Overview

• Apple's iOS 17.3 update introduced a new feature called 'Stolen Device Protection' designed to prevent unauthorized actions on stolen iPhones, even if the thief has the passcode.
• The feature requires biometric authentication for specific actions and introduces a 'Security Delay' of one hour between two successful Face ID or Touch ID authentications if the iPhone is not at a familiar location.
• A flaw in the feature was identified where the iPhone determines 'familiar' locations based on frequency of visits, potentially including less secure places like bars or cafes.
• A temporary fix for this flaw in iOS 17.3 is to disable 'Significant Locations' in the settings, which will require biometric authentication for critical operations even at familiar locations.
• The upcoming iOS 17.4 update is set to address this flaw by allowing users to always require a 1-hour security delay, even at familiar locations, without having to disable 'Significant Locations'.