FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled

https://piefed.zip/c/privacy/p/1034473/fbi-couldnt-get-into-wapo-reporters-iphone-because-it-had-lockdown-mode-enabled

FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled

Why not try a different UI? - [Blorp](https://blorp.piefed.zip)

Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”

Use biometric security at your own risk.

Just don’t. No pussyfootin’ around. Every single person the US has access to is a possible “suspect” for anything it claims.

Act like it, citizens. Protect yourself, then help others to do likewise.✊🏼

So tired of the “if you’re not doing anything wrong, then you have nothing to hide” and “if you care too much about privacy, then you seem suspicious” lines.

People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I’ve raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives…

The only thing of mine that uses biometrics is my phone, and that is very easy to put into lockdown mode.
So basically, the reporter said she doesnt use it, but that was just a lie she got called out on?
Or it was setup at one point by whomever assists her with IT and she forgot. Lots of possibilities when you’re dealing with humans
That makes the most sense. It was probably set up the day she got it as part of the onboarding process and then she never used it and forgot about doing something that took 30 seconds several years ago.
Even then, why not just use the wrong finger(s) enough times to disable biometrics there too?
They “assisted” her to put her finger on the fingerprint reader (i.e., grabbed her hand and forced her finger onto it).
Ah no good then :/
That’s why I unlock my phone with my genitals.

I’ve never used this. Not in the entire time I’ve owned phones and computers.

For those protesting ICE right now, do NOT use face recognition or finger prints. Turn that shit off and never turn them back on.

If you don’t have proton mail or similar, now is the time. Google and Microsoft are not safe.

Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk

Not sure about the laptops; probably best to do a password there.

Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.
That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.
Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.
It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.

Just tested it and can confirm it works. For those that don’t have their phone handy or are worried about trying it:

  • Just 5 presses is enough. You could do 6, or just spam the power button to make sure you’ve got at least 5 in. Any presses after the 5th don’t do anything different
  • when you do it, it opens up a menu with options to:
    • Power off
    • Make an emergency phone call to 911 (there is no option to select an emergency contact. It just calls 911 immediately)
    • Show emergency medical info
  • Afterwards, you need to enter in your pin/passcode to unlock your phone. I have Face ID and the ability to unlock my phone via my Apple Watch. Both methods are disabled until I unlock my phone with my code.
Tried this on my pixel and it opened the emergency call menu.
My pixel has four options from that screen, one being lockdown, which appears to be similar.
On pixel it’s double tap the home screen.
You can long press the power off button and select lockdown. But biometrics can also be disabled in the settings for unlocking the phone in general but still active for usage when the phone is unlocked, e.g. for banking and 2-factor.

between the hotspots of fingerprints and shoulder surfing risk

If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and “”“assist”“” you into touching your privates (aka biometrics).

That would fall under the scenarios in which you should have your phone locked out.
turning the phone off also disables the biometrics if you turn it on again, it requires whatever lockout method you used previously
Got I hate fucking paywalls

Here’s an archive link for you.

https://archive.ph/cvFNb

In the future, you can go to archive.ph and put in the url and it’s usually already been archived. There are some paywalls it doesn’t get through, but it handles most of them.

I know but it irritates me to add that step for every single article (how is OP viewing it too?)

Blessed is the OP who simply provides the archived link as well

When I’m in mobile I often won’t even bother and just go about my day

how is OP viewing it too?

Blessed is the OP who fully utilizes their adblocker.

BeautifyingPageCleaner

BeautifyingPageCleaner

Codeberg.org

lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)

If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷‍♀️

If you’re gonna share articles you should actually share them

I’m sorry, your poor system configuration is my problem? Getting blank pages is a you problem.

You’re the one sharing articles dude so unless you don’t want people to read them I’m not sure what your position here is

By all means continue sharing paywalled articles than 99% of people can’t read without all hitting the archive sit themselves

Great work 👍

On their phone, I hope?
Firefox Android + uBlock Origin = magic.
Don’t know if you care, but with uBlock origin on Firefox mobile and this list the article is still behind the pay wall
There’s 2 lists.
Which one is the second? On the page you linked nothing looks like a list to remove pay walls except the list you linked

I was perhaps a little too subtle but I linked 2 lists:

https://codeberg.org/Mahogany0330/BeautifyingPageCleaner

And

https://github.com/liamengland1/miscfilters/blob/master/antipaywall.txt

The first one’s title and description are perhaps intentionally vague, but both work together nicely to make pages more accessible :)

BeautifyingPageCleaner

BeautifyingPageCleaner

Codeberg.org
Ah, you’re right, I missed that there are three links, and kept clicking the same word. I’ll try to add that list, thanks
Still same, these two lists seem to not be enough

Paywalled.

If you just want to learn about Lockdown Mode, here ya go:

support.apple.com/en-us/105120

About Lockdown Mode - Apple Support

Lockdown Mode helps protect devices against extremely rare and highly sophisticated cyber attacks.

Apple Support
on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.
Oooohh, I always thought that was screen lock.

My phone decided to change what holding the power button does at some point, so watch out for that.

For those wanting to ensure theirs does the same, at least for Samsung, it’s under:

Advanced Features > Side Button > Long Press

What’s the difference between lockdown and just rebooting your phone (putting it into the first-run state)?
Lock down will do things like disable biometrics, but the phone has still been unlocked and is no longer in a fully encrypted state like it is if powered off.

Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.

This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.

Mine doesn’t even have the option. Seriously made a mistake with going samsung.

It’s been a while since I had a Samsung, but iirc there’s an option to add it to your power menu. 

More importantly, rebooting or powering off the phone is more secure anyways. You should just do that in 99% of circumstances. 

This does not work on all android phones. Does nothing on the OnePlus.
It requires a regular pin if you have buometrics set up, doesn’t shpw notifications

On my Samsung device I had to enable “Power Off Menu” manually. I can now lock my biometrics by holding down the power button.

Te enable it on Samsung devices

every time such a storie appears i assume its a cover lie / marketing for apple.
Remember iPhone users: 5 quick presses of the side button will disable biometric unlock and require a PIN.
Or just turn off the biometrics on the lock screen to begin with. It’s not nearly the income it seems
Isn’t the Washington Post state media now anyway?
when Jeff Bezos bought them and began to interfere with their editorial independence, they certainly lost integrity
Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?