is there a security flaw in apple passcode and or ID ?
Recenlty a mate of mine had his phone snatched while using it on the street. Essentially 2 guys. One took the phone our of his hand and it was handed to a guy on a moped who sped off. At that point the phone was switched on AND unlocked as it was in use at the time.
My mate confronted the first guy who took the phone and passed it the the other guy, who thretened him with violence, so my mate ran off. Meanwhile the second guy on the moped was gone with the phone.
At the point the phone was snatched, it was unlocked, however my mate insistes 100% that he has a passcode on his phone, as well as faceID. He had to set this set up as he uses apple pay with his credit card registered.
Within 20 minutes, (when my mate caught up with us, and we called the police), his apple ID password was changed, (so he was locked out of his own icloud account) his credit card registered to appleID was maxed out, AND two banking apps on his phone had been compromised and money taken from his account.
The thing i cant understand here is that any changes to appleID password or any other security stuff that needs to be changed is 'supposed' to require the re-entry of the phones passcode. So how has this happend if they did not have it?
For example, to reset your appleID password from a phone, not only do you need to recieve the sms message, (which you would if you had the phone), but you also need to re-enter the phones unlock code.
Either there is a serious security flaw in the way apple resets appleID password from a phone that is not secure, an issues with the lock function on iOS, OR these guys have some serious tech that can bypass all the security on the apple iphone.
My mate insisits he has all the updates, Its a 13pro i think, and is pretty securtiy minded. He did NOT reveal the unlock code to the theives. 100%
On a side note, apple were pretty useless to help. In fact even after calling apple, they can not do anything about securing his apple ID or locking his icloud access. He has to wait something like 26 days for some process before they can help him....what a total joke....
