Hacker News

4122 readers

2 users here now

This community serves to share top posts on Hacker News with the wider fediverse.

Rules

0. Keep it legal

Keep it civil and SFW
Keep it safe for members of marginalised groups

founded 1 year ago

MODERATORS

[email protected]

Ask HN: Why does Apple want me to expose my iPhone password to repair my screen? (derp.foo)

submitted 1 year ago by [email protected] to c/[email protected]

6 comments fedilink hide all child comments

I went to the Apple "Genius Bar" today to get my iphone screen repaired (it shows only a white screen). They told me I need to disable the "find my iphone feature" before they can start the repair. This requires me to confirm it on the phone itself - which does not work due to the broken screen. So the apple staff handed me a "Showcase iPhone" of the apple store which had a "apple support" app on which I need to enter the password of my phone. I have no idea what this apple support app is doing or if it is legitimate at all (ass this is a show phone where many people have access to). I ended up leaving without repairing the phone and now consider to go to an unofficial screen repair shop. From a security point of view that does not look like a very good approach. Any thought on this?

There is a discussion on Hacker News, but feel free to comment here as well.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

If your data is sensitive, and unencrypted, you can't give up physical custody of your data for repair. For Apple products that means you can't give up your device cuz you can't remove the data.

For other manufacturers, like laptops, you would just remove the hard drive, the SSD, the NVMe, whatever, and then send the main board in for repair. No problems.

For integrated storage solutions, basically all Apple products, you have to make the choice is the data sensitive, or is it not? If it is sensitive you can't repair it, unless you can have full custody and observe the process in real time...

Not a great answer I know.

Maybe with Apple products, you could use find my iPhone to wipe the phone remotely? Once it's wiped then you could unlock it for the repair people.

[–] [email protected] 5 points 1 year ago (1 children)

That's not the question posted though. The person accepts that their data is in their custody, with a degree of protection offered by the password. We can debate how flimsy that protection is, but that point is never raised because the store asked for their password, without telling them why.

What sort of bullshit excuse would there be to require an unlocked, untraced phone to fix a broken screen? Replace the screen, boot the phone. Does the new screen show all the pixels? Call the customer in and have them look at it. Done.

It's beyond me how one can defend the store behavior.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

I'm not defending the store behavior, apologies if I miscommunicated that.

[–] [email protected] 2 points 1 year ago

Oh I didn't mean to imply you were. I was referring to the majority of comments on Hacker News. Re reading my comment I can see that was not clear at all, sorry. I get too much in my own head sometimes.