zlacker

[parent] [thread] 109 comments
1. nova22+(OP)[view] [source] 2026-02-04 16:29:22
Remember...they can make you use touch id...they can't make you give them your password.

https://x.com/runasand/status/2017659019251343763?s=20

The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it.

replies(16): >>wackge+p1 >>patric+K2 >>mbil+R4 >>teejmy+Gk >>goda90+hr >>b8+kw >>p0w3n3+MA >>raw_an+3C >>neves+eF >>joecoo+hT >>notyou+mY >>deltas+Y41 >>direwo+h91 >>rustyh+qb1 >>tim333+RV2 >>innaga+KB3
2. wackge+p1[view] [source] 2026-02-04 16:35:44
>>nova22+(OP)
Link which doesn't directly support website owned by unscrupulous trillionaire: https://xcancel.com/runasand/status/2017659019251343763?s=20
replies(3): >>throwa+gh >>forgot+Vj >>appare+Gq1
3. patric+K2[view] [source] 2026-02-04 16:41:09
>>nova22+(OP)
Is the knowledge of which finger to use protected as much as a passcode? Law enforcement might have the authority to physically hold the owner's finger to the device, but it seems that the owner has the right to refuse to disclose which finger is the right one. If law enforcement doesn't guess correctly in a few tries, the device could lock itself and require the passcode.

Another reason to use my dog's nose instead of a fingerprint.

replies(3): >>parl_m+6h >>thecap+lw >>z3phyr+xw
4. mbil+R4[view] [source] 2026-02-04 16:49:07
>>nova22+(OP)
Reminder that you can press the iPhone power button five times to require passcode for the next unlock.
replies(6): >>kstrau+d9 >>paulsm+g9 >>fogzen+9b >>rawgab+mi >>thecap+5x >>qingch+or1
◧◩
5. kstrau+d9[view] [source] [discussion] 2026-02-04 17:09:53
>>mbil+R4
Or squeeze the power and volume buttons for a couple of seconds. It’s good to practice both these gestures so that they become reflex, rather than trying to remember them when they’re needed.
replies(2): >>pkulak+Sf >>regens+Du
◧◩
6. paulsm+g9[view] [source] [discussion] 2026-02-04 17:10:07
>>mbil+R4
Alternately, hold the power button and either volume button together for a few seconds.
replies(1): >>tosapp+cl
◧◩
7. fogzen+9b[view] [source] [discussion] 2026-02-04 17:18:36
>>mbil+R4
In case anyone is wondering: In newer versions of MacOS, the user must log out to require a password. Locking screen no longer requires password if Touch ID is enabled.
replies(3): >>jen729+2f >>alista+Sk >>raw_an+5D
◧◩◪
8. jen729+2f[view] [source] [discussion] 2026-02-04 17:35:47
>>fogzen+9b
Shift+Option+Command+Q is your fastest route there, but unsaved work will block.
◧◩◪
9. pkulak+Sf[view] [source] [discussion] 2026-02-04 17:39:25
>>kstrau+d9
Oh wow, just going into the "should I shutdown" menu also goes into pre-boot lock state? I didn't know that.
replies(1): >>duskwu+rm
◧◩
10. parl_m+6h[view] [source] [discussion] 2026-02-04 17:44:41
>>patric+K2
I really wish Apple would offer a pin option on macos. For this reason, precisely. Either that, or an option to automatically disable touchid after a short amount of time (eg an hour or if my phone doesn't connect to the laptop)
replies(7): >>fpolin+xk >>xoa+Gm >>Wistar+Lu >>NetMag+BP >>redeem+E21 >>djhn+pm1 >>171862+ob3
◧◩
11. throwa+gh[view] [source] [discussion] 2026-02-04 17:45:38
>>wackge+p1
Good reminder to also set up something that does this automatically for you:

>>46526010

replies(1): >>JimA+l31
◧◩
12. rawgab+mi[view] [source] [discussion] 2026-02-04 17:49:34
>>mbil+R4
Serious question. If I am re-entering the US after traveling abroad, can customs legally ask me to turn the phone back on and/or seize my phone? I am a US citizen.

Out of habit, I keep my phone off during the flight and turn it on after clearing customs.

replies(2): >>Analem+9l >>verall+Dl
◧◩
13. forgot+Vj[view] [source] [discussion] 2026-02-04 17:55:36
>>wackge+p1
I actually think it is fitting to read about a government agency weaponized by an unscrupulous billionaire going after journalists working for an unscrupulous billionaire on an unscrupulous trillionaire owned platform.
◧◩◪
14. fpolin+xk[view] [source] [discussion] 2026-02-04 17:57:43
>>parl_m+6h
You can setup a separated account with a long password on MacOS and remove your user account from accounts that can unlock FileVault. Then you can change your account to use a short password. You can also change various settings regarding how long Mac has to sleep before requiring to unlock FileVault.
replies(1): >>AnonHP+2o
15. teejmy+Gk[view] [source] 2026-02-04 17:58:14
>>nova22+(OP)
I previously commented a solution to another problem, but it assists here too:

>>44746992

This command will make your MacBook hibernate when lid is closed or the laptop sleeps, so RAM is written to disk and the system powers down. The downside is that it does increase the amount of time it takes to resume.

A nice side benefit though, is that fingerprint is not accepted on first unlock, I believe secrets are still encrypted at this stage similar to cold boot. A fingerprint still unlocks from screensaver normally, as long as the system does not sleep (and therefore hibernate)

replies(1): >>jakobd+Ef1
◧◩◪
16. alista+Sk[view] [source] [discussion] 2026-02-04 17:59:18
>>fogzen+9b
Is that actually true? I'm fairly confident my work Mac requires a password if it's idle more than a few days (typically over the weekend).
◧◩◪
17. Analem+9l[view] [source] [discussion] 2026-02-04 18:00:29
>>rawgab+mi
If you are a US citizen, you legally cannot be denied re-entry into the country for any reason, including not unlocking your phone. They can make it really annoying and detain you for a while, though.
replies(1): >>monoca+Gg1
◧◩◪
18. tosapp+cl[view] [source] [discussion] 2026-02-04 18:00:42
>>paulsm+g9
This is the third person advocating button squeezing, as a reminder: IF a gun is on you the jig is up, you can be shot for resisting or reaching for a potential weapon. Wireless detonators do exist, don't f around please.
◧◩◪
19. verall+Dl[view] [source] [discussion] 2026-02-04 18:02:44
>>rawgab+mi
my understanding is that they can hold you for a couple days without charges for your insubordination but as a citizen they have to let you back into the country or officially arrest you, try to get an actual warrant, etc.
replies(1): >>direwo+V91
◧◩◪◨
20. duskwu+rm[view] [source] [discussion] 2026-02-04 18:05:33
>>pkulak+Sf
It doesn't reenter a BFU state, but it requires a passcode for the next unlock.
replies(1): >>snuxol+XC
◧◩◪
21. xoa+Gm[view] [source] [discussion] 2026-02-04 18:06:10
>>parl_m+6h
As another alternative, rather than using Touch ID you can setup a Yubikey or similar hardware key for login to macOS. Then your login does indeed become a PIN with 3 tries before lockout. That plus a complex password is pretty convenient but not biometric. It's what I've done for a long time on my desktop devices.
◧◩◪◨
22. AnonHP+2o[view] [source] [discussion] 2026-02-04 18:12:15
>>fpolin+xk
I didn’t understand how a user that cannot unlock FileVault helps. Can you please elaborate on this setup? Thanks.
replies(1): >>fpolin+O71
23. goda90+hr[view] [source] 2026-02-04 18:26:06
>>nova22+(OP)
Remember that our rights aren't laws of nature. They have to be fought for to be respected by the government.
◧◩◪
24. regens+Du[view] [source] [discussion] 2026-02-04 18:38:22
>>kstrau+d9
Sad, neither of those works on Android. Pressing the power button activates the emergency call screen with a countdown to call emergency services, and power + volume either just takes a screenshot or enables vibrations/haptics depending on which volume button you press.
replies(2): >>thalli+mz >>silisi+1J
◧◩◪
25. Wistar+Lu[view] [source] [discussion] 2026-02-04 18:38:50
>>parl_m+6h
On my Macbook Pro, I usually need to use both touch and a password but that might be only when some hours have passed between log ins.
26. b8+kw[view] [source] 2026-02-04 18:45:05
>>nova22+(OP)
They can hold you in contempt for 18 months for not giving your password, https://arstechnica.com/tech-policy/2020/02/man-who-refused-....
replies(2): >>Eleven+My >>noiden+sC
◧◩
27. thecap+lw[view] [source] [discussion] 2026-02-04 18:45:07
>>patric+K2
There's only ten possible guesses, and most people use their thumb and/or index finger, leaving four much likelier guesses.

Also, IANAL, but I'm pretty sure that if law enforcement has a warrant to seize property from you, they're not obligated to do so immediately the instant they see you - they could have someone follow you and watch to see how you unlock your phone before seizing it.

◧◩
28. z3phyr+xw[view] [source] [discussion] 2026-02-04 18:46:13
>>patric+K2
0.1 in itself is a very good odd, and 0.1 * n tries is even more laughable. Also most people have two fingers touchID, which makes this number close to half in reality.
◧◩
29. thecap+5x[view] [source] [discussion] 2026-02-04 18:48:55
>>mbil+R4
Did you know that on most models of iPhone, saying "Hey Siri, who's iPhone is this?" will disable biometric authentication until the passcode is entered?
replies(2): >>rconti+YH >>fragme+mO
◧◩
30. Eleven+My[view] [source] [discussion] 2026-02-04 18:56:29
>>b8+kw
Being held in contempt at least means you got a day in court first. A judge telling me to give up my password is different than a dozen armed, masked secret police telling me to.
replies(1): >>C6JEsQ+gQ
◧◩◪◨
31. thalli+mz[view] [source] [discussion] 2026-02-04 18:59:12
>>regens+Du
On Pixel phones, Power + Volume Up retrieves a menu where you can select "Lockdown".
replies(1): >>ration+DC
32. p0w3n3+MA[view] [source] 2026-02-04 19:04:54
>>nova22+(OP)
Allowed to require - very mildly constructed sentence, which could include torture or force abuse...

https://xkcd.com/538/

33. raw_an+3C[view] [source] 2026-02-04 19:10:28
>>nova22+(OP)
As if the government is not above breaking the law and using rubber hose decryption. The current administration’s justice department has been caught lying left and right
replies(2): >>direwo+0a1 >>qingch+yr1
◧◩
34. noiden+sC[view] [source] [discussion] 2026-02-04 19:12:11
>>b8+kw
That's a very unusual and narrow exception involving "foregone conclusion doctrine", an important fact missed by Ars Technica but elaborated on by AP: https://apnews.com/general-news-49da3a1e71f74e1c98012611aedc...
replies(1): >>OGWhal+jJ
◧◩◪◨⬒
35. ration+DC[view] [source] [discussion] 2026-02-04 19:13:14
>>thalli+mz
Not on my Pixel phone, that just sets it to vibrate instead of ring. Holding down the power button retrieves a menu where you can select "Lockdown".
replies(1): >>zerocr+DG
◧◩◪◨⬒
36. snuxol+XC[view] [source] [discussion] 2026-02-04 19:14:53
>>duskwu+rm
It's close enough, because (most of) the encryption keys are wiped from memory every time the device is locked, and this action makes the secure enclave require PIN authentication to release them again.
replies(1): >>overfe+QK
◧◩◪
37. raw_an+5D[view] [source] [discussion] 2026-02-04 19:15:24
>>fogzen+9b
Settings -> lock screen -> “Require password after screen saver begins or display is turned off”
replies(1): >>fogzen+UI1
38. neves+eF[view] [source] 2026-02-04 19:27:15
>>nova22+(OP)
I just searched the case. I'm appalled. It looks like USA doesn't have legal protection for reporter sources. Or better, Biden created some, but it was revoked by the current administration.

The real news here isn't privacy control in a consumer OS ir the right to privacy, but USA, the leader of the free world, becoming an autocracy.

◧◩◪◨⬒⬓
39. zerocr+DG[view] [source] [discussion] 2026-02-04 19:34:10
>>ration+DC
On my 9 you get a setting to choose if holding Power gets you the power menu or activates the assistant (I think it defaulted to assistant? I have it set to the power menu because I don't really ever use the assistant.)
replies(1): >>ration+r61
◧◩◪
40. rconti+YH[view] [source] [discussion] 2026-02-04 19:40:31
>>thecap+5x
hm. didn't work on my 17 pro :( might be due to a setting i have.
◧◩◪◨
41. silisi+1J[view] [source] [discussion] 2026-02-04 19:47:03
>>regens+Du
Did you check your phone settings? Mine has an option to add it to the power menu, so you get to it by whichever method you use to do that (which itself is sad that phones are starting to differ in what the power key does).
◧◩◪
42. OGWhal+jJ[view] [source] [discussion] 2026-02-04 19:48:17
>>noiden+sC
> Authorities, citing a “foregone conclusion exception” to the Fifth Amendment, argued that Rawls could not invoke his right to self-incrimination because police already had evidence of a crime. The 3rd Circuit panel agreed, upholding a lower court decision.

I do not follow the logic here, what does that even mean? It seems very dubious. And what happens if one legitimately forgets? They just get to keep you there forever?

replies(4): >>seanw4+611 >>direwo+v91 >>halJor+ms1 >>DannyB+CO1
◧◩◪◨⬒⬓
43. overfe+QK[view] [source] [discussion] 2026-02-04 19:57:27
>>snuxol+XC
> It's close enough

Not really, because tools like Cellbrite are more limited with BFU, hence the manual informing LEO to keep (locked) devices charged, amd the countermeasures being iOS forcefully rebooting devices that have been locked for too long.

replies(1): >>CGMthr+gW
◧◩◪
44. fragme+mO[view] [source] [discussion] 2026-02-04 20:14:03
>>thecap+5x
They disabled that in like iOS 18.
◧◩◪
45. NetMag+BP[view] [source] [discussion] 2026-02-04 20:19:55
>>parl_m+6h
You can script a time out if desired.
◧◩◪
46. C6JEsQ+gQ[view] [source] [discussion] 2026-02-04 20:23:00
>>Eleven+My
> A judge telling me to give up my password is different than a dozen armed, masked secret police telling me to.

