Scar•dip•dap

noun: skills in many areas. a little of this and that.

PSA Newsletter 03: Privacy, Security, Automation!

iPhone Settings First Setup, 2FA Advice, a wireless CarPlay recommendation, and more...

Privacy

  • When setting up a new iPhone, take a dive into the Settings app to lock down some or all of the following items:
  • Disable Hey Siri
  • Accessibility
  • FaceID
  • Cellular
  • Location
  • Maps
  • iCloud
  • Keyboard
  • Notes
  • Privacy
  • Siri
  • Shortcuts
  • Safari
  • Voice Memos
  • Weather
  • WiFi

Security

SMS 2FA is better than nothing, but remember that it is easily hackable, spoofable, and relies on the weakest link in the chain…which is a mobile telephone company employee doing their job correctly in a high-pressure situation. [1]

Automation

Carlinkit makes a wired to wireless Android Auto and Apple CarPlay adapter that works reasonably well. There’s a split second of lag, mainly when changing songs, but you get used to it. Convenient for not having to take your phone out of your bag or pocket to connect to your car, if you already have CarPlay or Android Auto. As with all wireless conveniences, this is less secure than a wired connection, albeit marginally, and is likely the smallest source of data leakage in your car, but just be aware. [2]

Heads Up!

Encryption is once again under attack. Expect to see a lot of gaslighting and “think of the children”, but remember this one fundamental truth: It is mathematically impossible to create a version of encryption that allows the government to view your communication that doesn’t also allow criminals, terrorists, and other bad actors from doing the same. Creating encryption with a backdoor or access only for government is like creating a safe with a fatal flaw built in. It’s only a matter of time before it’s exploited. [3] [4]

Sources: