iPhone's with not latest iOS; how secure are these? And better to get a new one?


Recommended Posts

Just a question... my parents both have an iPhone 8, which isn't fully supported with the upcoming latest iOS 17.

How 'bad' is it if they stay on the latest iOS 16? Are these security risks?

Or it it better to have the newest iOS at any given moment and to be fullt protected to ALL security patches [and not just like a 70% on the 16.x.x patches]?
And, in that case, they need to have a new iPhone with do support iOS17 and later.... (e.g. iPhone SE 2022, iPhone 13 or later)

I'm sure Apple won't bother...

Apple actually does bother. They release security updates for iPhone/iPad models that aren’t supported by the latest iOS or iPadOS. My original iPad Air still receive security updates and that’s a decade old. If their iPhone 8 still works fine for their purpose, there’s no concern with them using it. 

On 06/08/2023 at 19:23, tsupersonic said:

Apple actually does bother. They release security updates for iPhone/iPad models that aren’t supported by the latest iOS or iPadOS. My original iPad Air still receive security updates and that’s a decade old. If their iPhone 8 still works fine for their purpose, there’s no concern with them using it. 

I read somewhere that like 80% of the patches of the most current iOS is ported back to a lower, unsupported, version, e.g. latest iOS 16.x version and the most current iOS15.x (on older devices).

On 07/08/2023 at 02:31, kiddingguy said:

I read somewhere that like 80% of the patches of the most current iOS is ported back to a lower, unsupported, version, e.g. latest iOS 16.x version and the most current iOS15.x (on older devices).

The more recent vulnerabilities are going to be the most actively exploited so 80% or whatever is not any real protection. I wouldn't ever use a device that wasn't still getting security updates let alone allow my parents (assuming yours like mind are not tech savvy at all so worse) to use an insecure device. There is no reason to and that is not smart so anyone that tells you otherwise has no idea what they are talking about.  An used iphone that is two or three models back is not even that expensive so please upgrade them.

I am talking about security updates not OS upgrades but until like a couple of months ago security updates were only packaged with OS updates (unlike on Android) with iOS. Apple does issue just security updates now but I believe just for the very critical vulnerabilities and doubt for supported phones.

Edited by Good Bot, Bad Bot
On 07/08/2023 at 17:40, Good Bot, Bad Bot said:

The more recent vulnerabilities are going to be the most actively exploited so 80% or whatever is not any real protection. I wouldn't ever use a device that wasn't still getting security updates let alone allow my parents (assuming yours like mind are not tech savvy at all so worse) to use an insecure device. There is no reason to and that is not smart so anyone that tells you otherwise has no idea what they are talking about.  An used iphone that is two or three models back is not even that expensive so please upgrade them.

I am talking about security updates not OS upgrades but until like a couple of months ago security updates were only packaged with OS updates (unlike on Android) with iOS. Apple does issue just security updates now but I believe just for the very critical vulnerabilities and doubt for supported phones.

So it's better also to have  the latest hardware/iPhone's which fully support also the latest iOS... gotcha! Let's get some new iPhone's 🥳

On 06/08/2023 at 09:39, kiddingguy said:

Just a question... my parents both have an iPhone 8, which isn't fully supported with the upcoming latest iOS 17.

How 'bad' is it if they stay on the latest iOS 16? Are these security risks?

Or it it better to have the newest iOS at any given moment and to be fullt protected to ALL security patches [and not just like a 70% on the 16.x.x patches]?
And, in that case, they need to have a new iPhone with do support iOS17 and later.... (e.g. iPhone SE 2022, iPhone 13 or later)

I'm sure Apple won't bother...

 

I'm sure Apple won't bother...

What is this suppose to mean in english? After everything you wrote, this statement doesnt make sense. Do you know or did you bother googling when the iPhone 8 came out? The iPhone 8 came out in September of 2017. They supported your parents phones for ~7 years. Apple has committed to 5-7 years of software support and your parents phones hardware has also lasted as long.

Show me a company that commits to 5-7 years of software updates before you expect "more" from Apple. Google just RECENTLY (last ~2 years) committed to 4 years for PIXELS, before that it was 2 years. Android in general doesnt give you any gurrantees and the top manufacturers (Samsung, etc) barely make it 2 years of software updates let alone security updates. 


-----------

Now to answer your question, unless a Zero day comes out that can be easily exploitable or another such issue, your parents will be fine as long as they use their phone like normal and dont click on anything sketchy (this can be said about any OS/software).

On 08/08/2023 at 01:23, Sikh said:

 

I'm sure Apple won't bother...