Yes, a judge is unlikely to order your execution if you refuse. Based on recent pattern of their behavior, masked secret police who are living their wildest authoritarian dreams are likely to execute you if you anger them (for example by refusing to comply with their desires).

replies(1): >>qingch+Qq1
47. joecoo+hT[view] [source] 2026-02-04 20:34:46
>>nova22+(OP)
> they can't make you give them your password.

Except when they can: https://harvardlawreview.org/print/vol-134/state-v-andrews/

replies(1): >>tedd4u+pB1
◧◩◪◨⬒⬓⬔
48. CGMthr+gW[view] [source] [discussion] 2026-02-04 20:45:55
>>overfe+QK
There is a way now to force BFU from a phone that is turned on, I can't remember the sequence
replies(2): >>duskwu+P71 >>kccqzy+Pj1
49. notyou+mY[view] [source] 2026-02-04 20:54:23
>>nova22+(OP)
I don't get why I can be forced to use my biometrics to unlock but I cannot be forced to give a pin. Doesn't jive in my brain.
replies(5): >>wan23+R21 >>deltas+P31 >>direwo+O91 >>sejje+pi1 >>soneil+Yr6
◧◩◪◨
50. seanw4+611[view] [source] [discussion] 2026-02-04 21:07:45
>>OGWhal+jJ
You're delusional. When ICE starts executing people on the spot for not giving up iPhone passwords, I'll eat my words.
replies(1): >>OGWhal+q21
◧◩◪◨⬒
51. OGWhal+q21[view] [source] [discussion] 2026-02-04 21:14:26
>>seanw4+611
???
replies(1): >>seanw4+tP3
◧◩◪
52. redeem+E21[view] [source] [discussion] 2026-02-04 21:15:12
>>parl_m+6h
uhm, are you saying its not possible to require an actual password to unlock osx?
replies(2): >>tedd4u+9B1 >>parl_m+0F1
◧◩
53. wan23+R21[view] [source] [discussion] 2026-02-04 21:16:06
>>notyou+mY
The fifth amendment gives you the right to be silent, but they didn't write in anything about biometrics.
◧◩◪
54. JimA+l31[view] [source] [discussion] 2026-02-04 21:17:37
>>throwa+gh
I generally avoid extensions that can read all sites (even if technically necessary), so use the suggestion found here [1] instead.

A few bookmarklets:

javascript:(function(){if (location.host.endsWith('x.com')) location.host='xcancel.com';})()

javascript:(function(){if (location.host.endsWith('youtube.com')) location.host='inv.nadeko.net';})()

javascript:(function(){if (location.hostname.endsWith('instagram.com')) {location.replace('https://imginn.com' + location.pathname);}})()

[1] https://www.reddit.com/r/uBlockOrigin/comments/1cc0uon/addin...

replies(1): >>Alive-+BJ1
◧◩
55. deltas+P31[view] [source] [discussion] 2026-02-04 21:19:46
>>notyou+mY
It's something you know vs. something you have. That's how the legal system sees it. You might not tell someone the pin to your safe, but if police find the key to it, or hire a locksmith to drill out your safe, it's theirs with a warrant.

It's interesting in the case of social media companies. Technically the data held is the companies data (Google, Meta, etc.) however courts have ruled that a person still has an expectation of privacy and therefore police need a warrant.

56. deltas+Y41[view] [source] 2026-02-04 21:25:52
>>nova22+(OP)
Also, using biometrics on a device, and your biometrics unlock said device, do wonders for proving to a jury that you owned and operated that device. So you're double screwed in that regard.
◧◩◪◨⬒⬓⬔
57. ration+r61[view] [source] [discussion] 2026-02-04 21:34:04
>>zerocr+DG
Yes, that was the default for me, but I changed it in settings.
◧◩◪◨⬒
58. fpolin+O71[view] [source] [discussion] 2026-02-04 21:41:44
>>AnonHP+2o
With that setup on boot or after a long sleep one first must log in into an account with longer password. Then one logs out of that and switches to the primary account with a short password.
◧◩◪◨⬒⬓⬔⧯
59. duskwu+P71[view] [source] [discussion] 2026-02-04 21:41:47
>>CGMthr+gW
Eh? BFU ("before first unlock") is, by definition, the state that a phone is in when it is turned on. There's no need to "force" it.

If you mean forcing an iOS device out of BFU, that's impossible. The device's storage is encrypted using a key derived from the user's passcode. That key is only available once the user has unlocked the device once, using their passcode.

60. direwo+h91[view] [source] 2026-02-04 21:49:03
>>nova22+(OP)
Remember, this isn't how it works in every country.
◧◩◪◨
61. direwo+v91[view] [source] [discussion] 2026-02-04 21:50:03
>>OGWhal+jJ
And why do they need to unlock your phone if they already proved you did the crime?
◧◩
62. direwo+O91[view] [source] [discussion] 2026-02-04 21:51:48
>>notyou+mY
When they arrest you, they have physical control of your body. You're in handcuffs. They can put your fingers against the unlock button. You can make a fist, but they can have more strength and leverage to unfist your fist.

There's no known technique to force you to input a password.

replies(2): >>sejje+wi1 >>QuiEgo+Dm1
◧◩◪◨
63. direwo+V91[view] [source] [discussion] 2026-02-04 21:52:22
>>verall+Dl
they can just break the law
replies(1): >>rurban+0l2
◧◩
64. direwo+0a1[view] [source] [discussion] 2026-02-04 21:52:52
>>raw_an+3C
Plausible deniability still works. You enter your duress code and your system boots to a secondary partition with Facebook and Snapchat. No such OS exists.
replies(1): >>laosb+xc5
65. rustyh+qb1[view] [source] 2026-02-04 22:00:24
>>nova22+(OP)
As far as I know lockdown mode and BFU prevent touch ID unlocking.

At least a password and pin you choose to give over.

◧◩
66. jakobd+Ef1[view] [source] [discussion] 2026-02-04 22:21:08
>>teejmy+Gk
> I believe secrets are still encrypted at this stage similar to cold boot.

Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?

replies(1): >>dagmx+MF1
◧◩◪◨
67. monoca+Gg1[view] [source] [discussion] 2026-02-04 22:25:53
>>Analem+9l
They can also practically keep your phone indefinitely.
◧◩
68. sejje+pi1[view] [source] [discussion] 2026-02-04 22:34:42
>>notyou+mY
"technicality" or "loophole" is probably the word.

I fully agree, forced biometrics is bullshit.

I say the same about forced blood removal for BAC testing. They can get a warrant for your blood, that's crazy to me.

◧◩◪
69. sejje+wi1[view] [source] [discussion] 2026-02-04 22:35:21
>>direwo+O91
Are we not talking about a legal difference? That was my reading.
replies(2): >>direwo+zi1 >>notyou+5g2
◧◩◪◨
70. direwo+zi1[view] [source] [discussion] 2026-02-04 22:35:42
>>sejje+wi1
The law follows practicality in this instance.
◧◩◪◨⬒⬓⬔⧯
71. kccqzy+Pj1[view] [source] [discussion] 2026-02-04 22:44:05
>>CGMthr+gW
It’s called restarting the phone.
replies(1): >>CGMthr+mT2
◧◩◪
72. djhn+pm1[view] [source] [discussion] 2026-02-04 22:58:49
>>parl_m+6h
Wait, wasn’t touch id phased out together with the intel touch bar macbooks? I’ve never used anything but a long password to unlock.
replies(1): >>fckgw+Jq1
◧◩◪
73. QuiEgo+Dm1[view] [source] [discussion] 2026-02-04 22:59:45
>>direwo+O91
Well there is one known technique. https://xkcd.com/538/
◧◩
74. appare+Gq1[view] [source] [discussion] 2026-02-04 23:22:43
>>wackge+p1
There are trillionaires?
replies(1): >>alpini+Lt1
◧◩◪◨
75. fckgw+Jq1[view] [source] [discussion] 2026-02-04 23:23:22
>>djhn+pm1
No, it's been part of the power button since then.
◧◩◪◨
76. qingch+Qq1[view] [source] [discussion] 2026-02-04 23:24:02
>>C6JEsQ+gQ
I don't practically see it happen, but you have to be careful once you are in a jail though, because there are often few limits on what the administration of the jail can do to you for any supposed violation of the jail rules (which they can legally make up on a whim, and due process is extremely limited). In Illinois, at least, a county Sheriff has unlimited power to punish a detainee in any extreme way they can imagine for even the very slightest infraction. There are no laws (statutes) which define what a "crime" is inside jail and what the punishment for it is. If it wasn't for SCOTUS limiting the death penalty to certain levels of behavior (e.g. murder) then a sheriff would be able to simply legally execute a detainee for pretty much anything.
◧◩
77. qingch+or1[view] [source] [discussion] 2026-02-04 23:26:52
>>mbil+R4
Everyone makes this same comment on each of these threads, but it's important to remember this only works if you have some sort of advance warning. If you have the iPhone in your hand and there is a loaded gun pointed at your head telling you not to move, you probably won't want to move.
◧◩
78. qingch+yr1[view] [source] [discussion] 2026-02-04 23:27:46
>>raw_an+3C
And threats aren't illegal. They can put a gun to wife's head and say they're going to shoot. It's up to you then to call their bluff.
◧◩◪◨
79. halJor+ms1[view] [source] [discussion] 2026-02-04 23:34:02
>>OGWhal+jJ
It means that if all the other evidence shows that the desired evidence is on the computer, then it is not a question of whether it exists, so youre not really searching for something. Youre retrieving it. That doesn't implicate the 4th amendment.
replies(1): >>DannyB+NO1
◧◩◪
80. alpini+Lt1[view] [source] [discussion] 2026-02-04 23:42:00
>>appare+Gq1
I guess technically musk rounds to a trillion. 852B acc to Forbes
replies(1): >>appare+B02
◧◩◪◨
81. tedd4u+9B1[view] [source] [discussion] 2026-02-05 00:33:53
>>redeem+E21
My guess is they want to have a PIN as a short-term credential analogous to the Touch ID, that is, it only works for X hours per password auth before needing password auth again, and then you only get X tries on the PIN before it either locks the PIN out and you need the full password to reactivate it (or I guess it could wipe the laptop à la iPhone).
◧◩
82. tedd4u+pB1[view] [source] [discussion] 2026-02-05 00:36:15
>>joecoo+hT
75 footnotes for 89 sentences, nice! I guess that's how they roll over at the HLR.
◧◩◪◨
83. parl_m+0F1[view] [source] [discussion] 2026-02-05 01:03:09
>>redeem+E21
> uhm, are you saying its not possible to require an actual password to unlock osx?

