Apple quietly introduced code into iOS 18.1 which reboots the device if it has not been unlocked for a period of time, reverting it to a state which improves the security of iPhones overall and is making it harder for police to break into the devices, according to multiple iPhone security experts.

On Thursday, 404 Media reported that law enforcement officials were freaking out that iPhones which had been stored for examination were mysteriously rebooting themselves. At the time the cause was unclear, with the officials only able to speculate why they were being locked out of the devices. Now a day later, the potential reason why is coming into view.

“Apple indeed added a feature called ‘inactivity reboot’ in iOS 18.1.,” Dr.-Ing. Jiska Classen, a research group leader at the Hasso Plattner Institute, tweeted after 404 Media published on Thursday along with screenshots that they presented as the relevant pieces of code.

  • NateNate60@lemmy.world
    link
    fedilink
    English
    arrow-up
    219
    arrow-down
    1
    ·
    6 days ago

    Law enforcement shouldn’t be able to get into someone’s mobile phone without a warrant anyway. All this change does is frustrate attempts by police to evade going through the proper legal procedures and abridging the rights of the accused.

    • rottingleaf@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      14
      ·
      6 days ago

      Well, when you confiscate a piece of paper, even without a warrant to read it you can do that physically when it’s in your possession, and it’s part of the evidence or something, so everyone else can too, so why even fight for that detail.

      They just pretended it’s fine with mobile computers.

      I thought that “fruit of a poisonous tree” is a real principle, not just for books about Perry Mason. /s

      So - yes. It’s just really hard to trust Apple.

      • catloaf@lemm.ee
        link
        fedilink
        English
        arrow-up
        16
        ·
        6 days ago

        To confiscate anything, unless it’s lying openly, you need a warrant.

        If a cop sees an unlocked phone with evidence of a crime on it, that doesn’t need a warrant. If it’s locked and they only have the suspicion of evidence, they need a warrant. Same as with entering a building or drilling a safe.

        • rottingleaf@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          5
          ·
          6 days ago

          Is analogy with people in (very quiet) places who don’t lock doors to their homes correct? Then it’s as if the door is not locked, a cop doesn’t have to ask permission (or warrant)?

          • catloaf@lemm.ee
            link
            fedilink
            English
            arrow-up
            11
            ·
            edit-2
            6 days ago

            No. Even if a house is unlocked, the fourth amendment guarantees “the right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures”.

            What constitutes “unreasonable”, is of course, up to a judge.

            If a cop can look in your window from the porch and see a meth lab, yeah, they’re going to come back with a warrant, mostly because they can’t just pick up the house and take it to evidence. If your phone is lying unlocked, and they see something obviously criminal on the screen, they’re going to take it right then and there.

      • PresidentCamacho@lemm.ee
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        1
        ·
        5 days ago

        That argument sounds great until you consider that a piece of paper won’t contain almost the entirety of your personal information, web traffic, location history, communications. You may say you could find most of that pre computer era in someone’s house, but guess what you would need to get inside and find those pieces of paper…

      • just_another_person@lemmy.world
        link
        fedilink
        English
        arrow-up
        27
        arrow-down
        1
        ·
        6 days ago

        Lawyer. Not true.

        Example: An officer pulls someone over and suspects them of something arrestable. Then says “Do you want me to get your personal belongings from your car?”

        Any person agreeing to this allows them to hold your phone as evidence indefinitely in the US now.

        • NotMyOldRedditName@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          3
          ·
          edit-2
          6 days ago

          That’s all lawful.

          They can search you and the area when arrested. They can search the car if they have probable cause that evidence will be in the vehicle

          I said have a warrant or seized lawfully, not nust have a warrant.

          Edit: I didn’t even write what I said I said correctly. Corrected it lol.

          • NιƙƙιDιɱҽʂ@lemmy.world
            link
            fedilink
            English
            arrow-up
            11
            ·
            6 days ago

            Seized or not, they can not force you to unlock your phone via pin without a warrant. They can only force you to use biometrics.

            • NotMyOldRedditName@lemmy.world
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              2
              ·
              6 days ago

              Right, but this is about them bypassing you entirely.

              They don’t need your fingerprint or pass code if they can bypass it themselves. This feature protects you when they’ve seized it lawfully which can be for many reasons.

              • catloaf@lemm.ee
                link
                fedilink
                English
                arrow-up
                5
                ·
                6 days ago

                Or even if they’ve seized it unlawfully. Or if it’s been stolen by a regular thief, a cybercriminal, the mafia, or a cartel.

                • NotMyOldRedditName@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  5 days ago

                  I’m not sure how much it would actually help for a regular thief.

                  This is about protecting it against more sophisticated attacks. But the rest probably have those means if wanted.

            • just_another_person@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              6 days ago

              Other people answered, but to your point, in some cases THEY CAN compel without a court order.

              Biometrics don’t conform to certain laws, and it gets even more complicated if you’re entering the US through customs. They can practically hold you indefinitely if you don’t comply. Whether you have legal representation is sort of an after thought.

      • NateNate60@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        The police can engage in rubber-hose cryptanalysis. In many countries, it’s legal to keep a suspect in prison indefinitely until they comply with a warrant requiring them to divulge encryption keys. And that’s not to mention the countries where they’ll do more than keep you in a decently-clean cell with three meals a day to, ahem, encourage you to divulge the password.

        • NotMyOldRedditName@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          4 days ago

          That’s what you need distress codes for.

          Destruction of evidence is a much different crime.

          I would suspect it’d no longer be legal to hold them indefinitely and instead at best get the max prison sentence for that crime instead.

          A us law website says that’s no more than 20y as the absolute max, and getting max would probably be hard if they don’t have anything else on you.

          You’d have to weigh that against what’s on the device.

          Also, even better if the distress code nukes the bad content, and then has a real 2nd profile that looks real, which makes it even harder to prove you used a distress code.

          • NateNate60@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            4 days ago

            In most cases, destroying evidence will result in an adverse inference being drawn against the accused. It means that the court will assume that the evidence was incriminating which is why you destroyed it.