What is this suppose to mean in english? After everything you wrote, this statement doesnt make sense. Do you know or did you bother googling when the iPhone 8 came out? The iPhone 8 came out in September of 2017. They supported your parents phones for ~7 years. Apple has committed to 5-7 years of software support and your parents phones hardware has also lasted as long.

Show me a company that commits to 5-7 years of software updates before you expect "more" from Apple. Google just RECENTLY (last ~2 years) committed to 4 years for PIXELS, before that it was 2 years. Android in general doesnt give you any gurrantees and the top manufacturers (Samsung, etc) barely make it 2 years of software updates let alone security updates. 


-----------

Now to answer your question, unless a Zero day comes out that can be easily exploitable or another such issue, your parents will be fine as long as they use their phone like normal and dont click on anything sketchy (this can be said about any OS/software).

It's meant as a joke... like, I'm sure Apple will sure like this extra turnover 😉

Sure I get it that 5-7 years full of support is more than okay! That's not the question here.

The question is: is it still safe to use a phone which doesn't run the latest iOS, and might -therefor- be more prone to vulnerabilities.

Hello,

I would normally say that iOS is more secure than Android OS in many ways, but that also depends on which device, how it is managed, and what the device's user needs to protect.

What is the risk profile for your parents?  Are they the type to click on everything, engage with fraudsters and scammers, etc., or do they ignore all messages except those from friends and family, and don't use anything but a handful of apps?

Regards,

Aryeh Goretsky
 

Apple do still patch unsupported iOS versions but only individual extreme severity patches. Maybe one patch a year or something.

Given they support new devices for at least 5 years or more, it's probably worth getting a new one and being protected seeing as security patches won't be a concern for a long time then.

On 07/08/2023 at 19:23, Sikh said:

Show me a company that commits to 5-7 years of software updates before you expect "more" from Apple. Google just RECENTLY (last ~2 years) committed to 4 years for PIXELS, before that it was 2 years. Android in general doesnt give you any gurrantees and the top manufacturers (Samsung, etc) barely make it 2 years of software updates let alone security updates. 

-----------

Now to answer your question, unless a Zero day comes out that can be easily exploitable or another such issue, your parents will be fine as long as they use their phone like normal and dont click on anything sketchy (this can be said about any OS/software).

Your remark on Samsung software support was not accurate. They offer in some ways better support than Google with four OS updates and five years of security updates on flagship devices and some mid range devices. You should have called out the Chinese OEMs.

Older people that are not tech savvy are the kind of users that do "click" anything. How would anyone know what they are doing? It's time to replace the unsupported ihones even is get models 2 or 3 years old which are not very expensive.

 

On 08/08/2023 at 04:32, goretsky said:

Hello,

I would normally say that iOS is more secure than Android OS in many ways, but that also depends on which device, how it is managed, and what the device's user needs to protect.

What is the risk profile for your parents?  Are they the type to click on everything, engage with fraudsters and scammers, etc., or do they ignore all messages except those from friends and family, and don't use anything but a handful of apps?

Regards,

Aryeh Goretsky
 

How can one really know the risk profile of someone else? Sure maybe they don't make wireless payments or browse the web on their phones but it's common for people to say one thing and do another. Maybe his dad likes to go to porn sites when on the toilet?

Security updates are a basic level one first step to secure a device. Everyone should be using phones that are still supported and still get regular security updates. Why take that chance especially with one's parents?

It's a double-edged sword.  Yes, both the OS and the apps they are using should be patched.  If the parents are using the phones to make calls and text, then they should be fine.  However, if they are using them to check their bank account and social media, then they should upgrade their phones to make sure the OS stays patched.  Eventually, companies will require a newer OS version to continue to use their app.  Plus, you can trade in your older device to Apple for some money off a newer device as long as there's not too much damage.

On 08/08/2023 at 06:47, Good Bot, Bad Bot said:

How can one really know the risk profile of someone else? Sure maybe they don't make wireless payments or browse the web on their phones but it's common for people to say one thing and do another. Maybe his dad likes to go to porn sites when on the toilet?

Security updates are a basic level one first step to secure a device. Everyone should be using phones that are still supported and still get regular security updates. Why take that chance especially with one's parents?

 

Hello,

I would imagine it would involve asking about how the devices are used, look at sites visits, apps installed, and so forth.

Regards,

Aryeh Goretsky
 

On 09/08/2023 at 12:14, goretsky said:

 

Hello,

I would imagine it would involve asking about how the devices are used, look at sites visits, apps installed, and so forth.

