The Apple Store experience was so different from what shopping for a computer used to be like. Knowledgeable, friendly staff, computers you can actually use instead of just playing screen savers, and training, repairs, and support at the same place. Not at all like going to a Best Buy or Circuit City.
My experience has been them selling me products that don't work with my macbook(too old and they said it will work). In the last few years the quality of service has dropped. They claim to have fixed my macbooks multiple times but no parts have been changed and the issues are still present after the supposed repair. Previously (pre 2019) had excellent service from the 3 local stores. Since then it has been equal to best buy. They are no better or worse than any other in my experience, just another company trying to sell you products and get out of servicing them.
The tech is pretty rudimentary. They just need to make sure that the iPhones have the NFC and qi coils near the edge of the box. Then they’re basically just updating boxed phones like you would update a mesh router node.
The best part about this is that it’s so damn simple. It’s one of those “why didn’t someone else think of this” things.
I like iPhones, but this is just reckless, it is only a matter of time untill an exploit is found to bypass the certificate check.
For the time being the system is secure, but claiming 100% security based on a certificate checking routine is just dumb.
Look at the PS3, for years it was thought to be unhackable, then exploits were found to bypass the security.
Now, obviously this is unlikely to happen at stores selling new devices as the access to them will be limited, but you can't just claim absolute security.
Will this feature be turned off when the phone is activated? What if it is forgotten about, or deemed unneeded? I could absolutely see a bad guy setting up a system to trigger the update mode, which probably will have lower security since Apple will only expect the devices to activate the system in a store.
What could the bad guy do with the phone in that mode? Probably quite a bit more than the user wants.
I doubt it? I’m not sure how it works but I could definitely see it working without having to transfer any data at all. All it has to be is a glorified QI charger and the phone can auto-update itself from Apple’s servers just like any other iPhone.
All OS updates are signed If what you are saying were possible, then all phones would always be susceptible to a man in the middle attack of someone faking apple's server to send a fake OS update. All this seems to be is a qi charger that has the ability to also turn the phone on / off then it can just connect to apple's server and update itself like normal.