uhm, are saying that i'm saying that? if so, please show me where i said that. thank you

replies(1): >>redeem+SP2
◧◩◪
84. dagmx+MF1[view] [source] [discussion] 2026-02-05 01:11:34
>>jakobd+Ef1
It wouldn’t matter because the whole OS would be evicted from memory and the entire storage encrypted.

Signal itself wouldn’t even be detectable as an app

◧◩◪◨
85. fogzen+UI1[view] [source] [discussion] 2026-02-05 01:38:07
>>raw_an+5D
Even with that option set to "Immediately" you can still use Touch ID after locking.
replies(1): >>raw_an+vL1
◧◩◪◨
86. Alive-+BJ1[view] [source] [discussion] 2026-02-05 01:43:55
>>JimA+l31
Wow, where did these come from. these are great alternatives, especially the youtube. I like using the duck player but that's only in that browser.

For example duck://player/fqtK3s7PE_k where the video id in youtube url https://www.youtube.com/watch?v=fqtK3s7PE_k

But it doesn't have that overview page like inv.nadeko.net does

◧◩◪◨⬒
87. raw_an+vL1[view] [source] [discussion] 2026-02-05 01:58:05
>>fogzen+UI1
I am not sure how it works on Macs, but on iPhone, after first unlock after a reboot, it’s trivial for law enforcement to break into your iPhone - the same with Android.
◧◩◪◨
88. DannyB+CO1[view] [source] [discussion] 2026-02-05 02:24:10
>>OGWhal+jJ
Lawyer here - let me try to help.

This is an area that seems to confuse a lot of people because of what the 5th amendment says and doesn't say.

The reason they can't force you to unlock your phone is not because your phone contains evidence of stuff. They have a warrant to get that evidence. You do not have a right to prevent them from getting it just because it's yours. Most evidence is self-incriminating in this way - if you have a murder weapon in your pocket with blood on it, and the police lawfully stop you and take it, you really are incriminating yourself in one sense by giving it to them, but not in the 5th amendment sense.

The right against self-incrimination is mostly about being forced to give testimonial evidence against yourself. That is, it's mostly about you being forced to testify against yourself under oath, or otherwise give evidence that is testimonial in nature against yourself. In the case of passwords, courts often view it now as you being forced to disclose the contents of your mind (IE live testify against yourself) and equally important, even if not live testimony against yourself, it testimonially proves that you have access to the phone (more on this in a second). Biometrics are a weird state, with some courts finding it like passwords/pins, and some finding it just a physical fact with no testimonial component at all other than proving your ability to access.