Regards,

Aryeh Goretsky
 

Did you not understand my point? So his dad going to tell his son he watches porn while on the toilet? LOL Security that is only takes in account the expected is poor security.

On 09/08/2023 at 11:27, Good Bot, Bad Bot said:

Did you not understand my point? So his dad going to tell his son he watches porn while on the toilet? LOL Security that is only takes in account the expected is poor security.


Hello,

That is an interesting assumption you came up with.  In any case, asking the parent if you can look over the device and checking the browsing history while away from them is a possibility.

Regards,

Aryeh Goretsky
 

On 09/08/2023 at 17:50, goretsky said:


Hello,

That is an interesting assumption you came up with.  In any case, asking the parent if you can look over the device and checking the browsing history while away from them is a possibility.

Regards,

Aryeh Goretsky
 

What? That is not going to go over well with anyone. What are you going to suggest next? Beat the info out of them? How about we just make sure they have a properly configured phone that still gets security updates.

On 09/08/2023 at 20:25, Good Bot, Bad Bot said:

What? That is not going to go over well with anyone. What are you going to suggest next? Beat the info out of them? How about we just make sure they have a properly configured phone that still gets security updates.

Hello,

It is possible that would help secure the device, but elder abuse is a specific crime in many countries.

Regards,

Aryeh Goretsky

  • Haha 2

Or you know if money is an issue, then there are certain ways to go about things. Easiest thing to do is to buy them new phones get them the SEs literally the same size/form factor and you can backup and transfer everything it would be like they never got rid of their phones to begin with. It doesn't seem like there's an issue purchasing new devices. It's the safe approach not only that they'll eventually want new phones as their battery life is only going to get worse. Just my 2 cents 🤷‍♀️

Thx for all the info. Some made me laugh!

I'll advise them for a new SE (or maybe iPhone 13 mini to have the same form factor, but with Face ID and all). I'll just wait until Apple announces the iPhone 15 next month (probably) and maybe these SE's and other earlier models might get a price drop [at least it saves them some money and the phones still working - and supported].

  • Like 2

Preferably I'd opt for the iPhone 13 mini.

However, will the iPhone 13 mini still be available on Apple's site (and for a lower price) after the introduction of the iPhone 15?

Sure, on sites like amazon and alike it  will be available I guess...

On 13/08/2023 at 10:11, kiddingguy said:

Preferably I'd opt for the iPhone 13 mini.

However, will the iPhone 13 mini still be available on Apple's site (and for a lower price) after the introduction of the iPhone 15?

Sure, on sites like amazon and alike it  will be available I guess...

If they replace the mini, it wont be available. If they dont replace the mini, theres a chance it'll be available. As for a price drop, the only please you are going to see that is third parties (amazon, best buy, etc).

