Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The stated rationale is that it's reasonable for a security-critical device to self-destruct if it thinks it may have been tampered with. Unfortunately this is a phone which costs a lot of money and has much of the user's life stored on it. I wouldn't be surprised to see Apple sued over this; I don't know what the interaction of the Sale of Goods Act and remote-bricking is.

I was thinking along similar lines recently when someone sent me an email to an old PGP key - I was able to dig up the key, but had long since forgotten the password. Do you want your computer security system to fail-open (leaking your stuff and potentially exposing you to fraud) or fail-closed (losing data which may be irreplaceable and of emotional significance)?. It's not obvious. But if you store your photos on your phone, you should probably back them up to the cloud - and to a different system that is not under the same account, either locally or another cloud. User-friendly crypto may be possible, but user-friendly key management is a total nightmare.



Apple have been accused of copper-bottoming the rules when relatives want to get access to a dead person's phone.

Apple only really need a death certificate and certificates of probate; but Apple insist on different court orders.

So I'm not sure if SOGA etc will affect Apple here.


> Apple have been accused of copper-bottoming the rules when relatives want to get access to a dead person's phone.

> Apple only really need a death certificate and certificates of probate; but Apple insist on different court orders.

Huh? Why should next of kin automatically be entitled to all someone's personal information?


> has much of the user's life stored on it

Stores life in fragile device

Fragile device breaks

Dies


You may not like it, but this is how non-techy users use computers and phones.


We techy people have let them down, in that case. It should be safe to crush any of my terminals under a tyre and lose nothing.

I learned 15+ years ago that the OS should have that as standard, with no privacy issue either. It is crazy that it is not baked in already. It's not even difficult.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: