Hacker News new | ask | show | jobs
by coldtea 1689 days ago
They can already do that without harming repairs. As if replacing the hardware with physical access and giving the phone back to you to tap you is an attack people are actually afraid of... (and if they were, e.g. targeted by state actors or whatever, they could just get a specialized phone, not a mass market one).

They already have non-E2E-encrypted iCloud backups where they give access to the Feds and others.

1 comments

The same argument could be made for any security hardening. Why bother with MFA, biometrics etc when the chances of being compromised are statistically very low. The reason is that it does happen and on a scale that's hard to quantify.

We have examples in Australia of ordinary citizens being targeted by China for promoting Hong Kong or showing support for Uyghur Muslims. And evidence has come to light that their phones and cloud accounts were hacked and friends/families targeted.

So for me personally I will take security hardening any day over saving a few bucks to go to a cheap screen repairer.

>The same argument could be made for any security hardening. Why bother with MFA, biometrics etc when the chances of being compromised are statistically very low.

No, the chances there are statistically very big. Because a thief might get your phone, and then can exploit access to it without MFA, biometrics, etc, and stole your bank account, data, etc.

But the chances of people (a) getting your phone, (b) replacing the camera module and compromising the OS, (c) giving your phone back without you noticing, to get your data, are statistically tiny.

And we've somehow managed for 15 years of smartphones without those mitigations...

>And evidence has come to light that their phones and cloud accounts were hacked and friends/families targeted.

Where they hacked in the way we're talking about here? If not, how is this relevant?