The obvious solution is to require the user to enter the current Apple ID password before allowing it to be changed in Settings > Your Name > Password & Security > Change Password. Given the high profile of the Wall Street Journal coverage, I fully expect Apple to address this vulnerability in iOS 17, if not before. In no case have the victims done anything wrong, and anyone who frequents bars or similar venues in urban areas should beware. But Stern and Nguyen also spoke to victims who were drugged- a sadly common problem-and interviewed others who were subjected to violence to reveal their code. The one that’s heavily emphasized in the article I describe above. The Wall Street Journal article details three kinds of attacks, only one of which is clearly avoidable. In the video, Joanna Stern said a thief with the passcode to an Android phone could perform similar feats of identity and financial theft. Almost no crimes like this have been reported by Android users, with a police officer speculating that it was because the resale value of Android phones is lower. After that, they may transfer money from bank accounts, apply for an Apple Card, and more, all while the user is completely locked out of their account.Īnd yes, they’ll wipe and resell the iPhone too. Within minutes, the thief has used the passcode to gain access to the iPhone and change the Apple ID password, which enables them to disable Find My, make purchases using Apple Pay, gain access to passwords stored in iCloud Keychain, and scan through Photos for pictures of documents that contain a Social Security number or other details that could be used for identify theft.

Then the thief steals the iPhone and dashes off. Watch the video, but in short, a ne’er-do-well gets someone in a bar to enter their iPhone passcode while they surreptitiously observe (or a partner does it for them). Joanna Stern and Nicole Nguyen of the Wall Street Journal have published an article (paywalled) and accompanying video that describes a troubling spate of attacks reported by individuals and police departments aimed at iPhone users that may involve hundreds to thousands of victims per year in the United States. How a Thief with Your iPhone Passcode Can Ruin Your Digital Life 1647: Focus-caused notification issues, site-specific browser examples, virtualizing Windows on M-series Macs.#1648: iPhone passcode thefts, Center Cam improves webcam eye contact, APFS Uncertainty Principle.#1649: More LastPass breach details and 1Password switch, macOS screen saver problem, tvOS 16.3.3 fixes Siri Remote bug.#1650: Cloud storage changes for Box, Dropbox, Google Drive, and OneDrive quirky printing problem.

#1651: Dealing with leading zeroes in spreadsheet data, removing ad tracking from ckbk.

Locked out of my macbook air