The foregone conclusion part comes into play because, excluding being forced to disclose the contents of your mind for a second, the testimonial evidence you are being forced to give when you unlock a phone is that you have access to the phone. If they can already prove it's your phone or that you have access to it, then unlocking it does not matter from a testimonial standpoint, and courts will often require you to do so in the jurisdictions that don't consider any other part of unlocking to be testimonial. (Similarly, if they can't prove you have access to the phone, and whether you have access to the phone or not matters to the case in a material way, they generally will not be able to force you to unlock it or try to unlock it because it woudl be a 5th amendment violation).

Hope this helps.

replies(1): >>antonv+dq3
◧◩◪◨⬒
89. DannyB+NO1[view] [source] [discussion] 2026-02-05 02:26:17
>>halJor+ms1
Unlocking/forced unlocking is not a 4th amendment issue, but a 5th amendment one.

The 4th amendment would protect you from them seizing your phone in the first place for no good reason, but would not protect you from them seizing your phone if they believe it has evidence of a crime.

Regardless, it is not the thing that protects you (or doesn't, depending) from having to give or otherwise type in your passcode/pin/fingerprint/etc.

◧◩◪◨
90. appare+B02[view] [source] [discussion] 2026-02-05 04:14:27
>>alpini+Lt1
That would be some aggressive rounding.
replies(2): >>alpini+6X2 >>antonv+Lo3
◧◩◪◨
91. notyou+5g2[view] [source] [discussion] 2026-02-05 06:55:00
>>sejje+wi1
Yes, my statement was related to legal means. I’m not a lawyer.
◧◩◪◨⬒
92. rurban+0l2[view] [source] [discussion] 2026-02-05 07:43:51
>>direwo+V91
There is no law when entering the country. They can do everything they want, or making up anything they'll imagine.
◧◩◪◨⬒
93. redeem+SP2[view] [source] [discussion] 2026-02-05 12:09:27
>>parl_m+0F1
no, thats why i was asking, as i was not fully sure what you meant
replies(1): >>parl_m+XM3
◧◩◪◨⬒⬓⬔⧯▣
94. CGMthr+mT2[view] [source] [discussion] 2026-02-05 12:39:56
>>kccqzy+Pj1
I believe doing the standard Restart everyone knows is not enough though. The instructions saw were these

Quick-press Volume Up, then Quick-press Volume Down. Hold the side power button until the screen turns black (approx. 10 seconds). Immediately hold both the side button and the Volume Down button for 5 seconds. Release the side button but continue holding the Volume Down button for another 10 seconds. The screen will remain black. If the Apple logo appears, the side button was held too long, and the process must be repeated.

replies(1): >>kccqzy+Ms3
95. tim333+RV2[view] [source] 2026-02-05 12:58:50
>>nova22+(OP)
One thing I miss from windows (on mac now) is there was an encrypted vault program that you could have hide so it wasn't on the desktop or program list but could still be launched. That way you could have private stuff that attackers would likely not even know was there.
◧◩◪◨⬒
96. alpini+6X2[view] [source] [discussion] 2026-02-05 13:07:45
>>appare+B02
Yes and no. Obviously it’s unusual rounding or I wouldn’t have said “I guess technically,” but rounding is all about domains and relevant precision. To be honest, when someone says “billionaires” I don’t assume that the number 1,000,000 is a meaningful hard cut off. I assume we’re talking about the ones who are three orders of magnitude up from “millionaire” and orders of magnitude work by rounding from .5.
replies(1): >>dragon+rx3
◧◩◪
97. 171862+ob3[view] [source] [discussion] 2026-02-05 14:38:54
>>parl_m+6h
I often see people use a "pin" on Windows and I never got it. What is the purpose of a pin makes it different from a password?
replies(1): >>NewsaH+835
◧◩◪◨⬒
98. antonv+Lo3[view] [source] [discussion] 2026-02-05 15:46:29
>>appare+B02
What's $148,000,000,000 between friends
◧◩◪◨⬒
99. antonv+dq3[view] [source] [discussion] 2026-02-05 15:54:34
>>DannyB+CO1
> excluding being forced to disclose the contents of your mind for a second

This seems like a key point though. What's the legal distinction between compelling someone to unlock a phone using information in their mind, and compelling them to speak what's in their mind?

If I had incriminating info on my phone at one point, and I memorized it and then deleted it from the phone, now that information is legally protected from being accessed. So it just matters whether the information itself is in your mind, vs. the ability to access it?

replies(1): >>DannyB+ad5
◧◩◪◨⬒⬓⬔⧯▣▦
100. kccqzy+Ms3[view] [source] [discussion] 2026-02-05 16:08:44
>>CGMthr+mT2
That’s DFU mode. We are talking about BFU in this thread.
◧◩◪◨⬒⬓
101. dragon+rx3[view] [source] [discussion] 2026-02-05 16:36:04
>>alpini+6X2
> orders of magnitude work by rounding from .5.

