Apple facing class action lawsuit because its 2FA is ‘too disruptive’

Californian man accuses the firm of not seeking his consent, and of disrupting access to his personal devices

Apple is facing a class action lawsuit over assertions that its two-factor authentication (2FA) procedure is too disruptive, and poses far too long of an ordeal for users to go through.

Californian man Jay Brodsky has alleged Apple locks users into using 2FA without seeking proper and explicit consent, and says the process as a whole is far too demanding.

Advertisement - Article continues below

He has therefore taken the extraordinary step of filing a lawsuit that seeks 'class action' status, which in the US justice system means allegations made conventionally on behalf of a wide number of individuals.

Brodsky alleges he must first enter his selected password on the device he wants to login to, before entering the password on another independent 'trusted' device.

"Third, optionally, Plaintiff has to select a Trust or Don't Trust pop-up message response," the complaint continues.

"Fourth, Plaintiff then has to wait to receive a six-digit verification code on that second device that is sent by an Apple Server on the internet. Finally, Plaintiff has to input the received six-digit verification code on the first device he is trying to log into. Each login process takes an additional estimated 2-5 or more minutes with 2FA."

The complaint continues to accuse Apple of forcibly implemented 2FA across Brodksy's iPhone and two MacBooks in 2015, without his knowledge or consent. The firm also "forces Plaintiff to use 2FA that requires additional login steps each time Plaintiff's Apple device is powered on" as well as when logging into Apple services, and using third-party apps.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

Crucially, once 2FA is enabled by default, through a software update or accidentally, and 14 days have lapsed, there is no mechanism to disable the additional security checks. This "imposes an extraneous logging in procedure" because a user must both remember a password, and have access to a trusted device to receive the six-digit code.

There are five counts which comprise the lawsuit, including trespass to personal property and a violation of the Computer Crime Law. Brodsky's complaint also demands the case be taken to a trial by jury.

The suit, furthermore, demands penalties be applied in accordance with the Computer Fruad and Abuse Act, and that all revenues Apple has "unjustly received as a result of its actions" rightfully belong to those bringing the action.

The scale of this lawsuit, however, pales in comparison to the ongoing legal wrangling between Apple and Qualcomm.

It emerged last month that Apple demanded $1 billion as an 'incentive payment' in 2011, according to testimony from Qualcomm CEO Steve Mollenkempf, when the chipmaker sought to be the sole supplier of modem chips for Apple's iPhone range.

Advertisement

Recommended

Visit/security/vulnerability/355236/hp-support-assistant-flaws-leave-windows-devices-open-to-attack
vulnerability

HP Support Assistant flaws leave Windows devices open to attack

6 Apr 2020
Visit/security/cyber-security/355234/safari-bug-let-hackers-access-cameras-on-iphones-and-macs
cyber security

Safari bug let hackers access cameras on iPhones and Macs

6 Apr 2020
Visit/software/video-conferencing/355229/zoom-we-moved-too-fast
video conferencing

Zoom CEO admits company "moved too fast" as privacy issues mount

6 Apr 2020
Visit/security/internet-security/355228/mozilla-fixes-two-firefox-zero-days-being-actively-exploited
internet security

Mozilla fixes two Firefox zero-days being actively exploited

6 Apr 2020

Most Popular

Visit/development/application-programming-interface-api/355192/apple-buys-dark-sky-weather-app-and-leaves
application programming interface (API)

Apple buys Dark Sky weather app and leaves Android users in the cold

1 Apr 2020
Visit/mobile/mobile-phones/355239/microsofts-patent-design-reveals-a-mobile-device-with-a-third-screen
Mobile Phones

Microsoft’s patent design reveals a mobile device with a third screen

6 Apr 2020
Visit/software/video-conferencing/355229/zoom-we-moved-too-fast
video conferencing

Zoom CEO admits company "moved too fast" as privacy issues mount

6 Apr 2020