iPhone锁定模式:启用苹果安全功能的利弊分析

qimuai 发布于 阅读:34 一手编译

iPhone锁定模式:启用苹果安全功能的利弊分析

内容来源:https://www.engadget.com/2295333/iphone-lockdown-mode-pros-cons/

内容总结:

苹果iPhone“锁定模式”利弊解析:高安全性与功能受限并存

自2022年推出以来,苹果iPhone的“锁定模式”一直是一项较为隐蔽的安全功能,普通用户对其了解甚少,实际使用的人则更少。苹果官方将其定位为面向极少数群体的“极端”安全防护层,主要针对可能遭到NSO集团“飞马”等商业间谍软件攻击的用户,包括记者、活动人士和政治人物等。

运行iOS 16及以上版本的iPhone用户均可启用该功能,iPadOS 16、watchOS 10及macOS 13 Ventura及以上版本同样支持。用户只需在“设置”中进入“隐私与安全”,找到“锁定模式”并点击开启、重启设备并输入密码即可完成操作,关闭方式相同。

锁定模式的核心在于开启后大幅限制iPhone的诸多功能,其中不少是用户日常高频使用的功能。在“信息”应用中,大多数类型的附件被禁止接收,链接预览也不再显示,以防其成为间谍软件入侵的后门。浏览器中的JavaScript运行受到严格限制,部分网站可能加载缓慢甚至无法正常访问。FaceTime通话同样受限,仅近期联系过的人才能呼入。

设备连接方面,锁定模式同样施加了多重限制。设备锁定时有线连接被禁用,意味着在没有密码的情况下无法与电脑或配件通信;无线连接方面,iPhone不再自动加入不安全的网络,2G和3G网络支持被完全关闭。用户也无法安装配置描述文件,这对需要此类文件的企业或学校用户而言颇为不便。此外,Apple Watch上将不再显示来自iPhone的通话通知,Home邀请、Game Center等功能不可用,照片共享也受到限制。

锁定模式之所以被视为高强度防护,源于其实际效果。2023年曾出现名为“Blastpass”的攻击手段,利用iMessage在苹果设备上植入“飞马”间谍软件,但研究人员发现开启锁定模式的设备完全不受影响。苹果还通过安全赏金计划向找到绕过该功能方法的研究者提供双倍奖励,足见其对该功能的信心。通过限制潜在攻击面,用户以功能性和便利性的牺牲换取最高级别的安全保障。

该功能也保留了一定灵活性:用户可将特定联系人排除在信息限制之外,以便家人仍能发送视频或文档,也可将特定网站和应用排除在限制范围外。但放宽限制会相应增加设备受攻击的风险。若用户认为自己确实是攻击目标,最好保持所有默认防护全开。

对绝大多数用户而言,并无使用锁定模式的必要。苹果设备本身已内置多项安全与隐私保护功能,而“飞马”等间谍软件通常针对公众人物,且多由政府部署用于监控异见者或抗议者。若确实属于潜在目标群体,开启锁定模式无疑值得考虑,苹果在判断用户可能被间谍软件针对时也会主动发送通知提醒。普通用户若出于好奇尝试数日,大概率会发现所带来的不便远超其极少需要的极端防护价值。

中文翻译:

iPhone锁定模式:启用苹果安全功能的利弊
锁定模式能让你的iPhone在抵御间谍软件方面更加安全,但大多数人并不需要使用它。
iPhone的锁定模式自2022年就已推出,但你可能从未听说过,更别说使用过了。它属于那种深藏在“设置”应用中的功能,而且本来也不是为普通用户设计的。苹果自己称该工具是一层“极端”的安全防护,专为少数可能被商业间谍软件盯上的人而设,比如NSO集团的“飞马”间谍软件。记者、活动人士和政治人物都是此类间谍软件的潜在目标。
任何运行iOS 16或更新系统的iPhone用户都可以尝试锁定模式。该功能同样适用于iPadOS 16及更高版本、watchOS 10及更高版本,以及macOS 13 Ventura及更高版本。开启方法:打开“设置”,进入“隐私与安全性”,向下滚动找到“锁定模式”,然后点击“开启并重新启动”,用密码确认即可。就这么简单,关闭该功能的选项也在同一位置。
锁定模式会在iPhone上禁用哪些功能
锁定模式之所以强大,在于启用后它会屏蔽iPhone的许多功能。然而,其中很多功能都是你日常使用的。在“信息”中,大多数类型的附件都会被屏蔽,甚至连链接预览也会停止工作,因为它们可能成为间谍软件的后门。锁定模式还会限制浏览器中JavaScript的运行方式,这可能导致某些网站加载缓慢或完全无法使用。FaceTime通话也会被屏蔽,只有你最近联系过的人才能联系到你。
开启锁定模式后,iPhone的网络连接也会受到限制。例如,设备锁定时有线连接会被禁用——这意味着在没有密码的情况下,它无法与电脑或配件通信。在无线连接方面,你的iPhone将不再自动连接不安全的网络,对2G和3G网络的支持也被完全禁用(尽管这些网络在美国多年前就已停用)。
你也无法安装配置描述文件,如果你的学校或雇主要求安装,这就不太方便了。如果你有Apple Watch,来自iPhone的通话来电通知不会显示在手表上。其他苹果服务的功能也会有所缩减:家庭邀请和Game Center不可用,照片共享也受到限制。
谁应该保持锁定模式开启?
如果锁定模式听起来很激进,那是因为它本来就是为此设计的。早在2023年,一个名为“Blastpass”的漏洞利用程序通过iMessage在苹果设备上安装了“飞马”间谍软件。然而,研究人员发现,处于锁定模式的设备对该间谍软件完全免疫。苹果通过其安全赏金计划,向任何找到绕过该功能方法的人提供常规奖励之上100%的额外奖金,这足见苹果对该功能的信心。通过限制iPhone以避开潜在的攻击途径,你获得的是最高级别的安全保障,代价则是功能性和便利性的降低。
该功能也提供了一定的灵活性:你可以将某些联系人排除在信息限制之外,这样家人仍然可以给你发送视频或文档。你也可以选择将某些网站和应用排除在该功能之外。不过,放宽这些限制会让你的设备更容易受到攻击。如果你认为自己可能是目标,最好保持所有默认防护全部开启。
对大多数人来说,没有必要使用锁定模式。苹果设备本身已经内置了许多安全和隐私功能。像“飞马”这样的间谍软件通常针对公众人物,往往由政府部署,用于监视反对者或抗议者。如果你属于这种情况,那绝对值得开启锁定模式——如果你被间谍软件盯上,苹果甚至可能会向你发送通知。如果你好奇,可以试用锁定模式几天,看看体验如何。很可能它带来的不便,并不值得那少数人才需要的极端级别防护。

