[gnicholas]

> Using a remarkably low-tech trick, thieves watch iPhone owners tap their passcodes, then steal their targets’ phones—and their digital lives.

Ever since TouchID was introduced, I rarely type my passcode (and never in public). How are thieves finding people who need to enter their passcode, and then watching them enter it?

[nailer]

Cinemas and planes?

[sitzkrieg]

let alone faceid!

[gnicholas]

TFA actually gives some social engineering examples, like using someone's phone to take a photo or look at a photo, then turning the phone off before handing it back. That triggers a password prompt when the phone is turned on again. Some thieves even use hidden cameras to observe password entry.

Guess it's time to tell my kids never to type their password in public!