Hi Jeremy and all,

Around fifteen years ago now, someone at Microsoft wrote something he
called the ten immutable laws of security
https://technet.microsoft.com/library/cc722487.aspx
The whole thing is worth reading, but one of the laws or more
accurately descriptions, says:

Law #3: If a bad guy has unrestricted physical access to your
computer, it's not your computer anymore

A smartphone is nothing more or less than a computer. The
passcode/fingerprint is simply security theatre, it makes things look
secure and may be secure against someone who doesn't have Google, but
it is not secure in fact. Once the phone is in the hands of someone
who wants and is willing to bypass the security, nothing is secure in
fact, it only depends on how much trouble the attacker is willing to
go to.
As to this particular method of attack, the user can simply make sure
Siri doesn't work on the lock screen. Again, though, it doesn't much
matter, there are other methods. Keep your phone with you and, in most
cases, you need not worry about physical access without your knowing
about it. This is one of the reasons why I have no passcode on my
phone, it offers very little extra security but does offer an
inconvenience when I want to unlock the phone. I do not keep any
secure data on my phone, any data that I object to the public having
access to, simply because the chance of theft is too high and, as we
see, the passcode is not of much use.
Aman

-- 
The following information is important for all members of the viphone list. All 
new members to the this list are moderated by default. If you have any 
questions or concerns about the running of this list, or if you feel that a 
member's post is inappropriate, please contact the owners or moderators 
directly rather than posting on the list itself. The archives for this list can 
be searched at http://www.mail-archive.com/[email protected]/.
--- 
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/viphone.
For more options, visit https://groups.google.com/d/optout.

Reply via email to