Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Lockdown mode looks very usable despite the messaging that it is "designed for the very few individuals." Users can even exclude applications from Lockdown mode.

When Lockdown Mode is enabled, some apps and features will function differently, including:

Messages - Most message attachment types are blocked, other than certain images, video, and audio. Some features, such as links and link previews, are unavailable.

Web browsing - Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed, and images might be replaced with a missing image icon.

FaceTime - Incoming FaceTime calls are blocked unless you have previously called that person or contact.

Apple Services - Incoming invitations for Apple Services, such as invitations to manage a home in the Home app, are blocked unless you have previously invited that person.

Shared albums - Shared albums are removed from the Photos app, and new Shared Album invitations are blocked. You can still view these shared albums on other devices that don’t have Lockdown Mode enabled.

USB accessories - To connect your device to a USB accessory or another computer, the device needs to be unlocked. Configuration profiles - Configuration profiles can’t be installed, and the device can’t be enrolled in Mobile Device Management or device supervision while in Lockdown Mode.

Phone calls and plain text messages continue to work while Lockdown Mode is enabled. Emergency features, such as SOS emergency calls, are not affected.

https://support.apple.com/en-us/HT212650



Yep, much like on the phone, Lockdown is really attractive to me to just run all the time.

- I never want executable content sent to me via messages.

- I already block web fonts everywhere I can. I do want to know what other "complex web technologies" are blocked.

- I don't care about Facetime.

- I don't use Apple services or Icloud.

- Ignoring USB when locked should be a default.


> I do want to know what other "complex web technologies" are blocked.

JIT compilation, WASM, WebGL, Speech Recognition API, and the Web Audio API


Thanks. Yep, still works for me.


> Ignoring USB when locked should be a default.

And if you plug your laptop into a docking station while the lid is closed...?


Lockdown mode looks very usable despite the messaging that it is "designed for the very few individuals.”

Apple said at the rollout that relatively few people should need this, which is likely correct. The vast majority of people don’t have a state-level attacker going after them.

Also it makes sense that the UI/UX is accessible; many of the people who need this aren’t necessarily tech experts. And even if you are a tech expert, you don’t want a complex UI when you’re under attack.


catch

{

state-level attack

targeted attack

mass targeted malware/rootkits

}

If it works some of the time for state-level, it should work almost all of the time for anything below.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: