iPhone hackers say Apple weakened backup security with iOS 10

Forbes:

Professional iPhone hackers say that Apple has dropped the ball on password security with its latest iPhone operating system, making the task of cracking the logins for backups stored on a Mac or PC considerably easier.

The claim comes from Elcomsoft, a well-known Russian forensics company, whose kit was thought to have been used by hackers who exposed celebrities’ nude pictures in 2014. Like market leader Cellebrite, it makes its money selling kit that can break into iPhones for the purpose of rooting around a target’s device. As soon as iOS 10 was out, the company started probing its security, and found Apple was using a weaker password protection mechanism for manual backups via iTunes than it had done previously.

Apple says they are “aware of an issue that affects the encryption strength for backups of devices on iOS 10 when backing up to iTunes on the Mac or PC. We are addressing this issue in an upcoming security update.” It’s not going to happen but I’d like to hear an explanation from Apple about how and why this backward step was implemented.



5 thoughts on “iPhone hackers say Apple weakened backup security with iOS 10”

  1. There is no mystery: Apple doesn’t care about software anymore.

    There are hardly any airline crashes because airlines care about not crashing because airlines go out of business when they crash. Conversely, there is a major oil spill every single day somewhere in the world and people don’t even get fired. So oil spills just continue and continue, even though they destroy the environment and property and even whole towns.

    Apple software is like oil spills. Nobody truly cares, because nobody skips an iPhone purchase because of lousy software.

    Well, actually, I did do that. Skipped a whole iPhone after iOS 7 disappointed me more than any Windows. But I am apparently fairly alone in this. I think you have to have been a Mac OS X user since 2001 — then you have much higher software-quality expectations than Windows users.

    Also, notice tech blogs are willing to judge software-quality by a Windows standard. So why should Apple invest in software testing?

  2. yes, because any moment somebody is going to 1) break into my house, 2) hack into my mac, and 3) hack the manual itunes backup which i don’t even have anyway.

    all without me noticing.

    if any of these things happen i have bigger problems that my ios backup.

Leave a Reply

Your email address will not be published. Required fields are marked *