Why would you even
Have that as an option?!
'so, everyone is agreed. Our default position will be no opening the prison gates. But anyone outside is free to talk to the Inmates'.
It has not been a good week for Apple on the security front, and there's no relief in sight after an Israeli researcher found a way to access a locked iPhone's contacts and messages database using Siri. In a YouTube video, Dany Lisiansky showed how a locked phone running iOS 7.0.2 can be opened by using Siri's voice control …
Are you actually reading the stories?
Here's what users want a phone to do: (i) lock itself if left unattended; and (ii) be usable hands free, such as in cars.
The 'security' problems with iOS are nothing to do with the technical underpinnings. They're the direct result of the inherent conflict of those two goals. There's no hint of creaking internals whatsoever.
"(i) lock itself if left unattended; and (ii) be usable hands free, such as in cars."
Why do you think there is an inherent contradiction between these two goals? How difficult is it to disable automatic locking when the phone is paired with a bluetooth device such as a hands-free kit in your car (where I live it is illegal to use a mobile while driving without such kit, which is a good idea, IMHO)? There is an app for Android, at least, that does it. It should be built-in, not an add-on, and I would very much like an option to only do it when paired with one of the specific devices that I could configure, but it is usable even without these enhancements. When get into my car I switch BT on, and the screen lock is disabled.
My Android phone actually has a "driving mode", but its functionality is basically useless, e.g., disabling screen lock is not a part of it. The mode is not simple to switch on/off - it is hidden behind several menu levels. There is no reason, however, why proper design should not let a user tell the phone, "I am driving now, change the settings/profile accordingly: switch bluetooth on, disable screen lock, read out arriving text messages, etc." More generally, switching between "profiles" (switch BT on while driving, switch Wi-Fi on when at work, etc.) would be useful as a design feature.
Both iOS and Android are very poorly designed, IMHO (I have yet to see WP in the wild, so no comment). They are designed without any thought devoted to what the phone should do as a system. Rather, the mindset is, "someone will write an app for that". Obviously, the various apps do not work (together?) very well, which renders "creaking at the seams" a reasonable opinion. Your example of 2 conflicting requirements is perfectly valid, but the conflict is not "inherent" - it is due to lousy design. (In particular, using the phone while driving is not designed in at all - that would require, among other things, calendar and contacts and dialer and maps and GPS to be integrated into a single system, in addition to "profiles").
if you have the nokia car kit with a compatible windows phone, will pair via BT (like a normal phone) and NFC automatically toggles the phones car mode when you place the phone in the holder - oh, it also charges wirelessly too while there!
Car mode changes the ring profile and also replaces the normal start screen with a few giant buttons to operate a cut down UI with favourites based addressbook, navigation and music....
If the phone doesn't lock when paired with a hands-free device then the phone of anyone with a bluetooth headset is permanently unlocked. So as soon as one of those people leaves their phone on the bus, on their desk, is pick-pocketed, etc, the story would be that a security vulnerability had allowed their contacts/email/the rest to be accessed.
I also think Siri is Apple's attempt to integrate calendar, dialler, maps, GPS, etc. I'm don't think it's a good implementation but it's an attempt, at least.
Regardless, answer this: are there — as the poster suggests — any grounds whatsoever to conclude that because one of the supplied, first-party applications displays information when we as users wouldn't want it to, the operating system must be "creaking at the seams"?
But don't you have to be connected to wifi to use facetime? (i could be wrong but i was under the impression that it usually asks you to connect to wifi) Going off the basis that you need wifi, for someone to dupe you in this way they would have to steal your phone from home or work and perform this task on site... Seems a bit mission impossible to me. But then again office pranks are fun.
No — that was true across the board when the feature launched but Apple lets the individual carriers dictate it. E.g. AT&T announced in May that they'd be allowing access by the end of the year (source: http://www.theverge.com/2013/5/20/4348672/att-will-allow-all-video-chat-apps-on-its-network-by-end-of-2013 ) and various individuals started reporting access somewhere around mid-June. I've no idea if it's nationwide yet but if it isn't then it will be soon. Other networks no doubt have similar plans.
It seems Apple needs to add a global variable "screenlocked" to iOS and check it in a few more places or something. People are obviously checking every possible permutation to get from the lockscreen into the phone, and rather than plugging up each combination one by one, I hope they take the time to make a proper fix that addresses them all rather than see another one pop up after 7.0.3 is released to fix this one on Friday...
Well, you're saying two things. First you describe the implementation they seem to have now--a global variable, or whatever, that gets checked a bunch of places, and sometimes not in the places where it should be. And then you say they should make a proper fix.
I think the proper fix is probably to have some kind of watchdog process running if the screen is locked and checking to see if anything is going on that isn't allowed, i.e., have a small list of activities that are allowed, and start killing processes if they aren't on the whitelist.
Dont use Siri - its fucking hopeless anyway, works fine in the house when there is no noise and i have my hands available anyway, get in to a place where you really need to use it in anger and the conditions are not perfect, not a chance in hell. I try it for a week, its now disabled never to be heard from again.
firstly, to get Siri to call someone, you need to know that the person you are trying to call is stored in the contacts. Yeah, i suppose you could try "siri, call Mum" but you can't guarentee that will work.
secondly, the number you're calling from step one, has to have facetime available, so either another iOS device, or a Mac.
Lastly, you need access to that other device to be able to end / cancel the facetime call.
So, yeah, while possible, not exactly plausable. It's not like i can walk through an office, grab someones iPhone off their desk, and use this to get access to their phone / contacts.