Hacker News Reader

Comment by takoid | Hacker News Reader

Anyone else having issues creating a recovery key for their device? I have tried several times to do so since updating to 16.2 but I can’t get the code to verify.

View on HN

I created a recovery key no problem.

I'm confused about the Security Key for 2FA situation, since I can't find that anywhere on iOS. On the AppleID website, it mentions it, but the "learn more" link 404s[0], and the "continue on device" button errors out.

I guess they're working on rolling this feature out on the backend still.

[0]: https://support.apple.com/en-us/HT213154

Security Key features are beginning 2023

I attempted to create a recovery code on my ipad. I tried bout 5 different codes, and I could never get them to verify. I had to enable/verify the recovery code on my macbook, after which it worked first attempt. Something's up with the ipadOS/iOS versions.

Their servers are getting hammered, I think some of these features will be unreliable to enable temporarily.

You would think generating and verifying a recovery key wouldn’t need server access, but I’m getting the same thing as OP on an iPhone 13 mini. I wonder if one of my PiHole lists are blocking it?

I believe they also keep a copy of your recovery key. Apple touts privacy and security but most people I know that use Apple just repeat whatever they claim in their press releases, and have no clue if their device is actually secure.

They claim that's not the case, at least with this new configuration. I'm not sure if I believe them, but this shouldn't be an issue. In theory.

For someone with luks2 in the username you sure have a lack of understanding about encryption.

Why would it be so hard to believe that your recovery key is hashed and salted like every other password? You can't view your key after creation, you have to regenerate it. Do I really need to pull out Wireshark to verify this for you?

Advanced data protection is explicitly removing Apple as a holder of your keys, it's not re encrypting anything, it's not new encryption. The entire process is just deleting the key that was already stored on their servers anyway. How would it be in Apple's interest to keep your recovery key after press releases and multiple warnings saying you're on your own for recovery.

Microsoft Windows has the option to upload your BitLocker recovery key to your Microsoft account. I was trying to understand why Apple needed to ping a server for a recovery key. Oh, look... they do have that feature afterall:

https://support.apple.com/guide/profile-manager/use-a-person...

I made one seemingly fine on a iPhone X - but I updated via a cable to my Mac instead of doing it on device.

Likewise, on an iPhone XS.. if that matters.

Are you also having issues? I’m troubleshooting the issue with Apple Support right now but not having any luck. They said they are going to open a ticket with the engineering team.

Reply on news.ycombinator.com