Hacker News Reader

Comment by eddyg | Hacker News Reader

The iPhone automatically goes into BFU (Before First Unlock) after 72 hours of inactivity (it actually reboots the phone). This can’t be disabled.

In addition, there are additional restrictions where your passcode will be required. For example, if the passcode has not been used to unlock the device in the last six days and Face ID has not unlocked the device in the last eight hours, then you must use a passcode to access the device (in other words, biometric unlock is automatically disabled).

If you've ever wondered why you've had to enter your passcode after a good night's sleep and haven't entered your passcode recently, that's probably why!

Given these built-in precautions, a click-bait headline like this is a bit excessive for most people.

View on HN

>The iPhone automatically goes into BFU (Before First Unlock) after 72 hours of inactivity (it actually reboots the phone). This can’t be disabled.

But if the threat is from law enforcement, as the beginning of the article implies, how does that help? They just have to scan your face with your phone when they seize it, and slurp up all the data they want.

>In addition, there are additional restrictions where your passcode will be required. For example, if the passcode has not been used to unlock the device in the last six days and Face ID has not unlocked the device in the last eight hours, then you must use a passcode to access the device (in other words, biometric unlock is automatically disabled).

The conditions for triggering this is so unreliable that it probably exists more to prevent people from forgetting their pins, than meaningfully increase security.

For iPhones your eyes have to be open.

I’ve got to think some cops are good at holding up the phone and saying look at this text message and people opening eyes to see it though.

Not just open, but (by default) “paying attention” and not actively trying to “look away” from the phone:

The TrueDepth camera will provide an additional level of security by verifying that you are looking at iPhone before unlocking. Some sunglasses may block attention detection.

before apple changed it again in ios26 - tripple hitting the side button to bring up emergency also went into BFU. (can't confirm- screw you Dexcom.)

>before apple changed it again in ios26 - tripple hitting the side button to bring up emergency also went into BFU

AFAIK that disables biometrics, but that's not the same as BFU.

Interesting- searching says you're right. I thought the enclave discarded the derived decryption keys in those situations. Looks like it just goes extra locked down.

It really seems it should. It's a quick distress signal, no time to ask the user how locked they want their phone to be.

Reply on news.ycombinator.com