this post was submitted on 17 Aug 2023
372 points (97.2% liked)

Technology

58506 readers
4292 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
all 31 comments
sorted by: hot top controversial new old
[–] [email protected] 78 points 1 year ago (2 children)

Perhaps, they added, Apple could add a warning message when using the Control Panel toggles that alerts the user that tapping on its Bluetooth icon doesn’t completely shut off Bluetooth and their iPhone can still interact with proximity-activated beacons, such as Bochs’ contraption.

Apple will never do that because if enough people disable Bluetooth on their iOS devices, it'll reduce the effectiveness of Apple's Find My network.

[–] PickTheStick 21 points 1 year ago (1 children)

I have little doubt that apple still uses things like wi-fi and bluetooth even if they are completely turned off. I complained when they made the change to the control panel. If I want bluetooth or wifi off, no button I push should turn it off partially or for "24 hours."

[–] Earthwormjim91 6 points 1 year ago (1 children)

Well yeah, they’re pretty open about that.

It’s still running in low power mode when you turn the phone itself off so that I can still ping the Find My network. And it says this when you go to turn the phone off.

[–] PickTheStick 2 points 1 year ago (1 children)

"They're pretty open about that" doesn't quite cut it, when I've seen examples in this lemmy post alone of people discovering the fact. We need removable batteries.

[–] Earthwormjim91 1 points 1 year ago

A removable battery wouldn’t do anything about it. They would just include a little unremovable CMOS battery that would be used to power the Bluetooth while the device is off or the main battery is removed.

The entire point of it is so that you can use Find My when the phone is off. If it’s lost, or stolen and they turn the phone off, it can still be found in Find My.

[–] stooth64 2 points 1 year ago

It’s not just that. When connected to an Apple Watch or Apple Pencil (for iPad) the quick toggle maintains these connections along with maintaining handoff and continuity functions between personal devices among other things. In these cases, I think having the quick toggle not fully disable Bluetooth makes more sense to prevent new connections while keeping the existing Watch and Pencil Bluetooth connections active to preserve functionality. Of course, I get that not everyone’s use case is the same, but I rarely need to fully disable the wireless radios. Particularly with Wi-Fi, I use the quick toggle to temporarily disconnect Wi-Fi if I’m on a bad connection away from home. When I return home or to my car (for wireless CarPlay), my phone will reconnect to the respective networks without me needing to remember to re-enable.

[–] [email protected] 46 points 1 year ago (1 children)

Yeah if you go to DEFCON keep your phone off lmao

[–] PickTheStick 16 points 1 year ago

Half the fun is seeing how people try to fuck with you, and fucking with them back. Burner phone, though, never a real connection that you care about.

[–] chrisphero 27 points 1 year ago (2 children)

And once again, the weakest link in the security chain are humans…

[–] [email protected] 62 points 1 year ago (2 children)

Which humans are you blaming exactly?

I don't think it's fair to blame the users. They toggle bluetooth off and think it's off. How are they supposed to know "Bluetooth Off" means "Only some amount of Bluetooth is off"?
And I don't think designing a convincing phishing device is that much of a leap in logic. Bluetooth is off, so maybe the notification is legit from apple and needs authority for a connection?

If you blame the designers who left a backdoor in the bluetooth, then yea that's fair.

[–] EyesEyesBaby 12 points 1 year ago* (last edited 1 year ago) (2 children)

How are they supposed to know "Bluetooth Off" means "Only some amount of Bluetooth is off"?

When bluetooth is on, the icon is blue. When connecting is off, the icon is white. When bluetooth is fully off, the icon is grey. The same goes for wifi. It even gives you a textual confirmation.

That's not new.

[–] [email protected] 9 points 1 year ago (2 children)

Thanks, I never used an Apple Product, so I didn't have the contextual infromation!
To me it sounded like a binary state (on/off), as I know it from most phones I've seen.

[–] [email protected] 15 points 1 year ago (1 children)

I still think it's unfair to blame the user. Apple design is not as consistent or as intuitive as touted. Their UI still has lots of hidden features, inconsistent behavior and strange decisions.

[–] [email protected] 2 points 1 year ago

Just had to use my wife's iphone and felt like a moron trying to navigate it.

I don't know the gestures, the last iOS device I supported still had that center home button.

[–] [email protected] 2 points 1 year ago (1 children)

It wasn’t always like this. It started somewhere around the iPhone X I think. It used to actually turn off wifi/bt in the menu.

[–] [email protected] 1 points 1 year ago (1 children)

Before the iOS overhaul, you went Settings>Bluetooth>Toggle to turn off BT. That still works like it did before. But what most people do now is just swipe from the top-right and tap the shortcut.

[–] [email protected] 1 points 1 year ago

Yea the control center used to turn them off. Apple changed it to “disconnect until tomorrow” in iOS 11. So iOS 7-10 it functioned fine.

[–] chrisphero 2 points 1 year ago

Perhaps, they added, Apple could add a warning message when using the Control Panel toggles that alerts the user that tapping on its Bluetooth icon doesn’t completely shut off Bluetooth and their iPhone can still interact with proximity-activated beacons, such as Bochs’ contraption. So they are saying “off” isn’t really off if you do it in the control center, you have so go into settings to completely turn it off.

I don’t know if it turns itself black on (blue) when something is trying to connect.

[–] chrisphero 9 points 1 year ago

I was indeed blaming the end users. Yes, the bluetooth off thing on apple devices is super annoying and I don’t know why they still force it…

Bluetooth is off, so maybe the notification is legit from apple and needs authority for a connection? The thing is, why would you connect to an Apple TV when you are not at home? Or share your password with another device when nobody asked you in person (e.g. WiFi password)?

Form my understanding, this falls into the same category as phishing SMS or mails. You as a user need to know if this is legit or not.

The target audience for this are not people here on lemmy… it’s our parents, grandparents and more in generally people who are not tach savvy… and/or just don’t care.

This is why we need to make people aware of this and teach them how to respond, basically not to click on everything you see. I’m still doing this in my family and I’m very proud of my 80 year old grandma, that dodged a few very convincing scams. :)

And haha, I never thought of backdoors, but yes, they are also produced by humans.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

A promiscuous bluetooth connector is not a user problem other than their response to it. Why is it happening in the first place?

[–] [email protected] 14 points 1 year ago

Unlike real Apple devices, his contraption wasn’t programmed to collect any data from nearby iPhones, even if the person tapped and accepted the prompts. But, in theory, they could have collected some data, according to Bochs.

[–] LUHG_HANI 3 points 1 year ago

I'd like to test this.