XPost: misc.phone.mobile.iphone   
   From: ithinkiam@gmail.com   
      
   Maria Sophia  wrote:   
   > Tyrone wrote:   
   >>> I strongly suspect you gave the password when asked, and since that's   
   >>> perfectly natural for you to do, you don't remember doing it when you did.   
   >>   
   >> Stop assuming I am stupid.  It is fucking insulting.   
   >>   
   >> You claim that "All day, every day, iOS nags me to sign in even though I   
   never   
   >> logged out."   
   >>   
   >> That has NEVER happened to me. Ever. On ANY of my many iOS devices. Over   
   MANY   
   >> years.  Do you understand that?   
   >>   
   >> I strongly suspect that you are a lying piece of shit.   
   >   
   > Hi Tyrone,   
   >   
   > Happy New Year!   
   >   
   > I'm going to ignore Chris' excuse that he doesn't know what his password   
   > is   
      
   Typical. Ignorance is bliss.   
      
   > and I'll ignore Alan Baker's excuse that he wants to   
   > For you, since you say you're not stupid, I will respond with information   
   > about Apple's documented authentication process so that you can learn more.   
   >   
   > To help you understand, I've provided references for you to read before you   
   > reply to this technical post as it will take time to digest how iOS works.   
   >   
   > Technical summary of iOS authentication escalation   
   >   
   > 1. Overview   
   > In this scenario the user is already logged into everything. The user has   
   > completed initial setup, signed into Apple ID, iCloud, App Store, iMessage,   
   > FaceTime, Find My, and all related services. The user is not logged out.   
   > The user is simply refusing to re enter the Apple ID password when   
   > prompted.   
      
   This is 100% a you problem. You choose to do that and thus get the   
   repercussions. You claim you're logged in, but if you don't authenticate,   
   you're not.   
      
   Token expiry is not unique to iOS. It's the bedrock of MFA. My work systems   
   (MS authentication based) prompt me constantly and especially if they spot   
   a change in behaviour. Like if I've moved within the physical area of my   
   work area or if I'm working at home or travelling, or if I'm logging into a   
   new service, or using a different device.   
      
   All trigger an MFA request.   
      
   *THAT* password I know very well and could type in my sleep. However, I   
   often use my password manager for that too as it's easier and more secure.   
      
   This is not "how iOS works" it is how MFA works.   
   https://en.wikipedia.org/wiki/Multi-factor_authentication   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)