phone and sell it.

Now?

Wipe - Activate - Sell?

...I was so hoping for a fingerprint sensor in the home button. *sigh* Doesn't seem like that's going to happen for a while

That would only happen with new hardware, so it could still come with the iPhone 5S. And while that is still an unlikely addition this time (maybe next year); even if it does come this year, Apple still needed to have something for previous generation phones.
It's called "Apple picking," a growing wave of crime in which thieves target mobile devices, particularly iPhones and iPads.

No, it's called theft. Sorry, I just hate media-invented names for things.

  • Like 2

the only way to put a true kill switch in is to have an electronic fuse on the CPU which can be blown by a direct connection to the cellular radio on a path that can not be disabled by software... so when the phone's id is flagged as stolen the CPU blows a kill fuse which makes it impossible to even turn the device on again because it blew a fuse at the chip silicon level...

Can anyone tell me how someone can sell an old iPhone to another individual with this new activation lock feature?

(Associate new iCloud account to an old phone?)

Earlier :

Wipe the phone and sell it.

Now?

Wipe - Activate - Sell?

You could always restore to factory default, which in this case would set it back to an unactivated state. The kill switch would deactivate it plus require the same user to activate it.

the only way to put a true kill switch in is to have an electronic fuse on the CPU which can be blown by a direct connection to the cellular radio on a path that can not be disabled by software... so when the phone's id is flagged as stolen the CPU blows a kill fuse which makes it impossible to even turn the device on again because it blew a fuse at the chip silicon level...

It's a bit overkill if you just want to remotely shut it down if the phone has been temporarily misplaced though.

I dont get why iphones are so valuable and special. They are made in china like everything else, but are priced twice the amount of money as all of the other phones. Windows phones and android phones give you so much more for the money also. I never understood the rationale for Apple's pricing. If they lowed the price of the iphonex and ipads, there may be a reduction in theft.

  • Like 2

I dont get why iphones are so valuable and special. They are made in china like everything else, but are priced twice the amount of money as all of the other phones. Windows phones and android phones give you so much more for the money also. I never understood the rationale for Apple's pricing. If they lowed the price of the iphonex and ipads, there may be a reduction in theft.

easy to use, logical fail safe devices, and they are the same price as competing phones...

I dont get why iphones are so valuable and special. They are made in china like everything else, but are priced twice the amount of money as all of the other phones. Windows phones and android phones give you so much more for the money also. I never understood the rationale for Apple's pricing. If they lowed the price of the iphonex and ipads, there may be a reduction in theft.

Resale value is much, much higher than competing phones. Also popularity, and the fact that there's just one model (iPhone) makes it easy to move after you've stolen it.

So in other words, they are adding a feature that will call home every X hours (let's use 24 hours as an example), verify with a server that you are not doing something that is against Apple's rules, and if so then you are deactivated?

Yes, those are other words. No, they do not accurately describe this feature. :laugh:

It's a bit overkill if you just want to remotely shut it down if the phone has been temporarily misplaced though.

but in the case of thefts, you don't want them reselling it or using it, so blow the CPU fuses up and disable the thing... then no reflashing it and selling it again

So in other words, they are adding a feature that will call home every X hours (let's use 24 hours as an example), verify with a server that you are not doing something that is against Apple's rules, and if so then you are deactivated?

No, that's existed for a long time and is how rogue apps are deleted, apple marks them as bad and if detected on phones they get removed.

This is only for when the phone is unlocked from marked as locked and when it's updated/reflashed.

No, that's existed for a long time and is how rogue apps are deleted, apple marks them as bad and if detected on phones they get removed.

This is only for when the phone is unlocked from marked as locked and when it's updated/reflashed.

I know there was that feature for apps, but what needs to happen in this case is that either data is pushed or pulled that indicates if the phone needs to be deactivated. If Apple determines that your device is no longer valid, then they can either set data on their server or push data to your phone to make it no longer work.

