[jacobwil]

Where would that software auto-update get the decryption key from? If the user has enabled a passcode, then their passcode is used in generation of the key used to protect the disk encryption key. Even if apple did push an update, the user would still have to unlock their device post-update.

[baddox]

The update could wait for the next time the user types in that password. If you own the phone (which you do if you can push OS updates), you can own the data on it. There's no way around that, unless the phone is already confiscated or the user knows to not type in their password.

[johncolanduoni]

> which you do if you can push OS updates

Unless Apple already inserted a secret backdoor that allows for forced updates, you don't have to update the phone when it prompts you. The closest I've seen it get is a reminder that asks you if you'd like to schedule an update for 2:00 AM or some such time, and then asks for your passcode to do so. You still need to type it for the explicit purpose of updating for it to go through.

[jonknee]

Stuff like carrier settings get updated behind the scenes, I wouldn't be surprised at all if Apple can force an OTA update. That's even a feature for enterprise customers.

[tonyarkles]

I'm pretty sure, for me, it asks before allowing the carrier updates.

[crazypyro]

Was there not a huge storm when iOS 7 came out because they automatically pushed the update?

[comex]

That was about iOS automatically downloading the update file in the background (and at the time lacking an option to delete it), not automatically installing anything.

[crazypyro]

Ah okay, thanks for the clarification.

[johncolanduoni]

I don't remember that happening to my phone, but it's possible. Prior to iOS 8 Apple says (in these court documents) it is technically feasible to break into your phone anyway.

I know that recent updates download automatically on Wi-Fi, perhaps that was what you're thinking of?

[nosuchthing]

There was the time where they auto-downloaded U2's album into everyone's iPhone..

[olliej]

No, installing an update requires the passcode. Look for the OTA update stuff in the security white paper.

[MichaelGG]

If the secure enclave runs signed updates, the rate limiting/auto-wipe could be removed.