No, orders of magnitude are exponential, not linear, so conventionally “on the order of 1 billion” would be between 100 million × sqrt(10) and 1 billion × sqrt(10), but “billionaire” isn't “net worth on the order of 1 billion” but “net worth of 1 billion or more”, or, when used heirarchically alongside trillionaire ans millionaire “net worth of at least one billion and less than one trillion”.

102. innaga+KB3[view] [source] 2026-02-05 16:58:01
>>nova22+(OP)
Is there a way to setup Mac disabling Touch ID if the linked phone goes into lockdown or Face ID requires passcode? Apple could probably add that.
◧◩◪◨⬒⬓
103. parl_m+XM3[view] [source] [discussion] 2026-02-05 17:54:43
>>redeem+SP2
what im saying is that i dont want to type in a long ass password all the time

and biometrics have "legal problems" as stated above

a pin or allowing touchid to automatically be disabled after a period of time or computer movement ("please enter password to login") would be greatly appreciated

as it stands now, i have biometrics disabled.

replies(1): >>redeem+V34
◧◩◪◨⬒⬓
104. seanw4+tP3[view] [source] [discussion] 2026-02-05 18:05:15
>>OGWhal+q21
I don't think that was the comment I was originally trying to reply to. Strange.
◧◩◪◨⬒⬓⬔
105. redeem+V34[view] [source] [discussion] 2026-02-05 19:00:43
>>parl_m+XM3
seems reasonable
◧◩◪◨
106. NewsaH+835[view] [source] [discussion] 2026-02-06 00:09:06
>>171862+ob3
PIN numbers are easier to remember. Remember, 99% of the population does not care about defense against state actors, just stopping nosy co-workers or family members from looking at their stuff. The next group (which I would include myself in) is concerned about theft (both physical and remote), where someone can get "unlimited" access to your machine and may be able to defeat a short PIN but is unlikely to beat a strong password. If you are in the realm of defending against state actors, then that is something you have to take multiple steps to ensure, and a single slip-up will tank your operation (like with this lady).
◧◩◪
107. laosb+xc5[view] [source] [discussion] 2026-02-06 01:30:47
>>direwo+0a1
How plausible the deniability is when they discover you only have those two apps and both logged out due to inactivity, while they can see your storage usage is definitely larger than those two apps?
◧◩◪◨⬒⬓
108. DannyB+ad5[view] [source] [discussion] 2026-02-06 01:37:12
>>antonv+dq3
There are practical differences - phones store a lot more information that you will keep in your mind at once.

You can actually eliminate phones entirely from your second example.

If you had incriminating info on paper at one point, and memorized it and deleted it, it would now be legally protected from being accessed.

One reason society is okay with this is because most people can't memorize vast troves of information.

Otherwise, the view here would probably change.

These rules exist to serve various goals as best they can. If they no longer serve those goals well, because of technology or whatever else, the rules will change. Being completely logical and self-consistent is not one of these goals, nor would it make sense as a primary goal for rules meant to try to balance societal vs personal rights.

This is, for various reasons, often frustrating to the average HN'er :)

replies(1): >>antonv+x77
◧◩
109. soneil+Yr6[view] [source] [discussion] 2026-02-06 13:37:21
>>notyou+mY
Compelled speech is protected, fingerprints aren't.

Imagine it's 1926 and none of this tech is an issue yet. The police can fingerprint and photograph you at intake, they can't compel speech or violate the 5th.

That's exactly what's being applied here. It's not that the police can do more or less than they could in 1926, it's that your biometrics can do more than they did in 1926. They're just fingerprinting you / photographing you .. using your phone.

◧◩◪◨⬒⬓⬔
110. antonv+x77[view] [source] [discussion] 2026-02-06 16:58:00
>>DannyB+ad5
> This is, for various reasons, often frustrating to the average HN'er :)

With that in mind...

> Being completely logical and self-consistent is not one of these goals, nor would it make sense as a primary goal for rules meant to try to balance societal vs personal rights.

Do we really know that it wouldn't make sense, or is that just an assumption because the existing system doesn't do it? (Alternatively, perhaps a consistent logical theory simply hasn't been identified and articulated.)

This reminds me of how "sovereign citizens" argue their position. Their logic isn't consistent, it’s built around rhetorical escape hatches. They'll claim that their vehicle is registered with the federal DOT, which is a commercial registration, but then they'll also claim to be a non-commercial "traveler". They're optimizing for coverage of objections, not global consistency.

What you seem to be telling me is that the prevailing legal system is the same, just perhaps with more of the obvious rough edges smoothed out over the centuries.

brb, going to try encoding the USC in Rocq.

[go to top]