If you are planning on buying them the iPhone Mini, I would recommend looking at best buy a day or two before the announcement or the day of the announcement. They will be the first ones to discount any old phones / stock and they will do it early or the day of.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I notice how you dodged the questions I had about the racism shown by ignorant, gullible, cowardly people when the Poles, like your partner, were the immigrants. Ahem. I wonder how you'd feel if native born Brits suddenly treated you as "dirty crooked immigrant" for being half Trump-American? If they ordered you to leave and "go back to your corrupt country" (on the other side of the Atlantic), would you go? The truth is based on facts as supported by evidence. As requested in your previous posts, I have used the facts in your own post to show everyone the truth.
    • US citizens are paying to their government, who could use that to fund healthcare and tuition and relieve the costs of these for citizens instead of making tax breaks that overwhelmingly favor the rich. I'm not saying that tariffs are the correct solution, but what else would they be used for? What else could Trump have in mind for wanting them, if he hasn't figured out that labor costs are higher in the US?
    • I’m in need of a new chair and it sounds like the backrest cannot be locked? I also sat on a Herman miller and was devastated that it couldn’t be locked also, what is going on with chairs. I want to be able to lock the backrest into any position but not even the Herman’s do that
    • Sihoo Doro C300 Pro V2 Ergonomic Office Chair review: The Ikea of chairs by Steven Parker I've reviewed a few gaming chairs over the past three years or so and generally found them to score well in our reviews. SIHOO reached out asking if I was interested in taking a look at their flagship chair, the Doro C300 Pro V2. I never got the chance to check out its predecessor, but the V2 is described as an "Adaptive Ergonomic Chair." It became available to buy in April of this year. Let's get things rolling with a closer look at the specifications and features. Specifications Doro C300 Pro V2 Model Ergonomic Materials Mesh Back and Seat; Soft PU Coated Armrests Height adjustability 45.5 - 53 cm / 17.5" - 20.9" Seat (w+d) 52 x 43 - 47 cm / 20.5" x 16.9" - 18.5" (adjustable) Backrest 52 – 60 cm / 20.5" - 23.6" (adjustable) Lumbar support Mesh built-in (adjustable) Armrest adjustability 8D Bionic Armrests Rocking angle 105°, 120°, 135° (fixed) Neck support Mesh built-in (adjustable) Net weight 27.3 kg / 59.64 lbs Weight support 150 kg / 330 lbs Colors Black, White Warranty 5 years (upon registering) Price $499.99, $539.99 Introduction At first glance, it looks like a chair that in another life wants to be a Herman Miller; It certainly looks like my Aeron Remastered, but the Doro C300 Pro V2 has quite a few more features and costs quite a bit less. SIHOO says that it is made up of a "DynaCore" system that tracks your movement and synchronizes the headrest, backrest, lumbar support, and armrests as you shift, twist, or recline. They also say that the "SyncroFlex Backrest" molds to your spine, which kind of describes how the mesh fabric works in most ergonomic chairs, but anyway. Below are the meat and potatoes measurements for the chair. Here is the same tech sheet, but in inches. Durability I would be remiss to not talk about the various durability testing this chair underwent before coming to market, as this is claimed on the product page. First of all, the chair is BIFMA-, SGS-, and TÜV-certified. As for durability, the tests undergone were: 100,000 Castor cycles tested 120,000 Armrest cycles tested 120,000 Recline cycles tested 120,000 Gas lift cycles tested 60,000 Armrest durability cycles tested 120,000 Rotation cycles tested Nothing about weights testing, though. Now that's all disclosed, now onto my own personal findings. Assembly The Doro C300 Pro V2 came in two large boxes (1) (2), and everything was packed very well, protecting the different parts of the chair. In the box, there is a folded sheet that explains the 12 steps to assemble it; they are: Remove the bottom cover on the aluminum base; Insert the five legs into the aluminum base and use ten screws to fasten them; Insert the castors into the legs; Replace the bottom cover on the bottom of the aluminum base; Place the Class 4 Hydraulics gas cylinder into the aluminum base; Screw the bottom part of the arm rests, taking care of the orientation using two screws on each side; Use three torx screws to fasten the footrest to the bottom of the seat; Fasten the backrest to the seat using four torx bolts; Fasten the armrests to the backrest using four Torx bolts (two on each side), taking care to note the orientation; Place the chair onto the Class 4 Hydraulics gas cylinder; Insert the headrest into the top of the backrest; Use two torx screws to fasten the headrest to the backrest. There's also an online guide you can refer to. Carefully unpacking the two boxes took around 15 minutes because almost everything is wrapped in plastic and protective foam; the chair assembly itself took around an hour. I say in the above assembly steps to take note of the orientation, because it's not obvious which way around the bottom portion of the armrests go, and although there is an L and R on the bottom of the armrests, it also wasn't clear from the instructions which was actually left or right, facing the chair, or in the seated down orientation? Anyway, I ended up putting the bottom portions on the wrong sides, and after securing one of the armrests, I discovered that although it was on the correct side, the armrest base could rotate a full 360°, but not when bolted to the chair, so I had to remove it, rotate it, and then bolt it back on. Truly an Ikea experience! Also, to complicate things further, although all the parts are labeled from A to X (yes, that's 24 parts) unhelpfully, these letters do not appear on the parts themselves or the package with the bolts, screws, and washers. There's also a pair of protective gloves in the box, but I think they were made for much smaller hands than I have. Even my friend, who is 5.1, had difficulty putting them on. Once assembled, I needed to sit down. Anyway, as I said, it looks quite similar to my Herman Miller. And here is the back of it. If you look at the product page and on Amazon, it seems like a lot of thought