Apple quietly introduced code into iOS 18.1 which reboots the device if it has not been unlocked for a period of time, reverting it to a state which improves the security of iPhones overall and is making it harder for police to break into the devices, according to multiple iPhone security experts.

On Thursday, 404 Media reported that law enforcement officials were freaking out that iPhones which had been stored for examination were mysteriously rebooting themselves. At the time the cause was unclear, with the officials only able to speculate why they were being locked out of the devices. Now a day later, the potential reason why is coming into view.

“Apple indeed added a feature called ‘inactivity reboot’ in iOS 18.1.,” Dr.-Ing. Jiska Classen, a research group leader at the Hasso Plattner Institute, tweeted after 404 Media published on Thursday along with screenshots that they presented as the relevant pieces of code.

101 points

GrapheneOS been had this feature, don’t let apple tell you they invented it.

permalink
report
reply
-12 points

All six GrapheneOS users should be proud that the developers of their phone software are genius inventors!

permalink
report
parent
reply
6 points

Gotcha. We’re almost twice as many.

permalink
report
parent
reply
1 point

permalink
report
parent
reply
3 points

I’m looking forward to joining the dozens with my nexto phone v

permalink
report
parent
reply
5 points

And most of them are in this thread.

permalink
report
parent
reply
6 points

Judging by the downvote count, I was off by 2x. My apologies to the community!

(For the record, I have nothing against GrapheneOS, but also no use for it)

permalink
report
parent
reply
27 points

don’t let apple tell you they invented it.

Why always the knee-jerk anti-apple reaction even if they do something good?

FYI: Apple isn’t telling anyone they invented this. In fact, they didn’t even tell anyone about this feature and declined to comment after it was discovered and people started asking questions.

permalink
report
parent
reply
28 points

IMHO, the novelty of the feature isn’t what makes this headline worthy. This is noteworthy because of the scale. iOS is over a quarter of phones on earth, and in English speaking countries and Japan, you’re looking at numbers that are often over 50%.

This will impact a LOT more investigations than Graphene, and I imagine Apple will be back in court fighting cops who want to remove privacy and security features. Hopefully this stuff stands up to the autocrats coming into power in the states.

permalink
report
parent
reply
76 points

Great software features should be available to all hardware, regardless of OS.

permalink
report
parent
reply
47 points

For sure I’m just joking about apple’s habit of taking a feature that has been around for YEARS and claiming they “innovated” it, usually after they strip it down a little no less (like in this case where it appears to be a setting users can’t access, but Graphene lets you turn it on/off or adjust the time between lock and reset.)

permalink
report
parent
reply
4 points

Did they claim they innovated this feature? I wasn’t paying attention.

permalink
report
parent
reply
5 points
Deleted by creator
permalink
report
parent
reply
11 points

Android in general has it, not just you.

permalink
report
parent
reply
33 points

Wouldn’t that disrupt the usage of a phone as a server?

permalink
report
reply
0 points

A phone server that is disconnected from cellular is already broken anyways.

permalink
report
parent
reply
46 points

That’s it!! Now I will NEVER use an iPhone as a server. 😋

permalink
report
parent
reply
132 points

permalink
report
parent
reply
13 points

You joke but people do that. I’ve seen people repurpose their old android phones to host small services on their home networks. I won’t comment on how reasonable it is because battery, but it’s a thing.

permalink
report
parent
reply
10 points

Literally no difference between a low power SOC RaspberryPi or a fucking phone which is the same thing with a built-in display.

permalink
report
parent
reply
9 points

I really doubt an iOS update will affect people using android phones as servers.

permalink
report
parent
reply
2 points
*

could be a simple hot spot cell backup, like for reporting network outage, remoting in to certain devices, etc. essentially a secondary ISP to report on main isp and troubleshoot. especially if you have smart devices you could reboot remotely.

permalink
report
parent
reply
0 points

An iPhone is not going to be that. This isn’t phones in general doing this, just iPhones.

There are also far more efficient devices for that. More cost effective and more energy efficient.

