Apple “iPhone XS” Leaked

Megalith

24-bit/48kHz
Staff member
Joined
Aug 20, 2006
Messages
13,000
Ahead of Apple’s September 12th event, 9to5Mac has shared an exclusive image of the iPhone XS. These 5.8-inch and 6.5-inch handsets will feature an OLED display and “new gold color option not previously offered on the new design.” Further details may be found at this roundup.

Other details are still to be determined, but we can report with certainty that iPhone XS will be the name, the OLED model will come in two sizes including a larger version, and each will be offered in gold for the first time.
 
My God, it's like they are selling me the EARTH! TAKE MY MON..oh wait no that's just the same frickin sheets of glass w/buttons like every phone the past 10 years reflecting a jpeg. nm.....
 
no fingerprint sensor, no sale. No way in hell i'm using that camera unlock shit.

Or you could simply not use either feature since both are shit for actual security. I wouldn't want anyone having access to my fingerprint or my face as a scan if I could reasonably help it.
 
It's, uh, interesting how the bottom portion of the planet is smooth while the top portion is super aliased. I suppose the marketing material could be WIP, but not something I'd normally expect from Apple.
 
Or you could simply not use either feature since both are shit for actual security. I wouldn't want anyone having access to my fingerprint or my face as a scan if I could reasonably help it.

Eh I can’t care much about my fingerprints. They’ve been federally on record since I was 21.

Worked a nuke. They did the old ink prints too. Now a days it’s a digital scan but they do it per employment. We also straight up use hand geometry to badge in. 3 different nuclear sites have scans of my right hand.

Apple or Google having my thumb...ehhh. I was against it on my 5S but on the 6S I used it and won’t go back.
 
Eh I can’t care much about my fingerprints. They’ve been federally on record since I was 21.

Worked a nuke. They did the old ink prints too. Now a days it’s a digital scan but they do it per employment. We also straight up use hand geometry to badge in. 3 different nuclear sites have scans of my right hand.

Apple or Google having my thumb...ehhh. I was against it on my 5S but on the 6S I used it and won’t go back.

I mean granted I worked nukes as well in the AF, doesn't mean I trust google/apple/microsoft with that information. That and frankly I have enough scars 20+ years later that it would be damned hard to associate my 18 year old prints with my current. but on that note, I don't miss going through a security check point every single day..especially on rainy days. Of course that might have more to do with the fact that I was stuck on barkesdale.
 
img_01121.jpg
 
I mean granted I worked nukes as well in the AF, doesn't mean I trust google/apple/microsoft with that information. That and frankly I have enough scars 20+ years later that it would be damned hard to associate my 18 year old prints with my current. but on that note, I don't miss going through a security check point every single day..especially on rainy days. Of course that might have more to do with the fact that I was stuck on barkesdale.

I hear you there, there is a huge difference in who has the prints I guess I just can’t be bothered to care enough....hashtag millennial?

We’re single shift preRFO right now, 4 lanes open and the line of people is still out the door to the concrete choke point. Awful time getting in. No rainy days yet, last outage I ran into that issue. Wore wet socks for 15 hours before getting home.
 
Yawn, another year, another phone. Not really interested...
I'm more interested to see if Apple announces any Mac hardware updates. I know a lot of folks on here don't care and hate Apple, but I use Macs every day for my job. I use a Macbook Pro and Parallels - works great and lets me do everything I need to.
 
It didn't work better for me. I had an iPhone X, went back to an 8 Plus.
 
It didn't work better for me. I had an iPhone X, went back to an 8 Plus.
It works faster for me IMO and I don’t have to worry about wearing gloves or having wet hands. It works if I’m wearing sunglasses and/or a hat, it works while laying down with only half my face exposed..

I find it hard to believe it didn’t work better for you but I respect your opinion.
 
Or you could simply not use either feature since both are shit for actual security. I wouldn't want anyone having access to my fingerprint or my face as a scan if I could reasonably help it.
Apple doesn't have access to either one as the information is stored locally in the device's secure enclave.
 
Apple doesn't have access to either one as the information is stored locally in the device's secure enclave.
If you believe that I know of a great swamp investment opportunity. There is no such thing as secure local storage on a mobile device. That is just laughable.
 
It's less laughable than the poorly constructed straw man you tried to pull off there.

