Apple iPhones allow extraction of deep personal data, researcher finds(reuters.com)
reuters.com
Apple iPhones allow extraction of deep personal data, researcher finds
http://www.reuters.com/article/2014/07/26/us-apple-security-spying-idUSKBN0FV01D20140726
6 comments
Please see HN submission early this week: https://news.ycombinator.com/item?id=8074654
Precise: anyone with access to the computers you have "trusted" to pair with your iPhone, can extract encrypted data from your iPhone because that's what the trusted pairing is intended to do.
There are also "backdoor" systems that Apple Store employees use to unlock your phones, which can be exploited by Law Enforcement to extract text messages, contact lists and photos.
Noting of course that Law Enforcement already has access to numbers you have called and all SMS & MMS messages you have sent by subpoena to the carrier responsible for your service.
There are also "backdoor" systems that Apple Store employees use to unlock your phones, which can be exploited by Law Enforcement to extract text messages, contact lists and photos.
Noting of course that Law Enforcement already has access to numbers you have called and all SMS & MMS messages you have sent by subpoena to the carrier responsible for your service.
>> Noting of course that Law Enforcement already has access to numbers you have called and all SMS & MMS messages you have sent by subpoena to the carrier responsible for your service.
That's a poor excuse. Those calls may have been made in a different country.
That's a poor excuse. Those calls may have been made in a different country.
This is ridiculously stupid. You need to (a) have your device unlocked, (b) connected to a computer you don't know and (c) have clicked the 'Trust This Computer' button.
Of course your deep personal data is going to be exposed if you manage to get through all that.
Of course your deep personal data is going to be exposed if you manage to get through all that.
The article touches on the "backdoors" used to help customers unbrick their phones, which provide access to more information than is really necessary.
>> This is ridiculously stupid
No, it's not. IMHO the problem is not the exact procedure, but the lack of option for the user to properly encrypt their data.
No, it's not. IMHO the problem is not the exact procedure, but the lack of option for the user to properly encrypt their data.