100%(1)1 out of 1 people found this document helpful
This preview shows page 10 - 13 out of 20 pages.
tech-savvy offenders could rapidly gain access to data from locally-stored iOS 10 backups thanthose produced by older versions. It does not affect iCloud backups. iOS recommends its usersensure their protection with strong passwords and can only be retrieved by authorized user.(2)” The flaw could be a huge boon for law enforcement, spies, and sophisticated criminals whoare able to gain possession of a victim’s iOS backup file. While iOS devices themselves areknown for having fairly solid security backed by a hardware module called the Secure Enclave,one of the remaining avenues of attack is to trigger a device to backup either to iCloud or a localcomputer, where data enjoys far less protection.”
11Backups are protected by a user’s password. But in iOS 10, Apple has applied a weaker hashingalgorithm. Which is a function used to verify and store passwords in a bizarre format. Thisallows hackers to easily attack the backup file’s password by having a piece of forensics softwareguess millions of different passwords per second until it finds one that matches the storedmuddle.The amount of time it takes to pop an iOS 10 backup’s password can be reduced even further bya combination of password used on a regular schedule. Once an attacker has unlocked thebackup, they can gain complete access to the device’s data in its saved state including thekeychain, a file that’s normally impossible to retrieve from the physical device which stores allthe user’s logins and passwords. An iOS update is needed, but also iTunes update as well, andsome deviations to the backup format. In iOS security system the App Store is tightly controlled, and it’s difficult to install any third-party apps without security risks. The security confines are removed when jailbreaking. Thismeans apps are given a lot more access to the core functions of the phone, such as contact listsand the ability to send emails or make calls. On an iOS device, a user has to give permission toan app to get access these functions, but not on a jailbroken phone. Many people forget to changethe root password after jailbreaking their device and moving to an SSH app. With ajailbroken iPhone it will not be able to update iOS without reverting back to the un-jailbrokendefault mode. The. problems are that security holes in iOS will occur until a new jailbreak isreleased. In iOS could always just download iOS and wait a couple weeks for a new jailbreak.There would be security risks every time there’s an update. Problems are that occur are that are
12unable to access other apps problems of video streaming, communication, and banking apps thatdeny access to jailbroken devices have occurred. Also this voids the phones warranty.Apple’s IPhone have some sensitive information that can be accessed on an it without evenhaving to unlock it is a serious security problem that anyone and everyone has access to on youriPhone without knowing your PIN or passcode. Converting one simple setting will plug up thispotentially serious flaw and ensure that your data is safe and secure.