has gone into the chair itself and what it's capable of, but there is no mention at all about the castors, and this is an area where I think the chair trips up quite quickly. I found it difficult to move the chair in any direction. I asked a friend who came to visit me earlier this week to test my findings, and she said that the wheels were "no good," so it definitely isn't just me. I am 6'2 myself and a big guy, I work from home and gained a few pounds from mostly staying in and the hell away from other people. However, the Doro C300 Pro V2 is rated for up to 150kg (330lbs), which in my case is used well within its max rating. Ergonomics The number of adjustments you can make, right up to setting it in nap mode — which I haven't fully tested yet — is what you'd expect from a premium chair. Yes, you can go up and down (max 7.5 cm adjustment), rock back and forth (with tilt adjustment), and lock the chair between three stages of 105°, 120°, 135°, which is not quite as flat as the AndaSeat I tested at 160°. Some thought has also gone into the "8D" armrests, too, which are cushioned but quite firm; you'll only know it if you press hard into the PU-covered tops, which give about half a centimeter, but it's enough to ensure your skin won't get awkwardly stuck to it in warmer (or sweatier) conditions. It almost feels like plastic and is very easy to keep clean. However, the armrest positions move far too easily, and I am not sure what that "elbow" function is. Maybe it is good for a short person with short arms, anyway, I never used it and kept it flat at all times. There are eight levels of adjustment for the armrests, they are: backwards, forwards, swing left/right, height up and down, tilt, and 360° rotation, which can be handy for desk clearance. As I said, the armrest pads shift far too easily, which could give off an ergonomic vibe, but who wants the armrest sliding when you are shifting weight? The height adjustability does lock into place when lifting and adjusting. Comfort This is ultimately what it boils down to at the end of the day, right? Quite a lot of reviews praise the comfort of this chair, and I don't disagree that the mesh seating is quite comfortable. I am used to the material from my daily Herman Miller. However, the backrest cannot be locked into place, and this is actually a feature; as you shift or recline yourself on the chair, the backrest moves with your body. It took some getting used to. The lumbar gives ample support, but I would have preferred an adjustable one built into the seat base, as this causes the backrest to move up and down at will. Again, as with my previous chair review, this chair is also rated for tall people, but nowhere in the product documentation does it say how tall. Being 6'2 myself, I'm happy to say that the backrest is tall and wide enough, and thought has been given to being able to adjust the neck rest, but as others have mentioned in their reviews, people as tall as 6.2ft is about the limit for the neckrest. Conclusion What I didn't like The footrest is rated for 15kg (33 lbs), which to me seems a bit light, and after looking online, it seems like a chair footrest for adults must be at least twice that rating. In all honesty, they are just hollow metal tubes, so it is not recommended to let a kid sit on them. I also feel like it doesn't really go out far enough for my height, so that kind of puts the dampener on me being able to use it regularly. I'll just have to continue to use my subwoofer as a footrest! I do not like the armrests being able to shift around as easily as they can, and they are a little too forward-positioned in the chair to comfortably sit close to my desk, because even in the lowest height position, they don't allow me to go under the desk like is possible with my Herman Miller. I also feel like this chair could have been delivered partially constructed, especially the armrests on the seat, and why the aluminum base wasn't already pre-constructed (without the castors) is baffling, considering it would have fit in one of the two boxes that way. The instructions also need to be clearer. On the pamphlet, there's an A to X listing (which is also used in the steps), but none of the physical parts use this lettering system! What I did like I'll be honest, I haven't used it for very long, just one week, and seating comfort is subjective after all! Any spills wiped straight off it, the stitching, and the lines look great, not a fray to be seen or stitch out of place. It looks kind of cool, too. My favorite feature of these seats is the nap mode. While you're not lying completely flat, it leans far back enough to make you easily doze off after a heavy gaming or working session. Overall, this chair offers plenty of comfort features. The MSRP does vary quite a bit depending on the region, at £549.99 in the UK, and €580 in Europe, and $599 before tax in the U.S. However, shipping is free, which is a bonus for such a heavy item. Is it worth it, though? At three years' warranty, I think it's a decent deal. Another firm out of Germany sent me a free replacement hydraulic gas spring for a chair that failed after almost four years, so it was well outside its two-year warranty. My advice is to always try, as you might have the same luck I did. If I could fault it at all, it would be the constant shifting of the armrests and backrest. Where to buy Although the footrest variant normally costs $539.99, it has been discounted to $469.99 on the official website in Black or White. In fact, the non-footrest variant is only $40 cheaper. On Amazon, it currently costs more at $499.99 links below. Sihoo Doro C300 Pro V2 for $469.99 (official website) Sihoo Doro C300 Pro V2 for $499.99 at Amazon US SIHOO provided a free sample without any review or pre-approval. Good to know This Amazon link is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Conversation Starter
      jessse3334 earned a badge
      Conversation Starter
    • Reacting Well
      JuvenileDelinquent earned a badge
      Reacting Well
    • One Month Later
      Excellence2025 earned a badge
      One Month Later
    • Week One Done
      Excellence2025 earned a badge
      Week One Done
    • Week One Done
      flexorcist earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      +Edouard
      207
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      73
    5. 5
      macoman
      62
  • Tell a friend

    Love Neowin? Tell a friend!