英文来源:

iPhone Lockdown Mode: The pros and cons of enabling Apple's security feature
Lockdown Mode makes your iPhone much more secure against spyware, but most people don't need to use it.
The iPhone's Lockdown Mode has been around since 2022, but you might not have heard about it, let alone used it. It's one of those features that's well-hidden in the Settings app, plus it's not really meant for the average person. Apple itself calls the tool an "extreme" layer of security for the few people who may be targeted by commercial spyware such as NSO's Pegasus. Journalists, activists and politicians are among the potential targets of such spyware.
Anyone with an iPhone running iOS 16 or newer can try out Lockdown Mode. It's also available on iPadOS 16 and later, watchOS 10 and newer, and macOS 13 Ventura and later. To turn it on, open Settings and go to Privacy & Security. Scroll down until you find Lockdown Mode, then tap Turn On & Restart and confirm with your passcode. It's simple as that, and you'll find the option to disable it in the same place.
What Lockdown Mode disables on your iPhone
What makes Lockdown Mode strong is how it blocks many of the iPhone's features when enabled. However, many of those features are ones you likely use every day. In Messages, most kinds of attachments are blocked. Even link previews stop working, since they can serve as a backdoor for spyware. Lockdown Mode also restricts how JavaScript works in browsers, which may cause some websites to load slowly or not work at all. FaceTime calls are also blocked; only people you've called recently can reach you.
Your iPhone's connectivity is also limited when Lockdown Mode is on. For instance, wired connections are disabled when the device is locked — meaning it cannot communicate with a computer or accessory without your passcode. For wireless connectivity, your iPhone will no longer automatically connect to unsecured networks, and support for 2G and 3G networks is completely disabled (though these networks were discontinued in the US years ago).
You also can't install configuration profiles, which isn't ideal if your school or employer requires one. If you have an Apple Watch, phone call notifications from your iPhone won't show up on it. You'll see reduced functionality across other Apple services too: Home invitations and Game Center are not available, and photo sharing is restricted.
Who should leave Lockdown Mode on?
If Lockdown Mode sounds aggressive, it's because that's exactly what it was designed for. Back in 2023, an exploit known as "Blastpass" used iMessage to install the Pegasus spyware on Apple devices. However, researchers found that devices in Lockdown Mode were completely immune to the spyware. Apple offers a 100 percent bonus on top of the regular reward through its Security Bounty program to anyone who finds a way to bypass the feature, which shows how much the company trusts it. By restricting your iPhone to avoid potential attack vectors, you're given maximum security in exchange for reduced functionality and convenience.
The feature offers some flexibility: you can exclude certain contacts from messaging restrictions so your family can still send you videos or documents. You also have the option to exclude certain websites and apps from the feature. However, loosening these restrictions makes your device a little more vulnerable to attacks. If you think you're a target, it's best to keep all the default protections turned on.
For most people, there's no need to use Lockdown Mode. Apple devices already have many security and privacy features built in. Spyware like Pegasus usually targets public figures and is often deployed by governments that want to spy on opponents or protesters. If that's the case for you, it's definitely worth turning on Lockdown Mode — Apple may even send you a notification if it believes you've been targeted by spyware. If you're curious, try using Lockdown Mode for a few days to see what it's like. Chances are that the inconveniences it creates are not worth the extreme level of protection that few people need.

Engadget

文章目录


    扫描二维码,在手机上阅读