How would you provide this type of locking system without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?
I assume he would’ve been able to recover it if he had “held on to his private key” (having the device be linked to his account being the current equivalent)?
This, and remote attestation, are tools to enforce DRM. The anti theft stuff is just a marketing strategy you fell for.
so if you steal something and therefore have physical access to it, that should trump the original owner who no longer has it because you stole it even if they have the receipt with the serial number on it?
Isn’t that what happened here? The thief and not the owner reported it as “stolen” and thus bricked. The thief could’ve as well just thrown an actual brick on it with similar effects
> The anti theft stuff is just a marketing strategy you fell for.
Also it works. Both for deincentivizing theft and allows you to recover the device had you actually enabled the feature (so not this case)
I see your point, but if it were me in OP’s shoes, I’d be annoyed by the fact that even though I chose not to enable the anti-theft stuff, Apple presumes that the laptop is “unowned” and can still be enrolled into the anti-theft service. I would much rather have the laptop ship with a physical copy of the private key that will unlock the device (paper with a QR code on it would be sufficient), that way I retain ownership of the device regardless of what the thief does. Everything else could stay the same.
Edit: also, reporting as stolen is not the same as a thief smashing the laptop with a brick — the crucial difference is that by reporting as stolen, the thief retains access to the device while locking out anyone else. The post even speculates that the shop involved used this technique to extort the person who brought the laptop to them.
I wouldn't. If someone has a device that is unusable without keys they don't have, they don't actually own that device. Far be it from me to quote the crypto crowd but "not your keys...."
Second, what does this even mean: "without giving users access to their own private keys, then having a much worse problem where dozens of users lose their private keys and forever brick their device?" What scenario exactly does that refer to?
Because (if I under the article correctly?) the owner hadn’t actually enabled “find my mac”?
Sell an HSM (free when you buy a Mac > $2000? discounted in conjunction with AppleCare?) that will remove activation lock on the Mac it's purchased with.