Remix.run Logo
▲ traceroute66 6 hours ago

> even if I jailbreak my iOS and never let it update.

Two things:

a) Why the would you never want to update an OS in this day and age ?

b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:

     - Increasing volumes of increasingly sneaky security exploits on one side
     - A phone with your 2FA apps, your banking apps, your email apps, your kids photos on the other
Frankly. I want Apple to lock down my iPhone as much as possible in that context.

If I want to be root, I can do so on my desktop or a cloud VM or whatever.

But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.

▲mort96 6 hours ago | parent | next [-]

> a) Why the would you never want to update an OS in this day and age ?

Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.

▲mahboi 6 hours ago | parent [-]

Updates slow down your phone, eg Liquid Ass. Lots of people follow the rule of only running the OS that came with your iPhone.

▲mahboi 6 hours ago | parent | prev | next [-]

Maybe your phone doesn't have banking and stuff on it

▲traceroute66 6 hours ago | parent | next [-]

> Maybe your phone doesn't have banking and stuff on it

I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.

Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.

▲tadfisher 6 hours ago | parent | next [-]

Passkeys are the standardized version of the bank's proprietary app. Well, except for the device attestation part, that won't happen on iPhones.

▲NetMageSCW 5 hours ago | parent [-]

I think you meant to say TOTP.

▲mahboi 4 hours ago | parent [-]

I get why TOTP is the better standard, but nothing uses that because the UX in most implementations was horrendous for like 8 years.

▲mahboi 6 hours ago | parent | prev | next [-]

USA, Chase lets me set a passkey

▲ 6 hours ago | parent | prev [-]
[deleted]
▲warkdarrior 6 hours ago | parent | prev [-]

If your phone does not have any important or sensitive on it, why even secure it?

▲traceroute66 6 hours ago | parent [-]

> If your phone does not have any important or sensitive on it, why even secure it?

Or why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)

▲mahboi 6 hours ago | parent [-]

My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.

▲NetMageSCW 5 hours ago | parent [-]

Did it have access to your email?

▲mahboi 5 hours ago | parent [-]

Not my important one

▲jollyllama 5 hours ago | parent | prev [-]

If I'm happy with how it's working, an update can only break things.