We Are Retroactively Dropping the iPhone’s Repairability Score | iFixit News
www.ifixit.com
external-link
We need to have a serious chat about iPhone repairability. We judged the phones of yesteryear by how easy they were to take apart—screws, glues, how hard it was…

Do you really think that replacing FaceID suddenly gives thieves unfettered access to your phone?

So then you’ll let me change the locks on your front door to one I choose?

Never owned an apple device, so I might be drastically off base here.

Is face id actually its own unit, including authentication storage?

If I were designing the iPhone, I’d just use a camera that relays the data to the CPU, and authentication happens there. If it operates like this, a more accurate comparison is I’d let a third party reputable locksmith change my locks, but I’ll set the key pins myself after.

I’m assuming this is supposed to be metaphorical but you don’t seem to understand that it is not analogous because replacing FaceID doesn’t suddenly give you access to the device.

It absolutely could, if the processor trusts that the data coming from the faceid sensor is accurate, the faceid sensor can simply lie. You’re removing a layer of defense, which necessarily impacts security

@[email protected]
link
fedilink
English
51Y

What’s the faceid sensor going to do, brute force a damn cryptographic collision with the cyphertext of your faceid?!

If you have even the first fucking clue, even in the broadest of strokes, I’d really be interested in hearing about how this would actually work.

Fogle
link
fedilink
31Y

I think he think the face id just says “yeah, that’s right, unlock” and the phone unlocks. So if you put in a custom one that always says “yeah unlock” it will just always unlock. As if the person putting in the thing couldn’t see the data on your storage anyway

If a lock is broken, then you might call a locksmith to fix or replace it. This is something that happens frequently and isn’t as absurd as you make it out to be.

I’m not saying it has to be absurd, but no one is acknowledging that the security risks are real, and requiring a lesser standard of security is a cost of legislating this stuff, which it is the editorial stance of ifixit to support

The security risks aren’t real. They are simply trying to scare off people like you who will repeat nonsense over and over again.

Ok, so I can come change your locks then

@[email protected]
link
fedilink
4
edit-2
1Y

That’s a bad comparison because I wouldn’t let a random Internet stranger fix my phone either, but I would allow an actual locksmith to change my locks.

@[email protected]
link
fedilink
0
edit-2
7M

removed by mod

Not how it works lmao

@[email protected]
link
fedilink
21
edit-2
1Y

No, you can’t, because that isn’t a good analogy. Those two situations are not at all the same, but I’ll humor you.

The analogy you’re making is like saying only the company who makes doors is allowed to change the lock on your door, and they’re allowed to just stop offering the lock-changing service whenever they want. They also conveniently put a mechanism in so that whenever a third-party locksmith comes, your door falls apart. Your only option is to buy a new door, doorknob, frame, and hinge because your lock is worn out.

@[email protected]
link
fedilink
English
21Y

If you swap the faceid, you still need to unlock the phone with your passcode to re-enroll faceid.

I guess that’d be more like you changing the outside doorknob.

Create a post

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

  • 1 user online
  • 37 users / day
  • 147 users / week
  • 308 users / month
  • 2.32K users / 6 months
  • 1 subscriber
  • 3.01K Posts
  • 43.4K Comments
  • Modlog