It is poorly constructed because it isn't a strawman. There is no such thing as secure local storage on a mobile device..Period. There is a reason the military and security firms in the world don't use these things for secure communications.
 
  • Like
Reactions: N4CR
like this
More interested to see any improvements to the CPU than I am the phone itself.

A11 is pretty impressive.

Just a matter of when rather than if one of these ends up in a Macbook. I'm curious to see how well it stacks up against something like the Snapdragon 850 in the Lenovo
 
It is poorly constructed because it isn't a strawman. There is no such thing as secure local storage on a mobile device..Period. There is a reason the military and security firms in the world don't use these things for secure communications.
That has nothing to do with Face ID touc id.
 
That has nothing to do with Face ID touc id.

That has everything to do with those two things. You are trusting low quality biometric scanning devices to protect your personally identifying information on a completely unsecured and un-securable device. What part about that isn't foolish? I mean it could be I'm more sensitive about security than most because I held a top secret clearance for years, but this just smacks of foolishly naive to me.
 
  • Like
Reactions: N4CR
like this
That has everything to do with those two things. You are trusting low quality biometric scanning devices to protect your personally identifying information on a completely unsecured and un-securable device. What part about that isn't foolish? I mean it could be I'm more sensitive about security than most because I held a top secret clearance for years, but this just smacks of foolishly naive to me.
We were talking about Apple having access to the biometric data, which it does not, and you conflated that with general security of the physical device itself.

You riffed on the popular sentiment that mobile devices can't realistically be expected to be secure from threats, which is a non-sequitur to the claim that the manufacturer doesn't have access to the biometric information on the device.

In order for your quip to make any sense, it'd have to be constructed like this:
A mobile device is not secure from an Apple employee stealing the device from your desk.
The biometric information inside the secure enclave embedded inside that device is secure from Apple harvesting it.

Those two statements can both be true. Even when the first statement is true, that doesn't have any impact on whether the second statement is true or false--hence the straw man (no one was making any claims about the relative security of a mobile device to a non-mobile device or even the device itself, at all, but rather the data on the device).
 
That has everything to do with those two things. You are trusting low quality biometric scanning devices to protect your personally identifying information on a completely unsecured and un-securable device. What part about that isn't foolish? I mean it could be I'm more sensitive about security than most because I held a top secret clearance for years, but this just smacks of foolishly naive to me.
It's certainly not due to your security background. More likely this conversation is simply another expression of your general disdain for all things Apple. The point you raise above doesn't make sense in context. The alternative to the biometrics on an iPhone is a simple PIN, which is certainly less secure than the current methods. The methodology by which the biometrics are collected and stored in the device were required by the banking industry and, given their money is on the line, I'm going to err on the side of believing them when they say the information is secure enough for them.

If your claim is that all mobile devices are inherently insecure, and because of that no one should ever store personal information on any mobile device at any time (which is patently absurd), that's your opinion that isn't going to hold in the 21st century. In addition to this whole mess of points you've thrown together, you've also conflated the reasoning for why secure communications aren't broadcast over iPhones...but just to be clear, are you certain you want to claim that our government does not have access to mobile communication devices that can transfer secure information?
 
That has everything to do with those two things. You are trusting low quality biometric scanning devices to protect your personally identifying information on a completely unsecured and un-securable device. What part about that isn't foolish? I mean it could be I'm more sensitive about security than most because I held a top secret clearance for years, but this just smacks of foolishly naive to me.

This has nothing to do with the original argument.

Additionally, faceid is good enough and only works for 12 hours. If a device is power cycled or not touched for 12 hours it’s going to ask for PIN/passcode which is what the phone actually uses to encrypt.

Going back to your original argument the biometric data collected itself is stored in a physically separate chip on the phone which the OS sends the request to whenever you go to unlock the phone or whatever. The point being that no one is getting that data, although I presume if Apple sent a team of engineers to look at your phone and you unlocked it for them they’d have a way. Although if any nation state were this committed to getting your data I doubt they’d need to steal your iPhone.
 
Last edited:
It's certainly not due to your security background. More likely this conversation is simply another expression of your general disdain for all things Apple. The point you raise above doesn't make sense in context. The alternative to the biometrics on an iPhone is a simple PIN, which is certainly less secure than the current methods. The methodology by which the biometrics are collected and stored in the device were required by the banking industry and, given their money is on the line, I'm going to err on the side of believing them when they say the information is secure enough for them.

