• cheese_greater@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 year ago

      I wish CitizenLab would revisit this topic (or visit it at all, ot sure if they have) about BFU vs AFU mode now. Unless content has CompleteProtection, i believe certain important things can be accessed regardless or lock status if you’ve at least unlocked from boot once…

      I know lockdown mode is supposed to prevent unauthorized usn accessories from connecting but the devil is always in the implementation and I’m not super certain Apple hasn’t fudged the details in some small nuanced but very real way as some people will likely come to find out. A little bit conjecturey but there’s reason to be skeptical.

      • SimplePhysics@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Huh, you have a valid point. I haven’t tried it yet, but it probably doesn’t access/unencrypt too much more than the regular lock screen, given thats its just a glorified alarm clock with notifications. Ironically, some of the most private stuff (photos, notes) don’t have CompleteProtection, so that’s a current gaping vulnerability. And yes, if the FBI really wants your data, there are RAM reading tools for iPhone.

        Here is a stackexchange thread about AFU/DFU/CP if you didn’t know.

        • cheese_greater@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          I think the main important thing is to ensure USB accessories are disabled and also to allow for automation actions that don’t require user confirmation like shutdown and reboot that can be triggered by actions like connecting a charging cord

          • SimplePhysics@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            1 year ago

            Yeah, unfortunately iPhones don’t have a option to ask each time a USB cable is plugged in (has to unlock first), which is a feature I love in macOS. You can turn on a feature disabling USB Data after an hour of not unlocking on iOS though, which I do.