| ▲ | jeroenhd 6 hours ago |
| Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness. |
|
| ▲ | sumam 5 hours ago | parent | next [-] |
| yes for PDFs in iMessage where would be blocked, not sure in Signal though. No idea for 3rd one. |
| |
| ▲ | paxy 5 hours ago | parent [-] | | It only blocks auto loading. Clicking on the PDF will have the same effect. |
|
|
| ▲ | sigmoid10 5 hours ago | parent | prev [-] |
| These are still 1-click, not zero click. So the best protection you can have is not opening unknown files that were sent to you. That being said, lockdown mode blocks all sorts of message attachments. From the videos it look like they are using pdfs in the messaging vector, which would get blocked too. So you would be safe-ish. But lockdown mode is so restrictive that it doesn't really make sense for most users. Or at least it doesn't make sense to buy a $1500 phone and then limit yourself to something you could have gotten for $50. |
| |
| ▲ | so-gala-massey 5 hours ago | parent | next [-] | | You don’t know what lockdown is do you? I’ve had my phone in lockdown for a year. I can’t: collaborate on notes, and it does not automatically open links in chat. Other than that my experience is identical to non lockdown. | | |
| ▲ | sigmoid10 35 minutes ago | parent | next [-] | | I guess you don't browse any modern webpages? Otherwise I can't explain your perspective. You basically lose up to 95% of performance in anything remotely resembling a JS heavy web app. So it would run the same as on a cheap Android phone. | |
| ▲ | HelloUsername 3 hours ago | parent | prev | next [-] | | > had my phone in lockdown for a year. I can’t: collaborate on notes That's your own mistake, because you can collaborate on Notes while your iPhone is in Lockdown | |
| ▲ | shepherdjerred 5 hours ago | parent | prev | next [-] | | You lose a lot: https://support.apple.com/en-us/105120 | | |
| ▲ | prmoustache 2 hours ago | parent | next [-] | | Doesn't seem like a lot according to the description and pretty much what I would set by default. | |
| ▲ | dilyevsky 4 hours ago | parent | prev | next [-] | | some sites don't work (you can explicitly whitelist them tho) but generally it's been fine. i would honestly prefer a phone that doesn't allow any comms to any non-contact list parties at this point. | | |
| ▲ | throwaway219450 3 hours ago | parent [-] | | From what I can see in Apple docs, aside from web limitations it sounds great. Is there any real reason to not enable this? Like I would be deeply suspicious of a PDF sent via messages and no auto-connect to insecure WiFi is also common sense. | | |
| |
| ▲ | josh2600 2 hours ago | parent | prev | next [-] | | Yeah what I want is a configurable version of lockdown mode where I can have my agent sync my allowlist with my hardware. Like give me the list of what I can turn on and off, and then let me choose my lockdown sphere. That’s the future, and it’s coming. | |
| ▲ | so-gala-massey 4 hours ago | parent | prev [-] | | [flagged] |
| |
| ▲ | lelandfe 5 hours ago | parent | prev [-] | | I can send my friends a PDF of a restaurant's menu over iMessage. I think that wouldn't work for you? | | |
| |
| ▲ | Panino 5 hours ago | parent | prev [-] | | I use Lockdown Mode and the functionality I get is nothing like a $50 device. If you're being serious can you link to some $50 devices for sale that are on par with a recent iPhone Pro running in Lockdown Mode? |
|