If your claim is that all mobile devices are inherently insecure, and because of that no one should ever store personal information on any mobile device at any time (which is patently absurd), that's your opinion that isn't going to hold in the 21st century. In addition to this whole mess of points you've thrown together, you've also conflated the reasoning for why secure communications aren't broadcast over iPhones...but just to be clear, are you certain you want to claim that our government does not have access to mobile communication devices that can transfer secure information?

Your first 2 sentences invalidated your entire last two posts. I stated clearly Apple, Google and Microsoft..So clearly this isn't an anti apple bias but a bias against low grade poorly implemented "security" devices. No your data is no secure from apple or anyone else harvesting it. You keep trying to insert words in my mouth to twist what I'm saying. No data biometric or otherwise is Secure on any mobile device locally or remote.

This has nothing to do with the original argument.

Additionally, faceid is good enough and only works for 12 hours. If a device is power cycled or not touched for 12 hours it’s going to ask for PIN/passcode which is what the phone actually uses to encrypt.

No
 
Your first 2 sentences invalidated your entire last two posts. I stated clearly Apple, Google and Microsoft..So clearly this isn't an anti apple bias but a bias against low grade poorly implemented "security" devices. No your data is no secure from apple or anyone else harvesting it. You keep trying to insert words in my mouth to twist what I'm saying. No data biometric or otherwise is Secure on any mobile device locally or remote.



No

If you aren’t willing to talk about it you’re frankly an idiot.
 
Your first 2 sentences invalidated your entire last two posts. I stated clearly Apple, Google and Microsoft..So clearly this isn't an anti apple bias but a bias against low grade poorly implemented "security" devices. No your data is no secure from apple or anyone else harvesting it. You keep trying to insert words in my mouth to twist what I'm saying. No data biometric or otherwise is Secure on any mobile device locally or remote.



No
You are wrong and part of that seems to be due to your lack of understanding the technology.

You keep arguing against a secure Enclave, as if the Enclave is being described as secure, as opposed to the actual technology's name, The Secure Enclave, which is a physical co-processor that holds the encryption keys locally on the device specifically designed so that Apple does not hold the keys nor can they decrypt the biometric data.

This has nothing to do with Google or Microsoft because their devices do not have The Secure Enclave.

Once again, since you can't seem to grasp this fact, the fact that Apple can not access or decrypt one's biometric data since it's only stored locally on the device and hardware encrypted in a special co-processor is completely separate from the problem of mobile devices lacking physical security from threats due to their portability. No one is talking about or even disputing that point other than you. You literally made an argument up and are disputing claims that you think someone making that argument would make--that's a strawman.

Slightly amusing: you are aware the government has access to secure mobile devices...or is there another reason you ignored that question?
 
If you aren’t willing to talk about it you’re frankly an idiot.

I'm willing to talk, you simply haven't made a valid point. You make the claim that face id and biodata on phones is secure which is empirically false. If it were secure, governments would use them, they don't. They have far different security measures they implement on mobile devices and only use specifically engineered devices for secure lines.

You are wrong and part of that seems to be due to your lack of understanding the technology.

You keep arguing against a secure Enclave, as if the Enclave is being described as secure, as opposed to the actual technology's name, The Secure Enclave, which is a physical co-processor that holds the encryption keys locally on the device specifically designed so that Apple does not hold the keys nor can they decrypt the biometric data.

This has nothing to do with Google or Microsoft because their devices do not have The Secure Enclave.

Once again, since you can't seem to grasp this fact, the fact that Apple can not access or decrypt one's biometric data since it's only stored locally on the device and hardware encrypted in a special co-processor is completely separate from the problem of mobile devices lacking physical security from threats due to their portability. No one is talking about or even disputing that point other than you. You literally made an argument up and are disputing claims that you think someone making that argument would make--that's a strawman.

Slightly amusing: you are aware the government has access to secure mobile devices...or is there another reason you ignored that question?

The government does not in any way shape or form use any off the shelf mobile device for secured communications. The fact that you are trying to make this claim tells me how little you know about how security works. You can claim strawman and all that other nonsense all you want, it won't make you suddenly right. Biometric data on any off the shell mobile device isn't secure and it is foolish to pretend otherwise.
 
  • Like
Reactions: N4CR
like this
Back
Top