I understand wanting to reuse old devices for something, but there’s a limit to what is power efficient as well.

permalink
report
parent
reply
22 points

oh fuck I can’t stop laughing

permalink
report
parent
reply
5 points

Interesting, tell me more please. I presume it requires loading a different OS image as standard iPhone/android OS images will pause apps and attempt to go into a deep sleep after a long enough period?

permalink
report
parent
reply
6 points

iPhone? Don’t these kill apps after a few minutes in background?

permalink
report
parent
reply
4 points

*seconds. KDE Connect dying the moment I turn off the iPad annoys me to this day.

permalink
report
parent
reply
3 points

It’s not that simple. iOS has a really sophisticated system for deciding which things to keep in memory and which to evict, and it only does that when it needs more resources. Choosing which apps to kill is based on how recently an app was used, how much of share resources are in use, how often the app gets used, if it’s doing background processing, and other more subtle signals.

Usually if people notice apps being killed when in the background a lot it’s because one of the apps they’re switching to is using a lot of resources, which forces the eviction of other apps.

permalink
report
parent
reply
31 points

Meanwhile security-oriented Android forks: “You didn’t do that?”

permalink
report
reply
24 points
*

Actually, Graphene and Calyx have this feature. I believe graphene may have it on by default at 18 hours, but I do not know about Calyx.

permalink
report
parent
reply
8 points

Samsung phones have this as a feature too. I think it’s under device care

permalink
report
parent
reply
2 points

Looks like the big difference is that this is on by default, it appears to get enabled when cops turn off internet access to prevent access to FindMy and remote lockdowns.

permalink
report
parent
reply
6 points

lineageOS has this as well, as does divestOS but you have to set it

permalink
report
parent
reply
6 points

I was unable to find this on lineage 21 and I don’t think it would work as well on lineage anyway, since the vast majority of the bootloaders cannot be locked once lineage is installed, which would negate a lot of this I would think.

permalink
report
parent
reply

Calyx just copied the code from GrapheneOS, and I believe they still use the old GrapheneOS default of 72 hours

permalink
report
parent
reply
4 points

Well, if graphene turned it down to 18 hours, then they should as well. But I guess 72 hours is better than nothing.

permalink
report
parent
reply
32 points

On one hand, Fuck Da Police

On the other hand, Fuck Apple

permalink
report
reply
49 points

The way this article is framed sounds like bullshit to me. 18.1 was released less than 2 weeks ago. Any phone running this version of iOS would have had to already been in custody and somehow upgraded to this version, or otherwise brought into custody very recently—too recently for this to have already posed such a problem that law enforcement is “freaking out” and reporting it to the media.

permalink
report
reply
4 points

iOS has auto update for a while and iOS users update their devices more often than Android. 2 weeks is not a long time for adoption of new version for iOS.

permalink
report
parent
reply
25 points

Don’t they auto update the OS when connected to a charger? But even then, that would have triggered a reboot already.

permalink
report
parent
reply
5 points

This is the easiest thing for people with money, and motivation to avoid happening.

Remove the sim card if it’s an older device, use a Faraday cage (your microwave is one) or a jammer. If you are the government you can also tell the telecom to block the phone from connecting

permalink
report
parent
reply
3 points

I think you’re seriously overestimating the technical prowess of the average law enforcement officer…

permalink
report
parent
reply
7 points
*

Police may be leaving phones online in case it continues receiving relevant evidence (texts, emails, etc).

permalink
report
parent
reply
2 points

The way this article is framed sounds like bullshit to me. 18.1 was released less than 2 weeks ago. Any phone running this version of iOS would have had to already been in custody and somehow upgraded to this version, or otherwise brought into custody very recently—too recently for this to have already posed such a problem that law enforcement is “freaking out” and reporting it to the media.

A non-insignificant amount of people have been running the public betas because of Apple intelligence, RCS / iMessage toys, UI customization, etc. For example, MixPanel reported about 2% of the iOS install base running 18.0 before 18.0’s launch. IMHO, that’s pretty crazy for a beta OS.

https://mixpanel.com/trends/#report/ios_18

permalink
report
parent
reply
8 points

The ars article mentioned 18.0 had a bug that caused random reboots so it might’ve been mostly that

permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 17K

    Monthly active users

  • 6.1K

    Posts

  • 131K

    Comments