Hacker News Reader

Comment by picture | Hacker News Reader

> How does that not completely bypass any of the reasons for wanting to do this?

Do it from your iCloud account. Presumably thieves will not hold you at gun point to log in to iCloud and allow pairing of your phone's components to a ready recipient iPhone

View on HN

This. If Apple was honest, they'd have an 'unlock from account' security, not an 'accept new to account' pairing.

but you'd have to make it to not be something to be done from an iDevice. it would have to be through the website. otherwise, how do you know it's not a still a malicious approval?

Yep, a web portal similar to what apple does with Find My would cover it nicely I think.

I dont buy the anti theft angle either. People's phones still end up stolen, and they are still contacted by the thieves to remove the icloud account. ICloud is a good enough feature to prevent theft, and having authorized repair options in it is great. So, that notion is already pretty bad. If someone replaces the motherboard with a blank iPhone(no iCloud attached), then a check of parts that are serialized to an iCloud account should be implemented to prevent harvesting parts from a locked iPhone. There are better consumer friendly methods that Apple simply ignores.

Truly, they could put up any roadblock---a time delay, requiring a phone call, MFA up one side and down the other---and it would be a much better look for them.

I don't buy the anti-theft angle that can only be solved by buying a brand-new genuine part direct from Apple.

Reply on news.ycombinator.com