Thread by @jsrailton

NEW: @Apple's #LockdownMode is radical reduction of the threat surface of an iPhone.

Cannot overstate how big a change this is for Apple.

So important that people at higher digital risk have the option to harden their phones.

Some thoughts 1/
apple.com/newsroom/2022/…

2/ When you notify users that they've been targeted with sophisticated threats, they inevitably ask:

'How can I make my phone safer?'

We haven't had many great, honest answers that really make an impact.

Hardening a consumer handset is really out of reach.

3/There's a common mental barrier among big platforms & OS developers around mainstreaming high-security features.

A lot of inevitable considerations, like:

- Worse user experience (esp. vs. the competition!)
- Breaking features
- More customer support resources required, etc.

4/ Big companies can be *slow* to roll out higher security features.

Yet after they toe-dip as opt-in, they often realize some of these features are *also* possible for their whole user base.

Source: paper I wrote about this problem
computer.org/csdl/magazine/…

5/In #LockdownMode, we see high-impact changes that stomp on specific attack categories that mercenary spyware companies et al. exploit.

Does this cover all possible desirable things? No. Not yet (one can hope!)

But this is a broad set of welcome protections.

6/ With #LockdownMode @Apple just raised the bar around what's possible.

I'm excited to see how it works out for high risk users.

There will be a learning curve & unexpected lessons.

I'm also hoping we see similar efforts from other companies.

Also, the 2x bounty = smart.

7/ 'Where did #LockdownMode come from?'

@apple gets a ton of credit! This can't have been easy.

They also get credit for listening to researchers & nonprofits... who have called for versions of this for years.

Good to see a big company take the chance.

8/ When features like #Lockdownmode work... bad things don't happen!

Challenge: Users feel frictions up front.

Analogy: vaccination & side effects.

Messaging challenge: making sure high risk users know what to expect...while believing it's still worth it.
(edited for clarity)

9/ Composing tweets is hard.

I decided to delete and repost above tweet because some people parsed it as saying vaccines = bad.

For the record, vaccines = very good, get yours!