this post was submitted on 19 Mar 2026
255 points (98.9% liked)
Technology
82830 readers
3636 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Okay, pump the breaks a second.
I agree a day wait is bullshit, but you think a passcode is enough to keep someone from… anything? You can shoulder surf a passcode in no time at all. Hell, it’s not even difficult. Go to a bar, talk someone up, give a legit reason to use someone’s phone, intentionally lock and force a passcode and 99% of people at bars will put their pin in within eyesight, or tell you the code.
A passcode isn’t as big a deterrent as most people seem to think it is. It’ll keep you out of an unattended phone you found, but there are plenty of ways to socially engineer your way into having it for the vast majority of targets.
And yes, you likely wouldn’t give your passcode out. But this is how a number of ne’er-do-wells got unfettered access to hundreds of iPhones, and prompted Apple to put a semi similar 24 hour lock on certain security actions if you aren’t in a “known to the phone” location (somewhere you frequent like home or work).
When you couple what you just said with what they're trying to do, your own argument can be made in my favor.
Never tell anyone else this again, and stop doing it. What an insane invasion of privacy.
My security should be my choice on my device end of story. My password/passcode plus encryption with easily accessible ways to put it into lockdown mode and have lockdown mode on a continuous timer is absolutely enough for my threat model.
I don't need any else making any addition call on it, and I definitely don't need someone that is willingly bragging about invading others privacy coaching me on what these companies are intending while actively trying to take my right to privacy away.
An option for full password on every cold boot with pin for subsequent unlocks would strengthen security without removing user freedom.
You call it an invasion of privacy, I call it fucking with friends while teaching them to be cognizant of who is watching what they do.
I’m also not sure how “the average person treats their passcodes and passwords like everyone is intentionally looking away” somehow strengthens “lock making the phone less secure behind a passcode” as an argument.
And yes, it 100% lowers the security of the phone. Which absolutely is your choice. Which I also do, and have done with my wife and kids phones. But the idea that a passcode is somehow a solution is just silly.
Not as silly as a 24 hour wait controlled by google, but still silly.
You said classmates. And hobby implies you did it a lot, and a lot extends beyond a few friends very quickly, so I do doubt it was limited to that, but I've got no choice but to take your word. Also I had thought you were the guy previously okaying this privacy nightmare in a trenchcoat, so ignore half of what I was saying.
Whatever it is or whatever it helps, if people want to opt into it, have at it. I will not be doing that. My solution protects me from everyone accept teams that have the funding and skill to get in through other means. I use biometrics, not perfect but it works. If I want those disabled until a password/code is in, it's a tap away. No one sees me use it because I'm using biometrics until I don't want to.
In what world do we expect companies that have decades long track records of fucking us for profit to stop after another empty promise?