Apple's iPhone Passcode Problem: How Thieves Can Take Over in Minutes

[Auggie]

iPhone thieves across the country are locking people out of their Apple accounts and draining their bank accounts—sometimes before victims even know what happened. How do they do it and how can you protect yourself? WSJ’s Joanna Stern investigates.

VIDEO AT THE LINK: https://www.theaustralian.com.au/business/technology/apples-iphone-passcode-problem-how-thieves-can-take-over-in-minutes/video/000a739072e391a87ebf0db5c37a0b00

The Original Wall Street Journal article this video is based on is behind a paywall.

Basically, the video suggests being very careful and protective when using your phone in crowded, public settings like restaurants, bars, concerts etc.

Thieves can work in groups -- one or two will try to ascertain your passcode as you use the phone, the others work to physically steal it.

Once they have the phone and the passcode they will change your Apple I.D. and turn off the "Find My Phone" app. If you have banking apps linked to your password apps they will drain your bank accounts. They will shut down your email, lock you out of your iCloud account, steal your contacts, etc.

Details at the link, plus suggestions to protect yourself.

[hlthe2b]

1. what a nightmare.

[vanlassie]

2. My iPhone uses my thumb to access my bank...

[3Hotdogs]

6. Why phone uses my ugly puss....

My face breaks cameras.

[FuzzyRabbit]

3. I don't do any banking with my phone.

Problem solved.

[Rebl2]

4. Neither do I

Have never trusted putting bank account app on phone.

[usonian]

5. Some simple precautions.

1. Use touch-id or face ID as much as possible, so that the times you have to enter a passcode are absolutely minimized. If you do have to type one in, do so in a very secluded spot. It happens every now and then.

2. Don't hang around bars! Admittedly, there are many public places you can't avoid, but as above, if you HAVE to type in a passcode, do so in complete isolation. People who steal these are called "shoulder surfers". Of course, a very long passcode is harder to break if the phone is stolen "blind" (without stealing your passcode) but if they are recording, not just memorizing no matter the length.


So, the idea is to never use your passcode in a public spot. That's the entry point being discussed here.

This is the KEEP IT SIMPLE, STUPID (KISS) message.

A solution?
Apple is supporting hardware security keys with the very latest iOS and MacOS releases (of course). Worth looking into.
https://support.apple.com/en-us/HT213154
I am going to check this out.

More later. I want to keep this simple.

[usonian]

7. One more thing.

Try to back up your devices to a Mac, in case your iCloud password is stolen and your iCloud data erased. Dunno Apple's retention of data. The video sounded unsatisfied with this.

Put sensitive data on a thumb drive and lock it up/ put it in your wildfire evacuation kit.

More on request.