This topic is now closed to further replies.
  • Posts

    • BleachBit 6.0.1 Beta by Razvan Serea When your computer is getting full, BleachBit quickly frees disk space. When your information is only your business, BleachBit guards your privacy. With BleachBit you can free cache, delete cookies, clear Internet history, shred temporary files, delete logs, and discard junk you didn't know was there. Designed for Linux and Windows systems, it wipes clean thousands of applications including Firefox, Microsoft Edge, Google Chrome, Opera, Safari, and more. Beyond simply deleting files, BleachBit includes advanced features such as shredding files to prevent recovery, wiping free disk space to hide traces of files deleted by other applications, and vacuuming Firefox to make it faster. Better than free, BleachBit is open source. BleachBit has many useful features: Delete your private files so completely that "even God can't read them" according to South Carolina Representative Trey Gowdy. Simple operation: read the descriptions, check the boxes you want, click preview, and click delete. Multi-platform: Linux and Windows Free of charge and no money trail Free to share, learn, and modify (open source) No adware, spyware, malware, browser toolbars, or "value-added software" Translated to 64 languages besides American English Shred files to hide their contents and prevent data recovery Shred any file (such as a spreadsheet on your desktop) Overwrite free disk space to hide previously deleted files Portable app for Windows: run without installation Command line interface for scripting and automation CleanerML allows anyone to write a new cleaner using XML Automatically import and update winapp2.ini cleaner files (a separate download) giving Windows users access to 2500+ additional cleaners Frequent software updates with new features Going beyond standard deletion of files, BleachBit has several advanced cleaners: Clear the memory and swap on Linux Delete broken shortcuts on Linux Delete the Firefox URL history without deleting the whole file—with optional shredding Delete Linux localizations: delete languages you don't use. More powerful than localepurge and available on more Linux distributions. Clean APT for Debian, Ubuntu, Kubuntu, Xubuntu, and Linux Mint Find widely-scattered junk such as Thumbs.db and .DS_Store files. Execute yum clean for CentOS, Fedora, and Red Hat to remove cached package data Delete Windows registry keys—often where MRU (most recently used) lists are stored Delete the OpenOffice.org recent documents list without deleting the whole Common.xcu file Overwrite free disk space to hide previously files Vacuum Firefox, Google Chrome, Liferea, Thunderbird, and Yum databases: shrink files without removing data to save space and improve speed Surgically remove private information from .ini and JSON configuration files and SQLite3 databases without deleting the whole file Overwrite data in SQLite3 before deleting it to prevent recovery (optional) BleachBit 6.0.1 Beta release notes: BleachBit 6.0.1 beta is now available for testing. This maintenance-focused release includes bug fixes, updated translations, and a range of safe enhancements. This release fixes a Windows security issue that could allow arbitrary file deletion during privileged cleaning (reported by Zeze with TeamT5). It also adds new cleaners (including a DNS cache cleaner, Claude Code, and Visual Studio Code forks), support for multiple Chrome and Edge profiles, new deep scan options for developer directories like node_modules and venv, and safer, faster file shredding. All Platforms Added cleaners for Claude Code, DNS cache, and many Visual Studio Code forks. Added support for multiple Chrome and Edge profiles. Chrome can now clean downloaded AI models. Deep Scan can optionally remove venv, __pycache__, node_modules, and .angular directories. Deep Scan is faster by skipping directories on the keep list. File shredding is safer, faster, and leaves fewer recoverable traces. Improved handling of cookies, symlinks, Unicode filenames, external processes, and configuration files. Improved Expert Mode warnings and long warning dialogs. Fixed crashes related to cleaner detection, invalid Unicode, and malformed cleaner data. Clipboard is now cleared automatically after shredding files via paste operations. Linux Added AppImage support. Added cleaners for Visual Studio Code, Codeium, Librewolf (.deb), Transmission (Flatpak), and Profanity. Improved Linux trash detection, including Snap-installed applications and mounted drives. Fixed Wayland root CLI issues and several Snap-related problems. Improved package dependencies, AppStream metadata, and desktop file handling. Fixed startup crashes when Python Requests is unavailable. Windows Fixed a security vulnerability that could allow arbitrary file deletion when cleaning with elevated privileges. Added %WindowsSystem% variable support. Improved clipboard clearing using native Windows APIs. Improved installer experience on unsupported Windows versions. Reduced installer size and improved application robustness. Fixed Unicode handling, filename anonymization, Git revision reporting, and splash screen stability. [full release notes] Download: BleachBit 6.0 | Portable | ~20.0 MB (Open Source) View: BleachBit Home page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • DriversCloud 12.1.6 by Razvan Serea With DriversCloud (formerly My-Config.com), you can explore your computer easily, safely and free. The application quickly scans your PC and identifies the hardware and software components. DriversCloud then establishes a list of the different drivers compatible with your OS and hardware. Download the drivers needed for the proper functioning of your computer. To detect your drivers, DriversCloud also displays a detailed summary of your hardware and software configuration, analyzes your BSOD, monitors in real-time your PC voltages and temperatures and lets you share your configuration online. Once the hardware components have been detected, you will be able to obtain with just a few clicks the latest drivers corresponding to the identified hardware. You can record your configuration on the site for free, and can get the corresponding URL to post the configuration to technical forums, e-mail and social networks. You can also download the detection result (the configuration) as a PDF file. To protect the user's privacy and data confidentiality, a 4-level confidentiality system was created that filters the XML marks and gives control to the user. The default level can be modified in the preferences. Using the maximum level will prevent the user from publishing his configuration and generating a corresponding PDF file. In non-connected mode, each XML configuration is stored on the server for one day (for practical reasons). However, you are given the opportunity to manually delete it. Created in 2004, and continually improved, My-Config.com has established itself on the web as a free service to PC users running Windows and Linux operating systems. The service is designed to work with the most common Internet browsers (Edge, Firefox, Chrome, Safari). Download: DriversCloud 64-bit | 20.0 MB (Freeware) Download: DriversCloud 32-bit | 18.9 MB Link: DriversCloud Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • One Month Later
      AndreaB earned a badge
      One Month Later
    • One Month Later
      agatameier earned a badge
      One Month Later
    • Week One Done
      agatameier earned a badge
      Week One Done
    • Week One Done
      ssd21345 earned a badge
      Week One Done
    • Contributor
      MarkHughes4096 went up a rank
      Contributor
  • Popular Contributors

    1. 1
      +primortal
      516
    2. 2
      +Edouard
      193
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      ATLien_0
      96
    5. 5
      Steven P.
      77
  • Tell a friend

    Love Neowin? Tell a friend!