Post #1191830

2026-04-16 04:22 UTC

@HitokiriEric @coldclimate but here's the rub for me. Even if a user logs into their iCloud account and removes the device from their account, it still won't release. That should be illegal. Even enterprise locked Chromebooks can be decommissioned remotely and unlocked. There is no reason this cant be done with apple.

Replies (2)

@HitokiriEric@defcon.social 2026-04-16 05:05

@codemonkeymike @coldclimate Hmm… for the hardware firmware I’d still want to have to unlock it on device rather than having an attack surface/backdoor from the internet to exploit. Apple had the issue a couple years ago with thieves exploiting the remote password change to workaround the phone protections. But I get how it sucks for this use case. Like a lot of things, for 99% of users who don’t care they should default to a version that’s secure from most thieves but not totally secure from government and then let the users who really care opt in to the stronger lockdown mode.

Open ##1191831
@aura@gts.foxsnuggl.es 2026-04-16 11:12

@codemonkeymike @HitokiriEric @coldclimate You can remotely remove a machine from activation lock, but "deleting" the machine from Find My does not do that. I've done this incorrectly with a work T2 machine that they had unlocked by Apple after I left instead (with invoice and such), but it still sometimes checked in to my Find My (with the new user's hostname no less, good engineering apple) until I actually removed it properly.

Open ##1191840